B kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1556.024636] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1556.070481] Node 0 DMA32 free:36264kB min:36272kB low:45340kB high:54408kB active_anon:892280kB inactive_anon:889828kB active_file:28kB inactive_file:28kB unevictable:56716kB writepending:0kB present:3129332kB managed:2621260kB mlocked:56716kB kernel_stack:9760kB pagetables:17104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1556.245529] lowmem_reserve[]: 0 0 0 0 0 [ 1556.254588] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1556.351096] lowmem_reserve[]: 0 0 0 0 0 [ 1556.355177] Node 1 Normal free:53672kB min:53612kB low:67012kB high:80412kB active_anon:25860kB inactive_anon:3541004kB active_file:36kB inactive_file:16kB unevictable:33020kB writepending:12kB present:3932160kB managed:3870192kB mlocked:33020kB kernel_stack:8480kB pagetables:27576kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 1556.572354] lowmem_reserve[]: 0 0 0 0 0 [ 1556.585594] Node 0 DMA: 12*4kB (UME) 10*8kB (UME) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1556.667182] Node 0 DMA32: 90*4kB (UME) 467*8kB (UME) 367*16kB (UME) 242*32kB (UME) 163*64kB (UME) 56*128kB (UME) 5*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36592kB [ 1556.786084] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1556.852222] Node 1 Normal: 92*4kB (UME) 1080*8kB (UME) 1217*16kB (UME) 325*32kB (UME) 60*64kB (UM) 55*128kB (UM) 14*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53856kB [ 1556.935669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1556.978106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1556.989369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1557.012169] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1557.028814] 20879 total pagecache pages [ 1557.033379] 0 pages in swap cache [ 1557.037689] Swap cache stats: add 0, delete 0, find 0/0 [ 1557.043908] Free swap = 0kB [ 1557.047443] Total swap = 0kB [ 1557.050888] 1965979 pages RAM [ 1557.054394] 0 pages HighMem/MovableOnly [ 1557.058778] 339053 pages reserved [ 1557.062505] 0 pages cma reserved [ 1557.066349] Out of memory: Kill process 24738 (syz-executor.4) score 1008 or sacrifice child 18:28:14 executing program 2: mlockall(0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') preadv(r0, 0x0, 0x0, 0x300) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x5, 0x0, 0x5a6690ad8bcd0478, 0x0, 0x35f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)) prctl$PR_SET_THP_DISABLE(0x29, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket(0x30, 0x80000, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) setreuid(0x0, r4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='cubic\x00', 0x6) mprotect(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x0) 18:28:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x490}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}]}, 0x3c}}, 0x4001) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=r5, @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:28:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0xb3, 0x7, 0x2, "2a6287ef6ecc294b5bff9816677ce990", "241e2c0f2508f99d27a5512623c96069ad64bb3e64c8ef454959737db088198bdf000f23ba883cc628b6f33ee67fff672a64cea2cfa1709052c2ee1c35663bb85377f1c4d6fc6adef725701cf1edbaa123237bdca42d9d371f1c1b482bac2f84b1bdefcf5dcc02ed8c18fd95e3063d920a684771e8dd3783c807c422249b910066e6578ba42f67a24a94d00dd8a3f05282adde1d89812360825838d0c554"}, 0xb3, 0x2) r3 = dup2(r2, r2) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x2, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, 0x24}}, 0x8000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) [ 1557.208145] ip_tables: iptables: counters copy to user failed while replacing table 18:28:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000000)={0x33, @multicast2, 0x4e23, 0x1, 'wrr\x00', 0x16, 0x375, 0x8}, 0x2c) 18:28:14 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x440000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@mpls_getroute={0x34, 0x1a, 0x200, 0x70bd2d, 0x25dfdbfe, {0x1c, 0x80, 0x14, 0xe6, 0xfe, 0x0, 0xfd, 0x0, 0x700}, [@RTA_MULTIPATH={0xc, 0x9, {0xfff, 0x3, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0x67, 0x80, r2}}]}, 0x34}}, 0x0) [ 1557.453617] ip_tables: iptables: counters copy to user failed while replacing table [ 1557.512366] ip_tables: iptables: counters copy to user failed while replacing table 18:28:15 executing program 1: mlockall(0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) open(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r1, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) mmap$perf(&(0x7f00003fa000/0x2000)=nil, 0x2000, 0x2000008, 0x2010, r0, 0x100000001) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="7d3223ff0100000008000000", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x5b, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) [ 1557.556978] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20003 [ 1557.570677] ip_tables: iptables: counters copy to user failed while replacing table [ 1557.623752] ip_tables: iptables: counters copy to user failed while replacing table [ 1557.632754] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20003 [ 1558.037481] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1558.050946] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1558.091210] CPU: 0 PID: 6328 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1558.098679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1558.108025] Call Trace: [ 1558.110614] dump_stack+0x13e/0x194 [ 1558.114240] dump_header+0x178/0x6d4 [ 1558.117950] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1558.122965] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1558.128060] ? ___ratelimit+0x50/0x519 [ 1558.131942] oom_kill_process.cold+0x10/0xae3 [ 1558.136431] ? lock_downgrade+0x6e0/0x6e0 [ 1558.140576] out_of_memory+0x2d5/0x1110 [ 1558.144549] ? oom_killer_disable+0x1c0/0x1c0 [ 1558.149037] ? mutex_trylock+0x152/0x1a0 [ 1558.153093] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1558.157948] ? warn_alloc+0xf0/0xf0 [ 1558.161579] __alloc_pages_nodemask+0x5d3/0x700 [ 1558.166241] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1558.171247] ? lock_downgrade+0x6e0/0x6e0 [ 1558.175393] alloc_pages_current+0xe7/0x1e0 [ 1558.179709] __page_cache_alloc+0x245/0x3d0 [ 1558.184043] filemap_fault+0xc18/0x1c50 [ 1558.188015] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1558.192678] ? lock_acquire+0x170/0x3f0 [ 1558.196641] ? ext4_filemap_fault+0x7c/0xb0 [ 1558.201062] ext4_filemap_fault+0x84/0xb0 [ 1558.205197] __do_fault+0xfa/0x380 [ 1558.208749] __handle_mm_fault+0x22e9/0x3280 [ 1558.213150] ? copy_page_range+0x1d70/0x1d70 [ 1558.217551] ? find_held_lock+0x2d/0x110 [ 1558.221613] handle_mm_fault+0x288/0x7a0 [ 1558.225670] __do_page_fault+0x4bc/0xb40 [ 1558.229726] ? vmalloc_fault+0xdf0/0xdf0 [ 1558.233777] ? do_page_fault+0x60/0x4f2 [ 1558.237743] ? page_fault+0x2f/0x50 [ 1558.241352] page_fault+0x45/0x50 [ 1558.244780] RIP: 0040:0x33 [ 1558.247599] RSP: 4ce97460:000000c43af549c0 EFLAGS: 00000040 [ 1558.248515] Mem-Info: [ 1558.256678] active_anon:229909 inactive_anon:1108777 isolated_anon:0 [ 1558.256678] active_file:24 inactive_file:30 isolated_file:0 [ 1558.256678] unevictable:21569 dirty:0 writeback:0 unstable:0 [ 1558.256678] slab_reclaimable:16273 slab_unreclaimable:113378 [ 1558.256678] mapped:62249 shmem:14712 pagetables:11233 bounce:0 [ 1558.256678] free:25060 free_pcp:31 free_cma:0 [ 1558.290713] Node 0 active_anon:893964kB inactive_anon:894056kB active_file:76kB inactive_file:60kB unevictable:56844kB isolated(anon):0kB isolated(file):0kB mapped:229864kB dirty:0kB writeback:0kB shmem:47856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 378880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1558.319167] Node 1 active_anon:25672kB inactive_anon:3541052kB active_file:20kB inactive_file:60kB unevictable:29432kB isolated(anon):0kB isolated(file):0kB mapped:19132kB dirty:0kB writeback:0kB shmem:10992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1558.347047] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1558.476033] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1558.481106] Node 0 DMA32 free:36212kB min:36272kB low:45340kB high:54408kB active_anon:893316kB inactive_anon:889788kB active_file:20kB inactive_file:20kB unevictable:56844kB writepending:0kB present:3129332kB managed:2621260kB mlocked:56844kB kernel_stack:9856kB pagetables:17168kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1558.628067] lowmem_reserve[]: 0 0 0 0 0 [ 1558.632091] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1558.783536] lowmem_reserve[]: 0 0 0 0 0 [ 1558.802865] Node 1 Normal free:53580kB min:53612kB low:67012kB high:80412kB active_anon:25672kB inactive_anon:3541052kB active_file:0kB inactive_file:28kB unevictable:29432kB writepending:0kB present:3932160kB managed:3870192kB mlocked:29432kB kernel_stack:8544kB pagetables:27608kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1558.984456] lowmem_reserve[]: 0 0 0 0 0 [ 1559.006101] Node 0 DMA: 12*4kB (UME) 10*8kB (UME) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1559.100808] Node 0 DMA32: 120*4kB (UME) 473*8kB (UME) 314*16kB (UME) 253*32kB (UME) 164*64kB (UME) 56*128kB (UME) 5*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36328kB [ 1559.188543] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1559.235763] Node 1 Normal: 50*4kB (UE) 1561*8kB (UME) 1243*16kB (UME) 331*32kB (UME) 61*64kB (UM) 33*128kB (UM) 7*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53600kB [ 1559.307756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1559.363111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1559.416916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1559.480734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1559.511125] 19349 total pagecache pages [ 1559.515134] 0 pages in swap cache [ 1559.562575] Swap cache stats: add 0, delete 0, find 0/0 [ 1559.598340] Free swap = 0kB [ 1559.601381] Total swap = 0kB [ 1559.604391] 1965979 pages RAM [ 1559.652269] 0 pages HighMem/MovableOnly [ 1559.665642] 339053 pages reserved [ 1559.709537] 0 pages cma reserved [ 1559.712934] Out of memory: Kill process 24748 (syz-executor.2) score 1008 or sacrifice child [ 1559.764490] Killed process 24767 (syz-executor.2) total-vm:74972kB, anon-rss:18028kB, file-rss:34816kB, shmem-rss:0kB [ 1559.854313] oom_reaper: reaped process 24767 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1559.920083] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1560.013502] in:imklog cpuset=/ mems_allowed=0-1 [ 1560.044858] CPU: 0 PID: 6036 Comm: in:imklog Not tainted 4.14.180-syzkaller #0 [ 1560.052235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1560.061578] Call Trace: [ 1560.064164] dump_stack+0x13e/0x194 [ 1560.067783] dump_header+0x178/0x6d4 [ 1560.071487] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1560.076492] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1560.081589] ? ___ratelimit+0x50/0x519 [ 1560.085470] oom_kill_process.cold+0x10/0xae3 [ 1560.089958] ? lock_downgrade+0x6e0/0x6e0 [ 1560.094102] out_of_memory+0x2d5/0x1110 [ 1560.098072] ? oom_killer_disable+0x1c0/0x1c0 [ 1560.102565] ? mutex_trylock+0x152/0x1a0 [ 1560.106618] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1560.111465] ? warn_alloc+0xf0/0xf0 [ 1560.115094] __alloc_pages_nodemask+0x5d3/0x700 [ 1560.119757] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1560.124761] ? lock_downgrade+0x6e0/0x6e0 [ 1560.128905] alloc_pages_current+0xe7/0x1e0 [ 1560.133220] __page_cache_alloc+0x245/0x3d0 [ 1560.137537] filemap_fault+0xc18/0x1c50 [ 1560.141509] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1560.146166] ? lock_acquire+0x170/0x3f0 [ 1560.150132] ? ext4_filemap_fault+0x7c/0xb0 [ 1560.154453] ext4_filemap_fault+0x84/0xb0 [ 1560.158604] __do_fault+0xfa/0x380 [ 1560.162136] __handle_mm_fault+0x22e9/0x3280 [ 1560.166534] ? copy_page_range+0x1d70/0x1d70 [ 1560.170931] ? find_held_lock+0x2d/0x110 [ 1560.174996] handle_mm_fault+0x288/0x7a0 [ 1560.179047] __do_page_fault+0x4bc/0xb40 [ 1560.183103] ? vmalloc_fault+0xdf0/0xdf0 [ 1560.187152] ? do_page_fault+0x60/0x4f2 [ 1560.191115] ? page_fault+0x2f/0x50 [ 1560.194732] page_fault+0x45/0x50 [ 1560.198171] RIP: 1fa0:0x1f9f [ 1560.201172] RSP: 4dbb6e30:00007f204dbb6da0 EFLAGS: 7f204dbb6da0 [ 1560.265734] Mem-Info: [ 1560.274474] active_anon:229906 inactive_anon:1108762 isolated_anon:0 [ 1560.274474] active_file:15 inactive_file:14 isolated_file:0 [ 1560.274474] unevictable:21719 dirty:0 writeback:0 unstable:0 [ 1560.274474] slab_reclaimable:16273 slab_unreclaimable:113341 [ 1560.274474] mapped:62332 shmem:14712 pagetables:11201 bounce:0 [ 1560.274474] free:25071 free_pcp:0 free_cma:0 [ 1560.335392] Node 0 active_anon:893952kB inactive_anon:894048kB active_file:16kB inactive_file:16kB unevictable:57392kB isolated(anon):0kB isolated(file):0kB mapped:230188kB dirty:0kB writeback:0kB shmem:47856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 378880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1560.365484] Node 1 active_anon:25672kB inactive_anon:3541000kB active_file:44kB inactive_file:40kB unevictable:29484kB isolated(anon):0kB isolated(file):136kB mapped:19140kB dirty:0kB writeback:0kB shmem:10992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1560.393582] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1560.420832] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1560.426299] Node 0 DMA32 free:39388kB min:36272kB low:45340kB high:54408kB active_anon:893304kB inactive_anon:893680kB active_file:4216kB inactive_file:16kB unevictable:45392kB writepending:0kB present:3129332kB managed:2621260kB mlocked:45472kB kernel_stack:9856kB pagetables:17076kB bounce:0kB free_pcp:644kB local_pcp:0kB free_cma:0kB [ 1560.456971] lowmem_reserve[]: 0 0 0 0 0 [ 1560.461075] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1560.487861] lowmem_reserve[]: 0 0 0 0 0 [ 1560.491967] Node 1 Normal free:68220kB min:53612kB low:67012kB high:80412kB active_anon:25672kB inactive_anon:3541000kB active_file:336kB inactive_file:312kB unevictable:13860kB writepending:0kB present:3932160kB managed:3870192kB mlocked:14024kB kernel_stack:8512kB pagetables:27572kB bounce:0kB free_pcp:776kB local_pcp:100kB free_cma:0kB [ 1560.522304] lowmem_reserve[]: 0 0 0 0 0 [ 1560.526459] Node 0 DMA: 12*4kB (UME) 10*8kB (UME) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1560.542627] Node 0 DMA32: 1543*4kB (UME) 735*8kB (UME) 331*16kB (UME) 256*32kB (UME) 164*64kB (UME) 56*128kB (UME) 5*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44484kB [ 1560.559716] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1560.575838] Node 1 Normal: 3672*4kB (UME) 2946*8kB (UME) 1264*16kB (UME) 337*32kB (UME) 62*64kB (UM) 33*128kB (UM) 7*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 79760kB [ 1560.603000] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1560.614222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1560.628632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1560.639382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1560.648246] 17675 total pagecache pages [ 1560.652438] 0 pages in swap cache [ 1560.656128] Swap cache stats: add 0, delete 0, find 0/0 [ 1560.661615] Free swap = 0kB [ 1560.664811] Total swap = 0kB [ 1560.667994] 1965979 pages RAM [ 1560.671207] 0 pages HighMem/MovableOnly [ 1560.675358] 339053 pages reserved [ 1560.679045] 0 pages cma reserved [ 1560.682533] Out of memory: Kill process 24748 (syz-executor.2) score 1008 or sacrifice child 18:28:18 executing program 2: mlockall(0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') preadv(r0, 0x0, 0x0, 0x300) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x5, 0x0, 0x5a6690ad8bcd0478, 0x0, 0x35f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)) prctl$PR_SET_THP_DISABLE(0x29, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket(0x30, 0x80000, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) setreuid(0x0, r4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='cubic\x00', 0x6) mprotect(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x0) 18:28:18 executing program 1: mlockall(0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) open(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r1, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) mmap$perf(&(0x7f00003fa000/0x2000)=nil, 0x2000, 0x2000008, 0x2010, r0, 0x100000001) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="7d3223ff0100000008000000", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x5b, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 18:28:18 executing program 0: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x8001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:28:18 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20040014) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) [ 1560.800577] ip_tables: iptables: counters copy to user failed while replacing table [ 1560.839348] ip_tables: iptables: counters copy to user failed while replacing table [ 1560.884719] ip_tables: iptables: counters copy to user failed while replacing table [ 1560.909602] ip_tables: iptables: counters copy to user failed while replacing table [ 1561.108480] syz-executor.2 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1561.133792] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1561.139876] CPU: 1 PID: 24770 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 1561.147766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1561.157117] Call Trace: [ 1561.159708] dump_stack+0x13e/0x194 [ 1561.163345] dump_header+0x178/0x6d4 [ 1561.167061] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1561.172073] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1561.177175] ? ___ratelimit+0x50/0x519 [ 1561.181064] oom_kill_process.cold+0x10/0xae3 [ 1561.185549] ? lock_downgrade+0x6e0/0x6e0 [ 1561.189695] out_of_memory+0x2d5/0x1110 [ 1561.193674] ? oom_killer_disable+0x1c0/0x1c0 [ 1561.198168] ? mutex_trylock+0x152/0x1a0 [ 1561.202257] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1561.207107] ? warn_alloc+0xf0/0xf0 [ 1561.210726] __alloc_pages_nodemask+0x5d3/0x700 [ 1561.215373] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1561.220426] ? trace_hardirqs_on+0x10/0x10 [ 1561.224640] ? save_trace+0x290/0x290 [ 1561.228430] alloc_pages_vma+0xc2/0x4a0 [ 1561.232393] __handle_mm_fault+0x17b6/0x3280 [ 1561.236787] ? copy_page_range+0x1d70/0x1d70 [ 1561.241295] ? find_held_lock+0x2d/0x110 [ 1561.245338] handle_mm_fault+0x288/0x7a0 [ 1561.249393] __get_user_pages+0x44d/0x11e0 [ 1561.253627] ? follow_page_mask+0x1580/0x1580 [ 1561.258123] ? lock_acquire+0x170/0x3f0 [ 1561.262084] ? __mm_populate+0x1e3/0x2c0 [ 1561.266131] populate_vma_page_range+0x17b/0x210 [ 1561.270883] __mm_populate+0x195/0x2c0 [ 1561.274796] ? populate_vma_page_range+0x210/0x210 [ 1561.279708] ? security_capable+0x88/0xb0 [ 1561.283844] SyS_mlockall+0x3f5/0x520 [ 1561.287634] ? SyS_munlock+0xf0/0xf0 [ 1561.291338] do_syscall_64+0x1d5/0x640 [ 1561.295214] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1561.300429] RIP: 0033:0x45ca29 [ 1561.303594] RSP: 002b:00007fc59c222c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1561.311287] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1561.318545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1561.325805] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1561.333060] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1561.340308] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fc59c2236d4 [ 1561.367571] Mem-Info: [ 1561.370029] active_anon:229923 inactive_anon:1108762 isolated_anon:0 [ 1561.370029] active_file:17 inactive_file:9 isolated_file:0 [ 1561.370029] unevictable:21930 dirty:0 writeback:0 unstable:0 [ 1561.370029] slab_reclaimable:16269 slab_unreclaimable:113345 [ 1561.370029] mapped:61160 shmem:14712 pagetables:11189 bounce:0 [ 1561.370029] free:24894 free_pcp:0 free_cma:0 [ 1561.406413] Node 0 active_anon:894788kB inactive_anon:894048kB active_file:60kB inactive_file:44kB unevictable:56652kB isolated(anon):0kB isolated(file):0kB mapped:229508kB dirty:0kB writeback:0kB shmem:47856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 378880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1561.437684] Node 1 active_anon:24904kB inactive_anon:3541000kB active_file:8kB inactive_file:0kB unevictable:31068kB isolated(anon):0kB isolated(file):0kB mapped:15132kB dirty:0kB writeback:0kB shmem:10992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1561.467870] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:36kB writepending:0kB present:15992kB managed:15908kB mlocked:36kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1561.494994] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1561.500087] Node 0 DMA32 free:36020kB min:36272kB low:45340kB high:54408kB active_anon:894140kB inactive_anon:889780kB active_file:140kB inactive_file:264kB unevictable:56228kB writepending:0kB present:3129332kB managed:2621260kB mlocked:56308kB kernel_stack:9920kB pagetables:17252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1561.529858] lowmem_reserve[]: 0 0 0 0 0 [ 1561.533861] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1561.559372] lowmem_reserve[]: 0 0 0 0 0 [ 1561.563367] Node 1 Normal free:53112kB min:53612kB low:67012kB high:80412kB active_anon:24904kB inactive_anon:3541000kB active_file:24kB inactive_file:0kB unevictable:31072kB writepending:0kB present:3932160kB managed:3870192kB mlocked:31072kB kernel_stack:8512kB pagetables:27348kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1561.592938] lowmem_reserve[]: 0 0 0 0 0 [ 1561.596992] Node 0 DMA: 11*4kB (UME) 14*8kB (UME) 7*16kB (UM) 6*32kB (U) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 1561.612956] Node 0 DMA32: 115*4kB (UME) 88*8kB (UME) 460*16kB (UME) 263*32kB (UME) 165*64kB (UME) 56*128kB (UME) 6*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36204kB [ 1561.633391] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1561.644203] Node 1 Normal: 75*4kB (UME) 1402*8kB (UME) 1274*16kB (UME) 335*32kB (UME) 64*64kB (UM) 33*128kB (UM) 7*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53244kB [ 1561.664755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1561.673650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1561.684935] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1561.703008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1561.711693] 18137 total pagecache pages [ 1561.718157] 0 pages in swap cache [ 1561.721610] Swap cache stats: add 0, delete 0, find 0/0 [ 1561.727000] Free swap = 0kB [ 1561.730005] Total swap = 0kB [ 1561.733013] 1965979 pages RAM [ 1561.738618] 0 pages HighMem/MovableOnly [ 1561.742591] 339053 pages reserved [ 1561.746081] 0 pages cma reserved [ 1561.749443] Out of memory: Kill process 24769 (syz-executor.1) score 1007 or sacrifice child [ 1561.760545] Killed process 24769 (syz-executor.1) total-vm:74964kB, anon-rss:16292kB, file-rss:39400kB, shmem-rss:0kB [ 1561.810412] oom_reaper: reaped process 24769 (syz-executor.1), now anon-rss:16760kB, file-rss:5364kB, shmem-rss:0kB [ 1561.839974] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1561.857756] systemd-journal cpuset=/ mems_allowed=0-1 [ 1561.862973] CPU: 0 PID: 3637 Comm: systemd-journal Not tainted 4.14.180-syzkaller #0 [ 1561.870837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1561.880182] Call Trace: [ 1561.882770] dump_stack+0x13e/0x194 [ 1561.886394] dump_header+0x178/0x6d4 [ 1561.890103] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1561.895117] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1561.900213] ? ___ratelimit+0x50/0x519 [ 1561.904102] oom_kill_process.cold+0x10/0xae3 [ 1561.908600] ? lock_acquire+0x170/0x3f0 [ 1561.912570] ? lock_downgrade+0x6e0/0x6e0 [ 1561.916713] out_of_memory+0x2d5/0x1110 [ 1561.920669] ? oom_killer_disable+0x1c0/0x1c0 [ 1561.925198] ? mutex_trylock+0x152/0x1a0 [ 1561.929296] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1561.934122] ? warn_alloc+0xf0/0xf0 [ 1561.937773] __alloc_pages_nodemask+0x5d3/0x700 [ 1561.942419] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1561.947414] ? lock_downgrade+0x6e0/0x6e0 [ 1561.951545] alloc_pages_current+0xe7/0x1e0 [ 1561.955848] __page_cache_alloc+0x245/0x3d0 [ 1561.960155] filemap_fault+0xc18/0x1c50 [ 1561.964125] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1561.968771] ? lock_acquire+0x170/0x3f0 [ 1561.972722] ? ext4_filemap_fault+0x7c/0xb0 [ 1561.977021] ext4_filemap_fault+0x84/0xb0 [ 1561.981144] __do_fault+0xfa/0x380 [ 1561.984660] __handle_mm_fault+0x22e9/0x3280 [ 1561.989058] ? copy_page_range+0x1d70/0x1d70 [ 1561.993454] ? find_held_lock+0x2d/0x110 [ 1561.997494] handle_mm_fault+0x288/0x7a0 [ 1562.001529] __do_page_fault+0x4bc/0xb40 [ 1562.005566] ? vmalloc_fault+0xdf0/0xdf0 [ 1562.009615] ? do_page_fault+0x60/0x4f2 [ 1562.013565] ? page_fault+0x2f/0x50 [ 1562.017165] page_fault+0x45/0x50 [ 1562.020592] RIP: 0001:0x1 [ 1562.023321] RSP: 3f2d2330:00007ffec036b1b0 EFLAGS: 7ffec036afc0 [ 1562.024821] Mem-Info: [ 1562.035483] active_anon:229896 inactive_anon:1108762 isolated_anon:0 [ 1562.035483] active_file:1037 inactive_file:115 isolated_file:0 [ 1562.035483] unevictable:17471 dirty:2 writeback:0 unstable:0 [ 1562.035483] slab_reclaimable:16269 slab_unreclaimable:113357 [ 1562.035483] mapped:60145 shmem:14712 pagetables:11169 bounce:0 [ 1562.035483] free:28135 free_pcp:185 free_cma:0 [ 1562.071485] Node 0 active_anon:894688kB inactive_anon:894048kB active_file:2340kB inactive_file:640kB unevictable:53460kB isolated(anon):0kB isolated(file):0kB mapped:227584kB dirty:28kB writeback:0kB shmem:47856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 378880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1562.101369] Node 1 active_anon:24928kB inactive_anon:3541000kB active_file:1836kB inactive_file:856kB unevictable:26956kB isolated(anon):0kB isolated(file):0kB mapped:13496kB dirty:4kB writeback:0kB shmem:10992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1562.190027] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:40kB writepending:0kB present:15992kB managed:15908kB mlocked:40kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1562.223921] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1562.241677] Node 0 DMA32 free:36000kB min:36272kB low:45340kB high:54408kB active_anon:894040kB inactive_anon:891380kB active_file:636kB inactive_file:636kB unevictable:53304kB writepending:52kB present:3129332kB managed:2621260kB mlocked:53212kB kernel_stack:9856kB pagetables:17164kB bounce:0kB free_pcp:200kB local_pcp:200kB free_cma:0kB [ 1562.273063] lowmem_reserve[]: 0 0 0 0 0 [ 1562.303583] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1562.362547] lowmem_reserve[]: 0 0 0 0 0 [ 1562.366724] Node 1 Normal free:53008kB min:53612kB low:67012kB high:80412kB active_anon:24928kB inactive_anon:3546544kB active_file:260kB inactive_file:672kB unevictable:24636kB writepending:4kB present:3932160kB managed:3870192kB mlocked:24476kB kernel_stack:8576kB pagetables:27636kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1562.396960] lowmem_reserve[]: 0 0 0 0 0 [ 1562.401075] Node 0 DMA: 10*4kB (UME) 12*8kB (UE) 6*16kB (U) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10440kB [ 1562.418374] Node 0 DMA32: 152*4kB (UME) 99*8kB (UE) 440*16kB (UME) 267*32kB (UME) 165*64kB (UME) 56*128kB (UME) 6*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36248kB [ 1562.454423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1562.478607] Node 1 Normal: 408*4kB (UME) 1444*8kB (UME) 1278*16kB (UME) 334*32kB (UME) 64*64kB (UM) 33*128kB (UM) 7*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 54944kB [ 1562.524556] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1562.534095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1562.548344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1562.561569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1562.573232] 16183 total pagecache pages [ 1562.580195] 0 pages in swap cache [ 1562.583685] Swap cache stats: add 0, delete 0, find 0/0 [ 1562.591206] Free swap = 0kB [ 1562.594674] Total swap = 0kB [ 1562.600624] 1965979 pages RAM [ 1562.604148] 0 pages HighMem/MovableOnly [ 1562.611118] 339053 pages reserved [ 1562.614986] 0 pages cma reserved [ 1562.620516] Out of memory: Kill process 24330 (syz-executor.1) score 1007 or sacrifice child [ 1562.631656] Killed process 24330 (syz-executor.1) total-vm:74972kB, anon-rss:18380kB, file-rss:34624kB, shmem-rss:0kB [ 1562.693448] oom_reaper: reaped process 24330 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1563.627534] syz-executor.4 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 1563.713709] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1563.729657] CPU: 1 PID: 24782 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 1563.737559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1563.746909] Call Trace: [ 1563.749498] dump_stack+0x13e/0x194 [ 1563.753124] dump_header+0x178/0x6d4 [ 1563.756837] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1563.761846] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1563.766940] ? ___ratelimit+0x50/0x519 [ 1563.770822] oom_kill_process.cold+0x10/0xae3 [ 1563.775312] ? lock_acquire+0x170/0x3f0 [ 1563.779279] ? lock_downgrade+0x6e0/0x6e0 [ 1563.783423] out_of_memory+0x2d5/0x1110 [ 1563.787395] ? oom_killer_disable+0x1c0/0x1c0 [ 1563.791882] ? mutex_trylock+0x152/0x1a0 [ 1563.795936] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1563.800785] ? warn_alloc+0xf0/0xf0 [ 1563.804417] __alloc_pages_nodemask+0x5d3/0x700 [ 1563.809080] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1563.814099] alloc_pages_vma+0xc2/0x4a0 [ 1563.818068] wp_page_copy+0x1f1/0x1300 [ 1563.821934] ? follow_pfn+0x200/0x200 [ 1563.825720] do_wp_page+0x244/0x11d0 [ 1563.829451] ? finish_mkwrite_fault+0x640/0x640 [ 1563.834098] __handle_mm_fault+0x1c0e/0x3280 [ 1563.838484] ? copy_page_range+0x1d70/0x1d70 [ 1563.842870] ? find_held_lock+0x2d/0x110 [ 1563.846972] handle_mm_fault+0x288/0x7a0 [ 1563.851021] __get_user_pages+0x44d/0x11e0 [ 1563.855236] ? follow_page_mask+0x1580/0x1580 [ 1563.859712] ? lock_acquire+0x170/0x3f0 [ 1563.863661] ? __mm_populate+0x1e3/0x2c0 [ 1563.867700] populate_vma_page_range+0x17b/0x210 [ 1563.872434] __mm_populate+0x195/0x2c0 [ 1563.876297] ? populate_vma_page_range+0x210/0x210 [ 1563.881206] ? security_capable+0x88/0xb0 [ 1563.885331] SyS_mlockall+0x3f5/0x520 [ 1563.889107] ? SyS_munlock+0xf0/0xf0 [ 1563.892797] do_syscall_64+0x1d5/0x640 [ 1563.896686] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1563.901849] RIP: 0033:0x45ca29 [ 1563.905015] RSP: 002b:00007f9620048c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1563.912699] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1563.919943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1563.927188] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1563.934433] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1563.941710] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f96200496d4 [ 1563.952028] Mem-Info: [ 1563.954465] active_anon:229931 inactive_anon:1111670 isolated_anon:0 [ 1563.954465] active_file:14 inactive_file:96 isolated_file:0 [ 1563.954465] unevictable:18700 dirty:0 writeback:0 unstable:0 [ 1563.954465] slab_reclaimable:16261 slab_unreclaimable:113415 [ 1563.954465] mapped:63204 shmem:14712 pagetables:11180 bounce:0 [ 1563.954465] free:25200 free_pcp:99 free_cma:0 [ 1563.989052] Node 0 active_anon:894792kB inactive_anon:898264kB active_file:208kB inactive_file:800kB unevictable:52392kB isolated(anon):0kB isolated(file):0kB mapped:232484kB dirty:0kB writeback:0kB shmem:47856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 378880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1564.018158] Node 1 active_anon:24932kB inactive_anon:3548416kB active_file:116kB inactive_file:148kB unevictable:22408kB isolated(anon):0kB isolated(file):20kB mapped:21156kB dirty:0kB writeback:0kB shmem:10992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1564.046733] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:40kB writepending:0kB present:15992kB managed:15908kB mlocked:40kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1564.076619] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1564.082144] Node 0 DMA32 free:36220kB min:36272kB low:45340kB high:54408kB active_anon:894144kB inactive_anon:893996kB active_file:236kB inactive_file:104kB unevictable:52352kB writepending:0kB present:3129332kB managed:2621260kB mlocked:52352kB kernel_stack:9792kB pagetables:16932kB bounce:0kB free_pcp:104kB local_pcp:0kB free_cma:0kB [ 1564.112627] lowmem_reserve[]: 0 0 0 0 0 [ 1564.117154] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1564.143142] lowmem_reserve[]: 0 0 0 0 0 [ 1564.149538] Node 1 Normal free:53492kB min:53612kB low:67012kB high:80412kB active_anon:24932kB inactive_anon:3548416kB active_file:504kB inactive_file:556kB unevictable:22408kB writepending:0kB present:3932160kB managed:3870192kB mlocked:22408kB kernel_stack:8544kB pagetables:27632kB bounce:0kB free_pcp:496kB local_pcp:0kB free_cma:0kB [ 1564.179624] lowmem_reserve[]: 0 0 0 0 0 [ 1564.183629] Node 0 DMA: 10*4kB (UME) 12*8kB (UE) 6*16kB (U) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10440kB [ 1564.199631] Node 0 DMA32: 126*4kB (UME) 126*8kB (UME) 394*16kB (UME) 284*32kB (UME) 167*64kB (UME) 56*128kB (UME) 6*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36296kB [ 1564.215332] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1564.226180] Node 1 Normal: 146*4kB (UME) 1445*8kB (UME) 1284*16kB (UME) 334*32kB (UME) 65*64kB (UM) 33*128kB (UM) 7*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 54064kB [ 1564.259650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1564.271896] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1564.280667] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1564.289584] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1564.302720] 20412 total pagecache pages [ 1564.310477] 0 pages in swap cache [ 1564.314863] Swap cache stats: add 0, delete 0, find 0/0 [ 1564.323682] Free swap = 0kB [ 1564.330515] Total swap = 0kB [ 1564.334098] 1965979 pages RAM [ 1564.340652] 0 pages HighMem/MovableOnly [ 1564.345581] 339053 pages reserved [ 1564.350108] 0 pages cma reserved [ 1564.354375] Out of memory: Kill process 24773 (syz-executor.4) score 1010 or sacrifice child [ 1564.369833] Killed process 24782 (syz-executor.4) total-vm:75096kB, anon-rss:18500kB, file-rss:56564kB, shmem-rss:0kB [ 1564.398736] oom_reaper: reaped process 24782 (syz-executor.4), now anon-rss:18500kB, file-rss:21740kB, shmem-rss:0kB 18:28:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) accept4$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = signalfd4(r2, &(0x7f0000000040)={[0xff]}, 0x8, 0x80800) r7 = dup2(r5, r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:28:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) accept4$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = signalfd4(r2, &(0x7f0000000040)={[0xff]}, 0x8, 0x80800) r7 = dup2(r5, r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) [ 1564.549733] ip_tables: iptables: counters copy to user failed while replacing table 18:28:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002bbd7039fedbdf25010000000800010070636900110002003000"/42], 0x30}, 0x1, 0x0, 0x0, 0xe080}, 0x24000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 1564.600515] ip_tables: iptables: counters copy to user failed while replacing table 18:28:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in=@multicast2, @in=@rand_addr=0x64010102, 0x4e21, 0x4, 0x4e24, 0x7fff, 0x2, 0xc0, 0x20, 0x3a, r6, r8}, {0x5, 0x0, 0x5799c818, 0x7fff, 0x91, 0x9, 0xffffffff, 0x6}, {0x0, 0x8000, 0x2, 0x200}, 0x8, 0x6e6bbc, 0x1}, {{@in6=@local, 0x4d3, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x3506, 0x2, 0x1, 0x44, 0xffffb2b6, 0x6, 0x7}}, 0xe8) keyctl$set_timeout(0xf, r3, 0x0) keyctl$invalidate(0x15, r3) r9 = dup2(r2, r2) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x800, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYRES64=r10, @ANYRES16=r9, @ANYRESHEX=r0, @ANYRES16=r3, @ANYRES64], 0x1) 18:28:22 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r4, @ANYBLOB="08002e000400cd4cdb065c56045ea38e5477380f8c0a0000dbd3c546efb07954146394407b92739cd0a0d128e34669efc8498d4ee2d7179ff8826b3773eb000000000000ed1bf30071095658006b4fdef18c097cbf0df7a9f91d804194601f8fff63c8d89564e6e6e44ee3d909e8d74a9d7ae7aa29de354c64f7e3b54a0d30657299f45ab9fea6cd642bdc0984"], 0x30}}, 0x0) 18:28:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000010000000000000060a5c26800282900fe800000000000000000000007000000ff020004000000000000000000000001"], 0xfca) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) connect$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x3}}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3) 18:28:22 executing program 1: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20040014) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) [ 1565.243128] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1565.275376] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1565.280525] CPU: 1 PID: 24799 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 1565.288391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1565.297729] Call Trace: [ 1565.300316] dump_stack+0x13e/0x194 [ 1565.303941] dump_header+0x178/0x6d4 [ 1565.307660] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1565.312669] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1565.317764] ? ___ratelimit+0x50/0x519 [ 1565.321649] oom_kill_process.cold+0x10/0xae3 [ 1565.326143] ? lock_downgrade+0x6e0/0x6e0 [ 1565.330287] out_of_memory+0x2d5/0x1110 [ 1565.334258] ? oom_killer_disable+0x1c0/0x1c0 [ 1565.338745] ? mutex_trylock+0x152/0x1a0 [ 1565.342800] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1565.347651] ? warn_alloc+0xf0/0xf0 [ 1565.351283] __alloc_pages_nodemask+0x5d3/0x700 [ 1565.355950] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1565.360958] ? lock_downgrade+0x6e0/0x6e0 [ 1565.365112] alloc_pages_current+0xe7/0x1e0 [ 1565.369429] __page_cache_alloc+0x245/0x3d0 [ 1565.373744] filemap_fault+0xc18/0x1c50 [ 1565.377721] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1565.382384] ? lock_acquire+0x170/0x3f0 [ 1565.386359] ? ext4_filemap_fault+0x7c/0xb0 [ 1565.390679] ext4_filemap_fault+0x84/0xb0 [ 1565.394821] __do_fault+0xfa/0x380 [ 1565.398355] __handle_mm_fault+0x22e9/0x3280 [ 1565.402760] ? copy_page_range+0x1d70/0x1d70 [ 1565.407161] ? find_held_lock+0x2d/0x110 [ 1565.411226] handle_mm_fault+0x288/0x7a0 [ 1565.415281] __get_user_pages+0x44d/0x11e0 [ 1565.419513] ? follow_page_mask+0x1580/0x1580 [ 1565.424004] ? lock_acquire+0x170/0x3f0 [ 1565.427971] ? __mm_populate+0x1e3/0x2c0 [ 1565.432032] populate_vma_page_range+0x17b/0x210 [ 1565.436786] __mm_populate+0x195/0x2c0 [ 1565.440670] ? populate_vma_page_range+0x210/0x210 [ 1565.445592] ? security_capable+0x88/0xb0 [ 1565.449737] SyS_mlockall+0x3f5/0x520 [ 1565.453527] ? SyS_munlock+0xf0/0xf0 [ 1565.457224] do_syscall_64+0x1d5/0x640 [ 1565.461104] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1565.466480] RIP: 0033:0x45ca29 [ 1565.469677] RSP: 002b:00007f9620069c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1565.477365] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1565.484657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1565.491909] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1565.499167] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1565.506452] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f962006a6d4 [ 1565.513935] Mem-Info: [ 1565.516463] active_anon:229863 inactive_anon:1108716 isolated_anon:0 [ 1565.516463] active_file:30 inactive_file:52 isolated_file:0 [ 1565.516463] unevictable:21006 dirty:27 writeback:0 unstable:0 [ 1565.516463] slab_reclaimable:16220 slab_unreclaimable:114272 [ 1565.516463] mapped:61444 shmem:14712 pagetables:11187 bounce:0 [ 1565.516463] free:24947 free_pcp:30 free_cma:0 [ 1565.550590] Node 0 active_anon:896796kB inactive_anon:893440kB active_file:60kB inactive_file:64kB unevictable:56028kB isolated(anon):0kB isolated(file):0kB mapped:227688kB dirty:100kB writeback:0kB shmem:47856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 378880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1565.579123] Node 1 active_anon:22656kB inactive_anon:3541424kB active_file:60kB inactive_file:4kB unevictable:27996kB isolated(anon):0kB isolated(file):0kB mapped:18088kB dirty:8kB writeback:0kB shmem:10992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1565.607232] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1565.634236] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1565.650578] Node 0 DMA32 free:35872kB min:36272kB low:45340kB high:54408kB active_anon:896148kB inactive_anon:889172kB active_file:32kB inactive_file:20kB unevictable:55552kB writepending:0kB present:3129332kB managed:2621260kB mlocked:55552kB kernel_stack:9760kB pagetables:16940kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1565.760993] lowmem_reserve[]: 0 0 0 0 0 [ 1565.765139] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1565.836765] lowmem_reserve[]: 0 0 0 0 0 [ 1565.840790] Node 1 Normal free:53232kB min:53612kB low:67012kB high:80412kB active_anon:22656kB inactive_anon:3541424kB active_file:48kB inactive_file:116kB unevictable:27996kB writepending:0kB present:3932160kB managed:3870192kB mlocked:27996kB kernel_stack:8672kB pagetables:27696kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1565.916193] lowmem_reserve[]: 0 0 0 0 0 [ 1565.920986] Node 0 DMA: 10*4kB (UME) 12*8kB (UE) 7*16kB (UM) 6*32kB (U) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 1565.944540] Node 0 DMA32: 314*4kB (UME) 92*8kB (UME) 332*16kB (UME) 289*32kB (UME) 167*64kB (UME) 55*128kB (UME) 7*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36072kB [ 1565.967867] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1565.984808] Node 1 Normal: 69*4kB (UME) 1702*8kB (UM) 1300*16kB (UM) 347*32kB (UM) 63*64kB (UM) 29*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53540kB [ 1566.003789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1566.012665] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1566.021339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1566.030363] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1566.038960] 18418 total pagecache pages [ 1566.042914] 0 pages in swap cache [ 1566.046390] Swap cache stats: add 0, delete 0, find 0/0 [ 1566.051734] Free swap = 0kB [ 1566.054726] Total swap = 0kB [ 1566.058741] 1965979 pages RAM [ 1566.061839] 0 pages HighMem/MovableOnly [ 1566.065847] 339053 pages reserved [ 1566.069285] 0 pages cma reserved [ 1566.072628] Out of memory: Kill process 24794 (syz-executor.4) score 1008 or sacrifice child [ 1566.083621] Killed process 24817 (syz-executor.4) total-vm:74972kB, anon-rss:18028kB, file-rss:34816kB, shmem-rss:0kB [ 1566.116015] oom_reaper: reaped process 24817 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1566.134405] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1566.178133] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1566.182926] CPU: 0 PID: 6328 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1566.190359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1566.199703] Call Trace: [ 1566.202285] dump_stack+0x13e/0x194 [ 1566.205909] dump_header+0x178/0x6d4 [ 1566.209611] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1566.214618] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1566.219714] ? ___ratelimit+0x50/0x519 [ 1566.223595] oom_kill_process.cold+0x10/0xae3 [ 1566.228085] ? lock_acquire+0x170/0x3f0 [ 1566.232049] ? lock_downgrade+0x6e0/0x6e0 [ 1566.236192] out_of_memory+0x2d5/0x1110 [ 1566.240164] ? oom_killer_disable+0x1c0/0x1c0 [ 1566.244650] ? mutex_trylock+0x152/0x1a0 [ 1566.248703] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1566.253556] ? warn_alloc+0xf0/0xf0 [ 1566.257186] __alloc_pages_nodemask+0x5d3/0x700 [ 1566.261851] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1566.266859] ? lock_downgrade+0x6e0/0x6e0 [ 1566.271009] alloc_pages_current+0xe7/0x1e0 [ 1566.275325] __page_cache_alloc+0x245/0x3d0 [ 1566.279639] filemap_fault+0xc18/0x1c50 [ 1566.283614] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1566.288277] ? lock_acquire+0x170/0x3f0 [ 1566.292245] ? ext4_filemap_fault+0x7c/0xb0 [ 1566.296563] ext4_filemap_fault+0x84/0xb0 [ 1566.300704] __do_fault+0xfa/0x380 [ 1566.304234] __handle_mm_fault+0x22e9/0x3280 [ 1566.308634] ? copy_page_range+0x1d70/0x1d70 [ 1566.313033] ? find_held_lock+0x2d/0x110 [ 1566.317098] handle_mm_fault+0x288/0x7a0 [ 1566.321152] __do_page_fault+0x4bc/0xb40 [ 1566.325204] ? vmalloc_fault+0xdf0/0xdf0 [ 1566.329339] ? do_page_fault+0x60/0x4f2 [ 1566.333303] ? page_fault+0x2f/0x50 [ 1566.336922] page_fault+0x45/0x50 [ 1566.340362] RIP: 00f1:0x11 [ 1566.343192] RSP: cb8700:000000c43cfe4818 EFLAGS: 00000000 [ 1566.357129] Mem-Info: [ 1566.365047] active_anon:229879 inactive_anon:1108716 isolated_anon:0 [ 1566.365047] active_file:12 inactive_file:14 isolated_file:0 [ 1566.365047] unevictable:21144 dirty:2 writeback:0 unstable:0 [ 1566.365047] slab_reclaimable:16220 slab_unreclaimable:114242 [ 1566.365047] mapped:61443 shmem:14712 pagetables:11177 bounce:0 [ 1566.365047] free:24978 free_pcp:91 free_cma:0 [ 1566.425284] Node 0 active_anon:896860kB inactive_anon:893440kB active_file:12kB inactive_file:40kB unevictable:56092kB isolated(anon):0kB isolated(file):0kB mapped:227644kB dirty:8kB writeback:0kB shmem:47856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 378880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1566.548692] Node 1 active_anon:22656kB inactive_anon:3541424kB active_file:36kB inactive_file:16kB unevictable:28484kB isolated(anon):0kB isolated(file):0kB mapped:18128kB dirty:0kB writeback:0kB shmem:10992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1566.586806] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1566.635157] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1566.640305] Node 0 DMA32 free:35916kB min:36272kB low:45340kB high:54408kB active_anon:896212kB inactive_anon:889172kB active_file:112kB inactive_file:0kB unevictable:56036kB writepending:8kB present:3129332kB managed:2621260kB mlocked:56036kB kernel_stack:9760kB pagetables:16932kB bounce:0kB free_pcp:204kB local_pcp:12kB free_cma:0kB [ 1566.776046] lowmem_reserve[]: 0 0 0 0 0 [ 1566.780082] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1566.897231] lowmem_reserve[]: 0 0 0 0 0 [ 1566.901267] Node 1 Normal free:53572kB min:53612kB low:67012kB high:80412kB active_anon:22656kB inactive_anon:3541424kB active_file:92kB inactive_file:0kB unevictable:28484kB writepending:0kB present:3932160kB managed:3870192kB mlocked:28484kB kernel_stack:8640kB pagetables:27620kB bounce:0kB free_pcp:160kB local_pcp:76kB free_cma:0kB [ 1567.037807] lowmem_reserve[]: 0 0 0 0 0 [ 1567.041836] Node 0 DMA: 10*4kB (UME) 12*8kB (UE) 7*16kB (UM) 6*32kB (U) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 1567.134173] Node 0 DMA32: 283*4kB (UME) 92*8kB (UME) 332*16kB (UME) 288*32kB (UME) 167*64kB (UME) 55*128kB (UME) 7*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35916kB [ 1567.217144] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1567.257633] Node 1 Normal: 69*4kB (UME) 1702*8kB (UM) 1300*16kB (UM) 349*32kB (UM) 63*64kB (UM) 29*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53604kB [ 1567.320387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1567.350352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1567.409728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1567.453786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1567.486068] 18414 total pagecache pages [ 1567.510105] 0 pages in swap cache [ 1567.536812] Swap cache stats: add 0, delete 0, find 0/0 [ 1567.566580] Free swap = 0kB [ 1567.581868] Total swap = 0kB [ 1567.593835] 1965979 pages RAM [ 1567.615900] 0 pages HighMem/MovableOnly [ 1567.637024] 339053 pages reserved [ 1567.652490] 0 pages cma reserved [ 1567.673253] Out of memory: Kill process 24794 (syz-executor.4) score 1008 or sacrifice child [ 1567.721456] Killed process 24799 (syz-executor.4) total-vm:75104kB, anon-rss:18036kB, file-rss:44332kB, shmem-rss:0kB [ 1567.820411] oom_reaper: reaped process 24799 (syz-executor.4), now anon-rss:18020kB, file-rss:10608kB, shmem-rss:0kB [ 1567.861872] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1567.923701] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1567.937959] CPU: 0 PID: 6329 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1567.945423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1567.954756] Call Trace: [ 1567.957326] dump_stack+0x13e/0x194 [ 1567.960930] dump_header+0x178/0x6d4 [ 1567.964620] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1567.969611] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1567.974691] ? ___ratelimit+0x50/0x519 [ 1567.978557] oom_kill_process.cold+0x10/0xae3 [ 1567.983038] ? lock_acquire+0x170/0x3f0 [ 1567.986988] ? lock_downgrade+0x6e0/0x6e0 [ 1567.991123] out_of_memory+0x2d5/0x1110 [ 1567.995076] ? oom_killer_disable+0x1c0/0x1c0 [ 1567.999557] ? mutex_trylock+0x152/0x1a0 [ 1568.003592] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1568.008418] ? warn_alloc+0xf0/0xf0 [ 1568.012026] __alloc_pages_nodemask+0x5d3/0x700 [ 1568.016932] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1568.021923] ? lock_downgrade+0x6e0/0x6e0 [ 1568.026051] alloc_pages_current+0xe7/0x1e0 [ 1568.030351] __page_cache_alloc+0x245/0x3d0 [ 1568.034649] filemap_fault+0xc18/0x1c50 [ 1568.038602] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1568.043248] ? lock_acquire+0x170/0x3f0 [ 1568.047198] ? ext4_filemap_fault+0x7c/0xb0 [ 1568.051498] ext4_filemap_fault+0x84/0xb0 [ 1568.055622] __do_fault+0xfa/0x380 [ 1568.059137] __handle_mm_fault+0x22e9/0x3280 [ 1568.063523] ? copy_page_range+0x1d70/0x1d70 [ 1568.067906] ? find_held_lock+0x2d/0x110 18:28:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x14201, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, r5, 0x1707, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r5, 0x412, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfad}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44004}, 0x20038805) [ 1568.071949] handle_mm_fault+0x288/0x7a0 [ 1568.075988] __do_page_fault+0x4bc/0xb40 [ 1568.080025] ? vmalloc_fault+0xdf0/0xdf0 [ 1568.084062] ? do_page_fault+0x60/0x4f2 [ 1568.088009] ? page_fault+0x2f/0x50 [ 1568.091624] page_fault+0x45/0x50 [ 1568.095052] RIP: 00f1:0x11 18:28:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000001140)='\'', 0x1}], 0x1, 0x1081804) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x5, 0x2, 0x1c, "0e0e0d89bf1173dc1606375d14638fb21b49d26972d96ef0b4000000009200009896747dccb30e7f63a1b51ec0742298ae00", "1d0e47f158fae68f4d2aa224439c30eb3b3e478dfc2c000000000100c00c008bd2cfa188d8954a0ede9661149d95659eff1ce0212f115951f98f73633500", "3edea3fa98ed88e7de49fc2596c78e888e955cdca02efa85c8116766d8f71310", [0x0, 0xfffffffffffffffd]}) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xce, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r4, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r9, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b139588c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca2d430aeff83dd7770e5485b3580e6c37cdf78ebabc56f554ff"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x14080}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r4, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) [ 1568.097883] RSP: 000a:000000c42004ff20 EFLAGS: 0042f0a0 [ 1568.194194] ip_tables: iptables: counters copy to user failed while replacing table [ 1568.253099] ip_tables: iptables: counters copy to user failed while replacing table [ 1568.255719] device bridge4 entered promiscuous mode [ 1568.515309] Mem-Info: [ 1568.517738] active_anon:229847 inactive_anon:1108721 isolated_anon:0 [ 1568.517738] active_file:639 inactive_file:643 isolated_file:0 [ 1568.517738] unevictable:8734 dirty:27 writeback:0 unstable:0 [ 1568.517738] slab_reclaimable:16218 slab_unreclaimable:115186 [ 1568.517738] mapped:58766 shmem:14712 pagetables:11177 bounce:0 [ 1568.517738] free:34941 free_pcp:636 free_cma:0 [ 1568.552428] Node 0 active_anon:898056kB inactive_anon:893464kB active_file:2152kB inactive_file:2228kB unevictable:34844kB isolated(anon):0kB isolated(file):128kB mapped:226576kB dirty:108kB writeback:0kB shmem:47856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 378880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1568.581647] Node 1 active_anon:21332kB inactive_anon:3541420kB active_file:212kB inactive_file:168kB unevictable:92kB isolated(anon):0kB isolated(file):0kB mapped:8488kB dirty:0kB writeback:0kB shmem:10992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1568.635749] Node 0 DMA free:10480kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1568.685113] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1568.690187] Node 0 DMA32 free:46292kB min:36272kB low:45340kB high:54408kB active_anon:897720kB inactive_anon:889316kB active_file:1432kB inactive_file:1632kB unevictable:35280kB writepending:8kB present:3129332kB managed:2621260kB mlocked:35164kB kernel_stack:9760kB pagetables:16932kB bounce:0kB free_pcp:736kB local_pcp:104kB free_cma:0kB [ 1568.740517] lowmem_reserve[]: 0 0 0 0 0 [ 1568.755148] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1568.800828] lowmem_reserve[]: 0 0 0 0 0 [ 1568.805118] Node 1 Normal free:85304kB min:53612kB low:67012kB high:80412kB active_anon:20480kB inactive_anon:3541560kB active_file:464kB inactive_file:324kB unevictable:284kB writepending:0kB present:3932160kB managed:3870192kB mlocked:500kB kernel_stack:8448kB pagetables:27620kB bounce:0kB free_pcp:1416kB local_pcp:720kB free_cma:0kB [ 1568.836381] lowmem_reserve[]: 0 0 0 0 0 [ 1568.841313] Node 0 DMA: 12*4kB (UME) 14*8kB (UME) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10480kB [ 1568.858217] Node 0 DMA32: 2184*4kB (UME) 700*8kB (ME) 312*16kB (UME) 203*32kB (UME) 167*64kB (UME) 55*128kB (UME) 7*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45344kB [ 1568.874061] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1568.888265] Node 1 Normal: 4798*4kB (UME) 3035*8kB (UM) 1386*16kB (UM) 358*32kB (UM) 63*64kB (M) 32*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 85488kB [ 1568.904636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1568.915701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1568.924366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1568.938277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1568.953524] 15465 total pagecache pages [ 1568.959321] 0 pages in swap cache [ 1568.962778] Swap cache stats: add 0, delete 0, find 0/0 [ 1568.974906] Free swap = 0kB [ 1568.977969] Total swap = 0kB [ 1568.981961] 1965979 pages RAM [ 1568.991434] 0 pages HighMem/MovableOnly [ 1568.996463] 339053 pages reserved [ 1569.001303] 0 pages cma reserved [ 1569.010828] Out of memory: Kill process 24803 (syz-executor.1) score 1007 or sacrifice child 18:28:28 executing program 1: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20040014) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) 18:28:28 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x10000, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000100)) sendto$rose(r0, &(0x7f0000000080)="c83e4ae7", 0x4, 0x55, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x6, [@bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000000)) 18:28:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x40080, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x80000) ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000100)) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0xffffffffffffff8d, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x8301, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0x9000aea4, &(0x7f0000000440)=ANY=[]) [ 1571.450010] ip_tables: iptables: counters copy to user failed while replacing table [ 1571.485535] ip_tables: iptables: counters copy to user failed while replacing table 18:28:29 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @broadcast}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) 18:28:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x800, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="81c30434", @ANYRES16, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x60040004}, 0x40000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000fbdbdf2503000000050003005a0000000500050081000000111b8aa9050002000500000005000300010000000500050002000000050003001f0000000500020081000000050003000100000005000500"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x10) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x5, 0x803, 0x0) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r6, 0x0) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r7) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSBRK(r8, 0x5409, 0x1) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c02d118ed789282770000000400000000000000", @ANYRES32=r4, @ANYBLOB="03000000000000002800128008000100736974001c00028008000100", @ANYRES32=0x0, @ANYBLOB="08000300ac1414aa06000f0001000000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 1571.528276] ip_tables: iptables: counters copy to user failed while replacing table [ 1571.555356] ip_tables: iptables: counters copy to user failed while replacing table [ 1571.988414] kworker/u4:4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1572.001459] kworker/u4:4 cpuset=/ mems_allowed=0-1 [ 1572.055044] CPU: 1 PID: 23569 Comm: kworker/u4:4 Not tainted 4.14.180-syzkaller #0 [ 1572.062779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1572.072138] Workqueue: events_unbound call_usermodehelper_exec_work [ 1572.078536] Call Trace: [ 1572.081124] dump_stack+0x13e/0x194 [ 1572.084747] dump_header+0x178/0x6d4 [ 1572.088455] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1572.093464] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1572.098584] ? ___ratelimit+0x50/0x519 [ 1572.102469] oom_kill_process.cold+0x10/0xae3 [ 1572.106960] ? lock_acquire+0x170/0x3f0 [ 1572.110923] ? lock_downgrade+0x6e0/0x6e0 [ 1572.115069] out_of_memory+0x2d5/0x1110 [ 1572.119040] ? oom_killer_disable+0x1c0/0x1c0 [ 1572.123527] ? mutex_trylock+0x152/0x1a0 [ 1572.127583] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1572.132435] ? warn_alloc+0xf0/0xf0 [ 1572.136066] __alloc_pages_nodemask+0x5d3/0x700 [ 1572.140726] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1572.145732] ? copy_process.part.0+0x17d5/0x6a50 [ 1572.150480] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1572.155499] copy_process.part.0+0x26a/0x6a50 [ 1572.159987] ? __lock_acquire+0x5f7/0x4620 [ 1572.164213] ? save_trace+0x290/0x290 [ 1572.168009] ? find_held_lock+0x2d/0x110 [ 1572.172062] ? check_noncircular+0x20/0x20 [ 1572.176286] ? trace_hardirqs_on+0x10/0x10 [ 1572.180514] ? umh_complete+0x80/0x80 [ 1572.184305] ? __cleanup_sighand+0x40/0x40 [ 1572.188531] ? save_trace+0x290/0x290 [ 1572.192323] ? find_held_lock+0x2d/0x110 [ 1572.196376] ? umh_complete+0x80/0x80 [ 1572.200169] _do_fork+0x180/0xc80 [ 1572.203616] ? lock_downgrade+0x6e0/0x6e0 [ 1572.207754] ? fork_idle+0x270/0x270 [ 1572.211461] ? save_trace+0x290/0x290 [ 1572.215253] ? process_one_work+0x73f/0x1540 [ 1572.219650] ? umh_complete+0x80/0x80 [ 1572.223443] kernel_thread+0x2f/0x40 [ 1572.227147] call_usermodehelper_exec_work+0x193/0x210 [ 1572.232416] ? call_usermodehelper_exec_async+0x4c0/0x4c0 [ 1572.237943] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1572.243387] process_one_work+0x813/0x1540 [ 1572.247620] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 1572.252278] ? worker_thread+0x15d/0x1070 [ 1572.256415] ? _raw_spin_unlock_irq+0x24/0x80 [ 1572.260904] worker_thread+0x5d1/0x1070 [ 1572.264880] ? process_one_work+0x1540/0x1540 [ 1572.269366] kthread+0x30d/0x420 [ 1572.272726] ? kthread_create_on_node+0xd0/0xd0 [ 1572.277388] ret_from_fork+0x24/0x30 [ 1572.389559] Mem-Info: [ 1572.392113] active_anon:229990 inactive_anon:1108712 isolated_anon:0 [ 1572.392113] active_file:34 inactive_file:16 isolated_file:0 [ 1572.392113] unevictable:20149 dirty:0 writeback:0 unstable:0 [ 1572.392113] slab_reclaimable:16121 slab_unreclaimable:114958 [ 1572.392113] mapped:61516 shmem:14712 pagetables:11255 bounce:0 [ 1572.392113] free:25010 free_pcp:0 free_cma:0 [ 1572.454941] Node 0 active_anon:899628kB inactive_anon:893444kB active_file:112kB inactive_file:28kB unevictable:45704kB isolated(anon):0kB isolated(file):0kB mapped:228364kB dirty:0kB writeback:0kB shmem:47852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 378880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1572.687872] Node 1 active_anon:20332kB inactive_anon:3541404kB active_file:24kB inactive_file:36kB unevictable:34892kB isolated(anon):0kB isolated(file):0kB mapped:17700kB dirty:0kB writeback:0kB shmem:10996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1572.913214] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1572.998282] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1573.003416] Node 0 DMA32 free:36272kB min:36272kB low:45340kB high:54408kB active_anon:898980kB inactive_anon:889176kB active_file:60kB inactive_file:0kB unevictable:45804kB writepending:0kB present:3129332kB managed:2621260kB mlocked:45804kB kernel_stack:9792kB pagetables:16908kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.042156] lowmem_reserve[]: 0 0 0 0 0 [ 1573.046252] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.076711] lowmem_reserve[]: 0 0 0 0 0 [ 1573.080720] Node 1 Normal free:53136kB min:53612kB low:67012kB high:80412kB active_anon:20332kB inactive_anon:3541404kB active_file:0kB inactive_file:0kB unevictable:35268kB writepending:0kB present:3932160kB managed:3870192kB mlocked:35272kB kernel_stack:8704kB pagetables:27956kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.115081] lowmem_reserve[]: 0 0 0 0 0 [ 1573.119087] Node 0 DMA: 12*4kB (UME) 8*8kB (UME) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1573.139745] Node 0 DMA32: 263*4kB (UME) 713*8kB (UME) 465*16kB (UME) 209*32kB (UME) 167*64kB (UME) 21*128kB (UME) 7*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36052kB [ 1573.160099] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1573.170887] Node 1 Normal: 26*4kB (UME) 1230*8kB (UM) 1439*16kB (UM) 384*32kB (UM) 64*64kB (UM) 32*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53448kB [ 1573.188064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1573.196933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1573.207919] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1573.216940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1573.227988] 18583 total pagecache pages [ 1573.232042] 0 pages in swap cache [ 1573.235533] Swap cache stats: add 0, delete 0, find 0/0 [ 1573.240879] Free swap = 0kB [ 1573.243873] Total swap = 0kB [ 1573.249308] 1965979 pages RAM [ 1573.252404] 0 pages HighMem/MovableOnly [ 1573.256414] 339053 pages reserved [ 1573.259850] 0 pages cma reserved [ 1573.263206] Out of memory: Kill process 24827 (syz-executor.1) score 1008 or sacrifice child [ 1573.274969] Killed process 24848 (syz-executor.1) total-vm:74972kB, anon-rss:18032kB, file-rss:34816kB, shmem-rss:0kB [ 1573.344360] oom_reaper: reaped process 24848 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1573.359334] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1573.380011] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1573.385236] CPU: 1 PID: 24841 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 1573.393110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1573.402448] Call Trace: [ 1573.405017] dump_stack+0x13e/0x194 [ 1573.408625] dump_header+0x178/0x6d4 [ 1573.412315] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1573.417311] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1573.422445] ? ___ratelimit+0x50/0x519 [ 1573.426310] oom_kill_process.cold+0x10/0xae3 [ 1573.430783] ? lock_acquire+0x170/0x3f0 [ 1573.434783] ? lock_downgrade+0x6e0/0x6e0 [ 1573.438914] out_of_memory+0x2d5/0x1110 [ 1573.442868] ? oom_killer_disable+0x1c0/0x1c0 [ 1573.447338] ? mutex_trylock+0x152/0x1a0 [ 1573.451376] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1573.456213] ? warn_alloc+0xf0/0xf0 [ 1573.459824] __alloc_pages_nodemask+0x5d3/0x700 [ 1573.464468] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1573.469459] ? find_held_lock+0x2d/0x110 [ 1573.473505] alloc_pages_vma+0xc2/0x4a0 [ 1573.477458] __handle_mm_fault+0x17b6/0x3280 [ 1573.481844] ? copy_page_range+0x1d70/0x1d70 [ 1573.486231] ? find_held_lock+0x2d/0x110 [ 1573.490274] handle_mm_fault+0x288/0x7a0 [ 1573.494313] __get_user_pages+0x44d/0x11e0 [ 1573.498530] ? follow_page_mask+0x1580/0x1580 [ 1573.503005] ? lock_acquire+0x170/0x3f0 [ 1573.506999] ? __mm_populate+0x1e3/0x2c0 [ 1573.511042] populate_vma_page_range+0x17b/0x210 [ 1573.515816] __mm_populate+0x195/0x2c0 [ 1573.519691] ? populate_vma_page_range+0x210/0x210 [ 1573.524601] ? security_capable+0x88/0xb0 [ 1573.528726] SyS_mlockall+0x3f5/0x520 [ 1573.532503] ? SyS_munlock+0xf0/0xf0 [ 1573.536203] do_syscall_64+0x1d5/0x640 [ 1573.540073] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1573.545239] RIP: 0033:0x45ca29 [ 1573.548405] RSP: 002b:00007f9620069c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1573.556094] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1573.563372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1573.570616] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1573.577860] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1573.585107] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f962006a6d4 [ 1573.595154] Mem-Info: [ 1573.595175] active_anon:229986 inactive_anon:1108697 isolated_anon:0 [ 1573.595175] active_file:19 inactive_file:15 isolated_file:0 [ 1573.595175] unevictable:20442 dirty:0 writeback:0 unstable:0 [ 1573.595175] slab_reclaimable:16108 slab_unreclaimable:114887 [ 1573.595175] mapped:61612 shmem:14712 pagetables:11223 bounce:0 [ 1573.595175] free:24960 free_pcp:89 free_cma:0 [ 1573.595192] Node 0 active_anon:899620kB inactive_anon:893428kB active_file:52kB inactive_file:32kB unevictable:46332kB isolated(anon):0kB isolated(file):0kB mapped:228488kB dirty:0kB writeback:0kB shmem:47852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 378880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1573.595207] Node 1 active_anon:20324kB inactive_anon:3541360kB active_file:24kB inactive_file:28kB unevictable:35436kB isolated(anon):0kB isolated(file):0kB mapped:17960kB dirty:0kB writeback:0kB shmem:10996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1573.595211] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.595232] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1573.734315] Node 0 DMA32 free:35928kB min:36272kB low:45340kB high:54408kB active_anon:898972kB inactive_anon:889160kB active_file:32kB inactive_file:52kB unevictable:46332kB writepending:0kB present:3129332kB managed:2621260kB mlocked:46332kB kernel_stack:9792kB pagetables:16908kB bounce:0kB free_pcp:156kB local_pcp:24kB free_cma:0kB [ 1573.776157] lowmem_reserve[]: 0 0 0 0 0 [ 1573.780292] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.810692] lowmem_reserve[]: 0 0 0 0 0 [ 1573.824615] Node 1 Normal free:53512kB min:53612kB low:67012kB high:80412kB active_anon:20324kB inactive_anon:3541360kB active_file:60kB inactive_file:0kB unevictable:35436kB writepending:0kB present:3932160kB managed:3870192kB mlocked:35436kB kernel_stack:8672kB pagetables:27828kB bounce:0kB free_pcp:200kB local_pcp:148kB free_cma:0kB [ 1573.872019] lowmem_reserve[]: 0 0 0 0 0 [ 1573.890158] Node 0 DMA: 12*4kB (UME) 8*8kB (UME) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1573.920813] Node 0 DMA32: 232*4kB (UME) 713*8kB (UME) 465*16kB (UME) 209*32kB (UME) 167*64kB (UME) 21*128kB (UME) 7*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35928kB [ 1573.950995] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1573.983352] Node 1 Normal: 26*4kB (UME) 1230*8kB (UM) 1439*16kB (UM) 386*32kB (UM) 64*64kB (UM) 32*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53512kB [ 1574.020136] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1574.043467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1574.066296] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1574.077603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1574.093426] 18566 total pagecache pages [ 1574.099861] 0 pages in swap cache [ 1574.103312] Swap cache stats: add 0, delete 0, find 0/0 [ 1574.118229] Free swap = 0kB [ 1574.121252] Total swap = 0kB [ 1574.124262] 1965979 pages RAM [ 1574.132075] 0 pages HighMem/MovableOnly [ 1574.141541] 339053 pages reserved [ 1574.149713] 0 pages cma reserved [ 1574.153079] Out of memory: Kill process 24827 (syz-executor.1) score 1008 or sacrifice child [ 1574.171356] Killed process 24827 (syz-executor.1) total-vm:74972kB, anon-rss:18012kB, file-rss:41984kB, shmem-rss:0kB [ 1574.213943] kworker/u4:4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1574.250078] kworker/u4:4 cpuset=/ mems_allowed=0-1 [ 1574.264481] CPU: 1 PID: 23569 Comm: kworker/u4:4 Not tainted 4.14.180-syzkaller #0 [ 1574.272305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1574.281663] Workqueue: events_unbound call_usermodehelper_exec_work [ 1574.288059] Call Trace: [ 1574.290643] dump_stack+0x13e/0x194 [ 1574.294264] dump_header+0x178/0x6d4 [ 1574.297971] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1574.302980] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1574.308077] ? ___ratelimit+0x50/0x519 [ 1574.311953] oom_kill_process.cold+0x10/0xae3 [ 1574.316427] ? lock_downgrade+0x6e0/0x6e0 [ 1574.320550] out_of_memory+0x2d5/0x1110 [ 1574.324498] ? oom_killer_disable+0x1c0/0x1c0 [ 1574.329012] ? mutex_trylock+0x152/0x1a0 [ 1574.333048] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1574.337871] ? warn_alloc+0xf0/0xf0 [ 1574.341477] __alloc_pages_nodemask+0x5d3/0x700 [ 1574.346127] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1574.351126] ? copy_process.part.0+0x17d5/0x6a50 [ 1574.355867] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1574.360862] copy_process.part.0+0x26a/0x6a50 [ 1574.365332] ? __lock_acquire+0x5f7/0x4620 [ 1574.369575] ? save_trace+0x290/0x290 [ 1574.373349] ? find_held_lock+0x2d/0x110 [ 1574.377385] ? check_noncircular+0x20/0x20 [ 1574.381620] ? trace_hardirqs_on+0x10/0x10 [ 1574.385830] ? umh_complete+0x80/0x80 [ 1574.389631] ? __cleanup_sighand+0x40/0x40 [ 1574.393835] ? save_trace+0x290/0x290 [ 1574.397611] ? find_held_lock+0x2d/0x110 [ 1574.401642] ? umh_complete+0x80/0x80 [ 1574.405417] _do_fork+0x180/0xc80 [ 1574.408842] ? lock_downgrade+0x6e0/0x6e0 [ 1574.412959] ? fork_idle+0x270/0x270 [ 1574.416646] ? save_trace+0x290/0x290 [ 1574.420419] ? process_one_work+0x73f/0x1540 [ 1574.424799] ? umh_complete+0x80/0x80 [ 1574.428570] kernel_thread+0x2f/0x40 [ 1574.432257] call_usermodehelper_exec_work+0x193/0x210 [ 1574.437521] ? call_usermodehelper_exec_async+0x4c0/0x4c0 [ 1574.443031] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1574.448455] process_one_work+0x813/0x1540 [ 1574.452678] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 1574.457331] ? worker_thread+0x15d/0x1070 [ 1574.461453] ? _raw_spin_unlock_irq+0x24/0x80 [ 1574.465921] worker_thread+0x5d1/0x1070 [ 1574.469872] ? process_one_work+0x1540/0x1540 [ 1574.474339] kthread+0x30d/0x420 [ 1574.477678] ? kthread_create_on_node+0xd0/0xd0 [ 1574.482320] ret_from_fork+0x24/0x30 [ 1574.487822] Mem-Info: [ 1574.490506] active_anon:229982 inactive_anon:1108697 isolated_anon:0 [ 1574.490506] active_file:2524 inactive_file:91 isolated_file:0 [ 1574.490506] unevictable:13462 dirty:0 writeback:0 unstable:0 [ 1574.490506] slab_reclaimable:16106 slab_unreclaimable:114891 [ 1574.490506] mapped:59151 shmem:14712 pagetables:11187 bounce:0 [ 1574.490506] free:29142 free_pcp:268 free_cma:0 [ 1574.525378] Node 0 active_anon:899612kB inactive_anon:893428kB active_file:2408kB inactive_file:100kB unevictable:43528kB isolated(anon):0kB isolated(file):0kB mapped:226232kB dirty:0kB writeback:0kB shmem:47852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 378880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1574.555945] Node 1 active_anon:20316kB inactive_anon:3541360kB active_file:7788kB inactive_file:4464kB unevictable:13620kB isolated(anon):0kB isolated(file):0kB mapped:13472kB dirty:0kB writeback:0kB shmem:10996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1574.591923] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1574.627624] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1574.633406] Node 0 DMA32 free:36748kB min:36272kB low:45340kB high:54408kB active_anon:898964kB inactive_anon:889160kB active_file:2708kB inactive_file:200kB unevictable:43228kB writepending:0kB present:3129332kB managed:2621260kB mlocked:43280kB kernel_stack:9760kB pagetables:16800kB bounce:0kB free_pcp:340kB local_pcp:112kB free_cma:0kB [ 1574.707346] lowmem_reserve[]: 0 0 0 0 0 [ 1574.711867] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1574.742297] lowmem_reserve[]: 0 0 0 0 0 [ 1574.768891] Node 1 Normal free:55420kB min:53612kB low:67012kB high:80412kB active_anon:20316kB inactive_anon:3552760kB active_file:12308kB inactive_file:8344kB unevictable:20kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8480kB pagetables:27644kB bounce:0kB free_pcp:776kB local_pcp:676kB free_cma:0kB 18:28:32 executing program 1: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20040014) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) 18:28:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "aa25e9"}, 0x7) [ 1574.898772] lowmem_reserve[]: 0 0 0 0 0 [ 1574.902799] Node 0 DMA: 12*4kB (UME) 8*8kB (UME) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1574.952908] Node 0 DMA32: 2100*4kB (UME) 689*8kB (UME) 526*16kB (UME) 212*32kB (UME) 167*64kB (UME) 22*128kB (UME) 7*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44408kB [ 1574.985968] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1575.019057] Node 1 Normal: 3400*4kB (UME) 2851*8kB (UM) 1349*16kB (UM) 452*32kB (UM) 69*64kB (UM) 33*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 81096kB [ 1575.062037] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1575.071914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1575.086984] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1575.100827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1575.148054] 16385 total pagecache pages [ 1575.186115] 0 pages in swap cache [ 1575.189602] Swap cache stats: add 0, delete 0, find 0/0 [ 1575.223047] Free swap = 0kB 18:28:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) recvfrom$l2tp(r6, &(0x7f0000000300)=""/217, 0xd9, 0x0, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 1575.245435] Total swap = 0kB [ 1575.249026] 1965979 pages RAM [ 1575.268745] 0 pages HighMem/MovableOnly [ 1575.272743] 339053 pages reserved [ 1575.286764] 0 pages cma reserved [ 1575.300344] Out of memory: Kill process 11067 (syz-executor.3) score 1007 or sacrifice child [ 1575.311116] Killed process 11067 (syz-executor.3) total-vm:74972kB, anon-rss:18260kB, file-rss:34624kB, shmem-rss:0kB [ 1575.366264] oom_reaper: reaped process 11067 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 18:28:32 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffe90, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffe, 0x0, {}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x100}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) munlock(&(0x7f0000679000/0x2000)=nil, 0x2000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="81000000000000a7680f8fb4", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r3, @ANYBLOB="08002e0004000000"], 0x30}}, 0x0) 18:28:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x800, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="81c30434", @ANYRES16, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x60040004}, 0x40000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000fbdbdf2503000000050003005a0000000500050081000000111b8aa9050002000500000005000300010000000500050002000000050003001f0000000500020081000000050003000100000005000500"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x10) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x5, 0x803, 0x0) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r6, 0x0) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r7) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSBRK(r8, 0x5409, 0x1) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c02d118ed789282770000000400000000000000", @ANYRES32=r4, @ANYBLOB="03000000000000002800128008000100736974001c00028008000100", @ANYRES32=0x0, @ANYBLOB="08000300ac1414aa06000f0001000000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:28:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4004003}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9023}, [@IFLA_LINK={0x8, 0x5, r5}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:28:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71d10000000000000000000000000010", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)='H', 0xfec3}], 0x1, 0x0, 0x0, 0x4001}, 0x80) io_setup(0xfff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) 18:28:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f0000000340)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="481000001000390400"/20, @ANYRES32=r4, @ANYBLOB="03000000000000002800128008000100736974001c00028008000100", @ANYRES32=0x0, @ANYBLOB="08000300ac1414aa06000f0001000000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b387", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:28:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000900300000200000000000000f000000000000000f0000000c0020000c0020000c0020000c0020000c0020000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f00000000000000000000000000000000000000000000000000048005445450000b7000000000000000000000000000000000000000000000001ff01000000000000000000000000050069703665727370616e3000000000000000000000000000ec0a020000000000000000000000000001fe8000000000000000000000000000aa00000000e5ffffffffffffff0000000000000000400000000000000000000000000000000000000000000000000000006272696467655f736c6176655f3100000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000004da3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000100000000000000f4ff00000000000000000000000000000030006d61726b00000000000a0000000000000000000000000000000000000001000c000000000000000000005de05d89280041554449540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x800000000000164, 0x0) 18:28:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71d10000000000000000000000000010", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)='H', 0xfec3}], 0x1, 0x0, 0x0, 0x4001}, 0x80) io_setup(0xfff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) 18:28:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ff"], 0x40}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r11, @ANYBLOB="1400020000000000000000000000ff"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb4, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x40010) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000010000000000000060a5c26800282900fe800000000000000000000007000000ff020000000000000000000000000001"], 0xfca) [ 1576.934818] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1577.022110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 18:28:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71d10000000000000000000000000010", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)='H', 0xfec3}], 0x1, 0x0, 0x0, 0x4001}, 0x80) io_setup(0xfff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) [ 1577.076720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1577.102703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24906 comm=syz-executor.3 18:28:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0x40044145, &(0x7f00000002c0)=0xd2d) r4 = dup2(r0, r0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000023c0)=0xc) setreuid(0x0, r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) syz_mount_image$reiserfs(&(0x7f0000001300)='reiserfs\x00', &(0x7f0000001340)='./file0\x00', 0x2, 0x1, &(0x7f0000002380)=[{&(0x7f0000001380)="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", 0x1000, 0x9}], 0x1001000, &(0x7f0000002500)={[{@balloc_noborder='block-allocator=noborder'}, {@tails_off='tails=off'}, {@noacl='noacl'}, {@conv='conv'}, {@grpjquota='grpjquota'}, {@balloc_no_unhash_reloc='block-allocator=no_unhashed_relocation'}], [{@uid_gt={'uid>'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@permit_directio='permit_directio'}, {@fowner_lt={'fowner<', r7}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f0000000000000055000000000000200054524143450000000000190000001b00000000000000000000000000000000000000187a35d7e1e40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c000000000000000000000000000000000000000000000000000000030000000000000020005452414345000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca380000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff000000"], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) read$usbmon(r4, &(0x7f0000000300)=""/4096, 0x1000) [ 1577.427796] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1577.452415] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1577.578673] syz-executor.1 (24899) used greatest stack depth: 22288 bytes left [ 1577.823615] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1577.832435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24906 comm=syz-executor.3 [ 1577.832459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24907 comm=syz-executor.3 18:28:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, r4, 0x1707, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000010000000000000060a5c26800282900fe800000000000220000000007000000ff020000000000000a00000000000001"], 0xfca) 18:28:35 executing program 1: eventfd(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000000c0)="0f20e06635000004000f22e06766c7442400007000006766c7442402050000006766c744240600000000670f0114240f01c8e38336f08301dc660f38816bad0f01d566b9ae0b000066b80000000066ba000000800f30d9ed260f01c9", 0x5c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000140)={0x3, 0xfff}) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000)) 18:28:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c0000000000000000000000000000000000000000000000000000000300000000000000200054524143450000000000000000000000000000ad9a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x402000, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 18:28:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0xfffffffffffffdba) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bind$can_raw(r4, &(0x7f0000000300), 0x10) r5 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000540)={0x0, 0x9, 0x4, 0x1000000, 0x9, {0x77359400}, {0x4, 0x0, 0x1f, 0xfb, 0x3e, 0xf8, 'q \x00'}, 0x1, 0x2, @offset=0x1, 0x7, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000440)={0x1, 'vlan1\x00', {}, 0x1000}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000020c0)=@newlink={0x78, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x4c, 0x2, 0x0, 0x1, {{0x8}, {0x8, 0x2, r8}, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3ff}, @IFLA_GTP_FD1={0x8}, @IFLA_GTP_FD0={0x8}, @IFLA_GTP_FD1={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x4}, @IFLA_GTP_ROLE={0x8}, @IFLA_GTP_ROLE={0x8}]}}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4a0000001000010800000000216b5aa880000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8018000a8014000700fe4baf68bc01933e9a34aac175109431cb580005492aa3edbdadf39cd9ed7e5de461c938a8f55c7b35ecc472de4c7c9bdc30cb95afd2fe5d1d75d3c94bfe78d2f72e64823ea0f2ce87e0385828453a9a1417b10457a4d3634648d93379e4681a71e412fda92b9dba171e1949a0e762f21ff2cd"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:28:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLINK(r1, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000003c0)=""/216) 18:28:35 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0800f300"/18, @ANYRES32=r2, @ANYBLOB="08002c00020000000800310000000100"], 0x2c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x846) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="30a28484d7bc1db516c247b90552c52f00001000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) [ 1578.491374] ip_tables: iptables: counters copy to user failed while replacing table [ 1578.548414] ip_tables: iptables: counters copy to user failed while replacing table [ 1578.848226] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1578.971043] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1578.976281] CPU: 0 PID: 3646 Comm: systemd-udevd Not tainted 4.14.180-syzkaller #0 [ 1578.983992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1578.993344] Call Trace: [ 1578.995936] dump_stack+0x13e/0x194 [ 1578.999562] dump_header+0x178/0x6d4 [ 1579.003270] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1579.008285] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1579.013385] ? ___ratelimit+0x50/0x519 [ 1579.017264] oom_kill_process.cold+0x10/0xae3 [ 1579.021761] ? lock_downgrade+0x6e0/0x6e0 [ 1579.025916] out_of_memory+0x2d5/0x1110 [ 1579.029893] ? oom_killer_disable+0x1c0/0x1c0 [ 1579.034383] ? mutex_trylock+0x152/0x1a0 [ 1579.038431] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1579.043254] ? warn_alloc+0xf0/0xf0 [ 1579.046864] __alloc_pages_nodemask+0x5d3/0x700 [ 1579.051511] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1579.056509] ? lock_downgrade+0x6e0/0x6e0 [ 1579.060647] alloc_pages_current+0xe7/0x1e0 [ 1579.064954] __page_cache_alloc+0x245/0x3d0 [ 1579.069257] filemap_fault+0xc18/0x1c50 [ 1579.073211] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1579.077862] ? lock_acquire+0x170/0x3f0 [ 1579.081822] ? ext4_filemap_fault+0x7c/0xb0 [ 1579.086122] ext4_filemap_fault+0x84/0xb0 [ 1579.090263] __do_fault+0xfa/0x380 [ 1579.093797] __handle_mm_fault+0x22e9/0x3280 [ 1579.098201] ? copy_page_range+0x1d70/0x1d70 [ 1579.102606] ? find_held_lock+0x2d/0x110 [ 1579.106650] handle_mm_fault+0x288/0x7a0 [ 1579.110702] __do_page_fault+0x4bc/0xb40 [ 1579.114748] ? vmalloc_fault+0xdf0/0xdf0 [ 1579.118804] ? do_page_fault+0x60/0x4f2 [ 1579.122768] ? page_fault+0x2f/0x50 [ 1579.126378] page_fault+0x45/0x50 [ 1579.129807] RIP: e126730:0x55a50e126710 [ 1579.133752] RSP: 0000:000055a50e126758 EFLAGS: 55a50d52d812 [ 1579.135224] Mem-Info: [ 1579.153314] active_anon:229985 inactive_anon:1113771 isolated_anon:0 [ 1579.153314] active_file:18 inactive_file:7 isolated_file:0 [ 1579.153314] unevictable:14843 dirty:0 writeback:0 unstable:0 [ 1579.153314] slab_reclaimable:16086 slab_unreclaimable:115182 [ 1579.153314] mapped:59973 shmem:14712 pagetables:11247 bounce:0 [ 1579.153314] free:25031 free_pcp:224 free_cma:0 [ 1579.268343] Node 0 active_anon:900644kB inactive_anon:892072kB active_file:56kB inactive_file:0kB unevictable:50180kB isolated(anon):0kB isolated(file):0kB mapped:229156kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 366592kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1579.321662] Node 1 active_anon:19304kB inactive_anon:3563012kB active_file:72kB inactive_file:156kB unevictable:10044kB isolated(anon):0kB isolated(file):0kB mapped:11600kB dirty:32kB writeback:8kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1579.349954] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1579.380611] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1579.386007] Node 0 DMA32 free:36036kB min:36272kB low:45340kB high:54408kB active_anon:899996kB inactive_anon:887804kB active_file:576kB inactive_file:1300kB unevictable:50228kB writepending:8kB present:3129332kB managed:2621260kB mlocked:50228kB kernel_stack:9856kB pagetables:17140kB bounce:0kB free_pcp:340kB local_pcp:0kB free_cma:0kB [ 1579.418002] lowmem_reserve[]: 0 0 0 0 0 [ 1579.430189] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1579.548816] lowmem_reserve[]: 0 0 0 0 0 [ 1579.552961] Node 1 Normal free:53188kB min:53612kB low:67012kB high:80412kB active_anon:19304kB inactive_anon:3563012kB active_file:276kB inactive_file:40kB unevictable:10044kB writepending:56kB present:3932160kB managed:3870192kB mlocked:10044kB kernel_stack:8576kB pagetables:27692kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1579.689615] lowmem_reserve[]: 0 0 0 0 0 [ 1579.693663] Node 0 DMA: 12*4kB (UME) 8*8kB (UME) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1579.736110] Node 0 DMA32: 274*4kB (UME) 741*8kB (UME) 375*16kB (UME) 109*32kB (UME) 139*64kB (UME) 7*128kB (UME) 5*256kB (UE) 0*512kB 1*1024kB (M) 0*2048kB 2*4096kB (M) = 36800kB [ 1579.795126] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1579.855512] Node 1 Normal: 481*4kB (UME) 1264*8kB (UM) 1367*16kB (UM) 372*32kB (UM) 64*64kB (UM) 29*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53620kB [ 1579.902093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1579.966659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1580.014602] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1580.023460] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1580.103628] 17532 total pagecache pages [ 1580.124555] 0 pages in swap cache [ 1580.128028] Swap cache stats: add 0, delete 0, find 0/0 [ 1580.133377] Free swap = 0kB [ 1580.162507] Total swap = 0kB [ 1580.198487] 1965979 pages RAM [ 1580.201697] 0 pages HighMem/MovableOnly [ 1580.236151] 339053 pages reserved [ 1580.239621] 0 pages cma reserved [ 1580.242979] Out of memory: Kill process 24942 (syz-executor.4) score 1008 or sacrifice child [ 1580.314449] Killed process 24968 (syz-executor.4) total-vm:74972kB, anon-rss:132kB, file-rss:34816kB, shmem-rss:0kB [ 1580.695041] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1580.710045] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1580.715966] CPU: 0 PID: 6329 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1580.723411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1580.732755] Call Trace: [ 1580.735345] dump_stack+0x13e/0x194 [ 1580.738970] dump_header+0x178/0x6d4 [ 1580.742674] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1580.747682] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1580.752779] ? ___ratelimit+0x50/0x519 [ 1580.756663] oom_kill_process.cold+0x10/0xae3 [ 1580.761149] ? lock_acquire+0x170/0x3f0 [ 1580.765112] ? lock_downgrade+0x6e0/0x6e0 [ 1580.769255] out_of_memory+0x2d5/0x1110 [ 1580.773228] ? oom_killer_disable+0x1c0/0x1c0 [ 1580.777717] ? mutex_trylock+0x152/0x1a0 [ 1580.781777] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1580.786621] ? warn_alloc+0xf0/0xf0 [ 1580.790251] __alloc_pages_nodemask+0x5d3/0x700 [ 1580.794925] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1580.799937] ? lock_downgrade+0x6e0/0x6e0 [ 1580.804086] alloc_pages_current+0xe7/0x1e0 [ 1580.808402] __page_cache_alloc+0x245/0x3d0 [ 1580.812719] filemap_fault+0xc18/0x1c50 [ 1580.816692] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1580.821358] ? lock_acquire+0x170/0x3f0 [ 1580.825324] ? ext4_filemap_fault+0x7c/0xb0 [ 1580.829645] ext4_filemap_fault+0x84/0xb0 [ 1580.833783] __do_fault+0xfa/0x380 [ 1580.837315] __handle_mm_fault+0x22e9/0x3280 [ 1580.841716] ? copy_page_range+0x1d70/0x1d70 [ 1580.846115] ? find_held_lock+0x2d/0x110 [ 1580.850176] handle_mm_fault+0x288/0x7a0 [ 1580.854228] __do_page_fault+0x4bc/0xb40 [ 1580.858282] ? vmalloc_fault+0xdf0/0xdf0 [ 1580.862342] ? do_page_fault+0x60/0x4f2 [ 1580.866315] ? page_fault+0x2f/0x50 [ 1580.869936] page_fault+0x45/0x50 [ 1580.873382] RIP: 00f1:0x11 [ 1580.876219] RSP: 000a:000000c42004ff18 EFLAGS: 0042f0a0 [ 1580.877675] Mem-Info: [ 1580.969885] active_anon:229974 inactive_anon:1113770 isolated_anon:0 [ 1580.969885] active_file:12 inactive_file:22 isolated_file:0 [ 1580.969885] unevictable:15565 dirty:0 writeback:0 unstable:0 [ 1580.969885] slab_reclaimable:16086 slab_unreclaimable:114608 [ 1580.969885] mapped:60738 shmem:14712 pagetables:11224 bounce:0 [ 1580.969885] free:24936 free_pcp:52 free_cma:0 [ 1581.153536] Node 0 active_anon:900592kB inactive_anon:892068kB active_file:140kB inactive_file:60kB unevictable:52212kB isolated(anon):0kB isolated(file):0kB mapped:231284kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 366592kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1581.250221] Node 1 active_anon:19304kB inactive_anon:3563012kB active_file:4kB inactive_file:20kB unevictable:10048kB isolated(anon):0kB isolated(file):0kB mapped:11668kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1581.384228] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1581.422419] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1581.427571] Node 0 DMA32 free:36240kB min:36272kB low:45340kB high:54408kB active_anon:899944kB inactive_anon:887800kB active_file:96kB inactive_file:0kB unevictable:52212kB writepending:0kB present:3129332kB managed:2621260kB mlocked:52212kB kernel_stack:9760kB pagetables:17048kB bounce:0kB free_pcp:40kB local_pcp:0kB free_cma:0kB [ 1581.457176] lowmem_reserve[]: 0 0 0 0 0 [ 1581.461168] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1581.518579] lowmem_reserve[]: 0 0 0 0 0 [ 1581.522585] Node 1 Normal free:53144kB min:53612kB low:67012kB high:80412kB active_anon:19304kB inactive_anon:3563012kB active_file:8kB inactive_file:0kB unevictable:10048kB writepending:0kB present:3932160kB managed:3870192kB mlocked:10048kB kernel_stack:8512kB pagetables:27692kB bounce:0kB free_pcp:108kB local_pcp:0kB free_cma:0kB [ 1581.714647] lowmem_reserve[]: 0 0 0 0 0 [ 1581.718674] Node 0 DMA: 12*4kB (UME) 8*8kB (UME) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1581.772323] Node 0 DMA32: 294*4kB (UME) 727*8kB (UME) 357*16kB (UME) 114*32kB (UME) 139*64kB (UME) 7*128kB (UME) 5*256kB (UE) 0*512kB 1*1024kB (M) 0*2048kB 2*4096kB (M) = 36640kB [ 1581.876993] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1581.955589] Node 1 Normal: 466*4kB (UME) 1277*8kB (UM) 1371*16kB (UM) 375*32kB (UM) 65*64kB (UM) 29*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53888kB [ 1582.030518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1582.077471] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1582.119610] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1582.174873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1582.183461] 17714 total pagecache pages [ 1582.226805] 0 pages in swap cache [ 1582.230273] Swap cache stats: add 0, delete 0, find 0/0 [ 1582.273021] Free swap = 0kB [ 1582.288747] Total swap = 0kB [ 1582.291773] 1965979 pages RAM [ 1582.317603] 0 pages HighMem/MovableOnly [ 1582.321605] 339053 pages reserved [ 1582.350659] 0 pages cma reserved [ 1582.354039] Out of memory: Kill process 24942 (syz-executor.4) score 1008 or sacrifice child [ 1582.399065] Killed process 24955 (syz-executor.4) total-vm:75096kB, anon-rss:18028kB, file-rss:45932kB, shmem-rss:0kB [ 1582.458035] oom_reaper: reaped process 24955 (syz-executor.4), now anon-rss:18012kB, file-rss:11632kB, shmem-rss:0kB 18:28:40 executing program 1: eventfd(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000000c0)="0f20e06635000004000f22e06766c7442400007000006766c7442402050000006766c744240600000000670f0114240f01c8e38336f08301dc660f38816bad0f01d566b9ae0b000066b80000000066ba000000800f30d9ed260f01c9", 0x5c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000140)={0x3, 0xfff}) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000)) 18:28:40 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8000, 0x200200) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xffffffffffffff01, 0x404002) r3 = dup2(r2, r0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:28:40 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000100)={'veth0_to_bond\x00', {0x2, 0x4e24, @empty}}) 18:28:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x800) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000340)={0xffffffff, {{0xa, 0x4e24, 0x875e, @local, 0x7}}}, 0x88) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:28:40 executing program 3: mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x2850002, &(0x7f0000000280)={'trans=unix,', {[{@mmap='mmap'}, {@version_u='version=9p2000.u'}, {@loose='loose'}, {@cache_none='cache=none'}], [{@seclabel='seclabel'}, {@obj_type={'obj_type', 0x3d, 'bdevwlan1ppp1*em0'}}, {@permit_directio='permit_directio'}]}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) r4 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000003c0)={0x2, 0xb49, 0x1, 0xffff, 0xfff}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000380)=0xffffffffffffffff) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r5) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00ee6e7bbeffff00000048a5c26800284700fe8000000000000000eaffff06001fd5a46ff382000000d8000000000034510dc85a768bfe62a885381f0000007c7c4ec638079431ffb18a5374cf9a5c28506fcadf9d2b489d9127d8e5db8610d5714d6d1e73a53b2849b212394276ff010000c7901353789b66e03677cb8ca7000000000000000000000000000000383a49b629f5679125f11c852c3de45a30cbc786b8d744e9120a6b1a100fc095b66fa5ffe531", @ANYRES32=r5], 0xfca) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x20000, 0x0) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000340)={0x1, 0x713, [{0x400, 0x0, 0x3}]}) [ 1582.789710] ip_tables: iptables: counters copy to user failed while replacing table [ 1582.876743] ip_tables: iptables: counters copy to user failed while replacing table 18:28:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000380)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010008c15cb109836b97f2352dea471080800000000a16b5aa81ca8b336", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 1582.974994] Unknown ioctl 1099476647 18:28:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) connect$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x3, @any, 0x8000, 0x2}, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000180)=0x3f) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000100)={0xea, &(0x7f0000000000)=""/234}) r5 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r7) r8 = dup2(r6, r7) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:28:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=r4, @ANYBLOB="03000000000000002800128008000100736974001c00028008000100", @ANYRES32=0x0, @ANYBLOB="080014c1ac1414aa06000f0001000000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 1583.112657] Unknown ioctl 1099476647 [ 1583.123546] ip_tables: iptables: counters copy to user failed while replacing table [ 1583.572434] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1583.590481] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1583.600548] CPU: 0 PID: 24983 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 1583.608438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1583.617782] Call Trace: [ 1583.620372] dump_stack+0x13e/0x194 [ 1583.623991] dump_header+0x178/0x6d4 [ 1583.627704] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1583.632716] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1583.637807] ? ___ratelimit+0x50/0x519 [ 1583.641674] oom_kill_process.cold+0x10/0xae3 [ 1583.646167] ? lock_downgrade+0x6e0/0x6e0 [ 1583.650321] out_of_memory+0x2d5/0x1110 [ 1583.654300] ? oom_killer_disable+0x1c0/0x1c0 [ 1583.658792] ? mutex_trylock+0x152/0x1a0 [ 1583.662857] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1583.667719] ? warn_alloc+0xf0/0xf0 [ 1583.671354] __alloc_pages_nodemask+0x5d3/0x700 [ 1583.676025] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1583.681031] ? find_held_lock+0x2d/0x110 [ 1583.685090] alloc_pages_vma+0xc2/0x4a0 [ 1583.689120] __handle_mm_fault+0x17b6/0x3280 [ 1583.693541] ? copy_page_range+0x1d70/0x1d70 [ 1583.697936] ? find_held_lock+0x2d/0x110 [ 1583.701982] handle_mm_fault+0x288/0x7a0 [ 1583.706041] __get_user_pages+0x44d/0x11e0 [ 1583.710282] ? follow_page_mask+0x1580/0x1580 [ 1583.714774] ? lock_acquire+0x170/0x3f0 [ 1583.718737] ? __mm_populate+0x1e3/0x2c0 [ 1583.722776] populate_vma_page_range+0x17b/0x210 [ 1583.727516] __mm_populate+0x195/0x2c0 [ 1583.731384] ? populate_vma_page_range+0x210/0x210 [ 1583.736301] ? security_capable+0x88/0xb0 [ 1583.740442] SyS_mlockall+0x3f5/0x520 [ 1583.744250] ? SyS_munlock+0xf0/0xf0 [ 1583.747950] do_syscall_64+0x1d5/0x640 [ 1583.751860] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1583.757043] RIP: 0033:0x45ca29 [ 1583.760218] RSP: 002b:00007f9620069c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1583.767905] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1583.775164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1583.782421] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1583.789673] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1583.796928] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f962006a6d4 [ 1583.829619] Mem-Info: [ 1583.832136] active_anon:230935 inactive_anon:1113770 isolated_anon:0 [ 1583.832136] active_file:4 inactive_file:0 isolated_file:0 [ 1583.832136] unevictable:13812 dirty:0 writeback:6 unstable:0 [ 1583.832136] slab_reclaimable:16076 slab_unreclaimable:115080 [ 1583.832136] mapped:59182 shmem:14713 pagetables:11330 bounce:0 [ 1583.832136] free:24933 free_pcp:2 free_cma:0 [ 1583.880512] Node 0 active_anon:903880kB inactive_anon:892068kB active_file:88kB inactive_file:112kB unevictable:49248kB isolated(anon):0kB isolated(file):0kB mapped:227192kB dirty:0kB writeback:4kB shmem:47868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 364544kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1583.931829] Node 1 active_anon:19860kB inactive_anon:3563016kB active_file:0kB inactive_file:8kB unevictable:6032kB isolated(anon):0kB isolated(file):0kB mapped:9580kB dirty:0kB writeback:0kB shmem:10988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1583.959816] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1583.991435] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1583.997287] Node 0 DMA32 free:36368kB min:36272kB low:45340kB high:54408kB active_anon:903340kB inactive_anon:887796kB active_file:140kB inactive_file:220kB unevictable:49316kB writepending:4kB present:3129332kB managed:2621260kB mlocked:49316kB kernel_stack:9920kB pagetables:17664kB bounce:0kB free_pcp:328kB local_pcp:120kB free_cma:0kB [ 1584.028008] lowmem_reserve[]: 0 0 0 0 0 [ 1584.032118] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1584.092697] lowmem_reserve[]: 0 0 0 0 0 [ 1584.100758] Node 1 Normal free:53492kB min:53612kB low:67012kB high:80412kB active_anon:19860kB inactive_anon:3563016kB active_file:0kB inactive_file:4kB unevictable:6032kB writepending:0kB present:3932160kB managed:3870192kB mlocked:6032kB kernel_stack:8832kB pagetables:27664kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1584.142500] lowmem_reserve[]: 0 0 0 0 0 [ 1584.147630] Node 0 DMA: 12*4kB (UME) 8*8kB (UME) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1584.174620] Node 0 DMA32: 164*4kB (UE) 366*8kB (UME) 446*16kB (UME) 155*32kB (UE) 136*64kB (UME) 3*128kB (ME) 5*256kB (UE) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 35776kB [ 1584.191218] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1584.243391] Node 1 Normal: 1332*4kB (UME) 1199*8kB (UM) 1328*16kB (UM) 361*32kB (UM) 58*64kB (M) 18*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53736kB [ 1584.325839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1584.335326] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1584.343894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1584.400950] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1584.424917] 16200 total pagecache pages [ 1584.429105] 0 pages in swap cache [ 1584.432554] Swap cache stats: add 0, delete 0, find 0/0 [ 1584.438007] Free swap = 0kB [ 1584.441015] Total swap = 0kB [ 1584.448560] 1965979 pages RAM [ 1584.451667] 0 pages HighMem/MovableOnly [ 1584.455746] 339053 pages reserved [ 1584.459189] 0 pages cma reserved [ 1584.462878] Out of memory: Kill process 24980 (syz-executor.4) score 1007 or sacrifice child [ 1584.471581] Killed process 24980 (syz-executor.4) total-vm:74840kB, anon-rss:17092kB, file-rss:39372kB, shmem-rss:0kB [ 1584.497641] oom_reaper: reaped process 24980 (syz-executor.4), now anon-rss:17104kB, file-rss:5360kB, shmem-rss:0kB 18:28:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'vcan0\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000010000000000000060a5c26800282900fe800000000000000000000007000000ff020000000000000000000000000001"], 0xfca) 18:28:42 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r1, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffcc5}, 0x1, 0x0, 0x0, 0x1051}, 0x20000004) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000380)={0xf000000, 0x8, 0xfffffff9, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x9909d3, 0x80, [], @p_u32=&(0x7f0000000100)=0x1}}) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f00000003c0)={0x2, 0x40}, 0x2) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r5, @ANYBLOB="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"/493], 0x30}}, 0x0) [ 1584.773487] ip_tables: iptables: counters copy to user failed while replacing table 18:28:42 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x19) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000002c0)={0x2, 0x5, 0x4, 0x100000, 0x1, {0x77359400}, {0x3, 0x1, 0x3, 0x1, 0x3, 0xb9, "51ce4bf3"}, 0x61, 0x2, @fd=r1, 0x7ff, 0x0, r0}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f00000001c0)={0x80000001, 0x0, 0x3011, 0x43, 0x4, {0x1000, 0x7fff800}, 0x1}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x12) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6}, 0x0, @in6=@mcast2, 0x0, 0x2}}, 0xe8) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="e0000002ac1414aa00000000025f3627f68dc58b407f07da70f210e27992e08fce5232c74e65eb02d3e58b875f24ec2c394c13b09a0ca5d7a3ded1a4751ee2656c3c"], 0x18) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x4000000) r4 = socket(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000180)={'syz_tun\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1584.945293] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1585.329396] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1585.348790] modprobe cpuset=/ mems_allowed=0-1 [ 1585.359105] CPU: 0 PID: 25027 Comm: modprobe Not tainted 4.14.180-syzkaller #0 [ 1585.366482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1585.375825] Call Trace: [ 1585.378409] dump_stack+0x13e/0x194 [ 1585.382038] dump_header+0x178/0x6d4 [ 1585.385740] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1585.390735] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1585.395811] ? ___ratelimit+0x50/0x519 [ 1585.399675] oom_kill_process.cold+0x10/0xae3 [ 1585.404151] ? lock_downgrade+0x6e0/0x6e0 [ 1585.408274] out_of_memory+0x2d5/0x1110 [ 1585.412226] ? oom_killer_disable+0x1c0/0x1c0 [ 1585.416695] ? mutex_trylock+0x152/0x1a0 [ 1585.420744] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1585.425572] ? warn_alloc+0xf0/0xf0 [ 1585.429185] ? find_held_lock+0x2d/0x110 [ 1585.433220] ? fs_reclaim_acquire+0x10/0x10 [ 1585.437520] __alloc_pages_nodemask+0x5d3/0x700 [ 1585.442162] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1585.446987] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1585.451987] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1585.456981] ? cache_grow_begin+0x32d/0x410 [ 1585.461277] cache_grow_begin+0x7b/0x410 [ 1585.465315] fallback_alloc+0x205/0x2b0 [ 1585.469277] kmem_cache_alloc+0x1ea/0x770 [ 1585.473402] ? memcpy+0x35/0x50 [ 1585.476658] getname_flags+0xc8/0x560 [ 1585.480437] user_path_at_empty+0x2a/0x50 [ 1585.484560] SyS_access+0x21a/0x680 [ 1585.488162] ? SyS_faccessat+0x680/0x680 [ 1585.492198] ? __do_page_fault+0x35b/0xb40 [ 1585.496421] ? do_syscall_64+0x4c/0x640 [ 1585.500380] ? SyS_faccessat+0x680/0x680 [ 1585.504429] do_syscall_64+0x1d5/0x640 [ 1585.508294] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1585.513470] RIP: 0033:0x7faab6cbc217 [ 1585.517157] RSP: 002b:00007fff4d908b08 EFLAGS: 00000212 ORIG_RAX: 0000000000000015 [ 1585.524853] RAX: ffffffffffffffda RBX: 000055ce593e3c81 RCX: 00007faab6cbc217 [ 1585.532107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007faab6cc04e7 [ 1585.539354] RBP: 00007fff4d908b70 R08: 0000000000000000 R09: 0000000000000000 [ 1585.546689] R10: 0000000000000010 R11: 0000000000000212 R12: 00007faab6ec2808 [ 1585.553934] R13: 00000000000033fe R14: 0000000000003c06 R15: 0000000000000000 [ 1585.626921] Mem-Info: [ 1585.629450] active_anon:230566 inactive_anon:1113771 isolated_anon:0 [ 1585.629450] active_file:31 inactive_file:24 isolated_file:30 [ 1585.629450] unevictable:14165 dirty:2 writeback:0 unstable:0 [ 1585.629450] slab_reclaimable:16068 slab_unreclaimable:115270 [ 1585.629450] mapped:59381 shmem:14712 pagetables:11356 bounce:0 [ 1585.629450] free:24868 free_pcp:206 free_cma:0 [ 1585.663989] Node 0 active_anon:903064kB inactive_anon:892072kB active_file:120kB inactive_file:144kB unevictable:47920kB isolated(anon):0kB isolated(file):0kB mapped:229488kB dirty:20kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 364544kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1585.742796] Node 1 active_anon:19168kB inactive_anon:3563012kB active_file:0kB inactive_file:0kB unevictable:8800kB isolated(anon):0kB isolated(file):0kB mapped:8028kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1585.782304] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1585.811691] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1585.816787] Node 0 DMA32 free:35872kB min:36272kB low:45340kB high:54408kB active_anon:902500kB inactive_anon:887804kB active_file:112kB inactive_file:388kB unevictable:48176kB writepending:220kB present:3129332kB managed:2621260kB mlocked:48184kB kernel_stack:9952kB pagetables:17536kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1585.846806] lowmem_reserve[]: 0 0 0 0 0 [ 1585.850792] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1585.878539] lowmem_reserve[]: 0 0 0 0 0 [ 1585.885357] Node 1 Normal free:53388kB min:53612kB low:67012kB high:80412kB active_anon:19168kB inactive_anon:3563012kB active_file:0kB inactive_file:0kB unevictable:8508kB writepending:0kB present:3932160kB managed:3870192kB mlocked:8508kB kernel_stack:8512kB pagetables:27648kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1585.917554] lowmem_reserve[]: 0 0 0 0 0 [ 1585.921553] Node 0 DMA: 10*4kB (UE) 10*8kB (UE) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10440kB [ 1585.939727] Node 0 DMA32: 420*4kB (UME) 125*8kB (UME) 378*16kB (UME) 194*32kB (UME) 148*64kB (UME) 9*128kB (UME) 5*256kB (UME) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 36568kB [ 1585.970347] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1585.990049] Node 1 Normal: 814*4kB (UME) 1226*8kB (UM) 1416*16kB (UM) 367*32kB (UM) 58*64kB (M) 19*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53608kB [ 1586.017187] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1586.033016] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1586.055295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1586.069479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1586.092329] 16529 total pagecache pages [ 1586.101101] 0 pages in swap cache [ 1586.109418] Swap cache stats: add 0, delete 0, find 0/0 [ 1586.128882] Free swap = 0kB [ 1586.131985] Total swap = 0kB [ 1586.139482] 1965979 pages RAM [ 1586.142618] 0 pages HighMem/MovableOnly [ 1586.151851] 339053 pages reserved [ 1586.162846] 0 pages cma reserved [ 1586.168748] Out of memory: Kill process 25034 (syz-executor.4) score 1007 or sacrifice child [ 1586.182099] Killed process 25046 (syz-executor.4) total-vm:74972kB, anon-rss:132kB, file-rss:34816kB, shmem-rss:0kB [ 1586.258462] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1586.279601] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1586.289853] CPU: 0 PID: 25036 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 1586.297737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1586.307066] Call Trace: [ 1586.309636] dump_stack+0x13e/0x194 [ 1586.313252] dump_header+0x178/0x6d4 [ 1586.316942] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1586.321978] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1586.327057] ? ___ratelimit+0x50/0x519 [ 1586.330917] oom_kill_process.cold+0x10/0xae3 [ 1586.335432] ? lock_acquire+0x170/0x3f0 [ 1586.339383] ? lock_downgrade+0x6e0/0x6e0 [ 1586.343508] out_of_memory+0x2d5/0x1110 [ 1586.347458] ? oom_killer_disable+0x1c0/0x1c0 [ 1586.351927] ? mutex_trylock+0x152/0x1a0 [ 1586.355964] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1586.360787] ? warn_alloc+0xf0/0xf0 [ 1586.364394] __alloc_pages_nodemask+0x5d3/0x700 [ 1586.369037] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1586.374027] ? lock_downgrade+0x6e0/0x6e0 [ 1586.378153] alloc_pages_current+0xe7/0x1e0 [ 1586.382498] __page_cache_alloc+0x245/0x3d0 [ 1586.386825] filemap_fault+0xc18/0x1c50 [ 1586.390793] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1586.395442] ? lock_acquire+0x170/0x3f0 [ 1586.399408] ? ext4_filemap_fault+0x7c/0xb0 [ 1586.403715] ext4_filemap_fault+0x84/0xb0 [ 1586.407845] __do_fault+0xfa/0x380 [ 1586.411362] __handle_mm_fault+0x22e9/0x3280 [ 1586.415747] ? copy_page_range+0x1d70/0x1d70 [ 1586.420133] ? find_held_lock+0x2d/0x110 [ 1586.424179] handle_mm_fault+0x288/0x7a0 [ 1586.428216] __get_user_pages+0x44d/0x11e0 [ 1586.432426] ? follow_page_mask+0x1580/0x1580 [ 1586.436899] ? lock_acquire+0x170/0x3f0 [ 1586.440847] ? __mm_populate+0x1e3/0x2c0 [ 1586.444896] populate_vma_page_range+0x17b/0x210 [ 1586.449626] __mm_populate+0x195/0x2c0 [ 1586.453488] ? populate_vma_page_range+0x210/0x210 [ 1586.458390] ? security_capable+0x88/0xb0 [ 1586.462527] SyS_mlockall+0x3f5/0x520 [ 1586.466302] ? SyS_munlock+0xf0/0xf0 [ 1586.469998] do_syscall_64+0x1d5/0x640 [ 1586.473866] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1586.479047] RIP: 0033:0x45ca29 [ 1586.482210] RSP: 002b:00007f9620069c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1586.489891] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1586.497149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1586.504397] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1586.511650] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1586.518895] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f962006a6d4 [ 1586.536225] Mem-Info: [ 1586.538653] active_anon:230525 inactive_anon:1113770 isolated_anon:0 [ 1586.538653] active_file:11 inactive_file:19 isolated_file:0 [ 1586.538653] unevictable:14476 dirty:0 writeback:0 unstable:0 [ 1586.538653] slab_reclaimable:16068 slab_unreclaimable:115230 [ 1586.538653] mapped:59629 shmem:14712 pagetables:11253 bounce:0 [ 1586.538653] free:25035 free_pcp:74 free_cma:0 [ 1586.579639] Node 0 active_anon:902996kB inactive_anon:892068kB active_file:56kB inactive_file:60kB unevictable:49016kB isolated(anon):0kB isolated(file):0kB mapped:230432kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 364544kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1586.610664] Node 1 active_anon:19104kB inactive_anon:3563012kB active_file:20kB inactive_file:0kB unevictable:8888kB isolated(anon):0kB isolated(file):0kB mapped:8084kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1586.658664] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1586.693294] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1586.698422] Node 0 DMA32 free:36060kB min:36272kB low:45340kB high:54408kB active_anon:902348kB inactive_anon:887800kB active_file:72kB inactive_file:44kB unevictable:48988kB writepending:0kB present:3129332kB managed:2621260kB mlocked:48988kB kernel_stack:9952kB pagetables:17260kB bounce:0kB free_pcp:296kB local_pcp:0kB free_cma:0kB [ 1586.730627] lowmem_reserve[]: 0 0 0 0 0 [ 1586.750936] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1586.790014] lowmem_reserve[]: 0 0 0 0 0 [ 1586.800760] Node 1 Normal free:53608kB min:53612kB low:67012kB high:80412kB active_anon:19104kB inactive_anon:3563012kB active_file:16kB inactive_file:0kB unevictable:8888kB writepending:0kB present:3932160kB managed:3870192kB mlocked:8888kB kernel_stack:8512kB pagetables:27596kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1586.841520] lowmem_reserve[]: 0 0 0 0 0 [ 1586.847939] Node 0 DMA: 10*4kB (UE) 10*8kB (UE) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10440kB [ 1586.872982] Node 0 DMA32: 343*4kB (UME) 108*8kB (UE) 374*16kB (UME) 194*32kB (UME) 148*64kB (UME) 9*128kB (UME) 5*256kB (UME) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 36060kB [ 1586.896879] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1586.910131] Node 1 Normal: 814*4kB (UME) 1226*8kB (UM) 1416*16kB (UM) 367*32kB (UM) 58*64kB (M) 19*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53608kB [ 1586.931883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1586.940850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1586.956438] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1586.967802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1586.983226] 16529 total pagecache pages [ 1586.993409] 0 pages in swap cache [ 1587.001599] Swap cache stats: add 0, delete 0, find 0/0 [ 1587.020790] Free swap = 0kB [ 1587.028528] Total swap = 0kB [ 1587.031555] 1965979 pages RAM [ 1587.043681] 0 pages HighMem/MovableOnly [ 1587.051473] 339053 pages reserved [ 1587.060508] 0 pages cma reserved [ 1587.072454] Out of memory: Kill process 25034 (syz-executor.4) score 1008 or sacrifice child [ 1587.083510] Killed process 25034 (syz-executor.4) total-vm:75096kB, anon-rss:17768kB, file-rss:40448kB, shmem-rss:0kB [ 1587.113389] oom_reaper: reaped process 25034 (syz-executor.4), now anon-rss:18012kB, file-rss:6504kB, shmem-rss:0kB [ 1587.131889] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1587.155727] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1587.160873] CPU: 0 PID: 3646 Comm: systemd-udevd Not tainted 4.14.180-syzkaller #0 [ 1587.168568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1587.177924] Call Trace: [ 1587.180508] dump_stack+0x13e/0x194 [ 1587.184128] dump_header+0x178/0x6d4 [ 1587.187832] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1587.192844] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1587.197945] ? ___ratelimit+0x50/0x519 [ 1587.201857] oom_kill_process.cold+0x10/0xae3 [ 1587.206338] ? lock_acquire+0x170/0x3f0 [ 1587.210289] ? lock_downgrade+0x6e0/0x6e0 [ 1587.214415] out_of_memory+0x2d5/0x1110 [ 1587.218377] ? oom_killer_disable+0x1c0/0x1c0 [ 1587.222861] ? mutex_trylock+0x152/0x1a0 [ 1587.226914] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1587.231735] ? warn_alloc+0xf0/0xf0 [ 1587.235343] __alloc_pages_nodemask+0x5d3/0x700 [ 1587.239996] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1587.244985] ? lock_downgrade+0x6e0/0x6e0 [ 1587.249110] alloc_pages_current+0xe7/0x1e0 [ 1587.253417] __page_cache_alloc+0x245/0x3d0 [ 1587.257713] filemap_fault+0xc18/0x1c50 [ 1587.261677] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1587.266322] ? lock_acquire+0x170/0x3f0 [ 1587.270307] ? ext4_filemap_fault+0x7c/0xb0 [ 1587.274619] ext4_filemap_fault+0x84/0xb0 [ 1587.278737] __do_fault+0xfa/0x380 [ 1587.282261] __handle_mm_fault+0x22e9/0x3280 [ 1587.286641] ? copy_page_range+0x1d70/0x1d70 [ 1587.291022] ? find_held_lock+0x2d/0x110 [ 1587.295096] handle_mm_fault+0x288/0x7a0 [ 1587.299129] __do_page_fault+0x4bc/0xb40 [ 1587.303176] ? vmalloc_fault+0xdf0/0xdf0 [ 1587.307210] ? do_page_fault+0x60/0x4f2 [ 1587.311155] ? page_fault+0x2f/0x50 [ 1587.314754] page_fault+0x45/0x50 [ 1587.318180] RIP: 0001:0x1 [ 1587.320909] RSP: e126710:00007ffcacb1a4c0 EFLAGS: 7ffcacb1a350 [ 1587.328908] Mem-Info: [ 1587.337418] active_anon:230523 inactive_anon:1113770 isolated_anon:0 [ 1587.337418] active_file:1748 inactive_file:37 isolated_file:32 [ 1587.337418] unevictable:8192 dirty:0 writeback:0 unstable:0 [ 1587.337418] slab_reclaimable:16067 slab_unreclaimable:115229 [ 1587.337418] mapped:58079 shmem:14712 pagetables:11218 bounce:0 [ 1587.337418] free:29266 free_pcp:336 free_cma:0 [ 1587.372586] Node 0 active_anon:902988kB inactive_anon:892068kB active_file:2456kB inactive_file:2520kB unevictable:32768kB isolated(anon):0kB isolated(file):0kB mapped:224036kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 364544kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1587.401669] Node 1 active_anon:19104kB inactive_anon:3563012kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8080kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1587.433596] Node 0 DMA free:10468kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1587.471013] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1587.479808] Node 0 DMA32 free:50852kB min:36272kB low:45340kB high:54408kB active_anon:902340kB inactive_anon:887800kB active_file:444kB inactive_file:1004kB unevictable:32768kB writepending:0kB present:3129332kB managed:2621260kB mlocked:32768kB kernel_stack:9856kB pagetables:17132kB bounce:0kB free_pcp:68kB local_pcp:8kB free_cma:0kB [ 1587.516284] lowmem_reserve[]: 0 0 0 0 0 [ 1587.521115] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1587.559312] lowmem_reserve[]: 0 0 0 0 0 [ 1587.563412] Node 1 Normal free:62560kB min:53612kB low:67012kB high:80412kB active_anon:19104kB inactive_anon:3563012kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8512kB pagetables:27584kB bounce:0kB free_pcp:712kB local_pcp:0kB free_cma:0kB [ 1587.602492] lowmem_reserve[]: 0 0 0 0 0 [ 1587.607293] Node 0 DMA: 13*4kB (UME) 12*8kB (UME) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10468kB [ 1587.629713] Node 0 DMA32: 1634*4kB (UME) 616*8kB (UME) 611*16kB (UME) 200*32kB (UME) 152*64kB (UME) 10*128kB (UME) 8*256kB (UME) 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 2*4096kB (M) = 52472kB [ 1587.652043] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1587.668184] Node 1 Normal: 2784*4kB (UME) 1296*8kB (UM) 1440*16kB (UM) 369*32kB (UM) 59*64kB (M) 19*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 62560kB [ 1587.692130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1587.701244] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1587.715722] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1587.728520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1587.738224] 14785 total pagecache pages [ 1587.742266] 0 pages in swap cache [ 1587.747393] Swap cache stats: add 0, delete 0, find 0/0 [ 1587.752762] Free swap = 0kB [ 1587.755934] Total swap = 0kB [ 1587.758936] 1965979 pages RAM [ 1587.762021] 0 pages HighMem/MovableOnly [ 1587.766059] 339053 pages reserved [ 1587.769493] 0 pages cma reserved [ 1587.772840] Out of memory: Kill process 24917 (syz-executor.4) score 1007 or sacrifice child [ 1587.781880] Killed process 24917 (syz-executor.4) total-vm:75096kB, anon-rss:18500kB, file-rss:34624kB, shmem-rss:0kB 18:28:42 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x200080, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x18, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r8 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) accept$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000018ecdaf319a001e053f5edb5df438b3d72eb4c1aa433b507dec427898d76cc173cb0f82c530637def8df2236e19a34fbcb35d0cd33531966e4f04825f8eeeeeb522fda49ba5c7b738309c3e3cbd24296a3a96a87e80ae4c2acac50cecae970d8d7b8a3e38e78cabb4319c3b320ab539bd19fd041ffcf6f", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280f9fd0100767863616e000000040002800000010000000000", @ANYRES32=r9, @ANYBLOB="06a100000340040008000300", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) [ 1587.822249] oom_reaper: reaped process 24917 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 18:28:45 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r1, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r5, @ANYBLOB="4d65a402fdc8646d"], 0x30}}, 0x0) 18:28:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000010000000000000060a5c26800282900fe800000000000000000000007000000ff020000000000000000000000000001"], 0xfca) 18:28:45 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x19) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000002c0)={0x2, 0x5, 0x4, 0x100000, 0x1, {0x77359400}, {0x3, 0x1, 0x3, 0x1, 0x3, 0xb9, "51ce4bf3"}, 0x61, 0x2, @fd=r1, 0x7ff, 0x0, r0}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f00000001c0)={0x80000001, 0x0, 0x3011, 0x43, 0x4, {0x1000, 0x7fff800}, 0x1}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x12) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6}, 0x0, @in6=@mcast2, 0x0, 0x2}}, 0xe8) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="e0000002ac1414aa00000000025f3627f68dc58b407f07da70f210e27992e08fce5232c74e65eb02d3e58b875f24ec2c394c13b09a0ca5d7a3ded1a4751ee2656c3c"], 0x18) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x4000000) r4 = socket(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000180)={'syz_tun\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:28:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8091}, 0x0) 18:28:45 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x2000}) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x20}) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r3) r4 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}, 0x9}) r5 = dup2(0xffffffffffffffff, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="726177080000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a00100000300000000000000000000000000000000000000000000000000000000000000000000e1da7f5500000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000947a07c6f9f3d598de000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff434cf533da7e96c8feee2a6fe672f5223247926a087d0ccf35a155fbc2d44eacf2bc9702b2e11ad1c963cfae50a8ce76c813c994217af79d69a40bf0cef85baa9a69f1164db065e258f639efd47f8c64ab703ab1a21249ba0004d405406b07dce63cd00966d99032b6bd7b6d3a5696d29bfaf48c71688c46168f1e0ce30ebd473cdd67a10f36b1caa99ae202de1a289f4fe1d9af0d04deb233a921d3c0db0da8ffc07595b88f3efb1e2fc91bb6c53d1c688c7abc9c9ed22698c37708266d1f2ff634b57db3b4c152a01b013dbbb2eedd880b8e53ceb982f223f323333d713d60856e6d2a460215ab9d085e1fb66bbae4571c64f9bdb3d615f88adfc634b309afc2579e00dc7a6892316f481b731f683424e81e4832c15271ba3bc4e215810c9e99ff3da713a58fcbf04ea90646cca6fe9b0daa5b21029299f4fa645c561b1522d7a081b098"], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, r6) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="79b06899609a30f4e6691bb3f6eec99f6cf9129521b8a2a2f8afc7294ae615662ddf023130812502dd1e04f13437d246ba15b81856e28f10fcc1a58eec8cd4307dd6728ffc6355adc05e1695537b15000000000000000008486f94b9c1db123e60cc95399ef105f1e47958cae2ac6200000000e3b8d4f23fa0952d919f02c49ae9d96c1f07ac9444a372f97065605a6c27edd21a9dce1aa15cf88206984fa7c17faa26e7106e3ca78f5246b213408261c34569ca61df0c109f3e3a54f9ad872cb242c590b95f5b358315d826f655502b68ecaf7799fea365aa695b213abd3e80d0dcdb4baaace0cecd", @ANYRESOCT=r1, @ANYRES16=0x0, @ANYRES32, @ANYRESOCT, @ANYRESDEC=r4, @ANYBLOB="81cec06a208395c38cf814200e6d0d13c0f105db3c03b4d5a93f51694021979dffcf807c73ec9c06bc2b64b90b0dff564eb70cc85afba7d08c1b8cbe5ba1d874"], 0x1) 18:28:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x404c050) recvmmsg(r1, &(0x7f0000000c00)=[{{&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/70, 0x46}}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)=""/132, 0x84}], 0x1}}, {{&(0x7f0000001000)=@nfc_llcp, 0x80, &(0x7f0000001100)}}, {{0x0, 0x0, 0x0}, 0x3}], 0x6, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x2, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400f7fffff8) syz_genetlink_get_family_id$fou(0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) 18:28:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@can_delroute={0x154, 0x19, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@CGW_MOD_UID={0x8, 0xe, r6}, @CGW_CS_CRC8={0x11e, 0x6, {0x66, 0x58, 0x21, 0x9, 0x63, "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", 0x3, "f59ab200eb3e6071882c1ab810d034b61315f069"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "93b27af8f1c35e7f"}, 0x5}}]}, 0x154}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 1588.197993] audit: type=1800 audit(1589912925.724:98): pid=25097 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=16007 res=0 18:28:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000010000000000000060a5c26800282900fe800000000000000000000007000000ff020000000000000000000000000001"], 0xfca) 18:28:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c200000a81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 1588.833771] audit: type=1800 audit(1589912926.355:99): pid=25095 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=16007 res=0 [ 1589.393588] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1589.430041] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1589.446957] CPU: 0 PID: 6330 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1589.454425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1589.463759] Call Trace: [ 1589.466332] dump_stack+0x13e/0x194 [ 1589.469954] dump_header+0x178/0x6d4 [ 1589.473645] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1589.478636] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1589.483714] ? ___ratelimit+0x50/0x519 [ 1589.487588] oom_kill_process.cold+0x10/0xae3 [ 1589.492061] ? lock_acquire+0x170/0x3f0 [ 1589.496012] ? lock_downgrade+0x6e0/0x6e0 [ 1589.500141] out_of_memory+0x2d5/0x1110 [ 1589.504101] ? oom_killer_disable+0x1c0/0x1c0 [ 1589.508571] ? mutex_trylock+0x152/0x1a0 [ 1589.512611] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1589.517440] ? warn_alloc+0xf0/0xf0 [ 1589.521067] __alloc_pages_nodemask+0x5d3/0x700 [ 1589.525714] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1589.530707] ? lock_downgrade+0x6e0/0x6e0 [ 1589.534837] alloc_pages_current+0xe7/0x1e0 [ 1589.539135] __page_cache_alloc+0x245/0x3d0 [ 1589.543431] filemap_fault+0xc18/0x1c50 [ 1589.547387] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1589.552033] ? lock_acquire+0x170/0x3f0 [ 1589.555987] ? ext4_filemap_fault+0x7c/0xb0 [ 1589.560289] ext4_filemap_fault+0x84/0xb0 [ 1589.564412] __do_fault+0xfa/0x380 [ 1589.567927] __handle_mm_fault+0x22e9/0x3280 [ 1589.572312] ? copy_page_range+0x1d70/0x1d70 [ 1589.576711] ? find_held_lock+0x2d/0x110 [ 1589.580756] handle_mm_fault+0x288/0x7a0 [ 1589.584795] __do_page_fault+0x4bc/0xb40 [ 1589.588831] ? vmalloc_fault+0xdf0/0xdf0 [ 1589.592865] ? do_page_fault+0x60/0x4f2 [ 1589.596813] ? page_fault+0x2f/0x50 [ 1589.600414] page_fault+0x45/0x50 [ 1589.603842] RIP: 008a:0x89 [ 1589.606660] RSP: 62fddd5e:000000c43af51d20 EFLAGS: ffffffffffffffff [ 1589.663282] Mem-Info: [ 1589.672204] active_anon:230344 inactive_anon:1111002 isolated_anon:0 [ 1589.672204] active_file:16 inactive_file:16 isolated_file:0 [ 1589.672204] unevictable:16399 dirty:0 writeback:0 unstable:0 [ 1589.672204] slab_reclaimable:16057 slab_unreclaimable:116329 [ 1589.672204] mapped:62659 shmem:14712 pagetables:11280 bounce:0 [ 1589.672204] free:24927 free_pcp:71 free_cma:0 [ 1589.706274] Node 0 active_anon:901844kB inactive_anon:885788kB active_file:60kB inactive_file:60kB unevictable:57624kB isolated(anon):0kB isolated(file):0kB mapped:236776kB dirty:0kB writeback:0kB shmem:47860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 364544kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1589.739513] Node 1 active_anon:19532kB inactive_anon:3558220kB active_file:4kB inactive_file:4kB unevictable:7972kB isolated(anon):0kB isolated(file):0kB mapped:13860kB dirty:0kB writeback:0kB shmem:10988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1589.770286] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.799539] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1589.804664] Node 0 DMA32 free:36244kB min:36272kB low:45340kB high:54408kB active_anon:901196kB inactive_anon:881520kB active_file:64kB inactive_file:56kB unevictable:57624kB writepending:0kB present:3129332kB managed:2621260kB mlocked:57624kB kernel_stack:9760kB pagetables:17276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.836761] lowmem_reserve[]: 0 0 0 0 0 [ 1589.840754] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.870168] lowmem_reserve[]: 0 0 0 0 0 [ 1589.940624] Node 1 Normal free:53268kB min:53612kB low:67012kB high:80412kB active_anon:19532kB inactive_anon:3558220kB active_file:4kB inactive_file:4kB unevictable:7972kB writepending:0kB present:3932160kB managed:3870192kB mlocked:7972kB kernel_stack:8704kB pagetables:27688kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1590.053297] lowmem_reserve[]: 0 0 0 0 0 [ 1590.073887] Node 0 DMA: 13*4kB (UME) 8*8kB (UME) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1590.101920] Node 0 DMA32: 440*4kB (UME) 186*8kB (UME) 171*16kB (UE) 254*32kB (UE) 135*64kB (UE) 9*128kB (UME) 11*256kB (UME) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 35936kB [ 1590.128270] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1590.141486] Node 1 Normal: 1021*4kB (UME) 1753*8kB (UM) 1267*16kB (UM) 354*32kB (UM) 52*64kB (M) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53292kB [ 1590.164031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1590.172886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1590.189282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1590.198187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1590.213333] 19653 total pagecache pages [ 1590.231730] 0 pages in swap cache [ 1590.240742] Swap cache stats: add 0, delete 0, find 0/0 [ 1590.260208] Free swap = 0kB [ 1590.263239] Total swap = 0kB [ 1590.273177] 1965979 pages RAM [ 1590.281808] 0 pages HighMem/MovableOnly [ 1590.289456] 339053 pages reserved [ 1590.292991] 0 pages cma reserved [ 1590.325674] Out of memory: Kill process 25065 (syz-executor.4) score 1008 or sacrifice child [ 1590.336819] Killed process 25143 (syz-executor.4) total-vm:74972kB, anon-rss:18028kB, file-rss:34816kB, shmem-rss:0kB 18:28:51 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat(r6, &(0x7f0000000000)='./file0\x00', 0x575100, 0x32) 18:28:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000100000000000060a51aeefcb32900fe80000000000000f4ff000007000000ff020000000000000000100000000001"], 0xfca) r2 = socket(0x1, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) 18:28:51 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x2000}) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x20}) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r3) r4 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}, 0x9}) r5 = dup2(0xffffffffffffffff, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, r6) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="79b06899609a30f4e6691bb3f6eec99f6cf9129521b8a2a2f8afc7294ae615662ddf023130812502dd1e04f13437d246ba15b81856e28f10fcc1a58eec8cd4307dd6728ffc6355adc05e1695537b15000000000000000008486f94b9c1db123e60cc95399ef105f1e47958cae2ac6200000000e3b8d4f23fa0952d919f02c49ae9d96c1f07ac9444a372f97065605a6c27edd21a9dce1aa15cf88206984fa7c17faa26e7106e3ca78f5246b213408261c34569ca61df0c109f3e3a54f9ad872cb242c590b95f5b358315d826f655502b68ecaf7799fea365aa695b213abd3e80d0dcdb4baaace0cecd", @ANYRESOCT=r1, @ANYRES16=0x0, @ANYRES32, @ANYRESOCT, @ANYRESDEC=r4, @ANYBLOB="81cec06a208395c38cf814200e6d0d13c0f105db3c03b4d5a93f51694021979dffcf807c73ec9c06bc2b64b90b0dff564eb70cc85afba7d08c1b8cbe5ba1d874"], 0x1) 18:28:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}]}}}]}, 0x48}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r7, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800f50000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:28:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x404c050) recvmmsg(r1, &(0x7f0000000c00)=[{{&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/70, 0x46}}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)=""/132, 0x84}], 0x1}}, {{&(0x7f0000001000)=@nfc_llcp, 0x80, &(0x7f0000001100)}}, {{0x0, 0x0, 0x0}, 0x3}], 0x6, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x2, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400f7fffff8) syz_genetlink_get_family_id$fou(0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) [ 1594.735810] ip_tables: iptables: counters copy to user failed while replacing table 18:28:52 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x2000}) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x20}) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r3) r4 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}, 0x9}) r5 = dup2(0xffffffffffffffff, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, r6) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="79b06899609a30f4e6691bb3f6eec99f6cf9129521b8a2a2f8afc7294ae615662ddf023130812502dd1e04f13437d246ba15b81856e28f10fcc1a58eec8cd4307dd6728ffc6355adc05e1695537b15000000000000000008486f94b9c1db123e60cc95399ef105f1e47958cae2ac6200000000e3b8d4f23fa0952d919f02c49ae9d96c1f07ac9444a372f97065605a6c27edd21a9dce1aa15cf88206984fa7c17faa26e7106e3ca78f5246b213408261c34569ca61df0c109f3e3a54f9ad872cb242c590b95f5b358315d826f655502b68ecaf7799fea365aa695b213abd3e80d0dcdb4baaace0cecd", @ANYRESOCT=r1, @ANYRES16=0x0, @ANYRES32, @ANYRESOCT, @ANYRESDEC=r4, @ANYBLOB="81cec06a208395c38cf814200e6d0d13c0f105db3c03b4d5a93f51694021979dffcf807c73ec9c06bc2b64b90b0dff564eb70cc85afba7d08c1b8cbe5ba1d874"], 0x1) 18:28:52 executing program 0: r0 = socket(0x1, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x44800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:28:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0099c0f93101042a144e81f0a302a601001f005e0000006000000000000000af80000000200000000000002400486c671295d15e0000ff029ec797341e1048"], 0xfca) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$FIOCLEX(r2, 0x5451) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$peek(0x2, r3, &(0x7f0000000000)) 18:28:52 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f00000007c0)={0x0, 0x70, 0x2, 0x6, 0x7, 0x5, 0x0, 0x200, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xf807, 0x0, @perf_config_ext={0xd1e, 0x3}, 0x980c, 0x10, 0x2, 0x6, 0x6, 0x4e, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {0x8, 0x3, 0x40, 0x8}, 0x3d, [0x26, 0x80, 0x0, 0x7f, 0x800, 0x3, 0x800, 0x7f, 0x2, 0x1, 0x5, 0x1, 0x4, 0x7ff, 0x5, 0x9, 0x3, 0xbbb8, 0x1cf0, 0x2, 0xffff, 0x3, 0x2, 0x75a25f1, 0x3f267f53, 0x8, 0x8, 0xffffff7f, 0xffffffff, 0x3f, 0x6, 0xffff, 0x3ff, 0x1ff, 0x0, 0x1, 0x5, 0x7fffffff, 0x1, 0x6, 0xfffffff7, 0x0, 0x5000000, 0x3, 0x75, 0x20, 0x90bf, 0x8, 0xffff17d3, 0xff, 0x1, 0x7, 0xfffffb5c, 0xa823, 0x3f, 0x5, 0x7, 0x1, 0x527f, 0xa, 0xf3, 0x84, 0x400, 0xff], [0x1, 0x8, 0x101, 0x10000, 0x3, 0x80000, 0xf6, 0x1, 0x5, 0xffff0000, 0xfffffffb, 0x3, 0x7, 0xff, 0xc35b, 0x6, 0x1ff, 0x2, 0xffffffe1, 0x7f, 0x401, 0xc71e, 0x8, 0x6, 0x6, 0x2000000, 0x4, 0x40, 0x7fffffff, 0xb4a, 0x400, 0xfffffff9, 0x3, 0x2, 0x0, 0xfffffffd, 0x400, 0x9, 0x4, 0x3, 0x6, 0x3, 0x2a, 0x6, 0xffffff01, 0x32, 0x5, 0x94, 0x0, 0x8, 0x2, 0x8000, 0x40, 0xfffffff9, 0xfff, 0x1, 0xd17f, 0x4, 0x7, 0x9, 0x3, 0x1, 0x8, 0x1], [0x101, 0xb7, 0x40, 0x7c2, 0x6, 0x5d, 0xf6, 0x8, 0x7, 0x2, 0x1, 0x5a7, 0x6, 0x2, 0x3, 0x4, 0x3, 0x5, 0x7, 0xfffffe00, 0x0, 0x200, 0x3ff, 0x7fffffff, 0x1, 0x4, 0x10000, 0x2, 0x1f, 0x1, 0x0, 0x3ff, 0xdf1a, 0x6, 0x8, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0xf515, 0x80000001, 0x10, 0x47fe9da1, 0x401, 0x0, 0x6, 0x7fffffff, 0x0, 0x8, 0xfffff24b, 0x7, 0x0, 0x3ff, 0x8, 0xffff, 0xffff, 0xb21, 0x6b, 0x3, 0x7, 0x2, 0x401, 0x1a18], [0x7f, 0x1, 0x4, 0xff, 0x1f, 0x8, 0x6, 0x3, 0x7, 0x400, 0x5, 0x7f, 0x6, 0x0, 0x1, 0x101, 0x5, 0x9, 0x0, 0xda89, 0x12, 0x0, 0x0, 0xfff, 0xff, 0xa21d, 0x9, 0x10005, 0x6, 0x0, 0x5, 0x6, 0x1, 0x3ffd, 0x1ff, 0x1, 0xfffffff9, 0x80000000, 0x99, 0x9, 0x8, 0x5, 0x9, 0x3, 0x8, 0x10001, 0xe59, 0x1f1, 0x20, 0x0, 0xe0000000, 0x4, 0x5, 0x7, 0xf92, 0x5, 0x80, 0x105a, 0x1000, 0x7, 0x80000001, 0x1, 0x6, 0x800]}, 0x45c) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r1, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) [ 1595.171263] ip_tables: iptables: counters copy to user failed while replacing table [ 1595.207548] ip_tables: iptables: counters copy to user failed while replacing table [ 1595.268742] ip_tables: iptables: counters copy to user failed while replacing table [ 1595.291284] audit: type=1800 audit(1589912932.815:100): pid=25190 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=16091 res=0 [ 1595.304065] ip_tables: iptables: counters copy to user failed while replacing table 18:28:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r2 = socket(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000005700)=0x400) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000005400)={'team_slave_1\x00', &(0x7f0000005ec0)=@ethtool_eeprom={0xb, 0x9, 0x1000, 0xf8, "b380d8df8e8344a8d0c26cd577621bfdd7792b1b1d6358fe5d5dee335ef22880ded31e443a5ca6fe138befc0b1fe702e0637cd44110d48b3aa299350e6ef40cda919eb7e8a8ec160c91c1d3c9546c89e441d88d1e324ec54775121f86e0fb54fe9c784b803ad82b1b378c8a91603f511e9ca1dcd7a93d2ba0611d040d9f856db76ec35e1c9bb838d32402d0d5b80b091441edfd65b3b1576d08fb33ecf33d65aaaaf286a9f2966d136813ce93d0c4169747230e0554ff0da3d99d8d92ab9a40a82475b8231ce7a5b0aa3dbf296826e73a48b9c376814e5fbe55a99c220bddb402bf01518738099bafaa6291a1c70319c0c4c399a9b29d89e"}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000007500)={@multicast1, @dev, 0x0}, &(0x7f0000007540)=0xc) sendmmsg$sock(r1, &(0x7f0000008ac0)=[{{&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="a3c1d5f4336ba06879d286f7829e83a31c2d8930aa75ff2517d6c61371021990bb68914a36fe6d969b61741f0656e3f4d91e4965cc629eca2b6281b85c460901a328ef9ce64f080aeabf1fccc7ae19d0198a8ba6449d63f7644586a7", 0x5c}], 0x1, &(0x7f0000000240)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x30}}, {{&(0x7f00000002c0)=@generic={0x8, "e78d2ba73d2dc07c0f74ce9fa295e2c1263e9127de7b6789cb1e3260217736cebf12499cc47b1800738f9e9397c8b4e709ea056e1e0a5ecabfd5d3b3ea4b1fb5a442780a7a222112117a482e0bd658c3f09cfdad5e7f10c783a12ced694bafdaee863a2499ae40de3099ab73edd9ce1fd093cdc00b956177dcf0465acb76"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000500)="ec8553fcd0f51af2ebfb5957b8959f7233390c7b2b882900fdfb1e5250f58a2d120b3fa228775b668355abf325c99f5d6a37e94f53b4e0a006ebeb4c4a1e7de1fc683bde36200de2ca422728d6cbe171bdf159d4f05ec0dabd66e36cfaf23475aaf9a84e44c7864a3ded8598068f6e58fbd299c54b33b6fe5a14f3fa280db295bdc4e99ec73084a89367e66a374bc363ca9ea8ca0cd7ab397e8aa0d40eab60ed40ee4d806dc9908d5bd209e3fb30700aa28eecf671feaf7e64e513d951cfa9a9d850f9c93d57", 0xc6}, {&(0x7f0000000340)="eda280343cd334c616d9001ea8082eaf0fe957bcfddc7aa9299c73fcaba450872490bd17351eeccd4335c91a5ccd7c3e7c9db1493bdd1f7cb8c55e986590a3ea4a92ecd11480d4e9df7ff800f58d394e213e63605e0a87824fe2bea49224d02899f838af3780cd0bcb02964515685b32c0a7f7c7567a1bd27e454b3295ab617ec8a33ab9d132ef6a070c5c249db2", 0x8e}], 0x2, &(0x7f0000000600)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x30}}, {{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x6, @empty, 0x3, 0x4}, 0x80, &(0x7f0000003940)=[{&(0x7f00000006c0)="7d12a860d9bd35cf8f167c84445e0c202c59265ebdcd86679c6d8630d003ad622df5002a82681db53a21b29071f4fb68f82bae6d4d3577a95e755d948a40cdd40107d4729e204cdda5b25a9ecd59c32560a325cc9627f08374eb9aee67c2687b72f3d655109376a8d045f1aa7efb8f04582491263e1bde0472fe5b5f7c297ebab0485b353caafa6014073184bb33414b3e8717901d6d38438d356a4890148c8a4f0b0091097a3ebc45247a0253fc5bb7e6025fa94245bf113a7348d2263671a566ba0be1c7dec0db480b8ec7c75a243a2767dfbd2722db062df53072cc0a971e74be03dc513f8f9dbc52e695757942543bb5832dec0292851e56b378aeeb5b70df1cc6f5a6a12de95f994d41d8670e6fa56762fc14ba5d3cba7b62c6a3c240088867385d7fcbaf51a9c4965cfcb2746b5386caf1894343db1b1e8ead82a56aa562a179f234d37fb597e30d6324f899c8a69bcd20a5541fa7f199ac82ac80ee81ea4942edfd1bcf84ea5b56d23a2a2532191bbee32cbbccf5337119ff55dee9d0f2a6a5ffefcea83ad77be1578fed3421499c3fcd33ec285f4627e0825464dc199c385054e80b76c73130b69f84644853a1280c1f3a12a8eecb2f7c3700307705e182755c55e6964636cb31600745223fe89b83263d945bff58e5bcd803a47aa0f3edc67822b8c6c651bfe101864cdf80fef4b603d2df79debefbb546f37f00c5a31d7427bf10d3ba1f168f63af2eb8673be2b30b0a0ffc5faa079014975283e0eeeab39491c01cdc045db51c97d5b2ab0f94c35cfa318da8e087a46f2c1db41e7255eaa38311657b3c43d6efdbdf7947ca2ed0bfb99add6d0eb2f2d513296516db4efca6dddb24afbd6d1ef1e1b8a01ada10a700ba83826cf1708b27d5e78c52281a45404b4a700717e5018bf45147e2fba113f234667806af34106c975dc136281e0fdeee80c9ce12a0c6aedb188a3dbdc104e77cd88feab2cc1f1d61ecdfbb46777e1cb2b1bb7933bdd9fa339035d02a73a8b47833ea0844912aad8a8600d28844d1bfd137f46f068969780c45f0b9280a7ee4e65afc54fbbb07721613d72e8cfe85c07e109cbf0238fe09434f36e6c703c7b66d7f210e2e67e8b59921d41e2147c47aeacbeb446b39cf586fbc8dab48cea8dbb76dc749d234cf81272ff426691371159c89ce49fac61d19e86f71f0d4f582d6a6159784d2f0bb85da374f596491237661e7843d075cf4cb3d22990a7e3e4b10603b17de2a2034c1b422c12882126d26cb6ad52c3087cd87d94a52e0d9f20bcf848f268c25a59283305ef7a983759348c6b41b0feabd973464302567d1f53eb4320e28ba68bf22722fca997487ffae01024b5c7a45099e5948861ff9d6045babd77ea6eeeb4dbc2fd81c602877cf729883206ec28326e8ba9bbea74a6fc71205abfa973a96e70cbedde95e8cf1785f66ef5c212e84b25a8bd65f667857981ec0d226fe68ee7f6ffe39bb5518693d601c9c03c557d95fc7f0fbbb61bdbaa46d010f46ca43292811d2fcea5c81980e46ca937e331808b43656cd06aff21a1f1643f515678c44af0d1098e935150e481c42e779d0b69b61536bb4939f8b3b189d2e855d472e4497718c1ec10287f531d3dcd17c171b3cdf3ccc9766cdd0bd466f67585913b5b3d4f7faa48d68c535c3958ee1ea0a62cffc956e63aaa6c1d753354de3a3212ac2dd93ab5ec94701b6ce9b1b9057bde62886b0042bcfe573852f00698585b84dead1307440d5d947131c45a6f54885bdd3ecd8b1811fff5cc98bc2a6fefb271ef793927f175cf4cf687ea6008574c9a9db5c96e7d667261c4ef65fdb3e7f47d4faa4d0bc78b61aadf0d6b4d0718ea03125c879a28e6e8b7f8b12f1d850870c0ae9030d5276fc8ee9018c643e3903b5d1cd93a01d17eda3858c16f22c2590d32fd30f264c69a4353cf1a0df945491d46ac542b85060cfcffc18d5ff89c20987fe1e8417ec8c88b2c0d2ff9387f970a1b26713efe148ab6c4a559d0d8a4a98c5e9500b6064fb8b8d36e42f5b0bf126a20d7cd0eddf69167d3cbab89a3ca4786edc538b8170a6b3030b52fbca963567e02886b6a8d0cdf7d4c63f01dffc56a735e7065d476526ecf86786f356ccd45bb1e8d5b8590abe93b5b23a1febca361cd5aa636670090f78c982d25dd3885a1a0b12db8ec8f7b03dc3c6c5a733d80eae2e3168fecfc5b26fdcae1cfdf861279af98dde98fd184297aff0b24b818c4f177c8b7fe1f852bfef96034ffeaa74f9bf4a8f31d1bda8101e47feb114910f38d03e4cb8d9527d06767995fdeb7ce28846be58e12e9bfcabd01c8dd40f61b2bb52f9c3e93441f20bb5e8383a78f29b8d8761615ee67412a8ee456c654001a2cec4b4cbda79e6eccba52d05599b68a1097db1ce9d86622e6aab7ea856fa73512159b2e7bd89e186c89f2b8b85d7fb81b5742f093ea6f63503453f3f24ef294ff47c9625c0f742c691d07ec9f812ddb0796ec371c74329decbf3bdb6aef55bae25e71165bdccb2fd972758eb75d0aeccb4417fa5a7f8d5d4b3b639a1d608aab72b7c45ceef6e3a26c0f73e799460c2c430cc9457b71802fa9497e362dd1c667ee7dfe8e35e0f0c3dee1cdfc20cf8f277d5d4d5507857937972be4c5f8e11a5a97020dd4123c351d50404edaf7d5714178401791aa94fc128e52d93c78b5dc6bb61d01bb9fcb2ea14b2c57d0d6388dfd2405b841f8b63d7d0619735744b2b51432399924a646b38eb0f36d747f9c97e3aa68395825f7b96fed96f2ab91c4cc78d31dcad85dec4d3ccd3a0e77048368fc7e3f6c3782a75d94255989c44618461bd8b3d724d8d559383beb506113fb77723c0962ffd38b0d98b72fe1ad367059d27493f58137d28a7256a5829a1e60a014cd4c7f48d35aaac1c14156313a40f0c5244231ed23028687b87b6c18c9ca09ee01f0ca5cc85983f081d94be7e7a735d196b65b39ab4ff7d28e78dff695533e83bd998c7be9cb719cbd1a4ce1ae2f7c22893aa7f39b6e960a2f13b411ebc629a00c37c32b8d0ecba0112c8cbb256b13023c5b333e11878147498c2dbafc583bfed555a5df952f9ca2dac62b63058e4152feabde7030183b697c0f79a8472f5a04a026e29c31c221448095635895b8ad9b70be5d04e5cb1f99d75530427a5992f50d4f0348fb379c17e9cf02dbb7fa9e84b19ddb9adad6c68e5f73dd1d6bd5320ef45ed9ed03402673b7104226b51405a45e8756109771f9da430a003746fcfa6a6a5fb0df69ae05612d1e900809c595b22a587afb217173075bb3fa1e8ea9f91c2c6732c5c79265e6cc1c7f6e57cc6f0935cb53166c4c85fd1d89c5eb6915824d6872fd77bdddede491ba443ae5fb0e20d22ebfd858b4eb5b0f2299044ea90c47669124f26328cbd14592bdd17266719c57d094a22270b127bf951416013197560f0590aebfa1a73a90c7b24b8cc2b02a6cd3e3ebc085f37b94a8b25c3284a5cea03c00d605b94fd28550c572895189e116bdfaf4d876df8194df706b2e070a25db984ff799d1ddadfca081b8f856b549120efa930419e8e73441afd90445f7c29a69efc4510843dc97c2cb11c020e974388d737033c6ced7772494b1b35d07b00c97df7c1850e1d77145a591fc1365cd8835280ebba6dac29b2b95949b62c203e1969ffda28f059860e5783026c4c5d1d0039c1bab10caa1c21c7d8359df3eab0298bb36a179d53d1cff370c5bb2f806e16df4255a3850349a2454629b860fdb6d51779332f376ac9c6563c3454f6e2089987e4804f9a0845ca1bb77ab7c54738d223d5cfba66133010b7cfbcd37132e1c6a3f3beea78425a360be579ecb466db3e95fcda74212a085e18a507bbea72ef9483f9c449bc37ee64962a148a3018628d9e988039426f0ae119aa5c6311946710ec6617f2b29272a1a6b8e0134459aaec7ee9fb2a0ccc3ad6fb4a5575598e66e68ea1fdc9c61bfdc117b12412a35899b2b29b542650b5f7cda8d2a7a60e8886e699cc53737eab93cb1882ffb9f08730c8b7e234657beb4819e075d9f39f773a1bd316ac4690d651c4df2d41568c3ba30a9e0af5bd19481b2044332a76f739d2258b952a89b4418372d367df9561d6256923d6dc35fa97d532a2c5e3831383a23e85c9904b60ad2609673e27d4e6b9a97cc6e35da6ad07c90cc1013440a758a4ed038999971937ebcd6f6d6115f848ba109d1fd19dc9c15eff7aba442acfc289c73c1a872929d21c31ee5d90977f60dc02e4aa2b5006d0901a41ae517ca4f6966cd7c0bf8b4cbd695b2379be76d87184c01bd76032655b9eeec65f840c15ea27e82a3af25a61c516c6fbbe729fd1439227f3eefc91c6ef71091840473cb1b4c47962ff22c21e6903eed35ab318486b410be5136a714d5d769be6a8076a0d81a72071e823d2f3ef30621771b93870c81ed9181827318359537e76fb304fedd0c37a42a24762aa90bb646c6068fbf2f803501d4c1a38a72b56decbf32816f1395978e90f904ae1234a8e8cec7c0fa4529c0b3d5ff181a4e7bc7d8d69ab733103b9e23e81956a50c92891e5f69e282b58812fa16da036eaeb06df3d35299195665e9a53f3c256a11264a346a472a5278598a0406f4abf93f398726e22b2877a88fa64e764f9c6584b9aacd1bb6516c4dcc8b941a77b259f7cce212bdf4d2fa9b93828b4dac2d975bf91a9d33f4b3973f129bce505ae138569232f6c027a5c12c1d81520b837b8c8b55408342dcb775513426211e2386432294b1d9830bec4acaf7c2d72fd051c03c0fe1c54c7bc4cc4b76d250a6d122f9f2ec52bad6ce613c7d7afac7a15e2ed4d811a6a2f9b0dd3a88782751696c99718a25e63371306768379de9d1c71bf98e43bf66e61cbac199d2201115a1d740c352a3d2a0365e01b86df6e6f22eaa68157f6ac9babcebf38aed40e58ed343eaeb26cea6dc4106d9662fd7e0cc5cbf755786e5dda471dca8a67bbd082702f28bcee7645066929278528cac41d6ad0baaa6dbafdffb195f798402305c047440ba7cd22585cad06fc0c6f68cacb42db3e945c8a4a3d8f8df5467863cad64786778b9bd3bf0c64186a1afbfcb865d66c2fd8e6a29b118dfc9afabdeec3bcbf4c083e8959cf96b685a96f6deb801a22d06e84229b846e9657a7973631709705d32f6a77a1aec47bd8d3d136eba09860fcc874f5b6f4c1ea1f0cb85759fea39b77a7a9ddbe8a33ab76d8bf876c00e4753859e8011b9032beea2b4ee1c584c4b087e30df55ad6dd176935b99b454373f97ef068fb668d549bbd9d50e4a4b88688491b2adbab742297db1ead09724f50fa3497e93e6ed156cd2c0b5f8f654d9b59df049f81ce4c29cd7033bcc4c034b991017a0ae03804d1f3e538ccd7c5d6017d5b525f9229378a695d09299cf9064441ddaf5c71f6b33d524c2e2764f1986b39e3112980636a8772b81e8aacd7fe1dc90add189eff7705b0d6bd91a0939df9d5202cc3cb7f150a343f831483b752aa21b913618a2405a1521c9b6d4c35a4c1c19df50d01f0bdb04ee48750506e592571c7aca52a094b8104c71146c360a8859e0e104dde18e660c4647c1e7a2f6f1e5bd330705e31c7be6176ee2dd2c9ce11c7ad9c8b114c3929637cafd8fe5df2f7c1b6a4e6cdf4762ba4d3b5fa71086b4de10cad9096c1913ac182d065279451339c6a3768abf615a4bea5aec6348be865e7c4ccaf8b9dd10869d3a28fd86d026a0c1977e8da783dadf47a89d0dfc6d28fd7050db0341e630836d300bfab4535f8eb24dda9553ec4e3582995", 0x1000}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000026c0)="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", 0x1000}, {&(0x7f00000036c0)="29c2950198b2fc9c2075f0f799369c398fa74663787f4ac75a958cf1037d17476108dd1f10925730f8a2c7e181ac56c0119445f5631f2ea6a4a9604b678bd98312864cbcbd9f27d76e8e12894d8ba0cf4dd90e7c9f199bf3364af216", 0x5c}, {&(0x7f0000003740)="e9369c42184c5c9a2c598851d18810c1d045b5bf98c7cb8fdbb0f1dcfcc3939f3ee2e38b56311d88663e96d9db27729c7518b13fda39c87960ae6f8e9a473c4d8dbfde968f580b21d7b62718202eec0ef91a46aec473d08d54c6565ab6f01f5d36e0dcafc5fd6512a1795e61dd3aee3d1bcdadffa14c45f9d932d07070fc0e478f694837e2d7e20ef1e5165cc2ad6712c5a69498317529df1fb03ea8e26694a54ff299308d2b82446aaa6c75047d7ad8e71192562a4e4c53370733f9eeaa5b1758462f47a98e0445a708ee3c66b3b603e609ec68e8b546bde3f3b81b0966", 0xde}, {&(0x7f0000003840)="9382f9806f0cfe7f300e45d20bcf486a264a0b2e345e0f3cfae57c6c2f52325898b2030853d4cca9c3df47f135cfb5b6b6babaa1ee3cdd1a574c48ed4018d0fa17fe4972d67bb3da82f5a578367be90c88cae1adfd83f49a0af36fa0c881855d79cdacbd31877a0e160e335fb16e4b4b2ba636c6193b73a07b4a6a32324f2a1bf9193ed29882c5e9379dc0304234814a7595d0b80e68a8683849ffd832be25c305237805797f0f1bea7dda78d3e1c52be80e5abd53aba37c8707480ee5cc459fd6", 0xc1}], 0x6, &(0x7f00000039c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x20}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x20}}], 0xf0}}, {{&(0x7f0000003ac0)=@rc, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b40)="3c8728e55e0144ddc2174e1e453bcd1eff022b722dbc4ba4e131fa30b2ebdc15a3cb8bc1ffdf167c889e9b263f50d04b6f4d1716be94d9ca33466dd5bd1f2dca9a96d8e28f5df4ad9104215783e3400c0410fffc92d4879f4c255a62291c7dbd2c6851d23787494bd6cd7bb058082564048f5782e86ebe8323b468cd28cd1bf342f4206fd0b9b2059e285e76da149983c3e273632d01ec01d696cee7ff1224274bcf333e7544feb2cdf3e0be8a781822b4206f850a7e9db3c9758259a4", 0xbd}, {&(0x7f0000003c00)="faf3c660e68420916b87c06d4e14c7c164232fe719b6a48b9a2567c2e8531f86a7e6a2b81d9fd20f418ec710cd80e8e4709a9cadfaf78993fb6eadb46a2c913ae660354d5496c248d5460b034311bf8152e1d71b7f8e8f6f5f0782f88bbb3f4a98d7ea3d0483e69af134680263abd98770ba24d2f147", 0x76}, {&(0x7f0000003c80)="cd45a3147bb6830172332003277c8f11f029608ed92993e268586b6489dd63b98f845165c8b54bdc4c7a26469d03bbfd5c615548a589ac0f5ec1ea853a909d1fa2763f8fa0fa5a33b9460e3ca20fadbf00cfc01971ba5b0b13ef386e1a2b88805102e06b808dd0ffadeefb2e0faee984ca31d9db6eb3eda8d02cad0c21012f3a", 0x80}, {&(0x7f0000003d00)="ccbed8ca90006b9a2b4045b7ef3d15fea40ed35ac6250ec0792557b9143071f80b0f440af6e56da57ce96fb3f4438e9f0be72b5244cda9a8dc96a54c8f51aab18ea7f8bbc635c584bb54b5dd3e9eeb34bbb23a76072b000ca97231bcb57d3ec5141456867a591edefa0dc3a235a991733bd674e9d183478a6ec77f7c88cf3178794b0d2c93b46be479ad60e8604e211572a1f903f4a83131b1d6d4e37a63f5923da996651b0a4eb76da966a07b08aec98c33e6b54e07bfa7e29242e4edf88c134024ba2c789b20c1c99bb7193bbac8b58f60ec69a74ad004a2166d42f32cd58cdf473c54f2e3f57f9562c7bd8da1a986c3ac8d91e0fe", 0xf6}, {&(0x7f0000003e00)="b5affb0ede2d5af5582bdf55faa36335566cd8fcb5f85bfff123dc5ae8835409eac4686c570a3ecbbf02164fe695df792c2af5e272a74c0ca59208ec6a489ba669ea454ac32b8eb1300e7621780c1eecda497240700f352aa7caaddb35bad00259077e53c0f78fd4e329356acd8ce690ca039d4475eb8dd9dcd6baa9a94037959e985ec89d6b79c75b5d1bcf743c652a41d6c00a4fe0fff861307dc6306265db03405b570d028c4104dce0642af685c7741faa29866739a3fd2be847f226cd45fc19c6a7fd013984cc7e7f8c3845c3", 0xcf}, {&(0x7f0000003f00)="331955faf0bf1aac2be69d6d1208524037e6815edd3145e4eddbdb6bd32b1fa57e321d8c636508db1ebd4b4f", 0x2c}], 0x6, &(0x7f0000003fc0)=[@txtime={{0x18, 0x1, 0x3d, 0x10000}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x60}}, {{&(0x7f0000004040)=@ipx={0x4, 0x8, 0x5820, "95a0f6c0f618", 0x1}, 0x80, &(0x7f0000004200)=[{&(0x7f00000040c0)="0d293f1f03f9a4b5ab47e45212cc997592b6da6577ab55536e107b", 0x1b}, {&(0x7f0000004100)="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", 0xfc}], 0x2, &(0x7f0000004240)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffd}}, @mark={{0x14, 0x1, 0x24, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x4f}}], 0xc0}}, {{&(0x7f0000004300)=@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x1, 0x2, "09f34442cdd522e92c16719ef82d6d5cb777c20f343ff0d116a168b1e5b2984bc76bfb96764912f5265825b42d50819e65bf746768ebdbb238976d1485c43f", 0x37}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000004380)="0d7042b75dea00c391ae8895d8d45c0bad038d93d491c8a92ca7496152c738e4b5e94fd947b91c36bb3f8a34604cc1b4bb7fb7622ecfae94d0b49fd4438e47e5911b4471e000058dc5", 0x49}, {&(0x7f0000004400)="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", 0x1000}, {&(0x7f0000005400)}, {&(0x7f0000005440)="41f375990239c0f927a637cc9fdaee5bdbeec37177a1dded6255297e20d089ebeef932b7dff08f9deb84eb60b5a5cf5616a00ce216e5837be844d667c469237918793cdeae948d3edfdbf5b62805e68ba9d087ceaa71e551bee0a709c9d94ad5479305c4331e526669f437f070d4889006e2a85ab8214b289a555ae798a81140e9764a8962209d09c1cdd6b659bce2821fa1b326e68c9254f0aede116451f8da87441c942bdd1bdabc3921c7bfb48d578346635b477252946ea1ee451e", 0xbd}, {&(0x7f0000005500)="faf266f7c4189804a84d20fa6e4c9e41dfc67b24615d899f4a7bead4c221dff5e3f8c09fb7cb1ff59df44dc3b3c54a3ab10e3a421ba303713e17c4e9f3639f226051eb93c751553ab24235b0c979d116636287573d77e12b028cd76cb19297b16255cbea30e84793f5544582f87f06c04db0b9c1f596e9f7a48e3fa935b893ea215410d044f69718eeee29d428fc1b27a1c6fb28c77e2c478485dd5b4360c9e808ac1e6be06fa7ecc00e770b91184d20a61c0e548ba3c2fff2b2dba3", 0xbc}], 0x5, &(0x7f0000005640)=[@timestamping={{0x14, 0x1, 0x25, 0x4cf45e88}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xa5a}}, @txtime={{0x18, 0x1, 0x3d, 0x4e3c7d9}}, @mark={{0x14, 0x1, 0x24, 0x10001}}], 0xa8}}, {{&(0x7f0000005e40)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005780)="7cb1bbc69c9ce78e2dd6efd840cace874ead9d1c9239f8996460a4916a32868cc56026e132831764aa99fe439cbd8bfb38b509d953", 0x35}], 0x1, &(0x7f0000005800)=[@timestamping={{0x14, 0x1, 0x25, 0xf8}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x97}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x80000004}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f0000005900)="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", 0xfe}, {&(0x7f0000005a00)="d352182729a5d3bde1f97cbd6af2f1afb23eb95980c6b2ad2e3014d18a93bda8fe2c42b68ea3e715f6e59eb987f2241dbea26d9e7443b37ae0c528040fcce31efba2b64e7e5351535e876c8517e2dc51ecd39bc9852e13e53dc2864949dc7f605fc22096cb4f35a725248b7e02e320d6b5c3737b299c2701f1f7e283446dc1d9a6d1831f5d76c8cd2f16a0f0d69cdf808e0d4faeb672013a0b09b38d10265050c3a626d2b1a47eba455c55593b0d8e25af4c66a76f322a49e8a606e397a5297334767b4e277b16a26c84860880e10d69e4674b0199c78d699dcad19e7d9f7eee15174c1a8a", 0xe5}, {&(0x7f0000005b00)="e509bebdde89d36118ea6525d52e5c8b1c3f12936ea81611a2a14223cd541bd87d3411a9a2a6ae11a25e4d50dd337f", 0x2f}, {&(0x7f0000005b40)="9666a71d08a5f14372ab585b48f3f817d7a636ddbc358862a5eaabc89d3f49959d", 0x21}, {&(0x7f0000005b80)="475e58c9721ea423e576a5264bb48210a675986c003c2c9e", 0x18}, {&(0x7f0000005bc0)="682c143d1586e0c92bb05e0a", 0xc}, {&(0x7f0000005c00)="111be97be4918ac10f4efe6e422e03e5951632ad8dbc3f3bec15c1d503a1f015be437418b5001297a5c4688fdcbb800ab7bcae7c0cdad7f95962fc95caf72084181e9afd224f3202a0157bdeee6bdb79729b611c5270fc567064f7d787ed9e44d0288aaabc689fdd8b73644a2a349bb636cb42d5c65a530c64087afa03e1", 0x7e}], 0x7}}, {{&(0x7f0000005d00)=@ax25={{0x3, @null, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005d80)}, {&(0x7f0000005dc0)="9167da516b492ffa0e5b7b82", 0xc}], 0x2, &(0x7f0000005e40)}}, {{&(0x7f0000007580)=@xdp={0x2c, 0x4, r6, 0x13}, 0x80, &(0x7f00000089c0)=[{&(0x7f0000007600)="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", 0x1000}, {&(0x7f0000008600)="50ddab0d7dc2021f1fecdaf244928ca27ae08c163e37e81efc9eaf1e5dce25f230ccc1c31a45ea74cdf733947cceaf02591d0467863b2bdfaa0024b9976125077792283027d161163b0bf0b33a96069eac572d1cbcf451a8a7d970dc3c6840d2e81dff67bb142412fc1a1ef7efc50505ebb985", 0x73}, {&(0x7f0000008680)="ce4f826b36020257950a5247335c95d13f44be6f8b20160ee3adb0d28de40ed5ef823ae0cac4d192f334e3ba682b53e21addc86f21b6151af5bf60a21efa0f4d227bdfbd5affdc23802431343fe2085f029ae5c7c7aa56455a8835490490f778564170935156f2820af0482eca35aafcfc1b8c39c709ddf89e97a319d4c43c3966a012ebd4f678fe89560e427f03ec2f8501cfe9498209c6ebd546c5e05dee56031edc95a14085be6a1de50018a39e9f87c9", 0xb2}, {&(0x7f0000008740)="6f9addd30e6a4317a05b4414851416ce26d047bb454e4bff7b5d18b5421be8c5e75ca5e48e1b79820eecb97d66dec69a4c4d94b3916788d4a535619f9bc7d3069cc4ef96ef71b872e2296c1c0787f5476ebe2e33c10ebfa5b762c7d80f6b4cdeb623563a06e64677af9569ec8d20f15a", 0x70}, {&(0x7f00000087c0)="e9186809886a261b74e0a45c442fd7f42db42f7c20827f90a2ee593921d3e105401f4cd1f0d4eb614ff2a820700ca92bee120032ed96aaec712eada8d157ecb1c95e0ba15868e35131831c672f524167bef28ee8ef35fddaceafe35f3b8060e0034ed6d512ef1d1c2ce0f3d8a87fb1f97bb585ae20a59f4825a5b09cce4af11c50c932b51d275b2364259973e72877f2ffc2551c6b109299eb64e24fe70d95d9e2566dec22f5c30ff05e42dafdf966afdfd34371afa6baa72d0a8b48b52876e819356bc68600d0eed99d52b8", 0xcc}, {&(0x7f00000088c0)="d9372e72f39f13dd1e809b3a77f2636beae1c7bb327c8d2814e1e9ffba89c33c6d318ddf13262bf28ea6830f90057518495db1980e779f80f67f289911a494cc4d6b96709526445f78c41bb91439819817c615d22ee3dc96a3a29e0877311199e70a2cd9d22bf987bab0d15edf2272643e36415a338f8267e9312f9e38c9e865d05f7a309886673dd2d46b64e62c00e4349ba1acf713421818b8961e0516519b56a064f1f4d0223d3f970c9d4ed784a2311dace9c5902805a2e20a6c774625904ba48612364615a0b265d4b9ebcadaab81e347f01f52150c8eb5789daa58c4", 0xdf}], 0x6, &(0x7f0000008a40)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x48}}], 0xa, 0x20004090) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 18:28:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'syz_tun\x00', @multicast}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) statx(r6, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) [ 1595.878854] ip_tables: iptables: counters copy to user failed while replacing table [ 1595.964726] ip_tables: iptables: counters copy to user failed while replacing table [ 1596.111819] ip_tables: iptables: counters copy to user failed while replacing table [ 1596.163490] ip_tables: iptables: counters copy to user failed while replacing table [ 1596.600207] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1596.673402] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1596.678299] CPU: 0 PID: 6331 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1596.685738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1596.695086] Call Trace: [ 1596.697672] dump_stack+0x13e/0x194 [ 1596.701296] dump_header+0x178/0x6d4 [ 1596.705006] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1596.710018] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1596.715138] ? ___ratelimit+0x50/0x519 [ 1596.719021] oom_kill_process.cold+0x10/0xae3 [ 1596.723510] ? lock_acquire+0x170/0x3f0 [ 1596.727474] ? lock_downgrade+0x6e0/0x6e0 [ 1596.731619] out_of_memory+0x2d5/0x1110 [ 1596.735589] ? oom_killer_disable+0x1c0/0x1c0 [ 1596.740093] ? mutex_trylock+0x152/0x1a0 [ 1596.744151] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1596.748995] ? warn_alloc+0xf0/0xf0 [ 1596.752622] __alloc_pages_nodemask+0x5d3/0x700 [ 1596.757284] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1596.762291] ? lock_downgrade+0x6e0/0x6e0 [ 1596.766435] alloc_pages_current+0xe7/0x1e0 [ 1596.770745] __page_cache_alloc+0x245/0x3d0 [ 1596.775065] filemap_fault+0xc18/0x1c50 [ 1596.779038] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1596.783699] ? lock_acquire+0x170/0x3f0 [ 1596.787661] ? ext4_filemap_fault+0x7c/0xb0 [ 1596.791981] ext4_filemap_fault+0x84/0xb0 [ 1596.796120] __do_fault+0xfa/0x380 [ 1596.799653] __handle_mm_fault+0x22e9/0x3280 [ 1596.804052] ? copy_page_range+0x1d70/0x1d70 [ 1596.808456] ? find_held_lock+0x2d/0x110 [ 1596.812517] handle_mm_fault+0x288/0x7a0 [ 1596.816570] __do_page_fault+0x4bc/0xb40 [ 1596.820621] ? vmalloc_fault+0xdf0/0xdf0 [ 1596.824675] ? do_page_fault+0x60/0x4f2 [ 1596.828637] ? page_fault+0x2f/0x50 [ 1596.832250] page_fault+0x45/0x50 [ 1596.835689] RIP: 0001:0x4 [ 1596.838432] RSP: 20040800:000000c42004df30 EFLAGS: 181648871fc [ 1596.905573] Mem-Info: [ 1596.914087] active_anon:229985 inactive_anon:1113643 isolated_anon:0 [ 1596.914087] active_file:35 inactive_file:0 isolated_file:0 [ 1596.914087] unevictable:14132 dirty:13 writeback:0 unstable:0 [ 1596.914087] slab_reclaimable:16043 slab_unreclaimable:116148 [ 1596.914087] mapped:59340 shmem:14712 pagetables:11221 bounce:0 [ 1596.914087] free:25139 free_pcp:1 free_cma:0 [ 1596.948094] Node 0 active_anon:901708kB inactive_anon:889208kB active_file:136kB inactive_file:0kB unevictable:48332kB isolated(anon):0kB isolated(file):0kB mapped:225184kB dirty:52kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 362496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1596.976720] Node 1 active_anon:18232kB inactive_anon:3565364kB active_file:4kB inactive_file:8kB unevictable:8196kB isolated(anon):0kB isolated(file):0kB mapped:12176kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1597.030398] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1597.100331] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1597.106962] Node 0 DMA32 free:35888kB min:36272kB low:45340kB high:54408kB active_anon:901060kB inactive_anon:884940kB active_file:0kB inactive_file:328kB unevictable:48736kB writepending:52kB present:3129332kB managed:2621260kB mlocked:48728kB kernel_stack:9760kB pagetables:17120kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1597.136860] lowmem_reserve[]: 0 0 0 0 0 [ 1597.140873] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1597.166388] lowmem_reserve[]: 0 0 0 0 0 [ 1597.170369] Node 1 Normal free:53148kB min:53612kB low:67012kB high:80412kB active_anon:18232kB inactive_anon:3565364kB active_file:4kB inactive_file:448kB unevictable:9084kB writepending:0kB present:3932160kB managed:3870192kB mlocked:9184kB kernel_stack:8608kB pagetables:27608kB bounce:0kB free_pcp:500kB local_pcp:208kB free_cma:0kB [ 1597.200974] lowmem_reserve[]: 0 0 0 0 0 [ 1597.205109] Node 0 DMA: 13*4kB (UME) 8*8kB (UME) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1597.221053] Node 0 DMA32: 570*4kB (UME) 149*8kB (UME) 22*16kB (UME) 151*32kB (UME) 160*64kB (UME) 15*128kB (UME) 10*256kB (UME) 3*512kB (M) 1*1024kB (M) 1*2048kB (M) 2*4096kB (M) = 36176kB [ 1597.238199] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1597.248913] Node 1 Normal: 85*4kB (UME) 1299*8kB (UM) 1624*16kB (UM) 405*32kB (UM) 55*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53452kB [ 1597.263489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1597.272314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1597.280943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1597.289797] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1597.298388] 16734 total pagecache pages [ 1597.302340] 0 pages in swap cache [ 1597.305849] Swap cache stats: add 0, delete 0, find 0/0 [ 1597.311186] Free swap = 0kB [ 1597.314654] Total swap = 0kB [ 1597.317664] 1965979 pages RAM [ 1597.320746] 0 pages HighMem/MovableOnly [ 1597.324749] 339053 pages reserved [ 1597.328184] 0 pages cma reserved [ 1597.331524] Out of memory: Kill process 25186 (syz-executor.4) score 1008 or sacrifice child [ 1597.340141] Killed process 25216 (syz-executor.4) total-vm:74972kB, anon-rss:18028kB, file-rss:34816kB, shmem-rss:0kB [ 1597.379206] oom_reaper: reaped process 25216 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 18:28:55 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}, @in6={0xa, 0x4e21, 0x80000001, @loopback, 0xb77f}, @in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0x1}], 0x98) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000015467f5026d3f4f0000000000000060a5c26800282900fe800000000000000000000007000000ff02000000000000001e000095000000"], 0xfca) 18:28:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0099c0f93101042a144e81f0a302a601001f005e0000006000000000000000af80000000200000000000002400486c671295d15e0000ff029ec797341e1048"], 0xfca) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$FIOCLEX(r2, 0x5451) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$peek(0x2, r3, &(0x7f0000000000)) 18:28:55 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000480)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[], 0x3c) sendfile(r2, r2, &(0x7f0000000240), 0x7ffd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) rt_sigaction(0x9, &(0x7f0000000280)={&(0x7f0000000100)="452b118fc9f094b3000000002e0f0fde8a6666f240e10b4684c60f0fec8ac4e21d2d8625b000008f29e801e4420f0f11b60fb906", 0x0, &(0x7f00000001c0)="c46163580136f2aec4a2b939520cf20f1affc4a1e1c64f82d5c401e1dc7040c4a12df2c28fa814a2379fc4229503d58f0828cc87dff4000037", {[0xfffffffffffffffa]}}, &(0x7f00000002c0)={&(0x7f0000000340)="c403fd6fbb030000000f360f01fa2666440fc44c55df00c4e2192d144e0f12d6c461b016460ec402518e9b00008020c482a9be5d27674263dac4825547bb0f000000", 0x0, &(0x7f00000003c0)="c44181e27c3527260f0d18c4e1d751c064f0430fc104e0428d7500c402a2f516f30f1c9300080000260f38f6b523cced8f360f6a99000b896865f2460f5d91d4a30339"}, 0x8, &(0x7f0000000440)) 18:28:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/675], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)={[{@block={'block', 0x3d, 0x400}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c000000000000000000000000000000000000000000000000000000030000000000000020005452414345000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028000000000000000000000000000000000000000000000000000a0000000000fefffff2"], 0x1) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000300)={0xa811, 0x8, 0xf1, 0x40000, 0x4, {}, {0x1, 0x8, 0x4, 0xd9, 0x9, 0x6, "01000001"}, 0x81, 0x4, @fd, 0x7f}) r5 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) rmdir(&(0x7f00000002c0)='./file0\x00') 18:29:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0099c0f93101042a144e81f0a302a601001f005e0000006000000000000000af80000000200000000000002400486c671295d15e0000ff029ec797341e1048"], 0xfca) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$FIOCLEX(r2, 0x5451) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$peek(0x2, r3, &(0x7f0000000000)) 18:29:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0xffff, @empty}}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000010000000000000060a5c26800282900fe800000000000000000000007000000ff020000000000000000000000000001"], 0xfca) 18:29:00 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000480)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[], 0x3c) sendfile(r2, r2, &(0x7f0000000240), 0x7ffd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) rt_sigaction(0x9, &(0x7f0000000280)={&(0x7f0000000100)="452b118fc9f094b3000000002e0f0fde8a6666f240e10b4684c60f0fec8ac4e21d2d8625b000008f29e801e4420f0f11b60fb906", 0x0, &(0x7f00000001c0)="c46163580136f2aec4a2b939520cf20f1affc4a1e1c64f82d5c401e1dc7040c4a12df2c28fa814a2379fc4229503d58f0828cc87dff4000037", {[0xfffffffffffffffa]}}, &(0x7f00000002c0)={&(0x7f0000000340)="c403fd6fbb030000000f360f01fa2666440fc44c55df00c4e2192d144e0f12d6c461b016460ec402518e9b00008020c482a9be5d27674263dac4825547bb0f000000", 0x0, &(0x7f00000003c0)="c44181e27c3527260f0d18c4e1d751c064f0430fc104e0428d7500c402a2f516f30f1c9300080000260f38f6b523cced8f360f6a99000b896865f2460f5d91d4a30339"}, 0x8, &(0x7f0000000440)) 18:29:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000020000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8f10768e20245d9ed432b4b33177ae61f3410033bf40a06ce14914e496af03abcbb185f614f28f33dbf07f873a6cce4c9872cb8af1c35c50e176097f690b3dfe1d7a19fed6d21643ee3b5d9764746821bfc1f04f7b512464b596253543051285eb70b8bf1d097229df9f911c6e7698ae934243f1b0111488b15a20455d50ede6", @ANYRES16=r3, @ANYBLOB="010000000000000000000300000008000300", @ANYRES32=r5, @ANYBLOB="0a000900aaaaaaaaaaaa0000"], 0x28}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ff"], 0x40}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x48800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000440)=[@in6={0xa, 0x4e20, 0x3, @private1, 0x6}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0x1000}, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x24}}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e20, 0x4, @local}], 0x90) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:29:00 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) set_thread_area(&(0x7f0000000100)={0x3, 0x20000800, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}) r1 = socket(0x1, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) socket(0x1, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8, 0x1b, 0xfffffffd}]}, 0x30}}, 0x4000800) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) [ 1603.097538] ip_tables: iptables: counters copy to user failed while replacing table [ 1603.151627] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 18:29:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r4) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4, @ANYRES64], 0x1) 18:29:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0001010000000000000060a5c250d537d954c5d32ed6000000000000000007000000ff0200000004000000000000000000011d87db65d89fca0a2b0a02c9fae73573dbc3b6f31a7e0f5bbf2eb41bad52e85709b0c54a3c888037ebd8ca8ff2295eec2b7f774022d2c6c4d47394d70dcf20d5c8c378f6c014906bc9cd36d5ec34321e8144862f86ef2b19978bdd90ccad09cba3d32887a8cb931c54b1df05000000fdefad8d64b82f80ce066a68f268f76565bb7f9676329a22dc66a4b7726d"], 0xfca) 18:29:00 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f00000007c0)={0x0, 0x70, 0x2, 0x6, 0x7, 0x5, 0x0, 0x200, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xf807, 0x0, @perf_config_ext={0xd1e, 0x3}, 0x980c, 0x10, 0x2, 0x6, 0x6, 0x4e, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {0x8, 0x3, 0x40, 0x8}, 0x3d, [0x26, 0x80, 0x0, 0x7f, 0x800, 0x3, 0x800, 0x7f, 0x2, 0x1, 0x5, 0x1, 0x4, 0x7ff, 0x5, 0x9, 0x3, 0xbbb8, 0x1cf0, 0x2, 0xffff, 0x3, 0x2, 0x75a25f1, 0x3f267f53, 0x8, 0x8, 0xffffff7f, 0xffffffff, 0x3f, 0x6, 0xffff, 0x3ff, 0x1ff, 0x0, 0x1, 0x5, 0x7fffffff, 0x1, 0x6, 0xfffffff7, 0x0, 0x5000000, 0x3, 0x75, 0x20, 0x90bf, 0x8, 0xffff17d3, 0xff, 0x1, 0x7, 0xfffffb5c, 0xa823, 0x3f, 0x5, 0x7, 0x1, 0x527f, 0xa, 0xf3, 0x84, 0x400, 0xff], [0x1, 0x8, 0x101, 0x10000, 0x3, 0x80000, 0xf6, 0x1, 0x5, 0xffff0000, 0xfffffffb, 0x3, 0x7, 0xff, 0xc35b, 0x6, 0x1ff, 0x2, 0xffffffe1, 0x7f, 0x401, 0xc71e, 0x8, 0x6, 0x6, 0x2000000, 0x4, 0x40, 0x7fffffff, 0xb4a, 0x400, 0xfffffff9, 0x3, 0x2, 0x0, 0xfffffffd, 0x400, 0x9, 0x4, 0x3, 0x6, 0x3, 0x2a, 0x6, 0xffffff01, 0x32, 0x5, 0x94, 0x0, 0x8, 0x2, 0x8000, 0x40, 0xfffffff9, 0xfff, 0x1, 0xd17f, 0x4, 0x7, 0x9, 0x3, 0x1, 0x8, 0x1], [0x101, 0xb7, 0x40, 0x7c2, 0x6, 0x5d, 0xf6, 0x8, 0x7, 0x2, 0x1, 0x5a7, 0x6, 0x2, 0x3, 0x4, 0x3, 0x5, 0x7, 0xfffffe00, 0x0, 0x200, 0x3ff, 0x7fffffff, 0x1, 0x4, 0x10000, 0x2, 0x1f, 0x1, 0x0, 0x3ff, 0xdf1a, 0x6, 0x8, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0xf515, 0x80000001, 0x10, 0x47fe9da1, 0x401, 0x0, 0x6, 0x7fffffff, 0x0, 0x8, 0xfffff24b, 0x7, 0x0, 0x3ff, 0x8, 0xffff, 0xffff, 0xb21, 0x6b, 0x3, 0x7, 0x2, 0x401, 0x1a18], [0x7f, 0x1, 0x4, 0xff, 0x1f, 0x8, 0x6, 0x3, 0x7, 0x400, 0x5, 0x7f, 0x6, 0x0, 0x1, 0x101, 0x5, 0x9, 0x0, 0xda89, 0x12, 0x0, 0x0, 0xfff, 0xff, 0xa21d, 0x9, 0x10005, 0x6, 0x0, 0x5, 0x6, 0x1, 0x3ffd, 0x1ff, 0x1, 0xfffffff9, 0x80000000, 0x99, 0x9, 0x8, 0x5, 0x9, 0x3, 0x8, 0x10001, 0xe59, 0x1f1, 0x20, 0x0, 0xe0000000, 0x4, 0x5, 0x7, 0xf92, 0x5, 0x80, 0x105a, 0x1000, 0x7, 0x80000001, 0x1, 0x6, 0x800]}, 0x45c) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r1, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) [ 1603.345422] ip_tables: iptables: counters copy to user failed while replacing table [ 1603.475259] ip_tables: iptables: counters copy to user failed while replacing table 18:29:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x3, 0xb, 0x4, 0x4000000, 0x1, {r1, r2/1000+60000}, {0x4, 0x1, 0x7, 0x5, 0xff, 0x4, "daff6882"}, 0x2, 0x3, @userptr=0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x80, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000001c0)={r8, 0x1, 0x6, @random="27f4f3cc9e67"}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000010000000000000060a5c26800282900fe80000000000007000000ff020000000000000e000000000000010000000000"], 0xfca) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f8, 0x100, 0x70bd28, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x840a1}, 0x800) r9 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) connect$bt_sco(r9, &(0x7f0000000240)={0x1f, @none}, 0x8) [ 1603.665048] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1603.808213] modprobe invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1603.848829] modprobe cpuset=/ mems_allowed=0-1 [ 1603.856441] CPU: 1 PID: 25317 Comm: modprobe Not tainted 4.14.180-syzkaller #0 [ 1603.863801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1603.873137] Call Trace: [ 1603.875713] dump_stack+0x13e/0x194 [ 1603.879322] dump_header+0x178/0x6d4 [ 1603.883014] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1603.888009] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1603.893087] ? ___ratelimit+0x50/0x519 [ 1603.897039] oom_kill_process.cold+0x10/0xae3 [ 1603.901511] ? lock_downgrade+0x6e0/0x6e0 [ 1603.905638] out_of_memory+0x2d5/0x1110 [ 1603.909599] ? oom_killer_disable+0x1c0/0x1c0 [ 1603.914071] ? mutex_trylock+0x152/0x1a0 [ 1603.918109] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1603.922936] ? warn_alloc+0xf0/0xf0 [ 1603.926543] __alloc_pages_nodemask+0x5d3/0x700 [ 1603.931187] ? __anon_vma_prepare+0x172/0x370 [ 1603.935658] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1603.940652] ? anon_vma_interval_tree_insert+0x211/0x3e0 [ 1603.946079] alloc_pages_vma+0xc2/0x4a0 [ 1603.950046] __handle_mm_fault+0x17b6/0x3280 [ 1603.954435] ? copy_page_range+0x1d70/0x1d70 [ 1603.958829] ? find_held_lock+0x2d/0x110 [ 1603.962872] handle_mm_fault+0x288/0x7a0 [ 1603.966910] __do_page_fault+0x4bc/0xb40 [ 1603.970947] ? vmalloc_fault+0xdf0/0xdf0 [ 1603.974996] ? do_page_fault+0x60/0x4f2 [ 1603.978947] ? page_fault+0x2f/0x50 [ 1603.982548] page_fault+0x45/0x50 [ 1603.985977] RIP: 7ea9df20:0x7f9d7ea9c000 [ 1603.990011] RSP: 0001:00007ffda3389f60 EFLAGS: 7ffda3389f70 [ 1603.996008] Mem-Info: [ 1604.019487] active_anon:230020 inactive_anon:1109145 isolated_anon:0 [ 1604.019487] active_file:258 inactive_file:302 isolated_file:27 [ 1604.019487] unevictable:19508 dirty:10 writeback:0 unstable:0 [ 1604.019487] slab_reclaimable:16000 slab_unreclaimable:114768 [ 1604.019487] mapped:60837 shmem:14712 pagetables:11253 bounce:0 [ 1604.019487] free:24868 free_pcp:265 free_cma:0 [ 1604.072188] Node 0 active_anon:901968kB inactive_anon:882892kB active_file:436kB inactive_file:796kB unevictable:56744kB isolated(anon):0kB isolated(file):108kB mapped:228924kB dirty:40kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 362496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1604.109517] Node 1 active_anon:18112kB inactive_anon:3553688kB active_file:20kB inactive_file:28kB unevictable:21288kB isolated(anon):0kB isolated(file):0kB mapped:12824kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1604.142383] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1604.178296] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1604.183714] Node 0 DMA32 free:37972kB min:36272kB low:45340kB high:54408kB active_anon:901320kB inactive_anon:878624kB active_file:188kB inactive_file:140kB unevictable:56744kB writepending:40kB present:3129332kB managed:2621260kB mlocked:56744kB kernel_stack:9760kB pagetables:17024kB bounce:0kB free_pcp:616kB local_pcp:48kB free_cma:0kB [ 1604.219324] lowmem_reserve[]: 0 0 0 0 0 [ 1604.223555] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1604.257017] lowmem_reserve[]: 0 0 0 0 0 [ 1604.261034] Node 1 Normal free:53324kB min:53612kB low:67012kB high:80412kB active_anon:18112kB inactive_anon:3553688kB active_file:20kB inactive_file:28kB unevictable:21288kB writepending:0kB present:3932160kB managed:3870192kB mlocked:21288kB kernel_stack:8736kB pagetables:27832kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1604.299729] lowmem_reserve[]: 0 0 0 0 0 [ 1604.325511] Node 0 DMA: 13*4kB (UME) 8*8kB (UME) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1604.354678] Node 0 DMA32: 770*4kB (UME) 321*8kB (UME) 220*16kB (UME) 175*32kB (UME) 139*64kB (UME) 5*128kB (UE) 5*256kB (UME) 3*512kB (M) 1*1024kB (M) 1*2048kB (M) 2*4096kB (M) = 38384kB [ 1604.380895] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1604.391854] Node 1 Normal: 117*4kB (UME) 1191*8kB (UM) 1397*16kB (UM) 523*32kB (UM) 63*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53372kB [ 1604.416077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1604.426749] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1604.438205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1604.449380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1604.460763] 17338 total pagecache pages [ 1604.468923] 0 pages in swap cache [ 1604.472522] Swap cache stats: add 0, delete 0, find 0/0 [ 1604.487695] Free swap = 0kB [ 1604.496348] Total swap = 0kB [ 1604.499827] 1965979 pages RAM [ 1604.515691] 0 pages HighMem/MovableOnly [ 1604.519784] 339053 pages reserved [ 1604.527240] 0 pages cma reserved [ 1604.530610] Out of memory: Kill process 25269 (syz-executor.4) score 1007 or sacrifice child [ 1604.552132] Killed process 25269 (syz-executor.4) total-vm:75104kB, anon-rss:17936kB, file-rss:39360kB, shmem-rss:0kB [ 1604.666345] oom_reaper: reaped process 25269 (syz-executor.4), now anon-rss:18020kB, file-rss:5680kB, shmem-rss:0kB [ 1604.934643] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1609.913595] NOHZ: local_softirq_pending 08 18:29:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r0) r1 = dup2(0xffffffffffffffff, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x2, {0xa, 0x4e23, 0x0, @mcast1, 0xff}, r4}}, 0x38) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x200, 0x305001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000040)=0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:29:12 executing program 1: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f00000007c0)={0x0, 0x70, 0x2, 0x6, 0x7, 0x5, 0x0, 0x200, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xf807, 0x0, @perf_config_ext={0xd1e, 0x3}, 0x980c, 0x10, 0x2, 0x6, 0x6, 0x4e, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {0x8, 0x3, 0x40, 0x8}, 0x3d, [0x26, 0x80, 0x0, 0x7f, 0x800, 0x3, 0x800, 0x7f, 0x2, 0x1, 0x5, 0x1, 0x4, 0x7ff, 0x5, 0x9, 0x3, 0xbbb8, 0x1cf0, 0x2, 0xffff, 0x3, 0x2, 0x75a25f1, 0x3f267f53, 0x8, 0x8, 0xffffff7f, 0xffffffff, 0x3f, 0x6, 0xffff, 0x3ff, 0x1ff, 0x0, 0x1, 0x5, 0x7fffffff, 0x1, 0x6, 0xfffffff7, 0x0, 0x5000000, 0x3, 0x75, 0x20, 0x90bf, 0x8, 0xffff17d3, 0xff, 0x1, 0x7, 0xfffffb5c, 0xa823, 0x3f, 0x5, 0x7, 0x1, 0x527f, 0xa, 0xf3, 0x84, 0x400, 0xff], [0x1, 0x8, 0x101, 0x10000, 0x3, 0x80000, 0xf6, 0x1, 0x5, 0xffff0000, 0xfffffffb, 0x3, 0x7, 0xff, 0xc35b, 0x6, 0x1ff, 0x2, 0xffffffe1, 0x7f, 0x401, 0xc71e, 0x8, 0x6, 0x6, 0x2000000, 0x4, 0x40, 0x7fffffff, 0xb4a, 0x400, 0xfffffff9, 0x3, 0x2, 0x0, 0xfffffffd, 0x400, 0x9, 0x4, 0x3, 0x6, 0x3, 0x2a, 0x6, 0xffffff01, 0x32, 0x5, 0x94, 0x0, 0x8, 0x2, 0x8000, 0x40, 0xfffffff9, 0xfff, 0x1, 0xd17f, 0x4, 0x7, 0x9, 0x3, 0x1, 0x8, 0x1], [0x101, 0xb7, 0x40, 0x7c2, 0x6, 0x5d, 0xf6, 0x8, 0x7, 0x2, 0x1, 0x5a7, 0x6, 0x2, 0x3, 0x4, 0x3, 0x5, 0x7, 0xfffffe00, 0x0, 0x200, 0x3ff, 0x7fffffff, 0x1, 0x4, 0x10000, 0x2, 0x1f, 0x1, 0x0, 0x3ff, 0xdf1a, 0x6, 0x8, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0xf515, 0x80000001, 0x10, 0x47fe9da1, 0x401, 0x0, 0x6, 0x7fffffff, 0x0, 0x8, 0xfffff24b, 0x7, 0x0, 0x3ff, 0x8, 0xffff, 0xffff, 0xb21, 0x6b, 0x3, 0x7, 0x2, 0x401, 0x1a18], [0x7f, 0x1, 0x4, 0xff, 0x1f, 0x8, 0x6, 0x3, 0x7, 0x400, 0x5, 0x7f, 0x6, 0x0, 0x1, 0x101, 0x5, 0x9, 0x0, 0xda89, 0x12, 0x0, 0x0, 0xfff, 0xff, 0xa21d, 0x9, 0x10005, 0x6, 0x0, 0x5, 0x6, 0x1, 0x3ffd, 0x1ff, 0x1, 0xfffffff9, 0x80000000, 0x99, 0x9, 0x8, 0x5, 0x9, 0x3, 0x8, 0x10001, 0xe59, 0x1f1, 0x20, 0x0, 0xe0000000, 0x4, 0x5, 0x7, 0xf92, 0x5, 0x80, 0x105a, 0x1000, 0x7, 0x80000001, 0x1, 0x6, 0x800]}, 0x45c) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r1, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) 18:29:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x400000, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000080)={0x84, 0x5, 0x80}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000100000000bc0d99b8a5c26800282900fe80002f690000000000000007000000ff0200000000000000000000000000013679b7830fbad0c57367d6257a607e66e826de55083c6f3a12e0acb3f0f6905f2df606ef7f0e06baaa0ff2a39ee5739a0e5a3d2079b9a692016a7370a493c964757dd59ad06ab7c4687498358ee8410cdc83fb780f2cda55e72e4ad79135058f910ec0da3d83180738a05c7dd6aa108261489275ee4322ecee0f0caeaeedcd96adedfd26a65d6e71cd4cd8e5c0b02371e4c96fbcbaa70f191d368592b92d83b0be44809f1b5bec34626e0d7a"], 0xfca) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) close(r3) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000180)=""/239) 18:29:12 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000480)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[], 0x3c) sendfile(r2, r2, &(0x7f0000000240), 0x7ffd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) rt_sigaction(0x9, &(0x7f0000000280)={&(0x7f0000000100)="452b118fc9f094b3000000002e0f0fde8a6666f240e10b4684c60f0fec8ac4e21d2d8625b000008f29e801e4420f0f11b60fb906", 0x0, &(0x7f00000001c0)="c46163580136f2aec4a2b939520cf20f1affc4a1e1c64f82d5c401e1dc7040c4a12df2c28fa814a2379fc4229503d58f0828cc87dff4000037", {[0xfffffffffffffffa]}}, &(0x7f00000002c0)={&(0x7f0000000340)="c403fd6fbb030000000f360f01fa2666440fc44c55df00c4e2192d144e0f12d6c461b016460ec402518e9b00008020c482a9be5d27674263dac4825547bb0f000000", 0x0, &(0x7f00000003c0)="c44181e27c3527260f0d18c4e1d751c064f0430fc104e0428d7500c402a2f516f30f1c9300080000260f38f6b523cced8f360f6a99000b896865f2460f5d91d4a30339"}, 0x8, &(0x7f0000000440)) 18:29:13 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in=@remote, @in6=@dev}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="5568cb1e3a00000725bd7000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="f9cf2a0000000000021004003cd4a91d3cb31ca1d8a42ee01e38fd879027a70b40fa382d32b24a228ef5dc83bc84fb120bfbcd943f19064516c536235f615b8c78289dba94aca2624b579a0de217d20e02e553d44ee62fbe5ee7e321595f993341c565babc8f58e4a6255ef76efb84e138e1aab2e675be42f4ba48e06fa6565fe6695ada70cd25339a9ad35a7bc4c9f945ae29cbb2661a6ce044a016e15455e0a5ee00fbcd4a7d4e38c543325b892f55e36a19514265149ff525c2b88cd44f80e0a2ccae4687110d5d5420dd6162d51e88212465e5fad8d80433240d68c852e896634532b60e3b8e02692558bd9ac2", @ANYRES32=r3, @ANYBLOB="08002e0004000000"], 0x30}}, 0x0) 18:29:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="81c30434", @ANYRES16=r6, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x60040004}, 0x40000) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000ff"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_TOS={0x5, 0x5, 0xef}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 1615.640226] ip_tables: iptables: counters copy to user failed while replacing table 18:29:13 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:29:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000010000000000000060a5c26800282900fe800000000000000000000007000000ff020000000000000000000000000001"], 0xfca) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000000)={0x3f, 0x81}) [ 1615.790867] ip_tables: iptables: counters copy to user failed while replacing table [ 1615.913035] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1615.968091] systemd-journal cpuset=/ mems_allowed=0-1 [ 1616.002599] CPU: 1 PID: 3637 Comm: systemd-journal Not tainted 4.14.180-syzkaller #0 [ 1616.010523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1616.019870] Call Trace: [ 1616.022458] dump_stack+0x13e/0x194 [ 1616.026083] dump_header+0x178/0x6d4 [ 1616.029792] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1616.034804] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1616.039899] ? ___ratelimit+0x50/0x519 [ 1616.043785] oom_kill_process.cold+0x10/0xae3 [ 1616.048272] ? lock_downgrade+0x6e0/0x6e0 [ 1616.052413] out_of_memory+0x2d5/0x1110 [ 1616.056380] ? oom_killer_disable+0x1c0/0x1c0 [ 1616.060873] ? mutex_trylock+0x152/0x1a0 [ 1616.064963] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1616.069813] ? warn_alloc+0xf0/0xf0 [ 1616.073434] ? find_held_lock+0x2d/0x110 [ 1616.077490] ? fs_reclaim_acquire+0x10/0x10 [ 1616.081826] __alloc_pages_nodemask+0x5d3/0x700 [ 1616.086508] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1616.091325] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1616.096314] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1616.101308] ? cache_grow_begin+0x32d/0x410 [ 1616.105605] cache_grow_begin+0x7b/0x410 [ 1616.109679] fallback_alloc+0x205/0x2b0 [ 1616.113632] kmem_cache_alloc+0x1ea/0x770 [ 1616.117755] ? memcpy+0x35/0x50 [ 1616.121017] getname_flags+0xc8/0x560 [ 1616.124798] user_path_at_empty+0x2a/0x50 [ 1616.128940] SyS_access+0x21a/0x680 [ 1616.132543] ? SyS_faccessat+0x680/0x680 [ 1616.136600] ? do_syscall_64+0x4c/0x640 [ 1616.140554] ? SyS_faccessat+0x680/0x680 [ 1616.144591] do_syscall_64+0x1d5/0x640 [ 1616.148469] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1616.153652] RIP: 0033:0x7f033b3499c7 [ 1616.157352] RSP: 002b:00007ffec03683d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1616.165073] RAX: ffffffffffffffda RBX: 00007ffec036b2f0 RCX: 00007f033b3499c7 [ 1616.172356] RDX: 00007f033bdbaa00 RSI: 0000000000000000 RDI: 000055b43de4a9a3 [ 1616.179608] RBP: 00007ffec0368410 R08: 0000000000000000 R09: 0000000000000000 [ 1616.186853] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1616.194099] R13: 0000000000000000 R14: 00007ffec036b2f0 R15: 00007ffec0368900 [ 1616.214894] Mem-Info: [ 1616.217346] active_anon:230108 inactive_anon:1113708 isolated_anon:0 [ 1616.217346] active_file:34 inactive_file:7 isolated_file:0 [ 1616.217346] unevictable:15973 dirty:0 writeback:0 unstable:0 [ 1616.217346] slab_reclaimable:15973 slab_unreclaimable:114172 [ 1616.217346] mapped:60277 shmem:14712 pagetables:11351 bounce:0 [ 1616.217346] free:25016 free_pcp:1 free_cma:0 [ 1616.258892] Node 0 active_anon:902568kB inactive_anon:891036kB active_file:132kB inactive_file:20kB unevictable:50940kB isolated(anon):0kB isolated(file):0kB mapped:226388kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 362496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1616.296504] Node 1 active_anon:17864kB inactive_anon:3563796kB active_file:4kB inactive_file:8kB unevictable:12952kB isolated(anon):0kB isolated(file):0kB mapped:14720kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1616.336428] Node 0 DMA free:10420kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1616.370811] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1616.394632] Node 0 DMA32 free:36140kB min:36272kB low:45340kB high:54408kB active_anon:901920kB inactive_anon:886768kB active_file:244kB inactive_file:28kB unevictable:50760kB writepending:0kB present:3129332kB managed:2621260kB mlocked:50748kB kernel_stack:9760kB pagetables:17396kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1616.449663] lowmem_reserve[]: 0 0 0 0 0 [ 1616.460488] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1616.497810] lowmem_reserve[]: 0 0 0 0 0 [ 1616.511460] Node 1 Normal free:53508kB min:53612kB low:67012kB high:80412kB active_anon:17864kB inactive_anon:3563796kB active_file:0kB inactive_file:36kB unevictable:12952kB writepending:0kB present:3932160kB managed:3870192kB mlocked:12944kB kernel_stack:8896kB pagetables:27852kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1616.581702] lowmem_reserve[]: 0 0 0 0 0 [ 1616.613900] Node 0 DMA: 13*4kB (UME) 6*8kB (UME) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10420kB [ 1616.648688] Node 0 DMA32: 367*4kB (UME) 349*8kB (UE) 142*16kB (UE) 183*32kB (UME) 138*64kB (UE) 5*128kB (UE) 5*256kB (UME) 3*512kB (M) 1*1024kB (M) 1*2048kB (M) 2*4096kB (M) = 35940kB [ 1616.690331] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1616.747776] Node 1 Normal: 63*4kB (UME) 977*8kB (UM) 1436*16kB (UM) 550*32kB (UM) 72*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53508kB [ 1616.809501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1616.820641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1616.864789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1616.928822] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1616.944105] 17105 total pagecache pages [ 1616.948094] 0 pages in swap cache [ 1616.951532] Swap cache stats: add 0, delete 0, find 0/0 [ 1616.988343] Free swap = 0kB [ 1616.991385] Total swap = 0kB [ 1616.994487] 1965979 pages RAM [ 1616.997614] 0 pages HighMem/MovableOnly [ 1617.001627] 339053 pages reserved [ 1617.005169] 0 pages cma reserved [ 1617.008613] Out of memory: Kill process 25324 (syz-executor.2) score 1007 or sacrifice child [ 1617.017248] Killed process 25324 (syz-executor.2) total-vm:74972kB, anon-rss:18380kB, file-rss:34624kB, shmem-rss:0kB [ 1617.059257] oom_reaper: reaped process 25324 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1617.215503] ip_tables: iptables: counters copy to user failed while replacing table [ 1617.229044] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1617.260744] in:imklog cpuset=/ mems_allowed=0-1 [ 1617.274927] CPU: 1 PID: 6036 Comm: in:imklog Not tainted 4.14.180-syzkaller #0 [ 1617.282303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1617.291661] Call Trace: [ 1617.294245] dump_stack+0x13e/0x194 [ 1617.297874] dump_header+0x178/0x6d4 [ 1617.301592] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1617.306704] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1617.311801] ? ___ratelimit+0x50/0x519 [ 1617.315691] oom_kill_process.cold+0x10/0xae3 [ 1617.320185] ? lock_acquire+0x170/0x3f0 [ 1617.324154] ? lock_downgrade+0x6e0/0x6e0 [ 1617.328300] out_of_memory+0x2d5/0x1110 [ 1617.332276] ? oom_killer_disable+0x1c0/0x1c0 [ 1617.336772] ? mutex_trylock+0x152/0x1a0 [ 1617.340826] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1617.345675] ? warn_alloc+0xf0/0xf0 [ 1617.349303] __alloc_pages_nodemask+0x5d3/0x700 [ 1617.353965] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1617.358974] ? lock_downgrade+0x6e0/0x6e0 [ 1617.363128] alloc_pages_current+0xe7/0x1e0 [ 1617.367440] __page_cache_alloc+0x245/0x3d0 [ 1617.371753] filemap_fault+0xc18/0x1c50 [ 1617.375735] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1617.380391] ? lock_acquire+0x170/0x3f0 [ 1617.384343] ? ext4_filemap_fault+0x7c/0xb0 [ 1617.388641] ext4_filemap_fault+0x84/0xb0 [ 1617.392762] __do_fault+0xfa/0x380 [ 1617.396278] __handle_mm_fault+0x22e9/0x3280 [ 1617.400665] ? copy_page_range+0x1d70/0x1d70 [ 1617.405050] ? find_held_lock+0x2d/0x110 [ 1617.409212] handle_mm_fault+0x288/0x7a0 [ 1617.413252] __do_page_fault+0x4bc/0xb40 [ 1617.417289] ? vmalloc_fault+0xdf0/0xdf0 [ 1617.421348] ? do_page_fault+0x60/0x4f2 [ 1617.425297] ? page_fault+0x2f/0x50 [ 1617.428908] page_fault+0x45/0x50 [ 1617.432349] RIP: 1fa0:0x1f9f [ 1617.435363] RSP: 0000:0000557aad5409d0 EFLAGS: 7f204dbb6da0 [ 1617.443955] Mem-Info: [ 1617.456752] active_anon:230055 inactive_anon:1111195 isolated_anon:0 [ 1617.456752] active_file:121 inactive_file:320 isolated_file:39 [ 1617.456752] unevictable:17643 dirty:20 writeback:0 unstable:0 [ 1617.456752] slab_reclaimable:15965 slab_unreclaimable:114473 [ 1617.456752] mapped:60619 shmem:14712 pagetables:11332 bounce:0 [ 1617.456752] free:25047 free_pcp:242 free_cma:0 [ 1617.493494] Node 0 active_anon:902492kB inactive_anon:891084kB active_file:448kB inactive_file:1184kB unevictable:50672kB isolated(anon):0kB isolated(file):156kB mapped:227640kB dirty:116kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 362496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1617.522677] Node 1 active_anon:17728kB inactive_anon:3553696kB active_file:36kB inactive_file:0kB unevictable:19900kB isolated(anon):0kB isolated(file):0kB mapped:14836kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1617.550591] Node 0 DMA free:10420kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1617.585353] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1617.595195] Node 0 DMA32 free:35728kB min:36272kB low:45340kB high:54408kB active_anon:901844kB inactive_anon:886816kB active_file:716kB inactive_file:936kB unevictable:51680kB writepending:88kB present:3129332kB managed:2621260kB mlocked:51668kB kernel_stack:9728kB pagetables:17316kB bounce:0kB free_pcp:160kB local_pcp:120kB free_cma:0kB [ 1617.632704] lowmem_reserve[]: 0 0 0 0 0 [ 1617.636796] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1617.662331] lowmem_reserve[]: 0 0 0 0 0 [ 1617.666321] Node 1 Normal free:53056kB min:53612kB low:67012kB high:80412kB active_anon:17736kB inactive_anon:3553696kB active_file:0kB inactive_file:0kB unevictable:19892kB writepending:0kB present:3932160kB managed:3870192kB mlocked:19892kB kernel_stack:8960kB pagetables:27856kB bounce:0kB free_pcp:732kB local_pcp:180kB free_cma:0kB [ 1617.696761] lowmem_reserve[]: 0 0 0 0 0 [ 1617.700761] Node 0 DMA: 13*4kB (UME) 6*8kB (UME) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10420kB [ 1617.716795] Node 0 DMA32: 395*4kB (UE) 457*8kB (UME) 167*16kB (UME) 184*32kB (UE) 139*64kB (UME) 5*128kB (UE) 4*256kB (UE) 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 2*4096kB (M) = 36132kB [ 1617.733395] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1617.744838] Node 1 Normal: 2*4kB (ME) 1281*8kB (UM) 1259*16kB (UM) 544*32kB (UM) 74*64kB (UM) 4*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53056kB [ 1617.759698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1617.768574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1617.777179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1617.786035] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1617.794626] 17137 total pagecache pages [ 1617.798579] 0 pages in swap cache [ 1617.802042] Swap cache stats: add 0, delete 0, find 0/0 [ 1617.807386] Free swap = 0kB [ 1617.810374] Total swap = 0kB [ 1617.813786] 1965979 pages RAM [ 1617.816882] 0 pages HighMem/MovableOnly [ 1617.820831] 339053 pages reserved [ 1617.824308] 0 pages cma reserved [ 1617.827650] Out of memory: Kill process 25335 (syz-executor.1) score 1007 or sacrifice child [ 1617.837880] Killed process 25335 (syz-executor.1) total-vm:74972kB, anon-rss:17944kB, file-rss:39364kB, shmem-rss:0kB [ 1618.125090] ip_tables: iptables: counters copy to user failed while replacing table 18:29:15 executing program 1: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f00000007c0)={0x0, 0x70, 0x2, 0x6, 0x7, 0x5, 0x0, 0x200, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xf807, 0x0, @perf_config_ext={0xd1e, 0x3}, 0x980c, 0x10, 0x2, 0x6, 0x6, 0x4e, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {0x8, 0x3, 0x40, 0x8}, 0x3d, [0x26, 0x80, 0x0, 0x7f, 0x800, 0x3, 0x800, 0x7f, 0x2, 0x1, 0x5, 0x1, 0x4, 0x7ff, 0x5, 0x9, 0x3, 0xbbb8, 0x1cf0, 0x2, 0xffff, 0x3, 0x2, 0x75a25f1, 0x3f267f53, 0x8, 0x8, 0xffffff7f, 0xffffffff, 0x3f, 0x6, 0xffff, 0x3ff, 0x1ff, 0x0, 0x1, 0x5, 0x7fffffff, 0x1, 0x6, 0xfffffff7, 0x0, 0x5000000, 0x3, 0x75, 0x20, 0x90bf, 0x8, 0xffff17d3, 0xff, 0x1, 0x7, 0xfffffb5c, 0xa823, 0x3f, 0x5, 0x7, 0x1, 0x527f, 0xa, 0xf3, 0x84, 0x400, 0xff], [0x1, 0x8, 0x101, 0x10000, 0x3, 0x80000, 0xf6, 0x1, 0x5, 0xffff0000, 0xfffffffb, 0x3, 0x7, 0xff, 0xc35b, 0x6, 0x1ff, 0x2, 0xffffffe1, 0x7f, 0x401, 0xc71e, 0x8, 0x6, 0x6, 0x2000000, 0x4, 0x40, 0x7fffffff, 0xb4a, 0x400, 0xfffffff9, 0x3, 0x2, 0x0, 0xfffffffd, 0x400, 0x9, 0x4, 0x3, 0x6, 0x3, 0x2a, 0x6, 0xffffff01, 0x32, 0x5, 0x94, 0x0, 0x8, 0x2, 0x8000, 0x40, 0xfffffff9, 0xfff, 0x1, 0xd17f, 0x4, 0x7, 0x9, 0x3, 0x1, 0x8, 0x1], [0x101, 0xb7, 0x40, 0x7c2, 0x6, 0x5d, 0xf6, 0x8, 0x7, 0x2, 0x1, 0x5a7, 0x6, 0x2, 0x3, 0x4, 0x3, 0x5, 0x7, 0xfffffe00, 0x0, 0x200, 0x3ff, 0x7fffffff, 0x1, 0x4, 0x10000, 0x2, 0x1f, 0x1, 0x0, 0x3ff, 0xdf1a, 0x6, 0x8, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0xf515, 0x80000001, 0x10, 0x47fe9da1, 0x401, 0x0, 0x6, 0x7fffffff, 0x0, 0x8, 0xfffff24b, 0x7, 0x0, 0x3ff, 0x8, 0xffff, 0xffff, 0xb21, 0x6b, 0x3, 0x7, 0x2, 0x401, 0x1a18], [0x7f, 0x1, 0x4, 0xff, 0x1f, 0x8, 0x6, 0x3, 0x7, 0x400, 0x5, 0x7f, 0x6, 0x0, 0x1, 0x101, 0x5, 0x9, 0x0, 0xda89, 0x12, 0x0, 0x0, 0xfff, 0xff, 0xa21d, 0x9, 0x10005, 0x6, 0x0, 0x5, 0x6, 0x1, 0x3ffd, 0x1ff, 0x1, 0xfffffff9, 0x80000000, 0x99, 0x9, 0x8, 0x5, 0x9, 0x3, 0x8, 0x10001, 0xe59, 0x1f1, 0x20, 0x0, 0xe0000000, 0x4, 0x5, 0x7, 0xf92, 0x5, 0x80, 0x105a, 0x1000, 0x7, 0x80000001, 0x1, 0x6, 0x800]}, 0x45c) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r1, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) 18:29:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000480)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[], 0x3c) sendfile(r2, r2, &(0x7f0000000240), 0x7ffd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) rt_sigaction(0x9, &(0x7f0000000280)={&(0x7f0000000100)="452b118fc9f094b3000000002e0f0fde8a6666f240e10b4684c60f0fec8ac4e21d2d8625b000008f29e801e4420f0f11b60fb906", 0x0, &(0x7f00000001c0)="c46163580136f2aec4a2b939520cf20f1affc4a1e1c64f82d5c401e1dc7040c4a12df2c28fa814a2379fc4229503d58f0828cc87dff4000037", {[0xfffffffffffffffa]}}, &(0x7f00000002c0)={&(0x7f0000000340)="c403fd6fbb030000000f360f01fa2666440fc44c55df00c4e2192d144e0f12d6c461b016460ec402518e9b00008020c482a9be5d27674263dac4825547bb0f000000", 0x0, &(0x7f00000003c0)="c44181e27c3527260f0d18c4e1d751c064f0430fc104e0428d7500c402a2f516f30f1c9300080000260f38f6b523cced8f360f6a99000b896865f2460f5d91d4a30339"}, 0x8, &(0x7f0000000440)) 18:29:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000000)=""/164, 0xa4, 0x5, 0x5db4, 0x6, 0xfffffff7, 0x80000000}}, 0x120) [ 1618.270796] ip_tables: iptables: counters copy to user failed while replacing table [ 1618.295778] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1618.347797] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1618.409538] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1618.437102] ip_tables: iptables: counters copy to user failed while replacing table [ 1618.568735] ip_tables: iptables: counters copy to user failed while replacing table [ 1618.590594] ip_tables: iptables: counters copy to user failed while replacing table [ 1618.668450] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1618.688197] systemd cpuset=/ mems_allowed=0-1 [ 1618.727330] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.180-syzkaller #0 [ 1618.734274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1618.743619] Call Trace: [ 1618.746201] dump_stack+0x13e/0x194 [ 1618.749822] dump_header+0x178/0x6d4 [ 1618.753530] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1618.758543] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1618.763628] ? ___ratelimit+0x50/0x519 [ 1618.767511] oom_kill_process.cold+0x10/0xae3 [ 1618.771999] ? lock_downgrade+0x6e0/0x6e0 [ 1618.776131] out_of_memory+0x2d5/0x1110 [ 1618.780078] ? oom_killer_disable+0x1c0/0x1c0 [ 1618.784552] ? mutex_trylock+0x152/0x1a0 [ 1618.788685] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1618.793524] ? warn_alloc+0xf0/0xf0 [ 1618.797136] __alloc_pages_nodemask+0x5d3/0x700 [ 1618.802050] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1618.807068] ? lock_downgrade+0x6e0/0x6e0 [ 1618.811202] alloc_pages_current+0xe7/0x1e0 [ 1618.815568] __page_cache_alloc+0x245/0x3d0 [ 1618.819906] filemap_fault+0xc18/0x1c50 [ 1618.823871] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1618.828529] ? lock_acquire+0x170/0x3f0 [ 1618.832491] ? ext4_filemap_fault+0x7c/0xb0 [ 1618.836795] ext4_filemap_fault+0x84/0xb0 [ 1618.840917] __do_fault+0xfa/0x380 [ 1618.844437] __handle_mm_fault+0x22e9/0x3280 [ 1618.848836] ? copy_page_range+0x1d70/0x1d70 [ 1618.853254] ? find_held_lock+0x2d/0x110 [ 1618.857347] handle_mm_fault+0x288/0x7a0 [ 1618.861382] __do_page_fault+0x4bc/0xb40 [ 1618.865434] ? vmalloc_fault+0xdf0/0xdf0 [ 1618.869478] ? do_page_fault+0x60/0x4f2 [ 1618.873441] ? page_fault+0x2f/0x50 [ 1618.877051] page_fault+0x45/0x50 [ 1618.880477] RIP: ecf7c188:0x55afb52bfc30 [ 1618.884516] RSP: b5211650:00007f82ed189e64 EFLAGS: 7fff36edf30c [ 1618.909162] Mem-Info: [ 1618.937583] active_anon:230018 inactive_anon:1111213 isolated_anon:0 [ 1618.937583] active_file:18 inactive_file:0 isolated_file:0 [ 1618.937583] unevictable:19129 dirty:2 writeback:14 unstable:0 [ 1618.937583] slab_reclaimable:15965 slab_unreclaimable:113799 [ 1618.937583] mapped:62565 shmem:14712 pagetables:11306 bounce:0 [ 1618.937583] free:24896 free_pcp:44 free_cma:0 [ 1618.989432] Node 0 active_anon:902440kB inactive_anon:891104kB active_file:60kB inactive_file:60kB unevictable:58176kB isolated(anon):0kB isolated(file):0kB mapped:233992kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 366592kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1619.038002] Node 1 active_anon:17636kB inactive_anon:3553748kB active_file:8kB inactive_file:4kB unevictable:18344kB isolated(anon):0kB isolated(file):0kB mapped:16236kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1619.087635] Node 0 DMA free:10420kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1619.137786] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1619.160950] Node 0 DMA32 free:36008kB min:36272kB low:45340kB high:54408kB active_anon:901792kB inactive_anon:886836kB active_file:148kB inactive_file:0kB unevictable:58176kB writepending:0kB present:3129332kB managed:2621260kB mlocked:58176kB kernel_stack:9728kB pagetables:17216kB bounce:0kB free_pcp:176kB local_pcp:176kB free_cma:0kB [ 1619.230188] lowmem_reserve[]: 0 0 0 0 0 [ 1619.236648] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1619.266818] lowmem_reserve[]: 0 0 0 0 0 [ 1619.270807] Node 1 Normal free:53384kB min:53612kB low:67012kB high:80412kB active_anon:17636kB inactive_anon:3553748kB active_file:24kB inactive_file:0kB unevictable:18344kB writepending:0kB present:3932160kB managed:3870192kB mlocked:18344kB kernel_stack:8832kB pagetables:27756kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1619.306559] lowmem_reserve[]: 0 0 0 0 0 [ 1619.310552] Node 0 DMA: 13*4kB (UME) 6*8kB (UME) 7*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10420kB [ 1619.335254] Node 0 DMA32: 348*4kB (UME) 747*8kB (UME) 256*16kB (UME) 241*32kB (UE) 139*64kB (UME) 6*128kB (UME) 4*256kB (UE) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 36008kB [ 1619.360287] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1619.371053] Node 1 Normal: 332*4kB (UME) 1443*8kB (UM) 1260*16kB (M) 470*32kB (UM) 75*64kB (UM) 4*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53384kB [ 1619.389833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1619.451702] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1619.460282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1619.513301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1619.529208] 19397 total pagecache pages [ 1619.561119] 0 pages in swap cache [ 1619.623692] Swap cache stats: add 0, delete 0, find 0/0 [ 1619.643684] Free swap = 0kB [ 1619.650048] Total swap = 0kB [ 1619.658693] 1965979 pages RAM [ 1619.684921] 0 pages HighMem/MovableOnly [ 1619.689814] 339053 pages reserved [ 1619.703585] 0 pages cma reserved [ 1619.706960] Out of memory: Kill process 25343 (syz-executor.4) score 1009 or sacrifice child 18:29:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:29:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0xd6, 0x4) [ 1621.438442] NOHZ: local_softirq_pending 08 18:29:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000010000000000000060a5c26800282900fe800000000000000000000007000000ff020000000000000000000000000001"], 0xfca) 18:29:23 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000480)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[], 0x3c) sendfile(r2, r2, &(0x7f0000000240), 0x7ffd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) rt_sigaction(0x9, &(0x7f0000000280)={&(0x7f0000000100)="452b118fc9f094b3000000002e0f0fde8a6666f240e10b4684c60f0fec8ac4e21d2d8625b000008f29e801e4420f0f11b60fb906", 0x0, &(0x7f00000001c0)="c46163580136f2aec4a2b939520cf20f1affc4a1e1c64f82d5c401e1dc7040c4a12df2c28fa814a2379fc4229503d58f0828cc87dff4000037", {[0xfffffffffffffffa]}}, &(0x7f00000002c0)={&(0x7f0000000340)="c403fd6fbb030000000f360f01fa2666440fc44c55df00c4e2192d144e0f12d6c461b016460ec402518e9b00008020c482a9be5d27674263dac4825547bb0f000000", 0x0, &(0x7f00000003c0)="c44181e27c3527260f0d18c4e1d751c064f0430fc104e0428d7500c402a2f516f30f1c9300080000260f38f6b523cced8f360f6a99000b896865f2460f5d91d4a30339"}, 0x8, &(0x7f0000000440)) 18:29:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0099c0f93101042a144e81f0a302a601001f005e0000006000000000000000af80000000200000000000002400486c671295d15e0000ff029ec797341e1048"], 0xfca) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$FIOCLEX(r2, 0x5451) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$peek(0x2, r3, &(0x7f0000000000)) 18:29:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=r4, @ANYBLOB="22ffb5c06211000100b93c7e630e19ddeb8fb96b478dc84cdcb36890e22b091e41447039f825ffa34c78726caf92a06903ac5cd5b15296aa7b0b1a5092d37a32502430fdc9ebee947006dbca36db8afbeac364dcb5988db04ff441adb568629919fed482ecfdbb0a60458ef44d4775474e9b36107f1a030081706e09ecde8c4d2a0efb880ef07cf1b095db12a3e2b17e6047785a444b768a752f4eff7f8fce218b85b54b5c174ec3374a65f4f8e889b49aef18932d68ccc4bd80701ec0956a10699b946d152781002a433c63f55b7b", @ANYRES32=0x0, @ANYBLOB="080003be6ed912aa06000f000100000037a1a45405b018b5721bf1809c0d05b54b12ad07aab43b268b38ced99d2b7ae2252c334e936cb066aa00cab1b91a6c52fba0dd9fa1dce33bddc7f4002ad6f8e5948068dee2222d802dcc8443dfcd14102c5990293c1f152f0262f7f8ac5dad89113b3808743b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:29:23 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010800000000bf115802307c42257e6ea93ce31a53e35400000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r2, @ANYBLOB], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) 18:29:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000544f1e5241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feff"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) [ 1625.988342] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1626.005813] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 18:29:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x4, 0xffffffff) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:29:23 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000140)={0x2c, 0x6, [], [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x24, "d69104ea53e668cbc68c032ee64830994c7f1e16a3a3bd909a22c8c95cda0b0198745fff"}, @ra={0x5, 0x2, 0x800}]}, 0x40) r4 = dup2(r1, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:29:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000000)={0x8, 0x92, 0xfffffffffffffff8}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="0000010000000000000060a5c26800282900fe800000000000000000000007000000ff020000000000000000000000000001"], 0xfca) 18:29:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0099c0f93101042a144e81f0a302a601001f005e0000006000000000000000af80000000200000000000002400486c671295d15e0000ff029ec797341e1048"], 0xfca) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$FIOCLEX(r2, 0x5451) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$peek(0x2, r3, &(0x7f0000000000)) 18:29:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$P9_RRENAMEAT(r7, &(0x7f0000000300)={0x7, 0x4b, 0x1}, 0x7) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 1626.209604] ip_tables: iptables: counters copy to user failed while replacing table [ 1626.290908] ip_tables: iptables: counters copy to user failed while replacing table [ 1626.483244] ip_tables: iptables: counters copy to user failed while replacing table [ 1626.733778] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1626.769633] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1626.778964] CPU: 1 PID: 25483 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 1626.786842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1626.796183] Call Trace: [ 1626.798768] dump_stack+0x13e/0x194 [ 1626.802400] dump_header+0x178/0x6d4 [ 1626.806110] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1626.811119] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1626.816240] ? ___ratelimit+0x50/0x519 [ 1626.820139] oom_kill_process.cold+0x10/0xae3 [ 1626.824637] ? lock_acquire+0x170/0x3f0 [ 1626.828603] ? lock_downgrade+0x6e0/0x6e0 [ 1626.832748] out_of_memory+0x2d5/0x1110 [ 1626.836728] ? oom_killer_disable+0x1c0/0x1c0 [ 1626.841224] ? mutex_trylock+0x152/0x1a0 [ 1626.845293] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1626.850262] ? warn_alloc+0xf0/0xf0 [ 1626.853898] __alloc_pages_nodemask+0x5d3/0x700 [ 1626.858559] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1626.863603] ? find_held_lock+0x2d/0x110 [ 1626.868308] alloc_pages_vma+0xc2/0x4a0 [ 1626.872286] __handle_mm_fault+0x17b6/0x3280 [ 1626.876697] ? copy_page_range+0x1d70/0x1d70 [ 1626.881103] ? find_held_lock+0x2d/0x110 [ 1626.885169] handle_mm_fault+0x288/0x7a0 [ 1626.889228] __get_user_pages+0x44d/0x11e0 [ 1626.893460] ? follow_page_mask+0x1580/0x1580 [ 1626.897948] ? do_munmap+0x728/0xd30 [ 1626.901662] ? memset+0x20/0x40 [ 1626.904936] populate_vma_page_range+0x17b/0x210 [ 1626.909685] __mm_populate+0x195/0x2c0 [ 1626.913570] ? populate_vma_page_range+0x210/0x210 [ 1626.918496] SyS_mremap+0xa9d/0xd69 [ 1626.922119] ? move_vma+0x7e0/0x7e0 [ 1626.925741] ? put_timespec64+0xaa/0xf0 [ 1626.929708] ? nsecs_to_jiffies+0x30/0x30 [ 1626.933856] ? SyS_clock_settime+0x1a0/0x1a0 [ 1626.938259] ? do_syscall_64+0x4c/0x640 [ 1626.942225] ? move_vma+0x7e0/0x7e0 [ 1626.945848] do_syscall_64+0x1d5/0x640 [ 1626.949733] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1626.954919] RIP: 0033:0x45ca29 [ 1626.958097] RSP: 002b:00007f9620048c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1626.965797] RAX: ffffffffffffffda RBX: 00000000004f67c0 RCX: 000000000045ca29 [ 1626.973056] RDX: 0000000000800000 RSI: 0000000000002000 RDI: 0000000020a94000 [ 1626.980315] RBP: 000000000078bfa0 R08: 0000000020130000 R09: 0000000000000000 [ 1626.987577] R10: 0000000000000003 R11: 0000000000000246 R12: 00000000ffffffff [ 1626.994845] R13: 0000000000000766 R14: 00000000004ca402 R15: 00007f96200496d4 [ 1627.162423] Mem-Info: [ 1627.164862] active_anon:230411 inactive_anon:1115706 isolated_anon:0 [ 1627.164862] active_file:26 inactive_file:0 isolated_file:0 [ 1627.164862] unevictable:13841 dirty:1 writeback:0 unstable:0 [ 1627.164862] slab_reclaimable:15949 slab_unreclaimable:114066 [ 1627.164862] mapped:59326 shmem:14712 pagetables:11350 bounce:0 [ 1627.164862] free:24955 free_pcp:0 free_cma:0 [ 1627.210023] Node 0 active_anon:904260kB inactive_anon:901656kB active_file:200kB inactive_file:0kB unevictable:52732kB isolated(anon):0kB isolated(file):0kB mapped:228772kB dirty:4kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 362496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1627.247567] Node 1 active_anon:17384kB inactive_anon:3561168kB active_file:4kB inactive_file:0kB unevictable:2632kB isolated(anon):0kB isolated(file):0kB mapped:8532kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1627.353537] Node 0 DMA free:10420kB min:220kB low:272kB high:324kB active_anon:660kB inactive_anon:4288kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1627.383053] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1627.388174] Node 0 DMA32 free:35788kB min:36272kB low:45340kB high:54408kB active_anon:903600kB inactive_anon:897368kB active_file:104kB inactive_file:88kB unevictable:52732kB writepending:0kB present:3129332kB managed:2621260kB mlocked:52708kB kernel_stack:9728kB pagetables:17500kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1627.417957] lowmem_reserve[]: 0 0 0 0 0 [ 1627.421965] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1627.447419] lowmem_reserve[]: 0 0 0 0 0 [ 1627.451457] Node 1 Normal free:53592kB min:53612kB low:67012kB high:80412kB active_anon:17384kB inactive_anon:3561168kB active_file:56kB inactive_file:0kB unevictable:2632kB writepending:0kB present:3932160kB managed:3870192kB mlocked:2632kB kernel_stack:8896kB pagetables:27744kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1627.481116] lowmem_reserve[]: 0 0 0 0 0 [ 1627.485103] Node 0 DMA: 11*4kB (UME) 5*8kB (UME) 8*16kB (U) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10420kB [ 1627.500918] Node 0 DMA32: 355*4kB (UME) 871*8kB (UME) 428*16kB (UM) 312*32kB (UM) 141*64kB (UM) 7*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36164kB [ 1627.516258] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1627.526983] Node 1 Normal: 1847*4kB (UME) 1650*8kB (UM) 1214*16kB (UM) 353*32kB (UM) 36*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53612kB [ 1627.541386] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1627.550206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1627.558778] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1627.567649] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1627.576223] 16137 total pagecache pages [ 1627.580180] 0 pages in swap cache [ 1627.583650] Swap cache stats: add 0, delete 0, find 0/0 [ 1627.589097] Free swap = 0kB [ 1627.592151] Total swap = 0kB [ 1627.595156] 1965979 pages RAM [ 1627.598252] 0 pages HighMem/MovableOnly [ 1627.603857] 339053 pages reserved [ 1627.607298] 0 pages cma reserved [ 1627.610637] Out of memory: Kill process 25419 (syz-executor.4) score 1007 or sacrifice child [ 1627.619270] Killed process 25484 (syz-executor.4) total-vm:74972kB, anon-rss:18028kB, file-rss:34816kB, shmem-rss:0kB [ 1627.663338] oom_reaper: reaped process 25484 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1627.727136] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1627.900926] in:imklog cpuset=/ mems_allowed=0-1 [ 1627.953817] CPU: 1 PID: 6036 Comm: in:imklog Not tainted 4.14.180-syzkaller #0 [ 1627.961194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1627.970536] Call Trace: [ 1627.973120] dump_stack+0x13e/0x194 [ 1627.976742] dump_header+0x178/0x6d4 [ 1627.980456] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1627.985465] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1627.990557] ? ___ratelimit+0x50/0x519 [ 1627.994436] oom_kill_process.cold+0x10/0xae3 [ 1627.998922] ? lock_acquire+0x170/0x3f0 [ 1628.002882] ? lock_downgrade+0x6e0/0x6e0 [ 1628.007022] out_of_memory+0x2d5/0x1110 [ 1628.010986] ? oom_killer_disable+0x1c0/0x1c0 [ 1628.015469] ? mutex_trylock+0x152/0x1a0 [ 1628.019519] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1628.024362] ? warn_alloc+0xf0/0xf0 [ 1628.027992] __alloc_pages_nodemask+0x5d3/0x700 [ 1628.032654] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1628.037656] ? lock_downgrade+0x6e0/0x6e0 [ 1628.041811] alloc_pages_current+0xe7/0x1e0 [ 1628.046143] __page_cache_alloc+0x245/0x3d0 [ 1628.050460] filemap_fault+0xc18/0x1c50 [ 1628.054435] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1628.059096] ? lock_acquire+0x170/0x3f0 [ 1628.063064] ? ext4_filemap_fault+0x7c/0xb0 [ 1628.067385] ext4_filemap_fault+0x84/0xb0 [ 1628.071522] __do_fault+0xfa/0x380 [ 1628.075053] __handle_mm_fault+0x22e9/0x3280 [ 1628.079452] ? copy_page_range+0x1d70/0x1d70 [ 1628.083854] ? find_held_lock+0x2d/0x110 [ 1628.087914] handle_mm_fault+0x288/0x7a0 [ 1628.091969] __do_page_fault+0x4bc/0xb40 [ 1628.096021] ? vmalloc_fault+0xdf0/0xdf0 [ 1628.100078] ? do_page_fault+0x60/0x4f2 [ 1628.104048] ? page_fault+0x2f/0x50 [ 1628.107672] page_fault+0x45/0x50 [ 1628.111112] RIP: 1fa0:0x1f9f [ 1628.114117] RSP: 0000:0000557aad5409d0 EFLAGS: 7f204dbb6da0 [ 1629.755574] Mem-Info: [ 1629.848686] active_anon:230410 inactive_anon:1113643 isolated_anon:0 [ 1629.848686] active_file:44 inactive_file:0 isolated_file:0 [ 1629.848686] unevictable:16098 dirty:6 writeback:0 unstable:0 [ 1629.848686] slab_reclaimable:15949 slab_unreclaimable:113954 [ 1629.848686] mapped:61326 shmem:14712 pagetables:11322 bounce:0 [ 1629.848686] free:25013 free_pcp:37 free_cma:0 [ 1629.923349] Node 0 active_anon:904256kB inactive_anon:896564kB active_file:28kB inactive_file:32kB unevictable:58632kB isolated(anon):0kB isolated(file):0kB mapped:234504kB dirty:24kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 362496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1629.963496] Node 1 active_anon:17384kB inactive_anon:3558008kB active_file:0kB inactive_file:48kB unevictable:5760kB isolated(anon):0kB isolated(file):0kB mapped:10800kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1630.008414] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:660kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1630.048257] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1630.055748] Node 0 DMA32 free:35976kB min:36272kB low:45340kB high:54408kB active_anon:903596kB inactive_anon:892296kB active_file:64kB inactive_file:16kB unevictable:58632kB writepending:24kB present:3129332kB managed:2621260kB mlocked:58608kB kernel_stack:9728kB pagetables:17384kB bounce:0kB free_pcp:144kB local_pcp:140kB free_cma:0kB [ 1630.104581] lowmem_reserve[]: 0 0 0 0 0 [ 1630.108577] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1630.150139] lowmem_reserve[]: 0 0 0 0 0 [ 1630.175917] Node 1 Normal free:53544kB min:53612kB low:67012kB high:80412kB active_anon:17384kB inactive_anon:3558008kB active_file:80kB inactive_file:0kB unevictable:5760kB writepending:0kB present:3932160kB managed:3870192kB mlocked:5760kB kernel_stack:8832kB pagetables:27748kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1630.226515] lowmem_reserve[]: 0 0 0 0 0 [ 1630.230517] Node 0 DMA: 12*4kB (UME) 5*8kB (UME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10440kB [ 1630.263674] Node 0 DMA32: 308*4kB (UME) 905*8kB (UE) 427*16kB (U) 308*32kB (U) 137*64kB (U) 8*128kB (UM) 2*256kB (U) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35976kB [ 1630.295911] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1630.328175] Node 1 Normal: 1816*4kB (UME) 1649*8kB (M) 1214*16kB (UM) 355*32kB (UM) 36*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53544kB [ 1630.358628] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1630.369907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1630.395204] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1630.420151] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1630.446132] 18153 total pagecache pages [ 1630.450105] 0 pages in swap cache [ 1630.469433] Swap cache stats: add 0, delete 0, find 0/0 [ 1630.499036] Free swap = 0kB [ 1630.530077] Total swap = 0kB [ 1630.537436] 1965979 pages RAM [ 1630.540525] 0 pages HighMem/MovableOnly [ 1630.549675] 339053 pages reserved [ 1630.590573] 0 pages cma reserved [ 1630.638059] Out of memory: Kill process 25419 (syz-executor.4) score 1009 or sacrifice child [ 1630.667877] Killed process 25428 (syz-executor.4) total-vm:75096kB, anon-rss:18028kB, file-rss:47148kB, shmem-rss:0kB [ 1630.744984] oom_reaper: reaped process 25428 (syz-executor.4), now anon-rss:18012kB, file-rss:13616kB, shmem-rss:0kB [ 1630.835752] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1630.860787] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1630.865825] CPU: 0 PID: 3646 Comm: systemd-udevd Not tainted 4.14.180-syzkaller #0 [ 1630.874169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1630.883512] Call Trace: [ 1630.886090] dump_stack+0x13e/0x194 [ 1630.889708] dump_header+0x178/0x6d4 [ 1630.893411] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1630.898416] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1630.903507] ? ___ratelimit+0x50/0x519 [ 1630.907389] oom_kill_process.cold+0x10/0xae3 [ 1630.911875] ? lock_acquire+0x170/0x3f0 [ 1630.915835] ? lock_downgrade+0x6e0/0x6e0 [ 1630.919990] out_of_memory+0x2d5/0x1110 [ 1630.924043] ? oom_killer_disable+0x1c0/0x1c0 [ 1630.928529] ? mutex_trylock+0x152/0x1a0 [ 1630.932580] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1630.937421] ? warn_alloc+0xf0/0xf0 [ 1630.941075] __alloc_pages_nodemask+0x5d3/0x700 [ 1630.945734] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1630.950739] ? lock_downgrade+0x6e0/0x6e0 [ 1630.954885] alloc_pages_current+0xe7/0x1e0 [ 1630.959195] __page_cache_alloc+0x245/0x3d0 [ 1630.963506] filemap_fault+0xc18/0x1c50 [ 1630.967473] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1630.972132] ? lock_acquire+0x170/0x3f0 [ 1630.976094] ? ext4_filemap_fault+0x7c/0xb0 [ 1630.980415] ext4_filemap_fault+0x84/0xb0 [ 1630.984551] __do_fault+0xfa/0x380 [ 1630.988090] __handle_mm_fault+0x22e9/0x3280 [ 1630.992486] ? copy_page_range+0x1d70/0x1d70 [ 1630.996902] ? find_held_lock+0x2d/0x110 [ 1631.000961] handle_mm_fault+0x288/0x7a0 [ 1631.005013] __do_page_fault+0x4bc/0xb40 [ 1631.009062] ? vmalloc_fault+0xdf0/0xdf0 [ 1631.013112] ? do_page_fault+0x60/0x4f2 [ 1631.017074] ? page_fault+0x2f/0x50 [ 1631.020686] page_fault+0x45/0x50 [ 1631.024123] RIP: e062a60:0x55a50e126ce0 [ 1631.028079] RSP: e12d960:0000000000000000 EFLAGS: 55a50e062a60 [ 1631.061401] Mem-Info: [ 1631.079114] active_anon:230406 inactive_anon:1118140 isolated_anon:0 [ 1631.079114] active_file:1239 inactive_file:1677 isolated_file:32 [ 1631.079114] unevictable:8198 dirty:6 writeback:0 unstable:0 [ 1631.079114] slab_reclaimable:15949 slab_unreclaimable:113958 [ 1631.079114] mapped:59535 shmem:14712 pagetables:11323 bounce:0 [ 1631.079114] free:25153 free_pcp:385 free_cma:0 [ 1631.127152] Node 0 active_anon:904240kB inactive_anon:903812kB active_file:4376kB inactive_file:7552kB unevictable:32792kB isolated(anon):0kB isolated(file):0kB mapped:231016kB dirty:24kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 362496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1631.193494] Node 1 active_anon:17384kB inactive_anon:3558048kB active_file:96kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8224kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 18:29:28 executing program 2: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) getcwd(&(0x7f0000000000)=""/63, 0x3f) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 18:29:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000340)={0x1, 'vcan0\x00', {}, 0xd3}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r7, 0xaead) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 1631.329022] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:660kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1631.398859] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1631.419137] Node 0 DMA32 free:42684kB min:36272kB low:45340kB high:54408kB active_anon:903580kB inactive_anon:892628kB active_file:3980kB inactive_file:7684kB unevictable:32792kB writepending:24kB present:3129332kB managed:2621260kB mlocked:32768kB kernel_stack:9728kB pagetables:17384kB bounce:0kB free_pcp:904kB local_pcp:228kB free_cma:0kB [ 1631.468161] lowmem_reserve[]: 0 0 0 0 0 [ 1631.472587] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1631.500047] lowmem_reserve[]: 0 0 0 0 0 18:29:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x80) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000009c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000680)={0x30, r4, 0x0, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x0, 0x180000, 0x15dc, 0x7}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4005) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x8000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:29:29 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x80800, 0x0) write$eventfd(r0, &(0x7f0000000280)=0x5, 0x8) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r1, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r3}, @IFLA_OPERSTATE={0x5, 0x10, 0xff}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) 18:29:29 executing program 2: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) getcwd(&(0x7f0000000000)=""/63, 0x3f) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 1631.508103] Node 1 Normal free:64428kB min:53612kB low:67012kB high:80412kB active_anon:17384kB inactive_anon:3558024kB active_file:568kB inactive_file:32kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8672kB pagetables:27752kB bounce:0kB free_pcp:1340kB local_pcp:700kB free_cma:0kB [ 1631.578591] lowmem_reserve[]: 0 0 0 0 0 [ 1631.587250] Node 0 DMA: 13*4kB (UME) 6*8kB (UME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10452kB 18:29:29 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) link(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) read(0xffffffffffffffff, &(0x7f0000000000)=""/51, 0xf) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f00000005c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:29:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0xee8, 0x980) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 1631.620433] Node 0 DMA32: 382*4kB (UME) 196*8kB (UME) 512*16kB (UM) 409*32kB (UM) 164*64kB (UM) 27*128kB (UM) 8*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 41400kB 18:29:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r4 = dup2(r3, r2) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:29:29 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f0000000280)=[{&(0x7f00008f9f09)=""/243, 0xf3}, {&(0x7f0000000180)=""/253}], 0x100000000000033c, &(0x7f0000000140)=[{&(0x7f0000000040)=""/231, 0xe7}], 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x24000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1, 0x1, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000380)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000440)={{0x7, 0x4, 0xffffffff, 0x2, 'syz1\x00', 0x3}, 0x4, 0x0, 0x5, r4, 0xa, 0x800, 'syz0\x00', &(0x7f00000003c0)=['\x00', '\xff\x00', '!\x00', '/\x00', '\\\x00', '\x00', 'vmnet1em0T.\x00', 'usereth1procnodev\x00', '\x00', '$nodevselfppp1vmnet1,[&]\x00'], 0x42, [], [0x5, 0x0, 0x200, 0xfffe]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x0, 0x9}, 0x90) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1631.717773] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1631.747705] ip_tables: iptables: counters copy to user failed while replacing table [ 1631.789150] ip_tables: iptables: counters copy to user failed while replacing table [ 1631.792014] Node 1 Normal: 3010*4kB (UME) 2132*8kB (UM) 1251*16kB (UM) 388*32kB (UM) 71*64kB (UM) 4*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 66840kB [ 1631.833315] ip_tables: iptables: counters copy to user failed while replacing table 18:29:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/665], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:29:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x6, 0x10200) sendmsg$rds(r1, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/60, 0x3c}], 0x1, &(0x7f0000000680)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000540)=""/180, 0xb4}, &(0x7f0000000440), 0x20}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000600)=""/48, 0x30}, &(0x7f0000000640), 0x5}}], 0x60, 0x1}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2b, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETIPTR(r5, 0x800c5011, &(0x7f0000000300)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vga_arbiter\x00', 0x432100, 0x0) connect$caif(r7, &(0x7f0000000800)=@dbg={0x25, 0x68, 0xd1}, 0x18) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="480000000000000000009827d0e0aa02aedc9b9bd7e1d2d58dd7917e71e0d958cf4800da7241db6fcb54450cc99de28cbde82562cd9288ec12d6799f225437e15e25a6789b60012306baeb118826fe3f62b18753faf4b61d83c084e54154eb6651211409a4371bcb91de1e537227d9fd", @ANYRES32=r8, @ANYBLOB="03000000000000002800f67f08000100f34a736974001c00028008000100", @ANYRES32=0x0, @ANYBLOB="08000300ac1414aa06000f0001000000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r6, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:29:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x45, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}, 0x6ec4e9c6b0856575, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(0x0, 0xd, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x100, &(0x7f0000000580)) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000800)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="cc7442f5ed85b90eb8fcd3dc63efda81194fc40005d9a7c99f4f84c7eafb0640dabda2c721f614d59e1fec4f6839074fb7c1b04148bfaca557e8816812c2609677f504ce4b2027d925f2be8c56e6872c20db235814b7920a4615484e54406bf6e87232ba0532c6ebe87dd45a71b9865ddc56703ee2bc08d875ecb892ac3c66ccb96a458ecbdee784d4dce865452716c09024e5ee9ca9b77c319e7fff57bb2f97a608f4d2da30cdc224e0377de16e078bfc3568ece689c8f8032ac94b401e1272999f", @ANYRES32=0x0], 0x4, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x6, 0x400) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) [ 1631.964446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25518 comm=syz-executor.5 [ 1631.970267] ip_tables: iptables: counters copy to user failed while replacing table [ 1631.993681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1632.002380] overlayfs: filesystem on './file0' not supported as upperdir [ 1632.046933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1632.122925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1632.153163] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1632.162372] 16547 total pagecache pages [ 1632.167120] 0 pages in swap cache [ 1632.170854] Swap cache stats: add 0, delete 0, find 0/0 [ 1632.176709] Free swap = 0kB [ 1632.180235] Total swap = 0kB [ 1632.184079] 1965979 pages RAM [ 1632.187764] 0 pages HighMem/MovableOnly [ 1632.192434] 339053 pages reserved [ 1632.196397] 0 pages cma reserved [ 1632.199915] Out of memory: Kill process 11098 (syz-executor.5) score 1007 or sacrifice child [ 1632.209069] Killed process 11098 (syz-executor.5) total-vm:74972kB, anon-rss:18260kB, file-rss:34624kB, shmem-rss:0kB [ 1632.563034] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 1632.582935] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1632.588665] CPU: 0 PID: 25522 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 1632.596542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1632.605884] Call Trace: [ 1632.608481] dump_stack+0x13e/0x194 [ 1632.612104] dump_header+0x178/0x6d4 [ 1632.615812] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1632.620908] ? ___ratelimit+0x50/0x519 [ 1632.624794] oom_kill_process.cold+0x10/0xae3 [ 1632.629279] ? lock_downgrade+0x6e0/0x6e0 [ 1632.633408] out_of_memory+0x2d5/0x1110 [ 1632.637361] ? oom_killer_disable+0x1c0/0x1c0 [ 1632.641838] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1632.646666] ? warn_alloc+0xf0/0xf0 [ 1632.650270] ? find_held_lock+0x2d/0x110 [ 1632.654310] ? fs_reclaim_acquire+0x10/0x10 [ 1632.658613] __alloc_pages_nodemask+0x5d3/0x700 [ 1632.663259] ? check_preemption_disabled+0x35/0x240 [ 1632.668250] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1632.673261] cache_grow_begin+0x7b/0x410 [ 1632.677301] fallback_alloc+0x205/0x2b0 [ 1632.681254] kmem_cache_alloc+0x1ea/0x770 [ 1632.685386] getname_flags+0xc8/0x560 [ 1632.689166] do_sys_open+0x1c4/0x3f0 [ 1632.692858] ? filp_open+0x60/0x60 [ 1632.696377] ? do_syscall_64+0xc8/0x640 [ 1632.700340] ? do_sys_open+0x3f0/0x3f0 [ 1632.704219] do_syscall_64+0x1d5/0x640 [ 1632.708091] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1632.713255] RIP: 0033:0x416821 [ 1632.716420] RSP: 002b:00007fc59c2227a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1632.724101] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416821 [ 1632.731346] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 00007fc59c222850 [ 1632.738592] RBP: 000000000078bf00 R08: 000000000000000f R09: 0000000000000000 [ 1632.745855] R10: ffffffffffffffff R11: 0000000000000293 R12: 00000000ffffffff [ 1632.753121] R13: 0000000000000c0b R14: 00000000004ce553 R15: 00007fc59c2236d4 [ 1632.878125] Mem-Info: [ 1632.881399] active_anon:230443 inactive_anon:1111659 isolated_anon:0 [ 1632.881399] active_file:42 inactive_file:36 isolated_file:4 [ 1632.881399] unevictable:11608 dirty:3 writeback:5 unstable:0 [ 1632.881399] slab_reclaimable:15951 slab_unreclaimable:113956 [ 1632.881399] mapped:59356 shmem:14712 pagetables:11340 bounce:0 [ 1632.881399] free:25129 free_pcp:35 free_cma:0 [ 1632.918705] Node 0 active_anon:904964kB inactive_anon:883876kB active_file:136kB inactive_file:20kB unevictable:44092kB isolated(anon):0kB isolated(file):16kB mapped:229244kB dirty:12kB writeback:20kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 348160kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1632.951302] Node 1 active_anon:16808kB inactive_anon:3562760kB active_file:32kB inactive_file:0kB unevictable:2740kB isolated(anon):0kB isolated(file):0kB mapped:8080kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1632.979731] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4296kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1633.009217] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1633.014774] Node 0 DMA32 free:35908kB min:36272kB low:45340kB high:54408kB active_anon:904316kB inactive_anon:879580kB active_file:144kB inactive_file:332kB unevictable:43996kB writepending:0kB present:3129332kB managed:2621260kB mlocked:43996kB kernel_stack:9856kB pagetables:17332kB bounce:0kB free_pcp:432kB local_pcp:56kB free_cma:0kB [ 1633.045736] lowmem_reserve[]: 0 0 0 0 0 [ 1633.050019] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1633.076248] lowmem_reserve[]: 0 0 0 0 0 [ 1633.080709] Node 1 Normal free:58876kB min:53612kB low:67012kB high:80412kB active_anon:16808kB inactive_anon:3562760kB active_file:16kB inactive_file:16kB unevictable:2740kB writepending:0kB present:3932160kB managed:3870192kB mlocked:2740kB kernel_stack:8768kB pagetables:27872kB bounce:0kB free_pcp:656kB local_pcp:0kB free_cma:0kB [ 1633.110924] lowmem_reserve[]: 0 0 0 0 0 [ 1633.115278] Node 0 DMA: 10*4kB (UE) 4*8kB (UE) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 1633.136408] Node 0 DMA32: 349*4kB (UMEH) 244*8kB (UMEH) 356*16kB (UMH) 415*32kB (UMH) 161*64kB (UMH) 27*128kB (UM) 9*256kB (UM) 2*512kB (M) 0*1024kB 3*2048kB (M) 2*4096kB (M) = 53748kB [ 1633.160066] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1633.187535] Node 1 Normal: 1497*4kB (UME) 1995*8kB (UM) 1247*16kB (UME) 391*32kB (UME) 64*64kB (UME) 3*128kB (UE) 2*256kB (UE) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 59404kB 18:29:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x200000, 0x1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) mount$9p_tcp(&(0x7f0000000300)='127.0.0.1\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x1000, &(0x7f00000003c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose='cache=loose'}, {@cache_fscache='cache=fscache'}, {@version_9p2000='version=9p2000'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'vmnet1'}}]}}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:29:30 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) link(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) read(0xffffffffffffffff, &(0x7f0000000000)=""/51, 0xf) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f00000005c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1633.336874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1633.409392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1633.443407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1633.460128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1633.468988] 16702 total pagecache pages [ 1633.473125] 0 pages in swap cache [ 1633.476608] Swap cache stats: add 0, delete 0, find 0/0 [ 1633.482235] Free swap = 0kB [ 1633.485246] Total swap = 0kB [ 1633.488241] 1965979 pages RAM [ 1633.491801] 0 pages HighMem/MovableOnly [ 1633.496313] 339053 pages reserved [ 1633.499796] 0 pages cma reserved [ 1633.504649] Out of memory: Kill process 11108 (syz-executor.1) score 1007 or sacrifice child [ 1633.513491] Killed process 11108 (syz-executor.1) total-vm:74972kB, anon-rss:18260kB, file-rss:34624kB, shmem-rss:0kB [ 1633.556408] oom_reaper: reaped process 11108 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1633.743553] ip_tables: iptables: counters copy to user failed while replacing table [ 1634.337877] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1634.447735] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1634.467259] CPU: 0 PID: 6356 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0 [ 1634.475058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1634.484404] Call Trace: [ 1634.486986] dump_stack+0x13e/0x194 [ 1634.490609] dump_header+0x178/0x6d4 [ 1634.494315] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1634.499346] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1634.504438] ? ___ratelimit+0x50/0x519 [ 1634.508317] oom_kill_process.cold+0x10/0xae3 [ 1634.512802] ? lock_acquire+0x170/0x3f0 [ 1634.516764] ? lock_downgrade+0x6e0/0x6e0 [ 1634.520921] out_of_memory+0x2d5/0x1110 [ 1634.524880] ? oom_killer_disable+0x1c0/0x1c0 [ 1634.529418] ? mutex_trylock+0x152/0x1a0 [ 1634.533454] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1634.538275] ? warn_alloc+0xf0/0xf0 [ 1634.541881] ? find_held_lock+0x2d/0x110 [ 1634.545923] ? fs_reclaim_acquire+0x10/0x10 [ 1634.550221] __alloc_pages_nodemask+0x5d3/0x700 [ 1634.554872] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1634.559698] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1634.564695] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1634.569705] ? cache_grow_begin+0x32d/0x410 [ 1634.574015] cache_grow_begin+0x7b/0x410 [ 1634.578061] fallback_alloc+0x205/0x2b0 [ 1634.582017] kmem_cache_alloc+0x1ea/0x770 [ 1634.586146] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1634.591139] ? kmem_cache_free+0x23a/0x2b0 [ 1634.595397] getname_flags+0xc8/0x560 [ 1634.599173] SyS_mkdir+0x7b/0x210 [ 1634.602607] ? SyS_mkdirat+0x210/0x210 [ 1634.606479] ? do_syscall_64+0x4c/0x640 [ 1634.610424] ? SyS_mkdirat+0x210/0x210 [ 1634.614330] do_syscall_64+0x1d5/0x640 [ 1634.618196] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1634.623366] RIP: 0033:0x45bea7 [ 1634.626536] RSP: 002b:00007fff32176248 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 1634.634324] RAX: ffffffffffffffda RBX: 000000000018ee0b RCX: 000000000045bea7 [ 1634.641574] RDX: 00007fff32176295 RSI: 00000000000001ff RDI: 00007fff32176290 [ 1634.648823] RBP: 00000000000007cf R08: 0000000000000000 R09: 0000000000000005 [ 1634.656065] R10: 0000000000000064 R11: 0000000000000206 R12: 000000000000000e [ 1634.663314] R13: 00007fff32176280 R14: 000000000018ed53 R15: 00007fff32176290 [ 1634.956992] Mem-Info: [ 1634.960586] active_anon:230387 inactive_anon:1105570 isolated_anon:0 [ 1634.960586] active_file:5908 inactive_file:179 isolated_file:32 [ 1634.960586] unevictable:7168 dirty:9 writeback:0 unstable:0 [ 1634.960586] slab_reclaimable:15970 slab_unreclaimable:113513 [ 1634.960586] mapped:58675 shmem:14712 pagetables:11233 bounce:0 [ 1634.960586] free:35872 free_pcp:611 free_cma:0 [ 1634.998719] Node 0 active_anon:905008kB inactive_anon:864168kB active_file:23824kB inactive_file:808kB unevictable:28672kB isolated(anon):0kB isolated(file):128kB mapped:226812kB dirty:36kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 329728kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1635.029716] Node 1 active_anon:16540kB inactive_anon:3558112kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8088kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1635.058831] Node 0 DMA free:10452kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1635.085724] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1635.090831] Node 0 DMA32 free:60404kB min:36272kB low:45340kB high:54408kB active_anon:904360kB inactive_anon:859884kB active_file:24128kB inactive_file:1540kB unevictable:28672kB writepending:44kB present:3129332kB managed:2621260kB mlocked:28672kB kernel_stack:9696kB pagetables:16964kB bounce:0kB free_pcp:644kB local_pcp:488kB free_cma:0kB [ 1635.121501] lowmem_reserve[]: 0 0 0 0 0 [ 1635.125478] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1635.151158] lowmem_reserve[]: 0 0 0 0 0 [ 1635.155158] Node 1 Normal free:72276kB min:53612kB low:67012kB high:80412kB active_anon:16512kB inactive_anon:3558008kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8576kB pagetables:27652kB bounce:0kB free_pcp:1372kB local_pcp:688kB free_cma:0kB [ 1635.184857] lowmem_reserve[]: 0 0 0 0 0 [ 1635.188838] Node 0 DMA: 13*4kB (UME) 6*8kB (UME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10452kB [ 1635.204744] Node 0 DMA32: 743*4kB (UME) 597*8kB (ME) 512*16kB (UM) 360*32kB (UM) 143*64kB (UM) 10*128kB (UM) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 4*2048kB (M) 2*4096kB (M) = 57348kB [ 1635.221302] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1635.232088] Node 1 Normal: 3229*4kB (UME) 2188*8kB (UM) 1277*16kB (UME) 420*32kB (UME) 79*64kB (UME) 20*128kB (UME) 2*256kB (UE) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 72420kB [ 1635.247832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1635.256734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1635.265395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1635.274409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1635.283059] 21988 total pagecache pages [ 1635.287019] 0 pages in swap cache [ 1635.290535] Swap cache stats: add 0, delete 0, find 0/0 [ 1635.295888] Free swap = 0kB [ 1635.298890] Total swap = 0kB [ 1635.301940] 1965979 pages RAM [ 1635.305027] 0 pages HighMem/MovableOnly [ 1635.308981] 339053 pages reserved [ 1635.312514] 0 pages cma reserved [ 1635.315862] Out of memory: Kill process 25496 (syz-executor.4) score 1010 or sacrifice child 18:29:33 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x45, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}, 0x6ec4e9c6b0856575, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(0x0, 0xd, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x100, &(0x7f0000000580)) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000800)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="cc7442f5ed85b90eb8fcd3dc63efda81194fc40005d9a7c99f4f84c7eafb0640dabda2c721f614d59e1fec4f6839074fb7c1b04148bfaca557e8816812c2609677f504ce4b2027d925f2be8c56e6872c20db235814b7920a4615484e54406bf6e87232ba0532c6ebe87dd45a71b9865ddc56703ee2bc08d875ecb892ac3c66ccb96a458ecbdee784d4dce865452716c09024e5ee9ca9b77c319e7fff57bb2f97a608f4d2da30cdc224e0377de16e078bfc3568ece689c8f8032ac94b401e1272999f", @ANYRES32=0x0], 0x4, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x6, 0x400) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 18:29:33 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) 18:29:33 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) link(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) read(0xffffffffffffffff, &(0x7f0000000000)=""/51, 0xf) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f00000005c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:29:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1, 0x1, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000000c0)={0x0, 0x5}, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x1, 0x0) recvfrom$l2tp6(r3, &(0x7f0000000140)=""/248, 0xf8, 0x40000000, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, 0x20) r4 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/fscreate\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:29:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="03000000000000002800128008000100736974001c000280f693c901", @ANYRES32=0x0, @ANYBLOB="08000300ac1414aa06000f0001000000"], 0x48}}, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000300)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) r7 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) keyctl$chown(0x4, r7, 0x0, r9) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, r6, r9}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 1635.751610] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1635.781828] ip_tables: iptables: counters copy to user failed while replacing table 18:29:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/665], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) [ 1635.799054] ip_tables: iptables: counters copy to user failed while replacing table [ 1635.834561] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1635.846135] ip_tables: iptables: counters copy to user failed while replacing table [ 1635.910818] ip_tables: iptables: counters copy to user failed while replacing table 18:29:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) r5 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r6 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r7) r8 = socket(0x1, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000a8b33600"/20, @ANYRES64=r8, @ANYRESDEC, @ANYRES64=r7], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:29:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r4 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x1, "7f"}, &(0x7f0000000040)=0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000080)={r5, 0x35a2}, 0x8) r6 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:29:33 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) link(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) read(0xffffffffffffffff, &(0x7f0000000000)=""/51, 0xf) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f00000005c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1636.115324] ip_tables: iptables: counters copy to user failed while replacing table 18:29:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@private2, 0x4e, r4}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f000000000000005500000000000020005452414345000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000001000000000180000000000000000000000000000001bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:29:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x5) r5 = socket(0x5, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:29:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x4) 18:29:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) r4 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') futex(&(0x7f0000000180)=0x1, 0x80, 0x2, &(0x7f00000001c0), &(0x7f0000000200), 0x1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '%{cpuset`\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x50}}, 0x4804) 18:29:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='codepage=4']) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x2, 0x5, &(0x7f0000000400)=[{&(0x7f00000001c0)="2d81c4355fdea80fafe8f1cbf8870e038701d63abebd02406ad0648c8da43d655428ab381b3a969763dddd9b94f9132155a0c7cac596b7887e65560fcc1b613366ecf88d28c93d5a67f88ca80caf499edc88990605e8619e702e72dab80ee4cdc4c48f6774d9e2ae65af6d791b8760bfd5b341e74774efcb462d5ce0c8826fdd3a931d58107de3063d1f9cc3bd924766c61187ba32bec8a20bbd05cfa6f8a45bff0c51cf66408e66ae296bc3090f940bb086caa718d55e207f03e8b7ccd466185e62d5a4db1634a7ba85c853d1b3adb8", 0xd0, 0x5}, {&(0x7f0000000ac0)="55819577baa64ce2db40b9e4f967649cf02b6dca1c008cfd8d281971472aba780ba1e8d2d60940338a42c3fc66ba8f12a52a10058d24862d92f6c237221f429af5c49a36ac5fb5f5127a08e65d4f7a8bcbc82dbe9d726026e40008496ef6355bca8c84ee7c9ca085a05cf2955d16f1fd9e33bf543b486f25ad9c95f93b4f0bf5b39bdaa171c15d9a19a1472f92680f5b5af0a6eb27e456699b15f3a5c19bcbde8f36bed1352963df6d936390a6dd9577b6bd822efb1dd5a05c491e1761cd8909eda8c8fc441fc0b0ef130013af0a21efe206135660508040532fcf4685768feb6bf2840030f984b100de9798c40e7e68ae44a76f420259541a3a66727d2878e6251d1211895f64865869c2ff4e900217c4e0f2941edddf82732ca8a1e024a6ef230d2af988fc80b7d189d0551c0816f3b87ce4f160c6dc338fc925786b90d88aa2af9ce4fdd2f7ad55adf3a07d15888a7f197f9af8585c416b1ba9eebaff6f5ccdc9bcc6765220080f27c3dc1dae442a989ade744140dd7ad28fa5610fd1d0cfb5a068afa064c140532f60cb5819f81aa49c8ca699f9d061211b7781ee506a50c62b553278cc22bcbdc3c12bc0fb3163416d1459652f3d84340d5a2d563c941ef61c1391fb177f09074941ab3f2b0ae471e6357008f4685e8d77ad0619976cbf5f1179ee0f6e354e0417bf36bb5f583e501b5ffe1cb8594387b3207fe039fd4aafdca08838c472368fae58be83fb0c7f2344bad6ce1ca6ca4d69f07c320c58a42282e5c23a17813b827f7e770821b30c9d4d79ed0297918c675753776ef2663773bc659bbd342cf591f19ec95382c57f442877f0b5b17faf0ad9977767d016de0b14913940453a378225ffa2561e9c5f873b94d9c60250ad3029990b07d72650cc816db47d827467bd958b0b1c9fe376f9c5a5f5d326915436166683eb9ab3eedf3fd339054eeee2dc2901d5d068dc3618f4e9f2a5d9f207bcc60d2f22f657fbf0c55c90f606b4dde127a3b744483a3252b5704fd96a3d2ca59d427cfa4b20be7f4c88a732668e8100d4a7406e29f3c6b006fca0d365d8d063f8bc80d2863ee8740eed95277f97c7d7ea44c65c76b1b407310a9ca50d65cf7fadc5b98c0d05fa28ec41fff58fcc96de4d7d9f8653fb3bab35d94612bb58d56b51c604ee970c1fff214eaae68749916afff01886ec5a157b1b2ba79e16894730f8641cf2cc68ea9d5739014f1938d818ccd9e50869e7dbbffda9b01720c8ad642ac7e0c7fc0ec06db1341cd547b92137007eb5131dcbdfcdb072cd7a5ab50431e20ef69cf429862595a9a2c8cbd4e7022ab6e399742433075ed9cb9162905afe8517bbd43fc4aaffd5ba6044c5e1022f80a32ade6720f096ce3a9ed1d381866c8689b2891417efd2ba6511b39baa915b06699b95f266c55b0cf222a002c8af9d78559590d97abaf10538756df522969425247d7c03ea7f56886853c56404ccd431189b03f094a7d01ac306b324176d19c15905e496f276e05d5d49f35dee5a0e8c539737f2125b4c2424e8b547095dec2a88816446d55c3a5f206a623fcbd0448b7ed051843609f11ca3636b114d18f588b6e818ff4b8c2f572d081df5e4854209490bf1600e095da5bfe4c7995b4a2de3a2cf017a09ab0de69f37b466d321788b78eca879553e9b324c3001a64f47f6cfac617861746eaf9d855f53487bdec099a11eb4af532f4898981a10cc9a1280fd286dda709f4ce593ae81629573122bc88baa0205b8ec710382b720463b3e1cf792a5526d8a11b578b0393844f0e1a7c289553549e045052e46f7718fe5a4d89e4d25fd6c0f92aedbf8de4e60fcde5da2544673d3ffda45b2195e597941e5f378e95de33e23e65d41699d70f151bc0b5c3d5351055572c2680490af81dfee2eb5ccc2c12bb8c36148c5f74e8e186d55a9ab5a07a22f4a6b28f547e9f906a2bb8951da4603383e3bfcb84871d1e0ccc6bb4242f51df9747970562398e98cc3d2c0a9d05eed9bb93f36ecd29f206ec69bf3e791670e9908cd5b9085bffef73e2068a3fed9038fd059c7daea468bee7f3f5aec9f2ee14c11c6e99ed5798c2094ab997eaa879b8a122df148af3ad979fe3d47deef6ae8300cfe1ab084c81cb6ab13aa7e9fc8cde4859ce4d0fc12d54b6c212aee2e9a7cf3b0a75f1b78040c2bf20b5da623c9597de7a4def9d75a01eae32af05a2265c2170f68683b3da430622b5f01cc33ae93c495a88050eb31daffae6b7c2a7271fb2df6a1c2521c391b82adc275f7d346b7cbb07eb58aa59277317c67844a5c9b3be5aac99abd32ec7025ad927927275df12285d3d37bbaacedc6dbd3d42455cbdbab0858ff026c6d883ff98e1fc127d9e794d9d1d7ba498086449a4f2657e0c27148e8de631ea119a97d5af124744bd83d6bd468edc6f2c58ace3cc99f39f582100c80edfc2b46fc93a3e408f642059e7a6d7c68f4f1bcca5e11639df5a4700a95a5e8b8edd510489623a7e1e017e06a73943ef29d5264eb9c3d2e368c9726191d0b80b8e914d2a3611c413cce8c66900feba34e2dbe6fc07febec8bad7c5ad21d89c5803df80aa3f4146ae1525e3492050ffca317ea9ed218428ef4ebacce38668036992a3770326d191ca6fe227ddffc0ce36e51fc8b6129fc296f4cca2c1c26fdd0dec4acfb34781c091bb4aa48c9aacd9386c1790c93e94f824fe7c09afb5ccc6838ed32d533eed2ba53bd310793efc20849c29c735ebf454a55cb72122d2f595742d6676acb607572501ce8180c7b34aa30a35b6c2f3217d2049c7e7ced0788d6fc5d35afeccc2d8ac51b7a80f9bb4e487ca5459c17dc606aa04a39382398eee7edbf1789a65721e42346c5035ea64fe41ea4bf7530b65dbf9bc9717eee037c619a82231162e3da5e97da8b7029a8ee654793d45b5d91e15b9b286dba48dd20b18ced0238fbe11497850a5703f55d30b6b7c8ec33e31df351b2bf42c81dc3110d17539cb2ba88c35639728a759b1cec1c1a692749467dd93b46942cbdf9d3adb34289ca00978d1b0787156f94869a0ea1afd89c07fd1f5b46fa75d6100be0b936fcc1fe1d3cf615ae841c1b6e2ebff274e889d863af339d3e367e2fa303c0e564cb9cdfd58ee06c08bf4d9eb8caf8e0d80ccd7bf9e2fcdcdcf79b798454f126fd45eed648dd54dfaa4c2bc4dc6e108d5baa7817e19db2a8015fea70455ba4c3a6477e12b32556d6ee8961721320b772bfbea7089810eaf2710b7b278874a78e2d483d46d81ead114ee30f1549bc59d7e44f6075e99c3120a4fed0d00e803629db6173d9d0ef0176e952de2d0c34b55989a67ea9cd960c44b18c2a7b62999a45e8a38dd835c907c5d431c99fac3cb20104ab69b8874ff8b7fae2d099a493a79ca5062f3ccaab62be1509d3fbbdcce476fbe000f88a808379a7b4036f42b1105f8edea7e340fb118a3d9958aa69151add5c4ee75fd1357e85099931eb53d5aef68b9f20f90bd0c94f433c59fb0ea010a453b5c72740fe8a0adb548979bbdfc7c9be9db9c9b071fe05f891a1e4432f2285acbfbefa69312cd72f920cc6bf393a78c548dc4d4bd0706cfcbe91f203351dac0d69e4f170726aa12cbafc749f427a0fb4952512d3f9865d428ef4943304a851bfd1a4aa750b368016eb628c03504430d442840f61b6c9bce6c07850c9c9cf7fa581a70ff0ac506c16348b1650a5229d4748be084f24b8f168f8522dd908e97f638d630209ec27c6609ea2488eb0b8139c87cf7a1b6b29574ed46d41c24c810ce438da8a9a5c8cbe5a3e778d439aec9603e8e238f36c941afeb10c07659fe1c71757cbdbc65eef633cfcdb21c82d2728f4b0ea991a59f9d4be7c24a6876fc1cb11f5c6693f89aa0496d76916f4e14dc3e6dd80c7bfcd1a9291f1c41e0055ed69789739c1c6cfcd44006d68b1ef23e858826ebddb366047da5c4cad7af57f2baf604e2140fd7f6dafa37bed34f5c41a8178a948b98051de72607959b53f9822521b82111ff4cfd66254dd0778e8252aa697ada8ec87caebe0cc42af3efa13dd9fda4c5a66ad145fca1cd030bdac6d8c76c624945a3547833ff578a69e370817e25bef51571839162afce31fdaa2819716c8a1d33b21b7fe75aa70b3eb05e7889d62fcfcb9164d8bce551fa47bc2f9755d6e5711aa7a9cd27510396c84c2f9f4763c8192b0cf00b046a7292d6ea100e4ca6ba43001a5ce23c495069c885d7a2f2bd45e6972e81211f3b78f15c8392e0c67d140329015a248bf0d69d327e2d95849a4e7d50b484246c147956107cf11b57c481f7a79bdd85a0ade5817d1c70a0145a669cd8f11b4e551748d37004fa375b74e80482d10c6cfb1ecfd76fcd505686e373fd188b80a5bbac7eaf315940661e1f0d54bc191f2d5cef4f5c14aa70aaad66555a7121eb3a21a72d8086e77358ba3e8b79aa6371d805b88adc234f2ca199adfab1604cd9fe8aff9f2ec46e0b118cc78800125509f9658b8f07853df4bd356e86c4b4947573714600cfcb73c49185ce0e70b5e70e00a718ecd706d4491781bde15670257ca08e9aa9b50bd29e5963bbffb89e1d487f1183efa5707778a804857cea639eecc948362374f2a38168dcbb3a4d884dd126960c824d0d815bb3bf1a0accbcdeda260a2fe85f716c1cf6f5b328720c977dd5d4573539dc6a6b1d8cdd313fb41d7ac3c9607b979e0ffee32f6f69103e8e90a89a3cd9933be70116f86ad14ea88b6bbca658955136bdd23c94f4bb8079156d29dedac8c08f46b8270d979299612915f37d53b5ca7b16e90632d452331de72658efe671f53feeda3e4ebf209f79725a4cd24d676e2b8f90d4c924427649656ab12492853a72bde0304344e8aa0f5f52602eb36bf69607809f16a049058d21432370457104bf7ca1ae9f2a93a4db972cfaa2641bf8b1ddad1073f3f72709d4ada09fe61503a87c640c8f12b1052a21beab2eefb5ed5f9880ea148ea2b0ac8f0ec413ff316235412c0b4f0c7b05defd168e1bf806ca092d18b18a949b2564569bf1871dc6a09b90fb645abdcc437efc92723056fa0c13ec78b7c43710315a010fb70d19da341d75a2e1a07545f03ecfafafe4032e3616dec7c7941c7dfa5ff2afe7bd8cf5c7cf544356c6e3621c34fd49d93e4830d93d80521feb8f9f3a353ebeb69152e532e6ebb70d60a9612b2429257b7038c9e1fa2a2635b336b3a37085ef456b9214d72b7bd627b84d115b01da1b166d9331b683b323fe4f4099a4b31e8cbf4f6e1f80a116b23e057bfaca27786b64daadc607ec32c55bed1a943e084d6f32a33d304f47ee7f46be6ea56773d3c338a03f04e961b38de0c40722c36a241b2436adf73b1b4445b6589b53574511f2801a24bf0cd609e2a1d94d7d30ececfdbda708cf0dae4244aa6f6beb1b4ae0f72a9c20c2c28329fa5f204a766a50c77bb406200c6a738c947d4d411183c036ca47ed209edce79ede7facdab2de4e1fe645ac66503bc7728276e19ed92ac92a18ba1795dc6723ec5b3909ef656ea3a2d31e2063720d43a8addeed1ccf4357bff278271cfa8332d5dee66cd9b9afb9b4d1cfa849cbf5c8fb411ea084856c3edc32859df0f34b850db87b1c73cd8a707ef3e9f12653c0fd3bea3195e1ea0acdd9020a1305288aa78a1ce50257af08a14dc14b5b4c9305e6c671141b0dba1db0629a31701aab6bced8b3486b00e4eedcde94f7cb256977a751e3d125aca12222cc9449d7a2a48d42abe36c569190e088983572c58b397e7987a871dc6cf258c809d7a021c30170eb5b62b89e669", 0x1000, 0xe5db}, {&(0x7f0000001ac0)="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", 0x1000, 0x3}, {&(0x7f00000002c0)="e489195224e086ce702eebd2aeda6dd9f4d3b2c2dab8ec8ddcc2df80b82f95b7", 0x20, 0x97}, {&(0x7f0000000300)="80ba35a24f8c527196be2f9cecf78d29b845d8d83fc6d535f8c4e5400bce8d5c2cde6296905da9c8aa49cbc0112e516ea04842bff917b435c9e93b189bbda8868213bdf66f13d3da3253fab2741fe7d9f6ae26987c6d6b2523d69d", 0x5b, 0x1}], 0x1300001, &(0x7f0000000380)='\x00') r1 = dup2(r0, r0) r2 = socket(0x10, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x4, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x7bf9, 0x5, 0x7fffffff, 0x800, 0x4d, 0x8, 0x2b6, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000500)={r3, 0x6c, &(0x7f0000000480)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e22, 0x89, @private1={0xfc, 0x1, [], 0x1}, 0x3}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}]}, &(0x7f0000000540)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'\x00', {0x2, 0x4e24, @private=0xa010102}}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) 18:29:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000340)="6d22de162d8859029fbd58035942909c4327335847ad708d2dcb010d51ced0e5cef769f0161edac96645da3ed89c8515a5df181abb3f0d041d51b764f5211c4dbda7a27c076c9e49ea332d53241a48672e288b6158aa1f0d5c575aa96effe6cc9b351aa92144b56ba7f7a77d12cd2178faba67990dd0b2a6e64d391b13a810f4a9057bb3d1281e28f92e9b37b0d4b86bad1a6eba4356fc608a5d4f678bd1c0e8642a66731a98c3873ccf2ff8a849a02de1dc25d18855e6ce71df14d2be0d3e226ca7ce3a389817d61c798f0ef720d3f4456bd631686bc33169b7ae9df3f3a180045cd96b3726d782cbf6463c71c0a8bdd8936fce021244e76dfab3b5d52aead2") r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=r4, @ANYBLOB="03000000000000002800128008000100736974001c00028008000100", @ANYRES32=0x0, @ANYBLOB="08000300ac1414aac1000f0001000000"], 0x48}}, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000540)=0x3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:29:36 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400000000000008) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) prctl$PR_GET_SECCOMP(0x15) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xd2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xfffffffffffffd10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000040000000000", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) [ 1639.221849] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1639.225206] audit: type=1400 audit(1589912976.758:101): avc: denied { name_bind } for pid=25601 comm="syz-executor.1" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 1639.258195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1639.296293] net_ratelimit: 4 callbacks suppressed [ 1639.296298] ip_tables: iptables: counters copy to user failed while replacing table 18:29:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000003c0), 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/109) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 1639.339398] ip_tables: iptables: counters copy to user failed while replacing table [ 1639.344870] audit: type=1400 audit(1589912976.788:102): avc: denied { node_bind } for pid=25601 comm="syz-executor.1" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 1639.375935] ip_tables: iptables: counters copy to user failed while replacing table 18:29:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={0x0, 0x28}}, 0x24040001) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/92, 0x5c}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000540)=""/191, 0xbf}], 0x3}, 0x23) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x8, 0x0, &(0x7f0000000440), 0x0, 0x0) [ 1639.396393] ip_tables: iptables: counters copy to user failed while replacing table [ 1639.410085] ip_tables: iptables: counters copy to user failed while replacing table 18:29:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x42000100}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x464, 0x3f4, 0x220, 0x70bd2a, 0x25dfdbff, {0x10, 0x2, 0x8, [0x0, 0x4, 0x2, 0xac70, 0x401, 0x3, 0x70000, 0x1000, 0x1, 0x26, 0x1, 0x401, 0x6, 0x32, 0x7, 0x80000000, 0x1f, 0x20, 0x1000, 0x81, 0x8, 0x7, 0x1ff, 0x8, 0x8, 0x2, 0xb4a, 0x9, 0x5bc, 0x3, 0x81, 0x0, 0x5, 0x7, 0x8, 0x8, 0x7, 0x8, 0x7, 0xfff, 0x4, 0xfffffff7, 0x5, 0xd20e, 0x80000001, 0x2, 0x4, 0x8, 0x8, 0x0, 0x1, 0x200, 0x2, 0x8, 0x2, 0x3ad0, 0x6, 0xfff, 0x200, 0x1, 0x2, 0x200, 0x0, 0x8b5], [0xffffffff, 0x80000001, 0x9, 0x6, 0x4, 0x81, 0xdc, 0x0, 0x9, 0xcda1, 0x7, 0x400, 0x7fffffff, 0x4, 0x1f, 0x80000001, 0x5, 0x9, 0x1, 0x0, 0x75fcda3e, 0x80000000, 0x0, 0x0, 0x8, 0x6, 0x7fff, 0x800, 0x7a1e, 0x6, 0x4, 0x4, 0xff, 0x181, 0x6, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x4, 0x0, 0x2, 0x3ff, 0x5, 0x3, 0x3c6b96ac, 0x8, 0xd612865d, 0xfffffff9, 0x2b, 0xd68, 0xe, 0x2, 0x1, 0x5, 0x6, 0x1ff, 0x8e, 0x5, 0x5, 0x0, 0x1, 0xb], [0x401, 0x1, 0x3, 0x26, 0xff, 0xc6, 0x9, 0x9, 0x7, 0x0, 0x80, 0x5ca, 0xfe0, 0x8, 0x2, 0x8, 0x1, 0x4, 0x3, 0x7, 0x8, 0x80, 0x9, 0x40, 0x494, 0x1, 0xac2b, 0x6, 0x8, 0xffff, 0x4, 0x8, 0x0, 0x5, 0x0, 0x0, 0xcf13, 0x7, 0x0, 0x3, 0x68, 0x5d, 0x7, 0x22, 0x2, 0x0, 0x4, 0xff, 0x8, 0x81, 0x80, 0x40, 0xd6, 0x4, 0x5, 0x7, 0x1, 0x4, 0x68, 0x9, 0x10001, 0x8, 0x9f, 0x3ff], [0x4, 0x1f, 0x4, 0x2, 0x0, 0x401, 0x10001, 0x6, 0xffffffff, 0x4, 0x8, 0xff, 0x1ff, 0x101, 0x45, 0x6, 0xf55, 0x9, 0x3, 0x3, 0xfffff941, 0x8, 0x800, 0x80000000, 0x7ff, 0x8001, 0x3, 0x2, 0x7fffffff, 0x80, 0x9, 0x9, 0x1, 0x4, 0xbbd6, 0x9, 0x7fff, 0x8, 0x8, 0x7, 0x40004000, 0x3, 0x9, 0x2, 0x14c6c00, 0x0, 0x97f4, 0x5, 0xd0, 0xffff, 0x81, 0xd9, 0xcbd, 0x9393, 0x9e, 0x20, 0x3ae, 0x8, 0x5, 0x1, 0x2, 0x3992, 0x1a, 0x21c], 0x41, ['wlan0md5sumkeyring^{`eth0\x00', '\x00', 'posix_acl_access]\x00', 'sit\x00', '\x00', '/wlan06{vmnet1\x00']}, ["", "", "", "", "", ""]}, 0x464}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008891) [ 1639.454330] audit: type=1400 audit(1589912976.798:103): avc: denied { name_connect } for pid=25601 comm="syz-executor.1" dest=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 18:29:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d69740000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f0000000000000043a867bbf9a83de5821e39f6550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c0000000000000000000000000000000000000000000000000000000300000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000feffffff00"/672], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) keyctl$chown(0x4, r4, 0x0, r6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000100)={0xa0, 0x0, 0x2, {{0x6, 0x1, 0xffffffffffffffff, 0x0, 0x7, 0x9, {0x3, 0xffffffff7fffffff, 0x80, 0x7f, 0x7, 0x1f, 0x9, 0xec6, 0x2, 0x20, 0xfff, r3, r6, 0x8, 0xd710}}}}, 0xa0) [ 1640.192485] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1640.294875] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1640.300020] CPU: 1 PID: 25632 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 1640.307887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1640.317227] Call Trace: [ 1640.319812] dump_stack+0x13e/0x194 [ 1640.323434] dump_header+0x178/0x6d4 [ 1640.327139] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1640.332147] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1640.337241] ? ___ratelimit+0x50/0x519 [ 1640.341123] oom_kill_process.cold+0x10/0xae3 [ 1640.345611] ? lock_acquire+0x170/0x3f0 [ 1640.349595] ? lock_downgrade+0x6e0/0x6e0 [ 1640.353739] out_of_memory+0x2d5/0x1110 [ 1640.357723] ? oom_killer_disable+0x1c0/0x1c0 [ 1640.362427] ? mutex_trylock+0x152/0x1a0 [ 1640.366487] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1640.371336] ? warn_alloc+0xf0/0xf0 [ 1640.374952] ? find_held_lock+0x2d/0x110 [ 1640.379004] ? fs_reclaim_acquire+0x10/0x10 [ 1640.383328] __alloc_pages_nodemask+0x5d3/0x700 [ 1640.387991] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1640.392996] ? copy_process.part.0+0x17d5/0x6a50 [ 1640.397740] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1640.402749] ? __lock_acquire+0x5f7/0x4620 [ 1640.407063] ? trace_hardirqs_on+0x10/0x10 [ 1640.411292] copy_process.part.0+0x26a/0x6a50 [ 1640.415791] ? trace_hardirqs_on+0x10/0x10 [ 1640.420010] ? save_trace+0x290/0x290 [ 1640.423796] ? kcov_ioctl+0x4d/0x180 [ 1640.427514] ? find_held_lock+0x2d/0x110 [ 1640.431580] ? __cleanup_sighand+0x40/0x40 [ 1640.435809] ? lock_downgrade+0x6e0/0x6e0 [ 1640.439963] _do_fork+0x180/0xc80 [ 1640.443409] ? put_timespec64+0xaa/0xf0 [ 1640.447375] ? fork_idle+0x270/0x270 [ 1640.451086] ? SyS_clock_gettime+0xf5/0x180 [ 1640.455396] ? SyS_clock_settime+0x1a0/0x1a0 [ 1640.459792] ? fput+0xb/0x140 [ 1640.462894] ? do_syscall_64+0x4c/0x640 [ 1640.466860] ? sys_vfork+0x20/0x20 [ 1640.470392] do_syscall_64+0x1d5/0x640 [ 1640.474297] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1640.479482] RIP: 0033:0x45ca29 [ 1640.482664] RSP: 002b:00007f9620048c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1640.490364] RAX: ffffffffffffffda RBX: 00000000004dabc0 RCX: 000000000045ca29 [ 1640.497622] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 1640.504882] RBP: 000000000078bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 1640.512139] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1640.519504] R13: 0000000000000076 R14: 00000000004c331e R15: 00007f96200496d4 [ 1640.589501] Mem-Info: [ 1640.591961] active_anon:232672 inactive_anon:1113190 isolated_anon:0 [ 1640.591961] active_file:19 inactive_file:10 isolated_file:0 [ 1640.591961] unevictable:15114 dirty:17 writeback:0 unstable:0 [ 1640.591961] slab_reclaimable:16051 slab_unreclaimable:113014 [ 1640.591961] mapped:59916 shmem:14712 pagetables:11305 bounce:0 [ 1640.591961] free:24997 free_pcp:7 free_cma:0 [ 1640.642603] Node 0 active_anon:916788kB inactive_anon:883200kB active_file:72kB inactive_file:0kB unevictable:46744kB isolated(anon):0kB isolated(file):0kB mapped:229668kB dirty:64kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 344064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1640.871068] Node 1 active_anon:13900kB inactive_anon:3569560kB active_file:0kB inactive_file:8kB unevictable:13712kB isolated(anon):0kB isolated(file):0kB mapped:9924kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1640.898665] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4280kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1640.925564] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1640.930614] Node 0 DMA32 free:36240kB min:36272kB low:45340kB high:54408kB active_anon:916176kB inactive_anon:878920kB active_file:36kB inactive_file:0kB unevictable:46816kB writepending:0kB present:3129332kB managed:2621260kB mlocked:46816kB kernel_stack:9824kB pagetables:17204kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1640.960169] lowmem_reserve[]: 0 0 0 0 0 [ 1640.964137] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1640.989575] lowmem_reserve[]: 0 0 0 0 0 [ 1640.993577] Node 1 Normal free:53580kB min:53612kB low:67012kB high:80412kB active_anon:13900kB inactive_anon:3569560kB active_file:4kB inactive_file:4kB unevictable:13712kB writepending:0kB present:3932160kB managed:3870192kB mlocked:13712kB kernel_stack:8768kB pagetables:27860kB bounce:0kB free_pcp:360kB local_pcp:116kB free_cma:0kB [ 1641.023415] lowmem_reserve[]: 0 0 0 0 0 [ 1641.027378] Node 0 DMA: 10*4kB (UE) 6*8kB (UME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10440kB [ 1641.043230] Node 0 DMA32: 308*4kB (UME) 222*8kB (UME) 187*16kB (UM) 239*32kB (UM) 179*64kB (UM) 39*128kB (UM) 12*256kB (UM) 4*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36240kB [ 1641.059161] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1641.069869] Node 1 Normal: 205*4kB (UME) 895*8kB (UM) 1326*16kB (UME) 430*32kB (UME) 80*64kB (UME) 27*128kB (UME) 8*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53580kB [ 1641.085476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1641.094323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1641.102901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1641.111763] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1641.120355] 16662 total pagecache pages [ 1641.124317] 0 pages in swap cache [ 1641.127749] Swap cache stats: add 0, delete 0, find 0/0 [ 1641.133112] Free swap = 0kB [ 1641.136105] Total swap = 0kB [ 1641.139098] 1965979 pages RAM [ 1641.142234] 0 pages HighMem/MovableOnly [ 1641.146187] 339053 pages reserved [ 1641.149610] 0 pages cma reserved [ 1641.152991] Out of memory: Kill process 25607 (syz-executor.4) score 1008 or sacrifice child [ 1641.161615] Killed process 25607 (syz-executor.4) total-vm:75104kB, anon-rss:18008kB, file-rss:40640kB, shmem-rss:0kB [ 1641.177950] oom_reaper: reaped process 25607 (syz-executor.4), now anon-rss:17992kB, file-rss:5824kB, shmem-rss:0kB [ 1641.277151] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1641.450744] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1641.455884] CPU: 0 PID: 25629 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 1641.463750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1641.473087] Call Trace: [ 1641.475670] dump_stack+0x13e/0x194 [ 1641.479290] dump_header+0x178/0x6d4 [ 1641.482993] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1641.488000] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1641.493095] ? ___ratelimit+0x50/0x519 [ 1641.497001] oom_kill_process.cold+0x10/0xae3 [ 1641.501491] ? lock_acquire+0x170/0x3f0 [ 1641.505454] ? lock_downgrade+0x6e0/0x6e0 [ 1641.509593] out_of_memory+0x2d5/0x1110 [ 1641.513561] ? oom_killer_disable+0x1c0/0x1c0 [ 1641.518044] ? mutex_trylock+0x152/0x1a0 [ 1641.522095] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1641.526938] ? warn_alloc+0xf0/0xf0 [ 1641.530565] __alloc_pages_nodemask+0x5d3/0x700 [ 1641.535224] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1641.540227] ? lock_downgrade+0x6e0/0x6e0 [ 1641.544372] alloc_pages_current+0xe7/0x1e0 [ 1641.548684] __page_cache_alloc+0x245/0x3d0 [ 1641.552996] filemap_fault+0xc18/0x1c50 [ 1641.556973] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1641.561633] ? lock_acquire+0x170/0x3f0 [ 1641.565596] ? ext4_filemap_fault+0x7c/0xb0 [ 1641.569914] ext4_filemap_fault+0x84/0xb0 [ 1641.574051] __do_fault+0xfa/0x380 [ 1641.577575] ? pte_offset_kernel+0x98/0xe0 [ 1641.581796] __handle_mm_fault+0x217b/0x3280 [ 1641.586193] ? copy_page_range+0x1d70/0x1d70 [ 1641.590587] ? find_held_lock+0x2d/0x110 [ 1641.594647] handle_mm_fault+0x288/0x7a0 [ 1641.598695] __do_page_fault+0x4bc/0xb40 [ 1641.602746] ? vmalloc_fault+0xdf0/0xdf0 [ 1641.606791] ? do_page_fault+0x60/0x4f2 [ 1641.610751] ? page_fault+0x2f/0x50 [ 1641.614364] page_fault+0x45/0x50 [ 1641.617806] RIP: 78c900:0x78bf00 [ 1641.621156] RSP: 0005:00000000000003e7 EFLAGS: 0078c900 [ 1641.953896] Mem-Info: [ 1641.976176] active_anon:233177 inactive_anon:1113190 isolated_anon:0 [ 1641.976176] active_file:10 inactive_file:32 isolated_file:0 [ 1641.976176] unevictable:15133 dirty:0 writeback:0 unstable:0 [ 1641.976176] slab_reclaimable:16051 slab_unreclaimable:113010 [ 1641.976176] mapped:59922 shmem:14712 pagetables:11305 bounce:0 [ 1641.976176] free:24620 free_pcp:27 free_cma:0 [ 1642.189371] Node 0 active_anon:918816kB inactive_anon:883200kB active_file:36kB inactive_file:0kB unevictable:46816kB isolated(anon):0kB isolated(file):0kB mapped:229760kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 344064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1642.336898] Node 1 active_anon:13892kB inactive_anon:3569560kB active_file:4kB inactive_file:104kB unevictable:13716kB isolated(anon):0kB isolated(file):0kB mapped:9928kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1642.531165] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4280kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1642.699483] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1642.733065] Node 0 DMA32 free:33672kB min:36272kB low:45340kB high:54408kB active_anon:918184kB inactive_anon:878920kB active_file:24kB inactive_file:0kB unevictable:46816kB writepending:0kB present:3129332kB managed:2621260kB mlocked:46816kB kernel_stack:9824kB pagetables:17204kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1642.961031] lowmem_reserve[]: 0 0 0 0 0 [ 1642.975045] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1643.041231] lowmem_reserve[]: 0 0 0 0 0 [ 1643.045859] Node 1 Normal free:53820kB min:53612kB low:67012kB high:80412kB active_anon:13804kB inactive_anon:3569560kB active_file:0kB inactive_file:0kB unevictable:13716kB writepending:0kB present:3932160kB managed:3870192kB mlocked:13716kB kernel_stack:8672kB pagetables:27752kB bounce:0kB free_pcp:192kB local_pcp:192kB free_cma:0kB [ 1643.077920] lowmem_reserve[]: 0 0 0 0 0 [ 1643.083103] Node 0 DMA: 10*4kB (UE) 6*8kB (UME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10440kB [ 1643.102455] Node 0 DMA32: 139*4kB (E) 254*8kB (UME) 248*16kB (UM) 283*32kB (UM) 191*64kB (UM) 39*128kB (UM) 12*256kB (UM) 4*512kB (M) 1*1024kB (M) 1*2048kB (H) 0*4096kB = 41020kB [ 1643.118775] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1643.133073] Node 1 Normal: 290*4kB (UME) 902*8kB (UM) 1326*16kB (UME) 435*32kB (UME) 80*64kB (UME) 27*128kB (UME) 8*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54136kB [ 1643.149233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1643.158646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1643.195926] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1643.214560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1643.240706] 18160 total pagecache pages [ 1643.280013] 0 pages in swap cache [ 1643.283625] Swap cache stats: add 0, delete 0, find 0/0 [ 1643.313418] Free swap = 0kB [ 1643.316453] Total swap = 0kB [ 1643.321557] 1965979 pages RAM [ 1643.324681] 0 pages HighMem/MovableOnly [ 1643.329393] 339053 pages reserved [ 1643.334231] 0 pages cma reserved [ 1643.337606] Out of memory: Kill process 25595 (syz-executor.4) score 1007 or sacrifice child [ 1643.347076] Killed process 25595 (syz-executor.4) total-vm:75096kB, anon-rss:18500kB, file-rss:34624kB, shmem-rss:0kB [ 1643.397102] oom_reaper: reaped process 25595 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 18:29:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) write$sndseq(r4, &(0x7f0000000040)=[{0x37, 0x9, 0x4, 0x80, @time={0x8001, 0x9}, {0xfc, 0x3}, {0x7f}, @addr={0x1b, 0x1}}, {0x0, 0x1, 0x4a, 0x8, @tick=0x5, {0x56, 0x9}, {0x2}, @addr={0x5, 0x3f}}], 0x38) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) r5 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$VIDIOC_ENCODER_CMD(r7, 0xc028564d, &(0x7f00000006c0)={0x2, 0x1, [0x81, 0x3b, 0x6d87, 0x5, 0x1, 0x3, 0x6, 0x1]}) recvmmsg(r5, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/5, 0x5}], 0x4}, 0x4}, {{&(0x7f00000001c0)=@caif=@dgm, 0x80, &(0x7f0000000440)=[{&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/15, 0xf}, {&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000380)=""/134, 0x86}], 0x5}, 0x9}, {{&(0x7f00000004c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000780)=[{&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/28, 0x1c}, {&(0x7f0000000580)=""/205, 0xcd}, {&(0x7f0000000680)=""/48, 0x30}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/66, 0x42}, {&(0x7f0000004ac0)=""/4096, 0x1000}], 0x7, &(0x7f0000005ac0)=""/122, 0x7a}, 0x4ead}, {{&(0x7f0000005b40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005bc0)=""/65, 0x41}, {&(0x7f0000005c40)=""/51, 0x33}], 0x2, &(0x7f0000005cc0)=""/117, 0x75}}, {{&(0x7f0000005d40)=@alg, 0x80, &(0x7f0000006200)=[{&(0x7f0000005dc0)=""/29, 0x1d}, {&(0x7f0000005e00)=""/27, 0x1b}, {&(0x7f0000005e40)=""/159, 0x9f}, {&(0x7f0000005f00)=""/197, 0xc5}, {&(0x7f0000006000)=""/214, 0xd6}, {&(0x7f0000006100)=""/205, 0xcd}], 0x6, &(0x7f0000006280)=""/30, 0x1e}, 0x10000}, {{&(0x7f00000062c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000006780)=[{&(0x7f0000006340)=""/36, 0x24}, {&(0x7f0000006380)=""/144, 0x90}, {&(0x7f0000006440)=""/176, 0xb0}, {&(0x7f0000006500)=""/84, 0x54}, {&(0x7f0000006580)=""/20, 0x14}, {&(0x7f00000065c0)=""/139, 0x8b}, {&(0x7f0000006680)=""/245, 0xf5}], 0x7, &(0x7f0000006800)=""/170, 0xaa}, 0xba9}, {{&(0x7f00000068c0)=@nfc, 0x80, &(0x7f0000006a80)=[{&(0x7f0000006940)=""/53, 0x35}, {&(0x7f0000006980)=""/84, 0x54}, {&(0x7f0000006a00)=""/37, 0x25}, {&(0x7f0000006a40)=""/42, 0x2a}], 0x4, &(0x7f0000006ac0)=""/23, 0x17}, 0x8}, {{&(0x7f0000006b00)=@nfc, 0x80, &(0x7f0000007040)=[{&(0x7f0000006b80)=""/106, 0x6a}, {&(0x7f0000006c00)=""/37, 0x25}, {&(0x7f0000006c40)=""/42, 0x2a}, {&(0x7f0000006c80)=""/186, 0xba}, {&(0x7f0000006d40)=""/164, 0xa4}, {&(0x7f0000006e00)=""/187, 0xbb}, {&(0x7f0000006ec0)=""/169, 0xa9}, {&(0x7f0000006f80)=""/158, 0x9e}], 0x8, &(0x7f00000070c0)=""/192, 0xc0}, 0x9}], 0x8, 0x102, &(0x7f0000007380)={0x0, 0x3938700}) 18:29:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000100039040000000000000000208d60f8e7cf538ac21541af19baeef743", @ANYRES32=r4, @ANYBLOB="03000000000000002800128008000100736974001c00028008000100", @ANYRES32=0x0, @ANYBLOB="08000300ac1414aa06000f0001000000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:29:41 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) 18:29:41 executing program 1: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x4, 0xf, [], 0xa, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)=""/15}, &(0x7f0000000300)=0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)='\x00@\x00\x00\x00\x00\x00\x00', 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000001bff4)) r2 = accept(r1, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3834d0a99c858c02595e822eddf01713ba7a4d20ca385d9e81f9fa7c5e75120f668884fd800e7ffda465959917308d6c013b59bc08d24bea138f0bf5f14c6039489fe0f4b9dcf5a67f900c2543d922ddc8b62738a62e1e07a6965de9c06b125fd48e58a061d87e8e6bd64a73b822d912c027f26dbe38cd51e88f55a80e46edc7de7b8d4d5210ef422660eab1b3e1f4d2f9e9ebf385db8770194e8d4b091301580b6c414a450e0a8382d94ab71c37", @ANYRES16=0x0, @ANYBLOB="0000000000000000d76908001b00f304000000000000006d8858c3e33ea7fe80a70000"], 0xfffffd33}}, 0x8000051) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x8, 0x2013, 0x1}) recvmsg(r2, &(0x7f000000b680)={0x0, 0x231, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}, {&(0x7f000000b500)=""/153, 0x7fffeffb}], 0x2}, 0x0) [ 1643.898989] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1643.936028] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 18:29:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8df9bfaf60f20c06635200000000f22c067f3af", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x1, 0x4, 0x0, 0x0, 0x0, 0x80000000000800, 0x20000000fb, 0x0, 0x40, 0x0, 0xfffffffffffffffc], 0x1, 0x200400}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1643.963436] ip_tables: iptables: counters copy to user failed while replacing table [ 1644.011333] ip_tables: iptables: counters copy to user failed while replacing table [ 1644.039977] ip_tables: iptables: counters copy to user failed while replacing table 18:29:41 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000280)={0xa20000, 0x5, 0x4, r0, 0x0, &(0x7f0000000100)={0x9b0905, 0x10, [], @string=&(0x7f00000000c0)=0x40}}) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000440)=""/226) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000063c0)=ANY=[@ANYBLOB="b702000000000000bfa3f0fff8ffffff7984f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000370000216a0a00fe002000008500000027000000b7060000200000009500000000000000d10d633a8c36bbeb0000762373a7024f6d40c9b8c7da0ace992546daa595a6e42e09d24a3e8cbb7c84f39c355543248936043a9e60c287094edf3495a3d5ff55422c242ab67c1911f25ad1eec24cde2260a146967c385c3bf2e0e75a6e767509396c0a2280997125132380605f9840e41854f100002e88a3e1507ba3872c4096104e4f4c693cc6d690c2e28757adf0e3a62c23c42880366f2834cfb448a5a1fb0bfbae11b2f84050b2d35b6ad44a27e97df1a24e86b2d61db560c34dde60b4861953c158d065c4cb0fe4a089e876e535188de88a16f36e4afe0f9ecc7dc90f330eb9ea0f9d4e80876800"/344], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x75, 0x0, &(0x7f0000000380)="a673f3ce05f1a282eeab0500000800f08102e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x62fcbfac, 0x0, 0x5c, 0x0, &(0x7f0000000540)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x40) [ 1644.134793] ip_tables: iptables: counters copy to user failed while replacing table [ 1644.160716] ip_tables: iptables: counters copy to user failed while replacing table 18:29:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="80000002e0000400", 0x8) r3 = accept$alg(r0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) sendmmsg(r3, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x3f2, &(0x7f00000000c0)}}, {{&(0x7f0000007500)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000007680), 0x141, &(0x7f00000000c0), 0x10}}], 0x4000000000003d5, 0x0) 18:29:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) listen(r1, 0xff) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000000)=""/61, &(0x7f0000000040)=0x3d) dup2(r0, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:29:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="7261ce9708cc000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) [ 1644.400643] x_tables: ip_tables: TRACE target: only valid in raw table, not raΗÌ [ 1644.456585] x_tables: ip_tables: TRACE target: only valid in raw table, not raΗÌ [ 1644.496407] x_tables: ip_tables: TRACE target: only valid in raw table, not raΗÌ [ 1644.867798] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1644.896972] systemd-journal cpuset=/ mems_allowed=0-1 [ 1644.908886] CPU: 1 PID: 3637 Comm: systemd-journal Not tainted 4.14.180-syzkaller #0 [ 1644.916862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1644.926209] Call Trace: [ 1644.928799] dump_stack+0x13e/0x194 [ 1644.932433] dump_header+0x178/0x6d4 [ 1644.936147] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1644.941235] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1644.946339] ? ___ratelimit+0x50/0x519 [ 1644.950230] oom_kill_process.cold+0x10/0xae3 [ 1644.954727] ? lock_downgrade+0x6e0/0x6e0 [ 1644.958880] out_of_memory+0x2d5/0x1110 [ 1644.962857] ? oom_killer_disable+0x1c0/0x1c0 [ 1644.967353] ? mutex_trylock+0x152/0x1a0 [ 1644.971417] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1644.976269] ? warn_alloc+0xf0/0xf0 [ 1644.979911] __alloc_pages_nodemask+0x5d3/0x700 [ 1644.984591] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1644.989602] ? lock_downgrade+0x6e0/0x6e0 [ 1644.993754] alloc_pages_current+0xe7/0x1e0 [ 1644.998086] __page_cache_alloc+0x245/0x3d0 [ 1645.002408] filemap_fault+0xc18/0x1c50 [ 1645.006386] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1645.011053] ? lock_acquire+0x170/0x3f0 [ 1645.015022] ? ext4_filemap_fault+0x7c/0xb0 [ 1645.019348] ext4_filemap_fault+0x84/0xb0 [ 1645.023580] __do_fault+0xfa/0x380 [ 1645.027116] __handle_mm_fault+0x22e9/0x3280 [ 1645.031525] ? copy_page_range+0x1d70/0x1d70 [ 1645.035933] ? find_held_lock+0x2d/0x110 [ 1645.039993] handle_mm_fault+0x288/0x7a0 [ 1645.044039] __do_page_fault+0x4bc/0xb40 [ 1645.048086] ? vmalloc_fault+0xdf0/0xdf0 [ 1645.052129] ? do_page_fault+0x60/0x4f2 [ 1645.056126] ? page_fault+0x2f/0x50 [ 1645.059998] page_fault+0x45/0x50 [ 1645.063433] RIP: 0001:0x1 [ 1645.066174] RSP: 3f2d2330:00007ffec036b1b0 EFLAGS: 7ffec036afc0 [ 1645.105276] Mem-Info: [ 1645.113835] active_anon:230089 inactive_anon:1111876 isolated_anon:0 [ 1645.113835] active_file:0 inactive_file:21 isolated_file:0 [ 1645.113835] unevictable:19212 dirty:0 writeback:0 unstable:0 [ 1645.113835] slab_reclaimable:16075 slab_unreclaimable:112945 [ 1645.113835] mapped:63423 shmem:14712 pagetables:11255 bounce:0 [ 1645.113835] free:24945 free_pcp:103 free_cma:0 [ 1645.159840] Node 0 active_anon:907108kB inactive_anon:880656kB active_file:44kB inactive_file:16kB unevictable:60816kB isolated(anon):0kB isolated(file):0kB mapped:240552kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 346112kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1645.255633] Node 1 active_anon:13248kB inactive_anon:3566848kB active_file:56kB inactive_file:0kB unevictable:16032kB isolated(anon):0kB isolated(file):0kB mapped:13140kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1645.290502] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1645.318579] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1645.382921] Node 0 DMA32 free:36224kB min:36272kB low:45340kB high:54408kB active_anon:906460kB inactive_anon:876388kB active_file:100kB inactive_file:0kB unevictable:60788kB writepending:0kB present:3129332kB managed:2621260kB mlocked:60788kB kernel_stack:9824kB pagetables:17248kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 1645.563121] lowmem_reserve[]: 0 0 0 0 0 [ 1645.583083] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1645.761479] lowmem_reserve[]: 0 0 0 0 0 [ 1645.783065] Node 1 Normal free:53272kB min:53612kB low:67012kB high:80412kB active_anon:13248kB inactive_anon:3566848kB active_file:16kB inactive_file:0kB unevictable:16032kB writepending:0kB present:3932160kB managed:3870192kB mlocked:16032kB kernel_stack:8576kB pagetables:27616kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1645.947471] lowmem_reserve[]: 0 0 0 0 0 [ 1645.964769] Node 0 DMA: 10*4kB (UE) 4*8kB (UE) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 1645.988657] Node 0 DMA32: 593*4kB (UME) 121*8kB (UME) 20*16kB (UM) 285*32kB (UM) 169*64kB (UM) 46*128kB (UM) 11*256kB (UM) 2*512kB (M) 3*1024kB (M) 0*2048kB 0*4096kB = 36396kB [ 1646.014111] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1646.027197] Node 1 Normal: 159*4kB (UME) 827*8kB (UME) 1328*16kB (UME) 450*32kB (UME) 79*64kB (UME) 27*128kB (UME) 8*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53460kB [ 1646.045381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1646.067897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1646.076896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1646.102227] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1646.119218] 20175 total pagecache pages [ 1646.124460] 0 pages in swap cache [ 1646.127932] Swap cache stats: add 0, delete 0, find 0/0 [ 1646.143408] Free swap = 0kB [ 1646.146461] Total swap = 0kB [ 1646.149472] 1965979 pages RAM [ 1646.157319] 0 pages HighMem/MovableOnly [ 1646.165324] 339053 pages reserved [ 1646.168797] 0 pages cma reserved [ 1646.178979] Out of memory: Kill process 25645 (syz-executor.4) score 1010 or sacrifice child [ 1646.199456] Killed process 25679 (syz-executor.4) total-vm:74972kB, anon-rss:18380kB, file-rss:34816kB, shmem-rss:0kB [ 1646.286408] oom_reaper: reaped process 25679 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 18:29:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={r6, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x4, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x7bf9, 0x5, 0x7fffffff, 0x800, 0x4d, 0x8, 0x2b6, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000002bc0)={r6, 0x8, 0x20, 0x400, 0x8000}, &(0x7f0000002c00)=0x18) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x200, 0x1, 0x0, {0x0, 0x0, 0x0, r4, 0x10000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) sendmmsg$alg(r7, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)="610032e3f856245be030150d23f14d2ab7c2cf27adb591979716dda2b44e5aca9c462e824a8cca95e9ff211cb16b94d75c71cc3433067b88f274fdfb13af4c2464527803959b84b1cd4f65b52c1668b76133b62efc11059e1676f9f321a435ce3872a747eb763a5d3cccf39de4ca1faa17e991f2206d7fecefa4b760ca74f3641a74df6e6b6bed00a94f4d1d17d412dcf64fdb44c4be7b9bce10991f518b034b95d4a54f21dc3eaeb7ff85c1d8eb76ec37f320ea97974675036011197f63985553f1591de88c71b15e37d3bf82609ad329df0f3560a4ed872618deb65f6006e6b823697f16e6e88ae017731561f2edbb72751209780bf79f", 0xf8}, {&(0x7f0000000400)="59274dd5f29306", 0x7}, {&(0x7f0000000540)="d05deed738a6556a06560883fa4b465817764000125421ea3c17c31d1df2ba92a9c2f2740327b11a45fb857855b3ee8dffe022ece2ee87eca7cd0989dda11e7d5a909dd076331104bd4fbd7fb3b0c32707a57a8e05a72ae2b5b8034f2922bfefd9cf92a97f7a28ca4fd7d2c9fa8c65b145954aa3ed3f42cafa57bfb573693318534361b1f4a92acd9a0ddf66aacbaf111e35f5ee241bda572bc83e5298e7f2806d510b6efb870cac408291b13e4ca424cb172530a44d76110eca6f081b52b543ed0c09b6ad66edd62de2b890fd1f2bcca46eda2924", 0xd5}, {&(0x7f0000000640)="a6f771d63d3ea5e4c72d6f870578af32ce3627cbea4154ba499f9f69df38c9186d95c8c19af3d3c0bfcbd6a2cc7105ba475af85d51959a38d193bb2e5bf055783c22fe85db86f1b7831add1ab1ce9e94fa0d5d1af11a120b66c30b200f6cdbc0aef3d793f1f3572c4da2c5a5455a6d80d265b84d97ad52e0fbc20ea873f5e7a081b6b1beb296a9194b6285aba312ca1b2fe070c61e51cf74807067a986222e77251a7418f77cd7f17cdb7f49c409f1ad5fd2b33181a89d3a93dc36d6aeefbdda19be7231deae604a96cf034553da48f0bfe32a7108c6", 0xd6}, {&(0x7f0000000740)="0b678268eea8b1e20fba035885381a5e2953f12341324030b9e2589a0d7322c3dafcae6d0e3061ca91fd2d706b8b97b9a5182a7641069ee982edc0b28102635f62fb7f2024ca3b3619cbfb70396231f8f7579eefa111b58e59ccbce1858b6b0634cf36b3e5f068529daee9b66f7e26aa82f2f3021b72b6130f4cde9511e696a50a40f5f967", 0x85}], 0x5, &(0x7f0000000880)=[@iv={0x98, 0x117, 0x2, 0x81, "837031f9f3f0a3239425cdcdad69654ca6fa6c6224ec75cfac9e82bb56c5f9be1fab82233eea9a474ec95fedf68a39ab09f9efc0908c639800c4fc0733f2fe8eb9d9e4783772e46ad0373c7372ab92cacbe50ad6d29ec862374cf6987b695c90d2a025f7ca31adac09c0f47b2ad73e26e2a1d568ef115d08ed7dbcfda9c3325494"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xb0}, {0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000940)="d8b590bd367eb0a8cc4131650c2c97f06f55c2cd26c765258bf05798dbca6fa9f7a8f81f7da9cdaf933d455098326727d585a8a40270b46ad1f6062dd10abdc7ca0948145e2e481d27fcec65b2207ffe62e70f96c9797710ea7c9da1bc1e4a0b2dab09e23b229485ab16e2ccf219ae85e6891c3af5adc41491456ea89afb34c2abb0c3d82b7a989259835b5e3d3b62762a004079ba2c2efa8f4140b158c9154e234a54b9e453b6fa18f637a4429c10f50f1532fb", 0xb4}], 0x1, &(0x7f0000000a00)=[@assoc={0x18, 0x117, 0x4, 0xff}, @iv={0x40, 0x117, 0x2, 0x25, "f23ed24d6569e861720d17154a414380000000f8ea"}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x400}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}], 0xb8}, {0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000ac0)="de198a50a5643c362e3bc13b092a08de12feccd03167afb25a30f2904a23136cff4b21f0fe5f07baa49cfc3adf1473f589e1dbd65659691378d0f5e6178d4158159199de4c8ca8877b1cec39e5aedeb31a78cb238f802fbc579b0f4b3d1ea5e3d96157fdf482b98d5373be588bcd0386af48389d179479f4c8adaf2258e96adb9b9b46980b1f9e5510bf94b26a38e3d015ffbe1cea25092371f03148246d13cc952f320c86cbe4c160fe3043263119ab66c338d9b9d3e08fd6a8ed1a11aa5b55ac5cd3a4271992567d1a63a07c949df4d6da129161d9c4d83bdf66271aa479a653cd96e47e2a853544ed67", 0xeb}, {&(0x7f0000000bc0)="60238ef8f2d69fc148bf0b542029eb02de57006b879feaac4b4cad2e0ebdc516bfccdedda7432989dd74a913a69173459e7b8aa4c898b63c3d8151229229dc", 0x3f}, {&(0x7f0000002c40)="d55cdbf4912357d2eb514805fad38f9dcdc708bd772cc15924d5d8e264d48bea1c47e62da6024a7c9f3003e9ca9ea6686700005be0c6fedf6523dc41b04a4b3cd348b719ca1b4a1fb2de6415f067987230a7f030bd943d47a45beaf573f11cd2037121ee3c0d8f53c0e2b69bdf3c43a198e00906ec1daed78d92cbf81641a34f445cd14b7bcde4e3469503da62405566dde0fa080e86ba2c36148639ed198d77277bf2d6f0da98e5d4c752c05fe6fa2f70a4a3d12c291d82f3747320ed64717f051baf9c09562a5546711ddf4e4544cff7349d1e4055a29b77d0005bb54c0e17fe85abee6baa6a133acb0c2d", 0xec}, {&(0x7f0000000cc0)="946f42bcf5f5751582bfd0e603c309db92e6f0df1cc6566b0e60d2481790d1b6828ad5698c535d6a9462c18557dfdc1c7eced65e3856b430d42fa8a103087672b14347908315feb9244b58cd2d9eef4c1081b99b9b1f26ba5443755c1e0dd35debcd500f0ed319b73d077d3d6b3006c5c82886bbc794b519942f4fcfa909bac18c501a19124511acc573eaf65b49c17963b8c548334d8ccee1d6f39afdbf6a03a7988b91e33878b8606b0c14d37db86634c360c39079", 0xb6}, {&(0x7f0000000d80)="b42764c3b74a87f539b579d2d5eebbae18432a635c21540b7d478a27a8b6179a420283b44a31649c506d7be5940b6fad1c9b4abeef5d1a640499866005abec51e42a3c53ba66f422f50bc45cdc97d08fa3069be769ffad", 0x57}, {&(0x7f0000000e00)="d636eabe22c4a418b951df5fa5212af10f7e72d716ffc0ca0a2be7a6d1759e74fb72b0c54e9cdd872f9924750b4f8b54a242fab7b2601756dabbae6f3aab8bfd1a7013eba7a63e5d0329834a4b20b5a8d32df29c411ef5bf0af913e4ad6f7c2f29d4e60ef81d642121b61184d45bada6b141fdd9a38184da8f2fcd98b2b462efdb61d15066cdef", 0x87}], 0x6, &(0x7f0000000f40)=[@op={0x18}], 0x18, 0x4000800}, {0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f80)="abeac2156f57e28b5ef2de52b34e085d2ecd7a9c0011ca7aa281906820528ca763e9cad9d0a5c04003b41317b9002ae95cc8f5744b80cc8bef7da6d60f9f67794acaf670c56234", 0x47}, {&(0x7f0000001000)="e73af026575148bfe55f85406acfc992957587908eafab3cc0270e7b8f7634a5946d335a9aa69e1fef1b147d8e190dba170ad524e2d1c61067ff9ed132bacd9aa0074ecd8087db7bcfbd4fc3f15f3aba8b5ebc2bef6d22912ea4e69fcc032d2efc3929206503a9ed47f210e5286d67762560c6325edd321094c49a845daaa1f03dd69bcbca663745e5bb7d3151a35adfea7901922e02", 0x96}, {&(0x7f00000010c0)="df08f62dadd22a26dd98a5", 0xb}], 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1a8, 0x4}, {0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)="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", 0xfd}, {&(0x7f0000001400)="f7c0976212dbeb00a2ff089bdb0b6e2eff788a0a30a08a0a6ec06db72cd709611926465484c46f5a4ac43ae4f945329f6546210556352e832462e30d917e48b7059f92bed649f3a5d35341aa5c54b7d155171b918c71e3d1753ab20102e5934dccf3bed270fa6f9158698b43f2289d10f0047381df2e80421ccde63fb867bea57cc80ecb93a8a4f24d8ec95d8d3520775b7f13db", 0x94}, {&(0x7f00000014c0)="e5ad65c1ee4e6bcc310650882bbc2c06b551623e4e831bd0336b52ede2f4511d3b11a48f934424", 0x27}], 0x100002dc, 0x0, 0x0, 0x4004}, {0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001540)="d0", 0x1}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="d7622f9354533e96a357dd0ff58a1e132d53665b583e4f0414d296654e1ad87a91f21404bb6ab2070a69ac322694fdbacdc86cc4aaf4e1308fa4cd1bb8a053372d8cc0d3cb190ad84db93fedb5e483ff2bb1075274b55369fa112417ab791ac1542d496efcfebace652988ddbb557e697c671589495b8940f019df6b727152c982da0170228bc149dda8ab90c6cea50cf3fcad309b2e6c65d02f490a4cf32ca8043e0c4e258d9760c37190f335d36b3db2e90918c7188c11566d7740f969e92d8099da9ad95e515b87d1c21980adcb0746caf1eda2255e0ea09cad272f405f91e68202c1db65afe7393d6eb84b07817b67", 0xf1}, {&(0x7f0000002680)="cefc3a7afd53cd182092c3b5ad6adbf56bb1333d196ad700b70aa553cdf651d3d1", 0x21}, {&(0x7f00000026c0)="672008aec42438aa002d88c7964066af0cf7ecbdb88ab051fa4ae7e303fdd8d6ad8c217b0fffc989424445855986df1fb9e9b5d2f1f4321b", 0x38}, {&(0x7f0000002700)="d127171ce0849b220fe049de6e384271f4322e072dbeb737f21ed4075ec83472a0c926e23f223dcfa46aa04bf518778bc8ed55453f26a9c1ceb5c4a516155e91f027b46f6e6eed864abc25e0be374010f47fbd2d9c966eeb8eaf61ee6fd798766be3d5c54c60f49366aaf314d15ba18c4bd80483a9b0dbd75ada3812000e011f9fd6b2c94b4fa93a93ef4edd20e231c80b6a379b58a46db495c6fb93c19112087c51a5ce040c", 0xa6}], 0x6, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x1f8, 0x30000085}], 0x6, 0x4004801) 18:29:43 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8df9bfaf60f20c06635200000000f22c067f3af", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x1, 0x4, 0x0, 0x0, 0x0, 0x80000000000800, 0x20000000fb, 0x0, 0x40, 0x0, 0xfffffffffffffffc], 0x1, 0x200400}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:29:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xbc, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8eb9}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x42}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040}, 0x24000095) 18:29:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r5) r6 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r7) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESHEX=r2, @ANYRESHEX=r6, @ANYRESOCT=r7], 0x1) 18:29:44 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r2, @ANYBLOB="0c001b0000000000"], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000100)={@private=0xa010102, @empty, @broadcast}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) 18:29:44 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYBLOB="255b27c545bd8d6556a2c64c2fabe96370a4ffb2320fc2f18b22c1d4d2cc007a5db98235e225ef8c1929c4d8bfe6786a8197e1a67d7fef8f9ad164cb98bf4a8ad4b9c98debb89b072e030910c4f26ac8b4f35693bd8eb4ad71396f93ee83dd0a276649e391b610ec2c51d07746aac0", @ANYBLOB="00000000000000001c001a8018000a80144040c5fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:29:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000007"]) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) mount$9p_rdma(&(0x7f0000000200)='127.0.0.1\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x4020, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x9}}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@audit='audit'}, {@hash='hash'}, {@euid_gt={'euid>', r6}}, {@euid_lt={'euid<', r8}}, {@appraise_type='appraise_type=imasig'}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:29:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=r4, @ANYBLOB="03000000000000ea2700000100000000000000000000d6b3e603559a540000000000000000", @ANYRES32=0x0, @ANYBLOB="08000300ac1414aa06000f0001000000"], 0x48}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 1648.052451] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1648.102455] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1648.113018] CPU: 0 PID: 6330 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1648.120463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.129812] Call Trace: [ 1648.132401] dump_stack+0x13e/0x194 [ 1648.136116] dump_header+0x178/0x6d4 [ 1648.140011] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1648.145029] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1648.150130] ? ___ratelimit+0x50/0x519 [ 1648.154021] oom_kill_process.cold+0x10/0xae3 [ 1648.158531] ? lock_downgrade+0x6e0/0x6e0 [ 1648.162681] out_of_memory+0x2d5/0x1110 [ 1648.166659] ? oom_killer_disable+0x1c0/0x1c0 [ 1648.171153] ? mutex_trylock+0x152/0x1a0 [ 1648.175212] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1648.180068] ? warn_alloc+0xf0/0xf0 [ 1648.183698] __alloc_pages_nodemask+0x5d3/0x700 [ 1648.188349] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1648.193365] ? lock_downgrade+0x6e0/0x6e0 [ 1648.197519] alloc_pages_current+0xe7/0x1e0 [ 1648.201841] __page_cache_alloc+0x245/0x3d0 [ 1648.206162] filemap_fault+0xc18/0x1c50 [ 1648.210142] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1648.214809] ? lock_acquire+0x170/0x3f0 [ 1648.218783] ? ext4_filemap_fault+0x7c/0xb0 [ 1648.223195] ext4_filemap_fault+0x84/0xb0 [ 1648.227341] __do_fault+0xfa/0x380 [ 1648.230880] __handle_mm_fault+0x22e9/0x3280 [ 1648.235270] ? copy_page_range+0x1d70/0x1d70 [ 1648.239666] ? find_held_lock+0x2d/0x110 [ 1648.243713] handle_mm_fault+0x288/0x7a0 [ 1648.247757] __do_page_fault+0x4bc/0xb40 [ 1648.251815] ? vmalloc_fault+0xdf0/0xdf0 [ 1648.255866] ? do_page_fault+0x60/0x4f2 [ 1648.259878] ? page_fault+0x2f/0x50 [ 1648.263482] page_fault+0x45/0x50 [ 1648.266914] RIP: 00f1:0x11 [ 1648.269746] RSP: 7f41a0:000000c43af51af0 EFLAGS: 00000000 [ 1648.288454] Mem-Info: [ 1648.307086] active_anon:230127 inactive_anon:1113192 isolated_anon:0 [ 1648.307086] active_file:4 inactive_file:15 isolated_file:0 [ 1648.307086] unevictable:18141 dirty:0 writeback:0 unstable:0 [ 1648.307086] slab_reclaimable:16134 slab_unreclaimable:112715 [ 1648.307086] mapped:62936 shmem:14712 pagetables:11296 bounce:0 [ 1648.307086] free:24911 free_pcp:4 free_cma:0 [ 1648.352914] Node 0 active_anon:907192kB inactive_anon:878284kB active_file:140kB inactive_file:0kB unevictable:65900kB isolated(anon):0kB isolated(file):0kB mapped:240804kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 344064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1648.386258] Node 1 active_anon:13316kB inactive_anon:3574484kB active_file:8kB inactive_file:0kB unevictable:6664kB isolated(anon):0kB isolated(file):0kB mapped:10900kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1648.426200] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4296kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1648.462387] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1648.467439] Node 0 DMA32 free:35996kB min:36272kB low:45340kB high:54408kB active_anon:906544kB inactive_anon:873988kB active_file:96kB inactive_file:16kB unevictable:65900kB writepending:0kB present:3129332kB managed:2621260kB mlocked:65900kB kernel_stack:9728kB pagetables:17288kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 1648.504333] lowmem_reserve[]: 0 0 0 0 0 [ 1648.508341] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1648.540864] lowmem_reserve[]: 0 0 0 0 0 [ 1648.544905] Node 1 Normal free:53380kB min:53612kB low:67012kB high:80412kB active_anon:13316kB inactive_anon:3574484kB active_file:4kB inactive_file:4kB unevictable:6664kB writepending:0kB present:3932160kB managed:3870192kB mlocked:6664kB kernel_stack:8736kB pagetables:27740kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1648.579578] lowmem_reserve[]: 0 0 0 0 0 [ 1648.583579] Node 0 DMA: 10*4kB (UE) 4*8kB (UE) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 1648.601765] Node 0 DMA32: 351*4kB (UME) 396*8kB (UME) 18*16kB (U) 280*32kB (UM) 109*64kB (UM) 49*128kB (UM) 11*256kB (UM) 2*512kB (M) 3*1024kB (M) 1*2048kB (M) 0*4096kB = 36028kB [ 1648.617961] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1648.630871] Node 1 Normal: 263*4kB (UME) 743*8kB (UME) 1333*16kB (UME) 451*32kB (UME) 80*64kB (UME) 27*128kB (UME) 8*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53380kB [ 1648.646623] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1648.657812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1648.666443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1648.677657] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1648.686398] 19681 total pagecache pages [ 1648.692750] 0 pages in swap cache [ 1648.696210] Swap cache stats: add 0, delete 0, find 0/0 [ 1648.701827] Free swap = 0kB [ 1648.704841] Total swap = 0kB [ 1648.707857] 1965979 pages RAM [ 1648.719017] 0 pages HighMem/MovableOnly [ 1648.723080] 339053 pages reserved [ 1648.726584] 0 pages cma reserved [ 1648.737001] Out of memory: Kill process 25710 (syz-executor.4) score 1009 or sacrifice child [ 1648.745802] Killed process 25710 (syz-executor.4) total-vm:74972kB, anon-rss:18008kB, file-rss:51916kB, shmem-rss:0kB [ 1648.792090] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1648.824662] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1648.829450] CPU: 0 PID: 6329 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1648.836890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.846242] Call Trace: [ 1648.848838] dump_stack+0x13e/0x194 [ 1648.852472] dump_header+0x178/0x6d4 [ 1648.856186] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1648.861321] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1648.866431] ? ___ratelimit+0x50/0x519 [ 1648.870330] oom_kill_process.cold+0x10/0xae3 [ 1648.874828] ? lock_downgrade+0x6e0/0x6e0 [ 1648.878979] out_of_memory+0x2d5/0x1110 [ 1648.882960] ? oom_killer_disable+0x1c0/0x1c0 [ 1648.887455] ? mutex_trylock+0x152/0x1a0 [ 1648.891517] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1648.896369] ? warn_alloc+0xf0/0xf0 [ 1648.900007] __alloc_pages_nodemask+0x5d3/0x700 [ 1648.904678] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1648.909782] ? lock_downgrade+0x6e0/0x6e0 [ 1648.913936] alloc_pages_current+0xe7/0x1e0 [ 1648.918259] __page_cache_alloc+0x245/0x3d0 [ 1648.922585] filemap_fault+0xc18/0x1c50 [ 1648.926574] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1648.931245] ? lock_acquire+0x170/0x3f0 [ 1648.935219] ? ext4_filemap_fault+0x7c/0xb0 [ 1648.939547] ext4_filemap_fault+0x84/0xb0 [ 1648.943695] __do_fault+0xfa/0x380 [ 1648.947238] __handle_mm_fault+0x22e9/0x3280 [ 1648.951646] ? copy_page_range+0x1d70/0x1d70 [ 1648.956055] ? find_held_lock+0x2d/0x110 [ 1648.960129] handle_mm_fault+0x288/0x7a0 [ 1648.964233] __do_page_fault+0x4bc/0xb40 [ 1648.968293] ? vmalloc_fault+0xdf0/0xdf0 [ 1648.972356] ? do_page_fault+0x60/0x4f2 [ 1648.976328] ? page_fault+0x2f/0x50 [ 1648.979953] page_fault+0x45/0x50 [ 1648.983403] RIP: 00f1:0x11 [ 1648.986241] RSP: 000a:000000c42004ff20 EFLAGS: 0042f0a0 [ 1649.086793] Mem-Info: [ 1649.094860] active_anon:230100 inactive_anon:1113204 isolated_anon:0 [ 1649.094860] active_file:3163 inactive_file:3251 isolated_file:32 [ 1649.094860] unevictable:8709 dirty:0 writeback:0 unstable:0 [ 1649.094860] slab_reclaimable:16134 slab_unreclaimable:112175 [ 1649.094860] mapped:59537 shmem:14712 pagetables:11259 bounce:0 [ 1649.094860] free:28058 free_pcp:561 free_cma:0 18:29:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x2800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14200000", @ANYRES16=r3, @ANYBLOB="071700000000000000000e000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)=ANY=[@ANYBLOB="04010000", @ANYRES16=r3, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x8}, 0x0) r4 = dup2(r0, r0) r5 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) accept4$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x80000) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={r6, @dev={0xac, 0x14, 0x14, 0x16}, @remote}, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x4, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x7bf9, 0x5, 0x7fffffff, 0x800, 0x4d, 0x8, 0x2b6, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000440)={r7, 0x1, 0x20, 0xfffffffffffffff9}, &(0x7f0000000480)=0x18) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x242643, 0x0) r9 = dup2(r8, r8) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) [ 1649.137238] Node 0 active_anon:907084kB inactive_anon:878332kB active_file:6860kB inactive_file:8272kB unevictable:34836kB isolated(anon):0kB isolated(file):128kB mapped:230248kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 344064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 18:29:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8df9bfaf60f20c06635200000000f22c067f3af", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x1, 0x4, 0x0, 0x0, 0x0, 0x80000000000800, 0x20000000fb, 0x0, 0x40, 0x0, 0xfffffffffffffffc], 0x1, 0x200400}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:29:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, r4, 0x1707, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0xc000) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffe06) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r8 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000300)=0x2, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010003904000000000000000000000000696309f1611abb1e8d144fa33fd08080283780c67b4154710e7862cde8990205d491cbc492bbddee8177147e448fe76036c62d2739294e76dc71541f4d096c5704895669149d60fbccf72f6a49592c1bd2d5a3cc791935d40ebe9cf55a2e2beea6c5cbdcea156667b206f6eddaaf2e12d73b3716c0b68fb63e94ee63716f33352cbba5c016f4cf01b793ec38b9875fe268f8ee106aa7a71b", @ANYRES32=r6, @ANYBLOB="0300000000000183b8d05de8dbf801006e6974001c00028008000100", @ANYRES32=0x0, @ANYBLOB="08000300ac1414aa06000f0001000000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 1649.199565] Node 1 active_anon:13316kB inactive_anon:3574484kB active_file:120kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8100kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1649.275410] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1649.297881] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4296kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1649.345627] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1649.348759] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1649.365354] Node 0 DMA32 free:48768kB min:36272kB low:45340kB high:54408kB active_anon:908460kB inactive_anon:874020kB active_file:5248kB inactive_file:7852kB unevictable:35024kB writepending:0kB present:3129332kB managed:2621260kB mlocked:35216kB kernel_stack:9984kB pagetables:17288kB bounce:0kB free_pcp:860kB local_pcp:128kB free_cma:0kB [ 1649.442753] lowmem_reserve[]: 0 0 0 0 0 [ 1649.455543] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1649.485976] lowmem_reserve[]: 0 0 0 0 0 [ 1649.516168] Node 1 Normal free:61296kB min:53612kB low:67012kB high:80412kB active_anon:13316kB inactive_anon:3574484kB active_file:36kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:36kB kernel_stack:8640kB pagetables:27592kB bounce:0kB free_pcp:1340kB local_pcp:620kB free_cma:0kB [ 1649.619535] lowmem_reserve[]: 0 0 0 0 0 [ 1649.623691] Node 0 DMA: 10*4kB (UE) 4*8kB (UE) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 1649.683684] Node 0 DMA32: 709*4kB (UME) 654*8kB (UME) 380*16kB (M) 380*32kB (UM) 126*64kB (UM) 49*128kB (UM) 11*256kB (UM) 3*512kB (UM) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 49092kB [ 1649.729519] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1649.763309] Node 1 Normal: 1633*4kB (UME) 874*8kB (UME) 1369*16kB (UME) 491*32kB (UME) 82*64kB (UME) 29*128kB (UME) 8*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 62148kB [ 1649.796217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1649.829492] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1649.838089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1649.865608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1649.878189] 16164 total pagecache pages [ 1649.899498] 0 pages in swap cache [ 1649.902967] Swap cache stats: add 0, delete 0, find 0/0 [ 1649.918580] Free swap = 0kB [ 1649.933820] Total swap = 0kB [ 1649.936848] 1965979 pages RAM [ 1649.953409] 0 pages HighMem/MovableOnly [ 1649.957396] 339053 pages reserved [ 1649.973301] 0 pages cma reserved [ 1649.976681] Out of memory: Kill process 25684 (syz-executor.4) score 1007 or sacrifice child [ 1649.999518] Killed process 25684 (syz-executor.4) total-vm:75228kB, anon-rss:18500kB, file-rss:34636kB, shmem-rss:0kB 18:29:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) [ 1650.065497] oom_reaper: reaped process 25684 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 18:29:47 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x142) bind$rxrpc(r3, &(0x7f0000000340)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, [], 0x1}, 0x7}}, 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) 18:29:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x90, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @ip6vti={{0xb, 0x1, 'ip6vti\x00'}, {0x60, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x800}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x80000001}, @IFLA_VTI_LINK={0x8, 0x1, r8}, @IFLA_VTI_LINK={0x8, 0x1, r10}], @IFLA_VTI_LOCAL={0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}, @IFLA_VTI_REMOTE={0x14, 0x5, @remote}, @IFLA_VTI_LOCAL={0x14, 0x4, @mcast2}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000045}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:29:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x200000000000004) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) r2 = socket(0x5, 0x1, 0xfffffffd) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r3 = socket(0x10, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x4, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x7bf9, 0x5, 0x7fffffff, 0x800, 0x4d, 0x8, 0x2b6, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r5, 0x1f}, 0x8) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="480000001400190d09004bb5050d8c560a8447000bffe0064e230f00000000a2bc5603b700000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x3, 0x3}, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x7, 0xe, 0x5279}, &(0x7f0000000600)=0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=0x5}}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="2da7065669f90f56b2848e01ce387943e80d0100010000000000f52c77a69c8fdcb5321cadabba696bcfb35595bafd98367f31d72636fb6ee94a82bba4df3b4db52e483118df6c0b5df6faf25873f2c1146ad11dc809047fc3d0", @ANYRES16, @ANYBLOB="04002dbd7000ffdbdf25030000000c0003000000008000000000"], 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x448) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3ff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48d0}, 0x4004000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3019c13bd2321afb56fa54f26fb0b71d0e6adfefcf1d8f7faf75e0f226bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee207d2f73902fbcfcf49822775985bf31b715f5888b24efa000000000000000000000000000000000000000000009500020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f7da31cf41ab11f12fb1e0a494034127de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec309baed0495f06d058a736770a71ad901ace383e41d277b10392a912ffaf6f658f3f9cd16286744f839c3f128f8f92ef992239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad380a447483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73755539280b064bd8144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06dddeb61799257ab55ff413c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d462357b22515567230ad1e1f4933545fe2c741374211663f6b63b1dd044dd0a2768e825972ea3b77641467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4c51b3fa00675cc1b66c5fd9c26a54d43fa050645bd9109b7e7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e378a9b15bc20f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931ba3552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2af79b8d4c2bf0f7a2cb032dad13007b82e6044f643fc8cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942e367f603e3856a346cf7f9fe0bc9f2a1a7506d35e5eb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a702a86c814459f3cdaaf9900"/1155], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xc0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x52, 0xea, &(0x7f0000000440)=""/234, 0x0, 0xf, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xb, 0x1}, 0x10, r6, r7}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) 18:29:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x4, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x7bf9, 0x5, 0x7fffffff, 0x800, 0x4d, 0x8, 0x2b6, 0xfff]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000440), 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYRESDEC], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000008101ef22af0fec1f420000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000000)={0x5b9bab52, 0x1, 0x4, 0x400000, 0x7, {}, {0xc1af9d2936e67b41, 0x8, 0x20, 0x6, 0x1f, 0x2, "d947fde7"}, 0x5, 0x1, @offset, 0x1, 0x0, r0}) accept4$nfc_llcp(r4, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) r7 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r8) r9 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYRES64=r9, @ANYRESOCT, @ANYRES16=r8], 0x1) 18:29:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=r4, @ANYBLOB="03000000000000002800128008000100736974001c00028008000100", @ANYRES32=0x0, @ANYBLOB="080068024f7ba5c01a1d0f207e83952a00fca6b7e70856d5d95d7ac65758a13c224199b5c7ca793e331def6449bc1af5e94a91f51cccef372a58c025a0746674a5802d32534936b4552dd762e19c46e9472490af308d7f29e1be123c854c266aa16d47c2440a35427cd038fab1b27a1a9adc1182a733eacaa37c1b7cedcf6242e0556d9fed43a94d6632c7055e2cf1"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYRESDEC=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 1650.737867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1650.773725] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1651.216935] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1651.318044] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1651.351125] CPU: 0 PID: 25767 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0 [ 1651.359024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1651.368373] Call Trace: [ 1651.370968] dump_stack+0x13e/0x194 [ 1651.374603] dump_header+0x178/0x6d4 [ 1651.378316] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1651.383333] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1651.388435] ? ___ratelimit+0x50/0x519 [ 1651.392353] oom_kill_process.cold+0x10/0xae3 [ 1651.396860] ? lock_acquire+0x170/0x3f0 [ 1651.400831] ? lock_downgrade+0x6e0/0x6e0 [ 1651.404981] out_of_memory+0x2d5/0x1110 [ 1651.408962] ? oom_killer_disable+0x1c0/0x1c0 [ 1651.413456] ? mutex_trylock+0x152/0x1a0 [ 1651.417520] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1651.422369] ? warn_alloc+0xf0/0xf0 [ 1651.426004] __alloc_pages_nodemask+0x5d3/0x700 [ 1651.430688] ? __anon_vma_prepare+0x172/0x370 [ 1651.435178] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1651.440197] ? anon_vma_interval_tree_insert+0x211/0x3e0 [ 1651.445650] alloc_pages_vma+0xc2/0x4a0 [ 1651.449627] __handle_mm_fault+0x17b6/0x3280 [ 1651.454037] ? copy_page_range+0x1d70/0x1d70 [ 1651.458446] ? find_held_lock+0x2d/0x110 [ 1651.462513] handle_mm_fault+0x288/0x7a0 [ 1651.466577] __do_page_fault+0x4bc/0xb40 [ 1651.470637] ? vmalloc_fault+0xdf0/0xdf0 [ 1651.474693] ? do_page_fault+0x60/0x4f2 [ 1651.478666] ? page_fault+0x2f/0x50 [ 1651.482292] page_fault+0x45/0x50 [ 1651.485744] RIP: 2a68f700:0x699 [ 1651.489018] RSP: 20000:00007ffc93191190 EFLAGS: 7ffc93191290 [ 1651.931523] Mem-Info: [ 1651.952189] active_anon:230142 inactive_anon:1112097 isolated_anon:0 [ 1651.952189] active_file:8 inactive_file:17 isolated_file:0 [ 1651.952189] unevictable:18700 dirty:0 writeback:0 unstable:0 [ 1651.952189] slab_reclaimable:16144 slab_unreclaimable:113051 [ 1651.952189] mapped:63441 shmem:14712 pagetables:11291 bounce:0 [ 1651.952189] free:25062 free_pcp:60 free_cma:0 [ 1651.998060] Node 0 active_anon:907184kB inactive_anon:878808kB active_file:20kB inactive_file:32kB unevictable:59196kB isolated(anon):0kB isolated(file):0kB mapped:240552kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 342016kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1652.038322] Node 1 active_anon:13384kB inactive_anon:3569580kB active_file:24kB inactive_file:24kB unevictable:15604kB isolated(anon):0kB isolated(file):0kB mapped:13212kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1652.078701] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1652.118160] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1652.123327] Node 0 DMA32 free:36272kB min:36272kB low:45340kB high:54408kB active_anon:906536kB inactive_anon:874540kB active_file:8kB inactive_file:44kB unevictable:59168kB writepending:0kB present:3129332kB managed:2621260kB mlocked:59168kB kernel_stack:9824kB pagetables:17296kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1652.165235] lowmem_reserve[]: 0 0 0 0 0 [ 1652.169234] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1652.204963] lowmem_reserve[]: 0 0 0 0 0 [ 1652.208965] Node 1 Normal free:53552kB min:53612kB low:67012kB high:80412kB active_anon:13384kB inactive_anon:3569580kB active_file:28kB inactive_file:20kB unevictable:15604kB writepending:0kB present:3932160kB managed:3870192kB mlocked:15604kB kernel_stack:8768kB pagetables:27712kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1652.246115] lowmem_reserve[]: 0 0 0 0 0 [ 1652.250158] Node 0 DMA: 10*4kB (UE) 4*8kB (UE) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 1652.270708] Node 0 DMA32: 352*4kB (UE) 44*8kB (UE) 17*16kB (UM) 218*32kB (UM) 150*64kB (UM) 50*128kB (UM) 12*256kB (UM) 4*512kB (UM) 2*1024kB (M) 2*2048kB (M) 0*4096kB = 36272kB [ 1652.291738] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1652.302487] Node 1 Normal: 152*4kB (UME) 324*8kB (UME) 1407*16kB (UME) 518*32kB (UM) 84*64kB (UME) 28*128kB (UM) 7*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53552kB [ 1652.323037] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1652.332729] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1652.346269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1652.355136] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1652.368691] 20172 total pagecache pages [ 1652.372695] 0 pages in swap cache [ 1652.376144] Swap cache stats: add 0, delete 0, find 0/0 [ 1652.386365] Free swap = 0kB [ 1652.392402] Total swap = 0kB [ 1652.395420] 1965979 pages RAM [ 1652.398506] 0 pages HighMem/MovableOnly [ 1652.407290] 339053 pages reserved [ 1652.418060] 0 pages cma reserved [ 1652.426300] Out of memory: Kill process 25762 (syz-executor.4) score 1010 or sacrifice child [ 1652.447075] Killed process 25777 (syz-executor.4) total-vm:74972kB, anon-rss:18028kB, file-rss:34816kB, shmem-rss:0kB 18:29:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r3) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:29:50 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100039ab4167ec000000020000000000", @ANYRES32=r2, @ANYBLOB="03000000000000002800128008000100736974001c00028008000100", @ANYRES32=0x0, @ANYBLOB="08000300ac1414aa06000f0001000000"], 0x48}}, 0x0) [ 1652.577104] oom_reaper: reaped process 25777 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 18:29:50 executing program 2: socket$netlink(0x10, 0x3, 0xc) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000340)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x5}, 0x20) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000100)) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, 0x0, 0x80) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(0x0, 0x6cef, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2], 0x1f000}) 18:29:50 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013ac4c18d72d68366baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000100)={0x40000000, 0x141f, 0x17}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x80000000, 0x310c, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000003c0), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:29:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c432c9187f01766efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c0663502000080f26eb800088ec00fae470b", 0x38}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:29:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) 18:29:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) unshare(0x2a000400) r3 = memfd_create(&(0x7f0000000640)='\x00\x00\x00\x7f\xc9\xe9\x0e\xff\x8b\xe8\xd0\xb8\x80\xc7\xf5\xe2Z\x03\x00\x00\x00z\x9b\xb0\xe8t%\xfc\vw\x82\xdb\xf1^\xe8\xf8\xc1-9Q\x00\x04\x00\x00\x8b[\xaa\x91\xef\x7f@\xd2z\xb3T\x9e\xefn7%E\x00(\x1e\xd1P\x0f\x9f\xca\xff\xcf\xc9c\x97\xb3\x81\xa04\x03\x1b\xf5\xce\xfa\xdc\xf6\xf2\'\x83\x82\"#K\x02eU\xae\xd4P\xc0iH\xf2g\xc9}\xf4I\xb0}\x9er#y\x0e\xcb\xa3\x80\xb5q\x1c\xef0\xbd\x87\xe8\x8e\x88\xe6^\xdc\f\x1e\xd0\x97\xce\xdc\x13\xce\x8a\xb3\b\xee\xd8I\xbck\xec\x80\xfa\xce\x86\x85\"\x1d\xa2\xc2\x1d\xf0\xc3\x9cm\xcf\x8a\x00\x00\x00\xe31\xe6\xc3\xa5\xb1\x1c\r8%\x06\xc3c\xe0\x7f\x88W\x18u\xdcbl\xe5(\x97c\x1a\xfd\xe0\xfa\xc0\x97\xc8\x95\x82u\x82e\xf3\xe7e\xf59\xf9S2\xd1\x98\x81\x8f\xbfwr\x97\xee\a\x8a \x1c%o\xed\x9e\x11\xd1', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000100081050000000000000000000080003751bbc567", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000f00ffffffff"], 0x3c}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1653.184385] net_ratelimit: 1 callbacks suppressed [ 1653.184390] ip_tables: iptables: counters copy to user failed while replacing table [ 1653.246856] ip_tables: iptables: counters copy to user failed while replacing table 18:29:50 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r1, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r2 = socket(0x10, 0x803, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0xffffffffffff8001) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000340)={{0x1, 0x0, 0x0, 0x3, 0xf8}, 0x7f}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) 18:29:50 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x142) bind$rxrpc(r3, &(0x7f0000000340)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, [], 0x1}, 0x7}}, 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) [ 1653.287133] ip_tables: iptables: counters copy to user failed while replacing table [ 1653.317308] ip_tables: iptables: counters copy to user failed while replacing table 18:29:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r3 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r4 = socket(0x10, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x4, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x7bf9, 0x5, 0x7fffffff, 0x800, 0x4d, 0x8, 0x2b6, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x4}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x8000, 0x8200, 0xb5, 0x9, 0xfffffffc, 0x1, 0x3a911f1e, r6}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) [ 1654.005962] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 1654.145597] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1654.181436] CPU: 1 PID: 25807 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 1654.189354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1654.198705] Call Trace: [ 1654.201303] dump_stack+0x13e/0x194 [ 1654.204929] dump_header+0x178/0x6d4 [ 1654.208638] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1654.213652] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1654.218757] ? ___ratelimit+0x50/0x519 [ 1654.222641] oom_kill_process.cold+0x10/0xae3 [ 1654.227136] ? lock_downgrade+0x6e0/0x6e0 [ 1654.231285] out_of_memory+0x2d5/0x1110 [ 1654.235258] ? oom_killer_disable+0x1c0/0x1c0 [ 1654.239750] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1654.244597] ? warn_alloc+0xf0/0xf0 [ 1654.248218] ? find_held_lock+0x2d/0x110 [ 1654.252274] ? fs_reclaim_acquire+0x10/0x10 [ 1654.256597] __alloc_pages_nodemask+0x5d3/0x700 [ 1654.261259] ? check_preemption_disabled+0x35/0x240 [ 1654.266271] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1654.271282] cache_grow_begin+0x7b/0x410 [ 1654.275326] fallback_alloc+0x205/0x2b0 [ 1654.279281] kmem_cache_alloc_trace+0x20f/0x7b0 [ 1654.283933] ? kvm_vcpu_init+0x27c/0x360 [ 1654.287971] vmx_create_vcpu+0x14b/0x2900 [ 1654.292101] ? __mutex_unlock_slowpath+0x75/0x780 [ 1654.296919] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 1654.301923] ? vmx_vcpu_run+0x1f90/0x1f90 [ 1654.306068] kvm_vm_ioctl+0x49c/0x1430 [ 1654.309936] ? __lock_acquire+0x5f7/0x4620 [ 1654.314145] ? kvm_vcpu_release+0xa0/0xa0 [ 1654.318289] ? retint_kernel+0x2d/0x2d [ 1654.322152] ? retint_kernel+0x2d/0x2d [ 1654.326014] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1654.331006] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1654.335741] ? check_preemption_disabled+0x35/0x240 [ 1654.340743] ? retint_kernel+0x2d/0x2d [ 1654.344615] ? do_vfs_ioctl+0x6fb/0xfe0 [ 1654.348564] ? kvm_vcpu_release+0xa0/0xa0 [ 1654.352694] do_vfs_ioctl+0x75a/0xfe0 [ 1654.356478] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1654.361211] ? ioctl_preallocate+0x1a0/0x1a0 [ 1654.365605] ? check_preemption_disabled+0x35/0x240 [ 1654.370596] ? swapgs_restore_regs_and_return_to_usermode+0x6/0x40 [ 1654.376902] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1654.380854] ? security_file_ioctl+0x76/0xb0 [ 1654.385238] ? security_file_ioctl+0x83/0xb0 [ 1654.389623] SyS_ioctl+0x7f/0xb0 [ 1654.392963] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1654.396915] do_syscall_64+0x1d5/0x640 [ 1654.400781] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1654.405960] RIP: 0033:0x45ca29 [ 1654.409127] RSP: 002b:00007fc59c222c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1654.416809] RAX: ffffffffffffffda RBX: 00000000004e73c0 RCX: 000000000045ca29 [ 1654.424055] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 1654.431303] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1654.438547] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1654.445877] R13: 0000000000000396 R14: 00000000004c62c6 R15: 00007fc59c2236d4 [ 1654.601247] Mem-Info: [ 1654.603857] active_anon:230487 inactive_anon:1108567 isolated_anon:0 [ 1654.603857] active_file:14 inactive_file:20 isolated_file:0 [ 1654.603857] unevictable:21436 dirty:0 writeback:0 unstable:0 [ 1654.603857] slab_reclaimable:16162 slab_unreclaimable:113255 [ 1654.603857] mapped:61749 shmem:14712 pagetables:11370 bounce:0 [ 1654.603857] free:25210 free_pcp:1 free_cma:0 [ 1654.638907] Node 0 active_anon:908376kB inactive_anon:871140kB active_file:0kB inactive_file:24kB unevictable:68400kB isolated(anon):0kB isolated(file):0kB mapped:234944kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 346112kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1654.667511] Node 1 active_anon:13572kB inactive_anon:3563128kB active_file:56kB inactive_file:56kB unevictable:17344kB isolated(anon):0kB isolated(file):0kB mapped:12052kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1654.695606] Node 0 DMA free:10452kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1654.812568] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1654.817856] Node 0 DMA32 free:36032kB min:36272kB low:45340kB high:54408kB active_anon:907728kB inactive_anon:866872kB active_file:0kB inactive_file:24kB unevictable:68400kB writepending:0kB present:3129332kB managed:2621260kB mlocked:68400kB kernel_stack:9792kB pagetables:17316kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1654.862047] lowmem_reserve[]: 0 0 0 0 0 [ 1654.866249] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1654.892066] lowmem_reserve[]: 0 0 0 0 0 [ 1654.896163] Node 1 Normal free:53612kB min:53612kB low:67012kB high:80412kB active_anon:13572kB inactive_anon:3563128kB active_file:0kB inactive_file:40kB unevictable:17344kB writepending:0kB present:3932160kB managed:3870192kB mlocked:17344kB kernel_stack:8960kB pagetables:28008kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1654.926357] lowmem_reserve[]: 0 0 0 0 0 [ 1654.930533] Node 0 DMA: 11*4kB (UME) 4*8kB (UE) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1654.946972] Node 0 DMA32: 367*4kB (UME) 382*8kB (UME) 73*16kB (U) 259*32kB (UM) 151*64kB (UM) 43*128kB (UM) 12*256kB (UM) 4*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 36316kB [ 1654.963505] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1654.974540] Node 1 Normal: 53*4kB (UME) 929*8kB (UME) 1313*16kB (UME) 480*32kB (UME) 90*64kB (UME) 12*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 53612kB [ 1655.015889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1655.049759] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1655.058404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1655.096437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1655.111208] 18602 total pagecache pages [ 1655.115266] 0 pages in swap cache [ 1655.118756] Swap cache stats: add 0, delete 0, find 0/0 [ 1655.124409] Free swap = 0kB [ 1655.127575] Total swap = 0kB [ 1655.189871] 1965979 pages RAM [ 1655.193043] 0 pages HighMem/MovableOnly [ 1655.197060] 339053 pages reserved [ 1655.257468] 0 pages cma reserved [ 1655.285543] Out of memory: Kill process 25856 (syz-executor.5) score 1008 or sacrifice child [ 1655.361662] Killed process 25856 (syz-executor.5) total-vm:74972kB, anon-rss:18004kB, file-rss:42216kB, shmem-rss:0kB [ 1655.469017] oom_reaper: reaped process 25856 (syz-executor.5), now anon-rss:18016kB, file-rss:8264kB, shmem-rss:0kB [ 1655.564874] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1655.727204] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1655.782635] CPU: 1 PID: 6360 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 1655.790445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1655.799792] Call Trace: [ 1655.802376] dump_stack+0x13e/0x194 [ 1655.806005] dump_header+0x178/0x6d4 [ 1655.809710] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1655.814726] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1655.819825] ? ___ratelimit+0x50/0x519 [ 1655.823711] oom_kill_process.cold+0x10/0xae3 [ 1655.828208] ? lock_downgrade+0x6e0/0x6e0 [ 1655.832357] out_of_memory+0x2d5/0x1110 [ 1655.836336] ? oom_killer_disable+0x1c0/0x1c0 [ 1655.840840] ? mutex_trylock+0x152/0x1a0 [ 1655.844896] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1655.849751] ? warn_alloc+0xf0/0xf0 [ 1655.853386] __alloc_pages_nodemask+0x5d3/0x700 [ 1655.858054] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1655.863070] ? lock_downgrade+0x6e0/0x6e0 [ 1655.867222] alloc_pages_current+0xe7/0x1e0 [ 1655.871546] __page_cache_alloc+0x245/0x3d0 [ 1655.875864] filemap_fault+0xc18/0x1c50 [ 1655.879850] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1655.884513] ? lock_acquire+0x170/0x3f0 [ 1655.888488] ? ext4_filemap_fault+0x7c/0xb0 [ 1655.892812] ext4_filemap_fault+0x84/0xb0 [ 1655.896967] __do_fault+0xfa/0x380 [ 1655.900506] __handle_mm_fault+0x22e9/0x3280 [ 1655.904916] ? copy_page_range+0x1d70/0x1d70 [ 1655.909318] ? find_held_lock+0x2d/0x110 [ 1655.913387] handle_mm_fault+0x288/0x7a0 [ 1655.917446] __do_page_fault+0x4bc/0xb40 [ 1655.921502] ? vmalloc_fault+0xdf0/0xdf0 [ 1655.925559] ? do_page_fault+0x60/0x4f2 [ 1655.929524] ? page_fault+0x2f/0x50 [ 1655.933145] page_fault+0x45/0x50 [ 1655.936589] RIP: 29e03d20:0x193850 [ 1655.940118] RSP: 193cd5:00000000000007dd EFLAGS: 0000000b [ 1656.042375] ip_tables: iptables: counters copy to user failed while replacing table 18:29:53 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x142) bind$rxrpc(r3, &(0x7f0000000340)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, [], 0x1}, 0x7}}, 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) 18:29:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f00000003c0)={"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"}) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000380)=0x200, 0x4) [ 1656.103959] ip_tables: iptables: counters copy to user failed while replacing table [ 1656.153765] ip_tables: iptables: counters copy to user failed while replacing table [ 1656.181143] ip_tables: iptables: counters copy to user failed while replacing table [ 1656.249982] ip_tables: iptables: counters copy to user failed while replacing table [ 1656.339264] Mem-Info: [ 1656.341707] active_anon:230157 inactive_anon:1108567 isolated_anon:0 [ 1656.341707] active_file:83 inactive_file:172 isolated_file:0 [ 1656.341707] unevictable:20084 dirty:6 writeback:0 unstable:0 [ 1656.341707] slab_reclaimable:16163 slab_unreclaimable:113718 [ 1656.341707] mapped:64391 shmem:14712 pagetables:11336 bounce:0 [ 1656.341707] free:26004 free_pcp:326 free_cma:0 [ 1656.474125] Node 0 active_anon:907752kB inactive_anon:871440kB active_file:68kB inactive_file:1388kB unevictable:62536kB isolated(anon):0kB isolated(file):0kB mapped:240848kB dirty:24kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 346112kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1656.539033] Node 1 active_anon:12876kB inactive_anon:3569328kB active_file:3056kB inactive_file:3856kB unevictable:6900kB isolated(anon):0kB isolated(file):128kB mapped:17416kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1656.658091] Node 0 DMA free:10428kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:24kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1656.709326] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1656.714384] Node 0 DMA32 free:47996kB min:36272kB low:45340kB high:54408kB active_anon:907200kB inactive_anon:868968kB active_file:0kB inactive_file:72kB unevictable:49052kB writepending:24kB present:3129332kB managed:2621260kB mlocked:49052kB kernel_stack:9760kB pagetables:17276kB bounce:0kB free_pcp:840kB local_pcp:692kB free_cma:0kB [ 1656.744807] lowmem_reserve[]: 0 0 0 0 0 [ 1656.749239] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1656.775590] lowmem_reserve[]: 0 0 0 0 0 [ 1656.779640] Node 1 Normal free:66472kB min:53612kB low:67012kB high:80412kB active_anon:13072kB inactive_anon:3565648kB active_file:308kB inactive_file:544kB unevictable:4280kB writepending:0kB present:3932160kB managed:3870192kB mlocked:4180kB kernel_stack:8864kB pagetables:27912kB bounce:0kB free_pcp:864kB local_pcp:172kB free_cma:0kB [ 1656.810142] lowmem_reserve[]: 0 0 0 0 0 [ 1656.814143] Node 0 DMA: 13*4kB (UME) 6*8kB (UME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10452kB [ 1656.839011] Node 0 DMA32: 895*4kB (UME) 754*8kB (UME) 376*16kB (M) 303*32kB (UM) 157*64kB (UM) 43*128kB (UM) 12*256kB (UM) 4*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 48044kB [ 1656.860992] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1656.872506] Node 1 Normal: 1802*4kB (UME) 1369*8kB (UME) 1410*16kB (UME) 493*32kB (UME) 99*64kB (UME) 15*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 67056kB [ 1656.889371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1656.898454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1656.907842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1656.917112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1656.925886] 16576 total pagecache pages [ 1656.929970] 0 pages in swap cache [ 1656.933819] Swap cache stats: add 0, delete 0, find 0/0 [ 1656.939244] Free swap = 0kB [ 1656.942249] Total swap = 0kB [ 1656.945270] 1965979 pages RAM [ 1656.948772] 0 pages HighMem/MovableOnly [ 1656.952814] 339053 pages reserved [ 1656.956255] 0 pages cma reserved [ 1656.959709] Out of memory: Kill process 25855 (syz-executor.4) score 1008 or sacrifice child [ 1657.049047] ip_tables: iptables: counters copy to user failed while replacing table 18:29:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r4) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRESDEC=r0, @ANYRES32=r2], 0x1) 18:29:56 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x340) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) write$binfmt_aout(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/2470], 0x9a6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000100)=""/9) 18:29:56 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r1, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r2, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) 18:29:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000001100)="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") fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000ff06004a60ebef2c478a8eecec9c4c7c70e96d508f07fe3b04dc8cb2acd37913b1f73ab71d6dc45954a82057877482992d4182e00185331c9fa03c544da87019000002fec513d12adb64fe868b17ee10d2d603892ae97f2c182307050491e76079b7e99a6e319aad462f9691ba629a777fb5d0a0583b7ec4e36f08d215c2de6770338786a729bee41e9ec39b4bc291a3cd28441b12e68f74ab829bfab487da47081184bf0d92f72e567b07f8112d75f25cfa60b42e5eafe40debd93f5c8843542ce87ccd81b56a7ae49a9d9c05298ef7f9267d128ce11df000d9fa45e8a8dcbd98d41df16b4ebd66464d1e7f66e10400000000000000ffa277233a378e5cbdf9d18aa6a0eee8e60f2627681241231afce6ab6b767130120b75215596d1bd4fb6849874fabbd14fdf723522e65fa0c1c1598d101b737b03d68457b0b8a034dd0c734ce4e7aab97628569897d804986838614b32e2eb83b4cd080277abb4862824672d7ef659a3c2b217d76be42e595d751d8dde26cecba021e627df1e13015900953b24c3c8c209d54104000016e6456c9560e298785fe0f90e01c5c5722ea99cfcd862f8000000000000b7f90b24204ee593370bf6b862765e1c604f179187f6113b17a1a679fea2c9a8f3ec78f787a020fcdc91fc1b4dc2394b3dc3bfe86452f044183729dd5f4baa63f7449849bd6d1a0036e8231e1e5b2d63d4d30be7a0733342ce4eadeafa2a6ca643ed1be45c869a8b4b69098fd7ad188d8b50b1eb282db29052c8463c09d239ee2aa3a97a170f7f3afa435df3b9b5d1be8527b9acdc7dea2c69bae4d8115fb6a7bc72e15045dd1d4654ba4bffffffff0ffffffb36cacd0f0a25955257cac2fbe3b066a59b27df5fb6e122534b2cc6c8c298eaffec49aefd6cc9e559c485b2e9943ffb3414d8713f19009cd208000000137392f85fd6d5791a8a3c2ac7c6e026"], 0x73}}], 0x1b1, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x990000, 0x7, 0x2e3d, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9b090f, 0x7, [], @value=0x3}}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sched_getscheduler(0x0) 18:29:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d04, &(0x7f0000000000)=0x57) getsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00006ed000), &(0x7f0000000040)=0x2) r3 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, 0xcf9, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) [ 1659.092051] ip_tables: iptables: counters copy to user failed while replacing table [ 1659.144003] ip_tables: iptables: counters copy to user failed while replacing table [ 1659.172579] ip_tables: iptables: counters copy to user failed while replacing table [ 1659.809260] ip_tables: iptables: counters copy to user failed while replacing table [ 1659.837710] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1659.856521] systemd-journal cpuset=/ mems_allowed=0-1 [ 1659.862528] CPU: 0 PID: 3637 Comm: systemd-journal Not tainted 4.14.180-syzkaller #0 [ 1659.870403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1659.879736] Call Trace: [ 1659.882304] dump_stack+0x13e/0x194 [ 1659.885911] dump_header+0x178/0x6d4 [ 1659.889607] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1659.894599] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1659.899683] ? ___ratelimit+0x50/0x519 [ 1659.903550] oom_kill_process.cold+0x10/0xae3 [ 1659.908021] ? lock_downgrade+0x6e0/0x6e0 [ 1659.912148] out_of_memory+0x2d5/0x1110 [ 1659.916105] ? oom_killer_disable+0x1c0/0x1c0 [ 1659.920576] ? mutex_trylock+0x152/0x1a0 [ 1659.924624] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1659.929453] ? warn_alloc+0xf0/0xf0 [ 1659.933062] __alloc_pages_nodemask+0x5d3/0x700 [ 1659.937707] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1659.942699] ? lock_downgrade+0x6e0/0x6e0 [ 1659.946828] alloc_pages_current+0xe7/0x1e0 [ 1659.951131] __page_cache_alloc+0x245/0x3d0 [ 1659.955431] filemap_fault+0xc18/0x1c50 [ 1659.959566] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1659.964210] ? lock_acquire+0x170/0x3f0 [ 1659.968166] ? ext4_filemap_fault+0x7c/0xb0 [ 1659.972467] ext4_filemap_fault+0x84/0xb0 [ 1659.976588] __do_fault+0xfa/0x380 [ 1659.980104] __handle_mm_fault+0x22e9/0x3280 [ 1659.984488] ? copy_page_range+0x1d70/0x1d70 [ 1659.988871] ? find_held_lock+0x2d/0x110 [ 1659.992909] handle_mm_fault+0x288/0x7a0 [ 1659.996959] __do_page_fault+0x4bc/0xb40 [ 1660.000998] ? vmalloc_fault+0xdf0/0xdf0 [ 1660.005032] ? do_page_fault+0x60/0x4f2 [ 1660.008980] ? page_fault+0x2f/0x50 [ 1660.012591] page_fault+0x45/0x50 [ 1660.016020] RIP: 0001:0x7ffec036afcc [ 1660.019703] RSP: 3f2db6c0:0000000000000001 EFLAGS: 62f140aa [ 1660.036138] Mem-Info: [ 1660.044441] active_anon:234239 inactive_anon:1113066 isolated_anon:0 [ 1660.044441] active_file:35 inactive_file:22 isolated_file:0 [ 1660.044441] unevictable:13314 dirty:5 writeback:5 unstable:0 [ 1660.044441] slab_reclaimable:16161 slab_unreclaimable:113157 [ 1660.044441] mapped:59410 shmem:14712 pagetables:11312 bounce:0 [ 1660.044441] free:25120 free_pcp:30 free_cma:0 [ 1660.082687] Node 0 active_anon:922188kB inactive_anon:884660kB active_file:72kB inactive_file:108kB unevictable:39688kB isolated(anon):0kB isolated(file):0kB mapped:226572kB dirty:20kB writeback:20kB shmem:47860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 346112kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1660.118984] Node 1 active_anon:14768kB inactive_anon:3567604kB active_file:4kB inactive_file:0kB unevictable:14316kB isolated(anon):0kB isolated(file):0kB mapped:10888kB dirty:0kB writeback:0kB shmem:10988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1660.150129] Node 0 DMA free:10376kB min:220kB low:272kB high:324kB active_anon:704kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:20kB writepending:0kB present:15992kB managed:15908kB mlocked:20kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1660.177668] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1660.183136] Node 0 DMA32 free:37316kB min:36272kB low:45340kB high:54408kB active_anon:912412kB inactive_anon:880392kB active_file:68kB inactive_file:3116kB unevictable:43700kB writepending:20kB present:3129332kB managed:2621260kB mlocked:43700kB kernel_stack:9984kB pagetables:17380kB bounce:0kB free_pcp:896kB local_pcp:620kB free_cma:0kB [ 1660.214904] lowmem_reserve[]: 0 0 0 0 0 [ 1660.219723] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1660.246157] lowmem_reserve[]: 0 0 0 0 0 [ 1660.251132] Node 1 Normal free:54860kB min:53612kB low:67012kB high:80412kB active_anon:12668kB inactive_anon:3567604kB active_file:4kB inactive_file:0kB unevictable:14316kB writepending:0kB present:3932160kB managed:3870192kB mlocked:14316kB kernel_stack:8608kB pagetables:27712kB bounce:0kB free_pcp:676kB local_pcp:0kB free_cma:0kB [ 1660.338224] lowmem_reserve[]: 0 0 0 0 0 [ 1660.342288] Node 0 DMA: 10*4kB (UE) 5*8kB (UME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1660.358682] Node 0 DMA32: 182*4kB (UE) 237*8kB (UME) 166*16kB (UM) 300*32kB (UM) 148*64kB (UM) 39*128kB (UM) 12*256kB (UM) 4*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 36512kB [ 1660.375199] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1660.403894] Node 1 Normal: 149*4kB (UME) 644*8kB (ME) 1346*16kB (UME) 502*32kB (UME) 99*64kB (UME) 15*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 53908kB [ 1660.436869] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1660.464808] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1660.483401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1660.522897] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1660.537859] 19141 total pagecache pages [ 1660.552438] 0 pages in swap cache [ 1660.557554] Swap cache stats: add 0, delete 0, find 0/0 [ 1660.564055] Free swap = 0kB [ 1660.567125] Total swap = 0kB [ 1660.570220] 1965979 pages RAM [ 1660.573327] 0 pages HighMem/MovableOnly [ 1660.577279] 339053 pages reserved [ 1660.580745] 0 pages cma reserved [ 1660.584093] Out of memory: Kill process 25583 (syz-executor.4) score 1007 or sacrifice child [ 1660.592696] Killed process 25583 (syz-executor.4) total-vm:74972kB, anon-rss:18380kB, file-rss:34624kB, shmem-rss:0kB [ 1660.630415] oom_reaper: reaped process 25583 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1660.806966] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1660.842597] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1660.847379] CPU: 1 PID: 6330 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1660.854812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1660.864158] Call Trace: [ 1660.866739] dump_stack+0x13e/0x194 [ 1660.870367] dump_header+0x178/0x6d4 [ 1660.874076] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1660.879087] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1660.884178] ? ___ratelimit+0x50/0x519 [ 1660.888056] oom_kill_process.cold+0x10/0xae3 [ 1660.892539] ? lock_acquire+0x170/0x3f0 [ 1660.896494] ? lock_downgrade+0x6e0/0x6e0 [ 1660.900617] out_of_memory+0x2d5/0x1110 [ 1660.904578] ? oom_killer_disable+0x1c0/0x1c0 [ 1660.909049] ? mutex_trylock+0x152/0x1a0 [ 1660.913083] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1660.917904] ? warn_alloc+0xf0/0xf0 [ 1660.921508] __alloc_pages_nodemask+0x5d3/0x700 [ 1660.926150] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1660.931242] ? lock_downgrade+0x6e0/0x6e0 [ 1660.935369] alloc_pages_current+0xe7/0x1e0 [ 1660.939665] __page_cache_alloc+0x245/0x3d0 [ 1660.943997] filemap_fault+0xc18/0x1c50 [ 1660.947949] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1660.952597] ? lock_acquire+0x170/0x3f0 [ 1660.956549] ? ext4_filemap_fault+0x7c/0xb0 [ 1660.960849] ext4_filemap_fault+0x84/0xb0 [ 1660.964974] __do_fault+0xfa/0x380 [ 1660.968489] __handle_mm_fault+0x22e9/0x3280 [ 1660.972871] ? copy_page_range+0x1d70/0x1d70 [ 1660.977286] ? find_held_lock+0x2d/0x110 [ 1660.981362] handle_mm_fault+0x288/0x7a0 [ 1660.985406] __do_page_fault+0x4bc/0xb40 [ 1660.989488] ? vmalloc_fault+0xdf0/0xdf0 [ 1660.993521] ? do_page_fault+0x60/0x4f2 [ 1660.997476] ? page_fault+0x2f/0x50 [ 1661.001081] page_fault+0x45/0x50 [ 1661.004512] RIP: ffffffff:0x6 [ 1661.007588] RSP: 0000:000000c420051f18 EFLAGS: 00000000 [ 1661.009091] Mem-Info: [ 1661.017274] active_anon:230131 inactive_anon:1113386 isolated_anon:0 [ 1661.017274] active_file:15 inactive_file:45 isolated_file:0 [ 1661.017274] unevictable:17164 dirty:0 writeback:0 unstable:0 [ 1661.017274] slab_reclaimable:16165 slab_unreclaimable:113314 [ 1661.017274] mapped:63472 shmem:14712 pagetables:11301 bounce:0 [ 1661.017274] free:25092 free_pcp:59 free_cma:0 [ 1661.052620] Node 0 active_anon:907904kB inactive_anon:879548kB active_file:296kB inactive_file:180kB unevictable:58500kB isolated(anon):0kB isolated(file):128kB mapped:242112kB dirty:0kB writeback:0kB shmem:47860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 335872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1661.081228] Node 1 active_anon:12620kB inactive_anon:3573996kB active_file:0kB inactive_file:4kB unevictable:10156kB isolated(anon):0kB isolated(file):0kB mapped:12112kB dirty:0kB writeback:0kB shmem:10988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1661.108890] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:20kB writepending:0kB present:15992kB managed:15908kB mlocked:20kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1661.135908] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1661.140989] Node 0 DMA32 free:36224kB min:36272kB low:45340kB high:54408kB active_anon:907256kB inactive_anon:875280kB active_file:196kB inactive_file:360kB unevictable:58480kB writepending:0kB present:3129332kB managed:2621260kB mlocked:58480kB kernel_stack:9920kB pagetables:17348kB bounce:0kB free_pcp:632kB local_pcp:0kB free_cma:0kB [ 1661.175236] lowmem_reserve[]: 0 0 0 0 0 [ 1661.182616] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1661.209571] lowmem_reserve[]: 0 0 0 0 0 [ 1661.213567] Node 1 Normal free:53096kB min:53612kB low:67012kB high:80412kB active_anon:12620kB inactive_anon:3573996kB active_file:0kB inactive_file:4kB unevictable:10156kB writepending:0kB present:3932160kB managed:3870192kB mlocked:10156kB kernel_stack:8544kB pagetables:27700kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1661.243241] lowmem_reserve[]: 0 0 0 0 0 [ 1661.247304] Node 0 DMA: 10*4kB (UE) 5*8kB (UME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1661.263209] Node 0 DMA32: 231*4kB (UME) 59*8kB (UME) 202*16kB (UM) 188*32kB (UM) 106*64kB (UM) 14*128kB (UM) 12*256kB (UM) 4*512kB (UM) 2*1024kB (M) 1*2048kB (M) 2*4096kB (M) = 36628kB [ 1661.279998] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1661.291999] Node 1 Normal: 82*4kB (UME) 564*8kB (ME) 1348*16kB (UME) 504*32kB (UME) 99*64kB (UME) 15*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 53096kB [ 1661.317881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1661.328166] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1661.356173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1661.367207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1661.378359] 20190 total pagecache pages [ 1661.382391] 0 pages in swap cache [ 1661.385824] Swap cache stats: add 0, delete 0, find 0/0 [ 1661.392836] Free swap = 0kB [ 1661.395868] Total swap = 0kB [ 1661.401002] 1965979 pages RAM [ 1661.404117] 0 pages HighMem/MovableOnly [ 1661.408070] 339053 pages reserved [ 1661.411775] 0 pages cma reserved [ 1661.415295] Out of memory: Kill process 25889 (syz-executor.4) score 1010 or sacrifice child [ 1661.424196] Killed process 25922 (syz-executor.4) total-vm:74972kB, anon-rss:18380kB, file-rss:34816kB, shmem-rss:0kB [ 1662.391467] NOHZ: local_softirq_pending 08 18:30:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r4) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRESDEC=r0, @ANYRES32=r2], 0x1) 18:30:03 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x340) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) write$binfmt_aout(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/2470], 0x9a6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000100)=""/9) 18:30:04 executing program 0: r0 = fanotify_init(0x4, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0xc00) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_macvtap\x00', 0x200}) close(r1) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000e5ffffff0000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) ioctl$TIOCNOTTY(r6, 0x5422) r7 = dup2(r3, r3) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000800)=ANY=[], 0x1) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80000, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000100)=0x10, 0x4) 18:30:04 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, 0x1406, 0x8, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/full\x00', 0x81, 0x0) pwritev(r1, &(0x7f0000001540)=[{0x0}], 0x1, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x7) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x1c, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x6}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x27, 0x1, 0x0, 0x2, 0x0, 0x0, "0e90dc0a698199a84974d5770e2d4380bbca0927881d37ef544ba5d4327a49ba237a0471d452aa1f9a5ada5ed007c4a2042a0e4ad2b6a41708bf6336d10a96", 0x1a}, 0x60, &(0x7f0000000580)=[{&(0x7f0000000200)="ea207b4668af142f3c5d8526e1e7d0624b8b9f4941c3bfe2599567126185a7df5f4a5b4311bdc9ee48d66f9bfdd26c008e78e00b36d7cc68f46b1e6259dd5b515ecd11532affa647da3e78dbfc7b7472aeac51d7b624d2c94e9e2649873b963e604f909f0359700f930214eeb9962375dd7bac1d3f5e41952de2cb1810d6867c1aa173a4e2911f3c41cb83ccff1a51b7cc37e8f489a9306caf32c3a209664a5f87eea829fa541a954415e83f70fcfdfac214c7d12bb6888f98b8fa72", 0xbc}, {&(0x7f00000002c0)="2cde39c1569225b0a45728c043a49a2e2f741353d6b834ea4a25f755cf33d5c4bf24f6dbdd52a8959934cbd04e5d3b83e2e7137eb74b66d5246d8c31562fdc9205ea5b99e11eca30f15e4a78dc8c8c38b7a106b10c7c808ba42bf7", 0x5b}, {&(0x7f0000001580)="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", 0x7c0}, {&(0x7f00000000c0)}, {&(0x7f0000000340)="72a9ae3f0fe837f53174591a891c043097e8f3a4ec7efd582f305d4ec72e3633b3f47ef3eecf118e63cfb552d12c76", 0x2f}, {&(0x7f00000003c0)="8c5e19548368da30008b097d8558606e260034e7272563bb22eeec4160b3751ba962b0f7c62a1d2bd89bf5572e6ba4a51a9b225ab515237eb4f78b2f46d70c6e651bf097e2bd0ff90b718113902ef5d157a1a5d42be8321539f71a504ce0652ffe881da937b57c03a19501bda924c39664", 0x71}, {&(0x7f0000000500)="3c1c5cc964bd3a58e0e09c042ea7370cb51cb46a5020d4f11aacdb33602b4a92fbf77f38af45ff78049982406f5a6f67224587c0a35a5bfd1b39ed4e7d010c2e2b5edffdf1c6228e7d676206e47abfac2cabdc9baee3d3", 0x57}], 0x7, &(0x7f0000000600)={0x60, 0x105, 0xea, "fa62d95617f204f84d481ee915379cfe955277e640037d959755523c575310c0aad38f770773a2b8d7b26f9f71f832562386eb6d4fe641c071933a8490bd43d81dc08b297cda5fe9d5deda"}, 0x60, 0x20000000}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x4, 0xc}]}, 0x18}}, 0x0) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000000)) 18:30:04 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x4, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x7bf9, 0x5, 0x7fffffff, 0x800, 0x4d, 0x8, 0x2b6, 0xfff]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0x2000, 0x4560}, 0x8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) [ 1666.626626] ip_tables: iptables: counters copy to user failed while replacing table [ 1666.656696] ip_tables: iptables: counters copy to user failed while replacing table 18:30:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x80102, 0x0) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000140)={0x0, 0x6, 0x206, [], &(0x7f0000000100)=0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x4}}}]}]}, 0x50}}, 0x0) 18:30:04 executing program 0: clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="329117d380804892b12765d00559bfd10d") r0 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) sched_getattr(r1, &(0x7f00000000c0)={0x38}, 0x38, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mlockall(0x2) clone(0x2088c503, 0x0, 0x0, 0x0, &(0x7f00000001c0)) [ 1666.749751] ip_tables: iptables: counters copy to user failed while replacing table 18:30:04 executing program 2: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007f5f14fe01b2a4a290930206040200001301020b141239000900350026060100000019000b40060c1101020022dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f0000000080)="7303507107ba992363a40c5388", 0xd}], 0x2}, 0x4080) 18:30:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000100), &(0x7f00000001c0)=0x68) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0x2ca) prctl$PR_SET_PTRACER(0x59616d61, r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) [ 1667.607181] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1667.622724] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1667.627754] CPU: 1 PID: 25953 Comm: systemd-udevd Not tainted 4.14.180-syzkaller #0 [ 1667.635525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1667.644856] Call Trace: [ 1667.647421] dump_stack+0x13e/0x194 [ 1667.651025] dump_header+0x178/0x6d4 [ 1667.654716] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1667.659708] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1667.664801] ? ___ratelimit+0x50/0x519 [ 1667.668671] oom_kill_process.cold+0x10/0xae3 [ 1667.673143] ? lock_acquire+0x170/0x3f0 [ 1667.677094] ? lock_downgrade+0x6e0/0x6e0 [ 1667.681220] out_of_memory+0x2d5/0x1110 [ 1667.685179] ? oom_killer_disable+0x1c0/0x1c0 [ 1667.689652] ? mutex_trylock+0x152/0x1a0 [ 1667.693690] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1667.698513] ? warn_alloc+0xf0/0xf0 [ 1667.702127] ? find_held_lock+0x2d/0x110 [ 1667.706166] ? fs_reclaim_acquire+0x10/0x10 [ 1667.710470] __alloc_pages_nodemask+0x5d3/0x700 [ 1667.715112] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1667.719930] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1667.724921] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1667.729913] ? cache_grow_begin+0x32d/0x410 [ 1667.734209] cache_grow_begin+0x7b/0x410 [ 1667.738245] fallback_alloc+0x205/0x2b0 [ 1667.742194] kmem_cache_alloc+0x1ea/0x770 [ 1667.746317] ? copy_page_range+0x1d70/0x1d70 [ 1667.750703] getname_flags+0xc8/0x560 [ 1667.754481] user_path_at_empty+0x2a/0x50 [ 1667.758663] SyS_inotify_add_watch+0x108/0x780 [ 1667.763224] ? syscall_get_arguments.part.0+0x10/0x10 [ 1667.768392] ? sys_inotify_init+0x70/0x70 [ 1667.772516] ? do_syscall_64+0x4c/0x640 [ 1667.776467] ? sys_inotify_init+0x70/0x70 [ 1667.780591] do_syscall_64+0x1d5/0x640 [ 1667.784458] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1667.789622] RIP: 0033:0x7f62e0d3f397 [ 1667.793306] RSP: 002b:00007ffcacb19768 EFLAGS: 00000202 ORIG_RAX: 00000000000000fe [ 1667.800988] RAX: ffffffffffffffda RBX: 000055a50e11ccb0 RCX: 00007f62e0d3f397 [ 1667.808232] RDX: 0000000000000008 RSI: 000055a50e113170 RDI: 0000000000000009 [ 1667.815478] RBP: 00007ffcacb19930 R08: 000055a50d52c670 R09: 0000000000000008 [ 1667.822722] R10: 000055a50e11c9a8 R11: 0000000000000202 R12: 00007ffcacb19880 [ 1667.829966] R13: 000055a50e11ccb0 R14: 0000000000000003 R15: 000000000000000e [ 1667.841616] Mem-Info: [ 1667.846385] active_anon:231471 inactive_anon:1116727 isolated_anon:0 [ 1667.846385] active_file:177 inactive_file:239 isolated_file:32 [ 1667.846385] unevictable:12261 dirty:10 writeback:13 unstable:0 [ 1667.846385] slab_reclaimable:16170 slab_unreclaimable:113003 [ 1667.846385] mapped:60916 shmem:14712 pagetables:11406 bounce:0 [ 1667.846385] free:25014 free_pcp:74 free_cma:0 [ 1667.887690] Node 0 active_anon:911168kB inactive_anon:891792kB active_file:436kB inactive_file:396kB unevictable:39756kB isolated(anon):0kB isolated(file):0kB mapped:231516kB dirty:36kB writeback:56kB shmem:47860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 337920kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1667.916977] Node 1 active_anon:14716kB inactive_anon:3575116kB active_file:8kB inactive_file:8kB unevictable:9288kB isolated(anon):0kB isolated(file):0kB mapped:11848kB dirty:0kB writeback:0kB shmem:10988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1667.944740] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1667.971893] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1667.977015] Node 0 DMA32 free:36964kB min:36272kB low:45340kB high:54408kB active_anon:910456kB inactive_anon:887524kB active_file:320kB inactive_file:268kB unevictable:39804kB writepending:0kB present:3129332kB managed:2621260kB mlocked:39804kB kernel_stack:9792kB pagetables:17360kB bounce:0kB free_pcp:740kB local_pcp:56kB free_cma:0kB [ 1668.007641] lowmem_reserve[]: 0 0 0 0 0 [ 1668.011749] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1668.037304] lowmem_reserve[]: 0 0 0 0 0 [ 1668.042535] Node 1 Normal free:53472kB min:53612kB low:67012kB high:80412kB active_anon:14680kB inactive_anon:3575116kB active_file:8kB inactive_file:8kB unevictable:9288kB writepending:0kB present:3932160kB managed:3870192kB mlocked:9288kB kernel_stack:8768kB pagetables:28004kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1668.072018] lowmem_reserve[]: 0 0 0 0 0 [ 1668.076064] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1668.093410] Node 0 DMA32: 308*4kB (UME) 266*8kB (UME) 51*16kB (UM) 210*32kB (UM) 141*64kB (UM) 16*128kB (UM) 13*256kB (UM) 4*512kB (UM) 2*1024kB (M) 0*2048kB 2*4096kB (M) = 37584kB [ 1668.110352] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1668.124616] Node 1 Normal: 65*4kB (UME) 449*8kB (UME) 1366*16kB (ME) 514*32kB (UME) 107*64kB (UME) 17*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 53484kB [ 1668.146773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1668.156127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1668.167085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1668.179215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1668.188277] 17807 total pagecache pages [ 1668.192702] 0 pages in swap cache [ 1668.196610] Swap cache stats: add 0, delete 0, find 0/0 [ 1668.205025] Free swap = 0kB [ 1668.211093] Total swap = 0kB [ 1668.214589] 1965979 pages RAM [ 1668.218232] 0 pages HighMem/MovableOnly [ 1668.222716] 339053 pages reserved [ 1668.228924] 0 pages cma reserved [ 1668.232344] Out of memory: Kill process 25936 (syz-executor.4) score 1007 or sacrifice child [ 1668.241386] Killed process 25965 (syz-executor.4) total-vm:74972kB, anon-rss:18028kB, file-rss:34816kB, shmem-rss:0kB [ 1668.320372] oom_reaper: reaped process 25965 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1668.421831] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1668.445290] systemd-journal cpuset=/ mems_allowed=0-1 [ 1668.450598] CPU: 1 PID: 3637 Comm: systemd-journal Not tainted 4.14.180-syzkaller #0 [ 1668.458464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1668.467888] Call Trace: [ 1668.470456] dump_stack+0x13e/0x194 [ 1668.474065] dump_header+0x178/0x6d4 [ 1668.477755] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1668.482751] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1668.487874] ? ___ratelimit+0x50/0x519 [ 1668.491747] oom_kill_process.cold+0x10/0xae3 [ 1668.496229] ? lock_acquire+0x170/0x3f0 [ 1668.500178] ? lock_downgrade+0x6e0/0x6e0 [ 1668.504305] out_of_memory+0x2d5/0x1110 [ 1668.508254] ? oom_killer_disable+0x1c0/0x1c0 [ 1668.512722] ? mutex_trylock+0x152/0x1a0 [ 1668.516757] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1668.522153] ? warn_alloc+0xf0/0xf0 [ 1668.525757] ? find_held_lock+0x2d/0x110 [ 1668.529826] ? fs_reclaim_acquire+0x10/0x10 [ 1668.534128] __alloc_pages_nodemask+0x5d3/0x700 [ 1668.538772] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1668.543587] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1668.548701] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1668.553696] ? cache_grow_begin+0x32d/0x410 [ 1668.558008] cache_grow_begin+0x7b/0x410 [ 1668.562100] fallback_alloc+0x205/0x2b0 [ 1668.566054] kmem_cache_alloc+0x1ea/0x770 [ 1668.570180] getname_flags+0xc8/0x560 [ 1668.573958] do_sys_open+0x1c4/0x3f0 [ 1668.577646] ? filp_open+0x60/0x60 [ 1668.581165] ? do_syscall_64+0x4c/0x640 [ 1668.585112] ? do_sys_open+0x3f0/0x3f0 [ 1668.588980] do_syscall_64+0x1d5/0x640 [ 1668.592860] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1668.598024] RIP: 0033:0x7f033b61d85d [ 1668.601708] RSP: 002b:00007ffec0368080 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1668.609391] RAX: ffffffffffffffda RBX: 00007ffec0368390 RCX: 00007f033b61d85d [ 1668.616633] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055b43f2db7c0 [ 1668.623881] RBP: 000000000000000d R08: 00000000000001e0 R09: 00000000ffffffff [ 1668.631212] R10: 0000000000000069 R11: 0000000000000293 R12: 00000000ffffffff [ 1668.638454] R13: 000055b43f2d0060 R14: 00007ffec0368350 R15: 000055b43f2dde30 [ 1668.648430] Mem-Info: [ 1668.650849] active_anon:231445 inactive_anon:1114664 isolated_anon:0 [ 1668.650849] active_file:23 inactive_file:1 isolated_file:0 [ 1668.650849] unevictable:14867 dirty:0 writeback:0 unstable:0 [ 1668.650849] slab_reclaimable:16170 slab_unreclaimable:113113 [ 1668.650849] mapped:63231 shmem:14712 pagetables:11356 bounce:0 [ 1668.650849] free:24929 free_pcp:0 free_cma:0 [ 1668.687095] Node 0 active_anon:911096kB inactive_anon:890044kB active_file:80kB inactive_file:0kB unevictable:44112kB isolated(anon):0kB isolated(file):0kB mapped:235008kB dirty:0kB writeback:0kB shmem:47856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 337920kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1668.715536] Node 1 active_anon:14684kB inactive_anon:3568612kB active_file:20kB inactive_file:0kB unevictable:15356kB isolated(anon):0kB isolated(file):0kB mapped:17916kB dirty:0kB writeback:0kB shmem:10992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1668.743245] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1668.770030] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1668.775056] Node 0 DMA32 free:35948kB min:36272kB low:45340kB high:54408kB active_anon:910448kB inactive_anon:885776kB active_file:88kB inactive_file:0kB unevictable:44112kB writepending:0kB present:3129332kB managed:2621260kB mlocked:44112kB kernel_stack:9792kB pagetables:17236kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1668.804534] lowmem_reserve[]: 0 0 0 0 0 [ 1668.808533] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1668.834007] lowmem_reserve[]: 0 0 0 0 0 [ 1668.837969] Node 1 Normal free:53400kB min:53612kB low:67012kB high:80412kB active_anon:14684kB inactive_anon:3568612kB active_file:20kB inactive_file:0kB unevictable:15356kB writepending:0kB present:3932160kB managed:3870192kB mlocked:15356kB kernel_stack:8800kB pagetables:28032kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1668.867538] lowmem_reserve[]: 0 0 0 0 0 [ 1668.872150] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1668.888016] Node 0 DMA32: 83*4kB (UME) 246*8kB (UME) 38*16kB (U) 199*32kB (UM) 141*64kB (UM) 16*128kB (UM) 13*256kB (UM) 4*512kB (UM) 2*1024kB (M) 0*2048kB 2*4096kB (M) = 35964kB [ 1668.907050] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1668.917836] Node 1 Normal: 38*4kB (UME) 509*8kB (UME) 1361*16kB (ME) 499*32kB (UME) 108*64kB (UME) 18*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 53488kB [ 1668.936412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1668.945283] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1668.956533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1668.965397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1668.973995] 19911 total pagecache pages [ 1668.977964] 0 pages in swap cache [ 1668.981433] Swap cache stats: add 0, delete 0, find 0/0 [ 1668.986778] Free swap = 0kB [ 1668.989826] Total swap = 0kB [ 1668.992829] 1965979 pages RAM [ 1668.995917] 0 pages HighMem/MovableOnly [ 1668.999918] 339053 pages reserved [ 1669.003353] 0 pages cma reserved [ 1669.006698] Out of memory: Kill process 25936 (syz-executor.4) score 1008 or sacrifice child [ 1669.015324] Killed process 25936 (syz-executor.4) total-vm:74964kB, anon-rss:9816kB, file-rss:53176kB, shmem-rss:0kB [ 1669.045612] oom_reaper: reaped process 25936 (syz-executor.4), now anon-rss:9828kB, file-rss:20720kB, shmem-rss:0kB 18:30:04 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x98428d57a99b5f44) io_setup(0xd, &(0x7f0000000100)=0x0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000000)={0x2b, 0x37, 0x2, {0x1, 0x9f, 0x41505f8f, r3, 0xd, '\x00em0mime_type'}}, 0x2b) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x200, 0x0) r5 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x7, 0x0, r5, &(0x7f0000000140)="a210b644e7c53533d4cbbf2cfa07eddfeb8cdaf1abda8c050a5839086b74dcb8222608aea6e4d692ef522e0f4434b8", 0x2f, 0x0, 0x0, 0x3, r4}]) 18:30:07 executing program 1: socket$inet6(0xa, 0x3, 0x7) r0 = accept(0xffffffffffffffff, &(0x7f0000000140)=@rc={0x1f, @none}, 0x0) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000400)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000440)=0x24) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000480)={r2}, &(0x7f00000004c0)=0x8) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a0036459cdb26cd03ccb7e638a66c866a951362d3fa985503f8f45bfb4e9240b985dda11bde27881f17233d3ad01f2177b1a53e51397d581d1549a05c1955f5d2a27a54f154dfab0a4d6a66872083c18972c13e068508685eb082db85be8bcf0074dd91f31c0bc042060d00000000000000", @ANYRES32, @ANYBLOB="534fce983e5c2d7673b4958005e750e907d4fdc7bf13d088ad203bd736a916945b0f66f933a31733392547e20febfc8d209cbf74cde243bf2406fae4ddbe02d390fffad64b012deb14b92f020709e51b3e84a45b53c64c5aa753b3531c693655564c9a8ddb7d983a19eb11f0803dceb96346ee580ea4a890f90a69b44067df0949c216f3b291122bcd89a0777619426cacf7375a9e293541d7f70f4c738e9580acb79cc9465802b2a647ecf12edffdca4a00493580b7c2c846f1a8bd3609d25a90e6f566609a73002762a2293a435c82"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r3 = socket(0x1e, 0x80002, 0xfffffffe) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[]}, 0x1, 0x0, 0x0, 0x905d62352c9ce07f}, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) keyctl$chown(0x4, r5, 0x0, r7) setgid(r7) openat(r4, 0x0, 0x2080, 0x60) 18:30:07 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000007c851b2cd9c0959e7c42868e8835fca4b7809f7e8a664a59d654ee68449ab020bb81c171d7180069d002eb3323e0e3576a647081714de408de5f18d7fb756888683757e23a5b53828ca85c7d9ee2ef6abef5cef1a6d5b91b23927179d2850392683ae1b6a0d507eaa7e44fe15591dac25b0e593fa9be4b93b4564c12bd27a36e62", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) 18:30:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) epoll_create1(0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) shutdown(r0, 0x1) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) sched_setparam(r2, &(0x7f0000000140)) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) [ 1670.603468] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1670.616188] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1670.628080] CPU: 1 PID: 6334 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1670.635521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1670.644870] Call Trace: [ 1670.647448] dump_stack+0x13e/0x194 [ 1670.651074] dump_header+0x178/0x6d4 [ 1670.654777] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1670.659782] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1670.664872] ? ___ratelimit+0x50/0x519 [ 1670.668754] oom_kill_process.cold+0x10/0xae3 [ 1670.673240] ? lock_downgrade+0x6e0/0x6e0 [ 1670.677381] out_of_memory+0x2d5/0x1110 [ 1670.681364] ? oom_killer_disable+0x1c0/0x1c0 [ 1670.685989] ? mutex_trylock+0x152/0x1a0 [ 1670.690088] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1670.694935] ? warn_alloc+0xf0/0xf0 [ 1670.698562] __alloc_pages_nodemask+0x5d3/0x700 [ 1670.703230] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1670.708244] ? lock_downgrade+0x6e0/0x6e0 [ 1670.712391] alloc_pages_current+0xe7/0x1e0 [ 1670.716709] __page_cache_alloc+0x245/0x3d0 [ 1670.721022] filemap_fault+0xc18/0x1c50 [ 1670.724992] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1670.729648] ? lock_acquire+0x170/0x3f0 [ 1670.733610] ? ext4_filemap_fault+0x7c/0xb0 [ 1670.737925] ext4_filemap_fault+0x84/0xb0 [ 1670.742060] __do_fault+0xfa/0x380 [ 1670.745587] __handle_mm_fault+0x22e9/0x3280 [ 1670.749986] ? copy_page_range+0x1d70/0x1d70 [ 1670.754382] ? find_held_lock+0x2d/0x110 [ 1670.758443] handle_mm_fault+0x288/0x7a0 [ 1670.762495] __do_page_fault+0x4bc/0xb40 [ 1670.766549] ? vmalloc_fault+0xdf0/0xdf0 [ 1670.770600] ? do_page_fault+0x60/0x4f2 [ 1670.774576] ? page_fault+0x2f/0x50 [ 1670.778190] page_fault+0x45/0x50 [ 1670.781631] RIP: 0002:0x32 [ 1670.784461] RSP: 20140800:000000c42003a720 EFLAGS: 1920f8c7ad7 [ 1670.789019] Mem-Info: [ 1670.797535] active_anon:230093 inactive_anon:1114676 isolated_anon:0 [ 1670.797535] active_file:19 inactive_file:0 isolated_file:0 [ 1670.797535] unevictable:15923 dirty:1 writeback:9 unstable:0 [ 1670.797535] slab_reclaimable:16170 slab_unreclaimable:113113 [ 1670.797535] mapped:62382 shmem:14712 pagetables:11303 bounce:0 [ 1670.797535] free:25031 free_pcp:0 free_cma:0 [ 1670.831330] Node 0 active_anon:907776kB inactive_anon:890092kB active_file:52kB inactive_file:0kB unevictable:46288kB isolated(anon):0kB isolated(file):0kB mapped:232436kB dirty:0kB writeback:12kB shmem:47856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 344064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1670.861257] Node 1 active_anon:12596kB inactive_anon:3568612kB active_file:24kB inactive_file:0kB unevictable:17404kB isolated(anon):0kB isolated(file):0kB mapped:17092kB dirty:4kB writeback:24kB shmem:10992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1670.889542] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1670.917457] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1670.930281] Node 0 DMA32 free:36168kB min:36272kB low:45340kB high:54408kB active_anon:907128kB inactive_anon:885808kB active_file:148kB inactive_file:232kB unevictable:46584kB writepending:220kB present:3129332kB managed:2621260kB mlocked:46584kB kernel_stack:9760kB pagetables:17224kB bounce:0kB free_pcp:444kB local_pcp:0kB free_cma:0kB [ 1670.965278] lowmem_reserve[]: 0 0 0 0 0 [ 1670.971698] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1670.997272] lowmem_reserve[]: 0 0 0 0 0 [ 1671.001306] Node 1 Normal free:53720kB min:53612kB low:67012kB high:80412kB active_anon:12580kB inactive_anon:3568612kB active_file:40kB inactive_file:40kB unevictable:17512kB writepending:28kB present:3932160kB managed:3870192kB mlocked:17512kB kernel_stack:8704kB pagetables:27852kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 1671.035480] lowmem_reserve[]: 0 0 0 0 0 [ 1671.042920] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1671.058994] Node 0 DMA32: 114*4kB (UME) 176*8kB (UME) 221*16kB (UM) 256*32kB (UM) 146*64kB (UM) 16*128kB (UM) 14*256kB (UM) 4*512kB (UM) 2*1024kB (M) 2*2048kB (M) 0*4096kB = 36760kB [ 1671.076271] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1671.096100] Node 1 Normal: 42*4kB (UME) 440*8kB (UME) 1386*16kB (ME) 502*32kB (UME) 107*64kB (UME) 21*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 53768kB [ 1671.112147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1671.121029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1671.129619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1671.138498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1671.147053] 19293 total pagecache pages [ 1671.154499] 0 pages in swap cache [ 1671.158022] Swap cache stats: add 0, delete 0, find 0/0 [ 1671.163370] Free swap = 0kB [ 1671.166375] Total swap = 0kB [ 1671.169422] 1965979 pages RAM [ 1671.172512] 0 pages HighMem/MovableOnly [ 1671.176464] 339053 pages reserved [ 1671.179921] 0 pages cma reserved [ 1671.183269] Out of memory: Kill process 25969 (syz-executor.4) score 1009 or sacrifice child [ 1671.191894] Killed process 25974 (syz-executor.4) total-vm:74972kB, anon-rss:132kB, file-rss:34816kB, shmem-rss:0kB [ 1671.447809] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1671.464570] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1671.470157] CPU: 0 PID: 6330 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1671.477588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1671.486917] Call Trace: [ 1671.489491] dump_stack+0x13e/0x194 [ 1671.493104] dump_header+0x178/0x6d4 [ 1671.496809] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1671.501809] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1671.506892] ? ___ratelimit+0x50/0x519 [ 1671.510767] oom_kill_process.cold+0x10/0xae3 [ 1671.515254] ? lock_acquire+0x170/0x3f0 [ 1671.519216] ? lock_downgrade+0x6e0/0x6e0 [ 1671.523361] out_of_memory+0x2d5/0x1110 [ 1671.527383] ? oom_killer_disable+0x1c0/0x1c0 [ 1671.531968] ? mutex_trylock+0x152/0x1a0 [ 1671.536014] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1671.540868] ? warn_alloc+0xf0/0xf0 [ 1671.544495] __alloc_pages_nodemask+0x5d3/0x700 [ 1671.549151] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1671.554191] ? lock_downgrade+0x6e0/0x6e0 [ 1671.558331] alloc_pages_current+0xe7/0x1e0 [ 1671.562643] __page_cache_alloc+0x245/0x3d0 [ 1671.566947] filemap_fault+0xc18/0x1c50 [ 1671.570913] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1671.575574] ? lock_acquire+0x170/0x3f0 [ 1671.579534] ? ext4_filemap_fault+0x7c/0xb0 [ 1671.583970] ext4_filemap_fault+0x84/0xb0 [ 1671.588103] __do_fault+0xfa/0x380 [ 1671.591632] __handle_mm_fault+0x22e9/0x3280 [ 1671.596022] ? copy_page_range+0x1d70/0x1d70 [ 1671.600411] ? find_held_lock+0x2d/0x110 [ 1671.604478] handle_mm_fault+0x288/0x7a0 [ 1671.608524] __do_page_fault+0x4bc/0xb40 [ 1671.612569] ? vmalloc_fault+0xdf0/0xdf0 [ 1671.616761] ? do_page_fault+0x60/0x4f2 [ 1671.620832] ? page_fault+0x2f/0x50 [ 1671.624447] page_fault+0x45/0x50 [ 1671.627879] RIP: 0030:0x22 [ 1671.630699] RSP: 874240:000000c43af50328 EFLAGS: 00000000 [ 1671.635580] Mem-Info: [ 1671.635597] active_anon:230073 inactive_anon:1114664 isolated_anon:0 [ 1671.635597] active_file:12 inactive_file:24 isolated_file:0 [ 1671.635597] unevictable:16301 dirty:8 writeback:0 unstable:0 [ 1671.635597] slab_reclaimable:16165 slab_unreclaimable:113070 [ 1671.635597] mapped:62692 shmem:14712 pagetables:11279 bounce:0 [ 1671.635597] free:24963 free_pcp:0 free_cma:0 [ 1671.635610] Node 0 active_anon:907724kB inactive_anon:890044kB active_file:44kB inactive_file:44kB unevictable:47368kB isolated(anon):0kB isolated(file):0kB mapped:233332kB dirty:4kB writeback:0kB shmem:47856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 339968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1671.635623] Node 1 active_anon:12568kB inactive_anon:3568612kB active_file:4kB inactive_file:52kB unevictable:17836kB isolated(anon):0kB isolated(file):0kB mapped:17436kB dirty:28kB writeback:0kB shmem:10992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1671.635626] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1671.635641] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1671.765757] Node 0 DMA32 free:36196kB min:36272kB low:45340kB high:54408kB active_anon:907076kB inactive_anon:885776kB active_file:28kB inactive_file:60kB unevictable:47368kB writepending:4kB present:3129332kB managed:2621260kB mlocked:47368kB kernel_stack:9760kB pagetables:17108kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 1671.795490] lowmem_reserve[]: 0 0 0 0 0 [ 1671.799527] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1671.824979] lowmem_reserve[]: 0 0 0 0 0 [ 1671.833775] Node 1 Normal free:53424kB min:53612kB low:67012kB high:80412kB active_anon:12568kB inactive_anon:3568612kB active_file:16kB inactive_file:0kB unevictable:17896kB writepending:28kB present:3932160kB managed:3870192kB mlocked:17896kB kernel_stack:8704kB pagetables:27856kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1671.865851] lowmem_reserve[]: 0 0 0 0 0 [ 1671.869897] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1671.885774] Node 0 DMA32: 83*4kB (UE) 163*8kB (UME) 202*16kB (UM) 254*32kB (UM) 146*64kB (UM) 16*128kB (UM) 14*256kB (UM) 4*512kB (UM) 2*1024kB (M) 2*2048kB (M) 0*4096kB = 36164kB [ 1671.902059] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1671.912829] Node 1 Normal: 44*4kB (UME) 396*8kB (UME) 1386*16kB (ME) 502*32kB (UME) 107*64kB (UME) 21*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 53424kB [ 1671.928835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1671.937645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1671.946240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1671.955108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1671.963727] 19389 total pagecache pages [ 1671.967676] 0 pages in swap cache [ 1671.971149] Swap cache stats: add 0, delete 0, find 0/0 [ 1671.976495] Free swap = 0kB [ 1671.979569] Total swap = 0kB [ 1671.982572] 1965979 pages RAM [ 1671.985655] 0 pages HighMem/MovableOnly [ 1671.989922] 339053 pages reserved [ 1671.993399] 0 pages cma reserved [ 1671.996738] Out of memory: Kill process 25969 (syz-executor.4) score 1009 or sacrifice child [ 1672.005392] Killed process 25969 (syz-executor.4) total-vm:75096kB, anon-rss:17904kB, file-rss:52396kB, shmem-rss:0kB [ 1672.034692] oom_reaper: reaped process 25969 (syz-executor.4), now anon-rss:18012kB, file-rss:18608kB, shmem-rss:0kB [ 1672.067301] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1672.099768] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1672.104605] CPU: 1 PID: 6330 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1672.112042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1672.121379] Call Trace: [ 1672.123963] dump_stack+0x13e/0x194 [ 1672.127581] dump_header+0x178/0x6d4 [ 1672.131283] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1672.136287] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1672.141386] ? ___ratelimit+0x50/0x519 [ 1672.145268] oom_kill_process.cold+0x10/0xae3 [ 1672.149764] ? lock_acquire+0x170/0x3f0 [ 1672.153728] ? lock_downgrade+0x6e0/0x6e0 [ 1672.157874] out_of_memory+0x2d5/0x1110 [ 1672.161844] ? oom_killer_disable+0x1c0/0x1c0 [ 1672.166329] ? mutex_trylock+0x152/0x1a0 [ 1672.170470] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1672.175325] ? warn_alloc+0xf0/0xf0 [ 1672.178956] __alloc_pages_nodemask+0x5d3/0x700 [ 1672.183621] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1672.188628] ? lock_downgrade+0x6e0/0x6e0 [ 1672.192777] alloc_pages_current+0xe7/0x1e0 [ 1672.197091] __page_cache_alloc+0x245/0x3d0 [ 1672.201405] filemap_fault+0xc18/0x1c50 [ 1672.205378] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1672.210039] ? lock_acquire+0x170/0x3f0 [ 1672.214005] ? ext4_filemap_fault+0x7c/0xb0 [ 1672.218327] ext4_filemap_fault+0x84/0xb0 [ 1672.222459] __do_fault+0xfa/0x380 [ 1672.225984] __handle_mm_fault+0x22e9/0x3280 [ 1672.230379] ? copy_page_range+0x1d70/0x1d70 [ 1672.234776] ? find_held_lock+0x2d/0x110 [ 1672.238833] handle_mm_fault+0x288/0x7a0 [ 1672.242885] __do_page_fault+0x4bc/0xb40 [ 1672.246938] ? vmalloc_fault+0xdf0/0xdf0 [ 1672.250987] ? do_page_fault+0x60/0x4f2 [ 1672.254953] ? page_fault+0x2f/0x50 [ 1672.258653] page_fault+0x45/0x50 [ 1672.262092] RIP: 0030:0x22 [ 1672.264920] RSP: 874240:000000c43af50328 EFLAGS: 00000000 [ 1672.280080] Mem-Info: [ 1672.288121] active_anon:230073 inactive_anon:1114686 isolated_anon:0 [ 1672.288121] active_file:1177 inactive_file:1812 isolated_file:0 [ 1672.288121] unevictable:7194 dirty:8 writeback:0 unstable:0 [ 1672.288121] slab_reclaimable:16165 slab_unreclaimable:113070 [ 1672.288121] mapped:58563 shmem:14712 pagetables:11280 bounce:0 [ 1672.288121] free:30919 free_pcp:319 free_cma:0 18:30:09 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x40) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/112, 0x70) lseek(r0, 0x0, 0x0) 18:30:09 executing program 0: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl(r0, 0x1a13, &(0x7f00000004c0)="f4c333dd49d4dd069f9f354f23c61e07c0448a364b82d85bbe741d6b8cd0de5c09d84f4132defc65378c026d61a34bd0d7a8f20c9f5a0fa20f1333df97c224b75eeeb69f180e0dffff8e883be4706a2ca2c8cacae0df217b13") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000100)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000004f0200000000024f000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000000240)="82e8ab0c0020de248809d8650000000000a7ed6e871783ef40fe", 0x1a}, {0x0, 0x0, 0xfffffffffffffff9}], 0x0, 0x0) r4 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$IMGETVERSION(r4, 0x80044942, &(0x7f0000000480)) umount2(&(0x7f0000000280)='./file0\x00', 0x0) recvmsg(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1, &(0x7f0000000700)=""/157, 0x9d}, 0x40000002) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x6, 0x1}, 0x3, 0x84, &(0x7f0000000380)="5d1e3d0b13c072b103c17f593cce64ed3257088ac0afcbf79945cef0efbe83d80179dd0395c266db12365f5f5592729a6026faef4fc5d8d42a1b76cf6ae4de448d5180262cc70c5f146168d0ea7615c241c7b62a8ec3a44193dabe518368a5ffac15f28fb52b14ac3e534415a575f6b0648b6e49fbc0e4454705b502fc4bb1b55c9f2c0267ce080895978bb21f957772a59fa0c6b3dab712b820ab235580c57c110733673d7cb97b3bd818706075965182b3cc8d22d11d1858a7c464a2177ddba26090736f926908f51ff5b23be04ee0275971897003b8e50608c30753bf1086f64e91352da8a4c5b257", 0xea, 0xffffffe1, 0x3, 0x0, 0xfff, 0xfffffffd, &(0x7f0000000000)="13a893f702835dd3fe57c43db81e1a133b9862f93b1612678205d8e27b7cd1c5bea37dec426e6d63df70dc7a5480044d4b920101fd3f8cff0446eebdbcef016d43022b35befe1fad9b835753fa55a5b5978599dd946c8c4aed93e0d5f317199613b3743de89c53547fe12a0a5ada7a250c049f1b9e849164a4bcd0b572fdaae7321bb73dbb76b01a7e9ec041e24fef2187a24ef2e9d35dd31d14b8de"}) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f0000000580)=0x2) 18:30:09 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x48000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) [ 1672.322521] Node 0 active_anon:907724kB inactive_anon:890132kB active_file:320kB inactive_file:5180kB unevictable:28680kB isolated(anon):0kB isolated(file):0kB mapped:228132kB dirty:104kB writeback:0kB shmem:47856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 339968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1672.351263] Node 1 active_anon:12568kB inactive_anon:3568612kB active_file:4488kB inactive_file:4568kB unevictable:96kB isolated(anon):0kB isolated(file):0kB mapped:8120kB dirty:28kB writeback:0kB shmem:10992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 18:30:09 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0x0], @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x10, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000806) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2=0xe0000013}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x1f}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}}, 0x0) r6 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r7 = accept(r6, &(0x7f0000000800)=@l2tp, &(0x7f0000000880)=0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@gettclass={0x24, 0x2a, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x1}, {0x9, 0xb}, {0xb, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8676f24eb2ea8654}, 0x20004044) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r8, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05e32cbd7000fbdbdf250800000008000500ac1414bb14000600636169663000000000000000000014000300ff01000000000000000000000000000114000300fe8000000000000000000000000000bb08000500ac1e000100003972a15099f5299e36356a31e980ae4d36850999e571c48bc518f2850a2e4050a345170caaca40ad3e8297478e8cfa512b7d589bfc7f5f95c7fb4cff2e7c0291b56a0012a5c78cce6f9a9393833f7dfb5afa"], 0x60}}, 0x80) 18:30:10 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000006000)=@ipx={0x4, 0x3, 0x1, "4b6330eeb7e3", 0xcc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)="2a4b36d3c30513dd50b2c4b3a908060a95763e6ecb1693ca7431529e66b28797f5e914f180e7d14589898500052efa79f385ce34156bae3c5f89730a13c4fce457c438dc5569ef52c95d5b510557ed49615b7ad03ac3528a3554e58df7e953f7b5ae22b937", 0xfffffe73}], 0x1, 0x0, 0x2b}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r3 = socket(0x1a, 0x4, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r4 = dup3(r1, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001480)=""/4096, 0x10}], 0x1, 0x0, 0xfffffffffffffe69}}], 0xffffff1f, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r6 = socket(0x10, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x5, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x7bf9, 0x5, 0x7fffffff, 0x800, 0x4d, 0x8, 0x2b6, 0x7ff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x4, 0x1, 0x28, r7}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r8, &(0x7f0000000280)=0x4) [ 1672.464783] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1672.506854] IPv6: sit8: Disabled Multicast RS 18:30:10 executing program 0: socket(0x10, 0x3, 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) sendmsg$netlink(r0, &(0x7f0000004800)={0x0, 0x0, &(0x7f0000000040)}, 0x0) [ 1672.581691] sctp: [Deprecated]: syz-executor.5 (pid 25998) Use of int in maxseg socket option. [ 1672.581691] Use struct sctp_assoc_value instead [ 1672.608326] IPv6: sit8: Disabled Multicast RS [ 1672.615988] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1672.636068] overlayfs: failed to resolve './file0': -2 [ 1672.643048] Node 0 DMA32 free:35756kB min:36272kB low:45340kB high:54408kB active_anon:911268kB inactive_anon:886044kB active_file:3984kB inactive_file:3304kB unevictable:36172kB writepending:4kB present:3129332kB managed:2621260kB mlocked:36024kB kernel_stack:9760kB pagetables:17108kB bounce:0kB free_pcp:1060kB local_pcp:392kB free_cma:0kB 18:30:10 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x40) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/112, 0x70) lseek(r0, 0x0, 0x0) [ 1672.798985] lowmem_reserve[]: 0 0 0 0 0 [ 1672.821975] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1672.953267] lowmem_reserve[]: 0 0 0 0 0 [ 1672.979428] Node 1 Normal free:53140kB min:53612kB low:67012kB high:80412kB active_anon:12588kB inactive_anon:3568612kB active_file:84kB inactive_file:476kB unevictable:12168kB writepending:4kB present:3932160kB managed:3870192kB mlocked:12168kB kernel_stack:8672kB pagetables:27840kB bounce:0kB free_pcp:412kB local_pcp:408kB free_cma:0kB [ 1673.067814] lowmem_reserve[]: 0 0 0 0 0 [ 1673.071979] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1673.089513] Node 0 DMA32: 163*4kB (UME) 167*8kB (UME) 54*16kB (UM) 214*32kB (U) 118*64kB (UM) 16*128kB (UM) 13*256kB (UM) 4*512kB (UM) 2*1024kB (M) 1*2048kB (M) 2*4096kB (M) = 36964kB [ 1673.106361] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1673.117561] Node 1 Normal: 92*4kB (UME) 1032*8kB (UME) 1462*16kB (UME) 417*32kB (UME) 73*64kB (UME) 21*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 55024kB [ 1673.134157] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1673.143496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1673.152586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1673.161828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1673.170822] 18609 total pagecache pages [ 1673.175313] 0 pages in swap cache [ 1673.205486] Swap cache stats: add 0, delete 0, find 0/0 [ 1673.222094] Free swap = 0kB [ 1673.231603] Total swap = 0kB [ 1673.241247] 1965979 pages RAM [ 1673.250978] 0 pages HighMem/MovableOnly [ 1673.260361] 339053 pages reserved [ 1673.268199] 0 pages cma reserved [ 1673.271615] Out of memory: Kill process 25925 (syz-executor.4) score 1007 or sacrifice child [ 1673.289116] Killed process 25925 (syz-executor.4) total-vm:75228kB, anon-rss:18500kB, file-rss:34624kB, shmem-rss:0kB [ 1673.381457] oom_reaper: reaped process 25925 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1674.052463] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1674.065019] in:imklog cpuset=/ mems_allowed=0-1 [ 1674.069727] CPU: 0 PID: 6036 Comm: in:imklog Not tainted 4.14.180-syzkaller #0 [ 1674.077124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1674.086467] Call Trace: [ 1674.089048] dump_stack+0x13e/0x194 [ 1674.092675] dump_header+0x178/0x6d4 [ 1674.096377] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1674.101382] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1674.106477] ? ___ratelimit+0x50/0x519 [ 1674.110360] oom_kill_process.cold+0x10/0xae3 [ 1674.114845] ? lock_acquire+0x170/0x3f0 [ 1674.118809] ? lock_downgrade+0x6e0/0x6e0 [ 1674.122949] out_of_memory+0x2d5/0x1110 [ 1674.126919] ? oom_killer_disable+0x1c0/0x1c0 [ 1674.131405] ? mutex_trylock+0x152/0x1a0 [ 1674.135457] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1674.140303] ? warn_alloc+0xf0/0xf0 [ 1674.143931] __alloc_pages_nodemask+0x5d3/0x700 [ 1674.148597] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1674.153599] ? lock_downgrade+0x6e0/0x6e0 [ 1674.157744] alloc_pages_current+0xe7/0x1e0 [ 1674.162058] __page_cache_alloc+0x245/0x3d0 [ 1674.166363] filemap_fault+0xc18/0x1c50 [ 1674.170315] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1674.174957] ? lock_acquire+0x170/0x3f0 [ 1674.178907] ? ext4_filemap_fault+0x7c/0xb0 [ 1674.183203] ext4_filemap_fault+0x84/0xb0 [ 1674.187340] __do_fault+0xfa/0x380 [ 1674.190854] __handle_mm_fault+0x22e9/0x3280 [ 1674.195238] ? copy_page_range+0x1d70/0x1d70 [ 1674.199638] ? find_held_lock+0x2d/0x110 [ 1674.203676] handle_mm_fault+0x288/0x7a0 [ 1674.207726] __do_page_fault+0x4bc/0xb40 [ 1674.211811] ? vmalloc_fault+0xdf0/0xdf0 [ 1674.215843] ? do_page_fault+0x60/0x4f2 [ 1674.219800] ? page_fault+0x2f/0x50 [ 1674.223409] page_fault+0x45/0x50 [ 1674.226840] RIP: fffff7e7:0x1f9f [ 1674.230199] RSP: 4dbb64a0:00007f204dbb64ac EFLAGS: 7f204dbb6dce [ 1674.248183] Mem-Info: [ 1674.267810] active_anon:230643 inactive_anon:1112560 isolated_anon:0 [ 1674.267810] active_file:32 inactive_file:17 isolated_file:29 [ 1674.267810] unevictable:17164 dirty:0 writeback:0 unstable:0 [ 1674.267810] slab_reclaimable:16163 slab_unreclaimable:113412 [ 1674.267810] mapped:63541 shmem:14712 pagetables:11307 bounce:0 [ 1674.267810] free:24950 free_pcp:179 free_cma:0 [ 1674.318786] Node 0 active_anon:909980kB inactive_anon:882096kB active_file:112kB inactive_file:16kB unevictable:54576kB isolated(anon):0kB isolated(file):0kB mapped:241352kB dirty:0kB writeback:0kB shmem:47856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 335872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1674.347844] Node 1 active_anon:12592kB inactive_anon:3568144kB active_file:120kB inactive_file:0kB unevictable:14080kB isolated(anon):0kB isolated(file):12kB mapped:12764kB dirty:0kB writeback:0kB shmem:10992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1674.376185] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1674.404348] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1674.423280] Node 0 DMA32 free:36224kB min:36272kB low:45340kB high:54408kB active_anon:909332kB inactive_anon:878332kB active_file:24kB inactive_file:564kB unevictable:54072kB writepending:0kB present:3129332kB managed:2621260kB mlocked:54072kB kernel_stack:9856kB pagetables:17360kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1674.486623] lowmem_reserve[]: 0 0 0 0 0 [ 1674.495906] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1674.535834] lowmem_reserve[]: 0 0 0 0 0 [ 1674.543999] Node 1 Normal free:53360kB min:53612kB low:67012kB high:80412kB active_anon:12604kB inactive_anon:3568144kB active_file:160kB inactive_file:0kB unevictable:14584kB writepending:0kB present:3932160kB managed:3870192kB mlocked:14584kB kernel_stack:8704kB pagetables:27712kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1674.589642] lowmem_reserve[]: 0 0 0 0 0 [ 1674.593661] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1674.609911] Node 0 DMA32: 86*4kB (UME) 157*8kB (UME) 61*16kB (UM) 216*32kB (UM) 105*64kB (UM) 21*128kB (UM) 13*256kB (UM) 4*512kB (UM) 2*1024kB (M) 1*2048kB (M) 2*4096kB (M) = 36560kB [ 1674.653543] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1674.666383] Node 1 Normal: 95*4kB (UME) 838*8kB (UME) 1465*16kB (UME) 416*32kB (UME) 73*64kB (UME) 21*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 53500kB [ 1674.694801] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1674.706197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1674.717680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1674.736028] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1674.744702] 20185 total pagecache pages [ 1674.757774] 0 pages in swap cache [ 1674.761252] Swap cache stats: add 0, delete 0, find 0/0 [ 1674.766603] Free swap = 0kB [ 1674.775982] Total swap = 0kB [ 1674.788846] 1965979 pages RAM [ 1674.791950] 0 pages HighMem/MovableOnly [ 1674.795907] 339053 pages reserved [ 1674.806541] 0 pages cma reserved [ 1674.810288] Out of memory: Kill process 25981 (syz-executor.4) score 1010 or sacrifice child [ 1674.833566] Killed process 26014 (syz-executor.4) total-vm:74972kB, anon-rss:18380kB, file-rss:34816kB, shmem-rss:0kB [ 1674.892352] overlayfs: failed to resolve './file0': -2 18:30:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1a711, 0x2, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r4 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 1674.947553] oom_reaper: reaped process 26014 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1675.066510] ip_tables: iptables: counters copy to user failed while replacing table 18:30:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x2, 0x0, 0x8, 0x0, 0x6, 0x80000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c010000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fddbdf25010000004400018008000300000000000800030001000000140002006d61637674617030000000000000000008000300000000001400020069703667726530000000000000000000040003000400030004000300300001800800030002000000140002007465616d5f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000880002800c000180080001ee640000002c000180080001000000000008000100070000000800010008000000080001000500000008000100040000004c00018008000100080000000800010000000000080001000700000008000100020000000800d7f4bd551d713479ecc5bc9e000800010002000000000001000300000006000000c54e47e7bb11da5e788a5cc03044f491ab0c8e780e8b48430a55cffb7a524062da74e00d26b8047ecd22747d3fae2ba9e02d2f28fb16e1a7b3d0e2f743cce93094d72851cc4d3704e3d864b2c4a30fb850f56c152074f407cfe56c2195a353f23d49426586baed13a89b191d054300797b0c1b2a12fb6ba1a413f1f1a0adf4c48f803ac270731245f2b19771993f1f5e60a9285fde0000000000000000000000b304586fea1b041be41b9245a2b471746905827ef2a94bdd9befdfdcb5d142"], 0x11c}, 0x1, 0x0, 0x0, 0x4044004}, 0x4000085) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x100000000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f00000005c0)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[], 0x81) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@private2={0xfc, 0x2, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xd5, 0x4}) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) 18:30:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="740000002400070504ffe800000000000000922401cfd701accd418900088919cf841b91a8e618cd", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='N\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000000000000a000100727376703600000004000200"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r9 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}, 0x9}) socket(0x1, 0x1, 0x0) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0xfe52) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r10, @ANYBLOB="040000000000000000000000b6cf2621cee13c6bfa7f21f84a57084b5fd5d3f49400819d5b483b53603960c0fe85a147ce40a1b994c44d50b28968ff53e615264f4d08bfff4dd020633cb130ffd1d14f76eedf98dc722ea0f79faa051a8413dd96eb64da3d662f1a2d7e2aca56d5260e82cee7ca386c01434b4ad5c48aaf9639135265"], 0x24}}, 0x0) 18:30:18 executing program 0: r0 = socket(0x4000000000010, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipv6_getnetconf={0x14, 0x26, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x44804}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3e8, 0x400, 0x70bd27, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @broadcast}}}, 0x118) r5 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_INTERRUPT(r7, 0x4004ae86, &(0x7f00000004c0)=0x7c) r8 = accept(r5, &(0x7f00000003c0)=@l2={0x1f, 0x0, @none}, &(0x7f0000000440)=0x80) setsockopt$inet_int(r8, 0x0, 0x14, &(0x7f0000000480)=0x2b2f, 0x4) 18:30:18 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x14024, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f0000000340)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000100001080000000000000000000000012659f22d3d0bf3f0a2d452c8b277c3f5aa09b894793d7d4c71c613fc4795a875e60d4047d55e54b883bdca3705f8405821ffe56170bb46fe2029854242a784df3b0eb8adb87ed68b8cc2500000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000050021000600000008002e0004000000"], 0x30}}, 0x0) [ 1681.187635] ip_tables: iptables: counters copy to user failed while replacing table [ 1681.188095] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1681.345698] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:30:19 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x32}, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040005) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x814) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getpid() r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000200)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) socket$l2tp(0x2, 0x2, 0x73) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @netrom}, [@default, @bcast, @netrom, @null, @rose, @netrom, @bcast]}, &(0x7f0000000140)=0x48) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="614952d1a33dd7f916e3bcb05a0700a3673bc795fe04eb03ef7646ceeb3f25c6e628467aff407618d5caad3366e2102e7e0b5ec2a37fa157ee4bea49334609feb302710f98d084e62929cb757f2eaf9624c7f5853202a6d4cc03ac409658cb5dd1f8c29bc86761891057580070f601e62adc22fa24ed26546100ced9c4950e35e2a99a707f6b2cdd2f84cd278b3be9f252ec2720b0441a8c0981ddc3a1a84cd431aed1969d35a77bdf2235895717ecbc93c2c4d075e5c1232c1f3e913c2ad8f2808463d7506b6bbaacaeaa609eaab8f56c37a55b36928fdc4230b0650521ee98db52cdf3e74b17e659185936e5dec51ac3bc58df78cf654e872d4559"], 0x24}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 18:30:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(0xffffffffffffffff) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCGETA(r8, 0x5405, &(0x7f0000000740)) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100629569646765bc01ca7d0399a852c5ee27fec2f0b362d8a53568384686e9826820c4c0b45f0f15d80f9e48cfd3858944db719b3c0b0c4fe33e760bb1e5fbb4865dd792c7efa6fb2abee97e47f5f57d303fcc6057"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000a803000000000000000000005802000000000000580200001003000010030000100300001003000010030000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009801c00100000000000000ffff00000000000000000000003000616464727479706500000000000000000000000000000000000000000000000c0000000000000000000000000000f800726563656e74000000000000000000f10000000000000400878dac870000fdff000000000000210073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000e0000001ac1e0001000000000000000076657468315f746f5f6272696467650065727370616e30000000000000000000000000e6000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000770000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b80000000000000000000000000000000000000000004800544545000000000000000000000000000000000000000000000000000001ac1414bb00000000000000000000000076657468305f746f5f626f6e640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x7}, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @remote}, {0x0, 0x0, 0x0, @private=0xa010101}}}}}, 0x0) [ 1681.679933] syz-executor.0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1681.735646] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1681.749715] CPU: 1 PID: 26048 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0 [ 1681.757606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1681.766947] Call Trace: [ 1681.769530] dump_stack+0x13e/0x194 [ 1681.773157] dump_header+0x178/0x6d4 [ 1681.776872] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1681.781895] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1681.786997] ? ___ratelimit+0x50/0x519 [ 1681.790884] oom_kill_process.cold+0x10/0xae3 [ 1681.795377] ? lock_downgrade+0x6e0/0x6e0 [ 1681.799526] out_of_memory+0x2d5/0x1110 [ 1681.803498] ? oom_killer_disable+0x1c0/0x1c0 [ 1681.807989] ? mutex_trylock+0x152/0x1a0 [ 1681.812046] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1681.816896] ? warn_alloc+0xf0/0xf0 [ 1681.820519] ? find_held_lock+0x2d/0x110 [ 1681.824577] ? fs_reclaim_acquire+0x10/0x10 [ 1681.828906] __alloc_pages_nodemask+0x5d3/0x700 [ 1681.833573] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1681.838692] ? copy_process.part.0+0x17d5/0x6a50 [ 1681.843445] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1681.848459] ? save_trace+0x290/0x290 [ 1681.852258] copy_process.part.0+0x26a/0x6a50 [ 1681.856759] ? lock_downgrade+0x6e0/0x6e0 [ 1681.860903] ? pud_val+0xd0/0xd0 [ 1681.864271] ? do_raw_spin_unlock+0x164/0x250 [ 1681.868768] ? __cleanup_sighand+0x40/0x40 [ 1681.873004] _do_fork+0x180/0xc80 [ 1681.876457] ? fork_idle+0x270/0x270 [ 1681.880223] ? perf_swevent_put_recursion_context+0x1a/0xa0 [ 1681.885932] ? __perf_sw_event+0x4e/0x80 [ 1681.889979] ? __do_page_fault+0x35b/0xb40 [ 1681.894204] ? do_syscall_64+0x4c/0x640 [ 1681.898166] ? sys_vfork+0x20/0x20 [ 1681.901698] do_syscall_64+0x1d5/0x640 [ 1681.905585] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1681.910763] RIP: 0033:0x45f3f9 [ 1681.913947] RSP: 002b:00007fff67b58828 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1681.921639] RAX: ffffffffffffffda RBX: 00007fd9edc41700 RCX: 000000000045f3f9 [ 1681.928893] RDX: 00007fd9edc419d0 RSI: 00007fd9edc40db0 RDI: 00000000003d0f00 [ 1681.936148] RBP: 00007fff67b58a50 R08: 00007fd9edc41700 R09: 00007fd9edc41700 [ 1681.943399] R10: 00007fd9edc419d0 R11: 0000000000000202 R12: 0000000000000000 [ 1681.950659] R13: 00007fff67b588df R14: 00007fd9edc419c0 R15: 000000000078bfac [ 1681.992672] Mem-Info: [ 1681.997616] active_anon:234250 inactive_anon:1114665 isolated_anon:0 [ 1681.997616] active_file:264 inactive_file:383 isolated_file:13 [ 1681.997616] unevictable:9927 dirty:7 writeback:0 unstable:0 [ 1681.997616] slab_reclaimable:16143 slab_unreclaimable:114005 [ 1681.997616] mapped:59989 shmem:14712 pagetables:11375 bounce:0 [ 1681.997616] free:24445 free_pcp:215 free_cma:0 [ 1682.038615] Node 0 active_anon:922868kB inactive_anon:886076kB active_file:292kB inactive_file:396kB unevictable:30648kB isolated(anon):0kB isolated(file):52kB mapped:226452kB dirty:28kB writeback:0kB shmem:47860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 344064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1682.072406] Node 1 active_anon:12732kB inactive_anon:3572584kB active_file:0kB inactive_file:56kB unevictable:9060kB isolated(anon):0kB isolated(file):0kB mapped:11804kB dirty:0kB writeback:0kB shmem:10988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1682.106182] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1682.136203] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1682.141306] Node 0 DMA32 free:47560kB min:36272kB low:45340kB high:54408kB active_anon:907116kB inactive_anon:881808kB active_file:508kB inactive_file:1600kB unevictable:30648kB writepending:0kB present:3129332kB managed:2621260kB mlocked:30648kB kernel_stack:9792kB pagetables:17304kB bounce:0kB free_pcp:936kB local_pcp:600kB free_cma:0kB [ 1682.172400] lowmem_reserve[]: 0 0 0 0 0 [ 1682.176591] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1682.202557] lowmem_reserve[]: 0 0 0 0 0 [ 1682.206547] Node 1 Normal free:56604kB min:53612kB low:67012kB high:80412kB active_anon:12724kB inactive_anon:3572584kB active_file:0kB inactive_file:0kB unevictable:9060kB writepending:4kB present:3932160kB managed:3870192kB mlocked:9060kB kernel_stack:8800kB pagetables:27904kB bounce:0kB free_pcp:756kB local_pcp:60kB free_cma:0kB [ 1682.257168] lowmem_reserve[]: 0 0 0 0 0 [ 1682.261345] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 6*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10404kB [ 1682.278097] Node 0 DMA32: 94*4kB (UME) 544*8kB (UMEH) 462*16kB (UM) 62*32kB (UM) 87*64kB (UM) 20*128kB (UM) 13*256kB (UM) 4*512kB (UM) 2*1024kB (M) 2*2048kB (M) 2*4096kB (H) = 41944kB [ 1682.295064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1682.306618] Node 1 Normal: 183*4kB (ME) 729*8kB (UMEH) 1592*16kB (UMEH) 431*32kB (UME) 76*64kB (UME) 21*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 55684kB [ 1682.323522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1682.332454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1682.341114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1682.349956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1682.359132] 16510 total pagecache pages [ 1682.363108] 0 pages in swap cache [ 1682.366551] Swap cache stats: add 0, delete 0, find 0/0 [ 1682.371973] Free swap = 0kB [ 1682.374983] Total swap = 0kB [ 1682.378022] 1965979 pages RAM [ 1682.381540] 0 pages HighMem/MovableOnly [ 1682.385504] 339053 pages reserved [ 1682.389556] 0 pages cma reserved [ 1682.392920] Out of memory: Kill process 26021 (syz-executor.4) score 1007 or sacrifice child [ 1682.401549] Killed process 26021 (syz-executor.4) total-vm:75228kB, anon-rss:18500kB, file-rss:34624kB, shmem-rss:0kB [ 1682.502723] oom_reaper: reaped process 26021 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1682.714454] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1682.871445] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1682.884992] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1682.890323] CPU: 1 PID: 26059 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 1682.898197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1682.907542] Call Trace: [ 1682.910130] dump_stack+0x13e/0x194 [ 1682.913758] dump_header+0x178/0x6d4 [ 1682.917471] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1682.922476] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1682.927565] ? ___ratelimit+0x50/0x519 [ 1682.931453] oom_kill_process.cold+0x10/0xae3 [ 1682.935948] ? lock_downgrade+0x6e0/0x6e0 [ 1682.940097] out_of_memory+0x2d5/0x1110 [ 1682.944070] ? oom_killer_disable+0x1c0/0x1c0 [ 1682.948559] ? mutex_trylock+0x152/0x1a0 [ 1682.952612] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1682.957444] ? warn_alloc+0xf0/0xf0 [ 1682.961079] __alloc_pages_nodemask+0x5d3/0x700 [ 1682.965729] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1682.970719] ? find_held_lock+0x2d/0x110 [ 1682.974762] alloc_pages_vma+0xc2/0x4a0 [ 1682.978716] __handle_mm_fault+0x17b6/0x3280 [ 1682.983101] ? copy_page_range+0x1d70/0x1d70 [ 1682.987486] ? find_held_lock+0x2d/0x110 [ 1682.991530] handle_mm_fault+0x288/0x7a0 [ 1682.995571] __get_user_pages+0x44d/0x11e0 [ 1682.999789] ? follow_page_mask+0x1580/0x1580 [ 1683.004261] ? memset+0x20/0x40 [ 1683.007519] populate_vma_page_range+0x17b/0x210 [ 1683.012257] __mm_populate+0x195/0x2c0 [ 1683.016132] ? populate_vma_page_range+0x210/0x210 [ 1683.021042] SyS_mremap+0xa9d/0xd69 [ 1683.024658] ? move_vma+0x7e0/0x7e0 [ 1683.028264] ? put_timespec64+0xaa/0xf0 [ 1683.032214] ? nsecs_to_jiffies+0x30/0x30 [ 1683.036342] ? SyS_clock_settime+0x1a0/0x1a0 [ 1683.040729] ? do_syscall_64+0x4c/0x640 [ 1683.044690] ? move_vma+0x7e0/0x7e0 [ 1683.048296] do_syscall_64+0x1d5/0x640 [ 1683.052176] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1683.057340] RIP: 0033:0x45ca29 [ 1683.060505] RSP: 002b:00007f9620027c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1683.068191] RAX: ffffffffffffffda RBX: 00000000004f67c0 RCX: 000000000045ca29 [ 1683.075437] RDX: 0000000000800000 RSI: 0000000000002000 RDI: 0000000020a94000 [ 1683.082681] RBP: 000000000078c040 R08: 0000000020130000 R09: 0000000000000000 [ 1683.089927] R10: 0000000000000003 R11: 0000000000000246 R12: 00000000ffffffff [ 1683.097177] R13: 0000000000000766 R14: 00000000004ca402 R15: 00007f96200286d4 [ 1683.140487] Mem-Info: [ 1683.143709] active_anon:230171 inactive_anon:1110040 isolated_anon:0 [ 1683.143709] active_file:25 inactive_file:131 isolated_file:0 [ 1683.143709] unevictable:14602 dirty:16 writeback:0 unstable:0 [ 1683.143709] slab_reclaimable:16144 slab_unreclaimable:114144 [ 1683.143709] mapped:61266 shmem:14712 pagetables:11376 bounce:0 [ 1683.143709] free:28963 free_pcp:31 free_cma:0 [ 1683.192850] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1683.217658] Node 0 active_anon:907848kB inactive_anon:877676kB active_file:512kB inactive_file:792kB unevictable:41056kB isolated(anon):0kB isolated(file):0kB mapped:231336kB dirty:20kB writeback:0kB shmem:47860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 344064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1683.323909] Node 1 active_anon:12736kB inactive_anon:3562484kB active_file:56kB inactive_file:68kB unevictable:21652kB isolated(anon):0kB isolated(file):0kB mapped:19128kB dirty:44kB writeback:0kB shmem:10988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1683.365436] Node 0 DMA free:10404kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1683.406912] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1683.413077] Node 0 DMA32 free:42480kB min:36272kB low:45340kB high:54408kB active_anon:907164kB inactive_anon:873408kB active_file:0kB inactive_file:936kB unevictable:46148kB writepending:28kB present:3129332kB managed:2621260kB mlocked:46116kB kernel_stack:9824kB pagetables:17192kB bounce:0kB free_pcp:548kB local_pcp:116kB free_cma:0kB [ 1683.447670] lowmem_reserve[]: 0 0 0 0 0 [ 1683.451676] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1683.477679] lowmem_reserve[]: 0 0 0 0 0 [ 1683.482097] Node 1 Normal free:54280kB min:53612kB low:67012kB high:80412kB active_anon:12736kB inactive_anon:3562484kB active_file:12kB inactive_file:16kB unevictable:21652kB writepending:44kB present:3932160kB managed:3870192kB mlocked:21652kB kernel_stack:8768kB pagetables:27912kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1683.512418] lowmem_reserve[]: 0 0 0 0 0 [ 1683.516843] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 6*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10404kB [ 1683.534605] Node 0 DMA32: 151*4kB (UME) 242*8kB (UME) 134*16kB (UM) 149*32kB (UM) 131*64kB (UM) 37*128kB (UM) 14*256kB (UM) 5*512kB (UM) 3*1024kB (M) 3*2048kB (UM) 1*4096kB (U) = 42028kB [ 1683.552402] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1683.563913] Node 1 Normal: 161*4kB (UMEH) 612*8kB (UMEH) 1569*16kB (UMEH) 435*32kB (UME) 76*64kB (UME) 21*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 54420kB [ 1683.584820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1683.594343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1683.604289] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1683.613314] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1683.622442] 20509 total pagecache pages [ 1683.627097] 0 pages in swap cache [ 1683.630648] Swap cache stats: add 0, delete 0, find 0/0 [ 1683.636113] Free swap = 0kB [ 1683.640177] Total swap = 0kB [ 1683.643194] 1965979 pages RAM [ 1683.646283] 0 pages HighMem/MovableOnly [ 1683.652103] 339053 pages reserved [ 1683.655740] 0 pages cma reserved [ 1683.660258] Out of memory: Kill process 26035 (syz-executor.4) score 1008 or sacrifice child [ 1683.673084] Killed process 26046 (syz-executor.4) total-vm:74972kB, anon-rss:132kB, file-rss:34816kB, shmem-rss:0kB [ 1683.716702] oom_reaper: reaped process 26046 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1683.747992] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1683.763513] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1683.774317] CPU: 1 PID: 26064 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 1683.782213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1683.791664] Call Trace: [ 1683.794250] dump_stack+0x13e/0x194 [ 1683.797875] dump_header+0x178/0x6d4 [ 1683.801582] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1683.806595] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1683.811694] ? ___ratelimit+0x50/0x519 [ 1683.815579] oom_kill_process.cold+0x10/0xae3 [ 1683.820074] ? lock_downgrade+0x6e0/0x6e0 [ 1683.824218] out_of_memory+0x2d5/0x1110 [ 1683.828191] ? oom_killer_disable+0x1c0/0x1c0 [ 1683.832688] ? mutex_trylock+0x152/0x1a0 [ 1683.836743] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1683.841590] ? warn_alloc+0xf0/0xf0 [ 1683.845210] ? find_held_lock+0x2d/0x110 [ 1683.849264] ? fs_reclaim_acquire+0x10/0x10 [ 1683.853589] __alloc_pages_nodemask+0x5d3/0x700 [ 1683.858262] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1683.863275] ? copy_process.part.0+0x17d5/0x6a50 [ 1683.868025] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1683.873038] ? __lock_acquire+0x5f7/0x4620 [ 1683.877266] ? trace_hardirqs_on+0x10/0x10 [ 1683.881502] copy_process.part.0+0x26a/0x6a50 [ 1683.885996] ? trace_hardirqs_on+0x10/0x10 [ 1683.890227] ? save_trace+0x290/0x290 [ 1683.894022] ? save_trace+0x290/0x290 [ 1683.897823] ? find_held_lock+0x2d/0x110 [ 1683.901887] ? __cleanup_sighand+0x40/0x40 [ 1683.906115] ? lock_downgrade+0x6e0/0x6e0 [ 1683.910266] _do_fork+0x180/0xc80 [ 1683.913718] ? put_timespec64+0xaa/0xf0 [ 1683.917684] ? fork_idle+0x270/0x270 [ 1683.921405] ? SyS_clock_gettime+0xf5/0x180 [ 1683.925725] ? SyS_clock_settime+0x1a0/0x1a0 [ 1683.930123] ? fput+0xb/0x140 [ 1683.933224] ? do_syscall_64+0x4c/0x640 [ 1683.937196] ? sys_vfork+0x20/0x20 [ 1683.940733] do_syscall_64+0x1d5/0x640 [ 1683.944623] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1683.949804] RIP: 0033:0x45ca29 [ 1683.952983] RSP: 002b:00007f9620006c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1683.960685] RAX: ffffffffffffffda RBX: 00000000004dabc0 RCX: 000000000045ca29 [ 1683.967946] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 1683.975208] RBP: 000000000078c0e0 R08: ffffffffffffffff R09: 0000000000000000 [ 1683.982470] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1683.989734] R13: 0000000000000076 R14: 00000000004c331e R15: 00007f96200076d4 [ 1684.006378] Mem-Info: [ 1684.008896] active_anon:230156 inactive_anon:1110039 isolated_anon:0 [ 1684.008896] active_file:9 inactive_file:215 isolated_file:32 [ 1684.008896] unevictable:17260 dirty:0 writeback:0 unstable:0 [ 1684.008896] slab_reclaimable:16144 slab_unreclaimable:113991 [ 1684.008896] mapped:63542 shmem:14712 pagetables:11297 bounce:0 [ 1684.008896] free:26612 free_pcp:0 free_cma:0 [ 1684.054741] Node 0 active_anon:907912kB inactive_anon:877672kB active_file:256kB inactive_file:132kB unevictable:47368kB isolated(anon):0kB isolated(file):0kB mapped:235336kB dirty:0kB writeback:0kB shmem:47860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 333824kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1684.092335] Node 1 active_anon:12712kB inactive_anon:3562484kB active_file:8kB inactive_file:8kB unevictable:21672kB isolated(anon):0kB isolated(file):0kB mapped:19032kB dirty:0kB writeback:0kB shmem:10988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1684.124225] Node 0 DMA free:10404kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1684.161522] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1684.167183] Node 0 DMA32 free:42084kB min:36272kB low:45340kB high:54408kB active_anon:907264kB inactive_anon:873404kB active_file:0kB inactive_file:796kB unevictable:47368kB writepending:0kB present:3129332kB managed:2621260kB mlocked:47368kB kernel_stack:9792kB pagetables:17124kB bounce:0kB free_pcp:588kB local_pcp:232kB free_cma:0kB [ 1684.201622] lowmem_reserve[]: 0 0 0 0 0 [ 1684.205670] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1684.233510] lowmem_reserve[]: 0 0 0 0 0 [ 1684.238365] Node 1 Normal free:54492kB min:53612kB low:67012kB high:80412kB active_anon:12712kB inactive_anon:3562484kB active_file:8kB inactive_file:8kB unevictable:21672kB writepending:0kB present:3932160kB managed:3870192kB mlocked:21672kB kernel_stack:8672kB pagetables:27908kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 18:30:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x2, 0x0, 0x8, 0x0, 0x6, 0x80000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c010000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fddbdf25010000004400018008000300000000000800030001000000140002006d61637674617030000000000000000008000300000000001400020069703667726530000000000000000000040003000400030004000300300001800800030002000000140002007465616d5f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x4044004}, 0x4000085) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x100000000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f00000005c0)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[], 0x81) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@private2={0xfc, 0x2, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xd5, 0x4}) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) 18:30:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000000237eb3ccf807609ebaa57b5cb430500c11c329d7e26f0d330213d72", @ANYRES16=r4, @ANYBLOB], 0x3c}}, 0x4) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0xb4, r4, 0x101, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x3f}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ksm_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:var_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:syslogd_exec_t:s0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40008c0}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x54, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x3b}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, 0xe, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$KVM_NMI(r3, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1684.272512] lowmem_reserve[]: 0 0 0 0 0 [ 1684.276562] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 6*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10404kB [ 1684.298802] Node 0 DMA32: 207*4kB (UME) 400*8kB (UME) 111*16kB (UM) 151*32kB (UM) 131*64kB (UM) 37*128kB (UM) 14*256kB (UM) 5*512kB (UM) 3*1024kB (M) 3*2048kB (UM) 1*4096kB (U) = 43212kB [ 1684.324458] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1684.342786] Node 1 Normal: 163*4kB (UMEH) 612*8kB (UMEH) 1569*16kB (UMEH) 438*32kB (UME) 76*64kB (UME) 21*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 54524kB [ 1684.396362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1684.414777] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1684.424854] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1684.439498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1684.456199] 20218 total pagecache pages [ 1684.463668] 0 pages in swap cache [ 1684.490773] Swap cache stats: add 0, delete 0, find 0/0 [ 1684.515397] Free swap = 0kB [ 1684.522454] Total swap = 0kB [ 1684.527154] 1965979 pages RAM [ 1684.530778] 0 pages HighMem/MovableOnly [ 1684.534883] 339053 pages reserved [ 1684.549459] 0 pages cma reserved [ 1684.553017] Out of memory: Kill process 26035 (syz-executor.4) score 1010 or sacrifice child [ 1684.565395] Killed process 26035 (syz-executor.4) total-vm:75360kB, anon-rss:18720kB, file-rss:55752kB, shmem-rss:0kB [ 1684.584235] oom_reaper: reaped process 26035 (syz-executor.4), now anon-rss:18588kB, file-rss:20928kB, shmem-rss:0kB [ 1684.683378] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1684.704052] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1684.710304] CPU: 0 PID: 6355 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0 [ 1684.718097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1684.727438] Call Trace: [ 1684.730020] dump_stack+0x13e/0x194 [ 1684.733629] dump_header+0x178/0x6d4 [ 1684.737319] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1684.742309] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1684.747382] ? ___ratelimit+0x50/0x519 [ 1684.751247] oom_kill_process.cold+0x10/0xae3 [ 1684.755735] ? lock_downgrade+0x6e0/0x6e0 [ 1684.759943] out_of_memory+0x2d5/0x1110 [ 1684.763891] ? oom_killer_disable+0x1c0/0x1c0 [ 1684.768357] ? mutex_trylock+0x152/0x1a0 [ 1684.772389] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1684.777213] ? warn_alloc+0xf0/0xf0 [ 1684.780923] ? find_held_lock+0x2d/0x110 [ 1684.784955] ? fs_reclaim_acquire+0x10/0x10 [ 1684.789252] __alloc_pages_nodemask+0x5d3/0x700 [ 1684.793892] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1684.798707] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1684.803694] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1684.808716] ? cache_grow_begin+0x32d/0x410 [ 1684.813009] cache_grow_begin+0x7b/0x410 [ 1684.817051] fallback_alloc+0x205/0x2b0 [ 1684.821003] kmem_cache_alloc+0x1ea/0x770 [ 1684.825128] getname_flags+0xc8/0x560 [ 1684.828902] ? save_trace+0x290/0x290 [ 1684.832678] user_path_at_empty+0x2a/0x50 [ 1684.836829] vfs_statx+0xd1/0x160 [ 1684.840256] ? vfs_statx_fd+0x90/0x90 [ 1684.844041] SYSC_newlstat+0x83/0xe0 [ 1684.847747] ? SYSC_newstat+0xe0/0xe0 [ 1684.851521] ? mntput_no_expire+0xee/0x800 [ 1684.855742] ? SyS_umount+0x16b/0x340 [ 1684.859518] ? __detach_mounts+0x2e0/0x2e0 [ 1684.863731] ? __do_page_fault+0x35b/0xb40 [ 1684.867944] ? do_syscall_64+0x4c/0x640 [ 1684.871890] ? SyS_newstat+0x20/0x20 [ 1684.875573] do_syscall_64+0x1d5/0x640 [ 1684.879444] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1684.884604] RIP: 0033:0x45be45 [ 1684.887765] RSP: 002b:00007fff67b57a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1684.895479] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045be45 [ 1684.902722] RDX: 00007fff67b57a40 RSI: 00007fff67b57a40 RDI: 00007fff67b57ad0 [ 1684.909967] RBP: 0000000000000827 R08: 0000000000000000 R09: 0000000000000009 [ 1684.917245] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fff67b58b60 [ 1684.924629] R13: 0000000002a24940 R14: 0000000000000000 R15: 00007fff67b58b60 [ 1684.947209] Mem-Info: [ 1684.950495] active_anon:230127 inactive_anon:1110039 isolated_anon:0 [ 1684.950495] active_file:36 inactive_file:97 isolated_file:0 [ 1684.950495] unevictable:17260 dirty:0 writeback:0 unstable:0 [ 1684.950495] slab_reclaimable:16130 slab_unreclaimable:113666 [ 1684.950495] mapped:63549 shmem:14712 pagetables:11297 bounce:0 [ 1684.950495] free:26985 free_pcp:209 free_cma:0 [ 1684.989042] Node 0 active_anon:907800kB inactive_anon:877672kB active_file:92kB inactive_file:856kB unevictable:47368kB isolated(anon):0kB isolated(file):0kB mapped:235408kB dirty:0kB writeback:0kB shmem:47860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 333824kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1685.113337] Node 1 active_anon:12712kB inactive_anon:3562484kB active_file:8kB inactive_file:8kB unevictable:21672kB isolated(anon):0kB isolated(file):0kB mapped:19032kB dirty:0kB writeback:0kB shmem:10988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1685.150424] Node 0 DMA free:10404kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1685.195216] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1685.200504] Node 0 DMA32 free:43468kB min:36272kB low:45340kB high:54408kB active_anon:907152kB inactive_anon:873404kB active_file:0kB inactive_file:372kB unevictable:47368kB writepending:0kB present:3129332kB managed:2621260kB mlocked:47368kB kernel_stack:9760kB pagetables:17124kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 1685.234252] lowmem_reserve[]: 0 0 0 0 0 [ 1685.260431] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1685.296442] lowmem_reserve[]: 0 0 0 0 0 [ 1685.301524] Node 1 Normal free:54756kB min:53612kB low:67012kB high:80412kB active_anon:12712kB inactive_anon:3562484kB active_file:8kB inactive_file:8kB unevictable:21672kB writepending:0kB present:3932160kB managed:3870192kB mlocked:21672kB kernel_stack:8608kB pagetables:27908kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1685.384229] lowmem_reserve[]: 0 0 0 0 0 [ 1685.404385] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 6*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10404kB [ 1685.434778] Node 0 DMA32: 119*4kB (UME) 333*8kB (UME) 161*16kB (UM) 151*32kB (UM) 131*64kB (UM) 37*128kB (UM) 14*256kB (UM) 5*512kB (UM) 3*1024kB (M) 3*2048kB (UM) 1*4096kB (U) = 43124kB [ 1685.456361] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1685.477362] Node 1 Normal: 163*4kB (UMEH) 623*8kB (UMEH) 1572*16kB (UMEH) 441*32kB (UME) 76*64kB (UME) 21*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 54756kB [ 1685.498365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1685.524842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1685.540502] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1685.556791] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1685.566235] 20286 total pagecache pages [ 1685.572587] 0 pages in swap cache [ 1685.576536] Swap cache stats: add 0, delete 0, find 0/0 [ 1685.582497] Free swap = 0kB [ 1685.586049] Total swap = 0kB [ 1685.592121] 1965979 pages RAM [ 1685.601596] 0 pages HighMem/MovableOnly [ 1685.606447] 339053 pages reserved [ 1685.610799] 0 pages cma reserved [ 1685.624192] Out of memory: Kill process 11113 (syz-executor.3) score 1007 or sacrifice child [ 1685.633090] Killed process 11113 (syz-executor.3) total-vm:74972kB, anon-rss:18260kB, file-rss:34624kB, shmem-rss:0kB [ 1685.712554] oom_reaper: reaped process 11113 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 18:30:23 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x14024, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f0000000340)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000100001080000000000000000000000012659f22d3d0bf3f0a2d452c8b277c3f5aa09b894793d7d4c71c613fc4795a875e60d4047d55e54b883bdca3705f8405821ffe56170bb46fe2029854242a784df3b0eb8adb87ed68b8cc2500000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000050021000600000008002e0004000000"], 0x30}}, 0x0) 18:30:23 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x14024, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f0000000340)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000100001080000000000000000000000012659f22d3d0bf3f0a2d452c8b277c3f5aa09b894793d7d4c71c613fc4795a875e60d4047d55e54b883bdca3705f8405821ffe56170bb46fe2029854242a784df3b0eb8adb87ed68b8cc2500000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000050021000600000008002e0004000000"], 0x30}}, 0x0) 18:30:23 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800000000000000000000000054895399635e4ebc35fcaa70ce636c88c5bbbdd94b6cf0cda953afe84eacae5a55406f8c16adc4b5ecf28cc98378aeee8d0b8569731a6adc5d219d141a906dcf555804f501c3c3dc23d57c0fe00a703a1ecf641490e00000000000000000000000210657f50bfeb80f6685f477060000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000400)=""/112, 0x70) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000080000cab39af59eae21a216bb90000000008001d0002"], 0x30}}, 0x0) 18:30:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x23, 0x0, {}, {0xee01}, 0x7241969d, 0xb4}) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, 0x0, 0x27, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10005e63ef541228ad210f00000008002c0002ca00000500380000d60000002385ccb6a772258ecf1ea964bdffb6d46ad7352443198b7901103dc2"], 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x810) setresuid(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x5, {}, {}, 0x5, 0x8}) socket(0x0, 0x0, 0x1f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') [ 1686.072360] audit: type=1804 audit(1589913023.601:104): pid=26071 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir496129532/syzkaller.5Wu810/524/bus" dev="sda1" ino=16239 res=1 [ 1686.242470] overlayfs: filesystem on './file0' not supported as upperdir [ 1686.268520] audit: type=1804 audit(1589913023.741:105): pid=26090 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir496129532/syzkaller.5Wu810/524/bus" dev="sda1" ino=16239 res=1 18:30:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x23, 0x0, {}, {0xee01}, 0x7241969d, 0xb4}) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, 0x0, 0x27, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10005e63ef541228ad210f00000008002c0002ca00000500380000d60000002385ccb6a772258ecf1ea964bdffb6d46ad7352443198b7901103dc2"], 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x810) setresuid(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x5, {}, {}, 0x5, 0x8}) socket(0x0, 0x0, 0x1f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') [ 1686.517522] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1686.550659] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1686.555831] CPU: 0 PID: 26097 Comm: systemd-udevd Not tainted 4.14.180-syzkaller #0 [ 1686.563621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1686.572967] Call Trace: [ 1686.575550] dump_stack+0x13e/0x194 [ 1686.579178] dump_header+0x178/0x6d4 [ 1686.582883] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1686.587885] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1686.592961] ? ___ratelimit+0x50/0x519 [ 1686.596825] oom_kill_process.cold+0x10/0xae3 [ 1686.601296] ? lock_downgrade+0x6e0/0x6e0 [ 1686.605430] out_of_memory+0x2d5/0x1110 [ 1686.609386] ? oom_killer_disable+0x1c0/0x1c0 [ 1686.613853] ? mutex_trylock+0x152/0x1a0 [ 1686.617894] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1686.622739] ? warn_alloc+0xf0/0xf0 [ 1686.626340] ? find_held_lock+0x2d/0x110 [ 1686.630374] ? fs_reclaim_acquire+0x10/0x10 [ 1686.634712] __alloc_pages_nodemask+0x5d3/0x700 [ 1686.639354] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1686.644170] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1686.649158] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1686.654149] ? cache_grow_begin+0x32d/0x410 [ 1686.658457] cache_grow_begin+0x7b/0x410 [ 1686.662502] fallback_alloc+0x205/0x2b0 [ 1686.666454] kmem_cache_alloc+0x1ea/0x770 [ 1686.670577] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1686.676046] getname_flags+0xc8/0x560 [ 1686.679822] do_sys_open+0x1c4/0x3f0 [ 1686.683511] ? filp_open+0x60/0x60 [ 1686.687027] ? do_syscall_64+0x4c/0x640 [ 1686.690975] ? do_sys_open+0x3f0/0x3f0 [ 1686.694837] do_syscall_64+0x1d5/0x640 [ 1686.698703] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1686.703866] RIP: 0033:0x7f62e0d316f0 [ 1686.707549] RSP: 002b:00007ffcacb19b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1686.715229] RAX: ffffffffffffffda RBX: 000055a50e1250a0 RCX: 00007f62e0d316f0 [ 1686.722472] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007ffcacb19d00 [ 1686.729714] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 1686.736956] R10: 0000000000080000 R11: 0000000000000246 R12: 000055a50d52c68a [ 1686.744200] R13: 0000000000000001 R14: 00007ffcacb19d00 R15: 00007ffcacb19d60 [ 1686.757907] Mem-Info: [ 1686.760503] active_anon:230132 inactive_anon:1105988 isolated_anon:0 [ 1686.760503] active_file:31 inactive_file:41 isolated_file:1 [ 1686.760503] unevictable:22417 dirty:6 writeback:11 unstable:0 [ 1686.760503] slab_reclaimable:16129 slab_unreclaimable:114939 [ 1686.760503] mapped:62282 shmem:14712 pagetables:11237 bounce:0 [ 1686.760503] free:24894 free_pcp:36 free_cma:0 [ 1686.794768] Node 0 active_anon:907924kB inactive_anon:861472kB active_file:88kB inactive_file:156kB unevictable:75912kB isolated(anon):0kB isolated(file):0kB mapped:240044kB dirty:8kB writeback:32kB shmem:47860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 317440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1686.823191] Node 1 active_anon:12604kB inactive_anon:3562480kB active_file:40kB inactive_file:4kB unevictable:13756kB isolated(anon):0kB isolated(file):4kB mapped:9084kB dirty:16kB writeback:12kB shmem:10988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1686.850979] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1686.878174] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1686.883305] Node 0 DMA32 free:36312kB min:36272kB low:45340kB high:54408kB active_anon:907268kB inactive_anon:857204kB active_file:0kB inactive_file:384kB unevictable:75740kB writepending:440kB present:3129332kB managed:2621260kB mlocked:75740kB kernel_stack:9728kB pagetables:16964kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1686.913751] lowmem_reserve[]: 0 0 0 0 0 [ 1686.917807] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1686.943274] lowmem_reserve[]: 0 0 0 0 0 [ 1686.947865] Node 1 Normal free:53120kB min:53612kB low:67012kB high:80412kB active_anon:12600kB inactive_anon:3562480kB active_file:4kB inactive_file:8kB unevictable:13844kB writepending:0kB present:3932160kB managed:3870192kB mlocked:13844kB kernel_stack:8736kB pagetables:27760kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1686.977491] lowmem_reserve[]: 0 0 0 0 0 [ 1686.981450] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1686.997239] Node 0 DMA32: 442*4kB (UME) 530*8kB (UME) 135*16kB (UM) 9*32kB (UM) 66*64kB (U) 5*128kB (U) 5*256kB (UM) 2*512kB (UM) 0*1024kB 2*2048kB (UM) 4*4096kB (UM) = 36104kB [ 1687.013229] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1687.023973] Node 1 Normal: 170*4kB (UMH) 1495*8kB (UMH) 1432*16kB (UMH) 419*32kB (UM) 65*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53120kB [ 1687.040605] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1687.049475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1687.058080] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1687.067015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1687.075574] 18893 total pagecache pages [ 1687.079579] 0 pages in swap cache [ 1687.083015] Swap cache stats: add 0, delete 0, find 0/0 [ 1687.088405] Free swap = 0kB [ 1687.091407] Total swap = 0kB [ 1687.094408] 1965979 pages RAM [ 1687.097541] 0 pages HighMem/MovableOnly [ 1687.101499] 339053 pages reserved [ 1687.104931] 0 pages cma reserved [ 1687.108322] Out of memory: Kill process 26076 (syz-executor.4) score 1008 or sacrifice child [ 1687.116947] Killed process 26076 (syz-executor.4) total-vm:74972kB, anon-rss:18008kB, file-rss:41420kB, shmem-rss:0kB [ 1687.156206] oom_reaper: reaped process 26076 (syz-executor.4), now anon-rss:18020kB, file-rss:8432kB, shmem-rss:0kB [ 1687.187309] systemd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1687.220384] systemd cpuset=/ mems_allowed=0-1 [ 1687.225522] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.180-syzkaller #0 [ 1687.232436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1687.241776] Call Trace: [ 1687.244356] dump_stack+0x13e/0x194 [ 1687.247981] dump_header+0x178/0x6d4 [ 1687.251681] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1687.256693] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1687.261783] ? ___ratelimit+0x50/0x519 [ 1687.265722] oom_kill_process.cold+0x10/0xae3 [ 1687.270204] ? lock_downgrade+0x6e0/0x6e0 [ 1687.274370] out_of_memory+0x2d5/0x1110 [ 1687.278342] ? oom_killer_disable+0x1c0/0x1c0 [ 1687.282825] ? mutex_trylock+0x152/0x1a0 [ 1687.286877] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1687.291724] ? warn_alloc+0xf0/0xf0 [ 1687.295348] __alloc_pages_nodemask+0x5d3/0x700 [ 1687.300022] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1687.304852] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1687.309859] ? mark_held_locks+0xa6/0xf0 [ 1687.313908] ? cache_grow_begin+0x32d/0x410 [ 1687.318223] cache_grow_begin+0x7b/0x410 [ 1687.322275] fallback_alloc+0x205/0x2b0 [ 1687.326245] kmem_cache_alloc_trace+0x20f/0x7b0 [ 1687.330907] ? seq_printf+0xa2/0xc0 [ 1687.334562] cgroup_show_path+0xc4/0x540 [ 1687.338623] ? kill_css+0x2d0/0x2d0 [ 1687.342253] kernfs_sop_show_path+0x12b/0x1a0 [ 1687.346750] show_mountinfo+0x225/0x860 [ 1687.350725] ? kernfs_test_super+0x110/0x110 [ 1687.355128] ? seq_list_next+0x5b/0x80 [ 1687.359010] ? show_vfsmnt+0x3a0/0x3a0 [ 1687.362896] seq_read+0xaa7/0x1160 [ 1687.366436] ? seq_lseek+0x3d0/0x3d0 [ 1687.370147] ? cp_new_stat+0x47e/0x580 [ 1687.374034] __vfs_read+0xe4/0x610 [ 1687.377566] ? seq_lseek+0x3d0/0x3d0 [ 1687.381278] ? vfs_copy_file_range+0x9a0/0x9a0 [ 1687.385854] ? __inode_security_revalidate+0xcf/0x120 [ 1687.391038] ? avc_policy_seqno+0x5/0x10 [ 1687.395088] ? selinux_file_permission+0x7a/0x440 [ 1687.399928] ? security_file_permission+0x82/0x1e0 [ 1687.404867] ? rw_verify_area+0xe1/0x2a0 [ 1687.409011] vfs_read+0x131/0x330 [ 1687.412471] SyS_read+0xf2/0x210 [ 1687.415829] ? kernel_write+0x110/0x110 [ 1687.419800] ? do_syscall_64+0x4c/0x640 [ 1687.423768] ? kernel_write+0x110/0x110 [ 1687.427736] do_syscall_64+0x1d5/0x640 [ 1687.431625] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1687.436800] RIP: 0033:0x7f82eca5d92d [ 1687.440496] RSP: 002b:00007fff36edefe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 1687.448193] RAX: ffffffffffffffda RBX: 000055afb53734a0 RCX: 00007f82eca5d92d [ 1687.455450] RDX: 0000000000000400 RSI: 000055afb53fc500 RDI: 0000000000000013 [ 1687.462712] RBP: 0000000000000d68 R08: 00007f82ee493500 R09: 00000000000000e0 [ 1687.469972] R10: 000055afb53fc8bc R11: 0000000000000293 R12: 00007f82ecd18440 [ 1687.477231] R13: 00007f82ecd17900 R14: 0000000000000044 R15: 0000000000000000 [ 1687.642453] Mem-Info: [ 1687.644996] active_anon:230115 inactive_anon:1105989 isolated_anon:0 [ 1687.644996] active_file:77 inactive_file:47 isolated_file:0 [ 1687.644996] unevictable:22240 dirty:0 writeback:0 unstable:0 [ 1687.644996] slab_reclaimable:16129 slab_unreclaimable:114543 [ 1687.644996] mapped:64766 shmem:14712 pagetables:11298 bounce:0 [ 1687.644996] free:25052 free_pcp:17 free_cma:0 [ 1687.685905] Node 0 active_anon:907860kB inactive_anon:861476kB active_file:176kB inactive_file:164kB unevictable:74716kB isolated(anon):0kB isolated(file):0kB mapped:245236kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 317440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1687.758992] Node 1 active_anon:12600kB inactive_anon:3562480kB active_file:104kB inactive_file:0kB unevictable:14244kB isolated(anon):0kB isolated(file):0kB mapped:13928kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1687.796389] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1687.832828] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1687.840661] Node 0 DMA32 free:36144kB min:36272kB low:45340kB high:54408kB active_anon:907212kB inactive_anon:857208kB active_file:332kB inactive_file:316kB unevictable:75180kB writepending:0kB present:3129332kB managed:2621260kB mlocked:75180kB kernel_stack:9792kB pagetables:17276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1687.880080] lowmem_reserve[]: 0 0 0 0 0 [ 1687.884273] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1687.932969] lowmem_reserve[]: 0 0 0 0 0 [ 1687.953462] Node 1 Normal free:53356kB min:53612kB low:67012kB high:80412kB active_anon:12628kB inactive_anon:3562484kB active_file:4kB inactive_file:512kB unevictable:14364kB writepending:0kB present:3932160kB managed:3870192kB mlocked:14364kB kernel_stack:8672kB pagetables:27776kB bounce:0kB free_pcp:80kB local_pcp:80kB free_cma:0kB [ 1688.011087] lowmem_reserve[]: 0 0 0 0 0 [ 1688.015183] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1688.035681] Node 0 DMA32: 394*4kB (UME) 518*8kB (UME) 146*16kB (UM) 14*32kB (UM) 80*64kB (UM) 24*128kB (UM) 8*256kB (UM) 2*512kB (UM) 0*1024kB 2*2048kB (UM) 3*4096kB (UM) = 36152kB [ 1688.056491] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1688.071700] Node 1 Normal: 206*4kB (UMH) 1360*8kB (UMH) 1534*16kB (UMH) 421*32kB (UM) 65*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53880kB [ 1688.086255] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1688.101267] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1688.109875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1688.128010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1688.136573] 21756 total pagecache pages [ 1688.149887] 0 pages in swap cache [ 1688.153333] Swap cache stats: add 0, delete 0, find 0/0 [ 1688.163357] Free swap = 0kB [ 1688.166361] Total swap = 0kB [ 1688.174176] 1965979 pages RAM [ 1688.182015] 0 pages HighMem/MovableOnly [ 1688.185977] 339053 pages reserved [ 1688.194099] 0 pages cma reserved [ 1688.202019] Out of memory: Kill process 26070 (syz-executor.5) score 1007 or sacrifice child [ 1688.216012] Killed process 26100 (syz-executor.5) total-vm:74972kB, anon-rss:18024kB, file-rss:35008kB, shmem-rss:0kB [ 1688.316611] oom_reaper: reaped process 26100 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1688.352429] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1688.405286] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1688.424625] CPU: 1 PID: 6330 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1688.432076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1688.441433] Call Trace: [ 1688.444012] dump_stack+0x13e/0x194 [ 1688.447634] dump_header+0x178/0x6d4 [ 1688.451334] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1688.456339] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1688.461431] ? ___ratelimit+0x50/0x519 [ 1688.465309] oom_kill_process.cold+0x10/0xae3 [ 1688.469794] ? lock_downgrade+0x6e0/0x6e0 [ 1688.473931] out_of_memory+0x2d5/0x1110 [ 1688.477900] ? oom_killer_disable+0x1c0/0x1c0 [ 1688.482491] ? mutex_trylock+0x152/0x1a0 [ 1688.486545] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1688.491391] ? warn_alloc+0xf0/0xf0 [ 1688.495015] __alloc_pages_nodemask+0x5d3/0x700 [ 1688.499674] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1688.504679] ? lock_downgrade+0x6e0/0x6e0 [ 1688.508822] alloc_pages_current+0xe7/0x1e0 [ 1688.513131] __page_cache_alloc+0x245/0x3d0 [ 1688.517444] filemap_fault+0xc18/0x1c50 [ 1688.521414] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1688.526062] ? lock_acquire+0x170/0x3f0 [ 1688.530020] ? ext4_filemap_fault+0x7c/0xb0 [ 1688.534335] ext4_filemap_fault+0x84/0xb0 [ 1688.538472] __do_fault+0xfa/0x380 [ 1688.542003] __handle_mm_fault+0x22e9/0x3280 [ 1688.546401] ? copy_page_range+0x1d70/0x1d70 [ 1688.550796] ? find_held_lock+0x2d/0x110 [ 1688.554855] handle_mm_fault+0x288/0x7a0 [ 1688.558908] __do_page_fault+0x4bc/0xb40 [ 1688.562959] ? vmalloc_fault+0xdf0/0xdf0 [ 1688.567009] ? do_page_fault+0x60/0x4f2 [ 1688.570974] ? page_fault+0x2f/0x50 [ 1688.574586] page_fault+0x45/0x50 [ 1688.578025] RIP: 00f8:0xf8 [ 1688.580855] RSP: 0550:000000c446557700 EFLAGS: 00000000 [ 1688.593112] Mem-Info: [ 1688.605751] active_anon:230121 inactive_anon:1105988 isolated_anon:0 [ 1688.605751] active_file:27 inactive_file:0 isolated_file:0 [ 1688.605751] unevictable:22776 dirty:0 writeback:0 unstable:0 [ 1688.605751] slab_reclaimable:16121 slab_unreclaimable:114534 [ 1688.605751] mapped:65233 shmem:14712 pagetables:11273 bounce:0 [ 1688.605751] free:24980 free_pcp:38 free_cma:0 [ 1688.651642] Node 0 active_anon:907868kB inactive_anon:861472kB active_file:44kB inactive_file:20kB unevictable:75944kB isolated(anon):0kB isolated(file):0kB mapped:246228kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 321536kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1688.692714] Node 1 active_anon:12616kB inactive_anon:3562480kB active_file:0kB inactive_file:12kB unevictable:15160kB isolated(anon):0kB isolated(file):0kB mapped:14704kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1688.732469] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1688.771302] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1688.776347] Node 0 DMA32 free:36216kB min:36272kB low:45340kB high:54408kB active_anon:907220kB inactive_anon:857204kB active_file:64kB inactive_file:0kB unevictable:75944kB writepending:0kB present:3129332kB managed:2621260kB mlocked:75944kB kernel_stack:9760kB pagetables:17164kB bounce:0kB free_pcp:148kB local_pcp:0kB free_cma:0kB [ 1688.815436] lowmem_reserve[]: 0 0 0 0 0 [ 1688.819478] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1688.854406] lowmem_reserve[]: 0 0 0 0 0 [ 1688.858462] Node 1 Normal free:53268kB min:53612kB low:67012kB high:80412kB active_anon:12616kB inactive_anon:3562480kB active_file:0kB inactive_file:0kB unevictable:14960kB writepending:0kB present:3932160kB managed:3870192kB mlocked:14940kB kernel_stack:8672kB pagetables:27772kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1688.902932] lowmem_reserve[]: 0 0 0 0 0 [ 1688.911692] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1688.993772] Node 0 DMA32: 434*4kB (UME) 521*8kB (UME) 147*16kB (UM) 19*32kB (UM) 79*64kB (UM) 24*128kB (UM) 8*256kB (UM) 2*512kB (UM) 0*1024kB 2*2048kB (UM) 3*4096kB (UM) = 36448kB [ 1689.053379] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1689.080274] Node 1 Normal: 128*4kB (UMH) 1340*8kB (UMH) 1534*16kB (UMH) 424*32kB (UM) 65*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53504kB [ 1689.108513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1689.131044] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1689.154459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1689.186703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1689.201283] 21364 total pagecache pages [ 1689.205380] 0 pages in swap cache [ 1689.218539] Swap cache stats: add 0, delete 0, find 0/0 [ 1689.227893] Free swap = 0kB [ 1689.230903] Total swap = 0kB [ 1689.233921] 1965979 pages RAM [ 1689.247191] 0 pages HighMem/MovableOnly [ 1689.251178] 339053 pages reserved [ 1689.254616] 0 pages cma reserved [ 1689.291812] Out of memory: Kill process 26070 (syz-executor.5) score 1009 or sacrifice child 18:30:26 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmctl$IPC_RMID(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) syz_extract_tcp_res(&(0x7f0000000380), 0xffff, 0x1) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x40) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) 18:30:26 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x14024, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f0000000340)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000100001080000000000000000000000012659f22d3d0bf3f0a2d452c8b277c3f5aa09b894793d7d4c71c613fc4795a875e60d4047d55e54b883bdca3705f8405821ffe56170bb46fe2029854242a784df3b0eb8adb87ed68b8cc2500000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000050021000600000008002e0004000000"], 0x30}}, 0x0) 18:30:27 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x14024, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f0000000340)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000100001080000000000000000000000012659f22d3d0bf3f0a2d452c8b277c3f5aa09b894793d7d4c71c613fc4795a875e60d4047d55e54b883bdca3705f8405821ffe56170bb46fe2029854242a784df3b0eb8adb87ed68b8cc2500000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000050021000600000008002e0004000000"], 0x30}}, 0x0) 18:30:27 executing program 1: mlockall(0x1) select(0x40, &(0x7f0000000000)={0x76d, 0x4, 0x9, 0x101, 0x4, 0x0, 0x2, 0xfff}, &(0x7f0000000040)={0x8, 0xff, 0x80, 0x5, 0x6, 0x20, 0x3, 0x20}, &(0x7f00000000c0)={0x4, 0x5, 0x4, 0x7d, 0x2, 0xffffffff, 0x3, 0x1}, &(0x7f0000000100)={0x0, 0x2710}) mremap(&(0x7f00009e4000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) munmap(&(0x7f0000a3b000/0x4000)=nil, 0x4000) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000140)={0x0, @reserved}) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x2, 0x0) r3 = socket(0x10, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x4, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x7bf9, 0x5, 0x7fffffff, 0x800, 0x4d, 0x8, 0x2b6, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000002c0)={r4, 0x74, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x2000009, @private0={0xfc, 0x0, [], 0xfd}, 0x20}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0xae, @private0={0xfc, 0x0, [], 0x1}, 0x2}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e22, 0x80000001, @mcast2, 0x20000000}]}, &(0x7f0000000300)=0x10) [ 1689.825468] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1689.859442] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1689.864741] CPU: 0 PID: 26112 Comm: systemd-udevd Not tainted 4.14.180-syzkaller #0 [ 1689.872521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1689.881851] Call Trace: [ 1689.884419] dump_stack+0x13e/0x194 [ 1689.888038] dump_header+0x178/0x6d4 [ 1689.891741] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1689.896731] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1689.901812] ? ___ratelimit+0x50/0x519 [ 1689.905687] oom_kill_process.cold+0x10/0xae3 [ 1689.910162] ? lock_downgrade+0x6e0/0x6e0 [ 1689.914288] out_of_memory+0x2d5/0x1110 [ 1689.918244] ? oom_killer_disable+0x1c0/0x1c0 [ 1689.922716] ? mutex_trylock+0x152/0x1a0 [ 1689.926752] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1689.931577] ? warn_alloc+0xf0/0xf0 [ 1689.935177] ? find_held_lock+0x2d/0x110 [ 1689.939213] ? fs_reclaim_acquire+0x10/0x10 [ 1689.943516] __alloc_pages_nodemask+0x5d3/0x700 [ 1689.948160] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1689.952979] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1689.957977] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1689.962979] ? cache_grow_begin+0x32d/0x410 [ 1689.967275] cache_grow_begin+0x7b/0x410 [ 1689.971312] fallback_alloc+0x205/0x2b0 [ 1689.975263] kmem_cache_alloc+0x1ea/0x770 [ 1689.979403] ? copy_page_range+0x1d70/0x1d70 [ 1689.983789] getname_flags+0xc8/0x560 [ 1689.987565] user_path_at_empty+0x2a/0x50 [ 1689.991688] path_setxattr+0x84/0x130 [ 1689.995461] ? setxattr+0x300/0x300 [ 1689.999077] SyS_lsetxattr+0x33/0x40 [ 1690.002763] ? SyS_setxattr+0x50/0x50 [ 1690.006537] do_syscall_64+0x1d5/0x640 [ 1690.010401] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1690.015564] RIP: 0033:0x7f62e0d3d61a [ 1690.019249] RSP: 002b:00007ffcacb18d78 EFLAGS: 00000206 ORIG_RAX: 00000000000000bd [ 1690.027062] RAX: ffffffffffffffda RBX: 000055a50e1132f0 RCX: 00007f62e0d3d61a [ 1690.034307] RDX: 000055a50e1132f0 RSI: 00007f62e1438262 RDI: 00007ffcacb19930 [ 1690.041568] RBP: 000055a50e062030 R08: 0000000000000000 R09: 0000000000000030 [ 1690.048813] R10: 000000000000001e R11: 0000000000000206 R12: 00007ffcacb19930 [ 1690.056057] R13: 0000000000000000 R14: 00007ffcacb19350 R15: 00007ffcacb1993f [ 1690.079062] Mem-Info: [ 1690.092116] active_anon:230449 inactive_anon:1105988 isolated_anon:0 [ 1690.092116] active_file:170 inactive_file:189 isolated_file:17 [ 1690.092116] unevictable:20374 dirty:0 writeback:0 unstable:0 [ 1690.092116] slab_reclaimable:16122 slab_unreclaimable:115543 [ 1690.092116] mapped:62619 shmem:14712 pagetables:11342 bounce:0 [ 1690.092116] free:25353 free_pcp:0 free_cma:0 [ 1690.162666] Node 0 active_anon:908972kB inactive_anon:861472kB active_file:64kB inactive_file:372kB unevictable:64244kB isolated(anon):0kB isolated(file):0kB mapped:239888kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 319488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1690.194747] Node 1 active_anon:12824kB inactive_anon:3562480kB active_file:80kB inactive_file:16kB unevictable:17252kB isolated(anon):0kB isolated(file):68kB mapped:9588kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1690.242231] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1690.275076] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1690.280189] Node 0 DMA32 free:35952kB min:36272kB low:45340kB high:54408kB active_anon:908324kB inactive_anon:857204kB active_file:80kB inactive_file:60kB unevictable:67012kB writepending:0kB present:3129332kB managed:2621260kB mlocked:67012kB kernel_stack:9920kB pagetables:17360kB bounce:0kB free_pcp:280kB local_pcp:160kB free_cma:0kB [ 1690.317423] lowmem_reserve[]: 0 0 0 0 0 [ 1690.321419] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1690.353840] lowmem_reserve[]: 0 0 0 0 0 [ 1690.357866] Node 1 Normal free:53368kB min:53612kB low:67012kB high:80412kB active_anon:12824kB inactive_anon:3562480kB active_file:24kB inactive_file:16kB unevictable:18252kB writepending:0kB present:3932160kB managed:3870192kB mlocked:18252kB kernel_stack:8640kB pagetables:27856kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1690.394072] lowmem_reserve[]: 0 0 0 0 0 [ 1690.398121] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1690.420541] Node 0 DMA32: 404*4kB (UME) 33*8kB (UME) 6*16kB (UM) 5*32kB (U) 69*64kB (UM) 40*128kB (UM) 16*256kB (UM) 3*512kB (UM) 0*1024kB 1*2048kB (U) 4*4096kB (UM) = 35736kB [ 1690.438569] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1690.460760] Node 1 Normal: 30*4kB (UMH) 928*8kB (UMH) 1563*16kB (UMH) 523*32kB (UMH) 68*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53640kB [ 1690.484410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1690.511484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1690.537432] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1690.546438] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1690.569258] 18951 total pagecache pages [ 1690.573236] 0 pages in swap cache [ 1690.583267] Swap cache stats: add 0, delete 0, find 0/0 [ 1690.593419] Free swap = 0kB [ 1690.596428] Total swap = 0kB [ 1690.605944] 1965979 pages RAM [ 1690.614145] 0 pages HighMem/MovableOnly [ 1690.623187] 339053 pages reserved [ 1690.636453] 0 pages cma reserved [ 1690.644614] Out of memory: Kill process 26104 (syz-executor.5) score 1007 or sacrifice child [ 1690.663010] Killed process 26104 (syz-executor.5) total-vm:74840kB, anon-rss:16584kB, file-rss:39344kB, shmem-rss:0kB [ 1690.731440] oom_reaper: reaped process 26104 (syz-executor.5), now anon-rss:16780kB, file-rss:5360kB, shmem-rss:0kB [ 1690.783048] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1690.810990] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1690.816067] CPU: 0 PID: 6331 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1690.823500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1690.832829] Call Trace: [ 1690.835395] dump_stack+0x13e/0x194 [ 1690.839000] dump_header+0x178/0x6d4 [ 1690.842688] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1690.847678] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1690.852755] ? ___ratelimit+0x50/0x519 [ 1690.856624] oom_kill_process.cold+0x10/0xae3 [ 1690.861125] ? lock_downgrade+0x6e0/0x6e0 [ 1690.865283] out_of_memory+0x2d5/0x1110 [ 1690.869242] ? oom_killer_disable+0x1c0/0x1c0 [ 1690.873715] ? mutex_trylock+0x152/0x1a0 [ 1690.877753] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1690.882580] ? warn_alloc+0xf0/0xf0 [ 1690.886187] __alloc_pages_nodemask+0x5d3/0x700 [ 1690.890831] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1690.895822] ? lock_downgrade+0x6e0/0x6e0 [ 1690.899951] alloc_pages_current+0xe7/0x1e0 [ 1690.904250] __page_cache_alloc+0x245/0x3d0 [ 1690.908549] filemap_fault+0xc18/0x1c50 [ 1690.912508] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1690.917154] ? lock_acquire+0x170/0x3f0 [ 1690.921107] ? ext4_filemap_fault+0x7c/0xb0 [ 1690.925409] ext4_filemap_fault+0x84/0xb0 [ 1690.929532] __do_fault+0xfa/0x380 [ 1690.933046] __handle_mm_fault+0x22e9/0x3280 [ 1690.937439] ? copy_page_range+0x1d70/0x1d70 [ 1690.941822] ? find_held_lock+0x2d/0x110 [ 1690.945875] handle_mm_fault+0x288/0x7a0 [ 1690.949912] __do_page_fault+0x4bc/0xb40 [ 1690.953949] ? vmalloc_fault+0xdf0/0xdf0 [ 1690.957986] ? do_page_fault+0x60/0x4f2 [ 1690.961934] ? page_fault+0x2f/0x50 [ 1690.965533] page_fault+0x45/0x50 [ 1690.968958] RIP: 00f1:0x11 [ 1690.971792] RSP: 458b10:000000c4465528c0 EFLAGS: 00000000 [ 1690.977596] Mem-Info: [ 1690.985792] active_anon:230449 inactive_anon:1110177 isolated_anon:0 [ 1690.985792] active_file:35 inactive_file:226 isolated_file:54 [ 1690.985792] unevictable:16549 dirty:0 writeback:0 unstable:0 [ 1690.985792] slab_reclaimable:16122 slab_unreclaimable:115245 [ 1690.985792] mapped:61326 shmem:14712 pagetables:11344 bounce:0 [ 1690.985792] free:25379 free_pcp:186 free_cma:0 [ 1691.025384] Node 0 active_anon:908972kB inactive_anon:863652kB active_file:120kB inactive_file:152kB unevictable:53828kB isolated(anon):0kB isolated(file):128kB mapped:235956kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 317440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1691.058518] Node 1 active_anon:12824kB inactive_anon:3562500kB active_file:20kB inactive_file:20kB unevictable:12368kB isolated(anon):0kB isolated(file):0kB mapped:9548kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1691.092042] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1691.132836] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1691.141632] Node 0 DMA32 free:44856kB min:36272kB low:45340kB high:54408kB active_anon:908308kB inactive_anon:857204kB active_file:44kB inactive_file:3000kB unevictable:54836kB writepending:8kB present:3129332kB managed:2621260kB mlocked:54836kB kernel_stack:9856kB pagetables:17244kB bounce:0kB free_pcp:176kB local_pcp:56kB free_cma:0kB [ 1691.171902] lowmem_reserve[]: 0 0 0 0 0 [ 1691.176944] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1691.261945] lowmem_reserve[]: 0 0 0 0 0 [ 1691.276736] Node 1 Normal free:53496kB min:53612kB low:67012kB high:80412kB active_anon:12824kB inactive_anon:3562480kB active_file:0kB inactive_file:4kB unevictable:17912kB writepending:0kB present:3932160kB managed:3870192kB mlocked:17912kB kernel_stack:8640kB pagetables:27844kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1691.323257] lowmem_reserve[]: 0 0 0 0 0 [ 1691.327430] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1691.352525] Node 0 DMA32: 490*4kB (UME) 130*8kB (UME) 27*16kB (UM) 6*32kB (UM) 34*64kB (UM) 38*128kB (UM) 16*256kB (UM) 3*512kB (UM) 0*1024kB 2*2048kB (UM) 4*4096kB (UM) = 36776kB [ 1691.368901] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1691.379752] Node 1 Normal: 148*4kB (UMH) 862*8kB (UMH) 1517*16kB (UMH) 547*32kB (UMH) 70*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53744kB [ 1691.394554] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1691.403906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1691.412679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1691.421597] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1691.430287] 18678 total pagecache pages [ 1691.434316] 0 pages in swap cache [ 1691.437895] Swap cache stats: add 0, delete 0, find 0/0 [ 1691.443331] Free swap = 0kB [ 1691.446383] Total swap = 0kB [ 1691.449470] 1965979 pages RAM [ 1691.452605] 0 pages HighMem/MovableOnly [ 1691.456697] 339053 pages reserved [ 1691.460186] 0 pages cma reserved [ 1691.463608] Out of memory: Kill process 11127 (syz-executor.3) score 1007 or sacrifice child [ 1691.478385] Killed process 11127 (syz-executor.3) total-vm:74972kB, anon-rss:18260kB, file-rss:34624kB, shmem-rss:0kB [ 1691.539649] oom_reaper: reaped process 11127 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1691.784422] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1691.832705] systemd-journal cpuset=/ mems_allowed=0-1 [ 1691.851124] CPU: 1 PID: 3637 Comm: systemd-journal Not tainted 4.14.180-syzkaller #0 [ 1691.859035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1691.868383] Call Trace: [ 1691.870975] dump_stack+0x13e/0x194 [ 1691.874606] dump_header+0x178/0x6d4 [ 1691.878321] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1691.883443] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1691.888541] ? ___ratelimit+0x50/0x519 [ 1691.892426] oom_kill_process.cold+0x10/0xae3 [ 1691.896917] ? lock_downgrade+0x6e0/0x6e0 [ 1691.901060] out_of_memory+0x2d5/0x1110 [ 1691.905031] ? oom_killer_disable+0x1c0/0x1c0 [ 1691.909518] ? mutex_trylock+0x152/0x1a0 [ 1691.913572] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1691.918420] ? warn_alloc+0xf0/0xf0 [ 1691.922141] ? find_held_lock+0x2d/0x110 [ 1691.926208] ? fs_reclaim_acquire+0x10/0x10 [ 1691.930536] __alloc_pages_nodemask+0x5d3/0x700 [ 1691.935203] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1691.940220] cache_grow_begin+0x7b/0x410 [ 1691.944278] fallback_alloc+0x205/0x2b0 [ 1691.948243] kmem_cache_alloc+0x1ea/0x770 [ 1691.952383] getname_flags+0xc8/0x560 [ 1691.956182] SyS_mkdir+0x7b/0x210 [ 1691.959629] ? SyS_mkdirat+0x210/0x210 [ 1691.963506] ? do_syscall_64+0x4c/0x640 [ 1691.967468] ? SyS_mkdirat+0x210/0x210 [ 1691.971347] do_syscall_64+0x1d5/0x640 [ 1691.975231] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1691.980406] RIP: 0033:0x7f033b349687 [ 1691.984104] RSP: 002b:00007ffec0368288 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 1691.991801] RAX: ffffffffffffffda RBX: 00007ffec036b2f0 RCX: 00007f033b349687 [ 1691.999063] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 000055b43f2d38c0 [ 1692.006321] RBP: 00007ffec03682c0 R08: 000055b43de403e5 R09: 0000000000000018 [ 1692.013578] R10: 0000000000000020 R11: 0000000000000293 R12: 0000000000000000 [ 1692.020837] R13: 0000000000000001 R14: 000055b43f2d38c0 R15: 00007ffec0368900 [ 1692.036994] Mem-Info: [ 1692.039797] active_anon:230440 inactive_anon:1101937 isolated_anon:0 [ 1692.039797] active_file:37 inactive_file:118 isolated_file:0 [ 1692.039797] unevictable:25363 dirty:0 writeback:8 unstable:0 [ 1692.039797] slab_reclaimable:16122 slab_unreclaimable:115093 [ 1692.039797] mapped:66316 shmem:14712 pagetables:11291 bounce:0 [ 1692.039797] free:25352 free_pcp:47 free_cma:0 [ 1692.084545] Node 0 active_anon:908964kB inactive_anon:845268kB active_file:24kB inactive_file:0kB unevictable:83104kB isolated(anon):0kB isolated(file):0kB mapped:256220kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 301056kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1692.119371] Node 1 active_anon:12796kB inactive_anon:3562480kB active_file:0kB inactive_file:12kB unevictable:20724kB isolated(anon):0kB isolated(file):0kB mapped:10532kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1692.150049] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1692.181007] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1692.186037] Node 0 DMA32 free:36424kB min:36272kB low:45340kB high:54408kB active_anon:908316kB inactive_anon:841000kB active_file:48kB inactive_file:0kB unevictable:83108kB writepending:0kB present:3129332kB managed:2621260kB mlocked:83108kB kernel_stack:9952kB pagetables:17164kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1692.219689] lowmem_reserve[]: 0 0 0 0 0 [ 1692.223679] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1692.249214] lowmem_reserve[]: 0 0 0 0 0 [ 1692.253196] Node 1 Normal free:53204kB min:53612kB low:67012kB high:80412kB active_anon:12796kB inactive_anon:3562480kB active_file:0kB inactive_file:16kB unevictable:20748kB writepending:0kB present:3932160kB managed:3870192kB mlocked:20748kB kernel_stack:8640kB pagetables:27860kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1692.282744] lowmem_reserve[]: 0 0 0 0 0 [ 1692.286765] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1692.302603] Node 0 DMA32: 445*4kB (UME) 52*8kB (UME) 1*16kB (U) 4*32kB (UM) 32*64kB (U) 7*128kB (UM) 4*256kB (U) 2*512kB (UM) 0*1024kB 2*2048kB (UM) 6*4096kB (UM) = 36004kB [ 1692.318249] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1692.328959] Node 1 Normal: 31*4kB (UMH) 663*8kB (UMH) 1522*16kB (UMH) 592*32kB (UMH) 70*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53204kB [ 1692.343374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1692.352234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1692.360849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1692.369713] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1692.378313] 23394 total pagecache pages [ 1692.382278] 0 pages in swap cache [ 1692.385713] Swap cache stats: add 0, delete 0, find 0/0 [ 1692.391087] Free swap = 0kB [ 1692.394093] Total swap = 0kB [ 1692.397142] 1965979 pages RAM [ 1692.400231] 0 pages HighMem/MovableOnly [ 1692.404183] 339053 pages reserved [ 1692.407649] 0 pages cma reserved [ 1692.411001] Out of memory: Kill process 26106 (syz-executor.4) score 1009 or sacrifice child [ 1692.419653] Killed process 26106 (syz-executor.4) total-vm:74972kB, anon-rss:18008kB, file-rss:46888kB, shmem-rss:0kB [ 1692.454063] oom_reaper: reaped process 26106 (syz-executor.4), now anon-rss:18020kB, file-rss:14768kB, shmem-rss:0kB [ 1692.478255] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1692.503655] systemd-journal cpuset=/ mems_allowed=0-1 [ 1692.508920] CPU: 1 PID: 3637 Comm: systemd-journal Not tainted 4.14.180-syzkaller #0 [ 1692.516790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1692.526140] Call Trace: [ 1692.528723] dump_stack+0x13e/0x194 [ 1692.532352] dump_header+0x178/0x6d4 [ 1692.536061] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1692.541073] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1692.546176] ? ___ratelimit+0x50/0x519 [ 1692.550060] oom_kill_process.cold+0x10/0xae3 [ 1692.554547] ? lock_acquire+0x170/0x3f0 [ 1692.558512] ? lock_downgrade+0x6e0/0x6e0 [ 1692.562657] out_of_memory+0x2d5/0x1110 [ 1692.566630] ? oom_killer_disable+0x1c0/0x1c0 [ 1692.571125] ? mutex_trylock+0x152/0x1a0 [ 1692.575180] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1692.580027] ? warn_alloc+0xf0/0xf0 [ 1692.583643] ? find_held_lock+0x2d/0x110 [ 1692.587694] ? fs_reclaim_acquire+0x10/0x10 [ 1692.592017] __alloc_pages_nodemask+0x5d3/0x700 [ 1692.596678] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1692.601695] cache_grow_begin+0x7b/0x410 [ 1692.605841] fallback_alloc+0x205/0x2b0 [ 1692.609812] kmem_cache_alloc+0x1ea/0x770 [ 1692.613961] getname_flags+0xc8/0x560 [ 1692.617758] SyS_mkdir+0x7b/0x210 [ 1692.621205] ? SyS_mkdirat+0x210/0x210 [ 1692.625086] ? do_syscall_64+0x4c/0x640 [ 1692.629050] ? SyS_mkdirat+0x210/0x210 [ 1692.632928] do_syscall_64+0x1d5/0x640 [ 1692.636815] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1692.641996] RIP: 0033:0x7f033b349687 [ 1692.645694] RSP: 002b:00007ffec0368288 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 1692.653391] RAX: ffffffffffffffda RBX: 00007ffec036b2f0 RCX: 00007f033b349687 [ 1692.660650] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 000055b43f2d38c0 [ 1692.667909] RBP: 00007ffec03682c0 R08: 000055b43de403e5 R09: 0000000000000018 [ 1692.675168] R10: 0000000000000020 R11: 0000000000000293 R12: 0000000000000000 [ 1692.682426] R13: 0000000000000001 R14: 000055b43f2d38c0 R15: 00007ffec0368900 [ 1692.702330] Mem-Info: [ 1692.704760] active_anon:230440 inactive_anon:1101937 isolated_anon:0 [ 1692.704760] active_file:76 inactive_file:131 isolated_file:0 [ 1692.704760] unevictable:18211 dirty:0 writeback:0 unstable:0 [ 1692.704760] slab_reclaimable:16113 slab_unreclaimable:115109 [ 1692.704760] mapped:63470 shmem:14712 pagetables:11295 bounce:0 [ 1692.704760] free:32315 free_pcp:273 free_cma:0 [ 1692.742976] Node 0 active_anon:908964kB inactive_anon:845268kB active_file:372kB inactive_file:5440kB unevictable:61096kB isolated(anon):0kB isolated(file):128kB mapped:247448kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 301056kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 18:30:30 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x14024, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f0000000340)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000100001080000000000000000000000012659f22d3d0bf3f0a2d452c8b277c3f5aa09b894793d7d4c71c613fc4795a875e60d4047d55e54b883bdca3705f8405821ffe56170bb46fe2029854242a784df3b0eb8adb87ed68b8cc2500000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000050021000600000008002e0004000000"], 0x30}}, 0x0) 18:30:30 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x8812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000340)=0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r5, @ANYBLOB="0800fc5693c1d78e87a5b45d904f39727a8aeaff04000000"], 0x30}}, 0x0) [ 1692.781471] Node 1 active_anon:12496kB inactive_anon:3562480kB active_file:4kB inactive_file:8kB unevictable:11448kB isolated(anon):0kB isolated(file):0kB mapped:10532kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1692.865809] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 18:30:30 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0112000000009ac70000090000003c00030014000600ff090000002e000000000000000000010800030000000000140002007663616e3000000000000000000000000800010002"], 0x50}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2c37eabd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x17}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a101", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 1692.941682] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1692.953780] Node 0 DMA32 free:42620kB min:36272kB low:45340kB high:54408kB active_anon:907392kB inactive_anon:852764kB active_file:23028kB inactive_file:2236kB unevictable:38712kB writepending:44kB present:3129332kB managed:2621260kB mlocked:38792kB kernel_stack:9888kB pagetables:17260kB bounce:0kB free_pcp:524kB local_pcp:124kB free_cma:0kB 18:30:30 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x14024, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f0000000340)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000100001080000000000000000000000012659f22d3d0bf3f0a2d452c8b277c3f5aa09b894793d7d4c71c613fc4795a875e60d4047d55e54b883bdca3705f8405821ffe56170bb46fe2029854242a784df3b0eb8adb87ed68b8cc2500000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000050021000600000008002e0004000000"], 0x30}}, 0x0) [ 1693.013710] IPVS: Error joining to the multicast group [ 1693.063448] lowmem_reserve[]: 0 0 0 0 0 [ 1693.081270] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1693.213758] lowmem_reserve[]: 0 0 0 0 0 [ 1693.237125] Node 1 Normal free:54104kB min:53612kB low:67012kB high:80412kB active_anon:12452kB inactive_anon:3562560kB active_file:1296kB inactive_file:908kB unevictable:18300kB writepending:0kB present:3932160kB managed:3870192kB mlocked:18300kB kernel_stack:8704kB pagetables:27844kB bounce:0kB free_pcp:176kB local_pcp:0kB free_cma:0kB [ 1693.390392] lowmem_reserve[]: 0 0 0 0 0 [ 1693.403251] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1693.435785] Node 0 DMA32: 647*4kB (UME) 118*8kB (UME) 100*16kB (UM) 162*32kB (UM) 119*64kB (UM) 28*128kB (UM) 6*256kB (UM) 3*512kB (UM) 0*1024kB 2*2048kB (UM) 2*4096kB (U) = 36876kB [ 1693.462586] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1693.483295] Node 1 Normal: 28*4kB (UH) 525*8kB (UMH) 1534*16kB (UMH) 601*32kB (UMH) 78*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53080kB [ 1693.523883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1693.546087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1693.568411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1693.581833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1693.595727] 23438 total pagecache pages [ 1693.603441] 0 pages in swap cache [ 1693.629253] Swap cache stats: add 0, delete 0, find 0/0 [ 1693.644767] Free swap = 0kB [ 1693.651168] Total swap = 0kB [ 1693.654279] 1965979 pages RAM [ 1693.662404] 0 pages HighMem/MovableOnly [ 1693.666562] 339053 pages reserved [ 1693.670132] 0 pages cma reserved [ 1693.673627] Out of memory: Kill process 26110 (syz-executor.2) score 1009 or sacrifice child [ 1693.700853] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1693.714470] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1693.742276] CPU: 1 PID: 6334 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1693.749755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1693.759091] Call Trace: [ 1693.761658] dump_stack+0x13e/0x194 [ 1693.765263] dump_header+0x178/0x6d4 [ 1693.768952] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1693.773951] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1693.779035] ? ___ratelimit+0x50/0x519 [ 1693.782897] oom_kill_process.cold+0x10/0xae3 [ 1693.787367] ? lock_acquire+0x170/0x3f0 [ 1693.791369] ? lock_downgrade+0x6e0/0x6e0 [ 1693.795494] out_of_memory+0x2d5/0x1110 [ 1693.799447] ? oom_killer_disable+0x1c0/0x1c0 [ 1693.803927] ? mutex_trylock+0x152/0x1a0 [ 1693.807972] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1693.812797] ? warn_alloc+0xf0/0xf0 [ 1693.816432] __alloc_pages_nodemask+0x5d3/0x700 [ 1693.821083] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1693.826077] ? lock_downgrade+0x6e0/0x6e0 [ 1693.830238] alloc_pages_current+0xe7/0x1e0 [ 1693.834537] __page_cache_alloc+0x245/0x3d0 [ 1693.838862] filemap_fault+0xc18/0x1c50 [ 1693.842826] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1693.847475] ? lock_acquire+0x170/0x3f0 [ 1693.851441] ? ext4_filemap_fault+0x7c/0xb0 [ 1693.855749] ext4_filemap_fault+0x84/0xb0 [ 1693.859873] __do_fault+0xfa/0x380 [ 1693.863391] __handle_mm_fault+0x22e9/0x3280 [ 1693.867774] ? copy_page_range+0x1d70/0x1d70 [ 1693.872159] ? find_held_lock+0x2d/0x110 [ 1693.876201] handle_mm_fault+0x288/0x7a0 [ 1693.880240] __do_page_fault+0x4bc/0xb40 [ 1693.884278] ? vmalloc_fault+0xdf0/0xdf0 [ 1693.888313] ? do_page_fault+0x60/0x4f2 [ 1693.892270] ? page_fault+0x2f/0x50 [ 1693.895893] page_fault+0x45/0x50 [ 1693.899324] RIP: 00f1:0x11 [ 1693.902143] RSP: 458b10:000000c43af50578 EFLAGS: 00000000 [ 1693.907583] Mem-Info: [ 1693.915522] active_anon:230118 inactive_anon:1101952 isolated_anon:0 [ 1693.915522] active_file:11 inactive_file:8 isolated_file:0 [ 1693.915522] unevictable:26581 dirty:0 writeback:0 unstable:0 [ 1693.915522] slab_reclaimable:16113 slab_unreclaimable:114701 [ 1693.915522] mapped:66874 shmem:14712 pagetables:11309 bounce:0 [ 1693.915522] free:24932 free_pcp:107 free_cma:0 [ 1693.954372] Node 0 active_anon:907908kB inactive_anon:845328kB active_file:28kB inactive_file:32kB unevictable:84532kB isolated(anon):0kB isolated(file):0kB mapped:253236kB dirty:0kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 317440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1693.987467] Node 1 active_anon:12564kB inactive_anon:3562480kB active_file:16kB inactive_file:0kB unevictable:21792kB isolated(anon):0kB isolated(file):0kB mapped:14260kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1694.019713] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1694.048922] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1694.053968] Node 0 DMA32 free:36236kB min:36272kB low:45340kB high:54408kB active_anon:907260kB inactive_anon:841060kB active_file:28kB inactive_file:32kB unevictable:84532kB writepending:0kB present:3129332kB managed:2621260kB mlocked:84532kB kernel_stack:9920kB pagetables:17148kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1694.086171] lowmem_reserve[]: 0 0 0 0 0 [ 1694.090203] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1694.115709] lowmem_reserve[]: 0 0 0 0 0 [ 1694.119738] Node 1 Normal free:53052kB min:53612kB low:67012kB high:80412kB active_anon:12564kB inactive_anon:3562480kB active_file:16kB inactive_file:16kB unevictable:21592kB writepending:0kB present:3932160kB managed:3870192kB mlocked:21592kB kernel_stack:8704kB pagetables:27932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1694.149411] lowmem_reserve[]: 0 0 0 0 0 [ 1694.153377] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1694.169168] Node 0 DMA32: 439*4kB (UME) 116*8kB (UME) 113*16kB (UM) 162*32kB (UM) 119*64kB (UM) 28*128kB (UM) 6*256kB (UM) 3*512kB (UM) 0*1024kB 2*2048kB (UM) 2*4096kB (U) = 36236kB [ 1694.185781] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1694.196567] Node 1 Normal: 32*4kB (UMH) 565*8kB (UMH) 1534*16kB (UMH) 601*32kB (UMH) 78*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53416kB [ 1694.210966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1694.219830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1694.228442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1694.237341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1694.245896] 23507 total pagecache pages [ 1694.249996] 0 pages in swap cache [ 1694.253545] Swap cache stats: add 0, delete 0, find 0/0 [ 1694.259040] Free swap = 0kB [ 1694.262157] Total swap = 0kB [ 1694.265252] 1965979 pages RAM [ 1694.268441] 0 pages HighMem/MovableOnly [ 1694.272479] 339053 pages reserved [ 1694.275988] 0 pages cma reserved [ 1694.279448] Out of memory: Kill process 26119 (syz-executor.4) score 1009 or sacrifice child [ 1694.288144] Killed process 26119 (syz-executor.4) total-vm:74972kB, anon-rss:18008kB, file-rss:51688kB, shmem-rss:0kB [ 1694.334178] oom_reaper: reaped process 26119 (syz-executor.4), now anon-rss:18020kB, file-rss:18600kB, shmem-rss:0kB [ 1694.372175] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1694.416658] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1694.422151] CPU: 0 PID: 6342 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1694.429590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1694.438921] Call Trace: [ 1694.441515] dump_stack+0x13e/0x194 [ 1694.445121] dump_header+0x178/0x6d4 [ 1694.448812] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1694.453804] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1694.458882] ? ___ratelimit+0x50/0x519 [ 1694.462745] oom_kill_process.cold+0x10/0xae3 [ 1694.467217] ? lock_downgrade+0x6e0/0x6e0 [ 1694.471354] out_of_memory+0x2d5/0x1110 [ 1694.475304] ? oom_killer_disable+0x1c0/0x1c0 [ 1694.479774] ? mutex_trylock+0x152/0x1a0 [ 1694.483814] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1694.488649] ? warn_alloc+0xf0/0xf0 [ 1694.492272] __alloc_pages_nodemask+0x5d3/0x700 [ 1694.496917] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1694.501907] ? lock_downgrade+0x6e0/0x6e0 [ 1694.506041] alloc_pages_current+0xe7/0x1e0 [ 1694.510340] __page_cache_alloc+0x245/0x3d0 [ 1694.514634] filemap_fault+0xc18/0x1c50 [ 1694.518588] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1694.523231] ? lock_acquire+0x170/0x3f0 [ 1694.527182] ? ext4_filemap_fault+0x7c/0xb0 [ 1694.531478] ext4_filemap_fault+0x84/0xb0 [ 1694.535603] __do_fault+0xfa/0x380 [ 1694.539118] __handle_mm_fault+0x22e9/0x3280 [ 1694.543504] ? copy_page_range+0x1d70/0x1d70 [ 1694.547889] ? find_held_lock+0x2d/0x110 [ 1694.551946] handle_mm_fault+0x288/0x7a0 [ 1694.555994] __do_page_fault+0x4bc/0xb40 [ 1694.560030] ? vmalloc_fault+0xdf0/0xdf0 [ 1694.564076] ? do_page_fault+0x60/0x4f2 [ 1694.568039] ? page_fault+0x2f/0x50 [ 1694.571640] page_fault+0x45/0x50 [ 1694.575087] RIP: 0001:0x11 [ 1694.577915] RSP: 0000:000000c420151e20 EFLAGS: 19830a2bd7f [ 1694.616249] IPVS: Error joining to the multicast group [ 1694.882947] Mem-Info: [ 1694.885516] active_anon:230153 inactive_anon:1103026 isolated_anon:0 [ 1694.885516] active_file:334 inactive_file:343 isolated_file:42 [ 1694.885516] unevictable:24749 dirty:19 writeback:0 unstable:0 [ 1694.885516] slab_reclaimable:16113 slab_unreclaimable:114972 [ 1694.885516] mapped:68692 shmem:14712 pagetables:11313 bounce:0 [ 1694.885516] free:24915 free_pcp:83 free_cma:0 [ 1694.924946] Node 0 active_anon:908032kB inactive_anon:848220kB active_file:1316kB inactive_file:1272kB unevictable:79380kB isolated(anon):0kB isolated(file):168kB mapped:257840kB dirty:76kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 313344kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1694.962052] Node 1 active_anon:12488kB inactive_anon:3564092kB active_file:12kB inactive_file:12kB unevictable:19328kB isolated(anon):0kB isolated(file):0kB mapped:16964kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1694.998060] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1695.035357] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1695.042082] Node 0 DMA32 free:37420kB min:36272kB low:45340kB high:54408kB active_anon:907348kB inactive_anon:847172kB active_file:644kB inactive_file:244kB unevictable:76036kB writepending:128kB present:3129332kB managed:2621260kB mlocked:76036kB kernel_stack:9760kB pagetables:17192kB bounce:0kB free_pcp:624kB local_pcp:120kB free_cma:0kB [ 1695.072455] lowmem_reserve[]: 0 0 0 0 0 [ 1695.076485] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1695.101951] lowmem_reserve[]: 0 0 0 0 0 [ 1695.105947] Node 1 Normal free:53672kB min:53612kB low:67012kB high:80412kB active_anon:12484kB inactive_anon:3563848kB active_file:12kB inactive_file:12kB unevictable:19332kB writepending:0kB present:3932160kB managed:3870192kB mlocked:19332kB kernel_stack:8704kB pagetables:27808kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1695.136145] lowmem_reserve[]: 0 0 0 0 0 [ 1695.140188] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1695.156012] Node 0 DMA32: 435*4kB (UME) 115*8kB (UME) 126*16kB (UM) 81*32kB (UM) 119*64kB (UM) 29*128kB (UM) 6*256kB (UM) 3*512kB (UM) 0*1024kB 2*2048kB (UM) 3*4096kB (UM) = 38052kB [ 1695.172411] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1695.183168] Node 1 Normal: 132*4kB (UMH) 653*8kB (UMH) 1481*16kB (UMH) 601*32kB (UMH) 78*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53672kB [ 1695.197662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1695.206507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1695.215063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1695.223921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1695.232490] 24835 total pagecache pages [ 1695.236506] 0 pages in swap cache [ 1695.239944] Swap cache stats: add 0, delete 0, find 0/0 [ 1695.245284] Free swap = 0kB [ 1695.248324] Total swap = 0kB [ 1695.251325] 1965979 pages RAM [ 1695.254407] 0 pages HighMem/MovableOnly [ 1695.258393] 339053 pages reserved [ 1695.261819] 0 pages cma reserved [ 1695.265157] Out of memory: Kill process 26118 (syz-executor.5) score 1008 or sacrifice child [ 1695.273790] Killed process 26129 (syz-executor.5) total-vm:74972kB, anon-rss:18024kB, file-rss:34816kB, shmem-rss:0kB [ 1695.306123] oom_reaper: reaped process 26129 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 18:30:33 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0112000000009ac70000090000003c00030014000600ff090000002e000000000000000000010800030000000000140002007663616e3000000000000000000000000800010002"], 0x50}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2c37eabd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x17}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a101", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 1695.501206] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 18:30:33 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x20000, 0x0) getpeername$netrom(r5, &(0x7f0000000340)={{0x3, @default}, [@rose, @netrom, @default, @rose, @remote, @netrom, @bcast, @netrom]}, &(0x7f00000003c0)=0x48) [ 1695.879960] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1695.918739] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1695.955800] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1695.998789] CPU: 1 PID: 6359 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 1696.006594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1696.015935] Call Trace: [ 1696.018519] dump_stack+0x13e/0x194 [ 1696.022144] dump_header+0x178/0x6d4 [ 1696.025846] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1696.030854] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1696.035950] ? ___ratelimit+0x50/0x519 [ 1696.039839] oom_kill_process.cold+0x10/0xae3 [ 1696.044330] ? lock_acquire+0x170/0x3f0 [ 1696.048307] ? lock_downgrade+0x6e0/0x6e0 [ 1696.052453] out_of_memory+0x2d5/0x1110 [ 1696.056421] ? oom_killer_disable+0x1c0/0x1c0 [ 1696.060908] ? mutex_trylock+0x152/0x1a0 [ 1696.064965] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1696.069811] ? warn_alloc+0xf0/0xf0 [ 1696.073429] ? find_held_lock+0x2d/0x110 [ 1696.077484] ? fs_reclaim_acquire+0x10/0x10 [ 1696.081806] __alloc_pages_nodemask+0x5d3/0x700 [ 1696.086470] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1696.091491] ? copy_process.part.0+0x17d5/0x6a50 [ 1696.096257] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1696.101272] ? __lock_acquire+0x5f7/0x4620 [ 1696.105511] copy_process.part.0+0x26a/0x6a50 [ 1696.110006] ? trace_hardirqs_on+0x10/0x10 [ 1696.114241] ? save_trace+0x290/0x290 [ 1696.118031] ? find_held_lock+0x2d/0x110 [ 1696.122073] ? __cleanup_sighand+0x40/0x40 [ 1696.126283] ? lock_downgrade+0x6e0/0x6e0 [ 1696.130415] _do_fork+0x180/0xc80 [ 1696.133845] ? put_timespec64+0xaa/0xf0 [ 1696.137796] ? fork_idle+0x270/0x270 [ 1696.141489] ? SyS_clock_gettime+0xf5/0x180 [ 1696.145786] ? SyS_clock_settime+0x1a0/0x1a0 [ 1696.150171] ? do_syscall_64+0x4c/0x640 [ 1696.154130] ? sys_vfork+0x20/0x20 [ 1696.157646] do_syscall_64+0x1d5/0x640 [ 1696.161514] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1696.166679] RIP: 0033:0x45b05a [ 1696.169844] RSP: 002b:00007ffe57186c90 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1696.177527] RAX: ffffffffffffffda RBX: 00007ffe57186c90 RCX: 000000000045b05a [ 1696.184772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1696.192018] RBP: 00007ffe57186cd0 R08: 0000000000000001 R09: 0000000002494940 [ 1696.199262] R10: 0000000002494c10 R11: 0000000000000246 R12: 0000000000000001 [ 1696.206509] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe57186d20 [ 1696.247391] IPVS: Error joining to the multicast group 18:30:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000000ddf7ffffffffffff00", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000414ec751f0b528ac78345e140001040000000000000000021f0000", @ANYRES32=r6, @ANYBLOB="08000200a0"], 0x20}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r8, 0x80045400, &(0x7f00000000c0)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x6841}}, 0x20}}, 0x0) [ 1696.430484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1696.482878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20033 sclass=netlink_route_socket pid=26144 comm=syz-executor.5 [ 1696.531262] ip_tables: iptables: counters copy to user failed while replacing table [ 1696.565132] IPv6: ADDRCONF(NETDEV_UP): veth5: link is not ready [ 1696.590095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20033 sclass=netlink_route_socket pid=26147 comm=syz-executor.5 [ 1696.604346] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1696.634055] ip_tables: iptables: counters copy to user failed while replacing table [ 1696.731837] Mem-Info: [ 1696.734796] active_anon:230668 inactive_anon:1104737 isolated_anon:0 [ 1696.734796] active_file:815 inactive_file:808 isolated_file:24 [ 1696.734796] unevictable:15247 dirty:28 writeback:0 unstable:0 [ 1696.734796] slab_reclaimable:16113 slab_unreclaimable:115621 [ 1696.734796] mapped:64916 shmem:14712 pagetables:11281 bounce:0 [ 1696.734796] free:30206 free_pcp:474 free_cma:0 18:30:34 executing program 5: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0, 0x400}, &(0x7f0000000300)=0x8) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x2000) sync() 18:30:34 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000018c0)=""/246) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24040080, &(0x7f00000001c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000080)}) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9281a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 1696.853552] Node 0 active_anon:912408kB inactive_anon:853312kB active_file:2324kB inactive_file:3084kB unevictable:51708kB isolated(anon):0kB isolated(file):80kB mapped:246200kB dirty:112kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 309248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1696.946187] Node 1 active_anon:12532kB inactive_anon:3565636kB active_file:1028kB inactive_file:1296kB unevictable:8540kB isolated(anon):0kB isolated(file):0kB mapped:14068kB dirty:0kB writeback:4kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1696.996685] ip_tables: iptables: counters copy to user failed while replacing table 18:30:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="73797af504d3e97c03a9e9c52143a8c659fba8b7af2fd5b8991008000000800000000000000000"], 0x3a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r5 = socket(0x1, 0x1, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101001, 0x0) write$P9_RLINK(r6, &(0x7f00000000c0)={0x7, 0x47, 0x2}, 0x7) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0xfffffff9, 0x6, 0x4, 0x80000, 0x800, {r3, r4/1000+10000}, {0x5, 0x1, 0x5, 0x3, 0xc5, 0x0, "008000"}, 0x8000, 0x3, @offset=0x2c, 0xad, 0x0, r5}) setsockopt$netrom_NETROM_N2(r7, 0x103, 0x3, &(0x7f0000000140)=0x1, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) io_submit(0x0, 0x1, &(0x7f0000003680)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001540)="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", 0xac2}]) 18:30:34 executing program 1: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r1) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket(0x1, 0x1, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@logdev={'logdev', 0x3d, './file1'}}]}) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="000328bd7000d80ee49d80fe4cfe"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40001) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="d4020400", @ANYRES16, @ANYBLOB="000128bd7000fddbdf25020000000800020002000000b8000c8024000b800800090090d20e0c08000a0052eb00000800090078e1d11108000900d806bf633c000b8008000a00bcb80000080009000f10993608000a00f914000008000900f770d97b080009004ceb223608000a00acd4000008000a00020000003c000b8008000a00f1320000080009008d3a8950080009009ea9156c08000a000c5b000008000a000967000008000900c026ee5d080009003ba7ab2704000b8014000b8008000a00c486000008000900a1086d76"], 0xd4}, 0x1, 0x0, 0x0, 0x8080}, 0x801) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000f8a692d300", @ANYRES16, @ANYBLOB="000228bd7000fedbdf25020000000800010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x573c025bcd791308}, 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x190, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x452c54a1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7759b27f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f70ce95}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52c673c1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39219a34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58fb9ebb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x92e53ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33a15412}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c5a4436}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c71cd2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55981905}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fdb3ef5}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40fc318}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x263d57e3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31206442}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}]}, 0x190}, 0x1, 0x0, 0x0, 0xc895}, 0x20008000) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="c001000091927932aa0acc848a1c63d108c8ca46527be08d", @ANYRES16, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x404e091}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48884000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x44005) [ 1697.091284] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 18:30:34 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$BLKGETSIZE64(r0, 0x127a, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x8001008, 0x81, 0x98bbb637ceb1366b}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x18d042, 0x0) mknod(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0x0, 0x4, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3}, 0x800000020000042a, 0x800007f, 0x40, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r1 = open(&(0x7f0000000600)='./bus\x00', 0x22, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000280)={0xe, @raw_data="f7108dbb58e42ec86bd54a7fea091f225fcab05b980ba68209deb4045894ae83da2d7ba39704041e04b4a56f8cbd33277f64e9235d120fafe84c76937866482f0b9e3b390a19df48716017ca38ebe1e7421b963227987f174d6786af5c6080f0d8aa01e153eee94dbe35d2931a50bff851f2692d94e2e3d22b31709b496b5eb81c8b7c8590ef6b761402da8798520851b13cc91b828ad92ecf29e8a8a8691d2d73da27125ebb83941fc713c273c011080e158bdbfaef4c8b6772ab7e763c01acdff32bd48e096082"}) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffff4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000040)={0x9, 0x7fff, 0xffffffff}) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x127a, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_genetlink_get_family_id$gtp(0x0) [ 1697.178990] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1697.184043] Node 0 DMA32 free:47344kB min:36272kB low:45340kB high:54408kB active_anon:909624kB inactive_anon:853812kB active_file:17460kB inactive_file:4752kB unevictable:24740kB writepending:24kB present:3129332kB managed:2621260kB mlocked:24592kB kernel_stack:9792kB pagetables:17244kB bounce:0kB free_pcp:800kB local_pcp:452kB free_cma:0kB [ 1697.219920] lowmem_reserve[]: 0 0 0 0 0 [ 1697.224335] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1697.286691] audit: type=1800 audit(1589913034.822:106): pid=26169 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=15994 res=0 18:30:34 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r6, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r6) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none, 0x20}, 0xa) 18:30:34 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x7) 18:30:34 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1fe, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@window, @sack_perm, @timestamp, @mss={0x2, 0x3fd}], 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xfe28, 0x400}], 0x4802, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x12) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003802000000000000e8000000e800800000000000e8000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000167000000107d00000000001000000000020000002a00000007000000000000000000000000040000f80f00000000000000550000000000002000545241434500000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000100000000018000000000000000000000000000000009800b800000000000000321bb81100000000000000000000280074746c00000000000000000000000000000000000000000000000000000003000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000040)={{0x2, 0x6}, 0x1, 0x1, 0x3, {0x40}, 0x3, 0x200}) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fdfffffe) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0112000000009ac70000090000003c00030014000600ff090000002e000000000000000000010800030000000000140002007663616e3000000000000000000000000800010002"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40800) r9 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) [ 1697.354158] lowmem_reserve[]: 0 0 0 0 0 [ 1697.368940] Node 1 Normal free:66852kB min:53612kB low:67012kB high:80412kB active_anon:12532kB inactive_anon:3567968kB active_file:5608kB inactive_file:1244kB unevictable:52kB writepending:4kB present:3932160kB managed:3870192kB mlocked:88kB kernel_stack:8576kB pagetables:27856kB bounce:0kB free_pcp:916kB local_pcp:204kB free_cma:0kB [ 1697.411964] audit: type=1804 audit(1589913034.942:107): pid=26175 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir933856294/syzkaller.OnvtYW/637/bus" dev="sda1" ino=16020 res=1 [ 1697.499214] ip_tables: iptables: counters copy to user failed while replacing table [ 1697.584588] audit: type=1804 audit(1589913034.972:108): pid=26175 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir933856294/syzkaller.OnvtYW/637/bus" dev="sda1" ino=16020 res=1 [ 1697.631317] lowmem_reserve[]: 0 0 0 0 0 [ 1697.635325] Node 0 DMA: 13*4kB (UME) 4*8kB (ME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) [ 1697.641258] IPVS: Error joining to the multicast group [ 1697.660056] 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1697.665876] Node 0 DMA32: 205*4kB (UME) 1036*8kB (UME) 565*16kB (UM) 232*32kB (UMH) 93*64kB (UMH) 24*128kB (UM) 3*256kB (M) 2*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 38436kB [ 1697.730699] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1697.765217] Node 1 Normal: 1330*4kB (UMH) 998*8kB (UMH) 1377*16kB (UMH) 625*32kB (UMH) 122*64kB (UMH) 9*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 64296kB [ 1697.789524] audit: type=1804 audit(1589913035.322:109): pid=26183 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir933856294/syzkaller.OnvtYW/637/bus" dev="sda1" ino=16020 res=1 [ 1697.848996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1697.863487] audit: type=1804 audit(1589913035.352:110): pid=26175 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir933856294/syzkaller.OnvtYW/637/bus" dev="sda1" ino=16020 res=1 [ 1697.916203] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1697.936439] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1697.977014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1697.996272] audit: type=1804 audit(1589913035.362:111): pid=26175 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir933856294/syzkaller.OnvtYW/637/bus" dev="sda1" ino=16020 res=1 18:30:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="481500001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x14}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x80000020}}], 0x3df, 0x86, 0x0) [ 1698.026739] 19875 total pagecache pages [ 1698.036291] 0 pages in swap cache [ 1698.039747] Swap cache stats: add 0, delete 0, find 0/0 [ 1698.066323] Free swap = 0kB [ 1698.075979] Total swap = 0kB [ 1698.081492] audit: type=1804 audit(1589913035.422:112): pid=26188 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir933856294/syzkaller.OnvtYW/637/bus" dev="sda1" ino=16020 res=1 [ 1698.110793] 1965979 pages RAM [ 1698.125164] 0 pages HighMem/MovableOnly [ 1698.142457] 339053 pages reserved [ 1698.156959] 0 pages cma reserved [ 1698.170281] Out of memory: Kill process 26124 (syz-executor.2) score 1009 or sacrifice child [ 1698.201105] audit: type=1800 audit(1589913035.612:113): pid=26195 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=15994 res=0 [ 1699.078467] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1699.096941] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1699.117712] CPU: 1 PID: 6329 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1699.125160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1699.134601] Call Trace: [ 1699.137177] dump_stack+0x13e/0x194 [ 1699.140814] dump_header+0x178/0x6d4 [ 1699.144525] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1699.149543] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1699.154632] ? ___ratelimit+0x50/0x519 [ 1699.158511] oom_kill_process.cold+0x10/0xae3 [ 1699.162991] ? lock_downgrade+0x6e0/0x6e0 [ 1699.167115] out_of_memory+0x2d5/0x1110 [ 1699.171064] ? oom_killer_disable+0x1c0/0x1c0 [ 1699.175532] ? mutex_trylock+0x152/0x1a0 [ 1699.179702] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1699.184560] ? warn_alloc+0xf0/0xf0 [ 1699.188166] __alloc_pages_nodemask+0x5d3/0x700 [ 1699.192808] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1699.197794] ? lock_downgrade+0x6e0/0x6e0 [ 1699.201920] alloc_pages_current+0xe7/0x1e0 [ 1699.206229] __page_cache_alloc+0x245/0x3d0 [ 1699.210522] filemap_fault+0xc18/0x1c50 [ 1699.214473] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1699.219114] ? lock_acquire+0x170/0x3f0 [ 1699.223090] ? ext4_filemap_fault+0x7c/0xb0 [ 1699.227388] ext4_filemap_fault+0x84/0xb0 [ 1699.231544] __do_fault+0xfa/0x380 [ 1699.235056] __handle_mm_fault+0x22e9/0x3280 [ 1699.239440] ? copy_page_range+0x1d70/0x1d70 [ 1699.243819] ? find_held_lock+0x2d/0x110 [ 1699.247860] handle_mm_fault+0x288/0x7a0 [ 1699.251895] __do_page_fault+0x4bc/0xb40 [ 1699.255929] ? vmalloc_fault+0xdf0/0xdf0 [ 1699.259967] ? do_page_fault+0x60/0x4f2 [ 1699.263913] ? page_fault+0x2f/0x50 [ 1699.267514] page_fault+0x45/0x50 [ 1699.270946] RIP: 00f1:0x11 [ 1699.273760] RSP: 000b:000000c42004ff20 EFLAGS: 0042f0a0 [ 1699.276822] Mem-Info: [ 1699.284592] active_anon:231252 inactive_anon:1108768 isolated_anon:0 [ 1699.284592] active_file:0 inactive_file:0 isolated_file:0 [ 1699.284592] unevictable:16149 dirty:4 writeback:0 unstable:0 [ 1699.284592] slab_reclaimable:16079 slab_unreclaimable:117472 [ 1699.284592] mapped:63671 shmem:14712 pagetables:11283 bounce:0 [ 1699.284592] free:24930 free_pcp:13 free_cma:0 [ 1699.318518] Node 0 active_anon:912268kB inactive_anon:867156kB active_file:0kB inactive_file:0kB unevictable:45076kB isolated(anon):0kB isolated(file):0kB mapped:234800kB dirty:16kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 313344kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1699.346803] Node 1 active_anon:12740kB inactive_anon:3567916kB active_file:0kB inactive_file:0kB unevictable:19520kB isolated(anon):0kB isolated(file):0kB mapped:19844kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1699.386843] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4268kB active_file:0kB inactive_file:0kB unevictable:20kB writepending:0kB present:15992kB managed:15908kB mlocked:20kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1699.424204] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1699.429572] Node 0 DMA32 free:35832kB min:36272kB low:45340kB high:54408kB active_anon:911620kB inactive_anon:862956kB active_file:36kB inactive_file:32kB unevictable:45008kB writepending:56kB present:3129332kB managed:2621260kB mlocked:45008kB kernel_stack:9856kB pagetables:17268kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1699.470391] lowmem_reserve[]: 0 0 0 0 0 [ 1699.474449] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1699.505374] lowmem_reserve[]: 0 0 0 0 0 [ 1699.510856] Node 1 Normal free:53272kB min:53612kB low:67012kB high:80412kB active_anon:12740kB inactive_anon:3567916kB active_file:40kB inactive_file:0kB unevictable:19532kB writepending:0kB present:3932160kB managed:3870192kB mlocked:19532kB kernel_stack:8640kB pagetables:27716kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1699.545354] lowmem_reserve[]: 0 0 0 0 0 [ 1699.549388] Node 0 DMA: 10*4kB (UE) 7*8kB (UME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1699.565264] Node 0 DMA32: 570*4kB (UE) 246*8kB (UME) 310*16kB (UM) 348*32kB (UM) 118*64kB (UM) 40*128kB (UM) 7*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35832kB [ 1699.580786] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1699.603286] Node 1 Normal: 110*4kB (UMH) 204*8kB (UMH) 1380*16kB (UMH) 630*32kB (UMH) 122*64kB (UMH) 9*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53272kB [ 1699.628195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1699.644394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1699.653065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1699.667041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1699.675708] 20171 total pagecache pages [ 1699.682846] 0 pages in swap cache [ 1699.688711] Swap cache stats: add 0, delete 0, find 0/0 [ 1699.694064] Free swap = 0kB [ 1699.699621] Total swap = 0kB [ 1699.702630] 1965979 pages RAM [ 1699.705714] 0 pages HighMem/MovableOnly [ 1699.712253] 339053 pages reserved [ 1699.715687] 0 pages cma reserved [ 1699.721615] Out of memory: Kill process 26201 (syz-executor.4) score 1010 or sacrifice child [ 1699.732717] Killed process 26204 (syz-executor.4) total-vm:74972kB, anon-rss:18028kB, file-rss:34816kB, shmem-rss:0kB 18:30:37 executing program 2: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000001022d93040000000000000000000000240001801400018008000100ac1e000108000200ac1414aa0c0002800500010000000000060007"], 0x40}}, 0x0) r0 = socket(0x10, 0x3, 0xc) tee(0xffffffffffffffff, r0, 0x6, 0x6d39f8a2b68a8504) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 18:30:37 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r6, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r6) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none, 0x20}, 0xa) 18:30:37 executing program 5: sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x1, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@in={0x2, 0x4e20, @broadcast}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)="c04e4f5c0156d3b288c8a68d3bab1c216c7cb1f4b8611cb38855cb9b86209142c0c06c3ca5ae1d085d81921db6b3a70c67160614cfbc3cddd7d9c90e2373a42436338cf7a262bd00cd34ccf33cbdd5566c5f02fad05072708f53bb9b3fdb13ecc98e95f1ca3f1368fda910a49afafdfe0da384d9d87f17db4c8df0437bc02a0c6e22d404e715451b6f91b22d9a7aad19720bc6877dd121de7f3606ae7298efcffaa31c1236833e1270dc8fc2ff98e39cd07c", 0xb2}, {&(0x7f000001a740)="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", 0x1000}, {&(0x7f0000000800)="502b1b163469e73e8e3113e7eab555b67e142a1a01b2bb911a7b1e7043a22ac9de162ca13f0f505e018476944976795c1f9431faf723bb368cd762bdaaeabb9c415bae4211ea010d65c907e1dac786989f51102051c33496936f1832a624d099100a", 0x56}, {&(0x7f00000002c0)="f3b98cb8752ce1405009d6e30f387e3b8518f7b65ca6b923a9e8b3eb4639c1970d7fb91d76f789a788f648a4b6ad63b4d27984bc19a2d42e890ccde1e3bf87e076d10499b90041073bc8266388f4dc6b44ac67e1e8f13f594d62572b0b6fd8eb143c30325e9c436e622abeca6e4336d1e515887b2ce78d81f24dc6ff128b02267a4d6ba0586b1727efc136e85546775b104000035fa1dda183021251e3341d82d0477b7f0866a0414008433af139529c7975a537535d1e430ad51ad4ce70a8593862d287aec22467a3", 0xfffffffffffffeec}, {&(0x7f0000000500)="2ef9bf27dada5a5fab29c4dc98ada5e7bf0efbaae5904daaba6b441cf4781b355f65093495d2c647888230ae61ec7bff42863cc6ad824097ab89a639458abd8b17ecf4723320650075670a87107a8f2446c37a94866f44d8811b732ab257032cd1460fd1fc1da373b700b0b446c465bf9b9767b118f99166c65cb21cc958e680d67bf7bc9a5955fef53ed768ee09afbe33fcb46a6937865dbdf9341fa0f83452e9695ce5e3abf6949c03f0cf8c77f1a4c0c3d23f6eeabf2ea648010527aed485f1d1bd47c5a8", 0xc6}, {&(0x7f0000000600)="998c5dd761d734e5e8bd8256eb5943615d2ec4576784b2fecd0dc429368745708ee6417f3610cf94d4162d649c8fd6ad0c37b9fa2ca210c9c3708add8cc6625347f0073b1e1ea74abe76339ea88adf1a743ab2e19fc487f20fe705c8e5cdc9d4f6f190062404db734bdfefda10bde47cc858bca48b8874d9fbc07934afd03ab7a2e3beb1c5e751089c6cba538716e0b7bcf3b22d1b0d645643bb04", 0x9b}, {&(0x7f00000006c0)="232f4d390ce39a70a8b16c4aa2f93670f3223665eef610ee76c72ba0eefa4a2b1ee6c296f21daea17a5e8d44ea762712cb2ad67f2871c4edbff6b138398360eee204761dde0853e37a8bab006a659dc96d8c25aa79c6d41ba7512378a5b9f2a6d9d07a778a12f590b84478b13319c941eb28dda0c826fec55f29c25401", 0x7d}], 0x7}, 0x8010) write$cgroup_pid(r0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2082b0}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000480)=0x1) perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') sendmsg$sock(r0, 0x0, 0x41) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 18:30:37 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x15}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='[d::],0::6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000140)={0x1c00000000000000, 0x2, 0x8, 0x3, 0x5}) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140), 0x0) 18:30:37 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0xbffa, 0x4, 0x0, 'queue0\x00', 0xd6e3}) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) tkill(0xffffffffffffffff, 0x3e) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1050}, 0x20000004) socket(0x1, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="7aacbcb9b944139400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r4, @ANYBLOB="08002e0004000000"], 0x30}}, 0x0) [ 1700.420202] libceph: connect [d::]:6789 error -101 [ 1700.427213] libceph: mon0 [d::]:6789 connect error [ 1700.443316] audit: type=1804 audit(1589913037.972:114): pid=26222 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir933856294/syzkaller.OnvtYW/638/bus" dev="sda1" ino=16132 res=1 18:30:38 executing program 2: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x200100, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @private}}}, 0x26) socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, &(0x7f00000000c0)=0x2, 0x8001, 0x8) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) clock_gettime(0x0, &(0x7f0000000240)) [ 1700.490350] ceph: No mds server is up or the cluster is laggy [ 1700.505909] libceph: connect [d::]:6789 error -101 [ 1700.538947] libceph: mon0 [d::]:6789 connect error [ 1700.630648] audit: type=1804 audit(1589913038.102:115): pid=26215 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir933856294/syzkaller.OnvtYW/638/bus" dev="sda1" ino=16132 res=1 [ 1700.688823] libceph: connect [d::]:6789 error -101 [ 1700.693876] libceph: mon0 [d::]:6789 connect error [ 1700.726541] ceph: No mds server is up or the cluster is laggy [ 1700.733263] syz-executor.1: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1700.759247] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1700.809720] CPU: 1 PID: 26229 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0 [ 1700.817616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1700.826958] Call Trace: [ 1700.829541] dump_stack+0x13e/0x194 [ 1700.833146] warn_alloc.cold+0x96/0x1af [ 1700.837095] ? zone_watermark_ok_safe+0x280/0x280 [ 1700.841921] ? __alloc_pages_direct_compact+0xba/0x360 [ 1700.847174] __alloc_pages_slowpath+0x2114/0x26c0 [ 1700.852016] ? warn_alloc+0xf0/0xf0 [ 1700.855624] ? find_held_lock+0x2d/0x110 [ 1700.859665] ? fs_reclaim_acquire+0x10/0x10 [ 1700.863971] __alloc_pages_nodemask+0x5d3/0x700 [ 1700.868624] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1700.873444] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1700.878526] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1700.883524] ? cache_grow_begin+0x32d/0x410 [ 1700.887826] cache_grow_begin+0x7b/0x410 [ 1700.891870] fallback_alloc+0x205/0x2b0 [ 1700.895956] __kmalloc+0x214/0x7c0 [ 1700.899475] ? mempool_create_node+0x2cd/0x3c0 [ 1700.904038] ? __lockdep_init_map+0x100/0x560 [ 1700.908517] ? mempool_resize+0x5d0/0x5d0 [ 1700.912644] mempool_create_node+0x2cd/0x3c0 [ 1700.917195] ceph_mount+0x796/0x1815 [ 1700.920894] ? __lockdep_init_map+0x100/0x560 [ 1700.925370] mount_fs+0x92/0x2a0 [ 1700.928730] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1700.933206] do_mount+0x3c9/0x24f0 [ 1700.936728] ? copy_mount_string+0x40/0x40 [ 1700.940939] ? __might_fault+0x177/0x1b0 [ 1700.944978] ? _copy_from_user+0x94/0x100 [ 1700.949110] ? memdup_user+0x54/0xa0 [ 1700.952799] ? copy_mount_options+0x1ec/0x2e0 [ 1700.957281] ? copy_mnt_ns+0x8a0/0x8a0 [ 1700.961145] SyS_mount+0xa8/0x120 [ 1700.964582] ? copy_mnt_ns+0x8a0/0x8a0 [ 1700.968444] do_syscall_64+0x1d5/0x640 [ 1700.972311] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1700.977476] RIP: 0033:0x45ca29 [ 1700.980647] RSP: 002b:00007fb72a6d0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1700.988347] RAX: ffffffffffffffda RBX: 00000000004f6280 RCX: 000000000045ca29 [ 1700.995591] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000480 [ 1701.002838] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1701.010082] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1701.017326] R13: 0000000000000751 R14: 00000000004ca3aa R15: 00007fb72a6d16d4 [ 1701.175626] Mem-Info: [ 1701.178184] active_anon:231291 inactive_anon:1111061 isolated_anon:0 [ 1701.178184] active_file:141 inactive_file:1123 isolated_file:0 [ 1701.178184] unevictable:10937 dirty:6 writeback:0 unstable:0 [ 1701.178184] slab_reclaimable:16039 slab_unreclaimable:118105 [ 1701.178184] mapped:59894 shmem:14712 pagetables:11347 bounce:0 [ 1701.178184] free:25671 free_pcp:0 free_cma:0 18:30:38 executing program 2: statfs(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}}, 0x5) setxattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40040400) write$vhci(r1, &(0x7f0000000480)=@HCI_EVENT_PKT={0x4, "bcbcad6e5ccb98063422c6d8820eae7d7b79706e35e84aa76614004f364370b3b887f00a7fff65f3d0ab8753bb35d4bcbeb7b5f8728d8b026b87a2f9b71d233c1e2376623390daaba509c873d88083105f51765c03bad6b438ce46b05279b8e548bf4988e51a490dd746b9d6bb9efedb61ecfb30f94138bf5b7f6024ccc68c8da0eaa36994fb87ff62020c6e3a426db0b1a285626560a2e9bd2ac12c7cde4b585884c9d28b1c13f62a4aac7dec8c2f"}, 0xb0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x20) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) memfd_create(&(0x7f00000002c0)='systemem0md5sum$\x00', 0x5) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000000)) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x79}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x4000010) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000140)=0x5, 0x4) [ 1701.232820] Node 0 active_anon:912540kB inactive_anon:868264kB active_file:756kB inactive_file:7204kB unevictable:36016kB isolated(anon):0kB isolated(file):0kB mapped:233520kB dirty:24kB writeback:0kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 313344kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1701.352414] Node 1 active_anon:12624kB inactive_anon:3575980kB active_file:116kB inactive_file:96kB unevictable:8332kB isolated(anon):0kB isolated(file):0kB mapped:8272kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1701.381054] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4288kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1701.408255] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1701.413549] Node 0 DMA32 free:39332kB min:36272kB low:45340kB high:54408kB active_anon:911896kB inactive_anon:863984kB active_file:40kB inactive_file:1316kB unevictable:39756kB writepending:60kB present:3129332kB managed:2621260kB mlocked:39756kB kernel_stack:10016kB pagetables:17588kB bounce:0kB free_pcp:408kB local_pcp:240kB free_cma:0kB [ 1701.444879] lowmem_reserve[]: 0 0 0 0 0 [ 1701.449126] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1701.475808] lowmem_reserve[]: 0 0 0 0 0 [ 1701.480403] Node 1 Normal free:53152kB min:53612kB low:67012kB high:80412kB active_anon:12624kB inactive_anon:3575980kB active_file:48kB inactive_file:216kB unevictable:9432kB writepending:0kB present:3932160kB managed:3870192kB mlocked:9432kB kernel_stack:8736kB pagetables:27784kB bounce:0kB free_pcp:144kB local_pcp:0kB free_cma:0kB [ 1701.511138] lowmem_reserve[]: 0 0 0 0 0 [ 1701.515187] Node 0 DMA: 10*4kB (UE) 7*8kB (UME) 9*16kB (UM) 7*32kB (UM) 8*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1701.533916] Node 0 DMA32: 618*4kB (UME) 444*8kB (UME) 316*16kB (UM) 361*32kB (UM) 119*64kB (UM) 39*128kB (M) 4*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36776kB [ 1701.535341] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1701.549585] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1701.575439] (null), order=0, oom_score_adj=0 [ 1701.576377] Node 1 Normal: 65*4kB (UH) 511*8kB (UMH) 1334*16kB (MH) 623*32kB (UMH) 123*64kB (UMH) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53628kB [ 1701.599847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1701.608761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1701.612269] systemd-journal cpuset= [ 1701.624441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1701.631114] / [ 1701.644074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1701.653584] mems_allowed=0-1 [ 1701.654374] 17565 total pagecache pages [ 1701.668615] 0 pages in swap cache [ 1701.668679] CPU: 1 PID: 3637 Comm: systemd-journal Not tainted 4.14.180-syzkaller #0 [ 1701.672080] Swap cache stats: add 0, delete 0, find 0/0 [ 1701.679917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1701.679921] Call Trace: [ 1701.679939] dump_stack+0x13e/0x194 [ 1701.679952] dump_header+0x178/0x6d4 [ 1701.679962] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1701.679971] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1701.679980] ? ___ratelimit+0x50/0x519 [ 1701.690802] Free swap = 0kB [ 1701.694682] oom_kill_process.cold+0x10/0xae3 [ 1701.698126] Total swap = 0kB [ 1701.700876] ? lock_downgrade+0x6e0/0x6e0 [ 1701.704541] 1965979 pages RAM [ 1701.709543] out_of_memory+0x2d5/0x1110 [ 1701.709557] ? oom_killer_disable+0x1c0/0x1c0 [ 1701.709567] ? mutex_trylock+0x152/0x1a0 [ 1701.709578] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1701.709599] ? warn_alloc+0xf0/0xf0 [ 1701.709621] __alloc_pages_nodemask+0x5d3/0x700 [ 1701.709634] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1701.720305] 0 pages HighMem/MovableOnly [ 1701.721577] ? lock_downgrade+0x6e0/0x6e0 [ 1701.726098] 339053 pages reserved [ 1701.729043] alloc_pages_current+0xe7/0x1e0 [ 1701.733155] 0 pages cma reserved [ 1701.736240] __page_cache_alloc+0x245/0x3d0 [ 1701.736251] filemap_fault+0xc18/0x1c50 [ 1701.736267] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1701.736281] ? lock_acquire+0x170/0x3f0 [ 1701.736292] ? ext4_filemap_fault+0x7c/0xb0 [ 1701.736307] ext4_filemap_fault+0x84/0xb0 [ 1701.746335] ================================================================== [ 1701.748764] __do_fault+0xfa/0x380 [ 1701.748776] __handle_mm_fault+0x22e9/0x3280 [ 1701.748787] ? copy_page_range+0x1d70/0x1d70 [ 1701.753837] BUG: KASAN: use-after-free in ceph_destroy_options+0xda/0x100 [ 1701.757383] ? find_held_lock+0x2d/0x110 [ 1701.762025] Read of size 8 at addr ffff8880882dc5d0 by task syz-executor.1/26229 [ 1701.767024] handle_mm_fault+0x288/0x7a0 [ 1701.770959] [ 1701.775084] __do_page_fault+0x4bc/0xb40 [ 1701.859039] ? vmalloc_fault+0xdf0/0xdf0 [ 1701.863170] ? do_page_fault+0x60/0x4f2 [ 1701.867130] ? page_fault+0x2f/0x50 [ 1701.870734] page_fault+0x45/0x50 [ 1701.874163] RIP: 0000:0x55b43f2d38c0 [ 1701.877848] RSP: c036b2f0:00007ffec0368410 EFLAGS: 7ffec0368390 [ 1701.877867] CPU: 0 PID: 26229 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0 [ 1701.886784] Mem-Info: [ 1701.891771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1701.891775] Call Trace: [ 1701.891790] dump_stack+0x13e/0x194 [ 1701.891801] ? ceph_destroy_options+0xda/0x100 [ 1701.894242] active_anon:231267 inactive_anon:1111063 isolated_anon:0 [ 1701.894242] active_file:40 inactive_file:22 isolated_file:0 [ 1701.894242] unevictable:13431 dirty:0 writeback:3 unstable:0 [ 1701.894242] slab_reclaimable:16019 slab_unreclaimable:117569 [ 1701.894242] mapped:61027 shmem:14712 pagetables:11384 bounce:0 [ 1701.894242] free:25003 free_pcp:30 free_cma:0 [ 1701.903525] print_address_description.cold+0x7c/0x1e2 [ 1701.903536] ? ceph_destroy_options+0xda/0x100 [ 1701.903545] kasan_report.cold+0xa9/0x2ae [ 1701.903557] ceph_destroy_options+0xda/0x100 [ 1701.903570] ceph_mount+0xd4c/0x1815 [ 1701.906177] Node 0 active_anon:912444kB inactive_anon:868272kB active_file:112kB inactive_file:0kB unevictable:44244kB isolated(anon):0kB isolated(file):0kB mapped:234792kB dirty:0kB writeback:12kB shmem:47864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 313344kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1701.909733] ? __lockdep_init_map+0x100/0x560 [ 1701.909746] mount_fs+0x92/0x2a0 [ 1701.914350] Node 1 active_anon:12624kB inactive_anon:3575980kB active_file:48kB inactive_file:96kB unevictable:9480kB isolated(anon):0kB isolated(file):0kB mapped:9316kB dirty:0kB writeback:0kB shmem:10984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1701.948233] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1701.948245] do_mount+0x3c9/0x24f0 [ 1701.948263] ? copy_mount_string+0x40/0x40 [ 1701.948272] ? __might_fault+0x177/0x1b0 [ 1701.948284] ? _copy_from_user+0x94/0x100 [ 1701.953576] Node 0 [ 1701.958091] ? memdup_user+0x54/0xa0 [ 1701.958099] ? copy_mount_options+0x1ec/0x2e0 [ 1701.958107] ? copy_mnt_ns+0x8a0/0x8a0 [ 1701.958118] SyS_mount+0xa8/0x120 [ 1701.962266] DMA free:10448kB min:220kB low:272kB high:324kB active_anon:648kB inactive_anon:4288kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1701.966626] ? copy_mnt_ns+0x8a0/0x8a0 [ 1701.966639] do_syscall_64+0x1d5/0x640 [ 1701.966655] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1701.966663] RIP: 0033:0x45ca29 [ 1701.970382] lowmem_reserve[]: [ 1701.998696] RSP: 002b:00007fb72a6d0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1701.998706] RAX: ffffffffffffffda RBX: 00000000004f6280 RCX: 000000000045ca29 [ 1701.998711] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000480 [ 1701.998717] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1701.998722] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1701.998727] R13: 0000000000000751 R14: 00000000004ca3aa R15: 00007fb72a6d16d4 [ 1701.998741] [ 1702.003250] 0 [ 1702.006549] Allocated by task 26229: [ 1702.006559] save_stack+0x32/0xa0 [ 1702.006566] kasan_kmalloc+0xbf/0xe0 [ 1702.006573] kmem_cache_alloc_trace+0x14d/0x7b0 [ 1702.006583] ceph_parse_options+0xb8/0xe80 [ 1702.034181] 2557 [ 1702.038623] ceph_mount+0x44f/0x1815 [ 1702.038631] mount_fs+0x92/0x2a0 [ 1702.038638] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1702.038644] do_mount+0x3c9/0x24f0 [ 1702.038653] SyS_mount+0xa8/0x120 [ 1702.042184] 2557 [ 1702.046372] do_syscall_64+0x1d5/0x640 [ 1702.046381] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1702.046384] [ 1702.046388] Freed by task 26229: [ 1702.046413] save_stack+0x32/0xa0 [ 1702.046420] kasan_slab_free+0x75/0xc0 [ 1702.046426] kfree+0xcb/0x260 [ 1702.046433] ceph_destroy_client+0x90/0xb0 [ 1702.046445] ceph_mount+0xd25/0x1815 [ 1702.050500] 2557 [ 1702.054602] mount_fs+0x92/0x2a0 [ 1702.054609] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1702.054616] do_mount+0x3c9/0x24f0 [ 1702.054621] SyS_mount+0xa8/0x120 [ 1702.054630] do_syscall_64+0x1d5/0x640 [ 1702.056880] 2557 [ 1702.060533] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1702.060535] [ 1702.060542] The buggy address belongs to the object at ffff8880882dc500 [ 1702.060542] which belongs to the cache kmalloc-256 of size 256 [ 1702.060551] The buggy address is located 208 bytes inside of [ 1702.060551] 256-byte region [ffff8880882dc500, ffff8880882dc600) [ 1702.068875] The buggy address belongs to the page: [ 1702.068883] page:ffffea000220b700 count:1 mapcount:0 mapping:ffff8880882dc000 index:0x0 [ 1702.068892] flags: 0xfffe0000000100(slab) [ 1702.068903] raw: 00fffe0000000100 ffff8880882dc000 0000000000000000 000000010000000c [ 1702.068913] raw: ffffea00027dc5a0 ffffea00023caa20 ffff88812fe547c0 0000000000000000 [ 1702.072359] Node 0 [ 1702.098429] page dumped because: kasan: bad access detected [ 1702.098432] [ 1702.098435] Memory state around the buggy address: [ 1702.098443] ffff8880882dc480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1702.098450] ffff8880882dc500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1702.098456] >ffff8880882dc580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1702.098461] ^ [ 1702.098467] ffff8880882dc600: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1702.098474] ffff8880882dc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1702.102370] DMA32 free:36028kB min:36272kB low:45340kB high:54408kB active_anon:911896kB inactive_anon:863984kB active_file:0kB inactive_file:456kB unevictable:44252kB writepending:60kB present:3129332kB managed:2621260kB mlocked:44252kB kernel_stack:10016kB pagetables:17596kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1702.106191] ================================================================== [ 1702.106195] Disabling lock debugging due to kernel taint [ 1702.111930] Kernel panic - not syncing: panic_on_warn set ... [ 1702.111930] [ 1702.126527] lowmem_reserve[]: [ 1702.132559] CPU: 0 PID: 26229 Comm: syz-executor.1 Tainted: G B 4.14.180-syzkaller #0 [ 1702.132567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1702.139850] 0 [ 1702.147055] Call Trace: [ 1702.147071] dump_stack+0x13e/0x194 [ 1702.147083] panic+0x1f9/0x42d [ 1702.154341] 0 [ 1702.161571] ? add_taint.cold+0x16/0x16 [ 1702.161580] ? preempt_schedule_common+0x4a/0xc0 [ 1702.161591] ? ceph_destroy_options+0xda/0x100 [ 1702.163211] 0 [ 1702.164971] ? ___preempt_schedule+0x16/0x18 [ 1702.164981] ? ceph_destroy_options+0xda/0x100 [ 1702.168706] 0 [ 1702.172096] kasan_end_report+0x43/0x49 [ 1702.172105] kasan_report.cold+0x12f/0x2ae [ 1702.175807] 0 [ 1702.180437] ceph_destroy_options+0xda/0x100 [ 1702.180447] ceph_mount+0xd4c/0x1815 [ 1702.180459] ? __lockdep_init_map+0x100/0x560 [ 1702.186704] mount_fs+0x92/0x2a0 [ 1702.186714] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1702.186724] do_mount+0x3c9/0x24f0 [ 1702.190424] Node 0 [ 1702.193752] ? copy_mount_string+0x40/0x40 [ 1702.193764] ? __might_fault+0x177/0x1b0 [ 1702.198259] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1702.201750] ? _copy_from_user+0x94/0x100 [ 1702.201759] ? memdup_user+0x54/0xa0 [ 1702.205198] lowmem_reserve[]: [ 1702.207218] ? copy_mount_options+0x1ec/0x2e0 [ 1702.207226] ? copy_mnt_ns+0x8a0/0x8a0 [ 1702.207238] SyS_mount+0xa8/0x120 [ 1702.211103] 0 [ 1702.216253] ? copy_mnt_ns+0x8a0/0x8a0 [ 1702.216264] do_syscall_64+0x1d5/0x640 [ 1702.216275] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1702.217888] 0 [ 1702.221215] RIP: 0033:0x45ca29 [ 1702.221220] RSP: 002b:00007fb72a6d0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1702.224671] 0 [ 1702.228513] RAX: ffffffffffffffda RBX: 00000000004f6280 RCX: 000000000045ca29 [ 1702.228517] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000480 [ 1702.228522] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1702.228526] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1702.228532] R13: 0000000000000751 R14: 00000000004ca3aa R15: 00007fb72a6d16d4 [ 1702.231619] 0 [ 1702.237118] Kernel Offset: disabled [ 1702.655861] Rebooting in 86400 seconds..