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", 0x1000}, {&(0x7f00000012c0)="43bf376d4450b21988fa49258219d66fd2c5a8595502f96cba201b3d84a95988968d490805cd45848bf1ca8b529a26f7e60a296450bc43800f3c7a49aac6a7d52379996fed5d60bebcba73f40e637e1935a68d36087f356150113c7c79bc5e", 0x5f}, {&(0x7f0000001340)="c4c1f29eb4e8ec62a51d3b2be673a8e1d3e1201274695fc257d3e6777427454da7d40ae0c658a728da9b12f93d94439ccc7a11b5cc6e6f93a770e7a6791b36356d55a6f4599f3e42f2cde851b11ccce6ed8d43aec681d15a5dacc177250f703bf8c192b0fe090481d65e535b64f19f5cab247ad76c3332ff6178c8ef29", 0x7d}, {&(0x7f00000013c0)="dea2b0497f75dc8c29ff0ffcb5e9713cefe1a9372d7fa7d84d3ebfd369500a172148e0f065a7deea7bf2f1267892101afae0683e1b0465154b8cd080797ef8a29fe52105ba5faffacf35625d63fcc741765327f2a4eff2de8b4811b53b5a8bce015fb2376210ddcdba2931ab28a6b8317c685a", 0x73}, {&(0x7f0000001440)="75b1be443f50bb33dfe239be66d7a6db6638c8ef710d737dac2071cdadbf7406c320412ed1d8ef869515f3f671766d7c0960d1e1e52ed9231371be49238184969922bde1fe74c9f88b1846176637d472cfd5df0ce4412242d655e2e8bd7a8ba2c4bd8b4d0b076c82f90a3b246b6c5819c87e3c308e2eec99ccc5e4db1bd5b123d5b44949994359324439c0799024ec", 0x8f}, {&(0x7f0000001500)="a4a228fbce48e8f95087e8", 0xb}, {&(0x7f0000001540)="da37cf695f691233dba7cdd383d4be4a4a15d65ffaa045bf10b052b981b243e994e384e2e095dcd0d793028d2ca9842636a8e9957727d3526e4dfe727a09a41d74ea5985b85edb001ee50dbb127268525754bdf8ac958db4309f951dd43cba8c2099aba2f17f0a6b66", 0x69}], 0x8, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 673.673412] ALSA: mixer_oss: invalid OSS volume '' [ 674.106837] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 674.129694] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 674.140542] CPU: 0 PID: 23254 Comm: syz-executor.5 Not tainted 4.14.189-syzkaller #0 [ 674.148429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.157773] Call Trace: [ 674.160342] dump_stack+0x1b2/0x283 [ 674.163950] dump_header+0x178/0x82f [ 674.167643] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 674.172723] ? ___ratelimit+0x2cd/0x522 [ 674.177458] oom_kill_process.cold+0x10/0xa69 [ 674.181944] ? lock_downgrade+0x740/0x740 [ 674.186072] out_of_memory+0x2dc/0x1190 [ 674.190025] ? oom_killer_disable+0x1c0/0x1c0 [ 674.194499] ? mutex_trylock+0x152/0x1a0 [ 674.198627] __alloc_pages_nodemask+0x23e1/0x2720 [ 674.203477] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 674.208296] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 674.213139] ? trace_hardirqs_on+0x10/0x10 [ 674.217363] ? cache_grow_begin+0x3f/0x420 [ 674.221576] cache_grow_begin+0x8f/0x420 [ 674.225614] ? mempolicy_slab_node+0x100/0x320 [ 674.230175] fallback_alloc+0x207/0x2c0 [ 674.234127] kmem_cache_alloc+0x1e5/0x3c0 [ 674.238257] getname_flags+0xc8/0x550 [ 674.242037] SyS_symlinkat+0x6d/0x240 [ 674.245817] ? SyS_symlinkat+0x240/0x240 [ 674.249855] ? SyS_unlink+0x20/0x20 [ 674.253474] ? do_syscall_64+0x4c/0x640 [ 674.257426] ? SyS_symlinkat+0x240/0x240 [ 674.261463] do_syscall_64+0x1d5/0x640 [ 674.265331] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 674.270514] RIP: 0033:0x45c0f7 [ 674.273679] RSP: 002b:00007ffd08b08328 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 674.281383] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c0f7 [ 674.288629] RDX: 00007ffd08b083c3 RSI: 00000000004c1ed4 RDI: 00007ffd08b083b0 [ 674.295875] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000013 [ 674.303122] R10: 0000000000000075 R11: 0000000000000206 R12: 0000000000000001 [ 674.310376] R13: 00007ffd08b08360 R14: 0000000000000000 R15: 00007ffd08b08370 [ 674.336997] Mem-Info: [ 674.339486] active_anon:1338820 inactive_anon:9168 isolated_anon:0 [ 674.339486] active_file:124 inactive_file:130 isolated_file:8 [ 674.339486] unevictable:0 dirty:0 writeback:0 unstable:0 [ 674.339486] slab_reclaimable:16984 slab_unreclaimable:117292 [ 674.339486] mapped:53423 shmem:9380 pagetables:16704 bounce:0 [ 674.339486] free:22935 free_pcp:167 free_cma:0 [ 674.376566] Node 0 active_anon:1933152kB inactive_anon:36648kB active_file:28kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212800kB dirty:0kB writeback:0kB shmem:37492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1310720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 674.404701] Node 1 active_anon:3422128kB inactive_anon:24kB active_file:104kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:0kB dirty:0kB writeback:8kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 674.431460] Node 0 DMA free:10356kB min:220kB low:272kB high:324kB active_anon:4724kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 674.459607] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 674.464651] Node 0 DMA32 free:27336kB min:36272kB low:45340kB high:54408kB active_anon:1928428kB inactive_anon:36648kB active_file:32kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10432kB pagetables:22652kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 674.493605] lowmem_reserve[]: 0 0 0 0 0 [ 674.497716] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 674.523304] lowmem_reserve[]: 0 0 0 0 0 [ 674.527475] Node 1 Normal free:55184kB min:53612kB low:67012kB high:80412kB active_anon:3421728kB inactive_anon:24kB active_file:376kB inactive_file:192kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:13952kB pagetables:44164kB bounce:0kB free_pcp:392kB local_pcp:44kB free_cma:0kB [ 674.556902] lowmem_reserve[]: 0 0 0 0 0 [ 674.560970] Node 0 DMA: 3*4kB (UME) 7*8kB (UM) 3*16kB (U) 15*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10388kB [ 674.596785] Node 0 DMA32: 256*4kB (UME) 275*8kB (UME) 484*16kB (UME) 267*32kB (UM) 5*64kB (UME) 8*128kB (ME) 6*256kB (ME) 4*512kB (M) 3*1024kB (ME) 0*2048kB 0*4096kB = 27512kB [ 674.632060] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 674.655680] Node 1 Normal: 151*4kB (UEH) 225*8kB (UE) 117*16kB (UMEH) 55*32kB (UMEH) 108*64kB (UMEH) 154*128kB (UM) 28*256kB (M) 8*512kB (UM) 3*1024kB (M) 3*2048kB (M) 0*4096kB = 53140kB [ 674.673910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 674.682983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 674.692097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 674.703314] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 674.713517] 10048 total pagecache pages [ 674.722503] 0 pages in swap cache [ 674.726733] Swap cache stats: add 0, delete 0, find 0/0 [ 674.732910] Free swap = 0kB [ 674.737821] Total swap = 0kB [ 674.741628] 1965979 pages RAM [ 674.744739] 0 pages HighMem/MovableOnly [ 674.748842] 339056 pages reserved [ 674.752296] 0 pages cma reserved [ 674.757509] Out of memory: Kill process 23259 (syz-executor.0) score 1007 or sacrifice child [ 674.766422] Killed process 23259 (syz-executor.0) total-vm:75632kB, anon-rss:16604kB, file-rss:34836kB, shmem-rss:0kB [ 674.823656] oom_reaper: reaped process 23259 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:52:08 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:08 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={r3, 0xffffffffffffffff, 0x6}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:08 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000280)={@none, 0x8, 0x7ff, 0xc9, 0x40, 0x40, "26985665577c7d2673d6cb0afe1965a086c0258fc099303d67fb56d893d40a7718830d2fb0fd6c774ce2ec84e58e594fcc379400354d6a7199696a53696ad18b3d8a1c466ea55d5ad3ee9fbf2ce5b524f7dc125d73db2c7eeda0658d2fffb94c64d15aa0e2e662ff7aa984ecd42c5f0d7860ca4a9c4fcdd28d787b05299a919e"}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) semget$private(0x0, 0x0, 0x444) [ 675.437780] ALSA: mixer_oss: invalid OSS volume '' 06:52:08 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:08 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 675.759592] ALSA: mixer_oss: invalid OSS volume '' 06:52:09 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:09 executing program 5: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x3ff, @dev={0xfe, 0x80, [], 0x2d}, 0x2}}, 0x7, 0x5841}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x7f, 0x8000, 0x3, 0x1ff}, &(0x7f0000000200)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x6, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 676.990081] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 677.015708] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 677.046794] CPU: 0 PID: 23308 Comm: syz-executor.4 Not tainted 4.14.189-syzkaller #0 [ 677.054687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.064034] Call Trace: [ 677.066613] dump_stack+0x1b2/0x283 [ 677.070240] dump_header+0x178/0x82f [ 677.073947] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 677.079044] ? ___ratelimit+0x2cd/0x522 [ 677.083015] oom_kill_process.cold+0x10/0xa69 [ 677.087508] ? lock_downgrade+0x740/0x740 [ 677.091646] out_of_memory+0x2dc/0x1190 [ 677.095609] ? oom_killer_disable+0x1c0/0x1c0 [ 677.100094] ? mutex_trylock+0x152/0x1a0 [ 677.104158] __alloc_pages_nodemask+0x23e1/0x2720 [ 677.108991] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 677.113810] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 677.118631] ? trace_hardirqs_on+0x10/0x10 [ 677.122851] ? cache_grow_begin+0x3f/0x420 [ 677.127062] cache_grow_begin+0x8f/0x420 [ 677.131099] ? mempolicy_slab_node+0x100/0x320 [ 677.135658] fallback_alloc+0x207/0x2c0 [ 677.139612] kmem_cache_alloc+0x1e5/0x3c0 [ 677.143737] getname_flags+0xc8/0x550 [ 677.147513] ? SyS_access+0x20/0x20 [ 677.151115] user_path_at_empty+0x2a/0x50 [ 677.155238] SyS_chdir+0x7e/0x1a0 [ 677.158667] ? SyS_access+0x20/0x20 [ 677.162268] ? __do_page_fault+0x19a/0xb50 [ 677.166488] ? do_syscall_64+0x4c/0x640 [ 677.170448] ? SyS_access+0x20/0x20 [ 677.174053] do_syscall_64+0x1d5/0x640 [ 677.177932] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 677.183110] RIP: 0033:0x45b9b7 [ 677.186286] RSP: 002b:00007ffe402d59f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 677.193972] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045b9b7 [ 677.201218] RDX: 0000000000000001 RSI: 0000000000746e70 RDI: 00007ffe402d5a40 [ 677.208466] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000cc7940 [ 677.215713] R10: 0000000000cc7c10 R11: 0000000000000246 R12: 0000000000000000 [ 677.222972] R13: 00007ffe402d5a30 R14: 0000000000000000 R15: 00007ffe402d5a40 [ 677.251996] Mem-Info: [ 677.254435] active_anon:1338764 inactive_anon:9169 isolated_anon:0 [ 677.254435] active_file:35 inactive_file:20 isolated_file:3 [ 677.254435] unevictable:0 dirty:0 writeback:0 unstable:0 [ 677.254435] slab_reclaimable:17022 slab_unreclaimable:117342 [ 677.254435] mapped:53206 shmem:9380 pagetables:16756 bounce:0 [ 677.254435] free:22961 free_pcp:29 free_cma:0 [ 677.289082] Node 0 active_anon:1932208kB inactive_anon:36648kB active_file:16kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:212924kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1310720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 677.317241] Node 1 active_anon:3423184kB inactive_anon:28kB active_file:68kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:4kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 677.343847] Node 0 DMA free:10356kB min:220kB low:272kB high:324kB active_anon:4724kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 677.372075] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 677.386763] Node 0 DMA32 free:28068kB min:36272kB low:45340kB high:54408kB active_anon:1927484kB inactive_anon:36648kB active_file:16kB inactive_file:204kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10464kB pagetables:22648kB bounce:0kB free_pcp:36kB local_pcp:36kB free_cma:0kB [ 677.416444] lowmem_reserve[]: 0 0 0 0 0 [ 677.420440] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 677.446645] lowmem_reserve[]: 0 0 0 0 0 [ 677.450638] Node 1 Normal free:53304kB min:53612kB low:67012kB high:80412kB active_anon:3423224kB inactive_anon:28kB active_file:108kB inactive_file:156kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14208kB pagetables:44380kB bounce:0kB free_pcp:176kB local_pcp:0kB free_cma:0kB [ 677.479866] lowmem_reserve[]: 0 0 0 0 0 [ 677.483862] Node 0 DMA: 3*4kB (UME) 7*8kB (UM) 3*16kB (U) 14*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10356kB [ 677.501009] Node 0 DMA32: 369*4kB (UME) 286*8kB (UME) 494*16kB (UME) 267*32kB (UM) 5*64kB (UME) 8*128kB (ME) 6*256kB (ME) 4*512kB (M) 3*1024kB (ME) 0*2048kB 0*4096kB = 28212kB [ 677.527335] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 677.539795] Node 1 Normal: 179*4kB (UMEH) 388*8kB (UME) 137*16kB (UMEH) 36*32kB (UMEH) 99*64kB (UMEH) 154*128kB (UM) 28*256kB (M) 8*512kB (UM) 3*1024kB (M) 3*2048kB (M) 0*4096kB = 53692kB [ 677.556828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.565673] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 677.574222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.583096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 677.591699] 9421 total pagecache pages [ 677.595601] 0 pages in swap cache [ 677.599027] Swap cache stats: add 0, delete 0, find 0/0 [ 677.604359] Free swap = 0kB [ 677.607392] Total swap = 0kB [ 677.610392] 1965979 pages RAM [ 677.613495] 0 pages HighMem/MovableOnly [ 677.618083] 339056 pages reserved [ 677.621517] 0 pages cma reserved [ 677.624855] Out of memory: Kill process 23304 (syz-executor.0) score 1007 or sacrifice child [ 677.634996] Killed process 23304 (syz-executor.0) total-vm:75500kB, anon-rss:16592kB, file-rss:34816kB, shmem-rss:0kB [ 677.704370] oom_reaper: reaped process 23304 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 677.765103] ALSA: mixer_oss: invalid OSS volume '' 06:52:11 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f00000002c0)={0x81, 0x0, [0x3, 0x4, 0x937, 0x81]}) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:11 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:11 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f0000000280)=0x2, 0x8b, 0x2, &(0x7f00000002c0), &(0x7f0000000300), 0x1) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f0000000380)={0x0, {0x2, 0x7}}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000200)=0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:52:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000200)={0xdd0d, 0xffff, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 678.808544] ALSA: mixer_oss: invalid OSS volume '' [ 679.730139] syz-executor.2 invoked oom-killer: gfp_mask=0x15200c2(GFP_HIGHUSER|__GFP_ACCOUNT), nodemask=(null), order=0, oom_score_adj=1000 [ 679.743623] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 679.756747] CPU: 0 PID: 23346 Comm: syz-executor.2 Not tainted 4.14.189-syzkaller #0 [ 679.764642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.773984] Call Trace: [ 679.776571] dump_stack+0x1b2/0x283 [ 679.780200] dump_header+0x178/0x82f [ 679.783911] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 679.789006] ? ___ratelimit+0x2cd/0x522 [ 679.792964] oom_kill_process.cold+0x10/0xa69 [ 679.797443] ? lock_downgrade+0x740/0x740 [ 679.801572] out_of_memory+0x2dc/0x1190 [ 679.805535] ? oom_killer_disable+0x1c0/0x1c0 [ 679.810010] ? mutex_trylock+0x152/0x1a0 [ 679.814053] __alloc_pages_nodemask+0x23e1/0x2720 [ 679.818885] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 679.823704] ? lock_acquire+0x170/0x3f0 [ 679.827678] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 679.833122] ? avc_has_perm+0x1a4/0x330 [ 679.837092] alloc_pages_current+0x155/0x260 [ 679.841482] pipe_write+0x920/0xe10 [ 679.845099] __vfs_write+0x44c/0x630 [ 679.848793] ? kernel_read+0x110/0x110 [ 679.852927] ? rw_verify_area+0xe1/0x2a0 [ 679.856968] vfs_write+0x17f/0x4d0 [ 679.860490] SyS_write+0xf2/0x210 [ 679.863950] ? SyS_read+0x210/0x210 [ 679.867558] ? do_syscall_64+0x4c/0x640 [ 679.871510] ? SyS_read+0x210/0x210 [ 679.875120] do_syscall_64+0x1d5/0x640 [ 679.879008] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 679.884183] RIP: 0033:0x45c369 [ 679.887356] RSP: 002b:00007f9b33158c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 679.895050] RAX: ffffffffffffffda RBX: 0000000000034f00 RCX: 000000000045c369 [ 679.902305] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000005 [ 679.909555] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 679.916806] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 679.924054] R13: 00007fff926dab3f R14: 00007f9b331599c0 R15: 000000000078bf0c [ 679.945293] Mem-Info: [ 679.947849] active_anon:1338880 inactive_anon:9169 isolated_anon:0 [ 679.947849] active_file:19 inactive_file:46 isolated_file:12 [ 679.947849] unevictable:0 dirty:0 writeback:0 unstable:0 [ 679.947849] slab_reclaimable:17020 slab_unreclaimable:117815 [ 679.947849] mapped:53251 shmem:9380 pagetables:16760 bounce:0 [ 679.947849] free:22676 free_pcp:11 free_cma:0 [ 679.987119] Node 0 active_anon:1932488kB inactive_anon:36648kB active_file:0kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212908kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1310720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 680.020290] Node 1 active_anon:3423032kB inactive_anon:28kB active_file:80kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 680.048122] Node 0 DMA free:10356kB min:220kB low:272kB high:324kB active_anon:4724kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.080112] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 680.085164] Node 0 DMA32 free:28092kB min:36272kB low:45340kB high:54408kB active_anon:1927764kB inactive_anon:36648kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10336kB pagetables:22648kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.128635] lowmem_reserve[]: 0 0 0 0 0 [ 680.132638] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.160236] lowmem_reserve[]: 0 0 0 0 0 [ 680.164228] Node 1 Normal free:52820kB min:53612kB low:67012kB high:80412kB active_anon:3423032kB inactive_anon:28kB active_file:100kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14112kB pagetables:44392kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.195301] lowmem_reserve[]: 0 0 0 0 0 [ 680.199294] Node 0 DMA: 3*4kB (UME) 7*8kB (UM) 3*16kB (U) 14*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10356kB [ 680.217708] Node 0 DMA32: 369*4kB (UME) 247*8kB (UME) 498*16kB (UME) 271*32kB (UM) 5*64kB (UME) 8*128kB (ME) 6*256kB (ME) 4*512kB (M) 3*1024kB (ME) 0*2048kB 0*4096kB = 28092kB [ 680.233646] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 680.244463] Node 1 Normal: 631*4kB (UMEH) 259*8kB (UMEH) 98*16kB (UMEH) 28*32kB (UMEH) 103*64kB (UMEH) 154*128kB (UM) 28*256kB (M) 8*512kB (UM) 4*1024kB (UM) 2*2048kB (M) 0*4096kB = 52820kB [ 680.261612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 680.270474] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 680.279082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 680.295053] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 680.303679] 9413 total pagecache pages [ 680.311814] 0 pages in swap cache [ 680.315318] Swap cache stats: add 0, delete 0, find 0/0 [ 680.320668] Free swap = 0kB [ 680.323675] Total swap = 0kB [ 680.330965] 1965979 pages RAM [ 680.334062] 0 pages HighMem/MovableOnly [ 680.338089] 339056 pages reserved [ 680.341528] 0 pages cma reserved [ 680.344877] Out of memory: Kill process 23334 (syz-executor.0) score 1007 or sacrifice child [ 680.360452] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 680.391286] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 680.413684] CPU: 1 PID: 6373 Comm: syz-executor.3 Not tainted 4.14.189-syzkaller #0 [ 680.421479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.430823] Call Trace: [ 680.433400] dump_stack+0x1b2/0x283 [ 680.437028] dump_header+0x178/0x82f [ 680.440740] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 680.445833] ? ___ratelimit+0x2cd/0x522 [ 680.449802] oom_kill_process.cold+0x10/0xa69 [ 680.454282] ? lock_downgrade+0x740/0x740 [ 680.458417] out_of_memory+0x2dc/0x1190 [ 680.462471] ? oom_killer_disable+0x1c0/0x1c0 [ 680.466957] ? mutex_trylock+0x152/0x1a0 [ 680.471013] __alloc_pages_nodemask+0x23e1/0x2720 [ 680.475862] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 680.480715] alloc_pages_current+0x155/0x260 [ 680.485112] filemap_fault+0xe12/0x18d0 [ 680.489080] ext4_filemap_fault+0x84/0xb0 [ 680.493215] __do_fault+0xfa/0x380 [ 680.496744] __handle_mm_fault+0x2497/0x4620 [ 680.501144] ? vm_insert_page+0x7c0/0x7c0 [ 680.505284] ? free_object+0xe4/0x240 [ 680.509091] handle_mm_fault+0x306/0x7a0 [ 680.513148] __do_page_fault+0x578/0xb50 [ 680.517205] ? spurious_fault+0x640/0x640 [ 680.521342] ? do_page_fault+0x60/0x4f2 [ 680.525307] ? page_fault+0x2f/0x50 [ 680.528922] page_fault+0x45/0x50 [ 680.532369] RIP: 7fbbc990:0xa5b9a [ 680.535810] RSP: a5e77:00000000000007c1 EFLAGS: 00000007 [ 680.553673] Mem-Info: [ 680.578744] active_anon:1338880 inactive_anon:9169 isolated_anon:0 [ 680.578744] active_file:27 inactive_file:0 isolated_file:0 [ 680.578744] unevictable:0 dirty:0 writeback:0 unstable:0 [ 680.578744] slab_reclaimable:17020 slab_unreclaimable:117792 [ 680.578744] mapped:53217 shmem:9380 pagetables:16760 bounce:0 [ 680.578744] free:22817 free_pcp:0 free_cma:0 [ 680.624805] Node 0 active_anon:1932488kB inactive_anon:36648kB active_file:0kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212868kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1310720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 680.667252] Node 1 active_anon:3423032kB inactive_anon:28kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 680.707197] Node 0 DMA free:10356kB min:220kB low:272kB high:324kB active_anon:4724kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.746513] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 680.751658] Node 0 DMA32 free:28092kB min:36272kB low:45340kB high:54408kB active_anon:1927764kB inactive_anon:36648kB active_file:0kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10336kB pagetables:22648kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.793204] lowmem_reserve[]: 0 0 0 0 0 [ 680.801520] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.840507] lowmem_reserve[]: 0 0 0 0 0 [ 680.844508] Node 1 Normal free:52820kB min:53612kB low:67012kB high:80412kB active_anon:3423032kB inactive_anon:28kB active_file:64kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14112kB pagetables:44392kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.886186] lowmem_reserve[]: 0 0 0 0 0 [ 680.890192] Node 0 DMA: 3*4kB (UME) 7*8kB (UM) 3*16kB (U) 14*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10356kB [ 680.918606] Node 0 DMA32: 369*4kB (UME) 247*8kB (UME) 498*16kB (UME) 271*32kB (UM) 5*64kB (UME) 8*128kB (ME) 6*256kB (ME) 4*512kB (M) 3*1024kB (ME) 0*2048kB 0*4096kB = 28092kB [ 680.947333] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 680.971843] Node 1 Normal: 631*4kB (UMEH) 265*8kB (UMEH) 99*16kB (UMEH) 28*32kB (UMEH) 103*64kB (UMEH) 154*128kB (UM) 28*256kB (M) 8*512kB (UM) 4*1024kB (UM) 2*2048kB (M) 0*4096kB = 52884kB [ 680.997463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 681.010583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 681.023431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 681.039579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 681.050368] 9413 total pagecache pages [ 681.054252] 0 pages in swap cache [ 681.057727] Swap cache stats: add 0, delete 0, find 0/0 [ 681.063071] Free swap = 0kB [ 681.068226] Total swap = 0kB [ 681.071238] 1965979 pages RAM [ 681.074326] 0 pages HighMem/MovableOnly [ 681.078302] 339056 pages reserved [ 681.081725] 0 pages cma reserved [ 681.085065] Out of memory: Kill process 23349 (syz-executor.0) score 1007 or sacrifice child [ 681.094480] Killed process 23349 (syz-executor.0) total-vm:75368kB, anon-rss:16584kB, file-rss:34816kB, shmem-rss:0kB [ 681.173653] oom_reaper: reaped process 23349 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:52:14 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) [ 682.169901] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 682.208954] systemd-udevd cpuset=/ mems_allowed=0-1 [ 682.233229] CPU: 0 PID: 3650 Comm: systemd-udevd Not tainted 4.14.189-syzkaller #0 [ 682.240951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.250294] Call Trace: [ 682.252877] dump_stack+0x1b2/0x283 [ 682.256501] dump_header+0x178/0x82f [ 682.260209] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 682.265305] ? ___ratelimit+0x2cd/0x522 [ 682.269275] oom_kill_process.cold+0x10/0xa69 [ 682.273765] ? lock_downgrade+0x740/0x740 [ 682.277908] out_of_memory+0x2dc/0x1190 [ 682.281877] ? oom_killer_disable+0x1c0/0x1c0 [ 682.286365] ? mutex_trylock+0x152/0x1a0 [ 682.290422] __alloc_pages_nodemask+0x23e1/0x2720 [ 682.295269] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 682.300189] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 682.305125] ? trace_hardirqs_on+0x10/0x10 [ 682.309361] ? cache_grow_begin+0x3f/0x420 [ 682.313592] cache_grow_begin+0x8f/0x420 [ 682.317643] ? mempolicy_slab_node+0x100/0x320 [ 682.322218] fallback_alloc+0x207/0x2c0 [ 682.326187] kmem_cache_alloc+0x1e5/0x3c0 [ 682.330329] getname_flags+0xc8/0x550 [ 682.334129] do_sys_open+0x1ce/0x410 [ 682.337838] ? filp_open+0x60/0x60 [ 682.341378] ? do_syscall_64+0x4c/0x640 [ 682.345339] ? do_sys_open+0x410/0x410 [ 682.349207] do_syscall_64+0x1d5/0x640 [ 682.353073] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 682.358243] RIP: 0033:0x7fc45fd009b1 [ 682.361933] RSP: 002b:00007ffc2f55b208 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 682.369619] RAX: ffffffffffffffda RBX: 000055ba872148a0 RCX: 00007fc45fd009b1 [ 682.376871] RDX: 00000000000000fd RSI: 0000000000090800 RDI: 000055ba871fba30 [ 682.384206] RBP: 00007fc460eb5710 R08: 000055ba871e3b70 R09: 0000000000001010 [ 682.391449] R10: 00007fc45ffe6b58 R11: 0000000000000202 R12: 0000000000000000 [ 682.398694] R13: 000055ba871fba30 R14: 00000000000000fd R15: 000055ba871fba30 [ 682.418322] Mem-Info: [ 682.463425] active_anon:1336556 inactive_anon:9168 isolated_anon:0 [ 682.463425] active_file:13 inactive_file:20 isolated_file:0 [ 682.463425] unevictable:0 dirty:0 writeback:5 unstable:0 [ 682.463425] slab_reclaimable:17020 slab_unreclaimable:118045 [ 682.463425] mapped:53252 shmem:9380 pagetables:16700 bounce:0 [ 682.463425] free:24617 free_pcp:164 free_cma:0 [ 682.506495] Node 0 active_anon:1925900kB inactive_anon:36648kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212868kB dirty:0kB writeback:4kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1306624kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 682.534608] Node 1 active_anon:3421136kB inactive_anon:24kB active_file:140kB inactive_file:328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:16kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 682.570357] Node 0 DMA free:10356kB min:220kB low:272kB high:324kB active_anon:4724kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.597747] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 682.603312] Node 0 DMA32 free:34736kB min:36272kB low:45340kB high:54408kB active_anon:1921176kB inactive_anon:36648kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10336kB pagetables:22636kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.649175] lowmem_reserve[]: 0 0 0 0 0 [ 682.653205] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.703994] lowmem_reserve[]: 0 0 0 0 0 [ 682.714740] Node 1 Normal free:53296kB min:53612kB low:67012kB high:80412kB active_anon:3421144kB inactive_anon:24kB active_file:220kB inactive_file:320kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:13952kB pagetables:44164kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.775182] lowmem_reserve[]: 0 0 0 0 0 [ 682.791757] Node 0 DMA: 3*4kB (UME) 7*8kB (UM) 3*16kB (U) 14*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10356kB [ 682.814524] Node 0 DMA32: 776*4kB (UME) 362*8kB (UME) 498*16kB (UME) 271*32kB (UM) 5*64kB (UME) 8*128kB (ME) 6*256kB (ME) 4*512kB (M) 3*1024kB (ME) 0*2048kB 1*4096kB (M) = 34736kB [ 682.835701] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 682.846463] Node 1 Normal: 244*4kB (UMEH) 88*8kB (UMEH) 135*16kB (MEH) 78*32kB (UMEH) 125*64kB (UMEH) 154*128kB (UM) 28*256kB (M) 8*512kB (UM) 4*1024kB (UM) 2*2048kB (M) 0*4096kB = 53504kB [ 682.867692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 682.889617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 682.900788] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 682.912973] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 682.939791] 9402 total pagecache pages [ 682.943689] 0 pages in swap cache [ 682.962163] Swap cache stats: add 0, delete 0, find 0/0 [ 682.971689] Free swap = 0kB [ 682.974702] Total swap = 0kB [ 682.983751] 1965979 pages RAM [ 682.991068] 0 pages HighMem/MovableOnly [ 682.997153] 339056 pages reserved [ 683.000606] 0 pages cma reserved [ 683.003964] Out of memory: Kill process 16270 (syz-executor.0) score 1007 or sacrifice child [ 683.014644] Killed process 16270 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB 06:52:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd4, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9dde}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb796}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6f}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88b5}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x401}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40090}, 0x4049810) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:16 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) close(r1) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:16 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:16 executing program 3: getpid() r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) [ 683.107201] oom_reaper: reaped process 16270 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 683.119365] ALSA: mixer_oss: invalid OSS volume '' 06:52:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffc, 0x0, 0x401, 0x0, 0x5, 0x0, 0x1ff}, 0x0, &(0x7f0000000200)={0xffc, 0x3, 0x9, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:16 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:16 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:16 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 683.179815] ALSA: mixer_oss: invalid OSS volume 'dev/net/tun' [ 683.244009] ALSA: mixer_oss: invalid OSS volume 'dev/net/tun' 06:52:16 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="f4ca200dcaf911c2f7e435aa49437397a8054be40cd1814173a4f11d482debd98f3c", 0x22}], 0x1, 0x8) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x3, 0x1, 0x40000, 0x3, 0x0, 0x0, 0xe698, 0x101, 0xfe}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:16 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f00000002c0)=0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x2, 0x10, 0x40000, 0x7, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000002c0)={0x4, 0x91000000, 0xc4, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0xc98d5b, 0x100, [], @value64=0x5}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000300)={0x8, 0x1, {0x1, 0x2, 0x4, 0x2, 0x6}, 0xb61}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:17 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 684.168352] ALSA: mixer_oss: invalid OSS volume 'dev/net/tun' 06:52:17 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000200)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0xdd2, 0xfffc, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xc000000000, 0x9}, 0x0, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x0, 0x0) 06:52:17 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:17 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:17 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000040)=""/246, 0xf6) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') dup3(r2, r1, 0x0) tkill(r0, 0x1004000000016) 06:52:17 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 06:52:17 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) [ 684.753759] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 684.801059] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 684.841552] CPU: 1 PID: 23439 Comm: syz-executor.3 Not tainted 4.14.189-syzkaller #0 [ 684.849461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.858794] Call Trace: [ 684.861367] dump_stack+0x1b2/0x283 [ 684.864990] dump_header+0x178/0x82f [ 684.868687] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 684.873888] ? ___ratelimit+0x2cd/0x522 [ 684.877850] oom_kill_process.cold+0x10/0xa69 [ 684.882335] ? lock_downgrade+0x740/0x740 [ 684.886468] out_of_memory+0x2dc/0x1190 [ 684.890432] ? oom_killer_disable+0x1c0/0x1c0 [ 684.894919] ? mutex_trylock+0x152/0x1a0 [ 684.898980] __alloc_pages_nodemask+0x23e1/0x2720 [ 684.903816] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 684.908654] alloc_pages_vma+0xd2/0x6d0 [ 684.912630] wp_page_copy+0xfcf/0x1ba0 [ 684.916507] ? _vm_normal_page+0x162/0x3b0 [ 684.920724] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 684.925234] do_wp_page+0x245/0x1db0 [ 684.928934] ? __handle_mm_fault+0x129c/0x4620 [ 684.933499] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 684.938154] __handle_mm_fault+0x234f/0x4620 [ 684.942549] ? vm_insert_page+0x7c0/0x7c0 [ 684.946682] ? mark_held_locks+0xa6/0xf0 [ 684.950730] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 684.955822] handle_mm_fault+0x306/0x7a0 [ 684.959866] __do_page_fault+0x578/0xb50 [ 684.963913] ? spurious_fault+0x640/0x640 [ 684.968069] ? do_page_fault+0x60/0x4f2 [ 684.972025] page_fault+0x25/0x50 [ 684.975458] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 684.981319] RSP: 0018:ffff8881b95c7b68 EFLAGS: 00010206 [ 684.986665] RAX: ffffed10398de400 RBX: 0000000000001000 RCX: 0000000000000500 [ 684.993914] RDX: 0000000000001000 RSI: ffff8881cc6f1b00 RDI: 0000000020070000 [ 685.001163] RBP: 000000002006f500 R08: 0000000000000000 R09: ffffed10398de3ff [ 685.008411] R10: ffff8881cc6f1fff R11: 0000000000000000 R12: ffff8881cc6f1000 [ 685.015660] R13: 00007ffffffff000 R14: 0000000020070500 R15: ffff8881b95c7df0 [ 685.022920] copyout+0x99/0xc0 [ 685.026092] copy_page_to_iter+0x324/0xca0 [ 685.030310] pipe_to_user+0xa8/0x160 [ 685.034006] __splice_from_pipe+0x326/0x7a0 [ 685.038394] ? iter_to_pipe+0x500/0x500 [ 685.042352] vmsplice_to_user+0x190/0x1b0 [ 685.046493] ? __splice_from_pipe+0x7a0/0x7a0 [ 685.050973] ? lock_downgrade+0x740/0x740 [ 685.055101] ? lock_acquire+0x170/0x3f0 [ 685.059054] ? lock_downgrade+0x740/0x740 [ 685.063183] ? __fget+0x225/0x360 [ 685.066629] SyS_vmsplice+0x12a/0x150 [ 685.070409] ? splice_from_pipe+0x120/0x120 [ 685.074711] do_syscall_64+0x1d5/0x640 [ 685.078584] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 685.083749] RIP: 0033:0x45c369 [ 685.086920] RSP: 002b:00007f2f98d53c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 685.094605] RAX: ffffffffffffffda RBX: 0000000000034dc0 RCX: 000000000045c369 [ 685.101853] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 685.109125] RBP: 000000000078bfe8 R08: 0000000000000000 R09: 0000000000000000 [ 685.116376] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 685.123625] R13: 00007ffd7fbbc71f R14: 00007f2f98d549c0 R15: 000000000078bfac [ 685.417156] Mem-Info: [ 685.420042] active_anon:1334553 inactive_anon:9169 isolated_anon:0 [ 685.420042] active_file:1259 inactive_file:1239 isolated_file:113 [ 685.420042] unevictable:0 dirty:6 writeback:0 unstable:0 [ 685.420042] slab_reclaimable:17087 slab_unreclaimable:117851 [ 685.420042] mapped:55433 shmem:9380 pagetables:16885 bounce:0 [ 685.420042] free:23584 free_pcp:461 free_cma:0 06:52:18 executing program 2: prlimit64(0x0, 0x0, &(0x7f00000002c0)={0x7, 0xffffffffffffff82}, 0x0) getpid() r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000200)="6499ddb6269821b284a18329c64df0afbcf97f81aa9ee968826d474d3d0dc7b6f240f1102ba4927dcc16e698cc52e8750d39e499779b8c9dc96a11", 0x3b) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:18 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:18 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 06:52:18 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000061400032abd7000fcdbdf2508000100020000000800010002000000080001000000000008000100000000b3c2b0000832f1b25778b47200"/83], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x8840) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x5}, 0x0, &(0x7f00000000c0)={0xffa, 0x3, 0x0, 0x3, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 685.499119] Node 0 active_anon:1932048kB inactive_anon:36648kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:213060kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 685.551243] Node 1 active_anon:3406364kB inactive_anon:28kB active_file:5004kB inactive_file:5192kB unevictable:0kB isolated(anon):0kB isolated(file):416kB mapped:8672kB dirty:124kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 06:52:18 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) [ 685.592069] Node 0 DMA free:10356kB min:220kB low:272kB high:324kB active_anon:4724kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 685.619415] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 685.625569] Node 0 DMA32 free:28756kB min:36272kB low:45340kB high:54408kB active_anon:1927412kB inactive_anon:36648kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10432kB pagetables:22628kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 685.724305] lowmem_reserve[]: 0 0 0 0 0 [ 685.729293] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 685.758112] lowmem_reserve[]: 0 0 0 0 0 [ 685.763057] Node 1 Normal free:55824kB min:53612kB low:67012kB high:80412kB active_anon:3406048kB inactive_anon:28kB active_file:4232kB inactive_file:4232kB unevictable:0kB writepending:24kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14336kB pagetables:44912kB bounce:0kB free_pcp:896kB local_pcp:184kB free_cma:0kB [ 685.796465] lowmem_reserve[]: 0 0 0 0 0 [ 685.800969] Node 0 DMA: 3*4kB (UME) 7*8kB (UM) 3*16kB (U) 14*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10356kB [ 685.818011] Node 0 DMA32: 397*4kB (UME) 144*8kB (UME) 461*16kB (UME) 275*32kB (UM) 8*64kB (UME) 8*128kB (ME) 7*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 0*2048kB 0*4096kB = 28900kB [ 685.938780] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 686.007702] Node 1 Normal: 314*4kB (UMH) 156*8kB (UMEH) 170*16kB (UMEH) 104*32kB (UMEH) 144*64kB (UMEH) 154*128kB (UM) 36*256kB (UM) 9*512kB (M) 4*1024kB (UM) 0*2048kB 0*4096kB = 55400kB [ 686.089333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 686.132679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 686.174124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 686.217391] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 686.245114] 10042 total pagecache pages [ 686.257488] 0 pages in swap cache [ 686.265801] Swap cache stats: add 0, delete 0, find 0/0 [ 686.278731] Free swap = 0kB [ 686.285259] Total swap = 0kB [ 686.291821] 1965979 pages RAM [ 686.296305] 0 pages HighMem/MovableOnly [ 686.316302] 339056 pages reserved [ 686.329327] 0 pages cma reserved [ 686.334170] Out of memory: Kill process 16318 (syz-executor.0) score 1007 or sacrifice child [ 686.342986] Killed process 16318 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 686.415257] oom_reaper: reaped process 16318 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:52:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x140c, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050c10}, 0x80) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:19 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8e, 0x0, 0x5cb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'cpu'}, {0x0, 'rdma'}]}, 0x13) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000280)="04", 0x10000a}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004fc0)={&(0x7f0000004e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) 06:52:19 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:19 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f0000000080)=0xfffffe01) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:52:19 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 06:52:19 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) [ 687.059770] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 687.110722] systemd-udevd cpuset=/ mems_allowed=0-1 [ 687.121021] CPU: 0 PID: 3650 Comm: systemd-udevd Not tainted 4.14.189-syzkaller #0 [ 687.128728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 687.138072] Call Trace: [ 687.140653] dump_stack+0x1b2/0x283 [ 687.144261] dump_header+0x178/0x82f [ 687.147954] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 687.153036] ? ___ratelimit+0x2cd/0x522 [ 687.157004] oom_kill_process.cold+0x10/0xa69 [ 687.161477] ? lock_downgrade+0x740/0x740 [ 687.165605] out_of_memory+0x2dc/0x1190 [ 687.169559] ? oom_killer_disable+0x1c0/0x1c0 [ 687.174031] ? mutex_trylock+0x152/0x1a0 [ 687.178072] __alloc_pages_nodemask+0x23e1/0x2720 [ 687.183005] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 687.187826] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 687.192646] ? trace_hardirqs_on+0x10/0x10 [ 687.196864] ? cache_grow_begin+0x3f/0x420 [ 687.201086] cache_grow_begin+0x8f/0x420 [ 687.205125] ? mempolicy_slab_node+0x100/0x320 [ 687.209693] fallback_alloc+0x207/0x2c0 [ 687.213647] kmem_cache_alloc+0x1e5/0x3c0 [ 687.217783] getname_flags+0xc8/0x550 [ 687.221563] user_path_at_empty+0x2a/0x50 [ 687.225693] vfs_statx+0xd1/0x180 [ 687.229125] ? cp_compat_stat+0x890/0x890 [ 687.233253] SyS_newlstat+0x83/0xe0 [ 687.236859] ? SyS_newstat+0xe0/0xe0 [ 687.240547] ? __secure_computing+0xe5/0x3e0 [ 687.244934] ? syscall_trace_enter+0x486/0xc20 [ 687.249494] ? syscall_slow_exit_work+0x560/0x560 [ 687.254314] ? do_syscall_64+0x4c/0x640 [ 687.258266] ? SyS_newstat+0xe0/0xe0 [ 687.261962] do_syscall_64+0x1d5/0x640 [ 687.265830] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 687.270999] RIP: 0033:0x7fc45fd28335 [ 687.274688] RSP: 002b:00007ffc2f55b148 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 687.282372] RAX: ffffffffffffffda RBX: 000055ba871fb440 RCX: 00007fc45fd28335 [ 687.289619] RDX: 00007ffc2f55b180 RSI: 00007ffc2f55b180 RDI: 000055ba871fa440 [ 687.296865] RBP: 00007ffc2f55b240 R08: 00007fc45ffe7228 R09: 0000000000001010 [ 687.304112] R10: 00007fc45ffe6b58 R11: 0000000000000246 R12: 000055ba871fa440 [ 687.311361] R13: 000055ba871fa460 R14: 000055ba871f585b R15: 000055ba871f5860 [ 687.339065] Mem-Info: [ 687.343627] active_anon:1336926 inactive_anon:9169 isolated_anon:0 [ 687.343627] active_file:245 inactive_file:221 isolated_file:7 [ 687.343627] unevictable:0 dirty:4 writeback:0 unstable:0 [ 687.343627] slab_reclaimable:17106 slab_unreclaimable:118474 [ 687.343627] mapped:53632 shmem:9380 pagetables:16984 bounce:0 [ 687.343627] free:22783 free_pcp:31 free_cma:0 [ 687.402855] Node 0 active_anon:1934064kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213024kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 687.436980] Node 1 active_anon:3413640kB inactive_anon:28kB active_file:972kB inactive_file:1868kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1904kB dirty:12kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 687.491419] Node 0 DMA free:10356kB min:220kB low:272kB high:324kB active_anon:4724kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 687.525919] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 687.531078] Node 0 DMA32 free:27292kB min:36272kB low:45340kB high:54408kB active_anon:1929340kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10400kB pagetables:22592kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 687.564026] lowmem_reserve[]: 0 0 0 0 0 [ 687.568126] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 687.625461] lowmem_reserve[]: 0 0 0 0 0 [ 687.649852] Node 1 Normal free:53752kB min:53612kB low:67012kB high:80412kB active_anon:3413640kB inactive_anon:28kB active_file:464kB inactive_file:1412kB unevictable:0kB writepending:12kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14688kB pagetables:45344kB bounce:0kB free_pcp:60kB local_pcp:0kB free_cma:0kB [ 687.687437] lowmem_reserve[]: 0 0 0 0 0 [ 687.691486] Node 0 DMA: 3*4kB (UME) 7*8kB (UM) 3*16kB (U) 14*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10356kB [ 687.711778] Node 0 DMA32: 296*4kB (UME) 126*8kB (UME) 394*16kB (UME) 276*32kB (UM) 8*64kB (UME) 8*128kB (ME) 7*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 0*2048kB 0*4096kB = 27312kB [ 687.753815] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 687.774327] Node 1 Normal: 275*4kB (UMEH) 173*8kB (UMEH) 111*16kB (UMEH) 43*32kB (UMEH) 112*64kB (UMEH) 172*128kB (UM) 46*256kB (UM) 12*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 55812kB [ 687.799372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 687.828374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 687.842238] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 687.864080] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 687.873160] 9484 total pagecache pages [ 687.877567] 0 pages in swap cache [ 687.881499] Swap cache stats: add 0, delete 0, find 0/0 [ 687.889379] Free swap = 0kB [ 687.893226] Total swap = 0kB [ 687.897268] 1965979 pages RAM [ 687.901345] 0 pages HighMem/MovableOnly [ 687.906262] 339056 pages reserved [ 687.910137] 0 pages cma reserved [ 687.918520] Out of memory: Kill process 16365 (syz-executor.0) score 1007 or sacrifice child [ 687.928916] Killed process 16365 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB 06:52:21 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:21 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:21 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:21 executing program 0: r0 = perf_event_open(&(0x7f0000000800)={0x3, 0x70, 0x3e7, 0xf8, 0xff, 0x0, 0x0, 0x0, 0x91dd7106ca8fd32b, 0xdb3fedb3c3734f95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000000, 0x0, 0x3fffffff, 0x2, @perf_bp={&(0x7f0000000640), 0x8}, 0x200, 0x8, 0x40, 0x0, 0x2189dbe8, 0x7f, 0x6d47}, 0x0, 0xd, 0xffffffffffffffff, 0xb) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400012) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x18435, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5280}, 0x0, 0xffffffffffffffff, r0, 0x1) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) gettid() r3 = socket$kcm(0x11, 0xb, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000010000000000000091564b27ced2f3feaaaa00000e1200c30000000000"]) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={0xffffffffffffffff, 0x1c, 0x1, 0x4, 0x0}, 0xffffffffffffff49) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffcf) socket$kcm(0xa, 0x6, 0x0) sendmsg(r3, 0x0, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') gettid() perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x1}, 0x26, 0x0, 0x4, 0x8, 0x7, 0x4, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e0005000300000000000300f88000f01700d00000000000000000", 0x2e}], 0x1, 0x0, 0x30}, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x203, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:52:21 executing program 5: prlimit64(0x0, 0xf, &(0x7f0000000200)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) setpgid(r0, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000002c0)) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x7, 0x3, 0x0, 0x9cd}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:21 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:21 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:21 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f00000000c0)={0xffc, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:21 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f0000000200)='./file0\x00', 0x9, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000280)="829fbe43a9a15c0d0507fa97a6ea6438b892802f68d11973802aa46edca943f73fbd0ae0cb5fdf7bdf2bbe3ba3b38e398d44", 0x32, 0x9dd}, {&(0x7f00000002c0)="c5e7b487d2ff08b4e1ad4d76da1474df889aabc1bc271bb982ce272713283a5a2de4ffd8fd1e4da16230763cf6bee5a105614a7c58ecb9f3f2b91214eb3d6388bf36e291295b1bc57f4287dc57e224f0230465f8d69959ed62578a76ceddf4895d468d9f744b5a1ec304867abd6ffc9800b336c4ae0bf6271c4fc52558b41c0c9342158c1e098a878862892ab3f8abbf862ecccb35fbc0df5a1a1a8f000978c75bef", 0xa2, 0x372}, {&(0x7f0000000380)="953bf754695054e6315fda817b98f5bac8d3bc401a398d3c8515a7c6", 0x1c}], 0x8, &(0x7f0000000440)={[{@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@dmode={'dmode', 0x3d, 0x3}}, {@norock='norock'}, {@hide='hide'}, {@nocompress='nocompress'}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}], [{@pcr={'pcr', 0x3d, 0x2c}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) [ 688.500215] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. 06:52:22 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f00000000c0)={0xffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36}, 0x0, 0x0) 06:52:22 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f00000000c0)={0xffc}, 0x0, 0x0) [ 688.818087] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. 06:52:22 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffce8}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') [ 689.470902] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 689.524635] systemd-udevd cpuset=/ mems_allowed=0-1 [ 689.529695] CPU: 1 PID: 3650 Comm: systemd-udevd Not tainted 4.14.189-syzkaller #0 [ 689.537396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 689.546746] Call Trace: [ 689.549334] dump_stack+0x1b2/0x283 [ 689.552961] dump_header+0x178/0x82f [ 689.556675] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 689.561775] ? ___ratelimit+0x2cd/0x522 [ 689.565838] oom_kill_process.cold+0x10/0xa69 [ 689.570333] ? lock_downgrade+0x740/0x740 [ 689.574480] out_of_memory+0x2dc/0x1190 [ 689.578453] ? oom_killer_disable+0x1c0/0x1c0 [ 689.582940] ? mutex_trylock+0x152/0x1a0 [ 689.586995] __alloc_pages_nodemask+0x23e1/0x2720 [ 689.591851] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 689.596685] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 689.601526] ? trace_hardirqs_on+0x10/0x10 [ 689.605766] ? cache_grow_begin+0x3f/0x420 [ 689.609998] cache_grow_begin+0x8f/0x420 [ 689.614054] ? mempolicy_slab_node+0x100/0x320 [ 689.618632] fallback_alloc+0x207/0x2c0 [ 689.622606] kmem_cache_alloc+0x1e5/0x3c0 [ 689.626749] getname_flags+0xc8/0x550 [ 689.630547] user_path_at_empty+0x2a/0x50 [ 689.634692] vfs_statx+0xd1/0x180 [ 689.638142] ? cp_compat_stat+0x890/0x890 [ 689.642287] SyS_newlstat+0x83/0xe0 [ 689.645910] ? SyS_newstat+0xe0/0xe0 [ 689.649612] ? __secure_computing+0xe5/0x3e0 [ 689.654002] ? syscall_trace_enter+0x486/0xc20 [ 689.658564] ? syscall_slow_exit_work+0x560/0x560 [ 689.663407] ? do_syscall_64+0x4c/0x640 [ 689.667385] ? SyS_newstat+0xe0/0xe0 [ 689.671080] do_syscall_64+0x1d5/0x640 [ 689.674950] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 689.680118] RIP: 0033:0x7fc45fd28335 [ 689.683805] RSP: 002b:00007ffc2f55b148 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 689.691493] RAX: ffffffffffffffda RBX: 000055ba871ee940 RCX: 00007fc45fd28335 [ 689.698758] RDX: 00007ffc2f55b180 RSI: 00007ffc2f55b180 RDI: 000055ba871ed940 [ 689.706007] RBP: 00007ffc2f55b240 R08: 00007fc45ffe7178 R09: 0000000000001010 [ 689.713277] R10: 00007fc45ffe6b58 R11: 0000000000000246 R12: 000055ba871ed940 [ 689.720526] R13: 000055ba871ed95a R14: 000055ba871f52b5 R15: 000055ba871f52ba [ 689.734500] Mem-Info: [ 689.738177] active_anon:1336582 inactive_anon:9168 isolated_anon:0 [ 689.738177] active_file:36 inactive_file:11 isolated_file:6 [ 689.738177] unevictable:0 dirty:0 writeback:0 unstable:0 [ 689.738177] slab_reclaimable:17141 slab_unreclaimable:118579 [ 689.738177] mapped:53305 shmem:9381 pagetables:17076 bounce:0 [ 689.738177] free:22697 free_pcp:13 free_cma:0 [ 689.774364] Node 0 active_anon:1934344kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213048kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 689.802425] Node 1 active_anon:3411984kB inactive_anon:24kB active_file:144kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:172kB dirty:0kB writeback:0kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 689.829291] Node 0 DMA free:10356kB min:220kB low:272kB high:324kB active_anon:4724kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 689.867488] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 689.872541] Node 0 DMA32 free:27268kB min:36272kB low:45340kB high:54408kB active_anon:1929620kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10368kB pagetables:22496kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 689.902938] lowmem_reserve[]: 0 0 0 0 0 [ 689.918086] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 689.945209] lowmem_reserve[]: 0 0 0 0 0 [ 689.949204] Node 1 Normal free:53688kB min:53612kB low:67012kB high:80412kB active_anon:3411888kB inactive_anon:24kB active_file:352kB inactive_file:256kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14592kB pagetables:45808kB bounce:0kB free_pcp:44kB local_pcp:0kB free_cma:0kB [ 689.978323] lowmem_reserve[]: 0 0 0 0 0 [ 689.982294] Node 0 DMA: 3*4kB (UME) 7*8kB (UM) 3*16kB (U) 14*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10356kB [ 689.998518] Node 0 DMA32: 325*4kB (UME) 128*8kB (UME) 383*16kB (UME) 276*32kB (UM) 8*64kB (UME) 8*128kB (ME) 7*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 0*2048kB 0*4096kB = 27268kB [ 690.014794] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 690.025545] Node 1 Normal: 160*4kB (UMH) 26*8kB (UME) 74*16kB (UMEH) 49*32kB (UMEH) 92*64kB (UMEH) 197*128kB (UM) 50*256kB (M) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53136kB [ 690.042212] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.051595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 690.062490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.074217] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 690.097898] 9413 total pagecache pages [ 690.101789] 0 pages in swap cache [ 690.109448] Swap cache stats: add 0, delete 0, find 0/0 [ 690.131616] Free swap = 0kB [ 690.143196] Total swap = 0kB [ 690.150494] 1965979 pages RAM [ 690.153591] 0 pages HighMem/MovableOnly [ 690.170101] 339056 pages reserved [ 690.173548] 0 pages cma reserved [ 690.183271] Out of memory: Kill process 23549 (syz-executor.2) score 1007 or sacrifice child [ 690.202486] Killed process 23549 (syz-executor.2) total-vm:75236kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB [ 690.308912] oom_reaper: reaped process 23549 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:52:23 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\x1a\xd5') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:23 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0xc2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000280)={0xd1, 0xd9, 0x8001, "a5dd0e1825f93349e9ce878724075c3dd14ad63b5fe47dacfd90eaff07a198a278a2cb418d0d955b7d8b4109cbfffd84e8f9ee1dbd1d756388097af0881e73140d75b14ca6ffbb29790da5e19407b7aaa3d63d1f2828066d4c1aab44a881387c35c680d0401b7eb6df1f895f21fccc5da5f8bebdc26b1f218eab9460a7043d9f25d4ba4ff862201da0d687592192fd7b9542fe40ad75af2bc207caef98d1650df7bfeadd880c9d50098e0d1f5abf6c22543430714630402a4807b667a5352f8468906ba7ee60375bdf36284caa2a04445e"}) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000380)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:52:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{&(0x7f00000002c0)=@phonet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000640)=""/154, 0x9a}, {&(0x7f00000004c0)=""/79, 0x4f}], 0x4, &(0x7f0000000540)=""/182, 0xb6}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RNDCLEARPOOL(r5, 0x5206, &(0x7f0000000400)=0x2) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000440)={0x5, 0xfffc, 0x0, 0x80000001, 0x0, 0x5, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x4}, 0x0, 0x0) 06:52:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000002003a0f0000d7550700b24f"], &(0x7f00000002c0)=0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:23 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:23 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\x1a\xd5') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:23 executing program 0: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:23 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\x1a\xd5') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:23 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, 0x0, 0x102f) dup3(r0, r1, 0x0) 06:52:23 executing program 0: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 690.905754] syz-executor.4 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 690.905818] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 690.905898] CPU: 0 PID: 6375 Comm: syz-executor.4 Not tainted 4.14.189-syzkaller #0 [ 690.905902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 690.905905] Call Trace: [ 690.905919] dump_stack+0x1b2/0x283 [ 690.905931] dump_header+0x178/0x82f [ 690.905942] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 690.905949] ? ___ratelimit+0x2cd/0x522 [ 690.905960] oom_kill_process.cold+0x10/0xa69 [ 690.905972] ? lock_downgrade+0x740/0x740 [ 690.905983] out_of_memory+0x2dc/0x1190 [ 690.905995] ? oom_killer_disable+0x1c0/0x1c0 [ 690.906003] ? mutex_trylock+0x152/0x1a0 [ 690.906013] __alloc_pages_nodemask+0x23e1/0x2720 [ 690.906034] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 690.906058] alloc_pages_vma+0xd2/0x6d0 [ 690.906071] wp_page_copy+0x1f5/0x1ba0 [ 690.906085] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 690.906092] ? __lock_acquire+0x5fc/0x3f20 [ 690.906101] do_wp_page+0x245/0x1db0 [ 690.906110] ? __handle_mm_fault+0x129c/0x4620 [ 690.906118] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 690.906129] __handle_mm_fault+0x234f/0x4620 [ 690.906139] ? vm_insert_page+0x7c0/0x7c0 [ 690.906147] ? lock_downgrade+0x740/0x740 [ 690.906156] ? to_ratio+0x20/0x20 [ 690.906172] handle_mm_fault+0x306/0x7a0 [ 690.906182] __do_page_fault+0x578/0xb50 [ 690.906192] ? spurious_fault+0x640/0x640 [ 690.906199] ? do_page_fault+0x60/0x4f2 [ 690.906207] ? page_fault+0x2f/0x50 [ 690.906213] page_fault+0x45/0x50 [ 690.906218] RIP: 0673: (null) [ 690.906222] RSP: 402d59b0:00007ffe402d59f0 EFLAGS: 00000001 [ 690.906235] Mem-Info: [ 690.906251] active_anon:1336566 inactive_anon:9168 isolated_anon:0 [ 690.906251] active_file:1064 inactive_file:1102 isolated_file:101 [ 690.906251] unevictable:0 dirty:46 writeback:25 unstable:0 [ 690.906251] slab_reclaimable:17200 slab_unreclaimable:119159 [ 690.906251] mapped:55405 shmem:9380 pagetables:17077 bounce:0 [ 690.906251] free:19556 free_pcp:0 free_cma:0 06:52:24 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, 0x0, 0x102f) dup3(r0, r1, 0x0) [ 690.906264] Node 0 active_anon:1934116kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213048kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 690.906277] Node 1 active_anon:3412148kB inactive_anon:24kB active_file:4256kB inactive_file:4404kB unevictable:0kB isolated(anon):0kB isolated(file):404kB mapped:8572kB dirty:180kB writeback:100kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 690.907609] Node 0 DMA free:10356kB min:220kB low:272kB high:324kB active_anon:4724kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.907629] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 690.907648] Node 0 DMA32 free:27272kB min:36272kB low:45340kB high:54408kB active_anon:1929392kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10528kB pagetables:22496kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.907672] lowmem_reserve[]: 0 0 0 0 0 [ 690.907691] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.907707] lowmem_reserve[]: 0 0 0 0 0 [ 690.907726] Node 1 Normal free:40596kB min:53612kB low:67012kB high:80412kB active_anon:3411560kB inactive_anon:24kB active_file:4644kB inactive_file:4380kB unevictable:0kB writepending:80kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14752kB pagetables:45812kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.907743] lowmem_reserve[]: 0 0 0 0 0 [ 690.907762] Node 0 DMA: 3*4kB (UME) 7*8kB (UM) 3*16kB (U) 14*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10356kB [ 690.907838] Node 0 DMA32: 318*4kB (UE) 119*8kB (UE) 392*16kB (UME) 274*32kB (UM) 7*64kB (UME) 9*128kB (ME) 7*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 0*2048kB 0*4096kB = 27312kB [ 690.907907] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 690.907952] Node 1 Normal: 258*4kB (UMEH) 85*8kB (UMEH) 43*16kB (UMEH) 26*32kB (UMEH) 13*64kB (UEH) 157*128kB (M) 49*256kB (UM) 9*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 41312kB [ 690.908024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.908029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 690.908035] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.908040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 690.908044] 11637 total pagecache pages [ 690.908054] 0 pages in swap cache [ 690.908058] Swap cache stats: add 0, delete 0, find 0/0 [ 690.908062] Free swap = 0kB [ 690.908065] Total swap = 0kB [ 690.908070] 1965979 pages RAM [ 690.908073] 0 pages HighMem/MovableOnly [ 690.908077] 339056 pages reserved [ 690.908080] 0 pages cma reserved [ 690.908086] Out of memory: Kill process 23589 (syz-executor.2) score 1007 or sacrifice child [ 690.908152] Killed process 23589 (syz-executor.2) total-vm:75500kB, anon-rss:16516kB, file-rss:35852kB, shmem-rss:0kB [ 690.964636] oom_reaper: reaped process 23589 (syz-executor.2), now anon-rss:0kB, file-rss:20kB, shmem-rss:0kB [ 690.989472] ALSA: mixer_oss: invalid OSS volume '' [ 691.692551] ALSA: mixer_oss: invalid OSS volume '' 06:52:25 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, 0x0, 0x102f) dup3(r0, r1, 0x0) 06:52:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) times(&(0x7f0000000200)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffffa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 691.872493] ALSA: mixer_oss: invalid OSS volume '' [ 692.487482] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 692.531410] systemd-udevd cpuset=/ mems_allowed=0-1 [ 692.539487] CPU: 1 PID: 3650 Comm: systemd-udevd Not tainted 4.14.189-syzkaller #0 [ 692.547197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.556542] Call Trace: [ 692.559125] dump_stack+0x1b2/0x283 [ 692.562744] dump_header+0x178/0x82f [ 692.566455] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 692.571558] ? ___ratelimit+0x2cd/0x522 [ 692.575528] oom_kill_process.cold+0x10/0xa69 [ 692.580138] ? lock_downgrade+0x740/0x740 [ 692.584283] out_of_memory+0x2dc/0x1190 [ 692.588253] ? oom_killer_disable+0x1c0/0x1c0 [ 692.592731] ? mutex_trylock+0x152/0x1a0 [ 692.596770] __alloc_pages_nodemask+0x23e1/0x2720 [ 692.601594] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 692.606412] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 692.611347] ? trace_hardirqs_on+0x10/0x10 [ 692.615834] ? cache_grow_begin+0x3f/0x420 [ 692.620079] cache_grow_begin+0x8f/0x420 [ 692.624118] ? mempolicy_slab_node+0x100/0x320 [ 692.628675] fallback_alloc+0x207/0x2c0 [ 692.632625] kmem_cache_alloc+0x1e5/0x3c0 [ 692.636752] getname_flags+0xc8/0x550 [ 692.640545] user_path_at_empty+0x2a/0x50 [ 692.644671] vfs_statx+0xd1/0x180 [ 692.648100] ? cp_compat_stat+0x890/0x890 [ 692.652235] SyS_newlstat+0x83/0xe0 [ 692.655835] ? SyS_newstat+0xe0/0xe0 [ 692.659522] ? __secure_computing+0xe5/0x3e0 [ 692.663905] ? syscall_trace_enter+0x486/0xc20 [ 692.668464] ? syscall_slow_exit_work+0x560/0x560 [ 692.673284] ? do_syscall_64+0x4c/0x640 [ 692.677233] ? SyS_newstat+0xe0/0xe0 [ 692.680923] do_syscall_64+0x1d5/0x640 [ 692.684790] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 692.689953] RIP: 0033:0x7fc45fd28335 [ 692.693637] RSP: 002b:00007ffc2f55b198 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 692.701318] RAX: ffffffffffffffda RBX: 000055ba871fd170 RCX: 00007fc45fd28335 [ 692.708568] RDX: 00007ffc2f55b1d0 RSI: 00007ffc2f55b1d0 RDI: 000055ba871fc170 [ 692.715819] RBP: 00007ffc2f55b290 R08: 00007fc45ffe71c8 R09: 0000000000001010 [ 692.723069] R10: 00007fc45ffe6b58 R11: 0000000000000246 R12: 000055ba871fc170 [ 692.730421] R13: 000055ba871fc190 R14: 000055ba871faeab R15: 000055ba871faeb0 [ 692.752460] Mem-Info: [ 692.767533] active_anon:1335063 inactive_anon:9170 isolated_anon:0 [ 692.767533] active_file:71 inactive_file:191 isolated_file:26 [ 692.767533] unevictable:0 dirty:0 writeback:0 unstable:0 [ 692.767533] slab_reclaimable:17214 slab_unreclaimable:119616 [ 692.767533] mapped:53504 shmem:9381 pagetables:17184 bounce:0 [ 692.767533] free:22614 free_pcp:122 free_cma:0 [ 692.811985] Node 0 active_anon:1934748kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213108kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 692.840080] Node 1 active_anon:3405504kB inactive_anon:32kB active_file:256kB inactive_file:312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:608kB dirty:0kB writeback:0kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 692.875995] Node 0 DMA free:10348kB min:220kB low:272kB high:324kB active_anon:4724kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 692.902780] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 692.908116] Node 0 DMA32 free:27056kB min:36272kB low:45340kB high:54408kB active_anon:1930024kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10400kB pagetables:22496kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 692.937115] lowmem_reserve[]: 0 0 0 0 0 [ 692.941161] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 692.966711] lowmem_reserve[]: 0 0 0 0 0 [ 692.970769] Node 1 Normal free:53664kB min:53612kB low:67012kB high:80412kB active_anon:3405420kB inactive_anon:32kB active_file:28kB inactive_file:548kB unevictable:0kB writepending:20kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14752kB pagetables:46240kB bounce:0kB free_pcp:324kB local_pcp:224kB free_cma:0kB [ 693.014388] lowmem_reserve[]: 0 0 0 0 0 [ 693.018395] Node 0 DMA: 3*4kB (UME) 10*8kB (UM) 3*16kB (U) 13*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10348kB [ 693.041308] Node 0 DMA32: 336*4kB (UME) 144*8kB (UME) 377*16kB (UE) 271*32kB (UM) 7*64kB (UME) 9*128kB (ME) 7*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 0*2048kB 0*4096kB = 27248kB [ 693.057936] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 693.069198] Node 1 Normal: 264*4kB (UMEH) 83*8kB (UME) 76*16kB (UMEH) 142*32kB (UMEH) 141*64kB (UMEH) 173*128kB (UM) 44*256kB (UM) 7*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53496kB [ 693.086118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 693.095494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 693.104491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 693.113503] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 693.122227] 9521 total pagecache pages [ 693.126218] 0 pages in swap cache [ 693.129750] Swap cache stats: add 0, delete 0, find 0/0 [ 693.135224] Free swap = 0kB [ 693.138281] Total swap = 0kB [ 693.141292] 1965979 pages RAM [ 693.144470] 0 pages HighMem/MovableOnly [ 693.148490] 339056 pages reserved [ 693.151989] 0 pages cma reserved [ 693.155945] Out of memory: Kill process 16437 (syz-executor.0) score 1007 or sacrifice child [ 693.164702] Killed process 16437 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 693.238573] oom_reaper: reaped process 16437 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:52:27 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\x1a\xd5') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="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"]}) 06:52:27 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:27 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(r3, &(0x7f0000001480)=[{&(0x7f0000000280)="b68fe0bdaa2c2e846b03f5020000004bd6fae7da42b3eb53cdfa9a5c21c444b1448f303492cffca1ecc029a8e4f1d880151fec84"}, {&(0x7f0000000300)="a7268c93ae06421236b14b11dfbe39730073414c56869c9c78dd9026f719dc309e8700ed719c8e4d08dd7945f76745d95c43c7f314a96717c5e49c4364b668dd8735b854ea"}, {&(0x7f0000000380)="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"}, {&(0x7f0000001580)="619c224f3a4d28581187da795610bff215d8c646248b7748c3c74e7bd489f57e09faa5acc73f7d7a3220a3588295965accd4b940679e3d70d02a79d520a87e7f08dda4e69636b5f0049f9c503c4880c25e63b504fa4139f13ccbaa744ee75c33f5368757e47f28f19fbcca8176b27a89caab4564a6e89b0f9b726a806b990af214fc60c0d8fb3504e0ecff0fa0c752a2071524cf1fa1904c7269249754181cbca839ab057c179a3792a4ca2595b7332a76f4615d3363d702336e2472bdc840067c66acd164e80048d98bc507"}, {&(0x7f0000001500)="f93c3d8f504689377f9f9e0398f25fd19203c84e3f4cfab043699497bf18526bc52db4fda38a5f4f3c1267c469d1ee549b0f0a3f64318c648e0d533f64e95d65432ce6e43b3e0c753dc1399728da5daabbf377a24fd1"}], 0x64, 0x10) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000004, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x1000000000003, 0x0, 0x0, 0x0, 0x0, 0x16b}, 0x0, 0x0) 06:52:27 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x102f) dup3(r0, r1, 0x0) 06:52:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000380)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) sendto$l2tp(r2, &(0x7f00000002c0)="c0b6e3566b994c6721443872a210f16ceba88866836b24edde080c7e4ad479a545c2c0366618f610b4d989fc00aa69d4dec64ebd6b08bb8d18df49d2ed8d16812f524407c0f1278c61182ff1b8f8575d57f346dc82662ba5129d08d7b73ff0049a7f8b66abb29a2831542da4500acc2a55a32f79c843dc5f39a481ff92accb0e3598e68c1a5b0ebd4c6e908f02c338dac4ce97f9a3e7a89cda839419114f95225dc9992090bf3386569c33", 0xab, 0x20000000, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010101, 0x3}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:27 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:27 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x102f) dup3(r0, r1, 0x0) [ 694.001041] ALSA: mixer_oss: invalid OSS volume '' [ 694.012771] ALSA: mixer_oss: invalid OSS volume '/dev/net/tun' 06:52:27 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:27 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) [ 694.071226] ALSA: mixer_oss: invalid OSS volume '/dev/net/tun' 06:52:27 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x102f) dup3(r0, r1, 0x0) 06:52:28 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000002c0)="cdf561248d5612c582a7ad9f82186af25ef858412988f9a7d0223095457c3aab49bc0128b595414af168b6058850ccbd4d6489dbdd601a775b49d1bd9b", 0x3d) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={0x2fc, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d47296a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35be9139}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xdc, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a9108ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a8a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc14d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad87}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4679}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x143a}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ac8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f6f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21a123c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5060}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x52f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1394b7ce}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40001e9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20989320}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x51d6}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a99}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x65f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bfe61d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44724247}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ae81fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b19}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ea6f446}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x120, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62aa727c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13123f5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bddc05c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46a74b30}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ce2eb15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27d53ace}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68753bc3}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b70afc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56d96790}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c0f45c7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d20b7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dfb2947}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x102b6d99}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2756e623}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70cd8f16}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2580deec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45ac92c9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9fa7cba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26396851}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e30b5d8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x267a9381}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x547d6df5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46a2597c}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25d1926c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a6fb350}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52a89ade}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x438d32e7}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc367}]}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4}, 0x40800) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r2}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), 0x0}, 0x20) vmsplice(r3, &(0x7f0000000500)=[{&(0x7f00000002c0)="71c616a5d563795525816bcd21f5c8ca0703713b61ef2d03b50eeb0b4f111d92ca5aa19f9b3301684c0e96808c51885ecfe6d1e8be5a68a7a551f582d6586351844ef6d9f8de3bec98edb73d3d11704c522f66d51aa4158b97e5a5377fc595d34449b3049935095fdf6d42895c193f0a28f362fbc03fa3955161a720dfeec304344d53de73c72e2e241ccfe9d07a4d8d0e9c20032fef17162f5d3485dacd020deb2bb6d27eeb121292d9c35b1baa0de6685abaf3f637dcc9871f30c42ec51f3a", 0xc0}, {&(0x7f0000000380)="793e390fba0727b9497d22aaa3f8b27f82ee72bbaaefab0f7e362c090f5e0299c5b1a057eef32f352c906d0fde2a621a22c15a17a0f083d047ade4dab85de467d97c488370a1f30d1e1f8611d8db7a93e4c6c26aa0807b7e1bbbc93f8a6653b1dd1a5203d7bae6ea8261f1b2e0fce0b5b5b6e43839c41900fef6014e6b836f98209ec9381a3a5f80b48a6ffa437cdec52450b82f7d07c12d8f1f9cbb372ba476a677d7c4eede28bbc976c6271c6ca7f6c487b03335b714d82c0470aa933183333019da074f1fea19fd8b7cde7fdd06acc8c2b4fb7e10677dcd527007c1816697656be3ffe9acaf10447a2bdc59135e09ac6e3c", 0xf3}, {&(0x7f0000000200), 0x4d}, {&(0x7f0000000480)="d18fcf51f9c3291055db51c5c0ee5b177ef3cc09abf80b8606a8c30a2f95b1c774d946b034d172d8f5cb459d2f985cd062bf0d6227c310fd0761346bc37eb3ae58642366bbaea6ac4f3cba226dbafb1caad484fec96da4c8dd0dad7500b323", 0x5f}], 0x4, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:28 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\x1a\xd5') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:28 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0xfffffc01, 0x4) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$ceph(&(0x7f0000000200)='ceph\x00', &(0x7f0000000280)='./file0\x00', 0x7, 0x4, &(0x7f00000005c0)=[{&(0x7f00000002c0)="caad133a7cf5af44b5542f171f9d59a2acc486b7f487be4456fa139a4f4c9d7e635516e7fc3d48a9ab1b6eb26bf1a7be9b97f767a961d7a7898056f91f3bb121ada9aa6399e908d77d348f082a62f3d30326e347196297ac9da7582ecac9b7d3a434fe6a416d6931b05a662e474c905cf3a7c0724f0fe9c7e4e77a22130e8016f8933066c3edc986", 0x88, 0x3ff}, {&(0x7f0000000380)="1c50127470407f02a7f70b48d637b14465671d7c912aa64dfc25c4e101f8b055a314e05009268570ef88641a9b39503fed099857e808c2fa86fa7869f8c3ef1dd0d92cd0fd5ce38580fe524a770eb96b372f697d670aef799b042f2ce3b266f38d97a501c6b9f25462140ff47326d8230975842af00468a5a2619ab702fe64eb80b20e7cb6e6ec0f5fc97dff7bd04ed9341b6a361d795e01217b8a4cc9d66729a8babccf974de31c159bd94b75e4bbbafb58d063de65b8948990f7c071ddb837d179c90429357a40a2cbe320461f9c0dae2c605eb39a2a5168cceee5fef42ec7069131ce196f9ca0d5cc23f787530dc2a0", 0xf1, 0x2}, {&(0x7f0000000480)="aaef34889b8a0daa320625b95c200379a396a76d7d5b05e571bbef160d639f5195aabf5a8822326188cefbb43ca97d121329dac1848c580091b57ba5b9da15d90cfe92a47fcdc5b5cdfa5dd7bcd265273eb2e0", 0x53, 0x2}, {&(0x7f0000000500)="13c4f9d8ba8d407375f599495f3455e3ad655442fc4e7c0b745acb3f0979193ad50410bb1cdd2b5f8a7ce316f19282143533da63afe9c7fa9a6b904709f6f4c538229c73186e8d204b0dafec63d17b7305f9f475710aaeb8c8e2e6e8a9bf670b4305f1c136220a6290801bbc494ba8f093e3c8e56cc9f2f81133c6f9a7664a0cf6beb36eebcf6fb9eb817ae9cc60946621e8", 0x92, 0xfffffffffffff000}], 0x2040000, &(0x7f0000000640)='\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 06:52:28 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\x1a\xd5') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:28 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x102f) dup3(r0, r1, 0x0) [ 695.269449] ALSA: mixer_oss: invalid OSS volume '/dev/net/tun' 06:52:28 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\x1a\xd5') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:28 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) [ 695.933285] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 695.973899] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 695.983579] CPU: 0 PID: 6372 Comm: syz-executor.1 Not tainted 4.14.189-syzkaller #0 [ 695.991376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 696.000712] Call Trace: [ 696.003282] dump_stack+0x1b2/0x283 [ 696.006892] dump_header+0x178/0x82f [ 696.010585] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 696.015665] ? ___ratelimit+0x2cd/0x522 [ 696.019617] oom_kill_process.cold+0x10/0xa69 [ 696.024091] ? lock_downgrade+0x740/0x740 [ 696.028219] out_of_memory+0x2dc/0x1190 [ 696.032174] ? oom_killer_disable+0x1c0/0x1c0 [ 696.036647] ? mutex_trylock+0x152/0x1a0 [ 696.040690] __alloc_pages_nodemask+0x23e1/0x2720 [ 696.045527] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 696.050347] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 696.055272] ? trace_hardirqs_on+0x10/0x10 [ 696.059492] ? cache_grow_begin+0x3f/0x420 [ 696.063715] cache_grow_begin+0x8f/0x420 [ 696.067756] ? mempolicy_slab_node+0x100/0x320 [ 696.072317] fallback_alloc+0x207/0x2c0 [ 696.076272] kmem_cache_alloc_node+0xe3/0x410 [ 696.080747] copy_process.part.0+0x17db/0x6f00 [ 696.085310] ? trace_hardirqs_on+0x10/0x10 [ 696.089524] ? _raw_spin_unlock+0x29/0x40 [ 696.093649] ? do_wp_page+0x24d/0x1db0 [ 696.097515] ? trace_hardirqs_on+0x10/0x10 [ 696.101727] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 696.106393] ? __cleanup_sighand+0x40/0x40 [ 696.110602] ? lock_downgrade+0x740/0x740 [ 696.114728] _do_fork+0x184/0xc80 [ 696.118160] ? put_timespec64+0xaa/0xf0 [ 696.122109] ? fork_idle+0x270/0x270 [ 696.125804] ? SyS_clock_gettime+0xf5/0x180 [ 696.130102] ? SyS_clock_settime+0x1a0/0x1a0 [ 696.134487] ? do_syscall_64+0x4c/0x640 [ 696.138438] ? sys_vfork+0x20/0x20 [ 696.141953] do_syscall_64+0x1d5/0x640 [ 696.145819] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 696.150983] RIP: 0033:0x45a99a [ 696.154153] RSP: 002b:00007ffe1ad09780 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 696.161841] RAX: ffffffffffffffda RBX: 00007ffe1ad09780 RCX: 000000000045a99a [ 696.169087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 696.176333] RBP: 00007ffe1ad097c0 R08: 0000000000000001 R09: 00000000026f5940 [ 696.183581] R10: 00000000026f5c10 R11: 0000000000000246 R12: 0000000000000001 [ 696.190827] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1ad09810 [ 696.214894] Mem-Info: [ 696.218080] active_anon:1333832 inactive_anon:9172 isolated_anon:0 [ 696.218080] active_file:114 inactive_file:194 isolated_file:38 [ 696.218080] unevictable:0 dirty:0 writeback:4 unstable:0 [ 696.218080] slab_reclaimable:17293 slab_unreclaimable:119564 [ 696.218080] mapped:53481 shmem:9384 pagetables:17167 bounce:0 [ 696.218080] free:23938 free_pcp:25 free_cma:0 [ 696.271101] Node 0 active_anon:1937424kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213144kB dirty:0kB writeback:4kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 696.299649] Node 1 active_anon:3397904kB inactive_anon:40kB active_file:832kB inactive_file:932kB unevictable:0kB isolated(anon):0kB isolated(file):152kB mapped:1280kB dirty:0kB writeback:12kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 696.327873] Node 0 DMA free:10420kB min:220kB low:272kB high:324kB active_anon:4724kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 696.355432] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 696.361152] Node 0 DMA32 free:30484kB min:36272kB low:45340kB high:54408kB active_anon:1932700kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10400kB pagetables:22392kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 696.391181] lowmem_reserve[]: 0 0 0 0 0 [ 696.395950] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 696.422300] lowmem_reserve[]: 0 0 0 0 0 [ 696.427733] Node 1 Normal free:54620kB min:53612kB low:67012kB high:80412kB active_anon:3397904kB inactive_anon:40kB active_file:452kB inactive_file:500kB unevictable:0kB writepending:12kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14560kB pagetables:46276kB bounce:0kB free_pcp:424kB local_pcp:104kB free_cma:0kB [ 696.457615] lowmem_reserve[]: 0 0 0 0 0 [ 696.462206] Node 0 DMA: 3*4kB (UME) 15*8kB (UM) 3*16kB (U) 14*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10420kB [ 696.478185] Node 0 DMA32: 571*4kB (UME) 654*8kB (UME) 449*16kB (UME) 251*32kB (UM) 6*64kB (UE) 6*128kB (ME) 6*256kB (UME) 2*512kB (UM) 4*1024kB (UME) 0*2048kB 0*4096kB = 30540kB [ 696.494429] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 696.508401] Node 1 Normal: 366*4kB (UMEH) 176*8kB (UMEH) 40*16kB (UMEH) 47*32kB (UMEH) 165*64kB (MEH) 209*128kB (UM) 42*256kB (M) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 55640kB [ 696.525069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 696.534058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 696.542874] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 696.551875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 696.560627] 9582 total pagecache pages [ 696.564662] 0 pages in swap cache [ 696.568155] Swap cache stats: add 0, delete 0, find 0/0 [ 696.573547] Free swap = 0kB [ 696.576698] Total swap = 0kB [ 696.579765] 1965979 pages RAM [ 696.582910] 0 pages HighMem/MovableOnly [ 696.587024] 339056 pages reserved [ 696.590516] 0 pages cma reserved [ 696.593992] Out of memory: Kill process 16494 (syz-executor.0) score 1007 or sacrifice child [ 696.603770] Killed process 16494 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 696.661044] oom_reaper: reaped process 16494 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:52:30 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\x1a\xd5') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3, 0x0, 0x800000000}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000200)=""/39) 06:52:30 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xd61c1, 0x0) r5 = memfd_create(&(0x7f0000000200)=']-*{)\x00', 0x6) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000002c0)={0x980000, 0xffff, 0x4, r5, 0x0, &(0x7f0000000280)={0x98090d, 0x4, [], @value=0x20}}) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:52:30 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\x1a\xd5') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') [ 697.341533] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 697.369532] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 697.380084] CPU: 1 PID: 23725 Comm: syz-executor.4 Not tainted 4.14.189-syzkaller #0 [ 697.387973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.397323] Call Trace: [ 697.399920] dump_stack+0x1b2/0x283 [ 697.403547] dump_header+0x178/0x82f [ 697.407260] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 697.412364] ? ___ratelimit+0x2cd/0x522 [ 697.416335] oom_kill_process.cold+0x10/0xa69 [ 697.420827] ? lock_downgrade+0x740/0x740 [ 697.424974] out_of_memory+0x2dc/0x1190 [ 697.428946] ? oom_killer_disable+0x1c0/0x1c0 [ 697.433436] ? mutex_trylock+0x152/0x1a0 [ 697.437497] __alloc_pages_nodemask+0x23e1/0x2720 [ 697.442349] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 697.447184] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 697.452033] ? trace_hardirqs_on+0x10/0x10 [ 697.456270] ? cache_grow_begin+0x3f/0x420 [ 697.460501] cache_grow_begin+0x8f/0x420 [ 697.464556] ? mempolicy_slab_node+0x100/0x320 [ 697.469125] fallback_alloc+0x207/0x2c0 [ 697.473079] kmem_cache_alloc_node+0xe3/0x410 [ 697.477554] copy_process.part.0+0x17db/0x6f00 [ 697.482115] ? __handle_mm_fault+0x2095/0x4620 [ 697.486704] ? lock_downgrade+0x740/0x740 [ 697.490828] ? __lru_cache_add+0x178/0x250 [ 697.495041] ? do_raw_spin_unlock+0x164/0x220 [ 697.499515] ? _raw_spin_unlock+0x29/0x40 [ 697.503641] ? __cleanup_sighand+0x40/0x40 [ 697.507856] ? selinux_file_mprotect+0xf3/0x5c0 [ 697.512501] _do_fork+0x184/0xc80 [ 697.515934] ? fork_idle+0x270/0x270 [ 697.519627] ? up_read+0x17/0x30 [ 697.522970] ? __do_page_fault+0x19a/0xb50 [ 697.527182] ? do_syscall_64+0x4c/0x640 [ 697.531132] ? sys_vfork+0x20/0x20 [ 697.534657] do_syscall_64+0x1d5/0x640 [ 697.538523] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 697.543707] RIP: 0033:0x45ed39 [ 697.546872] RSP: 002b:00007ffe402d5708 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 697.554556] RAX: ffffffffffffffda RBX: 00007fb9f9a52700 RCX: 000000000045ed39 [ 697.561805] RDX: 00007fb9f9a529d0 RSI: 00007fb9f9a51db0 RDI: 00000000003d0f00 [ 697.569052] RBP: 00007ffe402d5930 R08: 00007fb9f9a52700 R09: 00007fb9f9a52700 [ 697.576315] R10: 00007fb9f9a529d0 R11: 0000000000000202 R12: 0000000000000000 [ 697.583577] R13: 00007ffe402d57bf R14: 00007fb9f9a529c0 R15: 000000000078bf0c [ 697.653004] Mem-Info: [ 697.659691] active_anon:1336160 inactive_anon:9196 isolated_anon:0 [ 697.659691] active_file:456 inactive_file:413 isolated_file:50 [ 697.659691] unevictable:0 dirty:20 writeback:11 unstable:0 [ 697.659691] slab_reclaimable:17335 slab_unreclaimable:120543 [ 697.659691] mapped:54129 shmem:9409 pagetables:17235 bounce:0 [ 697.659691] free:19674 free_pcp:85 free_cma:0 [ 697.699212] Node 0 active_anon:1941576kB inactive_anon:36648kB active_file:60kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213148kB dirty:8kB writeback:4kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 697.734004] Node 1 active_anon:3403064kB inactive_anon:136kB active_file:1636kB inactive_file:1732kB unevictable:0kB isolated(anon):0kB isolated(file):252kB mapped:3268kB dirty:72kB writeback:40kB shmem:148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 697.890640] Node 0 DMA free:10356kB min:220kB low:272kB high:324kB active_anon:4724kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 697.923135] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 697.929397] Node 0 DMA32 free:27504kB min:36272kB low:45340kB high:54408kB active_anon:1936884kB inactive_anon:36648kB active_file:60kB inactive_file:4kB unevictable:0kB writepending:12kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10464kB pagetables:22392kB bounce:0kB free_pcp:588kB local_pcp:220kB free_cma:0kB [ 698.031045] lowmem_reserve[]: 0 0 0 0 0 [ 698.037660] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 698.068620] lowmem_reserve[]: 0 0 0 0 0 [ 698.073169] Node 1 Normal free:53872kB min:53612kB low:67012kB high:80412kB active_anon:3386680kB inactive_anon:140kB active_file:2344kB inactive_file:3132kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14592kB pagetables:46632kB bounce:0kB free_pcp:204kB local_pcp:116kB free_cma:0kB [ 698.135081] lowmem_reserve[]: 0 0 0 0 0 [ 698.139484] Node 0 DMA: 3*4kB (UME) 15*8kB (UM) 3*16kB (U) 12*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10356kB [ 698.160968] Node 0 DMA32: 719*4kB (UME) 729*8kB (UME) 519*16kB (UM) 249*32kB (UM) 7*64kB (UM) 1*128kB (M) 1*256kB (U) 1*512kB (U) 2*1024kB (UM) 0*2048kB 0*4096kB = 28372kB [ 698.187061] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 698.198260] Node 1 Normal: 189*4kB (UMH) 140*8kB (UME) 119*16kB (UM) 57*32kB (UMEH) 144*64kB (UMEH) 222*128kB (M) 47*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 55780kB 06:52:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0xffffffff) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x40000, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$caif_stream(0x25, 0x1, 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 698.236488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 698.245396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 698.253968] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 698.270991] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 698.309732] 10095 total pagecache pages [ 698.314957] 0 pages in swap cache [ 698.337101] Swap cache stats: add 0, delete 0, find 0/0 [ 698.343977] Free swap = 0kB [ 698.347497] Total swap = 0kB [ 698.350596] 1965979 pages RAM [ 698.353852] 0 pages HighMem/MovableOnly [ 698.357961] 339056 pages reserved [ 698.361485] 0 pages cma reserved [ 698.365605] Out of memory: Kill process 16534 (syz-executor.0) score 1007 or sacrifice child [ 698.375041] Killed process 16534 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 698.423840] oom_reaper: reaped process 16534 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:52:31 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x102f) dup3(r0, r1, 0x0) 06:52:31 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\x1a\xd5') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video1\x00', 0x2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 698.481041] ALSA: mixer_oss: invalid OSS volume '' 06:52:31 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) dup3(r0, r1, 0x0) 06:52:31 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') [ 698.549848] ALSA: mixer_oss: invalid OSS volume '/dev/net/tun' 06:52:31 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x102f) dup3(r0, r1, 0x0) [ 699.129274] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 699.141894] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 699.154494] CPU: 1 PID: 23789 Comm: syz-executor.0 Not tainted 4.14.189-syzkaller #0 [ 699.162385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.171732] Call Trace: [ 699.174319] dump_stack+0x1b2/0x283 [ 699.177950] dump_header+0x178/0x82f [ 699.181657] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 699.186749] ? ___ratelimit+0x2cd/0x522 [ 699.190712] oom_kill_process.cold+0x10/0xa69 [ 699.195198] ? lock_downgrade+0x740/0x740 [ 699.199344] out_of_memory+0x2dc/0x1190 [ 699.203306] ? oom_killer_disable+0x1c0/0x1c0 [ 699.207784] ? mutex_trylock+0x152/0x1a0 [ 699.211832] __alloc_pages_nodemask+0x23e1/0x2720 [ 699.216679] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 699.221516] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 699.226356] ? trace_hardirqs_on+0x10/0x10 [ 699.230605] ? cache_grow_begin+0x3f/0x420 [ 699.234829] cache_grow_begin+0x8f/0x420 [ 699.238871] ? mempolicy_slab_node+0x100/0x320 [ 699.243436] fallback_alloc+0x207/0x2c0 [ 699.247399] kmem_cache_alloc+0x1e5/0x3c0 [ 699.251531] getname_flags+0xc8/0x550 [ 699.255313] do_sys_open+0x1ce/0x410 [ 699.259007] ? filp_open+0x60/0x60 [ 699.262527] ? SyS_clock_settime+0x1a0/0x1a0 [ 699.266925] ? fput+0xb/0x140 [ 699.270020] ? do_syscall_64+0x4c/0x640 [ 699.273987] ? SyS_open+0x30/0x30 [ 699.277429] do_syscall_64+0x1d5/0x640 [ 699.281302] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 699.286476] RIP: 0033:0x45c369 [ 699.289644] RSP: 002b:00007f70a66aac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 699.297338] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c369 [ 699.304593] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 699.311847] RBP: 000000000078bf48 R08: 0000000000000000 R09: 0000000000000000 [ 699.319196] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 699.326454] R13: 00007ffe8da5e1bf R14: 00007f70a66ab9c0 R15: 000000000078bf0c [ 699.335582] Mem-Info: [ 699.338063] active_anon:1332971 inactive_anon:9171 isolated_anon:0 [ 699.338063] active_file:74 inactive_file:269 isolated_file:0 [ 699.338063] unevictable:0 dirty:4 writeback:0 unstable:0 [ 699.338063] slab_reclaimable:17396 slab_unreclaimable:121515 [ 699.338063] mapped:53476 shmem:9382 pagetables:17264 bounce:0 [ 699.338063] free:22509 free_pcp:72 free_cma:0 [ 699.372139] Node 0 active_anon:1943260kB inactive_anon:36648kB active_file:4kB inactive_file:232kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213336kB dirty:8kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 699.402259] Node 1 active_anon:3388624kB inactive_anon:36kB active_file:492kB inactive_file:504kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:568kB dirty:8kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 699.432384] Node 0 DMA free:10392kB min:220kB low:272kB high:324kB active_anon:4656kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 699.459360] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 699.465956] Node 0 DMA32 free:26708kB min:36272kB low:45340kB high:54408kB active_anon:1938604kB inactive_anon:36648kB active_file:4kB inactive_file:132kB unevictable:0kB writepending:8kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10496kB pagetables:22284kB bounce:0kB free_pcp:436kB local_pcp:120kB free_cma:0kB [ 699.503550] lowmem_reserve[]: 0 0 0 0 0 [ 699.507595] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 699.533593] lowmem_reserve[]: 0 0 0 0 0 [ 699.538295] Node 1 Normal free:52532kB min:53612kB low:67012kB high:80412kB active_anon:3388428kB inactive_anon:36kB active_file:396kB inactive_file:712kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14784kB pagetables:46772kB bounce:0kB free_pcp:436kB local_pcp:52kB free_cma:0kB [ 699.568288] lowmem_reserve[]: 0 0 0 0 0 [ 699.572926] Node 0 DMA: 3*4kB (UME) 21*8kB (UM) 4*16kB (UM) 12*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10420kB [ 699.591072] Node 0 DMA32: 776*4kB (UME) 740*8kB (UE) 535*16kB (UE) 244*32kB (U) 3*64kB (U) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 26736kB [ 699.607879] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 699.623503] Node 1 Normal: 36*4kB (UEH) 36*8kB (UMEH) 37*16kB (UMEH) 25*32kB (UMEH) 95*64kB (UMEH) 240*128kB (UM) 53*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52192kB [ 699.639423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 699.648536] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 699.657409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 699.666592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 699.675436] 9594 total pagecache pages [ 699.679536] 0 pages in swap cache [ 699.683188] Swap cache stats: add 0, delete 0, find 0/0 [ 699.688788] Free swap = 0kB [ 699.691998] Total swap = 0kB [ 699.695264] 1965979 pages RAM [ 699.698654] 0 pages HighMem/MovableOnly [ 699.702817] 339056 pages reserved [ 699.710995] 0 pages cma reserved [ 699.714639] Out of memory: Kill process 17496 (syz-executor.0) score 1007 or sacrifice child [ 699.723461] Killed process 17496 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 699.930189] ALSA: mixer_oss: invalid OSS volume '/dev/net/tun' 06:52:34 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setxattr$security_capability(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='security.capability\x00', &(0x7f00000005c0)=@v3={0x3000000, [{0xc3, 0x80000000}, {0x8000, 0x4}]}, 0x18, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) accept4$tipc(r3, &(0x7f0000000200)=@name, &(0x7f0000000500)=0x10, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000280)="f98bde2b952c0b66907a26b53455de9c1a6c1e3c9c5e35e33f63922e8065dad02196367e7ff8996de06bc31c68579a01e5f06c04e4ee0c0edde5ac944cdb36560c0d0abee41699361a5703a6f3df53c02c1b83e7318b0e2a8daf14322ae527195988aca49f7e4b98edb86652c9c2017cfe9d3e617bf9129fef4fe510eba6003e9abd25bcf9df3153e8d4adf85a00", 0x8e}, {&(0x7f0000000340)="6b01edea8b6bd3a163804cf2f40a301d99c9443c744004ebcc0828fd5e0d582a1788ecd80b691298a8737d4023cdf891c129d8bb0e30a39b38f87a5fa21f78e65f54e450d469ec88b6ad2b3241f85e0aed1b6ba5bb1f5638895c51dd399aa7a48313e7a4ca700c44a6456d5fac179397289ce80d0da2234e037102ab7c2662099f45b9406e380af934", 0x89}, {&(0x7f0000000400)="e923d9faf228f0a2c49ce8c49b08c8fde5c06ce3e5900e380d390ce2d5050c7b9dad7eae4b45af00336b188238b1ec9dc6f4712c101ec5dbc242f8c1963b1a97856168f560f6e7971a5209c5f8405c3b20d9ed517b241fbc0e0c6ce3fb6753b59b3e7482f892b3d285a7cb67d236cdbaaa0d0c829fafe6f31ce9", 0x7a}, {&(0x7f0000000480)="ef6942a6a8db916d34e759b37e64e5d4297af4593f1626dc4d38300ce4f9ef6d47f1f45df27379123580ddfc706b2ed22bf0d4c401ba8600d7ecf3731db8dab0d73d69055c279b6e924cc6947e0cfbf7f06a64e9958dfe19b04f09dec3cb1741eaacb00902537cf7", 0x68}], 0x4, 0x1, 0x9) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:52:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), 0x0}, 0x20) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000200)=0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:34 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:34 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(0xffffffffffffffff, r0, 0x0) 06:52:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0xffffffffffffff11, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000}, 0x40) write(r4, &(0x7f0000000340), 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x80, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1fb}, 0x0, &(0x7f0000000200)={0xffc, 0x3, 0x400, 0x0, 0x0, 0xe, 0x0, 0x36}, 0x0, 0x0) 06:52:34 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) dup3(r0, r1, 0x0) 06:52:34 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:34 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(0xffffffffffffffff, r0, 0x0) [ 701.030658] ALSA: mixer_oss: invalid OSS volume 'dev/net/tun' 06:52:34 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) dup3(r0, r1, 0x0) 06:52:34 executing program 1: socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\x1a\xd5') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:34 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, 0xffffffffffffffff, 0x0) [ 701.188247] ALSA: mixer_oss: invalid OSS volume 'dev/net/tun' 06:52:34 executing program 1: socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\x1a\xd5') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:34 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, 0xffffffffffffffff, 0x0) [ 702.326519] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 702.352339] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 702.366900] CPU: 0 PID: 23810 Comm: syz-executor.3 Not tainted 4.14.189-syzkaller #0 [ 702.374785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.384133] Call Trace: [ 702.386704] dump_stack+0x1b2/0x283 [ 702.390314] dump_header+0x178/0x82f [ 702.394007] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 702.399111] ? ___ratelimit+0x2cd/0x522 [ 702.403063] oom_kill_process.cold+0x10/0xa69 [ 702.407537] ? lock_downgrade+0x740/0x740 [ 702.411666] out_of_memory+0x2dc/0x1190 [ 702.415622] ? oom_killer_disable+0x1c0/0x1c0 [ 702.420095] ? mutex_trylock+0x152/0x1a0 [ 702.424136] __alloc_pages_nodemask+0x23e1/0x2720 [ 702.428963] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 702.433783] ? fs_reclaim_release+0xd0/0x110 [ 702.438177] ? kmem_cache_alloc_node+0x38b/0x410 [ 702.442912] copy_process.part.0+0x26d/0x6f00 [ 702.447389] ? __handle_mm_fault+0x2095/0x4620 [ 702.452038] ? lock_downgrade+0x740/0x740 [ 702.456163] ? __lru_cache_add+0x178/0x250 [ 702.460375] ? do_raw_spin_unlock+0x164/0x220 [ 702.464848] ? _raw_spin_unlock+0x29/0x40 [ 702.468978] ? __cleanup_sighand+0x40/0x40 [ 702.473192] ? selinux_file_mprotect+0xf3/0x5c0 [ 702.478533] _do_fork+0x184/0xc80 [ 702.481963] ? fork_idle+0x270/0x270 [ 702.485680] ? up_read+0x17/0x30 [ 702.489024] ? __do_page_fault+0x19a/0xb50 [ 702.493236] ? do_syscall_64+0x4c/0x640 [ 702.497193] ? sys_vfork+0x20/0x20 [ 702.500729] do_syscall_64+0x1d5/0x640 [ 702.504612] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 702.509778] RIP: 0033:0x45ed39 [ 702.512961] RSP: 002b:00007ffd7fbbc668 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 702.520645] RAX: ffffffffffffffda RBX: 00007f2f98d12700 RCX: 000000000045ed39 [ 702.527892] RDX: 00007f2f98d129d0 RSI: 00007f2f98d11db0 RDI: 00000000003d0f00 [ 702.535137] RBP: 00007ffd7fbbc890 R08: 00007f2f98d12700 R09: 00007f2f98d12700 [ 702.542384] R10: 00007f2f98d129d0 R11: 0000000000000202 R12: 0000000000000000 [ 702.549632] R13: 00007ffd7fbbc71f R14: 00007f2f98d129c0 R15: 000000000078c0ec [ 702.561390] Mem-Info: [ 702.649775] active_anon:1333111 inactive_anon:9171 isolated_anon:0 [ 702.649775] active_file:28 inactive_file:46 isolated_file:0 [ 702.649775] unevictable:0 dirty:1 writeback:0 unstable:0 [ 702.649775] slab_reclaimable:17460 slab_unreclaimable:121313 [ 702.649775] mapped:53316 shmem:9382 pagetables:17170 bounce:0 [ 702.649775] free:22991 free_pcp:71 free_cma:0 [ 702.685074] Node 0 active_anon:1944060kB inactive_anon:36648kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213248kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 702.755233] Node 1 active_anon:3388384kB inactive_anon:36kB active_file:44kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 702.787073] Node 0 DMA free:10384kB min:220kB low:272kB high:324kB active_anon:4696kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 702.827757] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 702.832808] Node 0 DMA32 free:27412kB min:36272kB low:45340kB high:54408kB active_anon:1939364kB inactive_anon:36648kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10464kB pagetables:22196kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 702.872154] lowmem_reserve[]: 0 0 0 0 0 [ 702.876251] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 702.910224] lowmem_reserve[]: 0 0 0 0 0 [ 702.914311] Node 1 Normal free:53704kB min:53612kB low:67012kB high:80412kB active_anon:3388792kB inactive_anon:36kB active_file:348kB inactive_file:48kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14496kB pagetables:46484kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 702.959256] lowmem_reserve[]: 0 0 0 0 0 [ 702.963264] Node 0 DMA: 2*4kB (UE) 17*8kB (UM) 4*16kB (UM) 12*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10384kB [ 702.982837] Node 0 DMA32: 960*4kB (UME) 777*8kB (UME) 543*16kB (UE) 243*32kB (U) 4*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 27416kB [ 702.998200] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 703.008959] Node 1 Normal: 201*4kB (UMEH) 84*8kB (UEH) 45*16kB (UMEH) 37*32kB (UMEH) 31*64kB (UMEH) 259*128kB (UM) 57*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53108kB [ 703.024787] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 703.033656] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 703.042274] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 703.051157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 703.059779] 9463 total pagecache pages [ 703.063661] 0 pages in swap cache [ 703.067145] Swap cache stats: add 0, delete 0, find 0/0 [ 703.072496] Free swap = 0kB [ 703.075549] Total swap = 0kB [ 703.078559] 1965979 pages RAM [ 703.081653] 0 pages HighMem/MovableOnly [ 703.085660] 339056 pages reserved [ 703.089103] 0 pages cma reserved [ 703.092461] Out of memory: Kill process 23834 (syz-executor.2) score 1007 or sacrifice child [ 703.106220] Killed process 23834 (syz-executor.2) total-vm:75236kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB 06:52:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000500)}, {&(0x7f00000002c0)="778df95edf32ff4d3de584cc7e6abaea96e785afde862a94e2789ba2a3ec5ab7a361fdcdcee5068a4ee1a4161440f98a106da6c5ee707004b5a7962309f4c492253ce1f83ee3a17e27d4a5ed96a603", 0x4f}, {&(0x7f0000000340)="f842bedce589e5ef5f2a9792d7bf011761ad8a8989dc18d3338a84881302295498e47c1e9b3c4d9a647d885cd81f035a150724355bc1a572902afdc035a3df8cf97f", 0x42}], 0x3, 0x4) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r1, 0x0, 0x0, 0x10000, 0x401) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0xe0, 0x7, 0x8, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x40, 0x10, 0x9, 0x8}}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:36 executing program 1: socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\x1a\xd5') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:36 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, 0xffffffffffffffff, 0x0) 06:52:36 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(0xffffffffffffffff, r0, 0x0) 06:52:36 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0xa3, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x203}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000080)={@dev}, &(0x7f0000000200)=0x14) [ 703.762694] ALSA: mixer_oss: invalid OSS volume 'dev/net/tun' [ 704.162606] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 704.211495] systemd-udevd cpuset=/ mems_allowed=0-1 [ 704.221515] CPU: 0 PID: 23842 Comm: systemd-udevd Not tainted 4.14.189-syzkaller #0 [ 704.229410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 704.238744] Call Trace: [ 704.241316] dump_stack+0x1b2/0x283 [ 704.244925] dump_header+0x178/0x82f [ 704.248620] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 704.253703] ? ___ratelimit+0x2cd/0x522 [ 704.257655] oom_kill_process.cold+0x10/0xa69 [ 704.262129] ? lock_downgrade+0x740/0x740 [ 704.266257] out_of_memory+0x2dc/0x1190 [ 704.270211] ? oom_killer_disable+0x1c0/0x1c0 [ 704.274690] ? mutex_trylock+0x152/0x1a0 [ 704.278735] __alloc_pages_nodemask+0x23e1/0x2720 [ 704.283562] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 704.288384] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 704.293379] ? retint_kernel+0x2d/0x2d [ 704.297250] cache_grow_begin+0x8f/0x420 [ 704.301294] ? mempolicy_slab_node+0x100/0x320 [ 704.305853] fallback_alloc+0x207/0x2c0 [ 704.309823] kmem_cache_alloc+0x1e5/0x3c0 [ 704.313961] getname_flags+0xc8/0x550 [ 704.317739] do_sys_open+0x1ce/0x410 [ 704.321429] ? filp_open+0x60/0x60 [ 704.324948] ? do_sys_open+0x410/0x410 [ 704.328813] do_syscall_64+0x1d5/0x640 [ 704.332795] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 704.337960] RIP: 0033:0x7fc45fffc840 [ 704.341648] RSP: 002b:00007ffc2f555e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 704.349332] RAX: ffffffffffffffda RBX: 000055ba871ef7e0 RCX: 00007fc45fffc840 [ 704.356586] RDX: 000055ba860c7fe3 RSI: 0000000000080000 RDI: 000055ba871e4e00 [ 704.363832] RBP: 0000000000000001 R08: 000055ba860c7670 R09: 0000000000000110 [ 704.371167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.378438] R13: 0000000000000000 R14: 000055ba871e5730 R15: 00000000ffffffff [ 704.400272] Mem-Info: [ 704.402748] active_anon:1333600 inactive_anon:9170 isolated_anon:0 [ 704.402748] active_file:611 inactive_file:621 isolated_file:83 [ 704.402748] unevictable:0 dirty:1 writeback:0 unstable:0 [ 704.402748] slab_reclaimable:17457 slab_unreclaimable:121541 [ 704.402748] mapped:54503 shmem:9382 pagetables:17196 bounce:0 [ 704.402748] free:20882 free_pcp:210 free_cma:0 [ 704.460137] Node 0 active_anon:1943984kB inactive_anon:36648kB active_file:16kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213296kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 704.499123] Node 1 active_anon:3390416kB inactive_anon:32kB active_file:1788kB inactive_file:1576kB unevictable:0kB isolated(anon):0kB isolated(file):208kB mapped:3616kB dirty:4kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 704.605992] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:4668kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 704.656786] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 704.661916] Node 0 DMA32 free:27544kB min:36272kB low:45340kB high:54408kB active_anon:1937776kB inactive_anon:36648kB active_file:4kB inactive_file:124kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10560kB pagetables:22196kB bounce:0kB free_pcp:1440kB local_pcp:716kB free_cma:0kB [ 704.691523] lowmem_reserve[]: 0 0 0 0 0 [ 704.703529] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 704.746154] lowmem_reserve[]: 0 0 0 0 0 [ 704.750382] Node 1 Normal free:64236kB min:53612kB low:67012kB high:80412kB active_anon:3375632kB inactive_anon:32kB active_file:1068kB inactive_file:1296kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14432kB pagetables:46588kB bounce:0kB free_pcp:1328kB local_pcp:740kB free_cma:0kB [ 704.785289] lowmem_reserve[]: 0 0 0 0 0 [ 704.789813] Node 0 DMA: 4*4kB (UME) 20*8kB (UM) 4*16kB (UM) 13*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 704.813278] Node 0 DMA32: 971*4kB (UMEH) 837*8kB (UMEH) 546*16kB (UMEH) 256*32kB (UMH) 8*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28276kB [ 704.832922] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 704.847871] Node 1 Normal: 542*4kB (UMH) 338*8kB (UMEH) 312*16kB (UM) 128*32kB (UMEH) 37*64kB (UMEH) 249*128kB (UM) 56*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 62536kB [ 704.868133] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 704.879905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 06:52:38 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(0xffffffffffffffff, r0, 0x0) 06:52:38 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\x1a\xd5') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, 0x0) [ 704.970872] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 06:52:38 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, 0xffffffffffffffff, 0x0) [ 705.041991] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 705.100883] 11773 total pagecache pages [ 705.126579] 0 pages in swap cache [ 705.143710] Swap cache stats: add 0, delete 0, find 0/0 06:52:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x4e, 0x0, 0x5, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 705.173232] Free swap = 0kB [ 705.188006] Total swap = 0kB [ 705.204592] 1965979 pages RAM [ 705.223091] 0 pages HighMem/MovableOnly [ 705.239152] 339056 pages reserved [ 705.266750] 0 pages cma reserved [ 705.286046] Out of memory: Kill process 23864 (syz-executor.5) score 1007 or sacrifice child [ 705.762221] ALSA: mixer_oss: invalid OSS volume 'dev/net/tun' [ 706.257036] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 706.285852] systemd-udevd cpuset=/ mems_allowed=0-1 [ 706.291287] CPU: 1 PID: 3650 Comm: systemd-udevd Not tainted 4.14.189-syzkaller #0 [ 706.298996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 706.308344] Call Trace: [ 706.310928] dump_stack+0x1b2/0x283 [ 706.314580] dump_header+0x178/0x82f [ 706.318291] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 706.323390] ? ___ratelimit+0x2cd/0x522 [ 706.327369] oom_kill_process.cold+0x10/0xa69 [ 706.331872] ? lock_downgrade+0x740/0x740 [ 706.336021] out_of_memory+0x2dc/0x1190 [ 706.339996] ? oom_killer_disable+0x1c0/0x1c0 [ 706.344490] ? mutex_trylock+0x152/0x1a0 [ 706.348551] __alloc_pages_nodemask+0x23e1/0x2720 [ 706.353412] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 706.358270] alloc_pages_current+0x155/0x260 [ 706.362676] filemap_fault+0xe12/0x18d0 [ 706.366655] ext4_filemap_fault+0x84/0xb0 [ 706.370800] __do_fault+0xfa/0x380 [ 706.374336] __handle_mm_fault+0x2497/0x4620 [ 706.378742] ? vm_insert_page+0x7c0/0x7c0 [ 706.382883] ? cp_compat_stat+0x890/0x890 [ 706.387041] handle_mm_fault+0x306/0x7a0 [ 706.391096] __do_page_fault+0x578/0xb50 [ 706.395150] ? spurious_fault+0x640/0x640 [ 706.399300] ? do_page_fault+0x60/0x4f2 [ 706.403272] ? page_fault+0x2f/0x50 [ 706.406892] page_fault+0x45/0x50 [ 706.410339] RIP: 871fde04:0x55ba871e2ac1 [ 706.414389] RSP: 871fee00:00007ffc2f55b2b0 EFLAGS: 55ba871fde00 [ 706.421045] Mem-Info: [ 706.429586] active_anon:1332267 inactive_anon:9170 isolated_anon:0 [ 706.429586] active_file:15 inactive_file:1 isolated_file:0 [ 706.429586] unevictable:0 dirty:0 writeback:0 unstable:0 [ 706.429586] slab_reclaimable:17446 slab_unreclaimable:121433 [ 706.429586] mapped:53347 shmem:9382 pagetables:17212 bounce:0 [ 706.429586] free:23558 free_pcp:170 free_cma:0 [ 706.466971] Node 0 active_anon:1942004kB inactive_anon:36648kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213280kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 706.499449] Node 1 active_anon:3387064kB inactive_anon:32kB active_file:272kB inactive_file:256kB unevictable:0kB isolated(anon):0kB isolated(file):220kB mapped:508kB dirty:0kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 706.530282] Node 0 DMA free:10416kB min:220kB low:272kB high:324kB active_anon:4656kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 706.576100] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 706.581151] Node 0 DMA32 free:29912kB min:36272kB low:45340kB high:54408kB active_anon:1937348kB inactive_anon:36648kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10432kB pagetables:22196kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 706.613814] lowmem_reserve[]: 0 0 0 0 0 [ 706.617809] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 706.647736] lowmem_reserve[]: 0 0 0 0 0 [ 706.651728] Node 1 Normal free:54404kB min:53612kB low:67012kB high:80412kB active_anon:3387080kB inactive_anon:32kB active_file:488kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14624kB pagetables:46652kB bounce:0kB free_pcp:524kB local_pcp:0kB free_cma:0kB [ 706.686125] lowmem_reserve[]: 0 0 0 0 0 [ 706.690117] Node 0 DMA: 4*4kB (UME) 20*8kB (UM) 4*16kB (UM) 12*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10416kB [ 706.712804] Node 0 DMA32: 1048*4kB (UME) 845*8kB (UME) 547*16kB (UME) 253*32kB (UM) 7*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 29912kB [ 706.732042] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 706.747646] Node 1 Normal: 227*4kB (UMEH) 147*8kB (UMEH) 49*16kB (UME) 71*32kB (UMEH) 36*64kB (UMEH) 248*128kB (M) 56*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53524kB [ 706.763425] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 706.776097] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 706.785390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 706.802963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 706.812254] 9441 total pagecache pages [ 706.819486] 0 pages in swap cache [ 706.822932] Swap cache stats: add 0, delete 0, find 0/0 [ 706.828314] Free swap = 0kB [ 706.831317] Total swap = 0kB [ 706.834983] 1965979 pages RAM [ 706.838070] 0 pages HighMem/MovableOnly [ 706.842014] 339056 pages reserved [ 706.845558] 0 pages cma reserved [ 706.848905] Out of memory: Kill process 17550 (syz-executor.0) score 1007 or sacrifice child [ 706.857976] Killed process 17550 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB 06:52:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) r2 = dup3(0xffffffffffffffff, r0, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r3, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x7, 0x5841}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000200)={r3, 0x8}, &(0x7f00000002c0)=0x8) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:40 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(0xffffffffffffffff, r0, 0x0) 06:52:40 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\x1a\xd5') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, 0x0) 06:52:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x1ff) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$CHAR_RAW_BSZGET(0xffffffffffffffff, 0x80081270, &(0x7f00000002c0)) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x8003, 0x36}, 0x0, 0x0) 06:52:40 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, 0xffffffffffffffff, 0x0) 06:52:40 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, 0xffffffffffffffff, 0x0) [ 707.426174] ALSA: mixer_oss: invalid OSS volume 'dev/net/tun' [ 707.428907] ALSA: mixer_oss: invalid OSS volume '' 06:52:40 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(0xffffffffffffffff, r0, 0x0) 06:52:40 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\x1a\xd5') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, 0x0) [ 707.659170] ALSA: mixer_oss: invalid OSS volume 'dev/net/tun' [ 707.705586] ALSA: mixer_oss: invalid OSS volume '' [ 708.046771] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 708.083719] systemd-udevd cpuset=/ mems_allowed=0-1 [ 708.091503] CPU: 0 PID: 3650 Comm: systemd-udevd Not tainted 4.14.189-syzkaller #0 [ 708.099211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 708.108552] Call Trace: [ 708.111128] dump_stack+0x1b2/0x283 [ 708.114741] dump_header+0x178/0x82f [ 708.118434] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 708.123569] ? ___ratelimit+0x2cd/0x522 [ 708.127524] oom_kill_process.cold+0x10/0xa69 [ 708.132007] ? lock_downgrade+0x740/0x740 [ 708.136140] out_of_memory+0x2dc/0x1190 [ 708.140108] ? oom_killer_disable+0x1c0/0x1c0 [ 708.144583] ? mutex_trylock+0x152/0x1a0 [ 708.148684] __alloc_pages_nodemask+0x23e1/0x2720 [ 708.153525] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 708.158344] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 708.163164] ? trace_hardirqs_on+0x10/0x10 [ 708.167431] ? cache_grow_begin+0x3f/0x420 [ 708.171643] cache_grow_begin+0x8f/0x420 [ 708.175692] ? mempolicy_slab_node+0x100/0x320 [ 708.180312] fallback_alloc+0x207/0x2c0 [ 708.184536] kmem_cache_alloc+0x1e5/0x3c0 [ 708.188663] getname_flags+0xc8/0x550 [ 708.192452] do_sys_open+0x1ce/0x410 [ 708.196146] ? filp_open+0x60/0x60 [ 708.199666] ? do_syscall_64+0x4c/0x640 [ 708.203618] ? do_sys_open+0x410/0x410 [ 708.207505] do_syscall_64+0x1d5/0x640 [ 708.211380] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 708.216557] RIP: 0033:0x7fc45fd009b1 [ 708.220250] RSP: 002b:00007ffc2f55b2f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 708.227950] RAX: ffffffffffffffda RBX: 00007ffc2f55b3e0 RCX: 00007fc45fd009b1 [ 708.235205] RDX: 0000000000000100 RSI: 0000000000090800 RDI: 000055ba871fde00 [ 708.242453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000110 [ 708.249702] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc2f55b4f0 [ 708.256952] R13: 000055ba871fde00 R14: 0000000000000100 R15: 00007ffc2f55b3c0 [ 708.287095] Mem-Info: [ 708.289664] active_anon:1332895 inactive_anon:9171 isolated_anon:0 [ 708.289664] active_file:86 inactive_file:255 isolated_file:32 [ 708.289664] unevictable:0 dirty:0 writeback:16 unstable:0 [ 708.289664] slab_reclaimable:17440 slab_unreclaimable:121842 [ 708.289664] mapped:53622 shmem:9382 pagetables:17106 bounce:0 [ 708.289664] free:22433 free_pcp:87 free_cma:0 [ 708.329592] Node 0 active_anon:1945336kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213328kB dirty:0kB writeback:4kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 708.363522] Node 1 active_anon:3386244kB inactive_anon:36kB active_file:284kB inactive_file:408kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:660kB dirty:0kB writeback:60kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 708.394851] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4676kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 708.426784] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 708.449592] Node 0 DMA32 free:27188kB min:36272kB low:45340kB high:54408kB active_anon:1940680kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10496kB pagetables:22200kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 708.508754] lowmem_reserve[]: 0 0 0 0 0 [ 708.512833] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 708.538647] lowmem_reserve[]: 0 0 0 0 0 [ 708.542926] Node 1 Normal free:53656kB min:53612kB low:67012kB high:80412kB active_anon:3386260kB inactive_anon:36kB active_file:396kB inactive_file:224kB unevictable:0kB writepending:76kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14496kB pagetables:46224kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 708.572115] lowmem_reserve[]: 0 0 0 0 0 [ 708.576149] Node 0 DMA: 3*4kB (UME) 18*8kB (UM) 4*16kB (UM) 12*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10396kB [ 708.595578] Node 0 DMA32: 1018*4kB (UME) 841*8kB (UME) 530*16kB (UME) 242*32kB (UM) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27216kB [ 708.609892] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 708.623239] Node 1 Normal: 443*4kB (UMH) 70*8kB (UME) 57*16kB (UME) 48*32kB (UMEH) 33*64kB (UMEH) 254*128kB (UM) 56*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 54252kB [ 708.724746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 708.736420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 708.746524] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 708.758179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 708.768302] 9699 total pagecache pages [ 708.772329] 0 pages in swap cache [ 708.778787] Swap cache stats: add 0, delete 0, find 0/0 [ 708.785889] Free swap = 0kB [ 708.789022] Total swap = 0kB [ 708.792116] 1965979 pages RAM [ 708.797909] 0 pages HighMem/MovableOnly [ 708.801998] 339056 pages reserved [ 708.806913] 0 pages cma reserved [ 708.810286] Out of memory: Kill process 17592 (syz-executor.0) score 1007 or sacrifice child [ 708.821445] Killed process 17592 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 708.878857] oom_reaper: reaped process 17592 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:52:51 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000200)="86cf5de8e257500dcc5adfc567e5f2247c45c1d353ce51b132962f8b66ada24cbcfcbf570aa88d05a0c9b474ea", 0x2d}, {&(0x7f0000000340)="a4eca2e991b3b747f2fd9e3c8001731240e0452d032e6a25285a03b6f8a2509105481d08c232b69fe5d3e262347396698eb4d3ff90dd2c17820be2b9b2adbedfb4b195cfd27f54e78c8438fd4cdcdddbe0154ff3551d645d10387398cd7b8ec4da17dc049eeb3df00e9f07f4bffcd6bbc7c52e0ae8aae70684f1fbf61569fac9e75344e13d9222447edd3cdff1e2403559d22e1626cb060eadb97d39bfdbcbff8956c4ab68abb66bede5207530f682870145ef77ce8c427fa3e2d3f0c3dd575b7c138697bd1a1d5ebaceaad3edc915dabc97a0581912dfe31d329a17908e3f8ac9a6e5294eb45dd7adbb7b5c010c9f956511155f6bda986a0ef6d49f58ba8e", 0xff}, {&(0x7f0000000440)="fe9ab984279c11166f8fb40b4513e12b6cfde917a62768e109697ec729937db88d2da8a9697b2d7be2dfafb2d8662be0b233d947f2f93028eb91b633ff0fbc3092df5751e549134d5f3a689bd2d77f4ba251e1fe818fd8967d5ed783221b8fbfcc28cef3d6436b40897693e9bdfb4fa328488499fc19e7df1c225c275192cc67dfa6c8abdcde31254b782e6c0d66d9210925e6fb110686337025888829cc8bb468478af554ebbe16fe823a4570b44c5998097af4eef2c2bf8506dcc785cf9a6f3490060797b49dc2ebaecc69aeb64cee13f9a15272dd334fb357277c1b98cd208f0b20cdb2ebc1f5f35807303ecd", 0xee}, {&(0x7f0000000540)="4754bcdf7cddb510e5e957334ccadf25d70d8ea6ee853a89394b5ad56ce36edadbc6c79dff2f00a40f7e2bab8ef2aa115db5078a7efe9cff2f69e2f4af62daa17084f9b635d60d4049c4a1d754acedb306012af8249060b3513e597fbc0c7b879d87e4568512c7c14979e19a77c3213534059945738d77d2fe5f4b9663fbd4edd0573818ff9e6ff78118e47bc2446dabeb7a3a39e1edc9425095f390df479f676f83f5c25fe914dffd25ed4cc2176ff0dca43ae29e8abe30bd0166640ae1dba7bd64ee52642432af", 0xc8}, {&(0x7f0000000640)="094acc285d36f5b7e4fd91c9b44403b3834c94c87a1d3aed0d1ca699b80018c633950a91cf518bc496f1bb6f2ea43a68b1756afb36b6d726db60a43e2eb333d230c8235e2330f30a28cd61fd2b40db6bde3591ba57f3644f0e4ad0582a4c17a3b552806a0597f6e32557cdd9d392d89306682592032a6f95eba7b198b390bea96dbe564804f024e2d163f05169425664373d66c14d1fe19a95071b64ff0c0bcc8b78aa0b164121ae81679c82577655bef57ba22f1f1e4cabc1ae5596e051c589de141b89019679c0b3", 0xc9}, {&(0x7f0000000740)="4ea634f04aa7a2f7a185326c33690ad85bf98494034c0fd97fbec1693ed5ac494e4799f7c4cc0dbac1d2da25c9bb34071c08412381f3c9ae0375b03b31bea5ada842b5bcc459eef470e2cff1d1cbdcadec106b55454fb4746e43c817cc3e41f111e76d262c0cb613b6b54c9dca1d242b94b72d63343c29d343c1ac2c129a77a3", 0x80}, {&(0x7f00000007c0)="a3877c21bb689d25e2fdea8ce6040808613b78a5c54b5efafc04ac0cbc07f6b5c55a01409463a7e968c059a68131fa0ef42cd388b59e23f82280ac9da5f1bbc1fd7606351e8f58ac035eae19003752998ab0021d8b995aad88881a41a49d4b66e1386ee685e6dc08beaeb0684192d5a2014de826b38cd525d62abf4a54c64a34ba3941eebdf9868f30f68952bbca13470c45f69556fda3af2b91c4c9be2a995204500fc8977706a317ee519d6e93c829336e88ee42eec66b1f99563207067c54d8867dc7b77e5aaec93acf2e9d2fc026307e09c79adfeb1c09d3be951ffe8204fc358def1be4f2398b77b65320ef37d4b9e8437ca7ef5af0", 0xf8}, {&(0x7f00000008c0)="db55e9961e916d1617d190a7afff9036cc266ebf3201ee53a47ff25d550adf8fb4402b08bb8badd04120e2864c0818aa45c5bc1fbce85b649310e5ef6b80597bc8d5256b62c06996cfbf6c764ad38325eacb5824", 0x54}, {&(0x7f0000000940)="9a65584f8263d4d0c0ac454112be77bf42bc747ffda9bcd258736cf1b5ef1b33b9d9ec1cddc02d157b8a3bd36b69a869727a29defc6b107edb57fee585f4a1788f89f3ad1d686094e7dbbcfd20787e49abb8e275df3d4533ad28c9ca3665de7cfb1bded898b5247f8bd4f4e4e8861faf11b70d613b712cceefed1358cb0633eca206c94df71b610fb44f7d4363b171d72100681f12585073de97f1188316074845676edaa55c786023ffa268882e9986f6fd3d7ac980b9ea705cf85e2ab99f8537c41b4641", 0xc5}, {&(0x7f0000000a40)="36e47569237bf75bdc471561c24f26d6bc3ca051965d01db6144b063ab9d1846599b56ac2945e9f5127749c6328d359d7ea75d8d53cf97fd9369128018a25c6efac8ac3450c8156de755cdf6746560bf5da7b04d4a73f9f0650707d37afaae68df147a63a77b491d744d3c9306458186bcfdbc36e25f957cf128194dd61febbd1b8149b9a6826aa8aeae184b5a20c70fade7120e97aa29806637513c2367c5607552c61431179e4d628002bbe15764d5e7cc66ca87ead307d5c544e38612", 0xbe}], 0xa, 0x0, 0x0, 0x41}, 0x4000042) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCXONC(r1, 0x540a, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f0000000500)}, {&(0x7f00000002c0)="90c8f16a5593609a8584df1e0064af63b1181d246b27361c8e4bfd6e16e973f604d3e38d4474b2c86e43b924893e993e8e523bc1b1c362f2cc200dc424949c7fd6dfbe05ddc4e41ba9fd72e34e98a4746ba86bf56ede9db1a56821e9c764642809bb6be38e29ed14aa4c9938a8905085531bcba945cbb27ac2ed380cddef0cf3cc39413609deeda5404985ad6a562aeb5134275c34f978e652201008300b2a3cfba2183891d0a6c26d3bfc48d9b67d614375efb1c312099aa141c380e9e233078c4cb0bf6c62ec04bfa03e7dc7ba1913815d39a4eab6eaa2d69a44fb4a3e23efea5941bd9f1d23b74d2a3d2caf3e", 0xee}], 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x101100, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:51 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, 0xffffffffffffffff, 0x0) 06:52:51 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x102f) dup3(r0, r1, 0x0) 06:52:51 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2b0400006fdbbed024058f750a73d8f63bb07a8aba573bb116d944c00db7247b1dababbef856263b7fcba80bca3c096ec2cdcba69a609d90c85dcd48ebeab0424471c6affeef61e53f4aa82ddd28da902a6b9bbab103448d6b12e73ff9a44609ac7c311c3aba93f94c586d9236855cfa6fbe2433040503f800b2a58fdab24adc7ef9cc348ed4c698bba37ee1c1fe2de88c10457c275f54f668028588a629f3f5500a6c832d7db5f76f24377ba2268884a53769ee875df0f31c9c38d1c78ba8526b0672fd47a99ca7862df775f7d029e18ceae00faaaf429fd79f0af313b78bbb9490306ebce2d4dc4acdb6a122bf09d14c6e0d885eacd7aafc9a82ef7a6b0239d4b6f8cefd46985ab574bf984b02df957b560c746cb09f909789989f1616", @ANYRES16=r4, @ANYBLOB="01000000000000000000030000000900010073797a3000000000"], 0x20}}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x0, 0x2, 'veth1_to_bond\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0xfffffffffffffd61, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x404c801}, 0x1) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:52:52 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:52 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000380)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) sendto$l2tp(r2, &(0x7f00000002c0)="c0b6e3566b994c6721443872a210f16ceba88866836b24edde080c7e4ad479a545c2c0366618f610b4d989fc00aa69d4dec64ebd6b08bb8d18df49d2ed8d16812f524407c0f1278c61182ff1b8f8575d57f346dc82662ba5129d08d7b73ff0049a7f8b66abb29a2831542da4500acc2a55a32f79c843dc5f39a481ff92accb0e3598e68c1a5b0ebd4c6e908f02c338dac4ce97f9a3e7a89cda839419114f95225dc9992090bf3386569c33", 0xab, 0x20000000, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010101, 0x3}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:52 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') [ 718.832123] ALSA: mixer_oss: invalid OSS volume '' [ 718.833398] ALSA: mixer_oss: invalid OSS volume 'dev/net/tun' [ 718.854585] ALSA: mixer_oss: invalid OSS volume '/dev/net/tun' [ 718.915753] ALSA: mixer_oss: invalid OSS volume '' 06:52:52 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x4, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:53 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000380)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) sendto$l2tp(r2, &(0x7f00000002c0)="c0b6e3566b994c6721443872a210f16ceba88866836b24edde080c7e4ad479a545c2c0366618f610b4d989fc00aa69d4dec64ebd6b08bb8d18df49d2ed8d16812f524407c0f1278c61182ff1b8f8575d57f346dc82662ba5129d08d7b73ff0049a7f8b66abb29a2831542da4500acc2a55a32f79c843dc5f39a481ff92accb0e3598e68c1a5b0ebd4c6e908f02c338dac4ce97f9a3e7a89cda839419114f95225dc9992090bf3386569c33", 0xab, 0x20000000, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010101, 0x3}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 720.276438] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 720.301868] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 720.307370] CPU: 0 PID: 23986 Comm: syz-executor.0 Not tainted 4.14.189-syzkaller #0 [ 720.315246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 720.324597] Call Trace: [ 720.327165] dump_stack+0x1b2/0x283 [ 720.330773] dump_header+0x178/0x82f [ 720.334464] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 720.339543] ? ___ratelimit+0x2cd/0x522 [ 720.343494] oom_kill_process.cold+0x10/0xa69 [ 720.347968] ? lock_downgrade+0x740/0x740 [ 720.352113] out_of_memory+0x2dc/0x1190 [ 720.356095] ? oom_killer_disable+0x1c0/0x1c0 [ 720.360568] ? mutex_trylock+0x152/0x1a0 [ 720.364611] __alloc_pages_nodemask+0x23e1/0x2720 [ 720.369442] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 720.374261] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 720.379187] ? trace_hardirqs_on+0x10/0x10 [ 720.383408] ? cache_grow_begin+0x3f/0x420 [ 720.388509] cache_grow_begin+0x8f/0x420 [ 720.392551] ? mempolicy_slab_node+0x100/0x320 [ 720.397114] fallback_alloc+0x207/0x2c0 [ 720.401068] kmem_cache_alloc_node+0xe3/0x410 [ 720.405557] copy_process.part.0+0x17db/0x6f00 [ 720.410156] ? __handle_mm_fault+0x2095/0x4620 [ 720.414743] ? lock_downgrade+0x740/0x740 [ 720.418870] ? __lru_cache_add+0x178/0x250 [ 720.423087] ? do_raw_spin_unlock+0x164/0x220 [ 720.427564] ? _raw_spin_unlock+0x29/0x40 [ 720.431706] ? __cleanup_sighand+0x40/0x40 [ 720.435925] ? selinux_file_mprotect+0xf3/0x5c0 [ 720.440577] _do_fork+0x184/0xc80 [ 720.444014] ? fork_idle+0x270/0x270 [ 720.447714] ? up_read+0x17/0x30 [ 720.451061] ? __do_page_fault+0x19a/0xb50 [ 720.455282] ? do_syscall_64+0x4c/0x640 [ 720.459232] ? sys_vfork+0x20/0x20 [ 720.462750] do_syscall_64+0x1d5/0x640 [ 720.466621] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 720.471802] RIP: 0033:0x45ed39 [ 720.474975] RSP: 002b:00007ffe8da5e108 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 720.482675] RAX: ffffffffffffffda RBX: 00007f70a668a700 RCX: 000000000045ed39 [ 720.489925] RDX: 00007f70a668a9d0 RSI: 00007f70a6689db0 RDI: 00000000003d0f00 [ 720.497172] RBP: 00007ffe8da5e330 R08: 00007f70a668a700 R09: 00007f70a668a700 [ 720.504420] R10: 00007f70a668a9d0 R11: 0000000000000202 R12: 0000000000000000 [ 720.511753] R13: 00007ffe8da5e1bf R14: 00007f70a668a9c0 R15: 000000000078bfac [ 720.540197] Mem-Info: [ 720.563926] active_anon:1335712 inactive_anon:9171 isolated_anon:0 [ 720.563926] active_file:374 inactive_file:393 isolated_file:38 [ 720.563926] unevictable:0 dirty:26 writeback:0 unstable:0 [ 720.563926] slab_reclaimable:17430 slab_unreclaimable:120723 [ 720.563926] mapped:54052 shmem:9382 pagetables:17248 bounce:0 [ 720.563926] free:20067 free_pcp:183 free_cma:0 [ 720.630784] Node 0 active_anon:1946360kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213368kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 720.662864] Node 1 active_anon:3396488kB inactive_anon:36kB active_file:1060kB inactive_file:1012kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:2040kB dirty:100kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 720.707732] Node 0 DMA free:10384kB min:220kB low:272kB high:324kB active_anon:4752kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 720.877186] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 720.882895] Node 0 DMA32 free:27296kB min:36272kB low:45340kB high:54408kB active_anon:1941660kB inactive_anon:36648kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10496kB pagetables:22196kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 720.912388] lowmem_reserve[]: 0 0 0 0 0 [ 720.918139] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 720.986315] lowmem_reserve[]: 0 0 0 0 0 [ 720.990808] Node 1 Normal free:58632kB min:53612kB low:67012kB high:80412kB active_anon:3380308kB inactive_anon:36kB active_file:428kB inactive_file:3308kB unevictable:0kB writepending:124kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14784kB pagetables:46688kB bounce:0kB free_pcp:868kB local_pcp:188kB free_cma:0kB [ 721.021224] lowmem_reserve[]: 0 0 0 0 0 [ 721.025650] Node 0 DMA: 2*4kB (UE) 11*8kB (U) 5*16kB (UM) 13*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10384kB [ 721.042014] Node 0 DMA32: 958*4kB (UMH) 931*8kB (UME) 524*16kB (UMEH) 243*32kB (UMH) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27504kB [ 721.056594] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 721.067563] Node 1 Normal: 99*4kB (UMEH) 241*8kB (UMEH) 257*16kB (UMH) 138*32kB (UMH) 33*64kB (UMEH) 233*128kB (UM) 57*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 59428kB [ 721.098431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 721.124708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 721.135770] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 06:52:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, {0x3, @dev={[], 0x28}, 'veth0_to_hsr\x00'}}, 0x1e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0xfffffffa}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000200)={r2}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 721.146733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 721.226191] 11191 total pagecache pages [ 721.230845] 0 pages in swap cache [ 721.263578] Swap cache stats: add 0, delete 0, find 0/0 [ 721.269701] Free swap = 0kB [ 721.277198] Total swap = 0kB [ 721.280249] 1965979 pages RAM [ 721.288043] 0 pages HighMem/MovableOnly [ 721.292344] 339056 pages reserved [ 721.295848] 0 pages cma reserved [ 721.299206] Out of memory: Kill process 23984 (syz-executor.5) score 1007 or sacrifice child [ 721.394349] ALSA: mixer_oss: invalid OSS volume '' [ 722.162801] kworker/u4:5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 722.176475] kworker/u4:5 cpuset=/ mems_allowed=0-1 [ 722.181712] CPU: 1 PID: 23989 Comm: kworker/u4:5 Not tainted 4.14.189-syzkaller #0 [ 722.189408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.198752] Call Trace: [ 722.201343] dump_stack+0x1b2/0x283 [ 722.204969] dump_header+0x178/0x82f [ 722.208681] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 722.213779] ? ___ratelimit+0x2cd/0x522 [ 722.217752] oom_kill_process.cold+0x10/0xa69 [ 722.222246] ? lock_downgrade+0x740/0x740 [ 722.226391] out_of_memory+0x2dc/0x1190 [ 722.230362] ? oom_killer_disable+0x1c0/0x1c0 [ 722.234851] ? mutex_trylock+0x152/0x1a0 [ 722.238909] __alloc_pages_nodemask+0x23e1/0x2720 [ 722.243759] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 722.248590] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 722.253424] ? trace_hardirqs_on+0x10/0x10 [ 722.257655] ? __vfs_read+0xec/0x620 [ 722.261360] ? mark_held_locks+0xa6/0xf0 [ 722.265413] ? cache_grow_begin+0x3f/0x420 [ 722.269643] cache_grow_begin+0x8f/0x420 [ 722.273699] ? mempolicy_slab_node+0x100/0x320 [ 722.278275] fallback_alloc+0x207/0x2c0 [ 722.282249] kmem_cache_alloc+0x1e5/0x3c0 [ 722.286394] getname_kernel+0x4e/0x340 [ 722.290274] open_exec+0x13/0x60 [ 722.293650] load_elf_binary+0x723/0x4750 [ 722.297803] ? search_binary_handler.part.0+0x98/0x640 [ 722.303078] ? elf_core_dump+0x4460/0x4460 [ 722.307311] search_binary_handler.part.0+0xd5/0x640 [ 722.312416] do_execveat_common+0x1099/0x1f30 [ 722.316908] ? copy_strings_kernel+0x110/0x110 [ 722.321483] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 722.326977] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 722.331989] do_execve+0x33/0x50 [ 722.335353] call_usermodehelper_exec_async+0x28f/0x4a0 [ 722.340709] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 722.346153] ret_from_fork+0x24/0x30 [ 722.364170] Mem-Info: [ 722.366601] active_anon:1333693 inactive_anon:9171 isolated_anon:0 [ 722.366601] active_file:85 inactive_file:203 isolated_file:32 [ 722.366601] unevictable:0 dirty:7 writeback:0 unstable:0 [ 722.366601] slab_reclaimable:17431 slab_unreclaimable:120503 [ 722.366601] mapped:53557 shmem:9382 pagetables:17234 bounce:0 [ 722.366601] free:22778 free_pcp:75 free_cma:0 [ 722.400209] Node 0 active_anon:1946264kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213368kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 722.428179] Node 1 active_anon:3388508kB inactive_anon:36kB active_file:184kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):96kB mapped:160kB dirty:24kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 722.455608] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:4752kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 722.484901] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 722.489946] Node 0 DMA32 free:27452kB min:36272kB low:45340kB high:54408kB active_anon:1941512kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10528kB pagetables:22196kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 722.518743] lowmem_reserve[]: 0 0 0 0 0 [ 722.522763] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 722.548352] lowmem_reserve[]: 0 0 0 0 0 [ 722.552341] Node 1 Normal free:53676kB min:53612kB low:67012kB high:80412kB active_anon:3388508kB inactive_anon:36kB active_file:132kB inactive_file:264kB unevictable:0kB writepending:24kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14688kB pagetables:46740kB bounce:0kB free_pcp:720kB local_pcp:0kB free_cma:0kB [ 722.581688] lowmem_reserve[]: 0 0 0 0 0 [ 722.585678] Node 0 DMA: 2*4kB (UE) 11*8kB (U) 5*16kB (UM) 12*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10352kB [ 722.601393] Node 0 DMA32: 962*4kB (UME) 929*8kB (UME) 523*16kB (UME) 242*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27456kB [ 722.615965] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 722.627091] Node 1 Normal: 178*4kB (MEH) 165*8kB (UME) 132*16kB (UM) 94*32kB (UMH) 21*64kB (UME) 233*128kB (UM) 57*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 54960kB [ 722.643476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 722.652730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 722.661664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 722.670972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 722.680356] 9726 total pagecache pages [ 722.684323] 0 pages in swap cache [ 722.687764] Swap cache stats: add 0, delete 0, find 0/0 [ 722.693149] Free swap = 0kB [ 722.696148] Total swap = 0kB [ 722.699206] 1965979 pages RAM [ 722.702286] 0 pages HighMem/MovableOnly [ 722.706317] 339056 pages reserved [ 722.709752] 0 pages cma reserved [ 722.713154] Out of memory: Kill process 17634 (syz-executor.0) score 1007 or sacrifice child [ 722.722229] Killed process 17634 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 722.804328] oom_reaper: reaped process 17634 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:52:56 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') [ 723.735866] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 723.769145] systemd-udevd cpuset=/ mems_allowed=0-1 [ 723.774299] CPU: 1 PID: 3650 Comm: systemd-udevd Not tainted 4.14.189-syzkaller #0 [ 723.781996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.791338] Call Trace: [ 723.793921] dump_stack+0x1b2/0x283 [ 723.797546] dump_header+0x178/0x82f [ 723.801252] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 723.806361] ? ___ratelimit+0x2cd/0x522 [ 723.810328] oom_kill_process.cold+0x10/0xa69 [ 723.814821] ? lock_downgrade+0x740/0x740 [ 723.818968] out_of_memory+0x2dc/0x1190 [ 723.822938] ? oom_killer_disable+0x1c0/0x1c0 [ 723.827424] ? mutex_trylock+0x152/0x1a0 [ 723.831479] __alloc_pages_nodemask+0x23e1/0x2720 [ 723.836327] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 723.841168] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 723.846008] ? trace_hardirqs_on+0x10/0x10 [ 723.850248] ? cache_grow_begin+0x3f/0x420 [ 723.854475] cache_grow_begin+0x8f/0x420 [ 723.858531] ? mempolicy_slab_node+0x100/0x320 [ 723.863105] fallback_alloc+0x207/0x2c0 [ 723.867074] kmem_cache_alloc+0x1e5/0x3c0 [ 723.871214] getname_flags+0xc8/0x550 [ 723.875006] do_sys_open+0x1ce/0x410 [ 723.878714] ? filp_open+0x60/0x60 [ 723.882245] ? do_syscall_64+0x4c/0x640 [ 723.886206] ? do_sys_open+0x410/0x410 [ 723.890172] do_syscall_64+0x1d5/0x640 [ 723.894054] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 723.899231] RIP: 0033:0x7fc45fd286f0 [ 723.902930] RSP: 002b:00007ffc2f55b228 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 723.910633] RAX: ffffffffffffffda RBX: 000055ba871ee530 RCX: 00007fc45fd286f0 [ 723.917893] RDX: 00000000000001b6 RSI: 0000000000080241 RDI: 00007ffc2f55b4f0 [ 723.925152] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000000000001 [ 723.932412] R10: 0000000000080240 R11: 0000000000000246 R12: 000055ba860c8002 [ 723.939669] R13: 0000000000000001 R14: 000055ba871e2970 R15: 00007ffc2f55b3c0 [ 723.953902] Mem-Info: [ 723.956336] active_anon:1333846 inactive_anon:9171 isolated_anon:0 [ 723.956336] active_file:7 inactive_file:31 isolated_file:32 [ 723.956336] unevictable:0 dirty:0 writeback:0 unstable:0 [ 723.956336] slab_reclaimable:17431 slab_unreclaimable:120189 [ 723.956336] mapped:53385 shmem:9382 pagetables:17227 bounce:0 [ 723.956336] free:23263 free_pcp:126 free_cma:0 [ 723.989917] Node 0 active_anon:1946840kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213372kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 724.017880] Node 1 active_anon:3388544kB inactive_anon:36kB active_file:460kB inactive_file:1112kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:788kB dirty:0kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 724.045029] Node 0 DMA free:10384kB min:220kB low:272kB high:324kB active_anon:4752kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 724.071582] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 724.096240] Node 0 DMA32 free:26980kB min:36272kB low:45340kB high:54408kB active_anon:1942088kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10496kB pagetables:22196kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 724.147741] lowmem_reserve[]: 0 0 0 0 0 [ 724.157172] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 724.186642] lowmem_reserve[]: 0 0 0 0 0 [ 724.190642] Node 1 Normal free:53720kB min:53612kB low:67012kB high:80412kB active_anon:3388548kB inactive_anon:36kB active_file:1020kB inactive_file:564kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14528kB pagetables:46716kB bounce:0kB free_pcp:900kB local_pcp:180kB free_cma:0kB [ 724.227334] lowmem_reserve[]: 0 0 0 0 0 [ 724.231570] Node 0 DMA: 2*4kB (UE) 11*8kB (U) 5*16kB (UM) 13*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10384kB [ 724.253580] Node 0 DMA32: 843*4kB (UM) 931*8kB (UME) 524*16kB (UME) 241*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26980kB [ 724.271640] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 724.302349] Node 1 Normal: 94*4kB (UME) 191*8kB (UME) 153*16kB (UM) 121*32kB (UM) 24*64kB (UME) 214*128kB (UM) 61*256kB (UM) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 55328kB [ 724.329399] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 724.338326] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 724.349426] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 724.381041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 724.389665] 9872 total pagecache pages [ 724.393669] 0 pages in swap cache [ 724.397116] Swap cache stats: add 0, delete 0, find 0/0 [ 724.402507] Free swap = 0kB [ 724.405514] Total swap = 0kB [ 724.408523] 1965979 pages RAM [ 724.411614] 0 pages HighMem/MovableOnly [ 724.415616] 339056 pages reserved [ 724.419061] 0 pages cma reserved [ 724.422481] Out of memory: Kill process 17674 (syz-executor.0) score 1007 or sacrifice child [ 724.431156] Killed process 17674 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB 06:52:57 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:57 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:57 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2b0400006fdbbed024058f750a73d8f63bb07a8aba573bb116d944c00db7247b1dababbef856263b7fcba80bca3c096ec2cdcba69a609d90c85dcd48ebeab0424471c6affeef61e53f4aa82ddd28da902a6b9bbab103448d6b12e73ff9a44609ac7c311c3aba93f94c586d9236855cfa6fbe2433040503f800b2a58fdab24adc7ef9cc348ed4c698bba37ee1c1fe2de88c10457c275f54f668028588a629f3f5500a6c832d7db5f76f24377ba2268884a53769ee875df0f31c9c38d1c78ba8526b0672fd47a99ca7862df775f7d029e18ceae00faaaf429fd79f0af313b78bbb9490306ebce2d4dc4acdb6a122bf09d14c6e0d885eacd7aafc9a82ef7a6b0239d4b6f8cefd46985ab574bf984b02df957b560c746cb09f909789989f1616", @ANYRES16=r4, @ANYBLOB="01000000000000000000030000000900010073797a3000000000"], 0x20}}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x0, 0x2, 'veth1_to_bond\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0xfffffffffffffd61, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x404c801}, 0x1) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:52:57 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:52:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x13ff) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) eventfd2(0x3f, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x400) pipe(&(0x7f0000000240)={0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x8800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:52:58 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)='wlan1\x00') [ 724.989589] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 725.044483] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 725.064542] CPU: 1 PID: 6375 Comm: syz-executor.4 Not tainted 4.14.189-syzkaller #0 [ 725.072344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 725.081688] Call Trace: [ 725.084270] dump_stack+0x1b2/0x283 [ 725.087892] dump_header+0x178/0x82f [ 725.091599] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 725.096690] ? ___ratelimit+0x2cd/0x522 [ 725.100659] oom_kill_process.cold+0x10/0xa69 [ 725.105150] ? lock_downgrade+0x740/0x740 [ 725.109298] out_of_memory+0x2dc/0x1190 [ 725.113270] ? oom_killer_disable+0x1c0/0x1c0 [ 725.117759] ? mutex_trylock+0x152/0x1a0 [ 725.121813] __alloc_pages_nodemask+0x23e1/0x2720 [ 725.126649] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 725.131470] ? trace_hardirqs_on+0x10/0x10 [ 725.135687] ? copy_page_range+0xfcb/0x2630 [ 725.139985] alloc_pages_current+0x155/0x260 [ 725.144373] pte_alloc_one+0x15/0x100 [ 725.148152] __pte_alloc+0x25/0x2c0 [ 725.151755] copy_page_range+0x1788/0x2630 [ 725.155979] ? apply_to_page_range+0xa60/0xa60 [ 725.160537] ? validate_mm_rb+0x3a/0xa0 [ 725.164488] copy_process.part.0+0x4a6f/0x6f00 [ 725.169057] ? __cleanup_sighand+0x40/0x40 [ 725.173353] ? lock_downgrade+0x740/0x740 [ 725.177480] _do_fork+0x184/0xc80 [ 725.180910] ? put_timespec64+0xaa/0xf0 [ 725.184869] ? fork_idle+0x270/0x270 [ 725.188560] ? SyS_clock_gettime+0xf5/0x180 [ 725.192858] ? SyS_clock_settime+0x1a0/0x1a0 [ 725.197242] ? do_syscall_64+0x4c/0x640 [ 725.201198] ? sys_vfork+0x20/0x20 [ 725.204716] do_syscall_64+0x1d5/0x640 [ 725.208586] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 725.213752] RIP: 0033:0x45a99a [ 725.216916] RSP: 002b:00007ffe402d59b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 725.224598] RAX: ffffffffffffffda RBX: 00007ffe402d59b0 RCX: 000000000045a99a [ 725.231858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 725.239103] RBP: 00007ffe402d59f0 R08: 0000000000000001 R09: 0000000000cc7940 [ 725.246350] R10: 0000000000cc7c10 R11: 0000000000000246 R12: 0000000000000001 [ 725.253594] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe402d5a40 [ 725.334781] Mem-Info: [ 725.337369] active_anon:1333905 inactive_anon:9171 isolated_anon:0 [ 725.337369] active_file:235 inactive_file:246 isolated_file:32 [ 725.337369] unevictable:0 dirty:29 writeback:0 unstable:0 [ 725.337369] slab_reclaimable:17431 slab_unreclaimable:120370 [ 725.337369] mapped:53806 shmem:9382 pagetables:17300 bounce:0 [ 725.337369] free:22570 free_pcp:2 free_cma:0 [ 725.371976] Node 0 active_anon:1946840kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213400kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 725.411077] Node 1 active_anon:3388780kB inactive_anon:36kB active_file:732kB inactive_file:1204kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:1724kB dirty:112kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 725.442790] Node 0 DMA free:10384kB min:220kB low:272kB high:324kB active_anon:4752kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 725.470247] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 725.475717] Node 0 DMA32 free:27012kB min:36272kB low:45340kB high:54408kB active_anon:1942088kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10496kB pagetables:22196kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 725.531981] lowmem_reserve[]: 0 0 0 0 0 [ 725.536684] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 725.568156] lowmem_reserve[]: 0 0 0 0 0 [ 725.576304] Node 1 Normal free:69264kB min:53612kB low:67012kB high:80412kB active_anon:3372672kB inactive_anon:36kB active_file:1052kB inactive_file:1520kB unevictable:0kB writepending:36kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14592kB pagetables:47004kB bounce:0kB free_pcp:712kB local_pcp:332kB free_cma:0kB [ 725.606585] lowmem_reserve[]: 0 0 0 0 0 [ 725.619596] Node 0 DMA: 2*4kB (UE) 11*8kB (U) 5*16kB (UM) 13*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10384kB [ 725.667714] Node 0 DMA32: 843*4kB (UM) 934*8kB (UME) 524*16kB (UME) 242*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27036kB [ 725.696529] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 06:52:59 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:52:59 executing program 5: prlimit64(0x0, 0x2, &(0x7f0000000280)={0x2000800000d, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000200)={0x6, 'veth0_virt_wifi\x00', {0x80000000}, 0x6}) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 725.727185] Node 1 Normal: 3*4kB (UME) 98*8kB (UME) 74*16kB (UM) 208*32kB (UMH) 92*64kB (UME) 218*128kB (UM) 64*256kB (UM) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 61372kB 06:52:59 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') [ 725.798683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 725.814952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 725.824989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 06:52:59 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') [ 725.854283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 725.869999] 11922 total pagecache pages [ 725.874473] 0 pages in swap cache [ 725.883476] Swap cache stats: add 0, delete 0, find 0/0 [ 725.889120] Free swap = 0kB [ 725.894679] Total swap = 0kB [ 725.901218] 1965979 pages RAM 06:52:59 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') [ 725.933595] 0 pages HighMem/MovableOnly [ 725.953212] 339056 pages reserved [ 725.964009] 0 pages cma reserved 06:52:59 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:52:59 executing program 1: socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)='wlan1\x00') [ 725.995147] Out of memory: Kill process 18056 (syz-executor.0) score 1007 or sacrifice child [ 726.028583] Killed process 18056 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 726.731860] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 726.771317] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 726.822363] CPU: 1 PID: 24067 Comm: syz-executor.5 Not tainted 4.14.189-syzkaller #0 [ 726.830269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 726.839604] Call Trace: [ 726.842174] dump_stack+0x1b2/0x283 [ 726.845781] dump_header+0x178/0x82f [ 726.849475] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 726.854561] ? ___ratelimit+0x2cd/0x522 [ 726.858513] oom_kill_process.cold+0x10/0xa69 [ 726.862987] ? lock_downgrade+0x740/0x740 [ 726.867127] out_of_memory+0x2dc/0x1190 [ 726.871100] ? oom_killer_disable+0x1c0/0x1c0 [ 726.875581] ? mutex_trylock+0x152/0x1a0 [ 726.879625] __alloc_pages_nodemask+0x23e1/0x2720 [ 726.884456] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 726.889365] ? __lock_acquire+0x5fc/0x3f20 [ 726.893590] alloc_pages_vma+0xd2/0x6d0 [ 726.897545] wp_page_copy+0xfcf/0x1ba0 [ 726.901415] ? _vm_normal_page+0x162/0x3b0 [ 726.905629] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 726.910107] ? __lock_acquire+0x5fc/0x3f20 [ 726.914323] do_wp_page+0x245/0x1db0 [ 726.918016] ? __handle_mm_fault+0x129c/0x4620 [ 726.922573] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 726.927218] ? __lock_acquire+0x5fc/0x3f20 [ 726.931433] __handle_mm_fault+0x234f/0x4620 [ 726.935841] ? vm_insert_page+0x7c0/0x7c0 [ 726.939969] ? lock_downgrade+0x740/0x740 [ 726.944096] ? cpuacct_charge+0x1cf/0x350 [ 726.948227] handle_mm_fault+0x306/0x7a0 [ 726.952269] __do_page_fault+0x578/0xb50 [ 726.956322] ? spurious_fault+0x640/0x640 [ 726.960547] ? do_page_fault+0x60/0x4f2 [ 726.964503] page_fault+0x25/0x50 [ 726.967937] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 726.973795] RSP: 0018:ffff8881aacffb68 EFLAGS: 00010206 [ 726.979136] RAX: ffffed103867d200 RBX: 0000000000001000 RCX: 0000000000000500 [ 726.986383] RDX: 0000000000001000 RSI: ffff8881c33e8b00 RDI: 0000000020603000 [ 726.993631] RBP: 0000000020602500 R08: 0000000000000000 R09: ffffed103867d1ff [ 727.000880] R10: ffff8881c33e8fff R11: 0000000000000000 R12: ffff8881c33e8000 [ 727.008127] R13: 00007ffffffff000 R14: 0000000020603500 R15: ffff8881aacffdf0 [ 727.015388] copyout+0x99/0xc0 [ 727.018561] copy_page_to_iter+0x324/0xca0 [ 727.022778] pipe_to_user+0xa8/0x160 [ 727.026472] __splice_from_pipe+0x326/0x7a0 [ 727.030784] ? iter_to_pipe+0x500/0x500 [ 727.034739] vmsplice_to_user+0x190/0x1b0 [ 727.038879] ? __splice_from_pipe+0x7a0/0x7a0 [ 727.043543] ? lock_downgrade+0x740/0x740 [ 727.047670] ? lock_acquire+0x170/0x3f0 [ 727.051620] ? lock_downgrade+0x740/0x740 [ 727.055747] ? __fget+0x225/0x360 [ 727.059181] SyS_vmsplice+0x12a/0x150 [ 727.062957] ? splice_from_pipe+0x120/0x120 [ 727.067258] do_syscall_64+0x1d5/0x640 [ 727.071129] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 727.076294] RIP: 0033:0x45c369 [ 727.079462] RSP: 002b:00007f914d00fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 727.087149] RAX: ffffffffffffffda RBX: 0000000000034dc0 RCX: 000000000045c369 [ 727.094395] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 727.101641] RBP: 000000000078c088 R08: 0000000000000000 R09: 0000000000000000 [ 727.108887] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 727.116134] R13: 00007ffd08b080ef R14: 00007f914d0109c0 R15: 000000000078c04c [ 727.178645] Mem-Info: [ 727.181217] active_anon:1331020 inactive_anon:9171 isolated_anon:0 [ 727.181217] active_file:236 inactive_file:192 isolated_file:45 [ 727.181217] unevictable:0 dirty:0 writeback:0 unstable:0 [ 727.181217] slab_reclaimable:17422 slab_unreclaimable:121111 [ 727.181217] mapped:53770 shmem:9382 pagetables:17264 bounce:0 [ 727.181217] free:24534 free_pcp:125 free_cma:0 [ 727.219920] Node 0 active_anon:1939564kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213492kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 727.267632] Node 1 active_anon:3384816kB inactive_anon:36kB active_file:176kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):52kB mapped:288kB dirty:0kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 727.338522] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:4752kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 727.375153] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 727.380206] Node 0 DMA32 free:34468kB min:36272kB low:45340kB high:54408kB active_anon:1934812kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10496kB pagetables:22176kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 727.414070] lowmem_reserve[]: 0 0 0 0 0 [ 727.418074] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 727.443617] lowmem_reserve[]: 0 0 0 0 0 [ 727.447600] Node 1 Normal free:53876kB min:53612kB low:67012kB high:80412kB active_anon:3386044kB inactive_anon:36kB active_file:40kB inactive_file:60kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14912kB pagetables:46880kB bounce:0kB free_pcp:816kB local_pcp:120kB free_cma:0kB [ 727.477018] lowmem_reserve[]: 0 0 0 0 0 [ 727.481009] Node 0 DMA: 2*4kB (UE) 11*8kB (U) 5*16kB (UM) 12*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10352kB [ 727.497643] Node 0 DMA32: 1270*4kB (UME) 1100*8kB (UME) 605*16kB (UME) 287*32kB (UM) 17*64kB (M) 3*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34472kB [ 727.512784] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 727.523537] Node 1 Normal: 156*4kB (UE) 123*8kB (UMEH) 35*16kB (UM) 10*32kB (UM) 59*64kB (UME) 223*128kB (UM) 64*256kB (UM) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53752kB [ 727.539867] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 727.549447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 727.558049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 727.566894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 727.575541] 9396 total pagecache pages [ 727.579404] 0 pages in swap cache [ 727.582883] Swap cache stats: add 0, delete 0, find 0/0 [ 727.588226] Free swap = 0kB [ 727.591216] Total swap = 0kB [ 727.594259] 1965979 pages RAM [ 727.597342] 0 pages HighMem/MovableOnly [ 727.601286] 339056 pages reserved [ 727.604753] 0 pages cma reserved [ 727.608267] Out of memory: Kill process 18123 (syz-executor.0) score 1007 or sacrifice child [ 727.617100] Killed process 18123 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 727.692254] oom_reaper: reaped process 18123 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:53:01 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x102f) dup3(r0, r1, 0x0) 06:53:01 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0xe34d2137ca22486f, 0x10000001, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x2}, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:53:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x80000000}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000200)={0x20, 0xfffffffffffffff5, 0x4, {0x0, 0x14}}, 0x20) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000200)}], 0x1, 0x4) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f00000002c0)=""/233) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:01 executing program 1: socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:53:01 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:53:01 executing program 1: socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)='wlan1\x00') [ 728.397591] ALSA: mixer_oss: invalid OSS volume '/dev/net/tun' 06:53:01 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:53:01 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, 0x0) 06:53:01 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:53:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x531842, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0xa, 0xd, 0x1, "93383256211e4951e1cbff1fced793e62f886d2f02a3e3febdfb010e973fa90ebbd0c4c3830206c2359115d8ff4a1c46033f769c99db879215499d8a6c69a0b7", "9a7546bcc1c422b9661c92622e7f6ee2920b6f510850640a1ba9b03ee2cd0d25024479685d7416c1876404450bd3f3ac64e12b93553c46df7a8fe13372d51322", "705b1321240c8c12771a2c48582ef40fdab008d2c8c5d86e4a19ed527ee60656", [0x101, 0x1]}) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:01 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, 0x0) 06:53:01 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:53:01 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, 0x0) 06:53:02 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0xc2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000280)={0xd1, 0xd9, 0x8001, "a5dd0e1825f93349e9ce878724075c3dd14ad63b5fe47dacfd90eaff07a198a278a2cb418d0d955b7d8b4109cbfffd84e8f9ee1dbd1d756388097af0881e73140d75b14ca6ffbb29790da5e19407b7aaa3d63d1f2828066d4c1aab44a881387c35c680d0401b7eb6df1f895f21fccc5da5f8bebdc26b1f218eab9460a7043d9f25d4ba4ff862201da0d687592192fd7b9542fe40ad75af2bc207caef98d1650df7bfeadd880c9d50098e0d1f5abf6c22543430714630402a4807b667a5352f8468906ba7ee60375bdf36284caa2a04445e"}) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000380)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:53:02 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:53:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8000, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r2}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), 0x0}, 0x20) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x7) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:02 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:53:02 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x3) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:53:02 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:53:02 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:53:02 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 06:53:03 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:53:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x800, 0x80000001) recvmmsg(r1, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x80000000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3, 0x0, 0x2000000}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0b}, 0x0, 0x0) 06:53:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:03 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, 0x0, 0x102f) dup3(r0, r1, 0x0) [ 729.868873] ALSA: mixer_oss: invalid OSS volume '' [ 730.407809] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 730.461604] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 730.472526] CPU: 1 PID: 24161 Comm: syz-executor.3 Not tainted 4.14.189-syzkaller #0 [ 730.480425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 730.489773] Call Trace: [ 730.492350] dump_stack+0x1b2/0x283 [ 730.495971] dump_header+0x178/0x82f [ 730.499675] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 730.504757] ? ___ratelimit+0x2cd/0x522 [ 730.508707] oom_kill_process.cold+0x10/0xa69 [ 730.513183] ? lock_downgrade+0x740/0x740 [ 730.517330] out_of_memory+0x2dc/0x1190 [ 730.521297] ? oom_killer_disable+0x1c0/0x1c0 [ 730.525769] ? mutex_trylock+0x152/0x1a0 [ 730.529811] __alloc_pages_nodemask+0x23e1/0x2720 [ 730.534634] ? _raw_spin_unlock_irq+0x24/0x80 [ 730.539115] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 730.543957] ? __lock_acquire+0x5fc/0x3f20 [ 730.548182] alloc_pages_vma+0xd2/0x6d0 [ 730.552135] wp_page_copy+0xfcf/0x1ba0 [ 730.556011] ? _vm_normal_page+0x162/0x3b0 [ 730.560224] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 730.564721] ? __lock_acquire+0x5fc/0x3f20 [ 730.568935] do_wp_page+0x245/0x1db0 [ 730.572626] ? __handle_mm_fault+0x129c/0x4620 [ 730.577186] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 730.581830] ? __lock_acquire+0x5fc/0x3f20 [ 730.586046] __handle_mm_fault+0x234f/0x4620 [ 730.590444] ? vm_insert_page+0x7c0/0x7c0 [ 730.594568] ? lock_downgrade+0x740/0x740 [ 730.598695] ? cpuacct_charge+0x1cf/0x350 [ 730.602839] handle_mm_fault+0x306/0x7a0 [ 730.606879] __do_page_fault+0x578/0xb50 [ 730.610926] ? spurious_fault+0x640/0x640 [ 730.615323] ? do_page_fault+0x60/0x4f2 [ 730.619286] page_fault+0x25/0x50 [ 730.622722] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 730.628578] RSP: 0018:ffff8881bad3fb68 EFLAGS: 00010206 [ 730.633917] RAX: ffffed103ca65600 RBX: 0000000000001000 RCX: 0000000000000500 [ 730.641164] RDX: 0000000000001000 RSI: ffff8881e532ab00 RDI: 0000000020659000 [ 730.648421] RBP: 0000000020658500 R08: 0000000000000000 R09: ffffed103ca655ff [ 730.655678] R10: ffff8881e532afff R11: 0000000000000000 R12: ffff8881e532a000 [ 730.662924] R13: 00007ffffffff000 R14: 0000000020659500 R15: ffff8881bad3fdf0 [ 730.670184] copyout+0x99/0xc0 [ 730.673367] copy_page_to_iter+0x324/0xca0 [ 730.677596] pipe_to_user+0xa8/0x160 [ 730.681287] __splice_from_pipe+0x326/0x7a0 [ 730.685596] ? iter_to_pipe+0x500/0x500 [ 730.689550] vmsplice_to_user+0x190/0x1b0 [ 730.693693] ? __splice_from_pipe+0x7a0/0x7a0 [ 730.698169] ? lock_downgrade+0x740/0x740 [ 730.702296] ? lock_acquire+0x170/0x3f0 [ 730.706246] ? lock_downgrade+0x740/0x740 [ 730.710375] ? __fget+0x225/0x360 [ 730.713809] SyS_vmsplice+0x12a/0x150 [ 730.717586] ? splice_from_pipe+0x120/0x120 [ 730.721887] do_syscall_64+0x1d5/0x640 [ 730.725755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 730.730930] RIP: 0033:0x45c369 [ 730.734101] RSP: 002b:00007f2f98d53c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 730.741787] RAX: ffffffffffffffda RBX: 0000000000034dc0 RCX: 000000000045c369 [ 730.749034] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 730.756282] RBP: 000000000078bfe8 R08: 0000000000000000 R09: 0000000000000000 [ 730.763537] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 730.770796] R13: 00007ffd7fbbc71f R14: 00007f2f98d549c0 R15: 000000000078bfac [ 730.925903] Mem-Info: [ 730.928807] active_anon:1331652 inactive_anon:9171 isolated_anon:0 [ 730.928807] active_file:84 inactive_file:94 isolated_file:0 [ 730.928807] unevictable:0 dirty:0 writeback:0 unstable:0 [ 730.928807] slab_reclaimable:17331 slab_unreclaimable:121582 [ 730.928807] mapped:53518 shmem:9382 pagetables:17369 bounce:0 [ 730.928807] free:23740 free_pcp:122 free_cma:0 [ 730.971442] Node 0 active_anon:1945964kB inactive_anon:36648kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213520kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 731.005220] Node 1 active_anon:3380644kB inactive_anon:36kB active_file:424kB inactive_file:816kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:692kB dirty:0kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 731.067923] Node 0 DMA free:10384kB min:220kB low:272kB high:324kB active_anon:4752kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 731.096563] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 731.101694] Node 0 DMA32 free:28192kB min:36272kB low:45340kB high:54408kB active_anon:1941212kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22204kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 731.135017] lowmem_reserve[]: 0 0 0 0 0 [ 731.139113] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 731.184716] lowmem_reserve[]: 0 0 0 0 0 [ 731.197744] Node 1 Normal free:55228kB min:53612kB low:67012kB high:80412kB active_anon:3380652kB inactive_anon:36kB active_file:1000kB inactive_file:1988kB unevictable:0kB writepending:48kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14848kB pagetables:47272kB bounce:0kB free_pcp:208kB local_pcp:124kB free_cma:0kB [ 731.308512] lowmem_reserve[]: 0 0 0 0 0 [ 731.322289] Node 0 DMA: 2*4kB (UE) 11*8kB (U) 5*16kB (UM) 13*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10384kB [ 731.376788] Node 0 DMA32: 907*4kB (UM) 1468*8kB (UME) 513*16kB (UME) 230*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30940kB [ 731.405830] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 731.418030] Node 1 Normal: 399*4kB (UME) 386*8kB (UME) 181*16kB (UME) 40*32kB (UMEH) 13*64kB (UME) 211*128kB (UME) 64*256kB (ME) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 54108kB [ 731.508217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.524856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 731.560748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.574683] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 731.586085] 10160 total pagecache pages [ 731.590464] 0 pages in swap cache [ 731.596528] Swap cache stats: add 0, delete 0, find 0/0 [ 731.601895] Free swap = 0kB [ 731.606998] Total swap = 0kB [ 731.610019] 1965979 pages RAM [ 731.620789] 0 pages HighMem/MovableOnly [ 731.626685] 339056 pages reserved [ 731.630155] 0 pages cma reserved [ 731.635527] Out of memory: Kill process 24180 (syz-executor.4) score 1007 or sacrifice child [ 731.789576] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 731.814181] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 731.819438] CPU: 0 PID: 6372 Comm: syz-executor.1 Not tainted 4.14.189-syzkaller #0 [ 731.827224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 731.836573] Call Trace: [ 731.839150] dump_stack+0x1b2/0x283 [ 731.842820] dump_header+0x178/0x82f [ 731.846554] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 731.851629] ? ___ratelimit+0x2cd/0x522 [ 731.855578] oom_kill_process.cold+0x10/0xa69 [ 731.860053] ? lock_downgrade+0x740/0x740 [ 731.864190] out_of_memory+0x2dc/0x1190 [ 731.868162] ? oom_killer_disable+0x1c0/0x1c0 [ 731.872633] ? mutex_trylock+0x152/0x1a0 [ 731.876668] __alloc_pages_nodemask+0x23e1/0x2720 [ 731.881490] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 731.886306] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 731.891132] ? trace_hardirqs_on+0x10/0x10 [ 731.895349] ? cache_grow_begin+0x3f/0x420 [ 731.899556] cache_grow_begin+0x8f/0x420 [ 731.903602] ? mempolicy_slab_node+0x100/0x320 [ 731.908154] fallback_alloc+0x207/0x2c0 [ 731.912103] kmem_cache_alloc+0x1e5/0x3c0 [ 731.916242] getname_flags+0xc8/0x550 [ 731.920023] user_path_mountpoint_at+0x23/0x40 [ 731.924583] SyS_umount+0x125/0xeb0 [ 731.928187] ? lock_downgrade+0x740/0x740 [ 731.932310] ? __detach_mounts+0x400/0x400 [ 731.936521] ? up_read+0x17/0x30 [ 731.939862] ? __do_page_fault+0x19a/0xb50 [ 731.944070] ? do_syscall_64+0x4c/0x640 [ 731.948017] ? __detach_mounts+0x400/0x400 [ 731.952226] do_syscall_64+0x1d5/0x640 [ 731.956092] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 731.961256] RIP: 0033:0x45ed97 [ 731.964435] RSP: 002b:00007ffe1ad086d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 731.972120] RAX: ffffffffffffffda RBX: 00000000000b2a01 RCX: 000000000045ed97 [ 731.979362] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffe1ad09810 [ 731.986603] RBP: 00000000000006e2 R08: 0000000000000001 R09: 00000000026f5940 [ 731.993868] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1ad09810 [ 732.001110] R13: 00007ffe1ad09800 R14: 0000000000000000 R15: 00007ffe1ad09810 [ 732.016333] Mem-Info: [ 732.018818] active_anon:1331692 inactive_anon:9171 isolated_anon:0 [ 732.018818] active_file:20 inactive_file:45 isolated_file:2 [ 732.018818] unevictable:0 dirty:1 writeback:0 unstable:0 [ 732.018818] slab_reclaimable:17331 slab_unreclaimable:121453 [ 732.018818] mapped:53419 shmem:9382 pagetables:17344 bounce:0 [ 732.018818] free:23954 free_pcp:156 free_cma:0 [ 732.056177] Node 0 active_anon:1943272kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213532kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 732.088845] Node 1 active_anon:3384196kB inactive_anon:36kB active_file:76kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:44kB dirty:4kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 732.115675] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:4752kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 732.142107] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 732.147111] Node 0 DMA32 free:30940kB min:36272kB low:45340kB high:54408kB active_anon:1938520kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10592kB pagetables:22204kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 732.176025] lowmem_reserve[]: 0 0 0 0 0 [ 732.179999] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 732.205588] lowmem_reserve[]: 0 0 0 0 0 [ 732.209581] Node 1 Normal free:53388kB min:53612kB low:67012kB high:80412kB active_anon:3384836kB inactive_anon:36kB active_file:44kB inactive_file:92kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14656kB pagetables:47176kB bounce:0kB free_pcp:88kB local_pcp:0kB free_cma:0kB [ 732.238945] lowmem_reserve[]: 0 0 0 0 0 [ 732.243703] Node 0 DMA: 2*4kB (UE) 11*8kB (U) 5*16kB (UM) 12*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10352kB [ 732.263018] Node 0 DMA32: 907*4kB (UM) 1468*8kB (UME) 513*16kB (UME) 230*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30940kB [ 732.276840] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 732.287828] Node 1 Normal: 271*4kB (UME) 313*8kB (UME) 183*16kB (UME) 46*32kB (UMEH) 15*64kB (UME) 212*128kB (UME) 64*256kB (ME) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53492kB [ 732.305407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 732.314455] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 732.323060] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 732.331932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 732.340487] 9423 total pagecache pages [ 732.344427] 0 pages in swap cache [ 732.347849] Swap cache stats: add 0, delete 0, find 0/0 [ 732.353224] Free swap = 0kB [ 732.356222] Total swap = 0kB [ 732.359210] 1965979 pages RAM [ 732.362304] 0 pages HighMem/MovableOnly [ 732.366248] 339056 pages reserved [ 732.369678] 0 pages cma reserved [ 732.373169] Out of memory: Kill process 24191 (syz-executor.4) score 1007 or sacrifice child [ 732.392180] Killed process 24191 (syz-executor.4) total-vm:75236kB, anon-rss:16568kB, file-rss:34816kB, shmem-rss:0kB 06:53:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x2000000a, 0x5}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000200)) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x2000, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1000036}, 0x0, 0x0) 06:53:05 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:05 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, 0x0, 0x102f) dup3(r0, r1, 0x0) [ 732.677322] ALSA: mixer_oss: invalid OSS volume '' 06:53:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:06 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, 0x0, 0x102f) dup3(r0, r1, 0x0) 06:53:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) ustat(0x6, &(0x7f0000000200)) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:06 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r4, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x7, 0x5841}, &(0x7f0000000380)=0x90) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r4, 0x4) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) [ 732.859935] ALSA: mixer_oss: invalid OSS volume '' 06:53:06 executing program 2: ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:06 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x102f) dup3(r0, r1, 0x0) [ 733.419808] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 733.454957] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 733.465735] CPU: 1 PID: 6375 Comm: syz-executor.4 Not tainted 4.14.189-syzkaller #0 [ 733.473534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 733.482871] Call Trace: [ 733.485439] dump_stack+0x1b2/0x283 [ 733.489047] dump_header+0x178/0x82f [ 733.492752] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 733.497828] ? ___ratelimit+0x2cd/0x522 [ 733.501778] oom_kill_process.cold+0x10/0xa69 [ 733.506252] ? lock_downgrade+0x740/0x740 [ 733.510377] out_of_memory+0x2dc/0x1190 [ 733.514328] ? oom_killer_disable+0x1c0/0x1c0 [ 733.518798] ? mutex_trylock+0x152/0x1a0 [ 733.522835] __alloc_pages_nodemask+0x23e1/0x2720 [ 733.527660] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 733.532476] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 733.537298] ? trace_hardirqs_on+0x10/0x10 [ 733.541510] ? dput.part.0+0x3b4/0x710 [ 733.545375] ? cache_grow_begin+0x3f/0x420 [ 733.549585] cache_grow_begin+0x8f/0x420 [ 733.553622] ? mempolicy_slab_node+0x100/0x320 [ 733.558180] fallback_alloc+0x207/0x2c0 [ 733.562131] kmem_cache_alloc+0x1e5/0x3c0 [ 733.566266] getname_flags+0xc8/0x550 [ 733.570042] do_sys_open+0x1ce/0x410 [ 733.573732] ? filp_open+0x60/0x60 [ 733.577422] ? __do_page_fault+0x19a/0xb50 [ 733.581631] ? do_syscall_64+0x4c/0x640 [ 733.585579] ? do_sys_open+0x410/0x410 [ 733.589441] do_syscall_64+0x1d5/0x640 [ 733.593308] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 733.598472] RIP: 0033:0x45a340 [ 733.601636] RSP: 002b:00007ffe402d4860 EFLAGS: 00000206 ORIG_RAX: 0000000000000002 [ 733.609323] RAX: ffffffffffffffda RBX: 00000000000b2fea RCX: 000000000045a340 [ 733.616583] RDX: 000000000000000c RSI: 0000000000090800 RDI: 00007ffe402d5a40 [ 733.623829] RBP: 00000000000006b1 R08: 0000000000000001 R09: 0000000000cc7940 [ 733.631074] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe402d5a40 [ 733.638318] R13: 00007ffe402d5a30 R14: 0000000000000000 R15: 00007ffe402d5a40 [ 733.726964] Mem-Info: [ 733.729469] active_anon:1334067 inactive_anon:9170 isolated_anon:0 [ 733.729469] active_file:109 inactive_file:125 isolated_file:28 [ 733.729469] unevictable:0 dirty:0 writeback:0 unstable:0 [ 733.729469] slab_reclaimable:17370 slab_unreclaimable:121165 [ 733.729469] mapped:53579 shmem:9382 pagetables:17452 bounce:0 [ 733.729469] free:21474 free_pcp:52 free_cma:0 [ 733.788522] Node 0 active_anon:1946132kB inactive_anon:36648kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213624kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 733.822041] Node 1 active_anon:3390136kB inactive_anon:32kB active_file:76kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 733.854898] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:4752kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 733.912728] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 733.917799] Node 0 DMA32 free:27552kB min:36272kB low:45340kB high:54408kB active_anon:1941380kB inactive_anon:36648kB active_file:4kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10592kB pagetables:22452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 733.950830] lowmem_reserve[]: 0 0 0 0 0 [ 733.971405] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 734.009443] lowmem_reserve[]: 0 0 0 0 0 [ 734.017550] Node 1 Normal free:50144kB min:53612kB low:67012kB high:80412kB active_anon:3390196kB inactive_anon:32kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14752kB pagetables:47260kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 734.052673] lowmem_reserve[]: 0 0 0 0 0 [ 734.056684] Node 0 DMA: 2*4kB (UE) 11*8kB (U) 5*16kB (UM) 12*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10352kB [ 734.074887] Node 0 DMA32: 586*4kB (UME) 1233*8kB (UME) 509*16kB (UE) 226*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27584kB [ 734.108103] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 734.131676] Node 1 Normal: 910*4kB (UME) 343*8kB (UME) 125*16kB (UME) 87*32kB (UME) 41*64kB (UME) 148*128kB (ME) 64*256kB (ME) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 50144kB [ 734.160398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 734.169358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 734.184836] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 734.195815] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 734.208624] 9409 total pagecache pages [ 734.215103] 0 pages in swap cache [ 734.218547] Swap cache stats: add 0, delete 0, find 0/0 [ 734.228163] Free swap = 0kB [ 734.231171] Total swap = 0kB [ 734.238349] 1965979 pages RAM [ 734.241443] 0 pages HighMem/MovableOnly [ 734.249652] 339056 pages reserved [ 734.257262] 0 pages cma reserved [ 734.260624] Out of memory: Kill process 24214 (syz-executor.2) score 1007 or sacrifice child [ 734.271359] Killed process 24214 (syz-executor.2) total-vm:75236kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB [ 734.410177] oom_reaper: reaped process 24214 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 734.900911] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 734.920771] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 734.952492] CPU: 0 PID: 6372 Comm: syz-executor.1 Not tainted 4.14.189-syzkaller #0 [ 734.960297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 734.974937] Call Trace: [ 734.977505] dump_stack+0x1b2/0x283 [ 734.981168] dump_header+0x178/0x82f [ 734.984859] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 734.989934] ? ___ratelimit+0x2cd/0x522 [ 734.993883] oom_kill_process.cold+0x10/0xa69 [ 734.998353] ? lock_downgrade+0x740/0x740 [ 735.002475] out_of_memory+0x2dc/0x1190 [ 735.006422] ? oom_killer_disable+0x1c0/0x1c0 [ 735.010890] ? mutex_trylock+0x152/0x1a0 [ 735.014928] __alloc_pages_nodemask+0x23e1/0x2720 [ 735.019747] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 735.024563] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 735.029379] ? trace_hardirqs_on+0x10/0x10 [ 735.033635] ? cache_grow_begin+0x3f/0x420 [ 735.037849] cache_grow_begin+0x8f/0x420 [ 735.041900] ? mempolicy_slab_node+0x100/0x320 [ 735.046454] fallback_alloc+0x207/0x2c0 [ 735.050403] kmem_cache_alloc+0x1e5/0x3c0 [ 735.054527] getname_flags+0xc8/0x550 [ 735.058301] user_path_mountpoint_at+0x23/0x40 [ 735.062860] SyS_umount+0x125/0xeb0 [ 735.066464] ? lock_downgrade+0x740/0x740 [ 735.070623] ? __detach_mounts+0x400/0x400 [ 735.074836] ? up_read+0x17/0x30 [ 735.078176] ? __do_page_fault+0x19a/0xb50 [ 735.082422] ? do_syscall_64+0x4c/0x640 [ 735.086366] ? __detach_mounts+0x400/0x400 [ 735.090632] do_syscall_64+0x1d5/0x640 [ 735.094499] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 735.099661] RIP: 0033:0x45ed97 [ 735.102825] RSP: 002b:00007ffe1ad086d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 735.110508] RAX: ffffffffffffffda RBX: 00000000000b3257 RCX: 000000000045ed97 [ 735.117798] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffe1ad09810 [ 735.125043] RBP: 00000000000006ea R08: 0000000000000001 R09: 00000000026f5940 [ 735.132324] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1ad09810 [ 735.139568] R13: 00007ffe1ad09800 R14: 0000000000000000 R15: 00007ffe1ad09810 [ 735.153609] Mem-Info: [ 735.156774] active_anon:1331002 inactive_anon:9170 isolated_anon:0 [ 735.156774] active_file:15 inactive_file:120 isolated_file:0 [ 735.156774] unevictable:0 dirty:0 writeback:0 unstable:0 [ 735.156774] slab_reclaimable:17370 slab_unreclaimable:121016 [ 735.156774] mapped:53410 shmem:9382 pagetables:17442 bounce:0 [ 735.156774] free:25148 free_pcp:92 free_cma:0 [ 735.206119] Node 0 active_anon:1937112kB inactive_anon:36648kB active_file:172kB inactive_file:288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213736kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 735.234721] Node 1 active_anon:3386896kB inactive_anon:32kB active_file:24kB inactive_file:124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 735.261532] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:4752kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.331459] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 735.341630] Node 0 DMA32 free:36156kB min:36272kB low:45340kB high:54408kB active_anon:1932360kB inactive_anon:36648kB active_file:216kB inactive_file:216kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10560kB pagetables:22372kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.384392] lowmem_reserve[]: 0 0 0 0 0 [ 735.388391] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.414260] lowmem_reserve[]: 0 0 0 0 0 [ 735.418776] Node 1 Normal free:53740kB min:53612kB low:67012kB high:80412kB active_anon:3386896kB inactive_anon:32kB active_file:40kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14848kB pagetables:47396kB bounce:0kB free_pcp:228kB local_pcp:228kB free_cma:0kB [ 735.460028] lowmem_reserve[]: 0 0 0 0 0 [ 735.466548] Node 0 DMA: 2*4kB (UE) 11*8kB (U) 5*16kB (UM) 12*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10352kB [ 735.501766] Node 0 DMA32: 1008*4kB (UME) 1480*8kB (UME) 619*16kB (UME) 290*32kB (UM) 15*64kB (M) 3*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36656kB [ 735.516878] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 735.527875] Node 1 Normal: 773*4kB (UME) 734*8kB (UME) 165*16kB (UME) 90*32kB (UME) 42*64kB (UME) 148*128kB (ME) 64*256kB (ME) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53524kB [ 735.543726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.552597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 735.561156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.569984] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 735.578958] 9427 total pagecache pages [ 735.583869] 0 pages in swap cache [ 735.587313] Swap cache stats: add 0, delete 0, find 0/0 [ 735.592720] Free swap = 0kB [ 735.595724] Total swap = 0kB [ 735.598714] 1965979 pages RAM [ 735.601830] 0 pages HighMem/MovableOnly [ 735.605871] 339056 pages reserved [ 735.609293] 0 pages cma reserved [ 735.612666] Out of memory: Kill process 18181 (syz-executor.0) score 1007 or sacrifice child [ 735.621256] Killed process 18181 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 735.679172] oom_reaper: reaped process 18181 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 736.219977] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 736.247587] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 736.258864] CPU: 0 PID: 24238 Comm: syz-executor.0 Not tainted 4.14.189-syzkaller #0 [ 736.266753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 736.276095] Call Trace: [ 736.278678] dump_stack+0x1b2/0x283 [ 736.282304] dump_header+0x178/0x82f [ 736.286014] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 736.291112] ? ___ratelimit+0x2cd/0x522 [ 736.295086] oom_kill_process.cold+0x10/0xa69 [ 736.299577] ? lock_downgrade+0x740/0x740 [ 736.303723] out_of_memory+0x2dc/0x1190 [ 736.307693] ? oom_killer_disable+0x1c0/0x1c0 [ 736.312180] ? mutex_trylock+0x152/0x1a0 [ 736.316229] __alloc_pages_nodemask+0x23e1/0x2720 [ 736.321053] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 736.325873] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 736.330694] ? trace_hardirqs_on+0x10/0x10 [ 736.334912] ? cache_grow_begin+0x3f/0x420 [ 736.339129] cache_grow_begin+0x8f/0x420 [ 736.343173] ? mempolicy_slab_node+0x100/0x320 [ 736.347728] fallback_alloc+0x207/0x2c0 [ 736.351679] kmem_cache_alloc+0x1e5/0x3c0 [ 736.355803] getname_flags+0xc8/0x550 [ 736.359581] ? SyS_access+0x20/0x20 [ 736.363190] user_path_at_empty+0x2a/0x50 [ 736.367321] SyS_chdir+0x7e/0x1a0 [ 736.370762] ? SyS_access+0x20/0x20 [ 736.374368] ? __do_page_fault+0x19a/0xb50 [ 736.378582] ? do_syscall_64+0x4c/0x640 [ 736.382531] ? SyS_access+0x20/0x20 [ 736.386134] do_syscall_64+0x1d5/0x640 [ 736.390001] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 736.395215] RIP: 0033:0x45b9b7 [ 736.398381] RSP: 002b:00007ffe8da5e3f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 736.406066] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045b9b7 [ 736.413309] RDX: 0000000000000001 RSI: 0000000000746e70 RDI: 00007ffe8da5e440 [ 736.420561] RBP: 0000000000000000 R08: 0000000000000001 R09: 000000000233b940 [ 736.427815] R10: 000000000233bc10 R11: 0000000000000246 R12: 0000000000000000 [ 736.435058] R13: 00007ffe8da5e430 R14: 0000000000000000 R15: 00007ffe8da5e440 [ 736.448001] Mem-Info: [ 736.450496] active_anon:1332725 inactive_anon:9171 isolated_anon:0 [ 736.450496] active_file:10 inactive_file:80 isolated_file:32 [ 736.450496] unevictable:0 dirty:22 writeback:3 unstable:0 [ 736.450496] slab_reclaimable:17370 slab_unreclaimable:121072 [ 736.450496] mapped:53430 shmem:9382 pagetables:17420 bounce:0 [ 736.450496] free:22960 free_pcp:157 free_cma:0 [ 736.489102] Node 0 active_anon:1945716kB inactive_anon:36648kB active_file:0kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213488kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 736.524217] Node 1 active_anon:3385184kB inactive_anon:36kB active_file:80kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164kB dirty:80kB writeback:20kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 736.559197] Node 0 DMA free:10380kB min:220kB low:272kB high:324kB active_anon:4752kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 736.595379] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 736.600515] Node 0 DMA32 free:27104kB min:36272kB low:45340kB high:54408kB active_anon:1940964kB inactive_anon:36648kB active_file:124kB inactive_file:452kB unevictable:0kB writepending:8kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22372kB bounce:0kB free_pcp:588kB local_pcp:272kB free_cma:0kB [ 736.630750] lowmem_reserve[]: 0 0 0 0 0 [ 736.637242] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 736.663793] lowmem_reserve[]: 0 0 0 0 0 [ 736.668658] Node 1 Normal free:59504kB min:53612kB low:67012kB high:80412kB active_anon:3377468kB inactive_anon:36kB active_file:0kB inactive_file:1592kB unevictable:0kB writepending:108kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14848kB pagetables:47308kB bounce:0kB free_pcp:476kB local_pcp:96kB free_cma:0kB [ 736.703784] lowmem_reserve[]: 0 0 0 0 0 [ 736.765014] Node 0 DMA: 2*4kB (UE) 11*8kB (U) 6*16kB (UM) 13*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10400kB [ 736.829822] Node 0 DMA32: 613*4kB (UM) 1293*8kB (UME) 511*16kB (UME) 224*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28140kB [ 736.852962] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 736.868820] Node 1 Normal: 317*4kB (UME) 101*8kB (UME) 59*16kB (UE) 160*32kB (UME) 92*64kB (UME) 161*128kB (ME) 68*256kB (ME) 5*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 54604kB [ 736.888810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 736.898089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 736.910887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 737.001769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 737.010363] 10738 total pagecache pages [ 737.038621] 0 pages in swap cache [ 737.042909] Swap cache stats: add 0, delete 0, find 0/0 [ 737.048560] Free swap = 0kB [ 737.056544] Total swap = 0kB [ 737.060078] 1965979 pages RAM [ 737.063764] 0 pages HighMem/MovableOnly [ 737.067896] 339056 pages reserved [ 737.071460] 0 pages cma reserved [ 737.080288] Out of memory: Kill process 18222 (syz-executor.0) score 1007 or sacrifice child [ 737.096603] Killed process 18222 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB 06:53:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$netlink(0x10, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:10 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000080)={0x1, 0x7ff, 0x4, 0x1f, 0x6, 0x7}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) [ 737.275552] ALSA: mixer_oss: invalid OSS volume '' 06:53:10 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000280)={0x2, 0x5, 0x4, 0x4000, 0x9, {0x0, 0x2710}, {0x3, 0x2, 0x20, 0x20, 0x7f, 0xf3, "1a96883b"}, 0x7ff, 0x1, @offset=0x301, 0x5, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000080)={{0x0, 0x0, @reserved="a5b4a1eed0f952faeb53ac0c683251771d97c9786b8691488fdc2fbd8360ec5b"}}) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:53:10 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x102f) dup3(r0, r1, 0x0) 06:53:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x81}, &(0x7f00000002c0)=0x8) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 737.380411] ALSA: mixer_oss: invalid OSS volume '' 06:53:11 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x102f) dup3(r0, r1, 0x0) [ 737.775535] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 737.847458] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 737.853358] CPU: 0 PID: 24267 Comm: syz-executor.1 Not tainted 4.14.189-syzkaller #0 [ 737.861236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 737.870567] Call Trace: [ 737.873138] dump_stack+0x1b2/0x283 [ 737.876748] dump_header+0x178/0x82f [ 737.880441] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 737.885524] ? ___ratelimit+0x2cd/0x522 [ 737.889475] oom_kill_process.cold+0x10/0xa69 [ 737.893953] ? lock_downgrade+0x740/0x740 [ 737.898079] out_of_memory+0x2dc/0x1190 [ 737.902034] ? oom_killer_disable+0x1c0/0x1c0 [ 737.906504] ? mutex_trylock+0x152/0x1a0 [ 737.910543] __alloc_pages_nodemask+0x23e1/0x2720 [ 737.915367] ? _raw_spin_unlock_irq+0x24/0x80 [ 737.919843] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 737.924659] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 737.930099] ? _find_next_bit+0xdb/0x100 [ 737.934157] alloc_pages_vma+0xd2/0x6d0 [ 737.938114] wp_page_copy+0xfcf/0x1ba0 [ 737.941986] ? _vm_normal_page+0x162/0x3b0 [ 737.946204] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 737.950677] ? __lock_acquire+0x5fc/0x3f20 [ 737.954890] do_wp_page+0x245/0x1db0 [ 737.958584] ? __handle_mm_fault+0x129c/0x4620 [ 737.963152] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 737.967801] ? __lock_acquire+0x5fc/0x3f20 [ 737.972019] __handle_mm_fault+0x234f/0x4620 [ 737.976421] ? vm_insert_page+0x7c0/0x7c0 [ 737.980557] ? lock_downgrade+0x740/0x740 [ 737.984683] ? cpuacct_charge+0x1cf/0x350 [ 737.988816] handle_mm_fault+0x306/0x7a0 [ 737.992858] __do_page_fault+0x578/0xb50 [ 737.996898] ? spurious_fault+0x640/0x640 [ 738.001022] ? do_page_fault+0x60/0x4f2 [ 738.004988] page_fault+0x25/0x50 [ 738.008423] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 738.014278] RSP: 0018:ffff88817a59fb68 EFLAGS: 00010206 [ 738.019631] RAX: ffffed10372c9000 RBX: 0000000000001000 RCX: 0000000000000500 [ 738.026899] RDX: 0000000000001000 RSI: ffff8881b9647b00 RDI: 0000000020079000 [ 738.034148] RBP: 0000000020078500 R08: 0000000000000000 R09: ffffed10372c8fff [ 738.041423] R10: ffff8881b9647fff R11: 0000000000000000 R12: ffff8881b9647000 [ 738.048673] R13: 00007ffffffff000 R14: 0000000020079500 R15: ffff88817a59fdf0 [ 738.055949] copyout+0x99/0xc0 [ 738.059126] copy_page_to_iter+0x324/0xca0 [ 738.063349] pipe_to_user+0xa8/0x160 [ 738.067044] __splice_from_pipe+0x326/0x7a0 [ 738.071346] ? iter_to_pipe+0x500/0x500 [ 738.075301] vmsplice_to_user+0x190/0x1b0 [ 738.079429] ? __splice_from_pipe+0x7a0/0x7a0 [ 738.083905] ? lock_downgrade+0x740/0x740 [ 738.088033] ? lock_acquire+0x170/0x3f0 [ 738.091984] ? lock_downgrade+0x740/0x740 [ 738.096112] ? __fget+0x225/0x360 [ 738.099547] SyS_vmsplice+0x12a/0x150 [ 738.103323] ? splice_from_pipe+0x120/0x120 [ 738.107623] do_syscall_64+0x1d5/0x640 [ 738.111493] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 738.116664] RIP: 0033:0x45c369 [ 738.119830] RSP: 002b:00007f281f41ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 738.127601] RAX: ffffffffffffffda RBX: 0000000000034dc0 RCX: 000000000045c369 [ 738.134847] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 738.142094] RBP: 000000000078bfe8 R08: 0000000000000000 R09: 0000000000000000 [ 738.149341] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 738.156859] R13: 00007ffe1ad0958f R14: 00007f281f41b9c0 R15: 000000000078bfac [ 738.241659] Mem-Info: [ 738.250359] active_anon:1328860 inactive_anon:9171 isolated_anon:0 [ 738.250359] active_file:460 inactive_file:510 isolated_file:13 [ 738.250359] unevictable:0 dirty:22 writeback:0 unstable:0 [ 738.250359] slab_reclaimable:17371 slab_unreclaimable:121080 [ 738.250359] mapped:54303 shmem:9382 pagetables:17426 bounce:0 [ 738.250359] free:25820 free_pcp:415 free_cma:0 [ 738.415396] Node 0 active_anon:1946432kB inactive_anon:36648kB active_file:56kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213572kB dirty:12kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 738.454922] ALSA: mixer_oss: invalid OSS volume '' [ 738.494715] Node 1 active_anon:3369108kB inactive_anon:36kB active_file:3940kB inactive_file:4856kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:6840kB dirty:76kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 738.527209] Node 0 DMA free:10376kB min:220kB low:272kB high:324kB active_anon:4752kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 738.556061] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 738.566091] Node 0 DMA32 free:27636kB min:36272kB low:45340kB high:54408kB active_anon:1941664kB inactive_anon:36648kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:12kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10592kB pagetables:22180kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 06:53:11 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x102f) dup3(r0, r1, 0x0) 06:53:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x3e9, 0x502, 0x70bc25, 0x25dfdbfd, {0x8, 0x1, 0x2, r0, 0x7, 0x2, 0x221aec0c, 0xf078, 0x0, 0x2}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40008000}, 0x4080) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) ptrace$setregset(0x4205, r1, 0x6, &(0x7f0000000340)={&(0x7f00000002c0)="6e5d9face356f407ccf0944e813b4ae63b87eb41e8145ce9f2ee7a657f5b578494ac860ffde4822474771d998ca464afdc92716059e0834e85fb73178b5b3289247203bba08149b2c167a19d8dba6c1bd541f9c177dca0e6c5ca6c08867f1144f509", 0x62}) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x4, 0xfffc, 0x0, 0x401, 0x4, 0x3, 0x0, 0x1fb}, 0x0, &(0x7f00000000c0)={0x2000000000ffc, 0x10000000003, 0x0, 0x0, 0x0, 0xa, 0x0, 0x400036}, 0x0, 0x0) 06:53:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:11 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000), 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0x2, 0x8, 0x10, @private0, @loopback, 0x80, 0x80, 0x2, 0x2}}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB="10060000", @ANYRES16=0x0, @ANYBLOB="00072abd7000fddbdf2501000000140002007767320000000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="0800070005000000ac0508802800008024000200e4a76bf1b8360a4c3319f4d50dfd90b62b1fd2042e1b010966f904d36dfc3ab62c000080200004000a004e2200000000fe880000000000000000000000000001bfbd0000080003000200000030000080080003000200000024000200cd570ecc599d5c9c55e6bdbaeaf647cc8f9e0c86776c05379a83b4aa14024c902403008024000200a35fa3afbba957453be1d763f0c00f4b659a0b159e8f60d72b90a00079abd4fa24000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696bb4020980a0000080060001000200000008000200e000000205000300010000000600010002000000080002000a0101000500030002000000060001000a0000001400020000000000000000000000ffff7f00000105000300010000000600010002000000080002007f0000010500030000000000060001000200000008000200ac1414bb050003000300000006000100020000000800020064010101050003000200000030010080060001000200000008000200e00000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000a00000014000200fc0000000000000000000000000000010500030003000000060001000200000008000200ac1414170500030001000000060001000a0000001400020000000000000000000000ffffffffffff0500030001000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030000000000b8000080060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e00000020500030000000000060001000200000008000200ac14141f0500030001000000060001000a00000014000200000000000000000000000000000000000500030001000000060001000200000008000200ffffffff0500030001000000060001000a0000001400020000000000000000000000000000000000050003000100000028000080060001000a00000014000200fc0000000000000000000000000000000500030002000000240002007bd5bd0e8b6ae1b124c4fd1c56f162f28b53ac1583fd8d3a6a7804bd343a5c0d30000080060005000600000024000200663e179994cf9f937d1e1662780e44bca0d64192a280c1ed2dc354a0d6b5006f0c0000800600050002000000a400008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff1400040002004e20ac1414bb00000000000000002430ff0200020049edbba4d152e242477b93dbf3bc15d3e988235e844072185412f40ff8b6881d200004000a004e24ffffffffff0200000000000000000000000000010300000024000200eb99896e28e2cceef4bad37a96cf9c4c9676fdf0e375a0da07317a5d42e55e3e540000800800030003000000060005000100000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c1400040002004e2200000000000000000000000008000a0001000000cc00008024000200a7b846cb727a4c2a8a5caeb36de20bdf9f9fd5747740779fe9246c83def2e7ff08000300010000000600050006000000200004000a004e2000000003fe800000000000000000000000000034000001000600050006000000240002007a98f32c53934efe1484e920847a642ed1866df5e59c1a634f82dd1af47a47e7240001000000000000000000000000000000000000000000000000000000000000000000240002002a75226877f58ea6180afd1b2707bdf970f448a55c3ee4160baa29b21a6cc0d224000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e0800050000000000"], 0x610}, 0x1, 0x0, 0x0, 0x20000090}, 0x81) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) [ 738.596293] lowmem_reserve[]: 0 0 0 0 0 [ 738.604658] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 738.671273] lowmem_reserve[]: 0 0 0 0 0 [ 738.679733] Node 1 Normal free:57908kB min:53612kB low:67012kB high:80412kB active_anon:3368740kB inactive_anon:32kB active_file:5616kB inactive_file:6056kB unevictable:0kB writepending:332kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14816kB pagetables:47392kB bounce:0kB free_pcp:456kB local_pcp:208kB free_cma:0kB [ 738.710151] ALSA: mixer_oss: invalid OSS volume '' 06:53:12 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x102f) dup3(r0, r1, 0x0) [ 738.798590] lowmem_reserve[]: 0 0 0 0 0 [ 738.815496] Node 0 DMA: 2*4kB (UE) 11*8kB (U) 8*16kB (UM) 11*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 739.132565] Node 0 DMA32: 422*4kB (UM) 1281*8kB (UE) 509*16kB (UE) 224*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27248kB [ 739.277188] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 739.290063] Node 1 Normal: 120*4kB (UME) 55*8kB (UME) 18*16kB (UME) 5*32kB (UE) 9*64kB (ME) 135*128kB (UME) 72*256kB (UME) 5*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 40216kB [ 739.310636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 739.320060] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 739.333495] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 739.344757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 739.355812] 9691 total pagecache pages [ 739.359916] 0 pages in swap cache [ 739.365717] Swap cache stats: add 0, delete 0, find 0/0 [ 739.371309] Free swap = 0kB [ 739.376676] Total swap = 0kB [ 739.379904] 1965979 pages RAM [ 739.385415] 0 pages HighMem/MovableOnly [ 739.389637] 339056 pages reserved [ 739.395391] 0 pages cma reserved [ 739.398971] Out of memory: Kill process 24243 (syz-executor.2) score 1007 or sacrifice child [ 739.416630] Killed process 24243 (syz-executor.2) total-vm:75236kB, anon-rss:16560kB, file-rss:34836kB, shmem-rss:0kB [ 739.461406] oom_reaper: reaped process 24243 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 740.162440] ALSA: mixer_oss: invalid OSS volume '' 06:53:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x14) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000180), 0x8, &(0x7f00000002c0)) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:13 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x102f) dup3(r0, r1, 0x0) 06:53:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) mmap$usbfs(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x1, 0x30, r1, 0x8) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 740.293533] ALSA: mixer_oss: invalid OSS volume '' 06:53:13 executing program 0: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(0xffffffffffffffff, r0, 0x0) [ 740.364709] ALSA: mixer_oss: invalid OSS volume '' [ 740.723000] syz-executor.2 invoked oom-killer: gfp_mask=0x15200c2(GFP_HIGHUSER|__GFP_ACCOUNT), nodemask=(null), order=0, oom_score_adj=1000 [ 740.809789] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 740.843409] CPU: 0 PID: 24332 Comm: syz-executor.2 Not tainted 4.14.189-syzkaller #0 [ 740.851303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.860636] Call Trace: [ 740.863206] dump_stack+0x1b2/0x283 [ 740.866830] dump_header+0x178/0x82f [ 740.870546] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 740.875633] ? ___ratelimit+0x2cd/0x522 [ 740.879600] oom_kill_process.cold+0x10/0xa69 [ 740.884077] ? lock_downgrade+0x740/0x740 [ 740.888207] out_of_memory+0x2dc/0x1190 [ 740.892171] ? oom_killer_disable+0x1c0/0x1c0 [ 740.896646] ? mutex_trylock+0x152/0x1a0 [ 740.900688] __alloc_pages_nodemask+0x23e1/0x2720 [ 740.905613] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 740.910433] ? retint_kernel+0x2d/0x2d [ 740.914327] ? copy_page_from_iter+0x4fd/0x730 [ 740.918891] alloc_pages_current+0x155/0x260 [ 740.923292] pipe_write+0x920/0xe10 [ 740.926903] __vfs_write+0x44c/0x630 [ 740.930595] ? kernel_read+0x110/0x110 [ 740.934467] ? rw_verify_area+0xe1/0x2a0 [ 740.938534] vfs_write+0x17f/0x4d0 [ 740.942060] SyS_write+0xf2/0x210 [ 740.945491] ? SyS_read+0x210/0x210 [ 740.949094] ? SyS_clock_settime+0x1a0/0x1a0 [ 740.953481] ? do_syscall_64+0x4c/0x640 [ 740.957432] ? SyS_read+0x210/0x210 [ 740.961048] do_syscall_64+0x1d5/0x640 [ 740.964930] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 740.970109] RIP: 0033:0x45c369 [ 740.973287] RSP: 002b:00007f9b33158c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 740.980973] RAX: ffffffffffffffda RBX: 0000000000034f00 RCX: 000000000045c369 [ 740.988221] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000005 [ 740.995470] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 741.002744] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 741.009992] R13: 00007fff926dab3f R14: 00007f9b331599c0 R15: 000000000078bf0c [ 741.127257] Mem-Info: [ 741.141832] active_anon:1330006 inactive_anon:9171 isolated_anon:0 [ 741.141832] active_file:333 inactive_file:304 isolated_file:17 [ 741.141832] unevictable:0 dirty:9 writeback:0 unstable:0 [ 741.141832] slab_reclaimable:17392 slab_unreclaimable:121425 [ 741.141832] mapped:53919 shmem:9382 pagetables:17500 bounce:0 [ 741.141832] free:24628 free_pcp:430 free_cma:0 06:53:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000180), 0x8, &(0x7f00000002c0)) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:14 executing program 0: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(0xffffffffffffffff, r0, 0x0) 06:53:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000200)) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0xfffffffffffffffd, 0x4000, 0x0, 0xa, 0x4, 0xffffffffffffff8d}, 0x0, 0x0) [ 741.371187] Node 0 active_anon:1937168kB inactive_anon:36648kB active_file:144kB inactive_file:156kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:213920kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 741.436555] ALSA: mixer_oss: invalid OSS volume '' 06:53:14 executing program 0: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(0xffffffffffffffff, r0, 0x0) [ 741.471637] Node 1 active_anon:3366656kB inactive_anon:36kB active_file:6684kB inactive_file:5656kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:9756kB dirty:136kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 741.535751] ALSA: mixer_oss: invalid OSS volume '' [ 741.557543] Node 0 DMA free:10388kB min:220kB low:272kB high:324kB active_anon:4764kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 06:53:15 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, 0xffffffffffffffff, 0x0) 06:53:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000180), 0x8, &(0x7f00000002c0)) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 741.859756] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 741.904253] Node 0 DMA32 free:29152kB min:36272kB low:45340kB high:54408kB active_anon:1939984kB inactive_anon:36648kB active_file:108kB inactive_file:56kB unevictable:0kB writepending:24kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10720kB pagetables:22196kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 742.046518] lowmem_reserve[]: 0 0 0 0 0 [ 742.050544] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 06:53:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 742.264601] lowmem_reserve[]: 0 0 0 0 0 [ 742.291810] Node 1 Normal free:58160kB min:53612kB low:67012kB high:80412kB active_anon:3371568kB inactive_anon:36kB active_file:1916kB inactive_file:4000kB unevictable:0kB writepending:44kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14976kB pagetables:47780kB bounce:0kB free_pcp:536kB local_pcp:332kB free_cma:0kB 06:53:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000100)={0x800000000000, 0xfffc, 0x0, 0x401, 0x0, 0x1fe, 0x8000000000, 0x202}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x20, 0x0, 0x0, 0xa, 0x7, 0x3a}, 0x0, 0x0) [ 742.341710] lowmem_reserve[]: 0 0 0 0 0 06:53:15 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c010000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf25170000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2c0001801400020076657468305f746f5f626f6e640000001400020067656e657665310000000000000000000c00018008000300020000002800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703665727370616e30000000000000080003000200000090000180140002006261746164765f736c6176c71a895f3100001400021a76657468305f766972745f7769666900080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e310000000000000000140002006970366772657461703000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f300000000008000300000000000800030000000000340001801400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r5, @ANYBLOB="1400020073797a6b616c6c657230000000000000"], 0x14c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8001) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) [ 742.392299] Node 0 DMA: 2*4kB (UE) 11*8kB (U) 8*16kB (UM) 11*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 742.441991] Node 0 DMA32: 951*4kB (UMEH) 1611*8kB (UME) 624*16kB (UMEH) 265*32kB (UMH) 11*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35988kB [ 742.796662] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 742.807490] Node 1 Normal: 133*4kB (UMEH) 73*8kB (UMEH) 39*16kB (UMEH) 23*32kB (UE) 15*64kB (UMEH) 151*128kB (UME) 68*256kB (ME) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 40684kB [ 742.841296] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 742.851011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 742.870361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 742.920490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 742.964712] 10492 total pagecache pages [ 742.968787] 0 pages in swap cache [ 742.980733] Swap cache stats: add 0, delete 0, find 0/0 [ 743.006970] Free swap = 0kB [ 743.013968] Total swap = 0kB [ 743.017072] 1965979 pages RAM [ 743.020241] 0 pages HighMem/MovableOnly [ 743.036747] 339056 pages reserved [ 743.044737] 0 pages cma reserved [ 743.048383] Out of memory: Kill process 18285 (syz-executor.0) score 1007 or sacrifice child [ 743.068872] Killed process 18285 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 743.196962] oom_reaper: reaped process 18285 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 743.289345] ALSA: mixer_oss: invalid OSS volume '' 06:53:16 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, 0xffffffffffffffff, 0x0) 06:53:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) bind$isdn(0xffffffffffffffff, &(0x7f0000000200)={0x22, 0x9, 0x2, 0x20, 0xdb}, 0x6) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 743.454725] ALSA: mixer_oss: invalid OSS volume '' 06:53:17 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, 0xffffffffffffffff, 0x0) [ 743.821195] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 743.856077] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 743.870046] CPU: 1 PID: 24388 Comm: syz-executor.3 Not tainted 4.14.189-syzkaller #0 [ 743.877937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 743.887368] Call Trace: [ 743.889952] dump_stack+0x1b2/0x283 [ 743.893567] dump_header+0x178/0x82f [ 743.897260] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 743.902363] ? ___ratelimit+0x2cd/0x522 [ 743.906316] oom_kill_process.cold+0x10/0xa69 [ 743.910788] ? lock_downgrade+0x740/0x740 [ 743.914985] out_of_memory+0x2dc/0x1190 [ 743.918937] ? oom_killer_disable+0x1c0/0x1c0 [ 743.923408] ? mutex_trylock+0x152/0x1a0 [ 743.927465] __alloc_pages_nodemask+0x23e1/0x2720 [ 743.932300] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 743.937131] ? __lock_acquire+0x5fc/0x3f20 [ 743.941353] ? _raw_spin_unlock_irq+0x5a/0x80 [ 743.945827] ? finish_task_switch+0x178/0x610 [ 743.950298] ? finish_task_switch+0x14d/0x610 [ 743.954789] alloc_pages_vma+0xd2/0x6d0 [ 743.958757] __handle_mm_fault+0x25fa/0x4620 [ 743.963146] ? vm_insert_page+0x7c0/0x7c0 [ 743.967299] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 743.972044] handle_mm_fault+0x306/0x7a0 [ 743.976095] __do_page_fault+0x578/0xb50 [ 743.980137] ? spurious_fault+0x640/0x640 [ 743.984263] ? do_page_fault+0x60/0x4f2 [ 743.988214] ? page_fault+0x2f/0x50 [ 743.991816] page_fault+0x45/0x50 [ 743.995246] RIP: 7fbbc71f:0x7f2f98cd09c0 [ 743.999278] RSP: 98cd0700:00007ffd7fbbc890 EFLAGS: 00000000 [ 744.029027] Mem-Info: [ 744.039495] active_anon:1333560 inactive_anon:9170 isolated_anon:0 [ 744.039495] active_file:470 inactive_file:518 isolated_file:108 [ 744.039495] unevictable:0 dirty:58 writeback:3 unstable:0 [ 744.039495] slab_reclaimable:17387 slab_unreclaimable:121656 [ 744.039495] mapped:54448 shmem:9382 pagetables:17526 bounce:0 [ 744.039495] free:20565 free_pcp:0 free_cma:0 [ 744.085819] Node 0 active_anon:1946740kB inactive_anon:36648kB active_file:8kB inactive_file:124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213820kB dirty:56kB writeback:4kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 744.142746] Node 1 active_anon:3387500kB inactive_anon:32kB active_file:1460kB inactive_file:1500kB unevictable:0kB isolated(anon):0kB isolated(file):272kB mapped:2972kB dirty:176kB writeback:8kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 744.201749] Node 0 DMA free:10368kB min:220kB low:272kB high:324kB active_anon:4752kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 744.229518] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 744.234986] Node 0 DMA32 free:27132kB min:36272kB low:45340kB high:54408kB active_anon:1941988kB inactive_anon:36648kB active_file:8kB inactive_file:108kB unevictable:0kB writepending:20kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10624kB pagetables:22208kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 744.264497] lowmem_reserve[]: 0 0 0 0 0 [ 744.281175] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 744.316709] lowmem_reserve[]: 0 0 0 0 0 [ 744.321311] Node 1 Normal free:46928kB min:53612kB low:67012kB high:80412kB active_anon:3387500kB inactive_anon:32kB active_file:920kB inactive_file:1408kB unevictable:0kB writepending:172kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15232kB pagetables:47896kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 744.362998] lowmem_reserve[]: 0 0 0 0 0 [ 744.370476] Node 0 DMA: 2*4kB (UE) 11*8kB (U) 8*16kB (UM) 11*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 744.394682] Node 0 DMA32: 497*4kB (UM) 1349*8kB (UME) 502*16kB (UME) 210*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27532kB [ 744.408441] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 744.419202] Node 1 Normal: 1258*4kB (UME) 381*8kB (UME) 94*16kB (UME) 28*32kB (UME) 15*64kB (UE) 138*128kB (UME) 72*256kB (ME) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 48048kB [ 744.435753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 744.444646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 744.453258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 744.474315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 744.498640] 9524 total pagecache pages [ 744.502716] 0 pages in swap cache [ 744.506284] Swap cache stats: add 0, delete 0, find 0/0 [ 744.614620] Free swap = 0kB [ 744.625471] Total swap = 0kB [ 744.628490] 1965979 pages RAM [ 744.649433] 0 pages HighMem/MovableOnly [ 744.654104] 339056 pages reserved [ 744.664740] 0 pages cma reserved [ 744.668150] Out of memory: Kill process 24391 (syz-executor.1) score 1007 or sacrifice child [ 744.958338] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 744.970644] systemd-journal cpuset=/ mems_allowed=0-1 [ 744.982229] CPU: 0 PID: 3645 Comm: systemd-journal Not tainted 4.14.189-syzkaller #0 [ 744.990106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 744.999448] Call Trace: [ 745.002070] dump_stack+0x1b2/0x283 [ 745.005672] dump_header+0x178/0x82f [ 745.009369] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 745.014447] ? ___ratelimit+0x2cd/0x522 [ 745.018396] oom_kill_process.cold+0x10/0xa69 [ 745.022867] ? lock_downgrade+0x740/0x740 [ 745.026990] out_of_memory+0x2dc/0x1190 [ 745.030938] ? oom_killer_disable+0x1c0/0x1c0 [ 745.035406] ? mutex_trylock+0x152/0x1a0 [ 745.039446] __alloc_pages_nodemask+0x23e1/0x2720 [ 745.044269] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 745.049083] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 745.053901] ? trace_hardirqs_on+0x10/0x10 [ 745.058114] ? cache_grow_begin+0x3f/0x420 [ 745.062321] cache_grow_begin+0x8f/0x420 [ 745.066356] ? mempolicy_slab_node+0x100/0x320 [ 745.070910] fallback_alloc+0x207/0x2c0 [ 745.074863] kmem_cache_alloc+0x1e5/0x3c0 [ 745.078991] getname_flags+0xc8/0x550 [ 745.082766] user_path_at_empty+0x2a/0x50 [ 745.086887] SyS_faccessat+0x21b/0x680 [ 745.090748] ? SyS_fallocate+0x80/0x80 [ 745.094609] ? do_syscall_64+0x4c/0x640 [ 745.098554] ? SyS_faccessat+0x680/0x680 [ 745.102589] do_syscall_64+0x1d5/0x640 [ 745.106452] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 745.111613] RIP: 0033:0x7f637a6ac9c7 [ 745.115299] RSP: 002b:00007fffdaee41e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 745.122980] RAX: ffffffffffffffda RBX: 00007fffdaee7100 RCX: 00007f637a6ac9c7 [ 745.130222] RDX: 00007f637b11da00 RSI: 0000000000000000 RDI: 000055de0d6c69a3 [ 745.137582] RBP: 00007fffdaee4220 R08: 0000000000000000 R09: 0000000000000000 [ 745.144832] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 745.152079] R13: 0000000000000000 R14: 00007fffdaee7100 R15: 00007fffdaee4710 [ 745.171554] Mem-Info: [ 745.173997] active_anon:1332868 inactive_anon:9170 isolated_anon:0 [ 745.173997] active_file:24 inactive_file:0 isolated_file:20 [ 745.173997] unevictable:0 dirty:3 writeback:1 unstable:0 [ 745.173997] slab_reclaimable:17387 slab_unreclaimable:121456 [ 745.173997] mapped:53442 shmem:9382 pagetables:17498 bounce:0 [ 745.173997] free:22746 free_pcp:0 free_cma:0 [ 745.207340] Node 0 active_anon:1946860kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213764kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 745.235510] Node 1 active_anon:3384612kB inactive_anon:32kB active_file:60kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:8kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 745.262218] Node 0 DMA free:10400kB min:220kB low:272kB high:324kB active_anon:4752kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 745.337713] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 745.347184] Node 0 DMA32 free:27412kB min:36272kB low:45340kB high:54408kB active_anon:1942108kB inactive_anon:36648kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10592kB pagetables:22208kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 745.393326] lowmem_reserve[]: 0 0 0 0 0 [ 745.397357] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 745.429141] lowmem_reserve[]: 0 0 0 0 0 [ 745.433196] Node 1 Normal free:53320kB min:53612kB low:67012kB high:80412kB active_anon:3384612kB inactive_anon:32kB active_file:60kB inactive_file:72kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15008kB pagetables:47784kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 745.464803] lowmem_reserve[]: 0 0 0 0 0 [ 745.468795] Node 0 DMA: 2*4kB (UE) 11*8kB (U) 8*16kB (UM) 11*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 745.486524] Node 0 DMA32: 475*4kB (UME) 1345*8kB (UME) 502*16kB (UME) 210*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27412kB [ 745.500332] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 745.517470] Node 1 Normal: 344*4kB (UME) 199*8kB (UME) 297*16kB (UME) 159*32kB (UMEH) 55*64kB (UME) 141*128kB (UME) 72*256kB (ME) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53320kB [ 745.537884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 745.546760] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 745.557542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 745.566406] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 745.577154] 9417 total pagecache pages [ 745.581040] 0 pages in swap cache [ 745.596373] Swap cache stats: add 0, delete 0, find 0/0 [ 745.618818] Free swap = 0kB [ 745.629585] Total swap = 0kB [ 745.636898] 1965979 pages RAM [ 745.640045] 0 pages HighMem/MovableOnly [ 745.650458] 339056 pages reserved [ 745.658200] 0 pages cma reserved [ 745.667938] Out of memory: Kill process 24395 (syz-executor.4) score 1007 or sacrifice child [ 745.678761] Killed process 24395 (syz-executor.4) total-vm:75236kB, anon-rss:16568kB, file-rss:34816kB, shmem-rss:0kB 06:53:19 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x102f) dup3(r0, r1, 0x0) [ 745.888650] oom_reaper: reaped process 24395 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:53:19 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:53:19 executing program 5: prlimit64(0x0, 0x6, &(0x7f0000000280)={0x0, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, 0x1a, 0x100, 0x70bd2c, 0x25dfdbfb, {0x1d}, [@typed={0x14, 0x82, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, [], 0x1}}, @generic="827e3da31c29eddfdecf4b7f2b9f1428149dd4cd3234d6718b5482b9f3a3e7540e97e96f37fb42e2792461fbf3572d587345e5d08fec7e33daaef6d33c92d69224a3d6351ba6f192de454e54d19c4d9e68b5ae6aedb91ca38c14f433844bb2f434e3f76b6a94a9eec94e110c22b47c216d6b6a2656c026cecf2cdac7862a680f6dc8657860c634f0253cee223755b0e4abc984110c0eb3b8e3"]}, 0xc4}, 0x1, 0x0, 0x0, 0x40824}, 0x40) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{&(0x7f0000000380)=@hci, 0x80, &(0x7f0000000740)=[{&(0x7f0000000400)=""/22, 0x16}, {&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000500)=""/73, 0x49}, {&(0x7f0000000580)=""/15, 0xf}], 0x4}, 0x3}, {{&(0x7f0000000600)=@ipx, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000001a40)=""/112, 0x70}, {&(0x7f00000007c0)=""/81, 0x51}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x5, &(0x7f0000001ac0)=""/211, 0xd3}, 0x9a}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="000000000000000000001b000000c923ee260e39f15cfc4b05009200000000001400228008000400060000000800070004000000"], 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x800) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_STA_WME_MAX_SP={0x16, 0x2, "8936e35f512e6a920bd0d7b95f185e464e44"}, @NL80211_STA_WME_MAX_SP={0x15, 0x2, "d03f0accc5785c2f37c7a98fed4c59c237"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x810b, 0x4}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc041}, 0x45) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3f61eed1cc"}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a1582ffb56f977110d57608e45"}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 746.195964] ALSA: mixer_oss: invalid OSS volume '' [ 746.283451] ALSA: mixer_oss: invalid OSS volume '' [ 746.803757] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 746.818318] systemd-journal cpuset=/ mems_allowed=0-1 [ 746.836085] CPU: 1 PID: 3645 Comm: systemd-journal Not tainted 4.14.189-syzkaller #0 [ 746.843988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.853319] Call Trace: [ 746.855886] dump_stack+0x1b2/0x283 [ 746.859493] dump_header+0x178/0x82f [ 746.863185] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 746.868264] ? ___ratelimit+0x2cd/0x522 [ 746.872218] oom_kill_process.cold+0x10/0xa69 [ 746.876708] ? lock_downgrade+0x740/0x740 [ 746.880835] out_of_memory+0x2dc/0x1190 [ 746.884789] ? oom_killer_disable+0x1c0/0x1c0 [ 746.889258] ? mutex_trylock+0x152/0x1a0 [ 746.893300] __alloc_pages_nodemask+0x23e1/0x2720 [ 746.898128] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 746.902945] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 746.907848] ? trace_hardirqs_on+0x10/0x10 [ 746.912067] ? cache_grow_begin+0x3f/0x420 [ 746.916277] cache_grow_begin+0x8f/0x420 [ 746.920330] ? mempolicy_slab_node+0x100/0x320 [ 746.924894] fallback_alloc+0x207/0x2c0 [ 746.928849] kmem_cache_alloc+0x1e5/0x3c0 [ 746.932978] getname_flags+0xc8/0x550 [ 746.936757] do_sys_open+0x1ce/0x410 [ 746.940447] ? filp_open+0x60/0x60 [ 746.943978] ? do_syscall_64+0x4c/0x640 [ 746.947930] ? do_sys_open+0x410/0x410 [ 746.951793] do_syscall_64+0x1d5/0x640 [ 746.955660] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 746.960827] RIP: 0033:0x7f637a98085d [ 746.964514] RSP: 002b:00007fffdaee3d40 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 746.972199] RAX: ffffffffffffffda RBX: 00007fffdaee4050 RCX: 00007f637a98085d [ 746.979442] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055de0e8329e0 [ 746.986689] RBP: 000000000000000d R08: 00000000000001c0 R09: 00000000ffffffff [ 746.994020] R10: 0000000000000069 R11: 0000000000000293 R12: 00000000ffffffff [ 747.001267] R13: 000055de0e826060 R14: 00007fffdaee4010 R15: 000055de0e829ea0 [ 747.056118] Mem-Info: [ 747.058559] active_anon:1335327 inactive_anon:9171 isolated_anon:0 [ 747.058559] active_file:219 inactive_file:342 isolated_file:40 [ 747.058559] unevictable:0 dirty:10 writeback:0 unstable:0 [ 747.058559] slab_reclaimable:17386 slab_unreclaimable:121281 [ 747.058559] mapped:53965 shmem:9382 pagetables:17556 bounce:0 [ 747.058559] free:19702 free_pcp:9 free_cma:0 [ 747.095556] Node 0 active_anon:1946788kB inactive_anon:36648kB active_file:104kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213836kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 747.126772] Node 1 active_anon:3394520kB inactive_anon:36kB active_file:772kB inactive_file:772kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1424kB dirty:40kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 747.155621] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:4764kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 747.211773] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 747.217383] Node 0 DMA32 free:27048kB min:36272kB low:45340kB high:54408kB active_anon:1942024kB inactive_anon:36648kB active_file:4kB inactive_file:132kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10688kB pagetables:22188kB bounce:0kB free_pcp:256kB local_pcp:0kB free_cma:0kB [ 747.256349] lowmem_reserve[]: 0 0 0 0 0 [ 747.260352] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 747.287350] lowmem_reserve[]: 0 0 0 0 0 [ 747.291410] Node 1 Normal free:42516kB min:53612kB low:67012kB high:80412kB active_anon:3394520kB inactive_anon:36kB active_file:44kB inactive_file:412kB unevictable:0kB writepending:40kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15008kB pagetables:48036kB bounce:0kB free_pcp:204kB local_pcp:4kB free_cma:0kB [ 747.320569] lowmem_reserve[]: 0 0 0 0 0 [ 747.344918] Node 0 DMA: 2*4kB (ME) 11*8kB (U) 7*16kB (U) 11*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10352kB [ 747.360665] Node 0 DMA32: 616*4kB (UM) 1315*8kB (UME) 489*16kB (UME) 205*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27368kB [ 747.375494] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 747.386284] Node 1 Normal: 647*4kB (UME) 227*8kB (UMEH) 39*16kB (UME) 30*32kB (UMEH) 25*64kB (UE) 134*128kB (UME) 72*256kB (ME) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 43684kB [ 747.402444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 747.412077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 747.423095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 747.432699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 747.444945] 9459 total pagecache pages [ 747.448930] 0 pages in swap cache [ 747.452556] Swap cache stats: add 0, delete 0, find 0/0 [ 747.457907] Free swap = 0kB [ 747.460907] Total swap = 0kB [ 747.474989] 1965979 pages RAM [ 747.479137] 0 pages HighMem/MovableOnly [ 747.483150] 339056 pages reserved [ 747.486587] 0 pages cma reserved [ 747.489942] Out of memory: Kill process 18360 (syz-executor.0) score 1007 or sacrifice child [ 747.508121] Killed process 18360 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 747.648620] oom_reaper: reaped process 18360 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 748.634915] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 748.689314] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 748.698213] CPU: 0 PID: 6375 Comm: syz-executor.4 Not tainted 4.14.189-syzkaller #0 [ 748.706006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.715348] Call Trace: [ 748.717929] dump_stack+0x1b2/0x283 [ 748.721555] dump_header+0x178/0x82f [ 748.725259] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 748.730345] ? ___ratelimit+0x2cd/0x522 [ 748.734296] oom_kill_process.cold+0x10/0xa69 [ 748.738911] ? lock_downgrade+0x740/0x740 [ 748.743034] out_of_memory+0x2dc/0x1190 [ 748.746985] ? oom_killer_disable+0x1c0/0x1c0 [ 748.751459] ? mutex_trylock+0x152/0x1a0 [ 748.755496] __alloc_pages_nodemask+0x23e1/0x2720 [ 748.760336] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 748.765209] alloc_pages_current+0x155/0x260 [ 748.769593] filemap_fault+0xe12/0x18d0 [ 748.773547] ext4_filemap_fault+0x84/0xb0 [ 748.777670] __do_fault+0xfa/0x380 [ 748.781195] __handle_mm_fault+0x2497/0x4620 [ 748.785600] ? vm_insert_page+0x7c0/0x7c0 [ 748.789720] ? __fd_install+0x227/0x5c0 [ 748.793668] ? putname+0xcd/0x110 [ 748.797102] handle_mm_fault+0x306/0x7a0 [ 748.801138] __do_page_fault+0x578/0xb50 [ 748.805176] ? spurious_fault+0x640/0x640 [ 748.809295] ? do_page_fault+0x60/0x4f2 [ 748.813246] ? page_fault+0x2f/0x50 [ 748.816977] page_fault+0x45/0x50 [ 748.820400] RIP: 402d5a30: (null) [ 748.824613] RSP: 0003:00000000000006db EFLAGS: 7ffe402d5a40 [ 748.827229] Mem-Info: [ 748.836019] active_anon:1332393 inactive_anon:9171 isolated_anon:0 [ 748.836019] active_file:54 inactive_file:104 isolated_file:42 [ 748.836019] unevictable:0 dirty:0 writeback:0 unstable:0 [ 748.836019] slab_reclaimable:17386 slab_unreclaimable:120946 [ 748.836019] mapped:53502 shmem:9382 pagetables:17526 bounce:0 [ 748.836019] free:23446 free_pcp:66 free_cma:0 [ 748.870487] Node 0 active_anon:1944508kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213772kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 748.899122] Node 1 active_anon:3385064kB inactive_anon:36kB active_file:0kB inactive_file:704kB unevictable:0kB isolated(anon):0kB isolated(file):56kB mapped:436kB dirty:0kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 748.926459] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:4764kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 748.955557] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 748.960676] Node 0 DMA32 free:29776kB min:36272kB low:45340kB high:54408kB active_anon:1939744kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10624kB pagetables:22184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 748.989896] lowmem_reserve[]: 0 0 0 0 0 [ 748.993981] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 749.019498] lowmem_reserve[]: 0 0 0 0 0 [ 749.023593] Node 1 Normal free:53636kB min:53612kB low:67012kB high:80412kB active_anon:3385064kB inactive_anon:36kB active_file:0kB inactive_file:40kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14944kB pagetables:47920kB bounce:0kB free_pcp:504kB local_pcp:116kB free_cma:0kB [ 749.052896] lowmem_reserve[]: 0 0 0 0 0 [ 749.056870] Node 0 DMA: 2*4kB (ME) 11*8kB (U) 7*16kB (U) 11*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10352kB [ 749.078797] Node 0 DMA32: 632*4kB (UM) 1560*8kB (UME) 499*16kB (UME) 210*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29776kB [ 749.096738] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 749.108306] Node 1 Normal: 224*4kB (UME) 302*8kB (UME) 209*16kB (UME) 136*32kB (UMEH) 92*64kB (UME) 139*128kB (UME) 73*256kB (ME) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 54400kB [ 749.127895] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 749.136814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 749.156521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 749.188963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 749.205188] 9447 total pagecache pages [ 749.209082] 0 pages in swap cache [ 749.212622] Swap cache stats: add 0, delete 0, find 0/0 [ 749.218376] Free swap = 0kB [ 749.224804] Total swap = 0kB [ 749.227820] 1965979 pages RAM [ 749.231562] 0 pages HighMem/MovableOnly [ 749.235527] 339056 pages reserved [ 749.238965] 0 pages cma reserved [ 749.244729] Out of memory: Kill process 18412 (syz-executor.0) score 1007 or sacrifice child [ 749.253408] Killed process 18412 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 749.355956] oom_reaper: reaped process 18412 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:53:22 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000080)={0x1, 0x2, 0xf2, &(0x7f0000000280)="54195a368b8905925e2cdcfb15e610226582f650530fb885b4783846ae5ba8789809ee59cb5f7b31ab0ff1f668ae8f4435d17714f36ebc05a1368595dfcb1de682882f3389b050c97607415b2452b9352c56bf75be3ddda9eb3ecc356e42ecaea7333c7d3df7eb9da397f2eb61d5358c98518f134e6cbe560c948e9ef38030efb4a1269f1d6c3875d68dce2262676268bec17e8d08b27d9abdea084a1841c3c6e76de52218ae99521870e63cced22c0cfd40990bb80343641c8e72fd5037785aba1b0b3d915b42c49d275da434bd6c30663fda01357034090fec1369a1e6aa26504fde1661654419ff18a5cf5ebea35d1b1d"}) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:53:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1) 06:53:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000200)={0x9, 0x2, 0x7ff, 0x6}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000200)={0xd, 0xffffefffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x400}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x4000000, 0x80000000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 750.022356] syz-executor.2 invoked oom-killer: gfp_mask=0x15200c2(GFP_HIGHUSER|__GFP_ACCOUNT), nodemask=(null), order=0, oom_score_adj=1000 [ 750.039076] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 750.054231] CPU: 0 PID: 24470 Comm: syz-executor.2 Not tainted 4.14.189-syzkaller #0 [ 750.062118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.071898] Call Trace: [ 750.074483] dump_stack+0x1b2/0x283 [ 750.078117] dump_header+0x178/0x82f [ 750.081831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 750.086923] ? ___ratelimit+0x2cd/0x522 [ 750.090882] oom_kill_process.cold+0x10/0xa69 [ 750.095444] ? lock_downgrade+0x740/0x740 [ 750.099572] out_of_memory+0x2dc/0x1190 [ 750.103527] ? oom_killer_disable+0x1c0/0x1c0 [ 750.108000] ? mutex_trylock+0x152/0x1a0 [ 750.112043] __alloc_pages_nodemask+0x23e1/0x2720 [ 750.116873] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 750.121694] ? __might_fault+0x104/0x1b0 [ 750.125741] ? copy_page_from_iter+0x4fd/0x730 [ 750.130303] alloc_pages_current+0x155/0x260 [ 750.134690] pipe_write+0x920/0xe10 [ 750.138299] __vfs_write+0x44c/0x630 [ 750.141990] ? kernel_read+0x110/0x110 [ 750.145861] ? rw_verify_area+0xe1/0x2a0 [ 750.149898] vfs_write+0x17f/0x4d0 [ 750.153419] SyS_write+0xf2/0x210 [ 750.156862] ? SyS_read+0x210/0x210 [ 750.160467] ? SyS_clock_settime+0x1a0/0x1a0 [ 750.164859] ? do_syscall_64+0x4c/0x640 [ 750.168808] ? SyS_read+0x210/0x210 [ 750.172414] do_syscall_64+0x1d5/0x640 [ 750.176282] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 750.181447] RIP: 0033:0x45c369 [ 750.184713] RSP: 002b:00007f9b33158c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 750.192396] RAX: ffffffffffffffda RBX: 0000000000034f00 RCX: 000000000045c369 [ 750.199640] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000005 [ 750.206887] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 750.214132] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 750.221380] R13: 00007fff926dab3f R14: 00007f9b331599c0 R15: 000000000078bf0c [ 750.430575] Mem-Info: [ 750.449175] active_anon:1333201 inactive_anon:9171 isolated_anon:0 [ 750.449175] active_file:787 inactive_file:772 isolated_file:60 [ 750.449175] unevictable:0 dirty:16 writeback:26 unstable:0 [ 750.449175] slab_reclaimable:17407 slab_unreclaimable:121399 [ 750.449175] mapped:54969 shmem:9382 pagetables:17473 bounce:0 [ 750.449175] free:20860 free_pcp:61 free_cma:0 06:53:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000200)) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0xc0103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000002c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x400}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x4000000, 0x80000000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:23 executing program 5: prlimit64(0x0, 0x5, &(0x7f0000000280)={0xc, 0xffffff7fffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xffffffffffffff25, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x1) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 750.755553] Node 0 active_anon:1940372kB inactive_anon:36648kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213908kB dirty:0kB writeback:4kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 06:53:24 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x1, 0xff, 0x6, 0x3, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x80}]}, 0x18}}, 0x4040002) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) [ 750.796839] Node 1 active_anon:3362332kB inactive_anon:36kB active_file:3600kB inactive_file:6700kB unevictable:0kB isolated(anon):0kB isolated(file):88kB mapped:8268kB dirty:64kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 750.830522] Node 0 DMA free:10384kB min:220kB low:272kB high:324kB active_anon:4764kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 06:53:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x400}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x4000000, 0x80000000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 751.190990] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 751.210495] Node 0 DMA32 free:27996kB min:36272kB low:45340kB high:54408kB active_anon:1941384kB inactive_anon:36648kB active_file:20kB inactive_file:72kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10720kB pagetables:22188kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 751.250390] lowmem_reserve[]: 0 0 0 0 0 [ 751.262403] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 751.316155] lowmem_reserve[]: 0 0 0 0 0 [ 751.320165] Node 1 Normal free:56040kB min:53612kB low:67012kB high:80412kB active_anon:3373848kB inactive_anon:32kB active_file:2856kB inactive_file:2724kB unevictable:0kB writepending:20kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15040kB pagetables:47856kB bounce:0kB free_pcp:124kB local_pcp:60kB free_cma:0kB [ 751.352079] lowmem_reserve[]: 0 0 0 0 0 [ 751.356964] Node 0 DMA: 2*4kB (ME) 11*8kB (U) 7*16kB (U) 12*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10384kB [ 751.373652] Node 0 DMA32: 237*4kB (UME) 1598*8kB (UME) 500*16kB (UME) 201*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28164kB [ 751.387954] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 751.399286] Node 1 Normal: 437*4kB (UME) 217*8kB (ME) 98*16kB (UME) 138*32kB (UMEH) 137*64kB (ME) 132*128kB (ME) 75*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54332kB [ 751.415719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 751.425149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 751.443692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 751.452626] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 751.461386] 10809 total pagecache pages [ 751.465403] 0 pages in swap cache [ 751.495971] Swap cache stats: add 0, delete 0, find 0/0 [ 751.528959] Free swap = 0kB [ 751.581707] Total swap = 0kB [ 751.584746] 1965979 pages RAM [ 751.587842] 0 pages HighMem/MovableOnly [ 751.610389] 339056 pages reserved 06:53:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x7, 0x5841}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x80000001, 0x20}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000300)={r3, 0x2}, 0x8) [ 751.636603] 0 pages cma reserved [ 751.639988] Out of memory: Kill process 18471 (syz-executor.0) score 1007 or sacrifice child [ 751.669154] Killed process 18471 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 751.803048] oom_reaper: reaped process 18471 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:53:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7fff, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000300)={0x7ff, "3dad7e03f777070893a0c06772b96d29263c917f05e03766c08efd74c1a07812", 0x1}) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x4, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0x488, 0x3, 0x3, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x101, &(0x7f0000000280)="0b62260da1a050044001773d5fd347a99143bc3238a98e3fbdb161b679c2d593a1349ad4ec0e734436d418fbdc3f2d54ea59fe533b80e547ea6b8bd968236bd11b02b51b6abdc45eebedfd3e4e") 06:53:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000340)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000504ba85361473cefddea3e32e44504e970c5a4da759603cf6684ed2fbd84ce0d0fd760c9504a0000000000200000000053000000000000"], &(0x7f00000001c0)=0x54) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffa, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x400}, 0x0, 0x0) 06:53:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r3}, 0x2c) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000002c0)={0x80, 0x2, 0x2, 0x0, 0x0, [{{}, 0x9}, {{r3}, 0x1}]}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000200)={0x0, 0xfffc, 0xfffffffffffffffe, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffe, 0x7fffffff, 0x0, 0x0, 0x0, 0xa, 0xfffffffffffffffd, 0x36}, 0x0, 0x0) [ 753.605952] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 753.651818] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 753.657068] CPU: 1 PID: 24568 Comm: syz-executor.5 Not tainted 4.14.189-syzkaller #0 [ 753.664942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.674283] Call Trace: [ 753.676869] dump_stack+0x1b2/0x283 [ 753.680492] dump_header+0x178/0x82f [ 753.684200] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 753.689298] ? ___ratelimit+0x2cd/0x522 [ 753.693264] oom_kill_process.cold+0x10/0xa69 [ 753.697765] ? lock_downgrade+0x740/0x740 [ 753.701903] out_of_memory+0x2dc/0x1190 [ 753.705864] ? oom_killer_disable+0x1c0/0x1c0 [ 753.710342] ? mutex_trylock+0x152/0x1a0 [ 753.714384] __alloc_pages_nodemask+0x23e1/0x2720 [ 753.719207] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 753.724024] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 753.728842] ? trace_hardirqs_on+0x10/0x10 [ 753.733057] ? cache_grow_begin+0x3f/0x420 [ 753.737267] cache_grow_begin+0x8f/0x420 [ 753.741305] ? mempolicy_slab_node+0x100/0x320 [ 753.745873] fallback_alloc+0x207/0x2c0 [ 753.749843] kmem_cache_alloc+0x1e5/0x3c0 [ 753.753971] getname_flags+0xc8/0x550 [ 753.757748] SyS_symlinkat+0x6d/0x240 [ 753.761537] ? SyS_unlink+0x20/0x20 [ 753.765137] ? __do_page_fault+0x19a/0xb50 [ 753.769354] ? do_syscall_64+0x4c/0x640 [ 753.773313] ? SyS_symlinkat+0x240/0x240 [ 753.777353] do_syscall_64+0x1d5/0x640 [ 753.781218] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 753.786380] RIP: 0033:0x45c0f7 [ 753.789543] RSP: 002b:00007ffd08b08328 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 753.797227] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c0f7 [ 753.804471] RDX: 00007ffd08b083c7 RSI: 00000000004c1ecb RDI: 00007ffd08b083b0 [ 753.811723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000017 [ 753.818970] R10: 0000000000000075 R11: 0000000000000206 R12: 0000000000000001 [ 753.826215] R13: 00007ffd08b08360 R14: 0000000000000000 R15: 00007ffd08b08370 [ 753.841261] Mem-Info: [ 753.843840] active_anon:1332056 inactive_anon:9171 isolated_anon:0 [ 753.843840] active_file:1 inactive_file:25 isolated_file:0 [ 753.843840] unevictable:0 dirty:0 writeback:0 unstable:0 [ 753.843840] slab_reclaimable:17383 slab_unreclaimable:121534 [ 753.843840] mapped:53481 shmem:9382 pagetables:17480 bounce:0 [ 753.843840] free:23469 free_pcp:11 free_cma:0 [ 753.913361] Node 0 active_anon:1946104kB inactive_anon:36648kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213908kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 753.943240] Node 1 active_anon:3382120kB inactive_anon:36kB active_file:644kB inactive_file:728kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:916kB dirty:0kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 753.970961] Node 0 DMA free:10384kB min:220kB low:272kB high:324kB active_anon:4764kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 753.998592] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 754.003711] Node 0 DMA32 free:28408kB min:36272kB low:45340kB high:54408kB active_anon:1941340kB inactive_anon:36648kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10624kB pagetables:22184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 754.040712] lowmem_reserve[]: 0 0 0 0 0 [ 754.046351] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 754.072878] lowmem_reserve[]: 0 0 0 0 0 [ 754.076876] Node 1 Normal free:55100kB min:53612kB low:67012kB high:80412kB active_anon:3382192kB inactive_anon:36kB active_file:88kB inactive_file:320kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14656kB pagetables:47740kB bounce:0kB free_pcp:292kB local_pcp:0kB free_cma:0kB [ 754.112675] lowmem_reserve[]: 0 0 0 0 0 [ 754.116675] Node 0 DMA: 2*4kB (ME) 11*8kB (U) 7*16kB (U) 12*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10384kB [ 754.138170] Node 0 DMA32: 292*4kB (UME) 1599*8kB (UME) 499*16kB (UME) 202*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28408kB [ 754.156386] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 754.167167] Node 1 Normal: 234*4kB (UME) 273*8kB (UME) 57*16kB (UME) 89*32kB (UMEH) 138*64kB (UME) 151*128kB (UM) 77*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54752kB [ 754.188747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 754.197645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 754.211609] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 754.220443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 754.229065] 9467 total pagecache pages [ 754.238754] 0 pages in swap cache [ 754.242851] Swap cache stats: add 0, delete 0, find 0/0 [ 754.248201] Free swap = 0kB [ 754.263760] Total swap = 0kB [ 754.266773] 1965979 pages RAM [ 754.269867] 0 pages HighMem/MovableOnly [ 754.276418] 339056 pages reserved [ 754.279867] 0 pages cma reserved [ 754.293606] Out of memory: Kill process 18667 (syz-executor.0) score 1007 or sacrifice child [ 754.302254] Killed process 18667 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB 06:53:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:28 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000080)={0x10000, 0xe5, 0x8, 0x7, 0x6, 0x4}) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) [ 756.063706] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 756.077264] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 756.082920] CPU: 1 PID: 6374 Comm: syz-executor.5 Not tainted 4.14.189-syzkaller #0 [ 756.090707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.100039] Call Trace: [ 756.102605] dump_stack+0x1b2/0x283 [ 756.106213] dump_header+0x178/0x82f [ 756.109902] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 756.115004] ? ___ratelimit+0x2cd/0x522 [ 756.118955] oom_kill_process.cold+0x10/0xa69 [ 756.123428] ? lock_downgrade+0x740/0x740 [ 756.127558] out_of_memory+0x2dc/0x1190 [ 756.131510] ? oom_killer_disable+0x1c0/0x1c0 [ 756.135993] ? mutex_trylock+0x152/0x1a0 [ 756.140032] __alloc_pages_nodemask+0x23e1/0x2720 [ 756.144858] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 756.149673] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 756.154508] ? trace_hardirqs_on+0x10/0x10 [ 756.158734] ? cache_grow_begin+0x3f/0x420 [ 756.162947] cache_grow_begin+0x8f/0x420 [ 756.166983] ? mempolicy_slab_node+0x100/0x320 [ 756.171544] fallback_alloc+0x207/0x2c0 [ 756.175496] kmem_cache_alloc+0x1e5/0x3c0 [ 756.179622] getname_flags+0xc8/0x550 [ 756.183490] user_path_mountpoint_at+0x23/0x40 [ 756.188047] SyS_umount+0x125/0xeb0 [ 756.191654] ? lock_downgrade+0x740/0x740 [ 756.195777] ? __detach_mounts+0x400/0x400 [ 756.199990] ? up_read+0x17/0x30 [ 756.203353] ? __do_page_fault+0x19a/0xb50 [ 756.207579] ? do_syscall_64+0x4c/0x640 [ 756.211539] ? __detach_mounts+0x400/0x400 [ 756.215756] do_syscall_64+0x1d5/0x640 [ 756.219627] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 756.224795] RIP: 0033:0x45ed97 [ 756.227959] RSP: 002b:00007ffd08b07238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 756.235642] RAX: ffffffffffffffda RBX: 00000000000b863d RCX: 000000000045ed97 [ 756.242887] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffd08b08370 [ 756.250135] RBP: 0000000000000801 R08: 0000000000000001 R09: 0000000000e6a940 [ 756.257556] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd08b08370 [ 756.264897] R13: 00007ffd08b08360 R14: 0000000000000000 R15: 00007ffd08b08370 [ 756.294963] Mem-Info: [ 756.298128] active_anon:1331583 inactive_anon:9168 isolated_anon:0 [ 756.298128] active_file:180 inactive_file:473 isolated_file:48 [ 756.298128] unevictable:0 dirty:1 writeback:9 unstable:0 [ 756.298128] slab_reclaimable:17378 slab_unreclaimable:121532 [ 756.298128] mapped:53980 shmem:9382 pagetables:17557 bounce:0 [ 756.298128] free:23135 free_pcp:92 free_cma:0 [ 756.338386] Node 0 active_anon:1946856kB inactive_anon:36648kB active_file:20kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213932kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 756.372786] Node 1 active_anon:3379476kB inactive_anon:24kB active_file:180kB inactive_file:840kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:388kB dirty:4kB writeback:36kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 756.406571] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:4764kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 756.442306] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 756.447691] Node 0 DMA32 free:27320kB min:36272kB low:45340kB high:54408kB active_anon:1942092kB inactive_anon:36648kB active_file:20kB inactive_file:156kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10624kB pagetables:22192kB bounce:0kB free_pcp:168kB local_pcp:48kB free_cma:0kB [ 756.481699] lowmem_reserve[]: 0 0 0 0 0 [ 756.486058] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 756.517046] lowmem_reserve[]: 0 0 0 0 0 [ 756.524383] Node 1 Normal free:53328kB min:53612kB low:67012kB high:80412kB active_anon:3379476kB inactive_anon:24kB active_file:384kB inactive_file:2436kB unevictable:0kB writepending:40kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14912kB pagetables:48036kB bounce:0kB free_pcp:412kB local_pcp:44kB free_cma:0kB [ 756.580168] lowmem_reserve[]: 0 0 0 0 0 [ 756.585499] Node 0 DMA: 2*4kB (ME) 11*8kB (U) 7*16kB (U) 11*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10352kB [ 756.605959] Node 0 DMA32: 143*4kB (UM) 1577*8kB (UE) 495*16kB (UE) 201*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27540kB [ 756.619776] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 756.630529] Node 1 Normal: 120*4kB (UE) 642*8kB (UME) 346*16kB (UME) 56*32kB (UMH) 8*64kB (UE) 139*128kB (UM) 88*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 54800kB [ 756.646462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 756.655477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 756.664104] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 756.673009] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 756.681626] 9953 total pagecache pages [ 756.685509] 0 pages in swap cache [ 756.695063] Swap cache stats: add 0, delete 0, find 0/0 [ 756.701793] Free swap = 0kB [ 756.705552] Total swap = 0kB [ 756.709181] 1965979 pages RAM [ 756.718510] 0 pages HighMem/MovableOnly [ 756.723647] 339056 pages reserved [ 756.727834] 0 pages cma reserved [ 756.738553] Out of memory: Kill process 24600 (syz-executor.0) score 1007 or sacrifice child [ 756.747719] Killed process 24600 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34824kB, shmem-rss:0kB [ 756.839605] oom_reaper: reaped process 24600 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:53:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x4508, 0x0, 0x400, 0x7f}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x2}, 0x0, &(0x7f00000000c0)={0xffc, 0x1ff, 0x0, 0x8000000000000, 0x0, 0xa, 0x0, 0x200000036}, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), 0x0}, 0x20) ioctl$int_out(r3, 0x0, &(0x7f0000000200)) 06:53:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x10, 0x9, 0x3, 0x7, 0x0, 0xfffffffffffffffe, 0x3}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x1, 0x6, @multicast}, 0x10) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7fff, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000300)={0x7ff, "3dad7e03f777070893a0c06772b96d29263c917f05e03766c08efd74c1a07812", 0x1}) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x4, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0x488, 0x3, 0x3, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x101, &(0x7f0000000280)="0b62260da1a050044001773d5fd347a99143bc3238a98e3fbdb161b679c2d593a1349ad4ec0e734436d418fbdc3f2d54ea59fe533b80e547ea6b8bd968236bd11b02b51b6abdc45eebedfd3e4e") 06:53:30 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10001) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:53:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 757.670892] syz-executor.1 invoked oom-killer: gfp_mask=0x15200c2(GFP_HIGHUSER|__GFP_ACCOUNT), nodemask=(null), order=0, oom_score_adj=1000 [ 757.684143] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 757.689484] CPU: 0 PID: 24630 Comm: syz-executor.1 Not tainted 4.14.189-syzkaller #0 [ 757.697362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.706707] Call Trace: [ 757.709295] dump_stack+0x1b2/0x283 [ 757.712924] dump_header+0x178/0x82f [ 757.716638] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 757.721738] ? ___ratelimit+0x2cd/0x522 [ 757.725715] oom_kill_process.cold+0x10/0xa69 [ 757.730214] ? lock_downgrade+0x740/0x740 [ 757.734559] out_of_memory+0x2dc/0x1190 [ 757.738533] ? oom_killer_disable+0x1c0/0x1c0 [ 757.743025] ? mutex_trylock+0x152/0x1a0 [ 757.747086] __alloc_pages_nodemask+0x23e1/0x2720 [ 757.751940] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 757.756777] ? retint_kernel+0x2d/0x2d [ 757.760695] ? copy_page_from_iter+0x4fd/0x730 [ 757.765285] alloc_pages_current+0x155/0x260 [ 757.769689] pipe_write+0x920/0xe10 [ 757.773319] __vfs_write+0x44c/0x630 [ 757.777030] ? kernel_read+0x110/0x110 [ 757.780922] ? rw_verify_area+0xe1/0x2a0 [ 757.784991] vfs_write+0x17f/0x4d0 [ 757.788511] SyS_write+0xf2/0x210 [ 757.791942] ? SyS_read+0x210/0x210 [ 757.795548] ? SyS_clock_settime+0x1a0/0x1a0 [ 757.799947] ? do_syscall_64+0x4c/0x640 [ 757.803902] ? SyS_read+0x210/0x210 [ 757.807511] do_syscall_64+0x1d5/0x640 [ 757.811385] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 757.816557] RIP: 0033:0x45c369 [ 757.819726] RSP: 002b:00007f281f43bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 757.827414] RAX: ffffffffffffffda RBX: 0000000000034f00 RCX: 000000000045c369 [ 757.834661] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000005 [ 757.841907] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 757.849156] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 757.856522] R13: 00007ffe1ad0958f R14: 00007f281f43c9c0 R15: 000000000078bf0c [ 758.036462] Mem-Info: [ 758.053595] active_anon:1334069 inactive_anon:9171 isolated_anon:0 [ 758.053595] active_file:353 inactive_file:327 isolated_file:46 [ 758.053595] unevictable:0 dirty:40 writeback:4 unstable:0 [ 758.053595] slab_reclaimable:17340 slab_unreclaimable:121572 [ 758.053595] mapped:53955 shmem:9382 pagetables:17612 bounce:0 [ 758.053595] free:20435 free_pcp:21 free_cma:0 [ 758.093202] Node 0 active_anon:1947360kB inactive_anon:36648kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213976kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 758.125165] Node 1 active_anon:3388884kB inactive_anon:36kB active_file:1364kB inactive_file:1308kB unevictable:0kB isolated(anon):0kB isolated(file):172kB mapped:1828kB dirty:156kB writeback:16kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 758.161153] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:4764kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 758.231156] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 758.245028] Node 0 DMA32 free:27168kB min:36272kB low:45340kB high:54408kB active_anon:1942596kB inactive_anon:36648kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10624kB pagetables:22192kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 758.384873] lowmem_reserve[]: 0 0 0 0 0 [ 758.389038] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 758.415106] lowmem_reserve[]: 0 0 0 0 0 [ 758.419299] Node 1 Normal free:61668kB min:53612kB low:67012kB high:80412kB active_anon:3373256kB inactive_anon:36kB active_file:500kB inactive_file:504kB unevictable:0kB writepending:172kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14880kB pagetables:48036kB bounce:0kB free_pcp:1364kB local_pcp:620kB free_cma:0kB [ 758.467082] lowmem_reserve[]: 0 0 0 0 0 [ 758.486756] Node 0 DMA: 2*4kB (ME) 11*8kB (U) 7*16kB (U) 11*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10352kB [ 758.515935] Node 0 DMA32: 50*4kB (UM) 1573*8kB (UM) 495*16kB (UE) 202*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27168kB [ 758.530218] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 758.544429] Node 1 Normal: 873*4kB (UMEH) 614*8kB (UME) 228*16kB (UME) 72*32kB (UMH) 118*64kB (UME) 155*128kB (UM) 86*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 64276kB [ 758.560886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 758.570237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 758.578848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 758.587712] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 758.596323] 9450 total pagecache pages [ 758.601061] 0 pages in swap cache [ 758.604504] Swap cache stats: add 0, delete 0, find 0/0 [ 758.609893] Free swap = 0kB [ 758.613010] Total swap = 0kB [ 758.616057] 1965979 pages RAM [ 758.619139] 0 pages HighMem/MovableOnly [ 758.624035] 339056 pages reserved [ 758.627490] 0 pages cma reserved [ 758.630908] Out of memory: Kill process 18693 (syz-executor.3) score 1007 or sacrifice child [ 758.639500] Killed process 18693 (syz-executor.3) total-vm:75368kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 758.670807] oom_reaper: reaped process 18693 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:53:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000340)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000504ba85361473cefddea3e32e44504e970c5a4da759603cf6684ed2fbd84ce0d0fd760c9504a0000000000200000000053000000000000"], &(0x7f00000001c0)=0x54) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffa, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x400}, 0x0, 0x0) 06:53:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x10000022, 0x0, 0xa0000, 0x1000, 0xd45, 0x400}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000002c0)={0x2, 0xfffffff9, 0x3, 0x0, 0x12}) 06:53:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000200)={'HL\x00'}, &(0x7f00000002c0)=0x1e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 759.343324] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 759.389193] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 759.405230] CPU: 1 PID: 24625 Comm: syz-executor.3 Not tainted 4.14.189-syzkaller #0 [ 759.413125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.422468] Call Trace: [ 759.425049] dump_stack+0x1b2/0x283 [ 759.428676] dump_header+0x178/0x82f [ 759.432403] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 759.437497] ? ___ratelimit+0x2cd/0x522 [ 759.441483] oom_kill_process.cold+0x10/0xa69 [ 759.445975] ? lock_downgrade+0x740/0x740 [ 759.450125] out_of_memory+0x2dc/0x1190 [ 759.454104] ? oom_killer_disable+0x1c0/0x1c0 [ 759.458604] ? mutex_trylock+0x152/0x1a0 [ 759.462664] __alloc_pages_nodemask+0x23e1/0x2720 [ 759.467524] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 759.472284] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 759.477125] ? __anon_vma_prepare+0x28f/0x4f0 [ 759.481619] ? anon_vma_interval_tree_insert+0x20a/0x3c0 [ 759.487068] alloc_pages_vma+0xd2/0x6d0 [ 759.491049] __handle_mm_fault+0x25fa/0x4620 [ 759.495457] ? vm_insert_page+0x7c0/0x7c0 [ 759.499596] ? vm_mmap_pgoff+0x168/0x1a0 [ 759.503644] ? vm_mmap_pgoff+0xcb/0x1a0 [ 759.507619] handle_mm_fault+0x306/0x7a0 [ 759.511682] __do_page_fault+0x578/0xb50 [ 759.515739] ? spurious_fault+0x640/0x640 [ 759.519876] ? do_page_fault+0x60/0x4f2 [ 759.523843] ? page_fault+0x2f/0x50 [ 759.527460] page_fault+0x45/0x50 [ 759.530902] RIP: 98d33700:0x113 [ 759.534155] RSP: 20000:00007ffd7fbbc790 EFLAGS: 7ffd7fbbc890 [ 759.698729] Mem-Info: 06:53:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x10140, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0) [ 759.811189] active_anon:1327428 inactive_anon:9171 isolated_anon:0 [ 759.811189] active_file:683 inactive_file:1087 isolated_file:41 [ 759.811189] unevictable:0 dirty:5 writeback:1 unstable:0 [ 759.811189] slab_reclaimable:17350 slab_unreclaimable:121358 [ 759.811189] mapped:54818 shmem:9382 pagetables:17542 bounce:0 [ 759.811189] free:25992 free_pcp:458 free_cma:0 [ 759.946605] Node 0 active_anon:1945560kB inactive_anon:36648kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213996kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 760.013806] Node 1 active_anon:3368888kB inactive_anon:36kB active_file:3492kB inactive_file:8096kB unevictable:0kB isolated(anon):0kB isolated(file):252kB mapped:9248kB dirty:60kB writeback:68kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 760.350743] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:4764kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 760.565540] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 760.588378] Node 0 DMA32 free:26512kB min:36272kB low:45340kB high:54408kB active_anon:1942972kB inactive_anon:36648kB active_file:32kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10752kB pagetables:22084kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 760.622121] lowmem_reserve[]: 0 0 0 0 0 [ 760.626262] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 760.658735] lowmem_reserve[]: 0 0 0 0 0 [ 760.665605] Node 1 Normal free:45312kB min:53612kB low:67012kB high:80412kB active_anon:3391176kB inactive_anon:36kB active_file:992kB inactive_file:640kB unevictable:0kB writepending:128kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15328kB pagetables:48400kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 760.726821] lowmem_reserve[]: 0 0 0 0 0 [ 760.731702] Node 0 DMA: 2*4kB (ME) 11*8kB (U) 7*16kB (U) 12*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10384kB [ 760.751888] Node 0 DMA32: 53*4kB (UM) 1593*8kB (UM) 499*16kB (UE) 192*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27084kB [ 760.766369] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 760.780012] Node 1 Normal: 772*4kB (UME) 405*8kB (UME) 167*16kB (UME) 82*32kB (UME) 59*64kB (UME) 59*128kB (UM) 92*256kB (UM) 7*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 53160kB [ 760.819580] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 760.835864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 760.845488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 760.865189] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 760.890998] 9951 total pagecache pages [ 760.895228] 0 pages in swap cache [ 760.898676] Swap cache stats: add 0, delete 0, find 0/0 [ 760.904643] Free swap = 0kB [ 760.907661] Total swap = 0kB [ 760.913261] 1965979 pages RAM [ 760.916364] 0 pages HighMem/MovableOnly [ 760.920416] 339056 pages reserved [ 760.923857] 0 pages cma reserved [ 760.927215] Out of memory: Kill process 24661 (syz-executor.1) score 1007 or sacrifice child 06:53:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36}, 0x0, 0x0) 06:53:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:35 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r1, &(0x7f0000000880)="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", 0x317) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x8000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@dots='dots'}]}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 06:53:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f00000002c0)={0x500, 0x2000, 0x578, 0x140, 0x0, 0x8, 0x20, 0x0, {0x800, 0x8, 0x1}, {0xb99, 0x539d, 0x1}, {0x2, 0x24, 0x1}, {0x7, 0x7}, 0x3, 0x10, 0x8, 0xffff, 0x0, 0x2, 0x9, 0x80000000, 0x6, 0x10000, 0x83f3, 0x3, 0x0, 0x100, 0x0, 0xb}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 762.176688] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 762.249542] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 762.276720] CPU: 1 PID: 24729 Comm: syz-executor.3 Not tainted 4.14.189-syzkaller #0 [ 762.284607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.293937] Call Trace: [ 762.296504] dump_stack+0x1b2/0x283 [ 762.300119] dump_header+0x178/0x82f [ 762.303812] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 762.308888] ? ___ratelimit+0x2cd/0x522 [ 762.312839] oom_kill_process.cold+0x10/0xa69 [ 762.317325] ? lock_downgrade+0x740/0x740 [ 762.321452] out_of_memory+0x2dc/0x1190 [ 762.325406] ? oom_killer_disable+0x1c0/0x1c0 [ 762.330075] ? mutex_trylock+0x152/0x1a0 [ 762.334113] __alloc_pages_nodemask+0x23e1/0x2720 [ 762.338940] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 762.343756] ? perf_event_namespaces+0x30/0x30 [ 762.348318] ? __anon_vma_prepare+0x28f/0x4f0 [ 762.352811] ? anon_vma_interval_tree_insert+0x20a/0x3c0 [ 762.358239] alloc_pages_vma+0xd2/0x6d0 [ 762.362192] __handle_mm_fault+0x25fa/0x4620 [ 762.366576] ? vm_insert_page+0x7c0/0x7c0 [ 762.370700] ? vm_mmap_pgoff+0x168/0x1a0 [ 762.374736] ? vm_mmap_pgoff+0xcb/0x1a0 [ 762.378691] handle_mm_fault+0x306/0x7a0 [ 762.382731] __do_page_fault+0x578/0xb50 [ 762.386768] ? spurious_fault+0x640/0x640 [ 762.390891] ? do_page_fault+0x60/0x4f2 [ 762.394841] ? page_fault+0x2f/0x50 [ 762.398443] page_fault+0x45/0x50 [ 762.401871] RIP: 98d54700:0x96d [ 762.405121] RSP: 20000:00007ffd7fbbc790 EFLAGS: 7ffd7fbbc890 [ 762.505568] Mem-Info: [ 762.521108] active_anon:1333752 inactive_anon:9170 isolated_anon:0 [ 762.521108] active_file:348 inactive_file:310 isolated_file:36 [ 762.521108] unevictable:0 dirty:45 writeback:0 unstable:0 [ 762.521108] slab_reclaimable:17352 slab_unreclaimable:121347 [ 762.521108] mapped:54099 shmem:9382 pagetables:17638 bounce:0 [ 762.521108] free:20702 free_pcp:387 free_cma:0 [ 762.560430] Node 0 active_anon:1946344kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214024kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 762.614835] Node 1 active_anon:3359164kB inactive_anon:32kB active_file:1236kB inactive_file:1164kB unevictable:0kB isolated(anon):0kB isolated(file):188kB mapped:1872kB dirty:176kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 762.666878] Node 0 DMA free:10384kB min:220kB low:272kB high:324kB active_anon:4764kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.716916] lowmem_reserve[]: 0 2557 2557 2557 2557 06:53:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:36 executing program 1 (fault-call:3 fault-nth:0): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:53:36 executing program 2: ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 762.748220] Node 0 DMA32 free:28464kB min:36272kB low:45340kB high:54408kB active_anon:1940732kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10624kB pagetables:22084kB bounce:0kB free_pcp:1036kB local_pcp:304kB free_cma:0kB 06:53:36 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x145000, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e49d946a6b31b26b4769b1c4f10a1890f07e00a02007ae75f7e18f8515de56ac5b89e"], 0x102f) dup3(r0, r1, 0x0) [ 762.833535] lowmem_reserve[]: 0 0 0 0 0 [ 762.838695] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.868392] ALSA: mixer_oss: invalid OSS volume '' [ 762.909122] lowmem_reserve[]: 0 0 0 0 0 [ 762.929110] Node 1 Normal free:62092kB min:53612kB low:67012kB high:80412kB active_anon:3359292kB inactive_anon:32kB active_file:6176kB inactive_file:7112kB unevictable:0kB writepending:388kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14944kB pagetables:48348kB bounce:0kB free_pcp:860kB local_pcp:188kB free_cma:0kB 06:53:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 763.254777] lowmem_reserve[]: 0 0 0 0 0 [ 763.274486] Node 0 DMA: 2*4kB (ME) 11*8kB (U) 7*16kB (U) 12*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10384kB [ 763.349123] Node 0 DMA32: 96*4kB (UM) 1651*8kB (UM) 504*16kB (UME) 194*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27864kB [ 763.376584] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 763.387689] Node 1 Normal: 777*4kB (UMEH) 506*8kB (UMEH) 85*16kB (UMEH) 43*32kB (UMEH) 9*64kB (ME) 141*128kB (MH) 90*256kB (M) 7*512kB (MH) 2*1024kB (MH) 0*2048kB 0*4096kB = 57188kB [ 763.409331] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 763.442272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 763.466805] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 763.478883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 763.488543] 9795 total pagecache pages [ 763.497792] 0 pages in swap cache [ 763.501801] Swap cache stats: add 0, delete 0, find 0/0 [ 763.507393] Free swap = 0kB [ 763.518308] Total swap = 0kB [ 763.529598] 1965979 pages RAM [ 763.535971] 0 pages HighMem/MovableOnly [ 763.581121] 339056 pages reserved [ 763.593680] 0 pages cma reserved [ 763.605495] Out of memory: Kill process 18715 (syz-executor.0) score 1007 or sacrifice child [ 763.681758] Killed process 18715 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB 06:53:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:37 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) ioctl$CHAR_RAW_BSZGET(0xffffffffffffffff, 0x80081270, &(0x7f00000003c0)) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in=@multicast1, @in=@broadcast}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000380)=0xe8) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x2) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) sched_setattr(r0, &(0x7f0000000200)={0x38, 0x2, 0x10000002, 0x7fffffff, 0x10001, 0xfffffffffffffffd, 0x2, 0x4, 0x80000001, 0x3}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x202}, 0x0, &(0x7f00000000c0)={0x10001, 0x401, 0x0, 0x0, 0x800000000, 0xa, 0x0, 0x2}, 0x0, 0x0) [ 763.767935] ALSA: mixer_oss: invalid OSS volume 'IÙF¦³&´v›O¡‰à' [ 763.777453] ALSA: mixer_oss: invalid OSS volume '' [ 763.798256] FAT-fs (loop3): Directory bread(block 2585) failed [ 763.814609] FAT-fs (loop3): Directory bread(block 2586) failed [ 763.821076] ALSA: mixer_oss: invalid OSS volume 'IÙF¦³&´v›O¡‰à' [ 763.827465] oom_reaper: reaped process 18715 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 763.850752] ALSA: mixer_oss: invalid OSS volume '' [ 764.064154] FAT-fs (loop3): Directory bread(block 2587) failed 06:53:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 764.105114] FAT-fs (loop3): Directory bread(block 2588) failed [ 764.127910] FAT-fs (loop3): Directory bread(block 2589) failed [ 764.144236] FAT-fs (loop3): Directory bread(block 2590) failed 06:53:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) shmget(0x3, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x10040, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x7, 0x5841}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x8}, &(0x7f00000002c0)=0x8) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 764.179080] FAT-fs (loop3): Directory bread(block 2591) failed [ 764.198769] FAT-fs (loop3): Directory bread(block 2592) failed [ 764.218507] FAT-fs (loop3): Directory bread(block 2593) failed 06:53:37 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1a4, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff9631}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa2e4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x44000}, 0x40000c4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) [ 764.243208] FAT-fs (loop3): Directory bread(block 2594) failed 06:53:37 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(0x0, 0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100007, r4, 0x9}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050768f000000200000000000012", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000d0000000a00050014"], 0x48}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000000000000000000001b000000c923ee260e39075cfc4b050092000000005dbe2a4ab416100014002280080004000600000008"], 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x800) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)={0x4c, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2005, 0xffffffffffffffff}}, @NL80211_STA_WME_MAX_SP={0x15, 0x2, "d03f0accc5785c2f37c7a98fed4c59c237"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfffe}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x810b, 0xffffffffffffffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc041}, 0x45) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f0000000000)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40090) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x102f) dup3(r0, r1, 0x0) 06:53:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 764.833470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=24822 comm=syz-executor.1 [ 765.238597] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 765.282176] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 765.287372] CPU: 1 PID: 6371 Comm: syz-executor.2 Not tainted 4.14.189-syzkaller #0 [ 765.295161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.304498] Call Trace: [ 765.307077] dump_stack+0x1b2/0x283 [ 765.310693] dump_header+0x178/0x82f [ 765.314407] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 765.319498] ? ___ratelimit+0x2cd/0x522 [ 765.323547] oom_kill_process.cold+0x10/0xa69 [ 765.328029] ? lock_downgrade+0x740/0x740 [ 765.332165] out_of_memory+0x2dc/0x1190 [ 765.336125] ? oom_killer_disable+0x1c0/0x1c0 [ 765.340605] ? mutex_trylock+0x152/0x1a0 [ 765.344653] __alloc_pages_nodemask+0x23e1/0x2720 [ 765.349490] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 765.354316] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 765.359147] ? trace_hardirqs_on+0x10/0x10 [ 765.363374] ? cache_grow_begin+0x3f/0x420 [ 765.367682] cache_grow_begin+0x8f/0x420 [ 765.371764] ? mempolicy_slab_node+0x100/0x320 [ 765.376332] fallback_alloc+0x207/0x2c0 [ 765.380294] kmem_cache_alloc+0x1e5/0x3c0 [ 765.384441] getname_flags+0xc8/0x550 [ 765.388232] user_path_mountpoint_at+0x23/0x40 [ 765.392805] SyS_umount+0x125/0xeb0 [ 765.396446] ? do_unlinkat+0x152/0x5c0 [ 765.400335] ? do_rmdir+0x3c0/0x3c0 [ 765.403976] ? __detach_mounts+0x400/0x400 [ 765.408202] ? __do_page_fault+0x19a/0xb50 [ 765.412457] ? do_syscall_64+0x4c/0x640 [ 765.416416] ? __detach_mounts+0x400/0x400 [ 765.420638] do_syscall_64+0x1d5/0x640 [ 765.424544] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 765.429719] RIP: 0033:0x45ed97 [ 765.432893] RSP: 002b:00007fff926d9c88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 765.440585] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045ed97 [ 765.447868] RDX: 0000000000402ca8 RSI: 0000000000000002 RDI: 00007fff926d9d30 [ 765.455122] RBP: 00000000000008ce R08: 0000000000000000 R09: 0000000000000010 [ 765.462378] R10: 000000000000000a R11: 0000000000000246 R12: 00007fff926dadc0 [ 765.469849] R13: 0000000001d5c940 R14: 0000000000000000 R15: 00007fff926dadc0 [ 765.486382] Mem-Info: [ 765.489012] active_anon:1334488 inactive_anon:9171 isolated_anon:0 [ 765.489012] active_file:444 inactive_file:426 isolated_file:77 [ 765.489012] unevictable:0 dirty:3 writeback:0 unstable:0 [ 765.489012] slab_reclaimable:17379 slab_unreclaimable:120907 [ 765.489012] mapped:54239 shmem:9382 pagetables:17634 bounce:0 [ 765.489012] free:20395 free_pcp:27 free_cma:0 [ 765.526478] Node 0 active_anon:1947560kB inactive_anon:36648kB active_file:124kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214176kB dirty:8kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 765.558404] Node 1 active_anon:3390392kB inactive_anon:36kB active_file:1652kB inactive_file:1412kB unevictable:0kB isolated(anon):0kB isolated(file):196kB mapped:2680kB dirty:4kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 765.589628] Node 0 DMA free:10376kB min:220kB low:272kB high:324kB active_anon:4764kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 765.629128] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 765.634295] Node 0 DMA32 free:27136kB min:36272kB low:45340kB high:54408kB active_anon:1942796kB inactive_anon:36648kB active_file:124kB inactive_file:64kB unevictable:0kB writepending:8kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10624kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 765.667002] lowmem_reserve[]: 0 0 0 0 0 [ 765.671111] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 765.700537] lowmem_reserve[]: 0 0 0 0 0 [ 765.704533] Node 1 Normal free:45076kB min:53612kB low:67012kB high:80412kB active_anon:3389976kB inactive_anon:36kB active_file:1432kB inactive_file:1132kB unevictable:0kB writepending:204kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15072kB pagetables:48484kB bounce:0kB free_pcp:732kB local_pcp:68kB free_cma:0kB [ 765.767813] lowmem_reserve[]: 0 0 0 0 0 [ 765.771967] Node 0 DMA: 2*4kB (ME) 10*8kB (U) 7*16kB (U) 11*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10344kB [ 765.809873] Node 0 DMA32: 109*4kB (UME) 1589*8kB (UME) 488*16kB (UE) 195*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27196kB [ 765.839677] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 765.854175] Node 1 Normal: 763*4kB (UME) 218*8kB (UME) 41*16kB (UME) 44*32kB (UME) 12*64kB (UME) 93*128kB (UM) 96*256kB (UM) 7*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 47692kB [ 765.877573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 765.887938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 765.900695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 765.909541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 765.919864] 9446 total pagecache pages [ 765.923834] 0 pages in swap cache [ 765.927297] Swap cache stats: add 0, delete 0, find 0/0 [ 765.932698] Free swap = 0kB [ 765.935706] Total swap = 0kB [ 765.938709] 1965979 pages RAM [ 765.945042] 0 pages HighMem/MovableOnly [ 765.949087] 339056 pages reserved [ 765.956557] 0 pages cma reserved [ 765.959972] Out of memory: Kill process 24824 (syz-executor.4) score 1007 or sacrifice child [ 765.989231] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 766.010982] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 766.016114] CPU: 1 PID: 6373 Comm: syz-executor.3 Not tainted 4.14.189-syzkaller #0 [ 766.023895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.033233] Call Trace: [ 766.035808] dump_stack+0x1b2/0x283 [ 766.039418] dump_header+0x178/0x82f [ 766.043119] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 766.048204] ? ___ratelimit+0x2cd/0x522 [ 766.052162] oom_kill_process.cold+0x10/0xa69 [ 766.056646] ? lock_downgrade+0x740/0x740 [ 766.060820] out_of_memory+0x2dc/0x1190 [ 766.064778] ? oom_killer_disable+0x1c0/0x1c0 [ 766.069260] ? mutex_trylock+0x152/0x1a0 [ 766.073322] __alloc_pages_nodemask+0x23e1/0x2720 [ 766.078153] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 766.083019] alloc_pages_current+0x155/0x260 [ 766.087440] filemap_fault+0xe12/0x18d0 [ 766.091401] ext4_filemap_fault+0x84/0xb0 [ 766.095531] __do_fault+0xfa/0x380 [ 766.099050] __handle_mm_fault+0x2497/0x4620 [ 766.103442] ? vm_insert_page+0x7c0/0x7c0 [ 766.107569] ? lock_downgrade+0x740/0x740 [ 766.111723] handle_mm_fault+0x306/0x7a0 [ 766.115807] __do_page_fault+0x578/0xb50 [ 766.119874] ? spurious_fault+0x640/0x640 [ 766.124012] ? do_page_fault+0x60/0x4f2 [ 766.127968] ? page_fault+0x2f/0x50 [ 766.131586] page_fault+0x45/0x50 [ 766.135036] RIP: 7fbbc990:0xbabcb [ 766.138477] RSP: bac96:0000000000000863 EFLAGS: 00000008 [ 766.149155] Mem-Info: [ 766.157111] active_anon:1334515 inactive_anon:9171 isolated_anon:0 [ 766.157111] active_file:14 inactive_file:13 isolated_file:0 [ 766.157111] unevictable:0 dirty:0 writeback:0 unstable:0 [ 766.157111] slab_reclaimable:17375 slab_unreclaimable:120881 [ 766.157111] mapped:53515 shmem:9382 pagetables:17641 bounce:0 [ 766.157111] free:21535 free_pcp:10 free_cma:0 [ 766.203196] Node 0 active_anon:1947560kB inactive_anon:36648kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214060kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 766.243731] Node 1 active_anon:3390500kB inactive_anon:36kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 766.283546] Node 0 DMA free:10344kB min:220kB low:272kB high:324kB active_anon:4764kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 766.322746] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 766.327801] Node 0 DMA32 free:27372kB min:36272kB low:45340kB high:54408kB active_anon:1942796kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10624kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 766.367350] lowmem_reserve[]: 0 0 0 0 0 [ 766.373523] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 766.409710] lowmem_reserve[]: 0 0 0 0 0 [ 766.414354] Node 1 Normal free:48496kB min:53612kB low:67012kB high:80412kB active_anon:3390500kB inactive_anon:36kB active_file:68kB inactive_file:44kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14944kB pagetables:48512kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 766.453757] lowmem_reserve[]: 0 0 0 0 0 [ 766.457763] Node 0 DMA: 2*4kB (ME) 10*8kB (U) 7*16kB (U) 11*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10344kB [ 766.483917] Node 0 DMA32: 113*4kB (UME) 1609*8kB (UME) 488*16kB (UE) 195*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27372kB [ 766.508355] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 766.519145] Node 1 Normal: 875*4kB (UME) 265*8kB (UME) 42*16kB (UME) 44*32kB (UME) 12*64kB (UME) 93*128kB (UM) 96*256kB (UM) 7*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 48532kB [ 766.546080] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 766.559160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 766.578549] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 766.587440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 766.606578] 9420 total pagecache pages [ 766.616438] 0 pages in swap cache [ 766.626356] Swap cache stats: add 0, delete 0, find 0/0 [ 766.636257] Free swap = 0kB [ 766.639278] Total swap = 0kB [ 766.648749] 1965979 pages RAM [ 766.656028] 0 pages HighMem/MovableOnly [ 766.666529] 339056 pages reserved [ 766.674788] 0 pages cma reserved [ 766.678162] Out of memory: Kill process 24794 (syz-executor.4) score 1007 or sacrifice child [ 766.697422] Killed process 24794 (syz-executor.4) total-vm:75236kB, anon-rss:16568kB, file-rss:34816kB, shmem-rss:0kB 06:53:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 767.041229] syz-executor.1 (24822) used greatest stack depth: 24040 bytes left [ 767.967383] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 767.986557] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 768.009428] CPU: 0 PID: 6368 Comm: syz-executor.0 Not tainted 4.14.189-syzkaller #0 [ 768.017229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.026654] Call Trace: [ 768.029374] dump_stack+0x1b2/0x283 [ 768.032992] dump_header+0x178/0x82f [ 768.036694] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 768.041784] ? ___ratelimit+0x2cd/0x522 [ 768.045832] oom_kill_process.cold+0x10/0xa69 [ 768.050316] ? lock_downgrade+0x740/0x740 [ 768.054447] out_of_memory+0x2dc/0x1190 [ 768.058408] ? oom_killer_disable+0x1c0/0x1c0 [ 768.062885] ? mutex_trylock+0x152/0x1a0 [ 768.066932] __alloc_pages_nodemask+0x23e1/0x2720 [ 768.071772] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 768.076598] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 768.081513] ? trace_hardirqs_on+0x10/0x10 [ 768.085743] ? cache_grow_begin+0x3f/0x420 [ 768.089976] cache_grow_begin+0x8f/0x420 [ 768.094025] ? mempolicy_slab_node+0x100/0x320 [ 768.098676] fallback_alloc+0x207/0x2c0 [ 768.102640] kmem_cache_alloc+0x1e5/0x3c0 [ 768.106947] getname_flags+0xc8/0x550 [ 768.110734] user_path_mountpoint_at+0x23/0x40 [ 768.115300] SyS_umount+0x125/0xeb0 [ 768.118912] ? lock_downgrade+0x740/0x740 [ 768.123041] ? __detach_mounts+0x400/0x400 [ 768.127258] ? up_read+0x17/0x30 [ 768.130696] ? __do_page_fault+0x19a/0xb50 [ 768.134916] ? do_syscall_64+0x4c/0x640 [ 768.138871] ? __detach_mounts+0x400/0x400 [ 768.143090] do_syscall_64+0x1d5/0x640 [ 768.146966] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 768.152141] RIP: 0033:0x45ed97 [ 768.155337] RSP: 002b:00007ffe8da5d308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 768.163116] RAX: ffffffffffffffda RBX: 00000000000bb584 RCX: 000000000045ed97 [ 768.170456] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffe8da5e440 [ 768.177710] RBP: 00000000000009e9 R08: 0000000000000001 R09: 000000000233b940 [ 768.184996] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8da5e440 [ 768.192252] R13: 00007ffe8da5e430 R14: 0000000000000000 R15: 00007ffe8da5e440 [ 768.200358] Mem-Info: [ 768.202997] active_anon:1332859 inactive_anon:9171 isolated_anon:0 [ 768.202997] active_file:16 inactive_file:20 isolated_file:0 [ 768.202997] unevictable:0 dirty:1 writeback:1 unstable:0 [ 768.202997] slab_reclaimable:17392 slab_unreclaimable:121076 [ 768.202997] mapped:53524 shmem:9382 pagetables:17635 bounce:0 [ 768.202997] free:22931 free_pcp:45 free_cma:0 [ 768.236993] Node 0 active_anon:1947012kB inactive_anon:36648kB active_file:0kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214060kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 768.265684] Node 1 active_anon:3384424kB inactive_anon:36kB active_file:64kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:36kB dirty:4kB writeback:4kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 768.305612] Node 0 DMA free:10376kB min:220kB low:272kB high:324kB active_anon:4764kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 768.338782] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 768.344501] Node 0 DMA32 free:26788kB min:36272kB low:45340kB high:54408kB active_anon:1942248kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22048kB bounce:0kB free_pcp:360kB local_pcp:0kB free_cma:0kB [ 768.382522] lowmem_reserve[]: 0 0 0 0 0 [ 768.387013] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 768.417354] lowmem_reserve[]: 0 0 0 0 0 [ 768.422134] Node 1 Normal free:51868kB min:53612kB low:67012kB high:80412kB active_anon:3384424kB inactive_anon:36kB active_file:64kB inactive_file:564kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15136kB pagetables:48492kB bounce:0kB free_pcp:652kB local_pcp:0kB free_cma:0kB [ 768.455654] lowmem_reserve[]: 0 0 0 0 0 [ 768.469361] Node 0 DMA: 2*4kB (ME) 10*8kB (U) 7*16kB (U) 12*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10376kB [ 768.503802] Node 0 DMA32: 71*4kB (UE) 1582*8kB (UMEH) 496*16kB (UMEH) 196*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27148kB [ 768.518494] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 768.539235] Node 1 Normal: 139*4kB (UME) 260*8kB (UM) 402*16kB (UME) 82*32kB (UME) 12*64kB (UME) 94*128kB (UM) 97*256kB (UM) 7*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 52908kB [ 768.561886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 768.572139] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 768.580765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 768.589588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 768.598333] 9423 total pagecache pages [ 768.602252] 0 pages in swap cache [ 768.605684] Swap cache stats: add 0, delete 0, find 0/0 [ 768.614221] Free swap = 0kB [ 768.617263] Total swap = 0kB [ 768.620544] 1965979 pages RAM [ 768.623648] 0 pages HighMem/MovableOnly [ 768.627787] 339056 pages reserved [ 768.633376] 0 pages cma reserved [ 768.636747] Out of memory: Kill process 18815 (syz-executor.0) score 1007 or sacrifice child [ 768.645386] Killed process 18815 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB 06:53:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000200)=0xfffff15a) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:43 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) r2 = dup3(r0, r1, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, 0x0, r5) fchownat(r2, &(0x7f00000000c0)='./file0\x00', r4, r5, 0x1c00) [ 769.979371] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 770.048538] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 770.059459] CPU: 1 PID: 24880 Comm: syz-executor.1 Not tainted 4.14.189-syzkaller #0 [ 770.067340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.076672] Call Trace: [ 770.079242] dump_stack+0x1b2/0x283 [ 770.082849] dump_header+0x178/0x82f [ 770.086550] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 770.091627] ? ___ratelimit+0x2cd/0x522 [ 770.095577] oom_kill_process.cold+0x10/0xa69 [ 770.100049] ? lock_downgrade+0x740/0x740 [ 770.104173] out_of_memory+0x2dc/0x1190 [ 770.108126] ? oom_killer_disable+0x1c0/0x1c0 [ 770.112595] ? mutex_trylock+0x152/0x1a0 [ 770.116631] __alloc_pages_nodemask+0x23e1/0x2720 [ 770.121458] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 770.126274] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 770.131090] ? trace_hardirqs_on+0x10/0x10 [ 770.135307] ? cache_grow_begin+0x3f/0x420 [ 770.139518] cache_grow_begin+0x8f/0x420 [ 770.143577] ? mempolicy_slab_node+0x100/0x320 [ 770.148136] fallback_alloc+0x207/0x2c0 [ 770.152089] kmem_cache_alloc+0x1e5/0x3c0 [ 770.156213] getname_flags+0xc8/0x550 [ 770.160002] ? SyS_access+0x20/0x20 [ 770.163606] user_path_at_empty+0x2a/0x50 [ 770.167739] SyS_chdir+0x7e/0x1a0 [ 770.171170] ? SyS_access+0x20/0x20 [ 770.174771] ? __do_page_fault+0x19a/0xb50 [ 770.178985] ? do_syscall_64+0x4c/0x640 [ 770.182934] ? SyS_access+0x20/0x20 [ 770.186539] do_syscall_64+0x1d5/0x640 [ 770.190406] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 770.195574] RIP: 0033:0x45b9b7 [ 770.198869] RSP: 002b:00007ffe1ad097c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 770.206550] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045b9b7 [ 770.213804] RDX: 0000000000000001 RSI: 0000000000746e70 RDI: 00007ffe1ad09810 [ 770.221049] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000026f5940 [ 770.228294] R10: 00000000026f5c10 R11: 0000000000000246 R12: 0000000000000001 [ 770.235539] R13: 00007ffe1ad09800 R14: 0000000000000000 R15: 00007ffe1ad09810 [ 770.259728] Mem-Info: [ 770.264493] active_anon:1329279 inactive_anon:9173 isolated_anon:0 [ 770.264493] active_file:239 inactive_file:406 isolated_file:32 [ 770.264493] unevictable:0 dirty:7 writeback:1 unstable:0 [ 770.264493] slab_reclaimable:17399 slab_unreclaimable:122205 [ 770.264493] mapped:54060 shmem:9384 pagetables:17549 bounce:0 [ 770.264493] free:24892 free_pcp:136 free_cma:0 [ 770.308876] Node 0 active_anon:1947216kB inactive_anon:36648kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214160kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 770.337611] Node 1 active_anon:3369900kB inactive_anon:44kB active_file:788kB inactive_file:804kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1280kB dirty:28kB writeback:4kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 770.447246] Node 0 DMA free:10388kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 770.493676] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 770.498821] Node 0 DMA32 free:27108kB min:36272kB low:45340kB high:54408kB active_anon:1942932kB inactive_anon:36648kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10688kB pagetables:22052kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 770.541111] lowmem_reserve[]: 0 0 0 0 0 [ 770.545119] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 770.572452] lowmem_reserve[]: 0 0 0 0 0 [ 770.576615] Node 1 Normal free:53956kB min:53612kB low:67012kB high:80412kB active_anon:3378972kB inactive_anon:44kB active_file:292kB inactive_file:836kB unevictable:0kB writepending:32kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14784kB pagetables:48144kB bounce:0kB free_pcp:224kB local_pcp:120kB free_cma:0kB [ 770.608668] lowmem_reserve[]: 0 0 0 0 0 [ 770.615554] Node 0 DMA: 1*4kB (E) 10*8kB (U) 8*16kB (UM) 12*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10388kB [ 770.631084] Node 0 DMA32: 118*4kB (UME) 1584*8kB (UE) 490*16kB (UME) 195*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27288kB [ 770.645235] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 770.656118] Node 1 Normal: 398*4kB (UM) 106*8kB (UMH) 251*16kB (UMEH) 218*32kB (UME) 65*64kB (UME) 104*128kB (UM) 91*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54200kB [ 770.672811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 770.681805] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 770.691491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 770.700428] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 770.708993] 9419 total pagecache pages [ 770.712988] 0 pages in swap cache [ 770.716432] Swap cache stats: add 0, delete 0, find 0/0 [ 770.727252] Free swap = 0kB [ 770.731140] Total swap = 0kB [ 770.739156] 1965979 pages RAM [ 770.742335] 0 pages HighMem/MovableOnly [ 770.746300] 339056 pages reserved [ 770.749805] 0 pages cma reserved [ 770.753166] Out of memory: Kill process 18869 (syz-executor.0) score 1007 or sacrifice child [ 770.761824] Killed process 18869 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 770.839248] ALSA: mixer_oss: invalid OSS volume '' 06:53:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:44 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 06:53:44 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x62, 0x2141, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x18000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:53:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000200)={0x1, 0x5}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 770.997919] ALSA: mixer_oss: invalid OSS volume '' [ 771.021579] ALSA: mixer_oss: invalid OSS volume '' 06:53:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0xc9, "88523d6c65e670d84de5f9cb95d586eaea46b1a30b08364b87b8071499bf925e1bca86241616cf2db1a958bcd2b5e1ac4daee05fe2090dfd362627bdb8ec47721095afbfef134baf80dcddd4d206152ba15998627285e84c9304b6ff08fa6e9f5b83a5b6d6bee1bd51ef66fcb335ca573d97a2f3207a51bd98215a905dbd0eba04a301322b8a2a90579527006fc1d0fb0b7ba8954105b2cfb151ab41eed2053329a7d2515f8c24d0babc9a019e6c870a87c6c354c17546fc43700cc54e2d22d54d2cb07fa558a1ffb5"}, &(0x7f0000000500)=0xd1) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:hugetlbfs_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2e}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x884}, 0x40000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:44 executing program 1: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="09216841ffc17d7cdc79026f70dff9b569b665d1471e5fda9b9bbbd89533014c415566b94f91680889fda0633d7453210f552f8a0f5192576b524df7edee2d1d05726e96ea843961710dcd92fd3dc504dbc8f54bdc67b2fa5405e35805df2f211e1874c6232b11"], 0x102f) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x4, 0x28002) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x3, r3, 0x1}) dup3(r1, r5, 0x0) 06:53:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 773.009472] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 773.026743] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 773.033338] CPU: 1 PID: 24914 Comm: syz-executor.3 Not tainted 4.14.189-syzkaller #0 [ 773.041218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.050564] Call Trace: [ 773.053151] dump_stack+0x1b2/0x283 [ 773.056776] dump_header+0x178/0x82f [ 773.060487] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 773.065586] ? ___ratelimit+0x2cd/0x522 [ 773.069571] oom_kill_process.cold+0x10/0xa69 [ 773.075542] ? lock_downgrade+0x740/0x740 [ 773.079690] out_of_memory+0x2dc/0x1190 [ 773.083662] ? oom_killer_disable+0x1c0/0x1c0 [ 773.088152] ? mutex_trylock+0x152/0x1a0 [ 773.092207] __alloc_pages_nodemask+0x23e1/0x2720 [ 773.097143] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 773.101976] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 773.107431] ? _find_next_bit+0xdb/0x100 [ 773.111512] alloc_pages_vma+0xd2/0x6d0 [ 773.115486] wp_page_copy+0xfcf/0x1ba0 [ 773.119374] ? _vm_normal_page+0x162/0x3b0 [ 773.123604] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 773.128098] ? __lock_acquire+0x5fc/0x3f20 [ 773.132331] do_wp_page+0x245/0x1db0 [ 773.136038] ? __handle_mm_fault+0x129c/0x4620 [ 773.140612] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 773.145273] ? __lock_acquire+0x5fc/0x3f20 [ 773.149503] __handle_mm_fault+0x234f/0x4620 [ 773.153905] ? vm_insert_page+0x7c0/0x7c0 [ 773.158045] ? lock_downgrade+0x740/0x740 [ 773.162185] ? cpuacct_charge+0x1cf/0x350 [ 773.166425] handle_mm_fault+0x306/0x7a0 [ 773.170483] __do_page_fault+0x578/0xb50 [ 773.174539] ? spurious_fault+0x640/0x640 [ 773.178679] ? do_page_fault+0x60/0x4f2 [ 773.182648] page_fault+0x25/0x50 [ 773.186106] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 773.191984] RSP: 0018:ffff8881861a7b68 EFLAGS: 00010206 [ 773.197356] RAX: ffffed1038669c00 RBX: 0000000000001000 RCX: 0000000000000500 [ 773.204703] RDX: 0000000000001000 RSI: ffff8881c334db00 RDI: 00000000204f7000 [ 773.211964] RBP: 00000000204f6500 R08: 0000000000000000 R09: ffffed1038669bff [ 773.219233] R10: ffff8881c334dfff R11: 0000000000000000 R12: ffff8881c334d000 [ 773.226495] R13: 00007ffffffff000 R14: 00000000204f7500 R15: ffff8881861a7df0 [ 773.233780] copyout+0x99/0xc0 [ 773.236973] copy_page_to_iter+0x324/0xca0 [ 773.241207] pipe_to_user+0xa8/0x160 [ 773.244918] __splice_from_pipe+0x326/0x7a0 [ 773.249236] ? iter_to_pipe+0x500/0x500 [ 773.253209] vmsplice_to_user+0x190/0x1b0 [ 773.257353] ? __splice_from_pipe+0x7a0/0x7a0 [ 773.261854] ? lock_downgrade+0x740/0x740 [ 773.266003] ? lock_acquire+0x170/0x3f0 [ 773.269974] ? lock_downgrade+0x740/0x740 [ 773.274133] ? __fget+0x225/0x360 [ 773.277587] SyS_vmsplice+0x12a/0x150 [ 773.281383] ? splice_from_pipe+0x120/0x120 [ 773.285702] do_syscall_64+0x1d5/0x640 [ 773.289588] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 773.294770] RIP: 0033:0x45c369 [ 773.297951] RSP: 002b:00007f2f98d53c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 773.305652] RAX: ffffffffffffffda RBX: 0000000000034dc0 RCX: 000000000045c369 [ 773.312917] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 773.320181] RBP: 000000000078bfe8 R08: 0000000000000000 R09: 0000000000000000 [ 773.327443] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 773.334706] R13: 00007ffd7fbbc71f R14: 00007f2f98d549c0 R15: 000000000078bfac [ 773.352538] Mem-Info: [ 773.355019] active_anon:1330978 inactive_anon:9171 isolated_anon:0 [ 773.355019] active_file:0 inactive_file:9 isolated_file:50 [ 773.355019] unevictable:0 dirty:3 writeback:0 unstable:0 [ 773.355019] slab_reclaimable:17445 slab_unreclaimable:122668 [ 773.355019] mapped:53600 shmem:9384 pagetables:17658 bounce:0 [ 773.355019] free:22828 free_pcp:156 free_cma:0 [ 773.399078] Node 0 active_anon:1948340kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214184kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 773.433860] Node 1 active_anon:3375572kB inactive_anon:36kB active_file:184kB inactive_file:664kB unevictable:0kB isolated(anon):0kB isolated(file):92kB mapped:716kB dirty:12kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 773.465235] Node 0 DMA free:10356kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 773.495988] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 773.501103] Node 0 DMA32 free:26912kB min:36272kB low:45340kB high:54408kB active_anon:1943556kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 773.533540] lowmem_reserve[]: 0 0 0 0 0 [ 773.537540] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 773.570960] lowmem_reserve[]: 0 0 0 0 0 [ 773.574963] Node 1 Normal free:54024kB min:53612kB low:67012kB high:80412kB active_anon:3375572kB inactive_anon:36kB active_file:712kB inactive_file:0kB unevictable:0kB writepending:12kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15040kB pagetables:48580kB bounce:0kB free_pcp:884kB local_pcp:148kB free_cma:0kB [ 773.608496] lowmem_reserve[]: 0 0 0 0 0 [ 773.612990] Node 0 DMA: 1*4kB (E) 10*8kB (U) 8*16kB (UM) 11*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10356kB [ 773.639420] Node 0 DMA32: 119*4kB (UME) 1581*8kB (UE) 486*16kB (UME) 186*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26916kB [ 773.680846] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 773.705741] Node 1 Normal: 23*4kB (U) 70*8kB (UME) 24*16kB (UM) 25*32kB (UME) 69*64kB (ME) 114*128kB (M) 96*256kB (M) 8*512kB (M) 4*1024kB (M) 0*2048kB 0*4096kB = 53612kB [ 773.745820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 773.767375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 773.776520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 773.794542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 773.826192] 9537 total pagecache pages [ 773.835693] 0 pages in swap cache [ 773.872067] Swap cache stats: add 0, delete 0, find 0/0 [ 773.877439] Free swap = 0kB [ 773.894771] Total swap = 0kB [ 773.897804] 1965979 pages RAM [ 773.901013] 0 pages HighMem/MovableOnly [ 773.904978] 339056 pages reserved [ 773.908420] 0 pages cma reserved [ 773.917216] Out of memory: Kill process 18947 (syz-executor.0) score 1007 or sacrifice child [ 773.926023] Killed process 18947 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 773.974808] oom_reaper: reaped process 18947 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 774.580553] ALSA: mixer_oss: invalid OSS volume '!hAÿÁ}|Üyopßùµi¶eÑG_Ú››»Ø•3L' 06:53:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:48 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1000, 0x5, 0x21cab8e1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x4) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) sendmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@isdn={0x22, 0x5c, 0x7, 0xff, 0x6}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)="c48725cd8199f0694fb2b457b21678febb9e3fc41b50aceffdaf5636ac8dd370accd44415e3869e8fc04bb55d44d7202ba15233fb18b2dd0a8d1f0cc110ecdbc3e9ba40f20620e820e39", 0x4a}, {&(0x7f0000000380)="d8926643dc50b5b9378daa0c774857f0ae1a6b99d3238179bbf5a461dde75d2fca6fe67cf69f7625ba55f9baf8ef0fac2a1318a4933dd8f00aecc929967c0fe6650619f494d693115564936e1fd31db605a819414ba3a34c23fd3cdaddccc42df349852cfbf6b94586bce66adf4a7010acdd480f7f64fd71cd46d7c1b836f69b3771fc2077bc", 0x86}, {&(0x7f0000000440)="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", 0x1000}], 0x3}, 0x4004) write(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:48 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="85"], 0x102f) dup3(r0, r1, 0x0) [ 774.752673] ALSA: mixer_oss: invalid OSS volume '…' 06:53:48 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000300)="29c4d96fe80a4dbdf8b76ec665df7fdc52a00e9d43b3b67a8fead133016691a076d7cd3d6c54a4d84ea7f1648107e9cf0ab92d4a6c86f26bfa7112f3138ee05c86054949ec1a03d09542", 0x4a) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c4e00b01e40a64aa01fb59878a3693eb9e8a6bdb2f96fd84648d61a7300bc0892c4d902e961e9f61846ea2b8c887977a5a121b2e05fb504", @ANYBLOB="85d8e2ffe765798c1e38dec68cc4b146ab85ea5c73443072d7de025601e94890a86eec9ed0918bf5cf2a220e1d232996bebe3357ac30a77f177ad7c58b418accd086e463186f21281f438b33d5b8f5540f50561e6e91d1e5046dd3b3ef8872b431c1fe947d19264bb67663abc3c793892742311e02ed3e28949a295dd81665d308d9f750ed087a642f582c78db1c4eba22d05ed5ec7aa3adea18561a7e791eed184502ee5b", @ANYBLOB="010000000000000000437cfbf5eb5289129b14fe4bad0008000000080004004b3d2376"], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="080028000000ffdbdf250a0000000800050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x44095) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000400)={0x1, 0xfffc, 0x0, 0xfffffffffffffffc, 0x4, 0xf55a, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x2000008, 0x4}, 0x0, 0x0) [ 774.800631] ALSA: mixer_oss: invalid OSS volume '…' 06:53:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:48 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x401, 0x3ff, 0x9}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xc, 0x4, 0x4, 0x1, 0x0, r2}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) dup(r3) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x400800, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4068aea3, &(0x7f0000000180)={0x0, 0x0, [0xded, 0x2, 0x7, 0xffffffff]}) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x102f) dup3(r0, r1, 0x0) [ 775.266193] ALSA: mixer_oss: invalid OSS volume 'icmp' [ 775.307109] ALSA: mixer_oss: invalid OSS volume 'icmp' 06:53:48 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@broadcast, @empty, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:53:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000002c0)=""/212) 06:53:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:48 executing program 1: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1910dcb6fc647ef9fa3bf1e249a4dcb5ed15150a0619868da0db1b98a67c2d310000006536b1dcff4ab24c8a64bee8768a7593dd5d2ae5d2d33eaf547b6a4d78a19412ba1e6535e2ddae03b8004dea57353e1c33793b85a13be28c4dde4ba23a3c6888998de3d7eb5e35abf57f906fa2e2d19b8c2f161c748800"/133], 0x102f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r1}, 0x2c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r1, r1, 0x0) [ 775.661380] ALSA: mixer_oss: invalid OSS volume 'ܶüd~ùú;ñâI¤Üµí' [ 775.672096] ALSA: mixer_oss: invalid OSS volume '† Û˜¦|-1' [ 775.842980] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 775.921010] systemd-udevd cpuset=/ mems_allowed=0-1 [ 775.961362] CPU: 0 PID: 3650 Comm: systemd-udevd Not tainted 4.14.189-syzkaller #0 [ 775.969079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.978415] Call Trace: [ 775.980987] dump_stack+0x1b2/0x283 [ 775.984591] dump_header+0x178/0x82f [ 775.988282] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 775.993362] ? ___ratelimit+0x2cd/0x522 [ 775.997316] oom_kill_process.cold+0x10/0xa69 [ 776.001790] ? lock_downgrade+0x740/0x740 [ 776.006088] out_of_memory+0x2dc/0x1190 [ 776.010043] ? oom_killer_disable+0x1c0/0x1c0 [ 776.014514] ? mutex_trylock+0x152/0x1a0 [ 776.018555] __alloc_pages_nodemask+0x23e1/0x2720 [ 776.023383] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 776.037750] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 776.042570] ? trace_hardirqs_on+0x10/0x10 [ 776.046786] ? cache_grow_begin+0x3f/0x420 [ 776.051004] cache_grow_begin+0x8f/0x420 [ 776.055217] ? mempolicy_slab_node+0x100/0x320 [ 776.059787] fallback_alloc+0x207/0x2c0 [ 776.063913] kmem_cache_alloc+0x1e5/0x3c0 [ 776.068040] getname_flags+0xc8/0x550 [ 776.071826] user_path_at_empty+0x2a/0x50 [ 776.075953] SyS_faccessat+0x21b/0x680 [ 776.079818] ? SyS_fallocate+0x80/0x80 [ 776.083708] ? do_syscall_64+0x4c/0x640 [ 776.087676] ? SyS_faccessat+0x680/0x680 [ 776.091722] do_syscall_64+0x1d5/0x640 [ 776.095588] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 776.100752] RIP: 0033:0x7fc45fd289c7 [ 776.104438] RSP: 002b:00007ffc2f55b208 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 776.112119] RAX: ffffffffffffffda RBX: 000055ba871ef940 RCX: 00007fc45fd289c7 [ 776.119362] RDX: 00746e657665752f RSI: 0000000000000000 RDI: 00007ffc2f55b210 [ 776.126609] RBP: 00007ffc2f55b280 R08: 000000000000cd00 R09: 0000000000001010 [ 776.133852] R10: 00007fc45ffe6b58 R11: 0000000000000246 R12: 000055ba860c7856 [ 776.141110] R13: 000055ba871f5530 R14: 00007ffc2f55b210 R15: 000055ba871f5300 [ 776.261147] Mem-Info: [ 776.278238] active_anon:1330072 inactive_anon:9172 isolated_anon:0 [ 776.278238] active_file:150 inactive_file:145 isolated_file:50 [ 776.278238] unevictable:0 dirty:24 writeback:4 unstable:0 [ 776.278238] slab_reclaimable:17469 slab_unreclaimable:122433 [ 776.278238] mapped:53846 shmem:9384 pagetables:17710 bounce:0 [ 776.278238] free:23754 free_pcp:74 free_cma:0 [ 776.355573] Node 0 active_anon:1948340kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214228kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 776.407430] Node 1 active_anon:3375948kB inactive_anon:40kB active_file:184kB inactive_file:120kB unevictable:0kB isolated(anon):0kB isolated(file):124kB mapped:300kB dirty:56kB writeback:4kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 776.434734] Node 0 DMA free:10356kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 776.462708] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 776.481003] Node 0 DMA32 free:27020kB min:36272kB low:45340kB high:54408kB active_anon:1943556kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 776.515842] lowmem_reserve[]: 0 0 0 0 0 [ 776.529356] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 776.575731] lowmem_reserve[]: 0 0 0 0 0 [ 776.587905] Node 1 Normal free:55180kB min:53612kB low:67012kB high:80412kB active_anon:3375980kB inactive_anon:40kB active_file:636kB inactive_file:192kB unevictable:0kB writepending:60kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15328kB pagetables:48796kB bounce:0kB free_pcp:464kB local_pcp:104kB free_cma:0kB [ 776.628380] lowmem_reserve[]: 0 0 0 0 0 [ 776.653595] Node 0 DMA: 1*4kB (E) 10*8kB (U) 8*16kB (UM) 11*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10356kB [ 776.670621] Node 0 DMA32: 123*4kB (UME) 1584*8kB (UME) 486*16kB (UME) 188*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27020kB [ 776.684958] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 776.695851] Node 1 Normal: 87*4kB (UME) 31*8kB (UM) 34*16kB (UME) 22*32kB (UME) 48*64kB (UME) 129*128kB (UM) 100*256kB (M) 8*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 54196kB [ 776.711979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 776.720844] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 776.729458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 776.738276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 776.748598] 9503 total pagecache pages [ 776.764900] 0 pages in swap cache [ 776.768555] Swap cache stats: add 0, delete 0, find 0/0 [ 776.774874] Free swap = 0kB [ 776.777958] Total swap = 0kB [ 776.782453] 1965979 pages RAM [ 776.785615] 0 pages HighMem/MovableOnly [ 776.789914] 339056 pages reserved [ 776.793431] 0 pages cma reserved [ 776.796857] Out of memory: Kill process 18987 (syz-executor.0) score 1007 or sacrifice child [ 776.805608] Killed process 18987 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 776.847662] oom_reaper: reaped process 18987 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:53:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 777.718979] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 777.731151] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 777.736304] CPU: 1 PID: 6368 Comm: syz-executor.0 Not tainted 4.14.189-syzkaller #0 [ 777.744073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.753410] Call Trace: [ 777.755990] dump_stack+0x1b2/0x283 [ 777.759619] dump_header+0x178/0x82f [ 777.763332] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 777.768439] ? ___ratelimit+0x2cd/0x522 [ 777.772412] oom_kill_process.cold+0x10/0xa69 [ 777.776906] ? lock_downgrade+0x740/0x740 [ 777.781055] out_of_memory+0x2dc/0x1190 [ 777.785025] ? oom_killer_disable+0x1c0/0x1c0 [ 777.789689] ? mutex_trylock+0x152/0x1a0 [ 777.793745] __alloc_pages_nodemask+0x23e1/0x2720 [ 777.801374] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 777.806213] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 777.811047] ? trace_hardirqs_on+0x10/0x10 [ 777.815281] ? cache_grow_begin+0x3f/0x420 [ 777.819508] cache_grow_begin+0x8f/0x420 [ 777.823563] ? mempolicy_slab_node+0x100/0x320 [ 777.828136] fallback_alloc+0x207/0x2c0 [ 777.832105] kmem_cache_alloc+0x1e5/0x3c0 [ 777.836243] getname_flags+0xc8/0x550 [ 777.840034] user_path_mountpoint_at+0x23/0x40 [ 777.844604] SyS_umount+0x125/0xeb0 [ 777.848226] ? lock_downgrade+0x740/0x740 [ 777.852364] ? __detach_mounts+0x400/0x400 [ 777.856587] ? up_read+0x17/0x30 [ 777.859942] ? __do_page_fault+0x19a/0xb50 [ 777.864168] ? do_syscall_64+0x4c/0x640 [ 777.868126] ? __detach_mounts+0x400/0x400 [ 777.872350] do_syscall_64+0x1d5/0x640 [ 777.876233] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 777.881408] RIP: 0033:0x45ed97 [ 777.884597] RSP: 002b:00007ffe8da5d308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 777.892286] RAX: ffffffffffffffda RBX: 00000000000bd6ba RCX: 000000000045ed97 [ 777.899546] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffe8da5e440 [ 777.906802] RBP: 0000000000000a0d R08: 0000000000000001 R09: 000000000233b940 [ 777.914061] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8da5e440 [ 777.921319] R13: 00007ffe8da5e430 R14: 0000000000000000 R15: 00007ffe8da5e440 [ 777.950998] Mem-Info: [ 777.953430] active_anon:1331442 inactive_anon:9171 isolated_anon:0 [ 777.953430] active_file:19 inactive_file:57 isolated_file:43 [ 777.953430] unevictable:0 dirty:0 writeback:0 unstable:0 [ 777.953430] slab_reclaimable:17472 slab_unreclaimable:122356 [ 777.953430] mapped:53639 shmem:9384 pagetables:17679 bounce:0 [ 777.953430] free:22744 free_pcp:133 free_cma:0 [ 777.991080] Node 0 active_anon:1948340kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214256kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 778.019022] Node 1 active_anon:3377428kB inactive_anon:36kB active_file:76kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:96kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 778.045658] Node 0 DMA free:10356kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 778.074998] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 778.080124] Node 0 DMA32 free:27068kB min:36272kB low:45340kB high:54408kB active_anon:1943556kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 778.110397] lowmem_reserve[]: 0 0 0 0 0 [ 778.114390] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 778.140272] lowmem_reserve[]: 0 0 0 0 0 [ 778.144258] Node 1 Normal free:53100kB min:53612kB low:67012kB high:80412kB active_anon:3378532kB inactive_anon:36kB active_file:120kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15264kB pagetables:48664kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 778.173290] lowmem_reserve[]: 0 0 0 0 0 [ 778.177268] Node 0 DMA: 1*4kB (E) 10*8kB (U) 8*16kB (UM) 11*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10356kB [ 778.193470] Node 0 DMA32: 123*4kB (UME) 1588*8kB (UME) 487*16kB (UME) 188*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27068kB [ 778.207769] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 778.222441] Node 1 Normal: 17*4kB (UME) 61*8kB (UME) 24*16kB (UE) 5*32kB (UME) 3*64kB (UME) 142*128kB (UM) 108*256kB (UM) 8*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 53260kB [ 778.242475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 778.253946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 778.262560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 778.273563] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 778.282173] 9418 total pagecache pages [ 778.286046] 0 pages in swap cache [ 778.291641] Swap cache stats: add 0, delete 0, find 0/0 [ 778.296988] Free swap = 0kB [ 778.303014] Total swap = 0kB [ 778.306038] 1965979 pages RAM [ 778.316087] 0 pages HighMem/MovableOnly [ 778.324258] 339056 pages reserved [ 778.327703] 0 pages cma reserved [ 778.348569] Out of memory: Kill process 19030 (syz-executor.0) score 1007 or sacrifice child [ 778.374435] Killed process 19030 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB 06:53:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x8, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x70a}, 0x0) r1 = socket$inet6(0xa, 0xa, 0x21) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3, 0x8}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:51 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x40500200) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000080)={0x1}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) 06:53:51 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r6}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00', r6}) 06:53:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r1, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x7, 0x5841}, &(0x7f0000000380)=0x90) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000200)=@in6={0xa, 0x4e22, 0xfffeffff, @empty, 0x5}, 0x1c, &(0x7f0000001340)=[{&(0x7f00000002c0)="7dc8a80ee26e2ff6c848c49606c973482dac409e2b5e52a0a4bb5d3a874d336f8cbe17132ec07f851d4a1b579c9aec00984734552385f0857a90470e2f9c3105bfcd88a6607df5dc3a3fdf7593c2ae5bd314dc50a9ca3b3a", 0x58}, {&(0x7f0000000340)="a178e9e9c2e35c218807255eb6b34aa7731a9328e25fa5f8432688f2a3c427fdc53967db02e748219b6eb1914a25e2a6025aa15c08366c25d1fad24f632e77cf809f9c04da152f4e46376403cb1bd793c5005fbc74d61c40e0a8710a87d0345a030ce553aab86c8485aa11fa40db8ed221125eb854970e7b6fb95674818e2e96194a05afb0e17cc033c9d6cfc5d4dc78934e38469ebbd316956a65d865160ecddfcc32a4067461c42aed263d790eb59c9d21bcc3e57db4a3749fc6f19cbf9815f539e1ba1d28f4bdc361ee1b541efeb500429f8772b5d52ec022c6a929139d207057a0fd802249d43805bd162717cdc751ddd265c70a79558078247c34dd5380763a1a4a9035dcc5a5bd027fc4aaf3e4da9c99eccc06776357c93a27261f7ed963cf5e8050e952c0df3f91eb43d93eb9e131f1819949257bbc8024e91f8043abcdc0491e0d02003665cdaf9ac4bfe9fd3988ca0b7be3335a8824105bee82c9a00bcadaf0055c51ffdec98f805170717424654ba375d04fa4fca1ea88ec316635b5cc73c1b829f6eb63806118095fb62d5f0b69de6d3bcf2a50def5ea9bf10f61752c2617278bb7acc59058ed6d210bea6eca0da4144b42f6d2a50c56f9316353e6fa987c7af40a6e8ac82caaabaa99e79388b8eb06caf8f2dafd84126b268a2e95bd8bc234601fbcf4c01b0c8a3bdb5442402171af2ed0093a5ae2c4b6ba6346ba0a382be390b38737eea81a447ca2e9863fad62773c767bf0040fa32380082e6b28cf08788b1e8b921849c045713bd676febc5f19971ea7e364301665d3204ce87d62f74167d1cbdc397500235f5fb83f906fa4f121df51e03009e9e4423f8b7622718defd805bb62ad82c70f38293dbb9ef2bc4fab54952667bc3244786d36ae8b404d8bbdf2eb12ae3235adced7699056287cf7244fc7e535cfc547802f36ccfc0f43f39c8a1562b4e1c1057284d561d4e89bee44cc9754369bdfbda17b0ef6541eb85c80d0c8a0e39f4c328804856644b2ec1488707a27e13dae38da40b331993769cc838b2cbcb1cd49e7489e1e7cce032a7d0776b5265a9880239809ba2174e428e511f2faf660985cd36c56016777ce1ea997342726fde045dadc92982368f9cb8a6cfa3adcdf1f63c1223609700ab042be4eb9dead58c272d3e291ab2d17fb3c82626c56ada17b572e339b722abbe22a01babc524400b5a9de77e0d5f359daffdacee6840ee2afce94d8261927100f3e93663c5d849cd5a8e78e128c0d1a1f42a6a26b34d4b752000c82324e68a00dda97b038ae6b379752b5f079a529d975357ff85bb49594d09484307e68bf97078b2626f713397310d043cf13909f3cc5eef74044aa61e4b6ec502e16a07342f79389ac25cc6a8b6c8c7e99bdba51da066b160a74d4fa88fa460eee07a0be9a77a5a59caddb0ab19b683af7aa144aa3e52bb535b33b457f4705a22f8377852e19f9742807c5a003b6928e36c03cfb00f34812b405bfef53a78bef73c42520dc540096835fd53861f28a8a4c50cbc6fccde4a2dd0bae9ec9654caeae37d4ec4f88ab6a526ba6b08f6532129279567d62e6c5bab442f441ed1bfa2680606614a1bb523c504ad7881d86d34e9d069242f71888c9b2f1ce75cd5c1a192264898bc97938dac5494f9805ceb8d42ccf1acbca974f41687c14e8e037bbb214a9b835997e66575e493ce49f7eb4d6c3bbf48b3024f6632ce159c0bb3a1f096c0dce2e91f915994cd56a121e17fa65bd65c42cb49082517b98387b9dc0195a56024d117956fd9065d25909c94d41c63d25d39ccedd6a4130b11090ec72a1dbbfcc0ce8333ed46f82cc0871e15f05a71d3e7acba3e6767945f1a8a83f4fe81a93bb2681aeed07d0832e2da02d02e0663027f5be5745218321b01b8605aad9d3286acd99c9264beb19923208364a89e5b7685849d1786ebd5d4d620649ec399f6893e1cd4b80905deedc69f22133f5d7b81884ce0e6d45be368b27b6a78148f584a6769cf239d7d783909f27383f2ffdabcd92a08606fc9b461bf7f0145cfcec709ef9d6aef5980afebbc1159e8a153292e99c12109858353de3571f946d138dfddde3049a6fb85c9f8966f6966421ad1bf91ae94ed49fb70581aa22651e237d980ccd65398e2733892a036f12f0750ad4fb2c2786afd6f5ec1a68eeda5ed27245a5e46aa35904913943eb83a0bdb670ef4f6c48ae213614b42d2eec28ceaf33bebdb1bdc33670239f125b3315cccd81d84d0d00871a0412455728b69b7310ce6dd1e58f35fdebbd30fcbbcc226ee5d17d3cb4707ff5dc809f54d8b14f3cecb8682eee8762caed97c422ed65bcdb7b6f5fa58fe2c093934462adccbd99ad22699bde3860220e03c91e0bc388a8320b9445506d7369d7dcb4e2312f698c84eede3480bae12932704e07eccc8656466f8e66c61c5cbc74af4d4cf3fcae3198b19693f9fe3ecd62d4a97f156b75a567bbb0938f1fda1d23396a4e6eff3352b07e4312a584e46286af6401541aaff11df24f4cb2d898fc89d090b09e12e4a6cea28ab38d31c5a5ec06353f28fe086d8f34952e3a31148f99bd30739304a6bdc0c6227dbe7dfe41c3bb83e91e3f4c0323346d9983e9664d4687ebbbd78df8f32e272384255e875785ab69e59e61f204dc3a4df3416db36da03e1b6e408ca73fc349a49d8925e8af53645e4da8c6b91054e309f6e3fa916ed94432886dca2db5a5f50e2b85263ecfc8641772904ef9bf79135390919c90a6449124793992c933820633fe12ea3799b5c2f547143966b3156aa5478cc98b5a98efce9b6af315738fe5d722479367dd4cd19e29b6e51de227706aae17c70cab13210b34a6cb13f6ed5d40570a2b1213f4fabcfbee95377382ad2a11a4460bea5e22f580f8452e0cee0a63ee4689868d9593cf4b71b4b16ebc003574509f415dfe22441896489275801c3172113fcb8447f65cbad9899a0bdf6de21c98a7ccd2e17ac0049341a46b26a0cc7967e823f474791116be46a0e86939fb1fb04de4362d7b98834e8d3b50d64e7ff3d7ac110d7132785e59c42d65f53439f30ad2d309e567188b7b94ee88c088a2c7a8a0bdc8defce345e3a0e0f98327cd5c3985ad59d3dba96e9b47e96dcf4880247621d28d9101c2213405b43718538370b3836a2c7635624a1fc689a29fced3d435142b55472fb4f089d0aff0efff457cb22a54fa7191344cf5737fcb04900c48e777ea1baedc3f16f72e74460282a291c57d95e9f0a9dcee2a5722bc6160e1aacb866f3e5bad29e24c7f9b757b7d70290aa245fb3de2e0c24720e6492052932e738e6da432a7a15a840bedfa3130afc192eb5cefbdb145cbba0ddb4b8a238087a17c0a5281467b141e4232c25d76ed7f5200e4adc4042ab029a2ed6e8bf4ec895075f3d13d62bac18256faca856c7db924ec3babcaa2a50b620081ed2b18b1f771081496c4695137cbc79812bc2d2225b10eed0450cab8bbd3dc940e20a7abf3bbc0dd33043dc048cf8e4bc6a71d3cc1922a8e73ccac7003aedc457881bdf10d959c32be91d4820a10d9d6dd86a9c4b6cec78205997ab821bbb68555e5fd2bcaa3f0f91c5f8803c49bef32f9de58219de5781e2eadd35579a9c062f74c3581b57bfc174bace5f0f128910a382606a76e7357e1082e294893d662f22b5b529fb8bc728092ccdc0c96a765020dba8a01abf6803980c63ddc48269802db577188baeda5ff51e979ad3461f1805ef8b43524cdad67697577c774594d4f21ccc1653308d98e794094509c65da11aa6fc1683c2992d3f1f3827b500915cc7ae7b7de8ef8f07082a1275c7f94fd0c615b0d354a9f3ddaf511846ee4797032bfb288a7890dd503627d62e0770273c5fd471cc75b40a0f70aae9dc10ed50bde22152711136ea33700a5450bc9c7db413aacbab1fbe068a51826aa60fd9fff61966629706d578c8f60017dc09bc29baf097cb35a64505149cdf708f69f0c845c02415f7d98beb705af306ff48a7e5df87a4ad0a63438e6298d800f2f10b7b133aa07f9dadd829fac2937e219d2638652e22ba0cf51e2106df123002802092730079ec6d2e923e19be85d0654d4779ade045dfa024d37838eeffbc667d78b83aee2beda5f01ab3debc2169e5a14f3f5c2ca9e3cea70d64ed4cc5c205697bc4c2431fd03efdbca9636069995dcff5bf60ffdab9778717a55df2e34e7f2168d70489684db95d6c7a9905c3c8c998c27ac3290359f07f98af182c767a713091af0e251f234a617d13471356d685e4365cfd6648e92e13500a94e02a24b506eca49c96c535eb22303f4ff6a8177e12cc537111dc4884e227c4490e02aba38937856aad0b028a615252d844e0bb850c62d584a03207d2110c24d2bd25ca073a266c4d679383cde3bd16ba4ba62031940e98e8fba53cbb0a9a405a446a4ef04d488e9db38e0576b7342dc2dcc7927c4c3f13c200f60bf64b861410f48bbb37ffe94d9912a3adeaf7e494fce3bd5ebb78f6896bcd5e96649d3588c4519ec5f323076e6211e1d3ef4a6e256e1a0a869b7fefdbf59debcfeaee65c0417fc4375dd02975dd1676f335165167aa7c9a7e11b53080dce414bba0063832e1205d40301f3da77cdff519bd310d3186bc35cb74379e42b9a51125b71cfa9a52665b7e9b86758314abd1b6d21da26712cf029ffcbe56bd7aa257a88a85161deea10efef5c5b9cf8f7c3a66b125bf77fa70e420b313a073e54f2ed7784e7b51c3832ebccc726d20c7a602b31918fb3fa4dd017676a3a7ea7ff8234e937bea47783ca64c300b93f4a25f5e3c33907363465a6c3648bc67038f258ec3abcbcc48ca925d570c6d1484e3f616ede58237066f13fb8af3dfe5c8c54dcfbe013e86472dc4e4a04fb6f419c40c3cfc444cc7304b57dfc063196b6c9c84dbfed90d7b7504804a0d16bc0252dc7f8a58fe7d2c7f7ec74029849559d76622f61728089e8a56aa28f0fb9a7d7b7f08d1caabbaca06ef128a42e17f4e99d416c3c3b0ba95ea7e5c7e4b24e00c5085d975502373c65e0abbffb93e8145d682ef55494de9b2f059f60d81b165855b36d2f010f5e6ffaf23b269d897c8407ce882c63ae659c4d7a470eb656154b2be98f4626938f551c2751a69b4a0f2cf6a87009f20c67923802fcf01c68d53483481452e0e60c3bb2a4e1054246efc6f15068e97e32e5b54cc7149060fcf7041c1a09a380924fe1e949dbb4dd2536f42993525fdf90ee1a709b394de02b52a3c232068c19d91be453092d3f526445e4fed057938f7f6de8d1184b596d00dbb97f9202a8a42a60d2b3e51cc12c65955dfd453d28b80a474913d740a7278197de2e2fa09c0d11f0c9d8b7e13f8e479f213d948cd9f3667d1338e688dd88d65f8eda0bbb5eaa31e2ed003f488d309bb14cc01ee71a9603e893407ddcef35d99580722fcf9e28a6faf516d7cf4742f36f1e6623f5b8e90173e29d0cf70f2a9e7d57fbd5cedac736be38b5b83da3c5facff976c53ba2a1986239fa428d098f54b1685d40668c7713e68d0365f325efe84d400b2e6d8edb88376d1a9cb4d1f59ea18bbee8140e55908ddd34f3d5579b9237ff43710cf61a047a05fe227cc681a44b0800a3f37d90711fa214be6c50b44a66d14bc1b43a755197c05bd7d39102531e842f23c63b57c886a41c37be0fbef9c74bf272eaeee260e6245f5d0bf132f336ddac3ca7ab06102db7af0517f957647ff36b820b9c7c21f9553cb5062b4489b7e0be7e575b9d3732f018ee6484e3b96d1657a2587a4c3a089a3d49", 0x1000}], 0x2, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000004000000840000000700000064010100000000003000000000000000840000000100000000000400080200000500000002000000d60000000000000005c13c9c", @ANYRES32=0x0, @ANYBLOB="200000000000000084000000020000003f0000000700000005000000", @ANYRES32=r1], 0x68, 0x40800}], 0x1, 0x20000081) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 778.760393] ALSA: mixer_oss: invalid OSS volume '' 06:53:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0x1ff, [0x2, 0x3]}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 780.122133] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 780.140182] systemd-udevd cpuset=/ mems_allowed=0-1 [ 780.145504] CPU: 0 PID: 3650 Comm: systemd-udevd Not tainted 4.14.189-syzkaller #0 [ 780.153202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.162548] Call Trace: [ 780.165132] dump_stack+0x1b2/0x283 [ 780.168760] dump_header+0x178/0x82f [ 780.172467] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 780.177561] ? ___ratelimit+0x2cd/0x522 [ 780.181531] oom_kill_process.cold+0x10/0xa69 [ 780.186022] ? lock_downgrade+0x740/0x740 [ 780.190164] out_of_memory+0x2dc/0x1190 [ 780.194134] ? oom_killer_disable+0x1c0/0x1c0 [ 780.198624] ? mutex_trylock+0x152/0x1a0 [ 780.202711] __alloc_pages_nodemask+0x23e1/0x2720 [ 780.207558] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 780.212391] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 780.217229] ? trace_hardirqs_on+0x10/0x10 [ 780.221469] ? cache_grow_begin+0x3f/0x420 [ 780.225705] cache_grow_begin+0x8f/0x420 [ 780.229761] ? mempolicy_slab_node+0x100/0x320 [ 780.234340] fallback_alloc+0x207/0x2c0 [ 780.238310] kmem_cache_alloc+0x1e5/0x3c0 [ 780.242458] getname_flags+0xc8/0x550 [ 780.246255] user_path_at_empty+0x2a/0x50 [ 780.250400] vfs_statx+0xd1/0x180 [ 780.253850] ? cp_compat_stat+0x890/0x890 [ 780.257998] SyS_newlstat+0x83/0xe0 [ 780.261617] ? SyS_newstat+0xe0/0xe0 [ 780.265320] ? __secure_computing+0xe5/0x3e0 [ 780.269724] ? syscall_trace_enter+0x486/0xc20 [ 780.274301] ? syscall_slow_exit_work+0x560/0x560 [ 780.279141] ? do_syscall_64+0x4c/0x640 [ 780.283111] ? SyS_newstat+0xe0/0xe0 [ 780.286816] do_syscall_64+0x1d5/0x640 [ 780.290708] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 780.295888] RIP: 0033:0x7fc45fd28335 [ 780.299590] RSP: 002b:00007ffc2f55b148 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 780.307301] RAX: ffffffffffffffda RBX: 000055ba871f1950 RCX: 00007fc45fd28335 [ 780.314565] RDX: 00007ffc2f55b180 RSI: 00007ffc2f55b180 RDI: 000055ba871f0950 [ 780.321822] RBP: 00007ffc2f55b240 R08: 00007fc45ffe7178 R09: 0000000000001010 [ 780.329083] R10: 00007fc45ffe6b58 R11: 0000000000000246 R12: 000055ba871f0950 [ 780.336347] R13: 000055ba871f0954 R14: 000055ba871e2ac1 R15: 000055ba871e2ac4 [ 780.526909] Mem-Info: [ 780.529600] active_anon:1331474 inactive_anon:9172 isolated_anon:0 [ 780.529600] active_file:24 inactive_file:24 isolated_file:0 [ 780.529600] unevictable:0 dirty:1 writeback:0 unstable:0 [ 780.529600] slab_reclaimable:17491 slab_unreclaimable:122005 [ 780.529600] mapped:53584 shmem:9384 pagetables:17713 bounce:0 [ 780.529600] free:22961 free_pcp:153 free_cma:0 [ 780.568168] Node 0 active_anon:1948340kB inactive_anon:36648kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214288kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 780.597661] Node 1 active_anon:3377636kB inactive_anon:40kB active_file:256kB inactive_file:516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 780.658225] Node 0 DMA free:10356kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 780.686532] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 780.691649] Node 0 DMA32 free:27096kB min:36272kB low:45340kB high:54408kB active_anon:1943556kB inactive_anon:36648kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 780.721588] lowmem_reserve[]: 0 0 0 0 0 [ 780.726095] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 780.788976] lowmem_reserve[]: 0 0 0 0 0 [ 780.797562] Node 1 Normal free:53420kB min:53612kB low:67012kB high:80412kB active_anon:3377636kB inactive_anon:40kB active_file:248kB inactive_file:716kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15264kB pagetables:48804kB bounce:0kB free_pcp:1032kB local_pcp:336kB free_cma:0kB [ 780.830921] lowmem_reserve[]: 0 0 0 0 0 [ 780.835027] Node 0 DMA: 1*4kB (E) 10*8kB (U) 8*16kB (UM) 11*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10356kB [ 780.850670] Node 0 DMA32: 128*4kB (UME) 1591*8kB (UME) 486*16kB (UME) 188*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27096kB [ 780.865061] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 780.875978] Node 1 Normal: 163*4kB (UME) 187*8kB (UME) 36*16kB (UM) 22*32kB (UME) 3*64kB (UM) 119*128kB (ME) 114*256kB (UME) 9*512kB (UME) 1*1024kB (E) 0*2048kB 0*4096kB = 53668kB [ 780.894989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 780.904403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 780.913500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 780.926361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 780.935025] 9422 total pagecache pages [ 780.938949] 0 pages in swap cache [ 780.942476] Swap cache stats: add 0, delete 0, find 0/0 [ 780.947817] Free swap = 0kB [ 780.952066] Total swap = 0kB [ 780.955078] 1965979 pages RAM [ 780.958155] 0 pages HighMem/MovableOnly [ 780.962138] 339056 pages reserved [ 780.965560] 0 pages cma reserved [ 780.971012] Out of memory: Kill process 25071 (syz-executor.2) score 1007 or sacrifice child [ 780.979901] Killed process 25071 (syz-executor.2) total-vm:75104kB, anon-rss:16552kB, file-rss:34816kB, shmem-rss:0kB [ 781.162338] oom_reaper: reaped process 25071 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:53:53 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000140)={0x9, 0x28, [0xffff7fff, 0x3, 0x6, 0x8, 0x7fffffff, 0x3f, 0x4, 0x0, 0x4, 0x7]}) dup(r2) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x7f) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xc, 0x4, 0x4, 0x1, 0x0, r7, 0x1, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x80000}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r8, &(0x7f00000001c0), 0x0}, 0x20) dup3(r8, r0, 0x80000) r9 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r9) keyctl$describe(0x6, r9, &(0x7f0000000340)=""/4096, 0x1000) [ 781.805397] oom_reaper: reaped process 25040 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:53:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000002c0)="5dc6fef13cd356b5ddbb9cb5474a511ac227b3965a550691f0755d6d9f46ed90ad6df68d1242b8a9e9ea2c8fd07d04cbf29e6729159af6a4c43ef4db702f6f1aea9330ba0f09549c1f4d56ed70bf6ad7437ce6a3c7bd8cacfbfb5ef83071d4058d132baf474d105b059f76c2770d21161e165710dc1277440d2457613aed5d01d7a2757f616511528514278c0a5b3384636c6f710036a23085c92c1622d2f53986380255748b367edf", 0xa9) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0xa000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000002c0)={0x0, 0x96, "b2e19e5696b5ddb5b90c6d6b7c1d21dfb8d8eb341f239298bbbfb1a75f2b19ac6f1d111dde8c047d9ea62ae4b09af13be2f32173b8c39cf944cb47225dae5a2d9d98206e734df8a78cfa9aa417c44aab265d0d92da8fb4e6207908d3bc1ac5e56be748d150df3f9b4b5e215ce1cfd66c19899f63149cf605f585fd4cf0b8051cfdfd8a9b01d27d18212e250c501908e4b0547776c6f6"}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 781.987195] ALSA: mixer_oss: invalid OSS volume '' 06:53:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 782.048438] ALSA: mixer_oss: invalid OSS volume 'kcs7_test' 06:53:55 executing program 1: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x2) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, &(0x7f0000000080)={0x1, 0x7, 0x0}) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00'], 0x102f) dup3(r0, r1, 0x0) 06:53:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 782.395089] syz-executor.4 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 06:53:55 executing program 3: r0 = getpid() setuid(0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xda1a, 0x7fffffff, {0x0}, {}, 0x1, 0x7}) ptrace$getsig(0x4202, r1, 0xa36, &(0x7f0000000280)) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x9, 0x201}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x5}, 0x0, 0x0) [ 782.435703] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 782.447513] CPU: 1 PID: 6375 Comm: syz-executor.4 Not tainted 4.14.189-syzkaller #0 [ 782.455325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.464675] Call Trace: [ 782.467263] dump_stack+0x1b2/0x283 [ 782.470887] dump_header+0x178/0x82f [ 782.474593] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 782.479691] ? ___ratelimit+0x2cd/0x522 [ 782.483646] oom_kill_process.cold+0x10/0xa69 [ 782.488123] ? lock_downgrade+0x740/0x740 [ 782.492250] out_of_memory+0x2dc/0x1190 [ 782.496205] ? oom_killer_disable+0x1c0/0x1c0 [ 782.500677] ? mutex_trylock+0x152/0x1a0 [ 782.504718] __alloc_pages_nodemask+0x23e1/0x2720 [ 782.509556] ? finish_task_switch+0x14d/0x610 [ 782.514033] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 782.518855] ? retint_kernel+0x2d/0x2d [ 782.522732] alloc_pages_current+0x155/0x260 [ 782.527123] __vmalloc_area_node+0x40a/0x680 [ 782.531514] ? __vmalloc_node_range+0x150/0x150 [ 782.536159] ? __get_vm_area_node+0x27d/0x340 [ 782.540678] ? do_ip6t_get_ctl+0x438/0x7d0 [ 782.544913] vzalloc+0xc3/0x150 [ 782.548173] do_ip6t_get_ctl+0x438/0x7d0 [ 782.552215] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 782.557643] ? __schedule+0x893/0x1de0 [ 782.561510] ? ip6t_error+0x20/0x20 [ 782.565115] ? __mutex_unlock_slowpath+0x75/0x770 [ 782.569950] ? retint_kernel+0x2d/0x2d [ 782.573818] ? wait_for_completion_io+0x10/0x10 [ 782.578519] ? nf_sockopt_find.constprop.0+0x1ad/0x220 [ 782.583775] nf_getsockopt+0x62/0xc0 [ 782.587519] ipv6_getsockopt+0x146/0x1e0 [ 782.591576] ? compat_ipv6_getsockopt+0x290/0x290 [ 782.596396] ? __fdget+0xaa/0x1f0 [ 782.599873] tcp_getsockopt+0x7b/0xc0 [ 782.603672] SyS_getsockopt+0x102/0x1c0 [ 782.607624] ? SyS_setsockopt+0x1e0/0x1e0 [ 782.611751] ? do_syscall_64+0x4c/0x640 [ 782.615703] ? SyS_setsockopt+0x1e0/0x1e0 [ 782.619843] do_syscall_64+0x1d5/0x640 [ 782.623711] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 782.628879] RIP: 0033:0x45ee7a [ 782.632046] RSP: 002b:00007ffe402d5268 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 782.639745] RAX: ffffffffffffffda RBX: 00007ffe402d5290 RCX: 000000000045ee7a [ 782.647006] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 782.654270] RBP: 0000000000744ca0 R08: 00007ffe402d528c R09: 0000000000004000 [ 782.661531] R10: 00007ffe402d5390 R11: 0000000000000212 R12: 0000000000000003 [ 782.668788] R13: 0000000000000000 R14: 0000000000000029 R15: 0000000000743860 [ 782.817388] Mem-Info: [ 782.820007] active_anon:1328715 inactive_anon:9173 isolated_anon:0 [ 782.820007] active_file:645 inactive_file:784 isolated_file:68 [ 782.820007] unevictable:0 dirty:17 writeback:0 unstable:0 [ 782.820007] slab_reclaimable:17493 slab_unreclaimable:121602 [ 782.820007] mapped:54796 shmem:9384 pagetables:17782 bounce:0 [ 782.820007] free:24124 free_pcp:201 free_cma:0 06:53:56 executing program 5: prlimit64(0x0, 0x2, &(0x7f0000000280)={0x9, 0x6}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback, @in=@initdev}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10000003, 0x0, 0x5}, 0x0) ptrace$getenv(0x4201, r0, 0x598, &(0x7f0000000340)) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)=""/125, 0x7d}, {&(0x7f0000000800)=""/203, 0xcb}, {&(0x7f0000000600)=""/232, 0xe8}], 0x3, &(0x7f0000000700)=""/186, 0xba}, 0x9}], 0x1, 0x10121, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)=""/72, &(0x7f00000002c0)=0x48) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x608c80, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000380), &(0x7f00000003c0)=0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x9, 0x3ff, 0x0, 0x3, 0xfffffffffffffffb, 0xc54}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 782.928534] Node 0 active_anon:1948340kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214320kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 783.004813] Node 1 active_anon:3355420kB inactive_anon:44kB active_file:3800kB inactive_file:3592kB unevictable:0kB isolated(anon):0kB isolated(file):236kB mapped:6164kB dirty:64kB writeback:100kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 783.041850] Node 0 DMA free:10356kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 783.074352] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 783.079985] Node 0 DMA32 free:27280kB min:36272kB low:45340kB high:54408kB active_anon:1943556kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 783.125517] lowmem_reserve[]: 0 0 0 0 0 06:53:56 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000080), 0x2, 0x8) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) [ 783.149769] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 783.236458] lowmem_reserve[]: 0 0 0 0 0 [ 783.255246] Node 1 Normal free:68876kB min:53612kB low:67012kB high:80412kB active_anon:3354488kB inactive_anon:40kB active_file:6028kB inactive_file:4284kB unevictable:0kB writepending:44kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14816kB pagetables:48468kB bounce:0kB free_pcp:1468kB local_pcp:728kB free_cma:0kB [ 783.289779] lowmem_reserve[]: 0 0 0 0 0 [ 783.293781] Node 0 DMA: 1*4kB (E) 10*8kB (U) 8*16kB (UM) 11*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10356kB [ 783.313069] Node 0 DMA32: 126*4kB (UME) 1608*8kB (UME) 487*16kB (UME) 189*32kB (UME) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27336kB [ 783.327709] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 783.342691] Node 1 Normal: 501*4kB (UME) 1186*8kB (UM) 709*16kB (UMEH) 241*32kB (UMH) 44*64kB (UMH) 20*128kB (ME) 113*256kB (UM) 9*512kB (UME) 1*1024kB (E) 0*2048kB 0*4096kB = 70484kB [ 783.362906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 783.372254] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 783.385286] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 783.394358] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 783.406771] 11168 total pagecache pages [ 783.410980] 0 pages in swap cache [ 783.414600] Swap cache stats: add 0, delete 0, find 0/0 [ 783.423741] Free swap = 0kB [ 783.426922] Total swap = 0kB [ 783.430169] 1965979 pages RAM [ 783.433272] 0 pages HighMem/MovableOnly [ 783.437440] 339056 pages reserved [ 783.444732] 0 pages cma reserved [ 783.448260] Out of memory: Kill process 25106 (syz-executor.4) score 1007 or sacrifice child [ 783.457832] Killed process 25106 (syz-executor.4) total-vm:75236kB, anon-rss:16568kB, file-rss:34884kB, shmem-rss:0kB 06:53:56 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, r1, 0x0) [ 783.853327] ALSA: mixer_oss: invalid OSS volume 'ELF' 06:53:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:57 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x2, 0x0) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, 0x0) r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$unlink(0x9, 0x0, r3) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 783.969959] ALSA: mixer_oss: invalid OSS volume '•ò•ïA0æê?n~¼dš4J€Ã8' [ 784.011557] ALSA: mixer_oss: invalid OSS volume 'sÐXÐ9%ê%àuB%kéßRÿ?[' 06:53:57 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r2}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r4}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f00000001c0), 0x0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r6}, 0x2c) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r6], 0x102f) dup3(r0, r1, 0x0) 06:53:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 784.597384] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 784.715958] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 784.728062] CPU: 1 PID: 25146 Comm: syz-executor.5 Not tainted 4.14.189-syzkaller #0 [ 784.735966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.745315] Call Trace: [ 784.747911] dump_stack+0x1b2/0x283 [ 784.751552] dump_header+0x178/0x82f [ 784.755274] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 784.760372] ? ___ratelimit+0x2cd/0x522 [ 784.764339] oom_kill_process.cold+0x10/0xa69 [ 784.768857] ? lock_downgrade+0x740/0x740 [ 784.772988] out_of_memory+0x2dc/0x1190 [ 784.776946] ? oom_killer_disable+0x1c0/0x1c0 [ 784.781438] ? mutex_trylock+0x152/0x1a0 [ 784.785502] __alloc_pages_nodemask+0x23e1/0x2720 [ 784.790346] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 784.795175] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 784.799999] ? trace_hardirqs_on+0x10/0x10 [ 784.804220] ? cache_grow_begin+0x3f/0x420 [ 784.808435] cache_grow_begin+0x8f/0x420 [ 784.812477] ? mempolicy_slab_node+0x100/0x320 [ 784.817037] fallback_alloc+0x207/0x2c0 [ 784.820991] kmem_cache_alloc_node+0xe3/0x410 [ 784.825470] copy_process.part.0+0x17db/0x6f00 [ 784.830046] ? __handle_mm_fault+0x2095/0x4620 [ 784.834616] ? lock_downgrade+0x740/0x740 [ 784.838744] ? __lru_cache_add+0x178/0x250 [ 784.842962] ? do_raw_spin_unlock+0x164/0x220 [ 784.847438] ? _raw_spin_unlock+0x29/0x40 [ 784.851586] ? __cleanup_sighand+0x40/0x40 [ 784.855803] ? selinux_file_mprotect+0xf3/0x5c0 [ 784.860458] _do_fork+0x184/0xc80 [ 784.863896] ? fork_idle+0x270/0x270 [ 784.867589] ? up_read+0x17/0x30 [ 784.870934] ? __do_page_fault+0x19a/0xb50 [ 784.875149] ? do_syscall_64+0x4c/0x640 [ 784.879098] ? sys_vfork+0x20/0x20 [ 784.882615] do_syscall_64+0x1d5/0x640 [ 784.886486] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 784.891653] RIP: 0033:0x45ed39 [ 784.894820] RSP: 002b:00007ffd08b08038 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 784.902527] RAX: ffffffffffffffda RBX: 00007f914cf8c700 RCX: 000000000045ed39 [ 784.909776] RDX: 00007f914cf8c9d0 RSI: 00007f914cf8bdb0 RDI: 00000000003d0f00 [ 784.917023] RBP: 00007ffd08b08260 R08: 00007f914cf8c700 R09: 00007f914cf8c700 [ 784.924299] R10: 00007f914cf8c9d0 R11: 0000000000000202 R12: 0000000000000000 [ 784.931555] R13: 00007ffd08b080ef R14: 00007f914cf8c9c0 R15: 000000000078c2cc [ 785.094125] Mem-Info: [ 785.096720] active_anon:1332126 inactive_anon:9173 isolated_anon:0 [ 785.096720] active_file:22 inactive_file:41 isolated_file:5 [ 785.096720] unevictable:0 dirty:5 writeback:1 unstable:0 [ 785.096720] slab_reclaimable:17608 slab_unreclaimable:121450 [ 785.096720] mapped:53616 shmem:9384 pagetables:17769 bounce:0 [ 785.096720] free:22768 free_pcp:63 free_cma:0 [ 785.158662] Node 0 active_anon:1948340kB inactive_anon:36648kB active_file:36kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214420kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 785.195901] Node 1 active_anon:3380164kB inactive_anon:44kB active_file:20kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:4kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 785.245848] Node 0 DMA free:10356kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 785.295237] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 785.302858] Node 0 DMA32 free:27248kB min:36272kB low:45340kB high:54408kB active_anon:1943556kB inactive_anon:36648kB active_file:36kB inactive_file:92kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 785.352425] lowmem_reserve[]: 0 0 0 0 0 [ 785.356434] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 785.382625] lowmem_reserve[]: 0 0 0 0 0 [ 785.386621] Node 1 Normal free:53460kB min:53612kB low:67012kB high:80412kB active_anon:3380392kB inactive_anon:44kB active_file:164kB inactive_file:112kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15392kB pagetables:49024kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 785.415672] lowmem_reserve[]: 0 0 0 0 0 [ 785.419718] Node 0 DMA: 1*4kB (E) 10*8kB (U) 8*16kB (UM) 11*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10356kB [ 785.435203] Node 0 DMA32: 131*4kB (UME) 1610*8kB (UME) 487*16kB (UME) 189*32kB (UME) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27372kB [ 785.451563] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 785.465059] Node 1 Normal: 74*4kB (UM) 122*8kB (UM) 35*16kB (UM) 5*32kB (U) 63*64kB (M) 116*128kB (M) 110*256kB (M) 7*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 53640kB [ 785.506441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 785.537068] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 785.545712] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 785.555955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 785.564558] 9420 total pagecache pages [ 785.568449] 0 pages in swap cache [ 785.571941] Swap cache stats: add 0, delete 0, find 0/0 [ 785.577286] Free swap = 0kB [ 785.580355] Total swap = 0kB [ 785.583355] 1965979 pages RAM [ 785.586433] 0 pages HighMem/MovableOnly [ 785.590568] 339056 pages reserved [ 785.594005] 0 pages cma reserved [ 785.597346] Out of memory: Kill process 25174 (syz-executor.4) score 1007 or sacrifice child [ 785.605969] Killed process 25174 (syz-executor.4) total-vm:75236kB, anon-rss:16568kB, file-rss:34816kB, shmem-rss:0kB [ 785.643700] oom_reaper: reaped process 25174 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:53:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000200)=0x2, 0x4) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:59 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x8d, 0x3, 0x3}) 06:53:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x7, 0xfffc, 0x0, 0x401, 0x5, 0x3, 0x7, 0x1fd}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:53:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 786.165200] ALSA: mixer_oss: invalid OSS volume '' [ 786.477839] kworker/u4:4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 786.526998] kworker/u4:4 cpuset=/ mems_allowed=0-1 06:53:59 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000d0d1f1b7198f48912620921cb0ccb0b08fb481cb084c55f068d17d6b62ef612966ef73ff57d"], 0x102f) dup3(r0, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0717648900000000000016000000140001"], 0x3}}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000100)={0x38c, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ee}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}]}, @TIPC_NLA_NODE={0x208, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6, 0x3, "adb4"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "ad260871ac13714c5c0c9be89429b543b8344ae984bdf730abb9b21d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "c355f25134dc1ca65de9c0bef092a88037fadcefce527ca2ca441bab9abd0a82ab5f9d"}}, @TIPC_NLA_NODE_ID={0xff, 0x3, "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"}, @TIPC_NLA_NODE_ID={0x62, 0x3, "80ee2a2cf8430e77007a66604cc1435a7d25008dde0fe8e923b6fd519888585872cf2218a8495a88536fd9c2b44b4b9c0c3a178d8dad6b7e16f4230c90b792b0dbea8cfc788e17b3794951ba3714781a2381b1ed93d3bf52662081dc0722"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x38c}, 0x1, 0x0, 0x0, 0x4010}, 0x24008094) 06:53:59 executing program 2: prlimit64(0x0, 0x2, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f00000003c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f0000000540)=""/48, 0x30}, {&(0x7f0000000580)=""/229, 0xe5}], 0x3, &(0x7f00000004c0)=""/75, 0x4b}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r3, &(0x7f00000002c0)=[{&(0x7f00000006c0)="171268231528ee149e85c2395c", 0xd}, {&(0x7f0000000900)="f082abd17724082943eddc40969f0af175bb148923a5b78c1226500c2ce0e5a9abaab4604224035405850a594a28250e86fd1297786078d092e4571290cbae9172307fdbce725609badbc23697b97fcd0d64813a12707edcdb5ba5eee6a425f04bda674ff12f4c5e1280d6db3771e2bf07d165724785cd39965a8dc96e7baa655f3f10078d3b7a904819fd8f0bb4c52408a111c4906281600d41751b7a27b7", 0x9f}, {&(0x7f0000000780)="745e6259216f654c0b03b385c6c40bee0576fc942df77ad8bb083a4d01b4b189a6ce7fb64c792aeeffc3169d6e529a9b88d85e8a44a2f1ef47ea354938f580eaf5396453f9e6559fd2522a3569192b284213a0b1929a4592fef26345bd358035dafd5c4937d25cd30727e1d6cbbcc4e37d4db481411aa3d9e01186b0f27790e4755d07e739eb734e16c1", 0x8a}], 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x7ff, 0x0, 0x9}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0xfffffffffffffca6) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r4}, 0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000200)={r4, 0x1, 0x6, @remote}, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 786.644771] CPU: 0 PID: 25233 Comm: kworker/u4:4 Not tainted 4.14.189-syzkaller #0 [ 786.652494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 786.661844] Call Trace: [ 786.664429] dump_stack+0x1b2/0x283 [ 786.668057] dump_header+0x178/0x82f [ 786.671767] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 786.676861] ? ___ratelimit+0x2cd/0x522 [ 786.680833] oom_kill_process.cold+0x10/0xa69 [ 786.685328] ? lock_downgrade+0x740/0x740 [ 786.689476] out_of_memory+0x2dc/0x1190 [ 786.693451] ? oom_killer_disable+0x1c0/0x1c0 [ 786.697941] ? mutex_trylock+0x152/0x1a0 [ 786.702003] __alloc_pages_nodemask+0x23e1/0x2720 [ 786.706860] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 786.711697] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 786.716540] ? trace_hardirqs_on+0x10/0x10 [ 786.720778] ? mark_held_locks+0xa6/0xf0 [ 786.724832] ? cache_grow_begin+0x3f/0x420 [ 786.729079] cache_grow_begin+0x8f/0x420 [ 786.733144] ? mempolicy_slab_node+0x100/0x320 [ 786.737726] fallback_alloc+0x207/0x2c0 [ 786.741704] kmem_cache_alloc+0x1e5/0x3c0 [ 786.745905] ima_d_path+0x4d/0x1d3 [ 786.749547] process_measurement+0x905/0xb20 [ 786.753959] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 786.758978] ? trace_hardirqs_on+0x10/0x10 [ 786.763205] ? trace_hardirqs_on+0x10/0x10 [ 786.767439] ? check_stack_object+0x86/0xa0 [ 786.771753] ? __might_fault+0xf/0x1b0 [ 786.775634] ? _copy_from_user+0x96/0x100 [ 786.779772] ? put_arg_page+0x88/0x1c0 [ 786.783649] ? __task_pid_nr_ns+0x1c3/0x440 [ 786.787964] ? do_execveat_common+0x1012/0x1f30 06:54:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000200)={0xa9, 0x3, 0x9, 0x2}) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1000000000001ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 786.792631] ? lock_downgrade+0x740/0x740 [ 786.796776] security_bprm_check+0x8d/0xa0 [ 786.801004] do_execveat_common+0x1085/0x1f30 [ 786.805495] ? copy_strings_kernel+0x110/0x110 [ 786.810072] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 786.815517] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 786.820528] do_execve+0x33/0x50 [ 786.823888] call_usermodehelper_exec_async+0x28f/0x4a0 [ 786.829242] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 786.834692] ret_from_fork+0x24/0x30 06:54:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:00 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$CHAR_RAW_DISCARD(r4, 0x1277, &(0x7f0000000080)=0x1f) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3}, 0x0, 0x0) [ 786.927412] ALSA: mixer_oss: invalid OSS volume '' 06:54:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 786.956148] ALSA: mixer_oss: invalid OSS volume '' [ 786.971749] ALSA: mixer_oss: invalid OSS volume '‚«_' [ 786.983612] ALSA: mixer_oss: invalid OSS volume '¸=Nl¨¸ýíP8ð± 7"–€`' [ 786.998580] Mem-Info: [ 787.001343] active_anon:1325510 inactive_anon:9171 isolated_anon:0 [ 787.001343] active_file:1170 inactive_file:1769 isolated_file:11 [ 787.001343] unevictable:0 dirty:62 writeback:2 unstable:0 [ 787.001343] slab_reclaimable:17595 slab_unreclaimable:122160 [ 787.001343] mapped:55863 shmem:9384 pagetables:17821 bounce:0 [ 787.001343] free:25482 free_pcp:44 free_cma:0 06:54:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 787.315843] Node 0 active_anon:1948352kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214400kB dirty:8kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 06:54:00 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000000c0)=0x9, 0x4) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) [ 787.496861] Node 1 active_anon:3369828kB inactive_anon:44kB active_file:2764kB inactive_file:2908kB unevictable:0kB isolated(anon):0kB isolated(file):168kB mapped:4728kB dirty:72kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 787.567327] Node 0 DMA free:10380kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 787.597932] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 787.603143] Node 0 DMA32 free:27324kB min:36272kB low:45340kB high:54408kB active_anon:1943568kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10688kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 787.636157] lowmem_reserve[]: 0 0 0 0 0 [ 787.640376] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 787.669911] lowmem_reserve[]: 0 0 0 0 0 [ 787.674029] Node 1 Normal free:57448kB min:53612kB low:67012kB high:80412kB active_anon:3369892kB inactive_anon:44kB active_file:2772kB inactive_file:1164kB unevictable:0kB writepending:272kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15552kB pagetables:49584kB bounce:0kB free_pcp:696kB local_pcp:60kB free_cma:0kB [ 787.797025] lowmem_reserve[]: 0 0 0 0 0 [ 787.819779] Node 0 DMA: 1*4kB (E) 11*8kB (U) 9*16kB (UM) 11*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10380kB [ 787.874516] Node 0 DMA32: 131*4kB (UME) 1606*8kB (UME) 488*16kB (UME) 189*32kB (UME) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27356kB [ 787.942901] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 787.953129] ALSA: mixer_oss: invalid OSS volume '' 06:54:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x6) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000200)=0x8) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0xffffffffffffffff, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x6, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x800, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 788.007579] Node 1 Normal: 84*4kB (UE) 89*8kB (UEH) 493*16kB (UME) 183*32kB (ME) 62*64kB (M) 112*128kB (M) 107*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 61000kB [ 788.047136] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 788.059180] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 788.373087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 788.415588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 788.449582] 10671 total pagecache pages [ 788.456120] 0 pages in swap cache [ 788.460446] Swap cache stats: add 0, delete 0, find 0/0 [ 788.465961] Free swap = 0kB [ 788.474104] Total swap = 0kB [ 788.477346] 1965979 pages RAM [ 788.481955] 0 pages HighMem/MovableOnly [ 788.486084] 339056 pages reserved [ 788.493647] 0 pages cma reserved [ 788.497183] Out of memory: Kill process 19083 (syz-executor.0) score 1007 or sacrifice child [ 788.524892] Killed process 19083 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 788.646368] oom_reaper: reaped process 19083 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:54:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000002c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 788.984053] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 789.109300] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 789.128180] CPU: 0 PID: 25306 Comm: syz-executor.3 Not tainted 4.14.189-syzkaller #0 [ 789.136082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.145436] Call Trace: [ 789.148027] dump_stack+0x1b2/0x283 [ 789.151653] dump_header+0x178/0x82f [ 789.155366] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 789.160468] ? ___ratelimit+0x2cd/0x522 [ 789.164450] oom_kill_process.cold+0x10/0xa69 [ 789.168942] ? lock_downgrade+0x740/0x740 [ 789.173090] out_of_memory+0x2dc/0x1190 [ 789.177062] ? oom_killer_disable+0x1c0/0x1c0 [ 789.181553] ? mutex_trylock+0x152/0x1a0 [ 789.185699] __alloc_pages_nodemask+0x23e1/0x2720 [ 789.190553] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 789.195393] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 789.200234] ? trace_hardirqs_on+0x10/0x10 [ 789.204464] ? cache_grow_begin+0x3f/0x420 [ 789.208680] cache_grow_begin+0x8f/0x420 [ 789.212720] ? mempolicy_slab_node+0x100/0x320 [ 789.217281] fallback_alloc+0x207/0x2c0 [ 789.221238] kmem_cache_alloc+0x1e5/0x3c0 [ 789.225365] getname_flags+0xc8/0x550 [ 789.229148] ? SyS_access+0x20/0x20 [ 789.232762] user_path_at_empty+0x2a/0x50 [ 789.236890] SyS_chdir+0x7e/0x1a0 [ 789.240322] ? SyS_access+0x20/0x20 [ 789.246704] ? __do_page_fault+0x19a/0xb50 [ 789.250932] ? do_syscall_64+0x4c/0x640 [ 789.254884] ? SyS_access+0x20/0x20 [ 789.258520] do_syscall_64+0x1d5/0x640 [ 789.262405] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 789.267571] RIP: 0033:0x45b9b7 [ 789.270754] RSP: 002b:00007ffd7fbbc958 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 789.278460] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045b9b7 [ 789.285712] RDX: 0000000000000001 RSI: 0000000000746e70 RDI: 00007ffd7fbbc9a0 [ 789.292960] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000001490940 [ 789.300208] R10: 0000000001490c10 R11: 0000000000000246 R12: 0000000000000000 [ 789.307454] R13: 00007ffd7fbbc990 R14: 0000000000000000 R15: 00007ffd7fbbc9a0 [ 789.330758] Mem-Info: [ 789.333699] active_anon:1327097 inactive_anon:9172 isolated_anon:0 [ 789.333699] active_file:469 inactive_file:583 isolated_file:81 [ 789.333699] unevictable:0 dirty:25 writeback:0 unstable:0 [ 789.333699] slab_reclaimable:17567 slab_unreclaimable:121933 [ 789.333699] mapped:54513 shmem:9384 pagetables:17855 bounce:0 [ 789.333699] free:26034 free_pcp:208 free_cma:0 [ 789.608455] Node 0 active_anon:1948340kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214412kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 789.781599] Node 1 active_anon:3376536kB inactive_anon:44kB active_file:2972kB inactive_file:3060kB unevictable:0kB isolated(anon):0kB isolated(file):360kB mapped:5796kB dirty:96kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 789.837162] Node 0 DMA free:10348kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 789.868156] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 789.873575] Node 0 DMA32 free:27212kB min:36272kB low:45340kB high:54408kB active_anon:1943556kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10720kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 789.932927] lowmem_reserve[]: 0 0 0 0 0 [ 789.937085] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 789.963629] lowmem_reserve[]: 0 0 0 0 0 [ 789.967858] Node 1 Normal free:53092kB min:53612kB low:67012kB high:80412kB active_anon:3376324kB inactive_anon:40kB active_file:512kB inactive_file:528kB unevictable:0kB writepending:24kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15328kB pagetables:49280kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 790.001658] lowmem_reserve[]: 0 0 0 0 0 [ 790.010239] Node 0 DMA: 1*4kB (E) 11*8kB (U) 9*16kB (UM) 10*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10348kB [ 790.034694] Node 0 DMA32: 127*4kB (UE) 1601*8kB (UME) 487*16kB (UME) 188*32kB (UME) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27252kB [ 790.051177] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 790.062148] Node 1 Normal: 663*4kB (UME) 504*8kB (UME) 104*16kB (UME) 19*32kB (UME) 3*64kB (UM) 58*128kB (UM) 111*256kB (M) 6*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 0*4096kB = 54204kB [ 790.084257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 790.093409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 790.106141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 790.115538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 790.130839] 9526 total pagecache pages [ 790.134972] 0 pages in swap cache [ 790.141758] Swap cache stats: add 0, delete 0, find 0/0 [ 790.147391] Free swap = 0kB [ 790.150557] Total swap = 0kB [ 790.153642] 1965979 pages RAM [ 790.156805] 0 pages HighMem/MovableOnly [ 790.160929] 339056 pages reserved [ 790.164442] 0 pages cma reserved [ 790.168793] Out of memory: Kill process 25298 (syz-executor.4) score 1007 or sacrifice child [ 790.178008] Killed process 25298 (syz-executor.4) total-vm:75236kB, anon-rss:16568kB, file-rss:34848kB, shmem-rss:0kB [ 790.281775] oom_reaper: reaped process 25298 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 790.457247] ALSA: mixer_oss: invalid OSS volume '18446744073709551615' [ 790.473563] ALSA: mixer_oss: invalid OSS volume '18446744073709551615' [ 790.806646] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 790.846531] systemd-udevd cpuset=/ mems_allowed=0-1 [ 790.852438] CPU: 1 PID: 25209 Comm: systemd-udevd Not tainted 4.14.189-syzkaller #0 [ 790.860312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.869652] Call Trace: [ 790.872226] dump_stack+0x1b2/0x283 [ 790.875836] dump_header+0x178/0x82f [ 790.879627] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 790.884709] ? ___ratelimit+0x2cd/0x522 [ 790.888672] oom_kill_process.cold+0x10/0xa69 [ 790.893152] ? lock_downgrade+0x740/0x740 [ 790.897280] out_of_memory+0x2dc/0x1190 [ 790.901234] ? oom_killer_disable+0x1c0/0x1c0 [ 790.905718] ? mutex_trylock+0x152/0x1a0 [ 790.909766] __alloc_pages_nodemask+0x23e1/0x2720 [ 790.914590] ? __schedule+0x893/0x1de0 [ 790.918476] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 790.923298] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 790.928043] ? retint_kernel+0x2d/0x2d [ 790.931915] cache_grow_begin+0x8f/0x420 [ 790.935958] ? mempolicy_slab_node+0x100/0x320 [ 790.940521] fallback_alloc+0x207/0x2c0 [ 790.944476] kmem_cache_alloc+0x1e5/0x3c0 [ 790.948700] getname_flags+0xc8/0x550 [ 790.952481] SyS_symlinkat+0x6d/0x240 [ 790.956261] ? SyS_unlink+0x20/0x20 [ 790.959867] ? do_syscall_64+0x4c/0x640 [ 790.963819] ? SyS_symlinkat+0x240/0x240 [ 790.967860] do_syscall_64+0x1d5/0x640 [ 790.971729] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 790.976910] RIP: 0033:0x7fc45fd2a027 [ 790.980598] RSP: 002b:00007ffc2f55ac38 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 790.988298] RAX: ffffffffffffffda RBX: 000055ba871e5730 RCX: 00007fc45fd2a027 [ 790.995544] RDX: 0000000000000000 RSI: 00007ffc2f55ac40 RDI: 000055ba871e4290 [ 791.002793] RBP: 00000000000008e6 R08: 00000000000001c0 R09: 0000000000000014 [ 791.010649] R10: 00007ffc2f55ac40 R11: 0000000000000206 R12: 00007ffc2f55ac40 [ 791.017913] R13: 000055ba871e5730 R14: 0000000000000003 R15: 000000000000000e [ 791.033972] Mem-Info: [ 791.039553] active_anon:1331264 inactive_anon:9173 isolated_anon:0 [ 791.039553] active_file:946 inactive_file:836 isolated_file:128 [ 791.039553] unevictable:0 dirty:58 writeback:0 unstable:0 [ 791.039553] slab_reclaimable:17570 slab_unreclaimable:121597 [ 791.039553] mapped:55239 shmem:9384 pagetables:17885 bounce:0 [ 791.039553] free:21447 free_pcp:1 free_cma:0 [ 791.109592] Node 0 active_anon:1948340kB inactive_anon:36648kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214428kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 791.181336] Node 1 active_anon:3376716kB inactive_anon:44kB active_file:1188kB inactive_file:1572kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:2724kB dirty:68kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 791.222471] Node 0 DMA free:10348kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 791.263561] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 791.268977] Node 0 DMA32 free:27204kB min:36272kB low:45340kB high:54408kB active_anon:1943556kB inactive_anon:36648kB active_file:120kB inactive_file:8kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 791.298988] lowmem_reserve[]: 0 0 0 0 0 [ 791.303290] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 791.454263] lowmem_reserve[]: 0 0 0 0 0 [ 791.458395] Node 1 Normal free:67436kB min:53612kB low:67012kB high:80412kB active_anon:3360208kB inactive_anon:44kB active_file:524kB inactive_file:3092kB unevictable:0kB writepending:76kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15520kB pagetables:49488kB bounce:0kB free_pcp:904kB local_pcp:712kB free_cma:0kB [ 791.499200] lowmem_reserve[]: 0 0 0 0 0 [ 791.506338] Node 0 DMA: 1*4kB (E) 11*8kB (U) 9*16kB (UM) 10*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10348kB [ 791.535960] Node 0 DMA32: 95*4kB (UE) 1580*8kB (UMEH) 489*16kB (UMEH) 190*32kB (UMEH) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27052kB 06:54:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:02 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r2}, 0x2c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000001140)=ANY=[@ANYRESDEC, @ANYRES16=r4], 0x102f) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000080)={0x5, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}}}, 0x88) dup3(r0, r1, 0x0) 06:54:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="08002cbd7000fbdbdf25040000000400018008000300060000004c0001801400040000000000000000000000ffffac1414aa0600010002000000060005004e300000080003000a0101021400040000000000000000000000000000000000060005004e2200000800030006000000180001801400040000000000000000000000ffffe000000108000300010000003400018008000300ac1414aa050002000300000008000700", @ANYRES32=0x0, @ANYBLOB="08000600010000000600010202000000060001000a00000008000200020000000800020000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000080}, 0x4081) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 791.554388] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 06:54:04 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="09cea982d0e5b88c8ee26c2bcb774cd242011be6e78177c1cc31d4efbf075258282a6485a6e116bcb6a1e665e52bd7298629eca09c046b9cb2254eb4b99e8d1135287c82bacbeca60151c951cd3fb7"], 0x102f) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$CHAR_RAW_GETSIZE(r4, 0x1260, &(0x7f0000000180)) dup3(r0, r2, 0x0) 06:54:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x3) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 791.703072] Node 1 Normal: 2*4kB (UE) 363*8kB (UMEH) 332*16kB (UMH) 177*32kB (UMH) 49*64kB (UMH) 33*128kB (UME) 113*256kB (UME) 7*512kB (MEH) 3*1024kB (MEH) 1*2048kB (M) 0*4096kB = 58880kB [ 792.054131] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 792.065910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 792.074718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 792.083758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 792.092489] 10454 total pagecache pages [ 792.096504] 0 pages in swap cache [ 792.100151] Swap cache stats: add 0, delete 0, find 0/0 [ 792.105544] Free swap = 0kB [ 792.108706] Total swap = 0kB [ 792.111758] 1965979 pages RAM [ 792.114889] 0 pages HighMem/MovableOnly [ 792.118983] 339056 pages reserved [ 792.122467] 0 pages cma reserved [ 792.133238] Out of memory: Kill process 25326 (syz-executor.5) score 1007 or sacrifice child [ 792.303773] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 792.333189] systemd-journal cpuset=/ mems_allowed=0-1 [ 792.346181] CPU: 1 PID: 3645 Comm: systemd-journal Not tainted 4.14.189-syzkaller #0 [ 792.354068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 792.363414] Call Trace: [ 792.365997] dump_stack+0x1b2/0x283 [ 792.369622] dump_header+0x178/0x82f [ 792.373326] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 792.378407] ? ___ratelimit+0x2cd/0x522 [ 792.382475] oom_kill_process.cold+0x10/0xa69 [ 792.387001] ? lock_downgrade+0x740/0x740 [ 792.391130] out_of_memory+0x2dc/0x1190 [ 792.395084] ? oom_killer_disable+0x1c0/0x1c0 [ 792.399557] ? mutex_trylock+0x152/0x1a0 [ 792.403595] __alloc_pages_nodemask+0x23e1/0x2720 [ 792.408421] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 792.413338] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 792.418166] ? trace_hardirqs_on+0x10/0x10 [ 792.422390] ? cache_grow_begin+0x3f/0x420 [ 792.426605] cache_grow_begin+0x8f/0x420 [ 792.430647] ? mempolicy_slab_node+0x100/0x320 [ 792.435206] fallback_alloc+0x207/0x2c0 [ 792.439158] kmem_cache_alloc+0x1e5/0x3c0 [ 792.443281] getname_flags+0xc8/0x550 [ 792.447058] SyS_mkdirat+0x83/0x270 [ 792.450662] ? SyS_mknod+0x30/0x30 [ 792.454176] ? SyS_mkdirat+0x270/0x270 [ 792.458040] do_syscall_64+0x1d5/0x640 [ 792.461907] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 792.467070] RIP: 0033:0x7f637a6ac687 [ 792.470776] RSP: 002b:00007fffdaee4098 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 792.478458] RAX: ffffffffffffffda RBX: 00007fffdaee7100 RCX: 00007f637a6ac687 [ 792.485705] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 000055de0e8298c0 [ 792.492970] RBP: 00007fffdaee40d0 R08: 000055de0d6bc3e5 R09: 0000000000000018 [ 792.500220] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 792.507464] R13: 0000000000000001 R14: 000055de0e8298c0 R15: 00007fffdaee4710 [ 792.528014] Mem-Info: [ 792.530580] active_anon:1331513 inactive_anon:9173 isolated_anon:0 [ 792.530580] active_file:28 inactive_file:246 isolated_file:32 [ 792.530580] unevictable:0 dirty:4 writeback:1 unstable:0 [ 792.530580] slab_reclaimable:17593 slab_unreclaimable:121504 [ 792.530580] mapped:53762 shmem:9384 pagetables:17902 bounce:0 [ 792.530580] free:22895 free_pcp:113 free_cma:0 [ 792.564940] Node 0 active_anon:1948832kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214424kB dirty:0kB writeback:4kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 792.593275] Node 1 active_anon:3377220kB inactive_anon:44kB active_file:88kB inactive_file:172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 792.620301] Node 0 DMA free:10380kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 792.658489] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 792.663917] Node 0 DMA32 free:26836kB min:36272kB low:45340kB high:54408kB active_anon:1944048kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 792.693461] lowmem_reserve[]: 0 0 0 0 0 [ 792.697982] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 792.724579] lowmem_reserve[]: 0 0 0 0 0 [ 792.729620] Node 1 Normal free:53880kB min:53612kB low:67012kB high:80412kB active_anon:3377220kB inactive_anon:44kB active_file:72kB inactive_file:332kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15648kB pagetables:49556kB bounce:0kB free_pcp:772kB local_pcp:276kB free_cma:0kB [ 792.759606] lowmem_reserve[]: 0 0 0 0 0 [ 792.764535] Node 0 DMA: 1*4kB (E) 11*8kB (U) 9*16kB (UM) 11*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10380kB [ 792.781965] Node 0 DMA32: 123*4kB (UME) 1590*8kB (UME) 485*16kB (UME) 181*32kB (UME) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26892kB [ 792.796645] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 792.807750] Node 1 Normal: 1398*4kB (UME) 268*8kB (UME) 44*16kB (UMEH) 25*32kB (UME) 49*64kB (UME) 34*128kB (UME) 114*256kB (UME) 6*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 54104kB [ 792.825740] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 792.835141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 792.843854] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 792.853265] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 792.862417] 9537 total pagecache pages [ 792.866663] 0 pages in swap cache [ 792.870786] Swap cache stats: add 0, delete 0, find 0/0 [ 792.876514] Free swap = 0kB [ 792.879992] Total swap = 0kB [ 792.883384] 1965979 pages RAM [ 792.886698] 0 pages HighMem/MovableOnly [ 792.890785] 339056 pages reserved [ 792.894228] 0 pages cma reserved [ 792.897585] Out of memory: Kill process 25337 (syz-executor.4) score 1007 or sacrifice child [ 792.906241] Killed process 25337 (syz-executor.4) total-vm:75236kB, anon-rss:16568kB, file-rss:34816kB, shmem-rss:0kB [ 793.044650] kthreadd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 793.057259] kthreadd cpuset=/ mems_allowed=0-1 [ 793.062814] CPU: 0 PID: 2 Comm: kthreadd Not tainted 4.14.189-syzkaller #0 [ 793.069829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.079169] Call Trace: [ 793.081738] dump_stack+0x1b2/0x283 [ 793.085343] dump_header+0x178/0x82f [ 793.089037] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 793.094118] ? ___ratelimit+0x2cd/0x522 [ 793.098072] oom_kill_process.cold+0x10/0xa69 [ 793.102547] ? lock_downgrade+0x740/0x740 [ 793.106672] out_of_memory+0x2dc/0x1190 [ 793.110628] ? oom_killer_disable+0x1c0/0x1c0 [ 793.115102] ? mutex_trylock+0x152/0x1a0 [ 793.119145] __alloc_pages_nodemask+0x23e1/0x2720 [ 793.123991] ? __schedule+0x893/0x1de0 [ 793.127859] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 793.132680] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 793.137417] ? retint_kernel+0x2d/0x2d [ 793.141303] cache_grow_begin+0x8f/0x420 [ 793.145342] ? mempolicy_slab_node+0x100/0x320 [ 793.149899] fallback_alloc+0x207/0x2c0 [ 793.153854] kmem_cache_alloc_node+0xe3/0x410 [ 793.158327] copy_process.part.0+0x17db/0x6f00 [ 793.162890] ? trace_hardirqs_on+0x10/0x10 [ 793.167105] ? __lock_acquire+0x5fc/0x3f20 [ 793.171324] ? kthread_create_on_node+0xd0/0xd0 [ 793.175973] ? __cleanup_sighand+0x40/0x40 [ 793.180186] ? lock_downgrade+0x740/0x740 [ 793.184310] ? trace_hardirqs_on+0x10/0x10 [ 793.188523] ? _raw_spin_unlock_irq+0x24/0x80 [ 793.192995] ? kthread_create_on_node+0xd0/0xd0 [ 793.197641] _do_fork+0x184/0xc80 [ 793.201100] ? fork_idle+0x270/0x270 [ 793.204803] ? __schedule+0x893/0x1de0 [ 793.208675] ? kthreadd+0x4c1/0x770 [ 793.212281] ? lock_acquire+0x170/0x3f0 [ 793.216233] ? lock_downgrade+0x740/0x740 [ 793.220359] ? kthread_create_on_node+0xd0/0xd0 [ 793.225005] kernel_thread+0x2f/0x40 [ 793.228696] kthreadd+0x51a/0x770 [ 793.232129] ? kthread_create_on_cpu+0x1b0/0x1b0 [ 793.236863] ? kthread_create_on_cpu+0x1b0/0x1b0 [ 793.241594] ? schedule_tail+0x50/0x1e0 [ 793.245543] ? kthread_create_on_cpu+0x1b0/0x1b0 [ 793.250302] ret_from_fork+0x24/0x30 [ 793.268240] Mem-Info: [ 793.275414] active_anon:1327407 inactive_anon:9173 isolated_anon:0 [ 793.275414] active_file:296 inactive_file:578 isolated_file:64 [ 793.275414] unevictable:0 dirty:1 writeback:1 unstable:0 [ 793.275414] slab_reclaimable:17593 slab_unreclaimable:121338 [ 793.275414] mapped:54288 shmem:9384 pagetables:17870 bounce:0 [ 793.275414] free:26446 free_pcp:43 free_cma:0 [ 793.342915] Node 0 active_anon:1948832kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214424kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 793.375300] Node 1 active_anon:3360796kB inactive_anon:44kB active_file:1948kB inactive_file:1628kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:3328kB dirty:4kB writeback:4kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 793.408870] Node 0 DMA free:10380kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 793.436396] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 793.442223] Node 0 DMA32 free:26908kB min:36272kB low:45340kB high:54408kB active_anon:1944048kB inactive_anon:36648kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 793.501051] lowmem_reserve[]: 0 0 0 0 0 [ 793.505058] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 793.558164] lowmem_reserve[]: 0 0 0 0 0 [ 793.562691] Node 1 Normal free:65792kB min:53612kB low:67012kB high:80412kB active_anon:3360768kB inactive_anon:44kB active_file:1644kB inactive_file:3812kB unevictable:0kB writepending:92kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15488kB pagetables:49492kB bounce:0kB free_pcp:1244kB local_pcp:736kB free_cma:0kB [ 793.627950] lowmem_reserve[]: 0 0 0 0 0 [ 793.631995] Node 0 DMA: 1*4kB (E) 11*8kB (U) 9*16kB (UM) 10*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10348kB [ 793.648925] Node 0 DMA32: 118*4kB (UM) 1581*8kB (UM) 486*16kB (UME) 181*32kB (UME) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26816kB [ 793.663088] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 793.675812] Node 1 Normal: 249*4kB (UME) 204*8kB (UMEH) 555*16kB (UMEH) 174*32kB (UMH) 96*64kB (UME) 55*128kB (UME) 114*256kB (UME) 6*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 67636kB [ 793.697238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 793.706184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 793.718846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 793.730997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 793.745423] 10406 total pagecache pages [ 793.762503] 0 pages in swap cache [ 793.766762] Swap cache stats: add 0, delete 0, find 0/0 [ 793.808047] Free swap = 0kB [ 793.813856] ALSA: mixer_oss: invalid OSS volume 'Ω‚Ð希Žâl+ËwLÒBæçwÁÌ1Ôï¿RX' [ 793.816891] Total swap = 0kB [ 793.827817] 1965979 pages RAM [ 793.848104] 0 pages HighMem/MovableOnly [ 793.852161] 339056 pages reserved [ 793.855694] 0 pages cma reserved [ 793.866405] ALSA: mixer_oss: invalid OSS volume 'Ω‚Ð希Žâl+ËwLÒBæçwÁÌ1Ôï¿RX' 06:54:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x3, 0x1001) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x3, 0x7f}, 0x0, &(0x7f00000000c0)={0xffb, 0x3, 0x0, 0x8000000, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000002c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 793.935354] Out of memory: Kill process 19140 (syz-executor.0) score 1007 or sacrifice child 06:54:07 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000080)={0x0, 0x7}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r4}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f00000001c0), 0x0}, 0x20) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_freezer_state(r7, &(0x7f00000000c0)='freezer.state\x00', 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r10 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r9}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r10, &(0x7f00000001c0), 0x0}, 0x20) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) write$binfmt_script(r8, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES64=r12], 0x102f) dup3(r0, r1, 0x0) 06:54:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 794.034656] Killed process 19140 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB 06:54:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r1, &(0x7f0000000380)="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", 0x0}, 0x14) sched_setattr(0x0, &(0x7f0000000040)={0x30740df2f45e3934, 0x3, 0x0, 0x0, 0xfffffffe, 0xff}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x1, 0x2040, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:08 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r2}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r4}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f00000001c0), 0x0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r6}, 0x2c) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r6], 0x102f) dup3(r0, r1, 0x0) [ 795.408174] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 795.433911] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 795.440300] CPU: 1 PID: 6372 Comm: syz-executor.1 Not tainted 4.14.189-syzkaller #0 [ 795.448093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.457424] Call Trace: [ 795.459992] dump_stack+0x1b2/0x283 [ 795.463598] dump_header+0x178/0x82f [ 795.467294] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 795.472375] ? ___ratelimit+0x2cd/0x522 [ 795.476325] oom_kill_process.cold+0x10/0xa69 [ 795.480803] ? lock_downgrade+0x740/0x740 [ 795.484931] out_of_memory+0x2dc/0x1190 [ 795.488884] ? oom_killer_disable+0x1c0/0x1c0 [ 795.493352] ? mutex_trylock+0x152/0x1a0 [ 795.497389] __alloc_pages_nodemask+0x23e1/0x2720 [ 795.502217] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 795.507037] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 795.512031] ? retint_kernel+0x2d/0x2d [ 795.515901] cache_grow_begin+0x8f/0x420 [ 795.519941] ? mempolicy_slab_node+0x100/0x320 [ 795.524499] fallback_alloc+0x207/0x2c0 [ 795.528463] kmem_cache_alloc+0x1e5/0x3c0 [ 795.532587] getname_flags+0xc8/0x550 [ 795.536373] user_path_at_empty+0x2a/0x50 [ 795.540498] vfs_statx+0xd1/0x180 [ 795.543926] ? cp_compat_stat+0x890/0x890 [ 795.548048] ? mntput_no_expire+0xee/0x910 [ 795.552259] ? dput.part.0+0x300/0x710 [ 795.556123] SyS_newlstat+0x83/0xe0 [ 795.559726] ? SyS_newstat+0xe0/0xe0 [ 795.563418] ? do_rmdir+0x3c0/0x3c0 [ 795.567042] ? __detach_mounts+0x400/0x400 [ 795.571269] ? __do_page_fault+0x19a/0xb50 [ 795.575484] ? do_syscall_64+0x4c/0x640 [ 795.579434] ? SyS_newstat+0xe0/0xe0 [ 795.583124] do_syscall_64+0x1d5/0x640 [ 795.586989] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 795.592153] RIP: 0033:0x45b785 [ 795.595316] RSP: 002b:00007ffe1ad086d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 795.603003] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045b785 [ 795.610248] RDX: 00007ffe1ad086f0 RSI: 00007ffe1ad086f0 RDI: 00007ffe1ad08780 [ 795.617492] RBP: 0000000000000776 R08: 0000000000000000 R09: 0000000000000010 [ 795.624737] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffe1ad09810 [ 795.631982] R13: 00000000026f6940 R14: 0000000000000000 R15: 00007ffe1ad09810 [ 795.693910] Mem-Info: [ 795.696395] active_anon:1331489 inactive_anon:9173 isolated_anon:0 [ 795.696395] active_file:539 inactive_file:604 isolated_file:0 [ 795.696395] unevictable:0 dirty:8 writeback:0 unstable:0 [ 795.696395] slab_reclaimable:17634 slab_unreclaimable:121459 [ 795.696395] mapped:54686 shmem:9384 pagetables:17893 bounce:0 [ 795.696395] free:21933 free_pcp:0 free_cma:0 [ 795.737838] Node 0 active_anon:1948832kB inactive_anon:36648kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214468kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 795.768613] Node 1 active_anon:3377124kB inactive_anon:44kB active_file:2028kB inactive_file:2188kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:4040kB dirty:28kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 795.817866] Node 0 DMA free:10380kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 795.861009] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 795.866147] Node 0 DMA32 free:27020kB min:36272kB low:45340kB high:54408kB active_anon:1944048kB inactive_anon:36648kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 795.913572] lowmem_reserve[]: 0 0 0 0 0 [ 795.919873] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 795.973907] lowmem_reserve[]: 0 0 0 0 0 [ 795.977924] Node 1 Normal free:69056kB min:53612kB low:67012kB high:80412kB active_anon:3360620kB inactive_anon:44kB active_file:1660kB inactive_file:1768kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15488kB pagetables:49520kB bounce:0kB free_pcp:828kB local_pcp:628kB free_cma:0kB [ 796.015815] lowmem_reserve[]: 0 0 0 0 0 [ 796.020475] Node 0 DMA: 1*4kB (E) 11*8kB (U) 9*16kB (UM) 11*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10380kB [ 796.041472] Node 0 DMA32: 121*4kB (UME) 1601*8kB (UME) 486*16kB (UME) 182*32kB (UME) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27020kB [ 796.061420] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 796.073111] ALSA: mixer_oss: invalid OSS volume '' [ 796.091357] Node 1 Normal: 9*4kB (UMH) 262*8kB (UMEH) 371*16kB (UME) 223*32kB (UMH) 22*64kB (UM) 52*128kB (M) 122*256kB (UM) 12*512kB (UM) 5*1024kB (UM) 0*2048kB 0*4096kB = 65764kB [ 796.108851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 796.118057] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 796.126652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 796.135927] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 796.145991] 11732 total pagecache pages [ 796.151326] 0 pages in swap cache [ 796.177969] Swap cache stats: add 0, delete 0, find 0/0 [ 796.183349] Free swap = 0kB [ 796.186357] Total swap = 0kB [ 796.191125] 1965979 pages RAM [ 796.194230] 0 pages HighMem/MovableOnly [ 796.198582] 339056 pages reserved [ 796.202029] 0 pages cma reserved [ 796.205482] Out of memory: Kill process 25401 (syz-executor.3) score 1007 or sacrifice child 06:54:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r3, 0x407, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 796.225668] Killed process 25401 (syz-executor.3) total-vm:75104kB, anon-rss:16560kB, file-rss:35244kB, shmem-rss:0kB 06:54:09 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, r1, 0x0) 06:54:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x98, 0x40000, 0x3, 0x0, 0x0, 0x57c9}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f6, 0x100, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x24000008) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 796.297053] oom_reaper: reaped process 25401 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:54:09 executing program 1: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="e66fcd6d6d2deb6d6b2347786a962149c68a97122d33e86218d98f224049b1767c20ccc3f88c38dc744ed3bccf45dd79372e160887de4a48559eb55b6aec3341e07499207528aaa02fe3182da71ad8212c39b22b1e621e225b804b58b2f916f8acbd8c98a9ff0f56001dd435ba8ae4d19fe0c1a4b7e14dc781a5fa050c5cf471d77ff2a5493b7f5c723285bbd1a8ee84b8cc8d2b2eb894f5f51ef5222509452b402cee81a0f739112d70301dc377364e386de2d79ebbe40424daa781f976abdeaf1206efa4340f49712f878045815c9756aa9a93c343a9060598c42b49184483c60c2c6872192473dcaf56", @ANYRESDEC=r2, @ANYRESOCT=r3, @ANYBLOB="de14892458f110387b0a73df5ed6204b9c2897ab8da0c9a91cf758622c6364fa9f259c3338c86eca2043d1486ae11803e9eadd955ef736c6e5c61469590c6799688291fc190725c5d8316de1c45d909076dc2edb887db28449acbf4fff6d583c5cdf30313b95b92589108ce46e6ad99318e78e5f5b8d00d6b0c6fadbd111bcdeafc32a1bede74c767c3b7c72a77e175f93e90fe4feddd32128dc16371cd232d6174a7ddf96c36e61d187a3870a28b2603c243992d38a25483b8744068c5e57b03bad56334aefd056db4c143c8e213ec450cd873bed8ff649176d5b0fd658", @ANYRES16=r0], 0x102f) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000140)={0x8001, 0x0, 0x8, 0x8, 0x19, "c7aca825a27f6541"}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x2006}) [ 796.352726] ALSA: mixer_oss: invalid OSS volume '' [ 796.386722] ALSA: mixer_oss: invalid OSS volume '•ò•ïA0æê?n~¼dš4J€Ã8' [ 796.415195] ALSA: mixer_oss: invalid OSS volume 'sÐXÐ9%ê%àuB%kéßRÿ?[' 06:54:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:10 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x2000, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x86802, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0995669eb1083399eef043e60bbebdae1e2420c25dd27a4112075094b1f21f7efc2b3a11a4b5588653e3ef96"], 0x102f) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x6, 0x30, 0x0, 0x8}, &(0x7f0000000100)=0x18) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getpeername$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000140)={r4, 0x5, 0x0, 0x92, 0x6}, &(0x7f0000000180)=0x18) dup3(r0, r1, 0x0) 06:54:10 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, r1, 0x0) 06:54:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000002c0)={{0xa, 0x4e22, 0x71f, @remote, 0x7}, {0xa, 0x4e21, 0x3, @loopback, 0x81}, 0x5, [0x3ff, 0x3, 0x4, 0x101, 0x401, 0x40, 0x7, 0x7]}, 0x5c) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 797.043060] ALSA: mixer_oss: invalid OSS volume '' [ 797.056316] ALSA: mixer_oss: invalid OSS volume '•ò•ïA0æê?n~¼dš4J€Ã8' [ 797.064904] ALSA: mixer_oss: invalid OSS volume 'sÐXÐ9%ê%àuB%kéßRÿ?[' [ 797.124350] syz-executor.2 invoked oom-killer: gfp_mask=0x15200c2(GFP_HIGHUSER|__GFP_ACCOUNT), nodemask=(null), order=0, oom_score_adj=1000 [ 797.148999] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 797.164945] CPU: 1 PID: 25472 Comm: syz-executor.2 Not tainted 4.14.189-syzkaller #0 06:54:10 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, r1, 0x0) 06:54:10 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="766ce7323113632d103599628495f20513a449893e0b9ba5fce2bdc3ecfebdf205888f3cbb85f606333350e0d9f70f9ac9ad6103d00c41df7ad8fa5fce214a461c5936"], 0x102f) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000280)={0x9, 0x7fffffff}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0xa20000, 0x1, 0xc0, r4, 0x0, &(0x7f00000000c0)={0xa00001, 0x9, [], @value64=0x101}}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000080)={0x2c, 0xb, 0xd, 0x1e, 0x4, 0x90a, 0x5, 0x14b, 0x92d40843703c7d11}) ioctl$MON_IOCX_GET(r7, 0x40189206, &(0x7f00000001c0)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/63, 0x3f}) [ 797.172839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.182195] Call Trace: [ 797.184784] dump_stack+0x1b2/0x283 [ 797.188415] dump_header+0x178/0x82f [ 797.192129] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 797.197228] ? ___ratelimit+0x2cd/0x522 [ 797.201204] oom_kill_process.cold+0x10/0xa69 [ 797.205695] ? lock_downgrade+0x740/0x740 [ 797.209843] out_of_memory+0x2dc/0x1190 [ 797.213822] ? oom_killer_disable+0x1c0/0x1c0 [ 797.218316] ? mutex_trylock+0x152/0x1a0 [ 797.222361] __alloc_pages_nodemask+0x23e1/0x2720 [ 797.227189] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 797.232020] ? __might_fault+0x104/0x1b0 [ 797.236078] ? copy_page_from_iter+0x4fd/0x730 [ 797.240642] alloc_pages_current+0x155/0x260 [ 797.245028] pipe_write+0x920/0xe10 [ 797.248651] __vfs_write+0x44c/0x630 [ 797.252345] ? kernel_read+0x110/0x110 [ 797.256302] ? rw_verify_area+0xe1/0x2a0 [ 797.260343] vfs_write+0x17f/0x4d0 [ 797.263861] SyS_write+0xf2/0x210 [ 797.267290] ? SyS_read+0x210/0x210 [ 797.270894] ? SyS_clock_settime+0x1a0/0x1a0 [ 797.275366] ? do_syscall_64+0x4c/0x640 [ 797.279317] ? SyS_read+0x210/0x210 [ 797.282922] do_syscall_64+0x1d5/0x640 [ 797.286790] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 797.291968] RIP: 0033:0x45c369 [ 797.295132] RSP: 002b:00007f9b33158c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 797.302816] RAX: ffffffffffffffda RBX: 0000000000034f00 RCX: 000000000045c369 [ 797.310079] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000005 [ 797.317327] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 797.324581] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 797.331827] R13: 00007fff926dab3f R14: 00007f9b331599c0 R15: 000000000078bf0c 06:54:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) ioprio_set$pid(0x4, 0x0, 0xa3cb9c333be18ed1) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x3, 0x401, 0xfffffffffffffffd, 0x3, 0x7ffffffffe, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0xf, 0xe1, 0x30e, 0xa, 0x0, 0x7}, 0x0, 0x0) [ 797.413010] Mem-Info: [ 797.421680] active_anon:1326107 inactive_anon:9173 isolated_anon:0 [ 797.421680] active_file:554 inactive_file:585 isolated_file:50 [ 797.421680] unevictable:0 dirty:43 writeback:0 unstable:0 [ 797.421680] slab_reclaimable:17631 slab_unreclaimable:121680 [ 797.421680] mapped:54687 shmem:9384 pagetables:17881 bounce:0 [ 797.421680] free:27010 free_pcp:216 free_cma:0 [ 797.505044] Node 0 active_anon:1948832kB inactive_anon:36648kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214536kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 797.575634] Node 1 active_anon:3355696kB inactive_anon:44kB active_file:2748kB inactive_file:3332kB unevictable:0kB isolated(anon):0kB isolated(file):176kB mapped:4712kB dirty:68kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 797.603327] Node 0 DMA free:10348kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 797.642068] ALSA: mixer_oss: invalid OSS volume 'vlç21c-5™b„•ò¤I‰> ›¥üâ½Ãìþ½' 06:54:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 797.688099] ALSA: mixer_oss: invalid OSS volume '' [ 797.722086] ALSA: mixer_oss: invalid OSS volume '•ò•ïA0æê?n~¼dš4J€Ã8' [ 797.747133] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 797.750326] ALSA: mixer_oss: invalid OSS volume 'sÐXÐ9%ê%àuB%kéßRÿ?[' 06:54:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 797.754420] Node 0 DMA32 free:27128kB min:36272kB low:45340kB high:54408kB active_anon:1944048kB inactive_anon:36648kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 06:54:11 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) [ 797.972276] lowmem_reserve[]: 0 0 0 0 0 [ 798.012746] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 798.136669] lowmem_reserve[]: 0 0 0 0 0 [ 798.144588] Node 1 Normal free:53372kB min:53612kB low:67012kB high:80412kB active_anon:3373620kB inactive_anon:40kB active_file:1588kB inactive_file:1404kB unevictable:0kB writepending:128kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15648kB pagetables:49640kB bounce:0kB free_pcp:828kB local_pcp:168kB free_cma:0kB [ 798.186128] lowmem_reserve[]: 0 0 0 0 0 [ 798.200702] Node 0 DMA: 1*4kB (E) 11*8kB (U) 9*16kB (UM) 10*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10348kB [ 798.222569] Node 0 DMA32: 120*4kB (UME) 1618*8kB (UME) 486*16kB (UME) 183*32kB (UME) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27184kB [ 798.250804] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 798.280570] Node 1 Normal: 507*4kB (UME) 128*8kB (UME) 47*16kB (UME) 115*32kB (UME) 47*64kB (UME) 65*128kB (UM) 119*256kB (UM) 11*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 55932kB [ 798.297129] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 798.315437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 798.332936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 798.342408] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 798.351106] 9430 total pagecache pages [ 798.355581] 0 pages in swap cache [ 798.359554] Swap cache stats: add 0, delete 0, find 0/0 [ 798.371040] Free swap = 0kB [ 798.374534] Total swap = 0kB [ 798.378504] 1965979 pages RAM [ 798.381952] 0 pages HighMem/MovableOnly [ 798.386303] 339056 pages reserved [ 798.394817] 0 pages cma reserved [ 798.398266] Out of memory: Kill process 20005 (syz-executor.2) score 1007 or sacrifice child [ 798.406857] Killed process 20005 (syz-executor.2) total-vm:75500kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 798.437590] oom_reaper: reaped process 20005 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 798.462909] ALSA: mixer_oss: invalid OSS volume 'vlç21c-5™b„•ò¤I‰> ›¥üâ½Ãìþ½' [ 798.665564] ALSA: mixer_oss: invalid OSS volume '' 06:54:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) setsockopt$ax25_int(r3, 0x101, 0x3, &(0x7f0000000000)=0x2, 0x4) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x111000, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.events\x00', 0x0, 0x0) 06:54:12 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) r2 = dup3(r0, r1, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f00000004c0)={0x2, 0x0, 0x14, 0x12, 0x1e5, &(0x7f00000000c0)="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"}) 06:54:12 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:54:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000002c0)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x1000000000000, 0xa, 0x0, 0x200}, 0x0, 0x0) [ 798.830809] ALSA: mixer_oss: invalid OSS volume '' [ 798.876750] ALSA: mixer_oss: invalid OSS volume '' [ 799.328589] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 799.345740] systemd-udevd cpuset=/ mems_allowed=0-1 [ 799.352338] CPU: 0 PID: 3650 Comm: systemd-udevd Not tainted 4.14.189-syzkaller #0 [ 799.360045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.369376] Call Trace: [ 799.371944] dump_stack+0x1b2/0x283 [ 799.375551] dump_header+0x178/0x82f [ 799.379243] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 799.384323] ? ___ratelimit+0x2cd/0x522 [ 799.388275] oom_kill_process.cold+0x10/0xa69 [ 799.392748] ? lock_downgrade+0x740/0x740 [ 799.396872] out_of_memory+0x2dc/0x1190 [ 799.400998] ? oom_killer_disable+0x1c0/0x1c0 [ 799.405470] ? mutex_trylock+0x152/0x1a0 [ 799.409510] __alloc_pages_nodemask+0x23e1/0x2720 [ 799.414336] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 799.419152] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 799.424147] ? retint_kernel+0x2d/0x2d [ 799.428017] cache_grow_begin+0x8f/0x420 [ 799.432072] ? mempolicy_slab_node+0x100/0x320 [ 799.436646] fallback_alloc+0x207/0x2c0 [ 799.440616] kmem_cache_alloc+0x1e5/0x3c0 [ 799.444743] getname_flags+0xc8/0x550 [ 799.448527] user_path_at_empty+0x2a/0x50 [ 799.452656] vfs_statx+0xd1/0x180 [ 799.456091] ? cp_compat_stat+0x890/0x890 [ 799.460224] SyS_newlstat+0x83/0xe0 [ 799.463841] ? SyS_newstat+0xe0/0xe0 [ 799.467533] ? __secure_computing+0xe5/0x3e0 [ 799.471923] ? syscall_trace_enter+0x486/0xc20 [ 799.476485] ? syscall_slow_exit_work+0x560/0x560 [ 799.481392] ? do_syscall_64+0x4c/0x640 [ 799.485342] ? SyS_newstat+0xe0/0xe0 [ 799.489031] do_syscall_64+0x1d5/0x640 [ 799.492898] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 799.498080] RIP: 0033:0x7fc45fd28335 [ 799.501865] RSP: 002b:00007ffc2f55b0a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 799.510430] RAX: ffffffffffffffda RBX: 000055ba871ee940 RCX: 00007fc45fd28335 [ 799.517676] RDX: 00007ffc2f55b0e0 RSI: 00007ffc2f55b0e0 RDI: 000055ba871ed940 [ 799.524922] RBP: 00007ffc2f55b1a0 R08: 00007fc45ffe7178 R09: 0000000000001010 [ 799.532570] R10: 0000000000000020 R11: 0000000000000246 R12: 000055ba871ed940 [ 799.539914] R13: 000055ba871ed954 R14: 000055ba871f622d R15: 000055ba871f6234 [ 799.606191] Mem-Info: [ 799.626077] active_anon:1331983 inactive_anon:9172 isolated_anon:0 [ 799.626077] active_file:603 inactive_file:619 isolated_file:105 [ 799.626077] unevictable:0 dirty:41 writeback:0 unstable:0 [ 799.626077] slab_reclaimable:17601 slab_unreclaimable:121719 [ 799.626077] mapped:54909 shmem:9384 pagetables:17996 bounce:0 [ 799.626077] free:20745 free_pcp:120 free_cma:0 [ 799.662199] Node 0 active_anon:1948836kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214592kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 799.773340] Node 1 active_anon:3362796kB inactive_anon:40kB active_file:2112kB inactive_file:3556kB unevictable:0kB isolated(anon):0kB isolated(file):160kB mapped:4444kB dirty:60kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 799.809355] Node 0 DMA free:10380kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 06:54:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:13 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) [ 799.884303] lowmem_reserve[]: 0 2557 2557 2557 2557 06:54:13 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r2}) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0x1, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) dup3(r0, r1, 0x0) 06:54:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write(r4, &(0x7f0000000200)="d4136eccd7abb86b390f9c489c76e0266b934700"/35, 0x23) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfffffffffffffffc, 0xfffc, 0x10000000000, 0x6, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x33}, 0x0, 0x0) 06:54:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r3, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x7, 0x5841}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000200)={r3, 0xaad}, &(0x7f00000002c0)=0x8) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x100000001, 0x0, 0x203, 0x5, 0x1ff}, 0x0, &(0x7f00000000c0)={0x5, 0x3, 0x0, 0x2, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 799.925146] Node 0 DMA32 free:27184kB min:36272kB low:45340kB high:54408kB active_anon:1944052kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 799.959275] lowmem_reserve[]: 0 0 0 0 0 [ 799.976519] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 800.009817] ALSA: mixer_oss: invalid OSS volume '' [ 800.010343] ALSA: mixer_oss: invalid OSS volume '' 06:54:13 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, r1, 0x0) [ 800.084904] lowmem_reserve[]: 0 0 0 0 0 [ 800.089047] Node 1 Normal free:59440kB min:53612kB low:67012kB high:80412kB active_anon:3363044kB inactive_anon:40kB active_file:3376kB inactive_file:4848kB unevictable:0kB writepending:244kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15744kB pagetables:50192kB bounce:0kB free_pcp:776kB local_pcp:260kB free_cma:0kB [ 800.123343] lowmem_reserve[]: 0 0 0 0 0 [ 800.127528] Node 0 DMA: 1*4kB (E) 11*8kB (U) 9*16kB (UM) 11*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10380kB [ 800.282465] Node 0 DMA32: 92*4kB (UME) 1621*8kB (UME) 486*16kB (UME) 184*32kB (UME) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27128kB [ 800.324881] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 800.352324] Node 1 Normal: 462*4kB (UME) 64*8kB (UME) 96*16kB (UE) 42*32kB (UMEH) 7*64kB (UEH) 15*128kB (ME) 118*256kB (UM) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 42424kB [ 800.401679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 800.426143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 800.460036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 800.493210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 800.501951] 9882 total pagecache pages [ 800.505940] 0 pages in swap cache [ 800.510578] Swap cache stats: add 0, delete 0, find 0/0 [ 800.517091] Free swap = 0kB [ 800.520324] Total swap = 0kB [ 800.524570] 1965979 pages RAM [ 800.527859] 0 pages HighMem/MovableOnly [ 800.531906] 339056 pages reserved [ 800.535475] 0 pages cma reserved [ 800.539039] Out of memory: Kill process 25496 (syz-executor.4) score 1007 or sacrifice child [ 800.615420] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 800.630453] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 800.635639] CPU: 0 PID: 6372 Comm: syz-executor.1 Not tainted 4.14.189-syzkaller #0 [ 800.643422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.652760] Call Trace: [ 800.655329] dump_stack+0x1b2/0x283 [ 800.658947] dump_header+0x178/0x82f [ 800.662683] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 800.667774] ? ___ratelimit+0x2cd/0x522 [ 800.671735] oom_kill_process.cold+0x10/0xa69 [ 800.676211] ? lock_downgrade+0x740/0x740 [ 800.680364] out_of_memory+0x2dc/0x1190 [ 800.684329] ? oom_killer_disable+0x1c0/0x1c0 [ 800.688811] ? mutex_trylock+0x152/0x1a0 [ 800.692942] __alloc_pages_nodemask+0x23e1/0x2720 [ 800.697780] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 800.697787] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 800.697797] ? trace_hardirqs_on+0x10/0x10 [ 800.697816] ? cache_grow_begin+0x3f/0x420 [ 800.697826] cache_grow_begin+0x8f/0x420 [ 800.697836] ? mempolicy_slab_node+0x100/0x320 [ 800.697844] fallback_alloc+0x207/0x2c0 [ 800.697855] kmem_cache_alloc+0x1e5/0x3c0 [ 800.697865] getname_flags+0xc8/0x550 [ 800.697876] user_path_mountpoint_at+0x23/0x40 [ 800.697885] SyS_umount+0x125/0xeb0 [ 800.697895] ? lock_downgrade+0x740/0x740 [ 800.697903] ? __detach_mounts+0x400/0x400 [ 800.697911] ? up_read+0x17/0x30 [ 800.697921] ? __do_page_fault+0x19a/0xb50 [ 800.760501] ? do_syscall_64+0x4c/0x640 [ 800.764459] ? __detach_mounts+0x400/0x400 [ 800.768686] do_syscall_64+0x1d5/0x640 [ 800.772554] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 800.780933] RIP: 0033:0x45ed97 [ 800.784098] RSP: 002b:00007ffe1ad086d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 800.791783] RAX: ffffffffffffffda RBX: 00000000000c3575 RCX: 000000000045ed97 [ 800.799169] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffe1ad09810 [ 800.806422] RBP: 0000000000000789 R08: 0000000000000001 R09: 00000000026f5940 [ 800.813672] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1ad09810 [ 800.820927] R13: 00007ffe1ad09800 R14: 0000000000000000 R15: 00007ffe1ad09810 [ 800.856692] Mem-Info: [ 800.866972] active_anon:1332868 inactive_anon:9172 isolated_anon:0 [ 800.866972] active_file:31 inactive_file:25 isolated_file:29 [ 800.866972] unevictable:0 dirty:15 writeback:4 unstable:0 [ 800.866972] slab_reclaimable:17648 slab_unreclaimable:121408 [ 800.866972] mapped:53700 shmem:9384 pagetables:18031 bounce:0 [ 800.866972] free:21380 free_pcp:168 free_cma:0 [ 800.907381] Node 0 active_anon:1948848kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214600kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 800.936094] Node 1 active_anon:3382624kB inactive_anon:40kB active_file:220kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):116kB mapped:200kB dirty:60kB writeback:16kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 800.965572] Node 0 DMA free:10348kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 801.026403] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 801.032032] Node 0 DMA32 free:27256kB min:36272kB low:45340kB high:54408kB active_anon:1944056kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 801.060845] lowmem_reserve[]: 0 0 0 0 0 [ 801.064831] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 801.091001] lowmem_reserve[]: 0 0 0 0 0 [ 801.095007] Node 1 Normal free:48408kB min:53612kB low:67012kB high:80412kB active_anon:3382624kB inactive_anon:40kB active_file:360kB inactive_file:528kB unevictable:0kB writepending:80kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15616kB pagetables:49968kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 801.124425] lowmem_reserve[]: 0 0 0 0 0 [ 801.128494] Node 0 DMA: 1*4kB (E) 11*8kB (U) 9*16kB (UM) 10*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10348kB [ 801.144316] Node 0 DMA32: 125*4kB (UME) 1621*8kB (UME) 486*16kB (UME) 184*32kB (UME) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27260kB [ 801.167655] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 801.184290] Node 1 Normal: 1418*4kB (UM) 334*8kB (UME) 104*16kB (UME) 60*32kB (UMEH) 8*64kB (UME) 15*128kB (ME) 118*256kB (UM) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 49176kB [ 801.200262] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 801.210735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 801.223852] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 801.234566] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 801.243221] 9420 total pagecache pages [ 801.247219] 0 pages in swap cache [ 801.250719] Swap cache stats: add 0, delete 0, find 0/0 [ 801.256065] Free swap = 0kB [ 801.264549] Total swap = 0kB [ 801.273133] 1965979 pages RAM [ 801.276290] 0 pages HighMem/MovableOnly [ 801.282481] 339056 pages reserved [ 801.285924] 0 pages cma reserved [ 801.295719] Out of memory: Kill process 25532 (syz-executor.4) score 1007 or sacrifice child [ 801.305147] Killed process 25532 (syz-executor.4) total-vm:75236kB, anon-rss:16568kB, file-rss:34816kB, shmem-rss:0kB 06:54:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) bind$x25(0xffffffffffffffff, &(0x7f00000002c0)={0x9, @null=' \x00'}, 0x12) 06:54:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000200)={0x4, 0xffffff81, 0x1000, 0x0, 0x1e, "4d6d0f9623238b2733af884dfa308667bff373", 0x2fd7, 0x1}) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:14 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="d2fd7401000000"], 0x102f) dup3(r0, r1, 0x0) [ 801.947725] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 801.963924] systemd-udevd cpuset=/ mems_allowed=0-1 [ 801.969860] CPU: 1 PID: 25577 Comm: systemd-udevd Not tainted 4.14.189-syzkaller #0 [ 801.977652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.986995] Call Trace: [ 801.989579] dump_stack+0x1b2/0x283 [ 801.993195] dump_header+0x178/0x82f [ 801.996887] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 802.001972] ? ___ratelimit+0x2cd/0x522 [ 802.006030] oom_kill_process.cold+0x10/0xa69 [ 802.010503] ? lock_downgrade+0x740/0x740 [ 802.014629] out_of_memory+0x2dc/0x1190 [ 802.018583] ? oom_killer_disable+0x1c0/0x1c0 [ 802.023064] ? mutex_trylock+0x152/0x1a0 [ 802.027105] __alloc_pages_nodemask+0x23e1/0x2720 [ 802.031933] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 802.036767] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 802.041592] ? trace_hardirqs_on+0x10/0x10 [ 802.045810] ? cache_grow_begin+0x3f/0x420 [ 802.050022] cache_grow_begin+0x8f/0x420 [ 802.054060] ? mempolicy_slab_node+0x100/0x320 [ 802.058618] fallback_alloc+0x207/0x2c0 [ 802.062568] kmem_cache_alloc+0x1e5/0x3c0 [ 802.066693] getname_flags+0xc8/0x550 [ 802.070470] do_sys_open+0x1ce/0x410 [ 802.074159] ? filp_open+0x60/0x60 [ 802.077690] ? do_syscall_64+0x4c/0x640 [ 802.081649] ? do_sys_open+0x410/0x410 [ 802.085513] do_syscall_64+0x1d5/0x640 [ 802.089384] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 802.094548] RIP: 0033:0x7fc45fffc840 [ 802.098235] RSP: 002b:00007ffc2f55ac88 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 802.105916] RAX: ffffffffffffffda RBX: 000055ba871e3af0 RCX: 00007fc45fffc840 [ 802.113160] RDX: 000055ba860c7fe3 RSI: 00000000000a0800 RDI: 000055ba871e3e00 [ 802.120502] RBP: 00007ffc2f55ae00 R08: 000055ba860c7670 R09: 0000000000000010 [ 802.127745] R10: 000055ba860c7d0c R11: 0000000000000246 R12: 00007ffc2f55ad50 [ 802.134990] R13: 000055ba871e3bf0 R14: 0000000000000003 R15: 000000000000000e [ 802.283661] Mem-Info: [ 802.286173] active_anon:1335104 inactive_anon:9173 isolated_anon:0 [ 802.286173] active_file:92 inactive_file:91 isolated_file:92 [ 802.286173] unevictable:0 dirty:42 writeback:1 unstable:0 [ 802.286173] slab_reclaimable:17675 slab_unreclaimable:121162 [ 802.286173] mapped:53840 shmem:9384 pagetables:18127 bounce:0 [ 802.286173] free:19218 free_pcp:197 free_cma:0 [ 802.323850] Node 0 active_anon:1949552kB inactive_anon:36648kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214612kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 802.357477] Node 1 active_anon:3390864kB inactive_anon:44kB active_file:312kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):308kB mapped:548kB dirty:164kB writeback:4kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 802.389968] Node 0 DMA free:10348kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 802.461853] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 802.469976] Node 0 DMA32 free:26648kB min:36272kB low:45340kB high:54408kB active_anon:1944068kB inactive_anon:36648kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 802.502529] lowmem_reserve[]: 0 0 0 0 0 [ 802.517384] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 802.543313] lowmem_reserve[]: 0 0 0 0 0 [ 802.547304] Node 1 Normal free:40396kB min:53612kB low:67012kB high:80412kB active_anon:3390768kB inactive_anon:44kB active_file:420kB inactive_file:372kB unevictable:0kB writepending:168kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:16128kB pagetables:50460kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 802.576965] lowmem_reserve[]: 0 0 0 0 0 [ 802.581027] Node 0 DMA: 1*4kB (E) 11*8kB (U) 9*16kB (UM) 11*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10380kB [ 802.596795] Node 0 DMA32: 87*4kB (UM) 1597*8kB (UME) 486*16kB (UE) 180*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26660kB [ 802.610403] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 802.621597] Node 1 Normal: 275*4kB (UM) 26*8kB (UME) 28*16kB (UME) 23*32kB (UME) 10*64kB (UE) 23*128kB (UME) 117*256kB (M) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 40636kB [ 802.637842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 802.646736] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 802.655461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 802.664320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 802.672910] 9433 total pagecache pages [ 802.676781] 0 pages in swap cache [ 802.680250] Swap cache stats: add 0, delete 0, find 0/0 [ 802.685592] Free swap = 0kB [ 802.690020] Total swap = 0kB [ 802.693111] 1965979 pages RAM [ 802.696206] 0 pages HighMem/MovableOnly [ 802.700450] 339056 pages reserved [ 802.703887] 0 pages cma reserved [ 802.707231] Out of memory: Kill process 20087 (syz-executor.0) score 1007 or sacrifice child [ 802.732752] Killed process 20087 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 803.296257] ALSA: mixer_oss: invalid OSS volume 'ELF' [ 803.304990] ALSA: mixer_oss: invalid OSS volume '•ò•ïA0æê?n~¼dš4J€Ã8' [ 803.315121] ALSA: mixer_oss: invalid OSS volume 'sÐXÐ9%ê%àuB%kéßRÿ?[' [ 803.942751] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 803.966636] systemd-journal cpuset=/ mems_allowed=0-1 [ 803.972168] CPU: 0 PID: 3645 Comm: systemd-journal Not tainted 4.14.189-syzkaller #0 [ 803.980044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.989374] Call Trace: [ 803.991942] dump_stack+0x1b2/0x283 [ 803.995548] dump_header+0x178/0x82f [ 803.999257] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 804.004335] ? ___ratelimit+0x2cd/0x522 [ 804.008286] oom_kill_process.cold+0x10/0xa69 [ 804.012757] ? lock_downgrade+0x740/0x740 [ 804.016883] out_of_memory+0x2dc/0x1190 [ 804.020847] ? oom_killer_disable+0x1c0/0x1c0 [ 804.025318] ? mutex_trylock+0x152/0x1a0 [ 804.029357] __alloc_pages_nodemask+0x23e1/0x2720 [ 804.034249] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 804.039068] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 804.043885] ? trace_hardirqs_on+0x10/0x10 [ 804.048100] ? cache_grow_begin+0x3f/0x420 [ 804.052311] cache_grow_begin+0x8f/0x420 [ 804.056349] ? mempolicy_slab_node+0x100/0x320 [ 804.060906] fallback_alloc+0x207/0x2c0 [ 804.064857] kmem_cache_alloc+0x1e5/0x3c0 [ 804.068982] getname_flags+0xc8/0x550 [ 804.072761] SyS_mkdirat+0x83/0x270 [ 804.076364] ? SyS_mknod+0x30/0x30 [ 804.079879] ? do_syscall_64+0x4c/0x640 [ 804.083830] ? SyS_mkdirat+0x270/0x270 [ 804.087693] do_syscall_64+0x1d5/0x640 [ 804.091568] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 804.096735] RIP: 0033:0x7f637a6ac687 [ 804.100422] RSP: 002b:00007fffdaee41e8 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 804.108113] RAX: ffffffffffffffda RBX: 00007fffdaee7100 RCX: 00007f637a6ac687 [ 804.115357] RDX: 00007f637b11da00 RSI: 00000000000001ed RDI: 000055de0e8298c0 [ 804.122603] RBP: 00007fffdaee4220 R08: 0000000000000000 R09: 0000000000000000 [ 804.129850] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 804.137096] R13: 0000000000000000 R14: 00007fffdaee7100 R15: 00007fffdaee4710 [ 804.156062] Mem-Info: [ 804.162245] active_anon:1331441 inactive_anon:9173 isolated_anon:0 [ 804.162245] active_file:347 inactive_file:402 isolated_file:64 [ 804.162245] unevictable:0 dirty:7 writeback:0 unstable:0 [ 804.162245] slab_reclaimable:17716 slab_unreclaimable:120719 [ 804.162245] mapped:54339 shmem:9384 pagetables:18043 bounce:0 [ 804.162245] free:22669 free_pcp:424 free_cma:0 [ 804.214333] Node 0 active_anon:1948964kB inactive_anon:36648kB active_file:16kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214752kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 804.250780] Node 1 active_anon:3381100kB inactive_anon:44kB active_file:248kB inactive_file:956kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1004kB dirty:28kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 804.305944] Node 0 DMA free:10348kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 804.338643] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 804.343692] Node 0 DMA32 free:27128kB min:36272kB low:45340kB high:54408kB active_anon:1944180kB inactive_anon:36648kB active_file:16kB inactive_file:136kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 804.376655] lowmem_reserve[]: 0 0 0 0 0 [ 804.380707] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 804.407943] lowmem_reserve[]: 0 0 0 0 0 [ 804.411975] Node 1 Normal free:50368kB min:53612kB low:67012kB high:80412kB active_anon:3382692kB inactive_anon:44kB active_file:136kB inactive_file:260kB unevictable:0kB writepending:32kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15776kB pagetables:50120kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 804.445878] lowmem_reserve[]: 0 0 0 0 0 [ 804.449925] Node 0 DMA: 1*4kB (E) 11*8kB (U) 9*16kB (UM) 10*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10348kB [ 804.483135] Node 0 DMA32: 113*4kB (UME) 1635*8kB (UME) 489*16kB (UME) 185*32kB (UME) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27404kB [ 804.502836] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 804.513727] Node 1 Normal: 201*4kB (UME) 93*8kB (UME) 37*16kB (UME) 48*32kB (UME) 102*64kB (UME) 40*128kB (UME) 121*256kB (UM) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 50908kB [ 804.533743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 804.542626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 804.561247] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 804.572964] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 804.586804] 9436 total pagecache pages [ 804.590746] 0 pages in swap cache [ 804.594216] Swap cache stats: add 0, delete 0, find 0/0 [ 804.610729] Free swap = 0kB [ 804.613765] Total swap = 0kB [ 804.616846] 1965979 pages RAM [ 804.620020] 0 pages HighMem/MovableOnly [ 804.623964] 339056 pages reserved [ 804.627389] 0 pages cma reserved [ 804.635106] Out of memory: Kill process 25600 (syz-executor.4) score 1007 or sacrifice child [ 804.643733] Killed process 25600 (syz-executor.4) total-vm:75368kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB 06:54:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) pselect6(0x40, &(0x7f0000000200)={0x3f, 0x8, 0x7, 0xff, 0x9, 0x7c000000000, 0x200, 0x401}, &(0x7f00000002c0)={0xffff, 0x1f, 0x8b35, 0x239, 0x81, 0x0, 0xfffffffffffffffa, 0x8}, &(0x7f0000000300)={0x4, 0x7, 0x8, 0x3, 0x3, 0x8, 0xffffffffffffffff, 0xffff}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0xfd]}, 0x8}) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:18 executing program 2: r0 = gettid() ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) prlimit64(r0, 0x6, &(0x7f0000000200)={0xfffffffffffffff8, 0xffffffffffffff91}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:18 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, 0xffffffffffffffff, 0x0) 06:54:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 804.855347] ALSA: mixer_oss: invalid OSS volume 'Òýt' [ 805.231653] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 805.254450] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 805.264841] CPU: 1 PID: 25614 Comm: syz-executor.1 Not tainted 4.14.189-syzkaller #0 [ 805.272721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.282051] Call Trace: [ 805.284620] dump_stack+0x1b2/0x283 [ 805.288227] dump_header+0x178/0x82f [ 805.291921] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 805.297001] ? ___ratelimit+0x2cd/0x522 [ 805.300953] oom_kill_process.cold+0x10/0xa69 [ 805.305429] ? lock_downgrade+0x740/0x740 [ 805.309557] out_of_memory+0x2dc/0x1190 [ 805.313509] ? oom_killer_disable+0x1c0/0x1c0 [ 805.317983] ? mutex_trylock+0x152/0x1a0 [ 805.322021] __alloc_pages_nodemask+0x23e1/0x2720 [ 805.326850] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 805.331669] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 805.336504] ? trace_hardirqs_on+0x10/0x10 [ 805.340725] ? cache_grow_begin+0x3f/0x420 [ 805.344937] cache_grow_begin+0x8f/0x420 [ 805.348977] ? mempolicy_slab_node+0x100/0x320 [ 805.353538] fallback_alloc+0x207/0x2c0 [ 805.357493] kmem_cache_alloc+0x1e5/0x3c0 [ 805.361620] getname_flags+0xc8/0x550 [ 805.365398] do_sys_open+0x1ce/0x410 [ 805.369096] ? filp_open+0x60/0x60 [ 805.373311] ? SyS_clock_settime+0x1a0/0x1a0 [ 805.377695] ? do_syscall_64+0x4c/0x640 [ 805.381643] ? SyS_open+0x30/0x30 [ 805.385074] do_syscall_64+0x1d5/0x640 [ 805.388943] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 805.394108] RIP: 0033:0x45c369 [ 805.397274] RSP: 002b:00007f281f43bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 805.404957] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c369 [ 805.412204] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 805.419452] RBP: 000000000078bf48 R08: 0000000000000000 R09: 0000000000000000 [ 805.426698] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 805.433943] R13: 00007ffe1ad0958f R14: 00007f281f43c9c0 R15: 000000000078bf0c [ 805.478975] Mem-Info: [ 805.481564] active_anon:1333581 inactive_anon:9173 isolated_anon:0 [ 805.481564] active_file:29 inactive_file:48 isolated_file:25 [ 805.481564] unevictable:0 dirty:4 writeback:0 unstable:0 [ 805.481564] slab_reclaimable:17754 slab_unreclaimable:120604 [ 805.481564] mapped:53731 shmem:9384 pagetables:18169 bounce:0 [ 805.481564] free:21176 free_pcp:23 free_cma:0 [ 805.519974] Node 0 active_anon:1949112kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214620kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 805.556429] Node 1 active_anon:3385212kB inactive_anon:44kB active_file:116kB inactive_file:188kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:104kB dirty:16kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 805.591982] Node 0 DMA free:10380kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 805.634182] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 805.639930] Node 0 DMA32 free:27224kB min:36272kB low:45340kB high:54408kB active_anon:1944328kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 805.677664] lowmem_reserve[]: 0 0 0 0 0 [ 805.681665] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 805.711371] lowmem_reserve[]: 0 0 0 0 0 [ 805.715367] Node 1 Normal free:46548kB min:53612kB low:67012kB high:80412kB active_anon:3385004kB inactive_anon:44kB active_file:776kB inactive_file:992kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:16032kB pagetables:50624kB bounce:0kB free_pcp:372kB local_pcp:8kB free_cma:0kB [ 805.755553] lowmem_reserve[]: 0 0 0 0 0 [ 805.760646] Node 0 DMA: 1*4kB (E) 11*8kB (U) 9*16kB (UM) 11*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10380kB [ 805.779883] Node 0 DMA32: 112*4kB (UME) 1600*8kB (UME) 489*16kB (UME) 185*32kB (UME) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27120kB [ 805.794905] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 805.809370] Node 1 Normal: 510*4kB (UME) 324*8kB (UMEH) 48*16kB (UMEH) 22*32kB (UMEH) 8*64kB (UME) 37*128kB (UME) 121*256kB (UM) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 46936kB [ 805.826881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 805.850523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 805.866695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 805.880065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 805.888708] 9487 total pagecache pages [ 805.892589] 0 pages in swap cache [ 805.896075] Swap cache stats: add 0, delete 0, find 0/0 [ 805.901523] Free swap = 0kB [ 805.904546] Total swap = 0kB [ 805.907836] 1965979 pages RAM [ 805.910941] 0 pages HighMem/MovableOnly [ 805.914902] 339056 pages reserved [ 805.918397] 0 pages cma reserved [ 805.921866] Out of memory: Kill process 20564 (syz-executor.0) score 1007 or sacrifice child [ 805.930559] Killed process 20564 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 805.995953] oom_reaper: reaped process 20564 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:54:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 806.371939] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 806.402770] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 806.410455] CPU: 0 PID: 6374 Comm: syz-executor.5 Not tainted 4.14.189-syzkaller #0 [ 806.418249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.427590] Call Trace: [ 806.430170] dump_stack+0x1b2/0x283 [ 806.433794] dump_header+0x178/0x82f [ 806.437503] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 806.442593] ? ___ratelimit+0x2cd/0x522 [ 806.446568] oom_kill_process.cold+0x10/0xa69 [ 806.451128] ? lock_downgrade+0x740/0x740 [ 806.455253] out_of_memory+0x2dc/0x1190 [ 806.459207] ? oom_killer_disable+0x1c0/0x1c0 [ 806.463678] ? mutex_trylock+0x152/0x1a0 [ 806.467717] __alloc_pages_nodemask+0x23e1/0x2720 [ 806.472544] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 806.477374] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 806.482196] ? trace_hardirqs_on+0x10/0x10 [ 806.486416] ? cache_grow_begin+0x3f/0x420 [ 806.490639] cache_grow_begin+0x8f/0x420 [ 806.494677] ? mempolicy_slab_node+0x100/0x320 [ 806.499234] fallback_alloc+0x207/0x2c0 [ 806.503186] kmem_cache_alloc+0x1e5/0x3c0 [ 806.507315] getname_flags+0xc8/0x550 [ 806.511102] user_path_mountpoint_at+0x23/0x40 [ 806.515661] SyS_umount+0x125/0xeb0 [ 806.519265] ? lock_downgrade+0x740/0x740 [ 806.523388] ? __detach_mounts+0x400/0x400 [ 806.527613] ? up_read+0x17/0x30 [ 806.530954] ? __do_page_fault+0x19a/0xb50 [ 806.535165] ? do_syscall_64+0x4c/0x640 [ 806.539110] ? __detach_mounts+0x400/0x400 [ 806.543322] do_syscall_64+0x1d5/0x640 [ 806.547190] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 806.552355] RIP: 0033:0x45ed97 [ 806.555521] RSP: 002b:00007ffd08b07238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 806.563204] RAX: ffffffffffffffda RBX: 00000000000c4b6e RCX: 000000000045ed97 [ 806.570447] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffd08b08370 [ 806.577780] RBP: 0000000000000896 R08: 0000000000000001 R09: 0000000000e6a940 [ 806.585111] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd08b08370 [ 806.595826] R13: 00007ffd08b08360 R14: 0000000000000000 R15: 00007ffd08b08370 [ 806.610470] Mem-Info: [ 806.617084] active_anon:1331544 inactive_anon:9173 isolated_anon:0 [ 806.617084] active_file:77 inactive_file:92 isolated_file:14 [ 806.617084] unevictable:0 dirty:0 writeback:0 unstable:0 [ 806.617084] slab_reclaimable:17758 slab_unreclaimable:120462 [ 806.617084] mapped:53731 shmem:9384 pagetables:18119 bounce:0 [ 806.617084] free:23399 free_pcp:47 free_cma:0 [ 806.661024] Node 0 active_anon:1948976kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214620kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 806.692621] Node 1 active_anon:3377200kB inactive_anon:44kB active_file:12kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):56kB mapped:104kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 806.725609] Node 0 DMA free:10380kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 806.755823] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 806.761504] Node 0 DMA32 free:27376kB min:36272kB low:45340kB high:54408kB active_anon:1944192kB inactive_anon:36648kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 806.791525] lowmem_reserve[]: 0 0 0 0 0 [ 806.795930] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 806.821603] lowmem_reserve[]: 0 0 0 0 0 [ 806.825585] Node 1 Normal free:55504kB min:53612kB low:67012kB high:80412kB active_anon:3377200kB inactive_anon:44kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15840kB pagetables:50424kB bounce:0kB free_pcp:540kB local_pcp:156kB free_cma:0kB [ 806.895936] lowmem_reserve[]: 0 0 0 0 0 [ 806.900030] Node 0 DMA: 1*4kB (E) 11*8kB (U) 9*16kB (UM) 11*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10380kB [ 806.915589] Node 0 DMA32: 112*4kB (UME) 1634*8kB (UME) 488*16kB (UME) 185*32kB (UME) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27376kB [ 806.934233] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 806.944980] Node 1 Normal: 54*4kB (UME) 27*8kB (UM) 210*16kB (UME) 114*32kB (UME) 49*64kB (UME) 51*128kB (UME) 121*256kB (UM) 9*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53712kB [ 806.961402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 806.970337] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 806.979178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 806.990520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 807.009162] 9483 total pagecache pages [ 807.013482] 0 pages in swap cache [ 807.017407] Swap cache stats: add 0, delete 0, find 0/0 [ 807.022993] Free swap = 0kB [ 807.026632] Total swap = 0kB [ 807.030795] 1965979 pages RAM [ 807.034319] 0 pages HighMem/MovableOnly [ 807.038826] 339056 pages reserved [ 807.042838] 0 pages cma reserved [ 807.046748] Out of memory: Kill process 25624 (syz-executor.0) score 1007 or sacrifice child [ 807.063056] Killed process 25624 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 807.121414] oom_reaper: reaped process 25624 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:54:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:20 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r2}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), 0x0}, 0x20) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x102f) dup3(r0, r1, 0x0) [ 808.072705] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 808.086684] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 808.110992] CPU: 1 PID: 25643 Comm: syz-executor.5 Not tainted 4.14.189-syzkaller #0 [ 808.118874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.128223] Call Trace: [ 808.130790] dump_stack+0x1b2/0x283 [ 808.134397] dump_header+0x178/0x82f [ 808.138088] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 808.143169] ? ___ratelimit+0x2cd/0x522 [ 808.147120] oom_kill_process.cold+0x10/0xa69 [ 808.151595] ? lock_downgrade+0x740/0x740 [ 808.155720] out_of_memory+0x2dc/0x1190 [ 808.159673] ? oom_killer_disable+0x1c0/0x1c0 [ 808.164144] ? mutex_trylock+0x152/0x1a0 [ 808.168207] __alloc_pages_nodemask+0x23e1/0x2720 [ 808.173033] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 808.177850] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 808.182666] ? trace_hardirqs_on+0x10/0x10 [ 808.186882] ? cache_grow_begin+0x3f/0x420 [ 808.191094] cache_grow_begin+0x8f/0x420 [ 808.195129] ? mempolicy_slab_node+0x100/0x320 [ 808.200208] fallback_alloc+0x207/0x2c0 [ 808.204160] kmem_cache_alloc+0x1e5/0x3c0 [ 808.208287] getname_flags+0xc8/0x550 [ 808.212061] ? kmem_cache_free+0x23a/0x2b0 [ 808.216271] do_sys_open+0x1ce/0x410 [ 808.219966] ? filp_open+0x60/0x60 [ 808.223482] ? __do_page_fault+0x19a/0xb50 [ 808.227692] ? do_syscall_64+0x4c/0x640 [ 808.231640] ? do_sys_open+0x410/0x410 [ 808.235502] do_syscall_64+0x1d5/0x640 [ 808.239367] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 808.244533] RIP: 0033:0x4160c0 [ 808.247699] RSP: 002b:00007ffd08b07e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 808.258421] RAX: ffffffffffffffda RBX: 00007ffd08b07e44 RCX: 00000000004160c0 [ 808.265664] RDX: 00007ffd08b07e4a RSI: 0000000000080001 RDI: 00000000004c1ef3 [ 808.272994] RBP: 00007ffd08b07e40 R08: 0000000000000000 R09: 0000000000000004 [ 808.280238] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000004c1ef3 [ 808.287481] R13: 00007ffd08b08360 R14: 0000000000000000 R15: 00007ffd08b08370 [ 808.300625] Mem-Info: [ 808.303052] active_anon:1334584 inactive_anon:9172 isolated_anon:0 [ 808.303052] active_file:47 inactive_file:54 isolated_file:16 [ 808.303052] unevictable:0 dirty:5 writeback:3 unstable:0 [ 808.303052] slab_reclaimable:17782 slab_unreclaimable:120713 [ 808.303052] mapped:53726 shmem:9384 pagetables:18099 bounce:0 [ 808.303052] free:20045 free_pcp:63 free_cma:0 [ 808.340504] Node 0 active_anon:1948968kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214628kB dirty:4kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 808.371855] Node 1 active_anon:3389368kB inactive_anon:40kB active_file:184kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:176kB dirty:16kB writeback:12kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 808.402368] Node 0 DMA free:10372kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 808.436108] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 808.441204] Node 0 DMA32 free:27424kB min:36272kB low:45340kB high:54408kB active_anon:1944184kB inactive_anon:36648kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 808.475006] lowmem_reserve[]: 0 0 0 0 0 [ 808.479062] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 808.508758] lowmem_reserve[]: 0 0 0 0 0 [ 808.512762] Node 1 Normal free:42384kB min:53612kB low:67012kB high:80412kB active_anon:3389368kB inactive_anon:40kB active_file:456kB inactive_file:504kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:16160kB pagetables:50344kB bounce:0kB free_pcp:436kB local_pcp:72kB free_cma:0kB [ 808.542292] lowmem_reserve[]: 0 0 0 0 0 [ 808.546279] Node 0 DMA: 1*4kB (E) 14*8kB (U) 9*16kB (UM) 10*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 808.563261] Node 0 DMA32: 81*4kB (UME) 1612*8kB (UME) 488*16kB (UME) 186*32kB (UME) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27108kB [ 808.597238] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 808.617244] Node 1 Normal: 102*4kB (UME) 124*8kB (UMEH) 45*16kB (UMH) 15*32kB (UME) 5*64kB (UE) 23*128kB (UME) 121*256kB (UM) 9*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 42472kB [ 808.637997] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 808.646825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 808.655423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 808.664280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 808.672964] 9428 total pagecache pages [ 808.676824] 0 pages in swap cache [ 808.680555] Swap cache stats: add 0, delete 0, find 0/0 [ 808.685901] Free swap = 0kB [ 808.689229] Total swap = 0kB [ 808.692222] 1965979 pages RAM [ 808.695296] 0 pages HighMem/MovableOnly [ 808.699273] 339056 pages reserved [ 808.702701] 0 pages cma reserved [ 808.706041] Out of memory: Kill process 21269 (syz-executor.0) score 1007 or sacrifice child [ 808.714794] Killed process 21269 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 808.763533] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 808.787260] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 808.794183] CPU: 1 PID: 25643 Comm: syz-executor.5 Not tainted 4.14.189-syzkaller #0 [ 808.802070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.811408] Call Trace: [ 808.813983] dump_stack+0x1b2/0x283 [ 808.817603] dump_header+0x178/0x82f [ 808.821301] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 808.826373] ? ___ratelimit+0x2cd/0x522 [ 808.830442] oom_kill_process.cold+0x10/0xa69 [ 808.834919] ? lock_downgrade+0x740/0x740 [ 808.839056] out_of_memory+0x2dc/0x1190 [ 808.843020] ? oom_killer_disable+0x1c0/0x1c0 [ 808.847491] ? mutex_trylock+0x152/0x1a0 [ 808.851559] __alloc_pages_nodemask+0x23e1/0x2720 [ 808.856383] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 808.861198] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 808.866017] ? trace_hardirqs_on+0x10/0x10 [ 808.870230] ? cache_grow_begin+0x3f/0x420 [ 808.874439] cache_grow_begin+0x8f/0x420 [ 808.878477] ? mempolicy_slab_node+0x100/0x320 [ 808.883032] fallback_alloc+0x207/0x2c0 [ 808.886980] kmem_cache_alloc+0x1e5/0x3c0 [ 808.891137] getname_flags+0xc8/0x550 [ 808.894912] ? kmem_cache_free+0x23a/0x2b0 [ 808.899119] do_sys_open+0x1ce/0x410 [ 808.902805] ? filp_open+0x60/0x60 [ 808.906320] ? __do_page_fault+0x19a/0xb50 [ 808.910526] ? do_syscall_64+0x4c/0x640 [ 808.914494] ? do_sys_open+0x410/0x410 [ 808.918357] do_syscall_64+0x1d5/0x640 [ 808.922230] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 808.927396] RIP: 0033:0x4160c0 [ 808.930559] RSP: 002b:00007ffd08b07e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 808.938240] RAX: ffffffffffffffda RBX: 00007ffd08b07e44 RCX: 00000000004160c0 [ 808.945488] RDX: 00007ffd08b07e4a RSI: 0000000000080001 RDI: 00000000004c1ef3 [ 808.952732] RBP: 00007ffd08b07e40 R08: 0000000000000000 R09: 0000000000000004 [ 808.959978] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000004c1ef3 [ 808.967222] R13: 00007ffd08b08360 R14: 0000000000000000 R15: 00007ffd08b08370 [ 808.975971] Mem-Info: [ 808.978867] active_anon:1330827 inactive_anon:9172 isolated_anon:0 [ 808.978867] active_file:49 inactive_file:64 isolated_file:32 [ 808.978867] unevictable:0 dirty:0 writeback:0 unstable:0 [ 808.978867] slab_reclaimable:17783 slab_unreclaimable:120409 [ 808.978867] mapped:53759 shmem:9384 pagetables:18066 bounce:0 [ 808.978867] free:24029 free_pcp:252 free_cma:0 [ 809.014572] Node 0 active_anon:1932564kB inactive_anon:36648kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214736kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 809.042632] Node 1 active_anon:3380644kB inactive_anon:40kB active_file:32kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 809.069606] Node 0 DMA free:10372kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 809.096344] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 809.120739] Node 0 DMA32 free:41568kB min:36272kB low:45340kB high:54408kB active_anon:1927780kB inactive_anon:36648kB active_file:548kB inactive_file:1008kB unevictable:0kB writepending:4kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10624kB pagetables:22024kB bounce:0kB free_pcp:328kB local_pcp:144kB free_cma:0kB [ 809.161822] lowmem_reserve[]: 0 0 0 0 0 [ 809.166361] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 809.192442] lowmem_reserve[]: 0 0 0 0 0 [ 809.196643] Node 1 Normal free:66396kB min:53612kB low:67012kB high:80412kB active_anon:3366952kB inactive_anon:40kB active_file:20kB inactive_file:56kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15840kB pagetables:50240kB bounce:0kB free_pcp:1440kB local_pcp:724kB free_cma:0kB [ 809.226448] lowmem_reserve[]: 0 0 0 0 0 [ 809.231659] Node 0 DMA: 1*4kB (E) 14*8kB (U) 9*16kB (UM) 10*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 809.250389] Node 0 DMA32: 17*4kB (UM) 1622*8kB (UME) 515*16kB (UME) 271*32kB (UME) 52*64kB (M) 31*128kB (M) 13*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40580kB [ 809.265547] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 809.291678] Node 1 Normal: 625*4kB (UME) 389*8kB (UME) 259*16kB (UM) 252*32kB (UME) 113*64kB (UME) 43*128kB (UME) 121*256kB (UM) 9*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 67164kB [ 809.308897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 809.318195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 809.327206] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 809.336922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 809.345671] 9680 total pagecache pages [ 809.349723] 0 pages in swap cache [ 809.353271] Swap cache stats: add 0, delete 0, find 0/0 [ 809.358782] Free swap = 0kB [ 809.361887] Total swap = 0kB [ 809.364998] 1965979 pages RAM [ 809.374305] 0 pages HighMem/MovableOnly [ 809.378966] 339056 pages reserved [ 809.382515] 0 pages cma reserved [ 809.385976] Out of memory: Kill process 24567 (syz-executor.0) score 1007 or sacrifice child [ 809.394724] Killed process 24567 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB [ 809.460916] oom_reaper: reaped process 24567 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:54:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000002c0)={0x0, &(0x7f0000000200)}) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x200, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:23 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x2000, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x102f) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x400400, 0x0) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000100)) dup3(r0, r1, 0x0) [ 810.583523] ALSA: mixer_oss: invalid OSS volume '' 06:54:24 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, &(0x7f00000000c0)) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) 06:54:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:24 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, 0xffffffffffffffff, 0x0) 06:54:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000200), &(0x7f00000002c0)=0x4) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x428202, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x11, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f00000002c0)={0x9, "5263de42dbc44e4fae86f53eb706c32fa9ec6cbb21060a428a16b1b0524b6ab5", 0x3, 0x3f, 0xf55, 0x272ccaa93991e81a, 0x8}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x686d1cb6c01af587) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x400000000003, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x34}, 0x0, 0x0) [ 811.469676] ALSA: mixer_oss: invalid OSS volume '' [ 811.504860] ALSA: mixer_oss: invalid OSS volume '' 06:54:24 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, 0xffffffffffffffff, 0x0) 06:54:24 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = fanotify_init(0x40, 0x8000) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) r7 = socket(0x11, 0x2, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', r8, 0x29, 0x9, 0x8, 0x6, 0x20, @mcast2, @mcast2, 0x1, 0x700, 0x8, 0x401}}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x102f) r9 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getdents64(r9, &(0x7f0000000180)=""/157, 0x9d) dup3(r0, r3, 0x0) 06:54:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000200)="93de7033c8cf62c04997261f38a466b841f5100b9c2c6e30c110390d65ff9618b0", 0x38}, {&(0x7f00000002c0)="af9f97b653f961ee2fd478c139884961ddb8a251c4418d00c1b2e203aac56978d0bf69b249c3f76568c424f1fe5784a99bc307cf6e0c96524afb3f69c79a4f00c22a5b994eaa51aa1dc484710aa23ba446e64a3154e8805dbe1cc3fea99376b34408fb03521379caf9dbbcb95b22d093ac851a4b6e3d8771a36f7b92fdaaddc166235314937ef508"}, {&(0x7f0000000380)="387743a34c50d8f2b0a147af3d7bcb74798508b291c796d00fcfa471777430bee813d63e1c968d53273b79520da39be0201c28f53d8be377cb503ebec9594e09c64b7f7f0b1c50cb79b84e5dc3d1dcbd04da551fa1617063703794234716d70bff81ff056d45823f599fbc031e1fb7cb4e1e6d38356155218384d2e7a9064dcb56ea28b444c22b34a33dd45d019ee25c08305f00f077303ef63f5ae8a21ae70816676ddf03416a75fc3e2a76c46d400725a8c56eb1b26dec02257e4a19c78ef3fc7fc8"}], 0x1, 0x5) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:25 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(0xffffffffffffffff, r0, 0x0) [ 812.014474] ALSA: mixer_oss: invalid OSS volume 'ELF' [ 812.020454] ALSA: mixer_oss: invalid OSS volume '•ò•ïA0æê?n~¼dš4J€Ã8' [ 812.046278] ALSA: mixer_oss: invalid OSS volume 'sÐXÐ9%ê%àuB%kéßRÿ?[' 06:54:25 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r2}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), 0x0}, 0x20) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U+', 0xd7}, 0x16, 0x5) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x4000, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0x80184132, &(0x7f0000000100)) 06:54:25 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(0xffffffffffffffff, r0, 0x0) 06:54:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 812.431947] ALSA: mixer_oss: invalid OSS volume '' 06:54:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3, 0x0, 0x7}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 812.475682] ALSA: mixer_oss: invalid OSS volume 'ELF' [ 812.488385] ALSA: mixer_oss: invalid OSS volume '•ò•ïA0æê?n~¼dš4J€Ã8' 06:54:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 812.527353] ALSA: mixer_oss: invalid OSS volume 'sÐXÐ9%ê%àuB%kéßRÿ?[' [ 812.545101] ALSA: mixer_oss: invalid OSS volume '' 06:54:25 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(0xffffffffffffffff, r0, 0x0) 06:54:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:26 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x4582, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x7, 0x5841}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e20, @broadcast}}, 0x80000000, 0x4, 0x1, 0xfffffffc, 0x50, 0x10000, 0x6}, &(0x7f0000000180)=0x9c) dup3(r0, r1, 0x0) 06:54:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x3, 0x4) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 812.990130] syz-executor.1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 813.103627] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 813.126566] CPU: 1 PID: 6372 Comm: syz-executor.1 Not tainted 4.14.189-syzkaller #0 [ 813.134373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.143703] Call Trace: [ 813.146270] dump_stack+0x1b2/0x283 [ 813.149878] dump_header+0x178/0x82f [ 813.153569] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 813.158648] ? ___ratelimit+0x2cd/0x522 [ 813.162600] oom_kill_process.cold+0x10/0xa69 [ 813.167072] ? lock_downgrade+0x740/0x740 [ 813.171208] out_of_memory+0x2dc/0x1190 [ 813.175159] ? oom_killer_disable+0x1c0/0x1c0 [ 813.179628] ? mutex_trylock+0x152/0x1a0 [ 813.183668] __alloc_pages_nodemask+0x23e1/0x2720 [ 813.188495] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 813.193321] ? fs_reclaim_release+0xd0/0x110 [ 813.197710] ? kmem_cache_alloc_node+0x38b/0x410 [ 813.202442] copy_process.part.0+0x26d/0x6f00 [ 813.206917] ? trace_hardirqs_on+0x10/0x10 [ 813.211129] ? _raw_spin_unlock+0x29/0x40 [ 813.215253] ? do_wp_page+0x24d/0x1db0 [ 813.219117] ? trace_hardirqs_on+0x10/0x10 [ 813.223327] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 813.227980] ? __cleanup_sighand+0x40/0x40 [ 813.232362] ? lock_downgrade+0x740/0x740 [ 813.236600] _do_fork+0x184/0xc80 [ 813.240037] ? put_timespec64+0xaa/0xf0 [ 813.243998] ? fork_idle+0x270/0x270 [ 813.247690] ? SyS_clock_gettime+0xf5/0x180 [ 813.251986] ? SyS_clock_settime+0x1a0/0x1a0 [ 813.256368] ? do_syscall_64+0x4c/0x640 [ 813.260315] ? sys_vfork+0x20/0x20 [ 813.263842] do_syscall_64+0x1d5/0x640 [ 813.267710] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 813.272874] RIP: 0033:0x45a99a [ 813.276042] RSP: 002b:00007ffe1ad09780 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 813.283729] RAX: ffffffffffffffda RBX: 00007ffe1ad09780 RCX: 000000000045a99a [ 813.290975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 813.298220] RBP: 00007ffe1ad097c0 R08: 0000000000000001 R09: 00000000026f5940 [ 813.305465] R10: 00000000026f5c10 R11: 0000000000000246 R12: 0000000000000001 [ 813.312708] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1ad09810 [ 813.515153] Mem-Info: [ 813.521976] active_anon:1328824 inactive_anon:9173 isolated_anon:0 [ 813.521976] active_file:154 inactive_file:240 isolated_file:29 [ 813.521976] unevictable:0 dirty:19 writeback:0 unstable:0 [ 813.521976] slab_reclaimable:17640 slab_unreclaimable:122484 [ 813.521976] mapped:54024 shmem:9384 pagetables:18044 bounce:0 [ 813.521976] free:24281 free_pcp:4 free_cma:0 [ 813.619870] Node 0 active_anon:1948568kB inactive_anon:36648kB active_file:20kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:214884kB dirty:0kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 813.657000] Node 1 active_anon:3366728kB inactive_anon:44kB active_file:1208kB inactive_file:1160kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:2412kB dirty:76kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 813.716962] Node 0 DMA free:10384kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 813.744833] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 813.750718] Node 0 DMA32 free:26956kB min:36272kB low:45340kB high:54408kB active_anon:1943784kB inactive_anon:36648kB active_file:20kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10688kB pagetables:22048kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 813.780195] lowmem_reserve[]: 0 0 0 0 0 [ 813.784265] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 813.810322] lowmem_reserve[]: 0 0 0 0 0 [ 813.814422] Node 1 Normal free:58620kB min:53612kB low:67012kB high:80412kB active_anon:3366728kB inactive_anon:44kB active_file:1292kB inactive_file:1484kB unevictable:0kB writepending:76kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15712kB pagetables:50128kB bounce:0kB free_pcp:644kB local_pcp:120kB free_cma:0kB [ 813.844694] lowmem_reserve[]: 0 0 0 0 0 [ 813.867197] Node 0 DMA: 2*4kB (ME) 15*8kB (UM) 9*16kB (UM) 12*32kB (UME) 4*64kB (UE) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10384kB [ 813.885170] Node 0 DMA32: 177*4kB (UME) 1588*8kB (UME) 487*16kB (UME) 179*32kB (UME) 0*64kB 0*128kB 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27444kB [ 813.900247] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 813.911774] Node 1 Normal: 1210*4kB (UME) 541*8kB (UME) 128*16kB (UME) 277*32kB (UME) 214*64kB (ME) 39*128kB (ME) 82*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 59760kB [ 813.928167] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 813.937569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 813.947025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 813.956273] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 813.965695] 9503 total pagecache pages [ 813.971562] 0 pages in swap cache [ 813.975782] Swap cache stats: add 0, delete 0, find 0/0 [ 813.981991] Free swap = 0kB [ 813.985794] Total swap = 0kB [ 813.989983] 1965979 pages RAM [ 813.993447] 0 pages HighMem/MovableOnly [ 813.998528] 339056 pages reserved [ 814.002347] 0 pages cma reserved [ 814.006006] Out of memory: Kill process 25754 (syz-executor.0) score 1007 or sacrifice child [ 814.016952] Killed process 25754 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34840kB, shmem-rss:0kB 06:54:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)="6698938c59e1a4ffab3d32d813270fc38a749ff50f47856c0727dce90e7e0704292b51184421df226580ea3772ffce2034beee344ce037e5502b298f54f38ca9c6a4a4dea1e1eaa8dfaa7c2475674197a8b2e987a837731292cbc5b09d62f6", 0x5f}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x14) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 814.177588] ALSA: mixer_oss: invalid OSS volume '' [ 814.197666] ALSA: mixer_oss: invalid OSS volume 'ELF' [ 814.206912] ALSA: mixer_oss: invalid OSS volume '•ò•ïA0æê?n~¼dš4J€Ã8' [ 814.226428] ALSA: mixer_oss: invalid OSS volume '' [ 814.232238] ALSA: mixer_oss: invalid OSS volume '' [ 814.238274] ALSA: mixer_oss: invalid OSS volume 'sÐXÐ9%ê%àuB%kéßRÿ?[' 06:54:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:27 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x3, 0x6, 0x80}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r2}, 0x2c) sync_file_range(r2, 0x4, 0x1, 0x2) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000100)={0x80, "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"}) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r3, 0x0) 06:54:27 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, r1, 0x0) [ 814.366454] ALSA: mixer_oss: invalid OSS volume '' [ 814.392654] ALSA: mixer_oss: invalid OSS volume 'S)éŒ`' [ 814.425129] ALSA: mixer_oss: invalid OSS volume 'QÒÅâS0“Ù”x ÀÖ' [ 814.443203] ALSA: mixer_oss: invalid OSS volume '‡ Ò/ýkŒ‰ký‡š¿Ú.YwjÀEå¿C©' [ 814.457297] ALSA: mixer_oss: invalid OSS volume 'ELF' 06:54:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 814.486855] ALSA: mixer_oss: invalid OSS volume '•ò•ïA0æê?n~¼dš4J€Ã8' [ 814.545393] ALSA: mixer_oss: invalid OSS volume 'sÐXÐ9%ê%àuB%kéßRÿ?[' [ 814.556763] ALSA: mixer_oss: invalid OSS volume '-1ìP…5f+{À à›/| TÌ´šØݶ¼o’¨U ' 06:54:28 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, r1, 0x0) [ 814.715004] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 814.770564] systemd-udevd cpuset=/ mems_allowed=0-1 [ 814.790256] CPU: 1 PID: 3650 Comm: systemd-udevd Not tainted 4.14.189-syzkaller #0 [ 814.797974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.807317] Call Trace: [ 814.809906] dump_stack+0x1b2/0x283 [ 814.813528] dump_header+0x178/0x82f [ 814.817246] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 814.822339] ? ___ratelimit+0x2cd/0x522 [ 814.826297] oom_kill_process.cold+0x10/0xa69 [ 814.830797] ? lock_downgrade+0x740/0x740 [ 814.834935] out_of_memory+0x2dc/0x1190 [ 814.838888] ? oom_killer_disable+0x1c0/0x1c0 [ 814.843368] ? mutex_trylock+0x152/0x1a0 [ 814.847418] __alloc_pages_nodemask+0x23e1/0x2720 [ 814.852259] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 814.857076] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 814.861896] ? trace_hardirqs_on+0x10/0x10 [ 814.866112] ? cache_grow_begin+0x3f/0x420 [ 814.870326] cache_grow_begin+0x8f/0x420 [ 814.874364] ? mempolicy_slab_node+0x100/0x320 [ 814.878920] fallback_alloc+0x207/0x2c0 [ 814.882872] kmem_cache_alloc+0x1e5/0x3c0 [ 814.886996] getname_flags+0xc8/0x550 [ 814.890775] user_path_at_empty+0x2a/0x50 [ 814.894987] SyS_readlinkat+0xa8/0x270 [ 814.898853] ? task_work_run+0xfd/0x190 [ 814.902803] ? SyS_newfstat+0xd0/0xd0 [ 814.906579] ? do_syscall_64+0x4c/0x640 [ 814.910529] ? SyS_newfstat+0xd0/0xd0 [ 814.914306] do_syscall_64+0x1d5/0x640 [ 814.918185] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 814.923373] RIP: 0033:0x7fc45fd2a0ba [ 814.927189] RSP: 002b:00007ffc2f55b1f8 EFLAGS: 00000202 ORIG_RAX: 000000000000010b [ 814.934876] RAX: ffffffffffffffda RBX: 000055ba871ee8b0 RCX: 00007fc45fd2a0ba [ 814.942123] RDX: 000055ba871ee8b0 RSI: 000055ba871f4f60 RDI: 00000000ffffff9c [ 814.949372] RBP: 0000000000000064 R08: 000055ba860c7670 R09: 0000000000000070 [ 814.956779] R10: 0000000000000063 R11: 0000000000000202 R12: 000055ba871f4f60 [ 814.964033] R13: 00000000ffffff9c R14: 00007ffc2f55b250 R15: 0000000000000063 06:54:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 815.052786] Mem-Info: 06:54:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x6, 0xfffc, 0x0, 0x4, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 815.092491] active_anon:1327544 inactive_anon:9173 isolated_anon:0 [ 815.092491] active_file:571 inactive_file:1077 isolated_file:98 [ 815.092491] unevictable:0 dirty:18 writeback:5 unstable:0 [ 815.092491] slab_reclaimable:17649 slab_unreclaimable:122406 [ 815.092491] mapped:55145 shmem:9384 pagetables:18090 bounce:0 [ 815.092491] free:24138 free_pcp:287 free_cma:0 [ 815.215764] Node 0 active_anon:1948156kB inactive_anon:36648kB active_file:28kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:214924kB dirty:8kB writeback:4kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 815.297905] Node 1 active_anon:3362020kB inactive_anon:44kB active_file:2076kB inactive_file:1348kB unevictable:0kB isolated(anon):0kB isolated(file):296kB mapped:2556kB dirty:0kB writeback:16kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 815.328778] Node 0 DMA free:10348kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 815.360949] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 815.370098] Node 0 DMA32 free:26976kB min:36272kB low:45340kB high:54408kB active_anon:1943372kB inactive_anon:36648kB active_file:28kB inactive_file:20kB unevictable:0kB writepending:12kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10752kB pagetables:22148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 815.400629] ALSA: mixer_oss: invalid OSS volume '' [ 815.405718] ALSA: mixer_oss: invalid OSS volume 'S)éŒ`' [ 815.407967] lowmem_reserve[]: 0 0 0 0 0 [ 815.450910] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 815.454062] ALSA: mixer_oss: invalid OSS volume 'QÒÅâS0“Ù”x ÀÖ' [ 815.619543] ALSA: mixer_oss: invalid OSS volume '‡ Ò/ýkŒ‰ký‡š¿Ú.YwjÀEå¿C©' [ 815.630892] lowmem_reserve[]: 0 0 0 0 0 [ 815.650819] Node 1 Normal free:55816kB min:53612kB low:67012kB high:80412kB active_anon:3368236kB inactive_anon:44kB active_file:1748kB inactive_file:1976kB unevictable:0kB writepending:128kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15808kB pagetables:50224kB bounce:0kB free_pcp:96kB local_pcp:96kB free_cma:0kB [ 815.691608] ALSA: mixer_oss: invalid OSS volume '-1ìP…5f+{À à›/| TÌ´šØݶ¼o’¨U ' [ 815.779986] lowmem_reserve[]: 0 0 0 0 0 [ 815.784079] Node 0 DMA: 1*4kB (E) 13*8kB (U) 10*16kB (UM) 10*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10380kB [ 815.831057] Node 0 DMA32: 91*4kB (UME) 1540*8kB (U) 484*16kB (UME) 176*32kB (UME) 0*64kB 0*128kB 5*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27340kB [ 815.856253] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 815.872024] Node 1 Normal: 842*4kB (UME) 94*8kB (UME) 33*16kB (UE) 389*32kB (UME) 217*64kB (UME) 40*128kB (UME) 77*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55816kB [ 815.891609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 815.900694] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 815.912979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 815.922109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 815.934269] 9580 total pagecache pages [ 815.938199] 0 pages in swap cache [ 815.941635] Swap cache stats: add 0, delete 0, find 0/0 [ 815.949386] Free swap = 0kB [ 815.952439] Total swap = 0kB [ 815.955457] 1965979 pages RAM [ 815.958571] 0 pages HighMem/MovableOnly [ 815.962571] 339056 pages reserved [ 815.965999] 0 pages cma reserved [ 815.969854] Out of memory: Kill process 25813 (syz-executor.2) score 1007 or sacrifice child [ 816.012315] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 816.045268] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 816.057757] CPU: 0 PID: 6372 Comm: syz-executor.1 Not tainted 4.14.189-syzkaller #0 [ 816.065569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.074912] Call Trace: [ 816.077495] dump_stack+0x1b2/0x283 [ 816.081112] dump_header+0x178/0x82f [ 816.084805] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 816.089883] ? ___ratelimit+0x2cd/0x522 [ 816.093838] oom_kill_process.cold+0x10/0xa69 [ 816.098312] ? lock_downgrade+0x740/0x740 [ 816.102437] out_of_memory+0x2dc/0x1190 [ 816.106393] ? oom_killer_disable+0x1c0/0x1c0 [ 816.110866] ? mutex_trylock+0x152/0x1a0 [ 816.114909] __alloc_pages_nodemask+0x23e1/0x2720 [ 816.119734] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 816.124552] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 816.129433] ? trace_hardirqs_on+0x10/0x10 [ 816.133649] ? cache_grow_begin+0x3f/0x420 [ 816.137907] cache_grow_begin+0x8f/0x420 [ 816.141959] ? mempolicy_slab_node+0x100/0x320 [ 816.146514] fallback_alloc+0x207/0x2c0 [ 816.150464] kmem_cache_alloc+0x1e5/0x3c0 [ 816.154637] getname_flags+0xc8/0x550 [ 816.158413] user_path_mountpoint_at+0x23/0x40 [ 816.162971] SyS_umount+0x125/0xeb0 [ 816.166662] ? lock_downgrade+0x740/0x740 [ 816.170787] ? __detach_mounts+0x400/0x400 [ 816.175016] ? up_read+0x17/0x30 [ 816.178376] ? __do_page_fault+0x19a/0xb50 [ 816.182589] ? do_syscall_64+0x4c/0x640 [ 816.186538] ? __detach_mounts+0x400/0x400 [ 816.190751] do_syscall_64+0x1d5/0x640 [ 816.194619] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 816.199782] RIP: 0033:0x45ed97 [ 816.202946] RSP: 002b:00007ffe1ad086d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 816.210627] RAX: ffffffffffffffda RBX: 00000000000c6e8c RCX: 000000000045ed97 [ 816.217874] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffe1ad09810 [ 816.225118] RBP: 00000000000007ac R08: 0000000000000001 R09: 00000000026f5940 [ 816.232363] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1ad09810 [ 816.239609] R13: 00007ffe1ad09800 R14: 0000000000000000 R15: 00007ffe1ad09810 [ 816.262183] Mem-Info: [ 816.264628] active_anon:1330087 inactive_anon:9173 isolated_anon:0 [ 816.264628] active_file:43 inactive_file:0 isolated_file:28 [ 816.264628] unevictable:0 dirty:1 writeback:4 unstable:0 [ 816.264628] slab_reclaimable:17645 slab_unreclaimable:122288 [ 816.264628] mapped:53768 shmem:9384 pagetables:18065 bounce:0 [ 816.264628] free:23371 free_pcp:194 free_cma:0 [ 816.300020] Node 0 active_anon:1948100kB inactive_anon:36648kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):68kB mapped:214964kB dirty:12kB writeback:8kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 816.328300] Node 1 active_anon:3372248kB inactive_anon:44kB active_file:208kB inactive_file:168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208kB dirty:0kB writeback:24kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 816.355490] Node 0 DMA free:10380kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 816.382590] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 816.436781] Node 0 DMA32 free:27444kB min:36272kB low:45340kB high:54408kB active_anon:1943320kB inactive_anon:36648kB active_file:24kB inactive_file:36kB unevictable:0kB writepending:12kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10688kB pagetables:22044kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 816.470818] lowmem_reserve[]: 0 0 0 0 0 [ 816.474822] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 816.502828] lowmem_reserve[]: 0 0 0 0 0 [ 816.506903] Node 1 Normal free:55540kB min:53612kB low:67012kB high:80412kB active_anon:3372248kB inactive_anon:44kB active_file:8kB inactive_file:144kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15616kB pagetables:50220kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 816.537948] lowmem_reserve[]: 0 0 0 0 0 [ 816.541952] Node 0 DMA: 1*4kB (E) 13*8kB (U) 10*16kB (UM) 10*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10380kB [ 816.557580] Node 0 DMA32: 144*4kB (UME) 1541*8kB (UM) 487*16kB (UME) 176*32kB (UME) 0*64kB 0*128kB 5*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27608kB [ 816.571817] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 816.582615] Node 1 Normal: 797*4kB (UME) 104*8kB (UME) 33*16kB (UE) 393*32kB (UME) 217*64kB (UME) 40*128kB (UME) 77*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55844kB [ 816.598191] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 816.607066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 816.615636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 816.624514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 816.633449] 9474 total pagecache pages [ 816.637406] 0 pages in swap cache [ 816.640850] Swap cache stats: add 0, delete 0, find 0/0 [ 816.646203] Free swap = 0kB [ 816.649253] Total swap = 0kB [ 816.652262] 1965979 pages RAM [ 816.655357] 0 pages HighMem/MovableOnly [ 816.659699] 339056 pages reserved [ 816.663155] 0 pages cma reserved [ 816.666517] Out of memory: Kill process 25833 (syz-executor.2) score 1007 or sacrifice child [ 816.675686] Killed process 25833 (syz-executor.2) total-vm:75368kB, anon-rss:16568kB, file-rss:34816kB, shmem-rss:0kB [ 817.312030] ALSA: mixer_oss: invalid OSS volume 'ELF' [ 817.317964] ALSA: mixer_oss: invalid OSS volume '•ò•ïA0æê?n~¼dš4J€Ã8' [ 817.325693] ALSA: mixer_oss: invalid OSS volume 'sÐXÐ9%ê%àuB%kéßRÿ?[' [ 818.215983] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 818.316629] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 818.321783] CPU: 0 PID: 25856 Comm: syz-executor.4 Not tainted 4.14.189-syzkaller #0 [ 818.329676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 818.339020] Call Trace: [ 818.341616] dump_stack+0x1b2/0x283 [ 818.345245] dump_header+0x178/0x82f [ 818.348962] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 818.354053] ? ___ratelimit+0x2cd/0x522 [ 818.358012] oom_kill_process.cold+0x10/0xa69 [ 818.362492] ? lock_downgrade+0x740/0x740 [ 818.366639] out_of_memory+0x2dc/0x1190 [ 818.370597] ? oom_killer_disable+0x1c0/0x1c0 [ 818.375071] ? mutex_trylock+0x152/0x1a0 [ 818.379113] __alloc_pages_nodemask+0x23e1/0x2720 [ 818.383952] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 818.388777] ? __lock_acquire+0x5fc/0x3f20 [ 818.392995] ? cpuacct_charge+0x1ca/0x350 [ 818.397128] ? __lock_acquire+0x5fc/0x3f20 [ 818.401362] alloc_pages_current+0x155/0x260 [ 818.405753] pte_alloc_one+0x15/0x100 [ 818.409559] do_huge_pmd_anonymous_page+0x500/0x1670 [ 818.414643] ? prep_transhuge_page+0xa0/0xa0 [ 818.419033] ? __lock_acquire+0x5fc/0x3f20 [ 818.423250] __handle_mm_fault+0x2ac4/0x4620 [ 818.427641] ? trace_hardirqs_on+0x10/0x10 [ 818.431955] ? vm_insert_page+0x7c0/0x7c0 [ 818.436100] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 818.441127] handle_mm_fault+0x306/0x7a0 [ 818.445169] __do_page_fault+0x578/0xb50 [ 818.449212] ? spurious_fault+0x640/0x640 [ 818.453337] ? do_page_fault+0x60/0x4f2 [ 818.457297] page_fault+0x25/0x50 [ 818.460730] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 818.466609] RSP: 0018:ffff88818cf6fbe0 EFLAGS: 00010206 [ 818.471953] RAX: ffffed103c2a8600 RBX: 0000000000001000 RCX: 0000000000000340 [ 818.479203] RDX: 0000000000001000 RSI: 0000000020800000 RDI: ffff8881e1542cc0 [ 818.486555] RBP: 00000000207ff340 R08: 0000000000000001 R09: ffffed103c2a85ff [ 818.493821] R10: ffff8881e1542fff R11: 0000000000000000 R12: ffff8881e1542000 [ 818.501071] R13: 00007ffffffff000 R14: 0000000020800340 R15: 0000000000001000 [ 818.508332] copyin+0x99/0xc0 [ 818.511419] copy_page_from_iter+0x324/0x730 [ 818.515826] pipe_write+0x250/0xe10 [ 818.519437] __vfs_write+0x44c/0x630 [ 818.523132] ? kernel_read+0x110/0x110 [ 818.527005] ? rw_verify_area+0xe1/0x2a0 [ 818.531047] vfs_write+0x17f/0x4d0 [ 818.534581] SyS_write+0xf2/0x210 [ 818.538028] ? SyS_read+0x210/0x210 [ 818.541633] ? SyS_clock_settime+0x1a0/0x1a0 [ 818.546020] ? do_syscall_64+0x4c/0x640 [ 818.549985] ? SyS_read+0x210/0x210 [ 818.553592] do_syscall_64+0x1d5/0x640 [ 818.557463] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 818.562648] RIP: 0033:0x45c369 [ 818.565907] RSP: 002b:00007fb9f9a51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 818.573595] RAX: ffffffffffffffda RBX: 0000000000034f00 RCX: 000000000045c369 [ 818.580861] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000005 [ 818.588114] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 818.595381] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 818.602629] R13: 00007ffe402d57bf R14: 00007fb9f9a529c0 R15: 000000000078bf0c [ 818.618445] Mem-Info: [ 818.621065] active_anon:1331899 inactive_anon:9173 isolated_anon:0 [ 818.621065] active_file:464 inactive_file:470 isolated_file:66 [ 818.621065] unevictable:0 dirty:23 writeback:0 unstable:0 [ 818.621065] slab_reclaimable:17610 slab_unreclaimable:122186 [ 818.621065] mapped:54604 shmem:9384 pagetables:18113 bounce:0 [ 818.621065] free:20730 free_pcp:0 free_cma:0 [ 818.655206] Node 0 active_anon:1948136kB inactive_anon:36648kB active_file:72kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214960kB dirty:20kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 818.691073] Node 1 active_anon:3379460kB inactive_anon:44kB active_file:1672kB inactive_file:1588kB unevictable:0kB isolated(anon):0kB isolated(file):52kB mapped:3256kB dirty:72kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 818.718760] Node 0 DMA free:10380kB min:220kB low:272kB high:324kB active_anon:4784kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 818.748558] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 818.754067] Node 0 DMA32 free:27268kB min:36272kB low:45340kB high:54408kB active_anon:1943352kB inactive_anon:36648kB active_file:72kB inactive_file:288kB unevictable:0kB writepending:20kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10752kB pagetables:22036kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 818.831036] lowmem_reserve[]: 0 0 0 0 0 [ 818.840787] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 818.901647] lowmem_reserve[]: 0 0 0 0 0 [ 818.972907] Node 1 Normal free:49872kB min:53612kB low:67012kB high:80412kB active_anon:3375484kB inactive_anon:44kB active_file:796kB inactive_file:1112kB unevictable:0kB writepending:84kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15872kB pagetables:50420kB bounce:0kB free_pcp:792kB local_pcp:92kB free_cma:0kB [ 819.009653] lowmem_reserve[]: 0 0 0 0 0 [ 819.013859] Node 0 DMA: 1*4kB (E) 13*8kB (U) 10*16kB (UM) 10*32kB (UE) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10380kB [ 819.034429] Node 0 DMA32: 162*4kB (UME) 1540*8kB (UM) 485*16kB (UME) 176*32kB (UME) 1*64kB (M) 1*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27064kB [ 819.078167] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 819.089482] Node 1 Normal: 983*4kB (UMEH) 554*8kB (UME) 408*16kB (UMEH) 343*32kB (UMEH) 215*64kB (UME) 41*128kB (ME) 68*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 62796kB [ 819.109846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 819.120161] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 819.157596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 819.192311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 819.210995] 10128 total pagecache pages [ 819.215428] 0 pages in swap cache [ 819.219620] Swap cache stats: add 0, delete 0, find 0/0 [ 819.225122] Free swap = 0kB [ 819.232017] Total swap = 0kB [ 819.235086] 1965979 pages RAM [ 819.238729] 0 pages HighMem/MovableOnly [ 819.242887] 339056 pages reserved [ 819.246650] 0 pages cma reserved [ 819.250137] Out of memory: Kill process 25608 (syz-executor.0) score 1007 or sacrifice child [ 819.258958] Killed process 25608 (syz-executor.0) total-vm:75236kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB 06:54:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:31 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, r1, 0x0) 06:54:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000440)={0x38, 0x2, 0x18, 0xee14, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f00000003c0)="c62a15ade8a4b1d8bfb9c8667a2fdc65938595c891f8db53397801155085825d6127e724369ba0b2af330647146b1aecc25f723b16df0fe652af549db8cd2ead0591adf492ad7414cc3ae31ee3f837f05ba9766a53703e341e2ddd94c9", 0x5d}], 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r3, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x7, 0x5841}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={r3, 0x7c64}, &(0x7f00000002c0)=0x8) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000), 0x0, 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:32 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r5, 0x7, 0x0, 0x0, {0x3, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7f73c4928d89"}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) [ 819.331268] oom_reaper: reaped process 25608 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 819.352928] ALSA: mixer_oss: invalid OSS volume 'ELF' [ 819.360662] ALSA: mixer_oss: invalid OSS volume '•ò•ïA0æê?n~¼dš4J€Ã8' [ 819.402707] ALSA: mixer_oss: invalid OSS volume 'sÐXÐ9%ê%àuB%kéßRÿ?[' [ 819.429735] ALSA: mixer_oss: invalid OSS volume '' [ 819.453140] ALSA: mixer_oss: invalid OSS volume '' 06:54:32 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, r1, 0x0) [ 819.474227] ALSA: mixer_oss: invalid OSS volume '' [ 819.587763] ALSA: mixer_oss: invalid OSS volume '' [ 819.593431] ALSA: mixer_oss: invalid OSS volume '' [ 819.624821] ALSA: mixer_oss: invalid OSS volume '' 06:54:33 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x115643, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) [ 820.014193] syz-executor.0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 820.078401] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 820.095010] CPU: 0 PID: 25870 Comm: syz-executor.0 Not tainted 4.14.189-syzkaller #0 [ 820.102899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.112233] Call Trace: [ 820.114803] dump_stack+0x1b2/0x283 [ 820.118411] dump_header+0x178/0x82f [ 820.122107] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 820.127190] ? ___ratelimit+0x2cd/0x522 [ 820.131143] oom_kill_process.cold+0x10/0xa69 [ 820.135622] ? lock_downgrade+0x740/0x740 [ 820.139753] out_of_memory+0x2dc/0x1190 [ 820.143709] ? oom_killer_disable+0x1c0/0x1c0 [ 820.148183] ? mutex_trylock+0x152/0x1a0 [ 820.152225] __alloc_pages_nodemask+0x23e1/0x2720 [ 820.157074] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 820.161896] ? __lock_acquire+0x5fc/0x3f20 [ 820.166111] ? __lock_acquire+0x5fc/0x3f20 [ 820.170334] alloc_pages_current+0x155/0x260 [ 820.174724] pte_alloc_one+0x15/0x100 [ 820.178522] do_huge_pmd_anonymous_page+0x500/0x1670 [ 820.183624] ? prep_transhuge_page+0xa0/0xa0 [ 820.188013] ? __lock_acquire+0x5fc/0x3f20 [ 820.192246] __handle_mm_fault+0x2ac4/0x4620 [ 820.196635] ? vm_insert_page+0x7c0/0x7c0 [ 820.200780] ? lock_downgrade+0x740/0x740 [ 820.204908] ? cpuacct_charge+0x1cf/0x350 [ 820.209044] handle_mm_fault+0x306/0x7a0 [ 820.213086] __do_page_fault+0x578/0xb50 [ 820.217128] ? spurious_fault+0x640/0x640 [ 820.221431] ? do_page_fault+0x60/0x4f2 [ 820.225385] page_fault+0x25/0x50 [ 820.228823] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 820.234698] RSP: 0018:ffff88817aeefbe0 EFLAGS: 00010206 [ 820.240039] RAX: ffffed103a7ba200 RBX: 0000000000001000 RCX: 0000000000000340 [ 820.247305] RDX: 0000000000001000 RSI: 0000000020c00000 RDI: ffff8881d3dd0cc0 [ 820.254574] RBP: 0000000020bff340 R08: 0000000000000001 R09: ffffed103a7ba1ff [ 820.261842] R10: ffff8881d3dd0fff R11: 0000000000000000 R12: ffff8881d3dd0000 [ 820.269107] R13: 00007ffffffff000 R14: 0000000020c00340 R15: 0000000000001000 [ 820.276384] copyin+0x99/0xc0 [ 820.279470] copy_page_from_iter+0x324/0x730 [ 820.283861] pipe_write+0x250/0xe10 [ 820.287471] __vfs_write+0x44c/0x630 [ 820.291165] ? kernel_read+0x110/0x110 [ 820.295041] ? rw_verify_area+0xe1/0x2a0 [ 820.299083] vfs_write+0x17f/0x4d0 [ 820.302603] SyS_write+0xf2/0x210 [ 820.306033] ? SyS_read+0x210/0x210 [ 820.309639] ? SyS_clock_settime+0x1a0/0x1a0 [ 820.314024] ? do_syscall_64+0x4c/0x640 [ 820.317976] ? SyS_read+0x210/0x210 [ 820.321582] do_syscall_64+0x1d5/0x640 [ 820.325452] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 820.330620] RIP: 0033:0x45c369 [ 820.333787] RSP: 002b:00007f70a66aac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 820.341488] RAX: ffffffffffffffda RBX: 0000000000034f00 RCX: 000000000045c369 [ 820.348734] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000005 [ 820.355983] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 820.363234] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 820.370483] R13: 00007ffe8da5e1bf R14: 00007f70a66ab9c0 R15: 000000000078bf0c [ 820.448899] Mem-Info: [ 820.451419] active_anon:1330137 inactive_anon:9173 isolated_anon:0 [ 820.451419] active_file:237 inactive_file:255 isolated_file:32 [ 820.451419] unevictable:0 dirty:72 writeback:2 unstable:0 [ 820.451419] slab_reclaimable:17597 slab_unreclaimable:122182 [ 820.451419] mapped:54158 shmem:9384 pagetables:18115 bounce:0 [ 820.451419] free:22685 free_pcp:327 free_cma:0 [ 820.486293] Node 0 active_anon:1948684kB inactive_anon:36648kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214940kB dirty:16kB writeback:0kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1308672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 820.515369] Node 1 active_anon:3371864kB inactive_anon:44kB active_file:940kB inactive_file:936kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1692kB dirty:272kB writeback:8kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 820.543764] Node 0 DMA free:10348kB min:220kB low:272kB high:324kB active_anon:4816kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 820.570487] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 820.575655] Node 0 DMA32 free:27192kB min:36272kB low:45340kB high:54408kB active_anon:1943868kB inactive_anon:36648kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:16kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10688kB pagetables:22036kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 820.617242] lowmem_reserve[]: 0 0 0 0 0 [ 820.621281] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 820.646965] lowmem_reserve[]: 0 0 0 0 0 [ 820.650973] Node 1 Normal free:55016kB min:53612kB low:67012kB high:80412kB active_anon:3371824kB inactive_anon:44kB active_file:964kB inactive_file:692kB unevictable:0kB writepending:280kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15712kB pagetables:50316kB bounce:0kB free_pcp:596kB local_pcp:144kB free_cma:0kB [ 820.682184] lowmem_reserve[]: 0 0 0 0 0 [ 820.686232] Node 0 DMA: 1*4kB (E) 13*8kB (U) 10*16kB (UM) 11*32kB (UME) 4*64kB (UE) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10348kB [ 820.716484] Node 0 DMA32: 141*4kB (UME) 1541*8kB (U) 485*16kB (UME) 175*32kB (UE) 1*64kB (M) 1*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27212kB [ 820.743013] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 820.766485] Node 1 Normal: 479*4kB (UME) 365*8kB (UME) 79*16kB (UME) 418*32kB (UME) 217*64kB (UME) 41*128kB (ME) 68*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56020kB [ 820.782213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 820.791567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 820.817658] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 820.831922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 820.841276] 9772 total pagecache pages [ 820.845282] 0 pages in swap cache [ 820.858100] Swap cache stats: add 0, delete 0, find 0/0 [ 820.863718] Free swap = 0kB [ 820.872201] Total swap = 0kB [ 820.875340] 1965979 pages RAM [ 820.879281] 0 pages HighMem/MovableOnly [ 820.883371] 339056 pages reserved [ 820.890294] 0 pages cma reserved [ 820.893773] Out of memory: Kill process 11353 (syz-executor.3) score 1007 or sacrifice child [ 820.903218] Killed process 11353 (syz-executor.3) total-vm:75236kB, anon-rss:16568kB, file-rss:34816kB, shmem-rss:0kB [ 820.931953] oom_reaper: reaped process 11353 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:54:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 821.724973] ALSA: mixer_oss: invalid OSS volume '' [ 821.863881] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 821.881486] systemd-udevd cpuset=/ mems_allowed=0-1 [ 821.889107] CPU: 1 PID: 25806 Comm: systemd-udevd Not tainted 4.14.189-syzkaller #0 [ 821.896906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.906441] Call Trace: [ 821.909033] dump_stack+0x1b2/0x283 06:54:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 821.912743] dump_header+0x178/0x82f [ 821.916529] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 821.921613] ? ___ratelimit+0x2cd/0x522 [ 821.925573] oom_kill_process.cold+0x10/0xa69 [ 821.930056] ? lock_downgrade+0x740/0x740 [ 821.934188] out_of_memory+0x2dc/0x1190 [ 821.938158] ? oom_killer_disable+0x1c0/0x1c0 [ 821.942714] ? mutex_trylock+0x152/0x1a0 [ 821.946761] __alloc_pages_nodemask+0x23e1/0x2720 [ 821.951596] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 821.956427] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 821.961254] ? trace_hardirqs_on+0x10/0x10 [ 821.965472] ? cache_grow_begin+0x3f/0x420 [ 821.969733] cache_grow_begin+0x8f/0x420 [ 821.973827] ? mempolicy_slab_node+0x100/0x320 [ 821.978385] fallback_alloc+0x207/0x2c0 [ 821.982384] kmem_cache_alloc+0x1e5/0x3c0 [ 821.986511] getname_flags+0xc8/0x550 [ 821.990398] user_path_at_empty+0x2a/0x50 [ 821.994524] vfs_statx+0xd1/0x180 [ 821.997962] ? cp_compat_stat+0x890/0x890 [ 822.002106] ? putname+0xcd/0x110 [ 822.005537] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 822.010532] SyS_newlstat+0x83/0xe0 [ 822.014155] ? SyS_newstat+0xe0/0xe0 [ 822.017845] ? __secure_computing+0xe5/0x3e0 [ 822.022239] ? syscall_trace_enter+0x486/0xc20 [ 822.026802] ? syscall_slow_exit_work+0x560/0x560 [ 822.031642] ? do_syscall_64+0x4c/0x640 [ 822.035615] ? SyS_newstat+0xe0/0xe0 [ 822.039305] do_syscall_64+0x1d5/0x640 [ 822.043172] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 822.048337] RIP: 0033:0x7fc45fd28335 [ 822.052047] RSP: 002b:00007ffc2f5561c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 822.059733] RAX: ffffffffffffffda RBX: 000055ba871f7fe0 RCX: 00007fc45fd28335 [ 822.066978] RDX: 00007ffc2f556270 RSI: 00007ffc2f556270 RDI: 00007ffc2f5561d0 [ 822.074223] RBP: 00007ffc2f556340 R08: 0000000000000010 R09: 0000000000000090 [ 822.081488] R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffc2f556350 [ 822.088740] R13: 00007ffc2f556248 R14: 0000000000000018 R15: 000055ba871f4d40 [ 822.100466] Mem-Info: [ 822.102883] active_anon:1326038 inactive_anon:9172 isolated_anon:0 [ 822.102883] active_file:189 inactive_file:1297 isolated_file:0 [ 822.102883] unevictable:0 dirty:6 writeback:1 unstable:0 [ 822.102883] slab_reclaimable:17589 slab_unreclaimable:122657 [ 822.102883] mapped:54803 shmem:9384 pagetables:18108 bounce:0 [ 822.102883] free:25593 free_pcp:69 free_cma:0 [ 822.136557] Node 0 active_anon:1932320kB inactive_anon:36648kB active_file:1512kB inactive_file:1348kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:217912kB dirty:20kB writeback:4kB shmem:37488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1292288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 822.165523] Node 1 active_anon:3371832kB inactive_anon:40kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 822.193802] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:4816kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 822.220793] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 822.225835] Node 0 DMA32 free:41424kB min:36272kB low:45340kB high:54408kB active_anon:1927504kB inactive_anon:36648kB active_file:288kB inactive_file:516kB unevictable:0kB writepending:16kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10656kB pagetables:22100kB bounce:0kB free_pcp:740kB local_pcp:0kB free_cma:0kB [ 822.259811] lowmem_reserve[]: 0 0 0 0 0 [ 822.263816] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 822.293202] lowmem_reserve[]: 0 0 0 0 0 [ 822.297401] Node 1 Normal free:55156kB min:53612kB low:67012kB high:80412kB active_anon:3371832kB inactive_anon:40kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15744kB pagetables:50332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 822.327310] lowmem_reserve[]: 0 0 0 0 0 [ 822.331359] Node 0 DMA: 2*4kB (UE) 13*8kB (U) 10*16kB (UM) 11*32kB (UME) 4*64kB (UE) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10352kB [ 822.347257] Node 0 DMA32: 3*4kB (UME) 1539*8kB (UME) 486*16kB (UME) 205*32kB (UME) 14*64kB (M) 5*128kB (M) 4*256kB (M) 0*512kB 1*1024kB (M) 1*2048kB (M) 2*4096kB (M) = 40484kB [ 822.363162] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 822.373911] Node 1 Normal: 749*4kB (UME) 355*8kB (UME) 86*16kB (ME) 420*32kB (UME) 219*64kB (ME) 43*128kB (UME) 60*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55532kB [ 822.389621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 822.398494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 822.407119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 822.415940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 822.424554] 9478 total pagecache pages [ 822.428488] 0 pages in swap cache [ 822.431929] Swap cache stats: add 0, delete 0, find 0/0 [ 822.437368] Free swap = 0kB [ 822.440376] Total swap = 0kB [ 822.443387] 1965979 pages RAM [ 822.446527] 0 pages HighMem/MovableOnly [ 822.450491] 339056 pages reserved [ 822.453934] 0 pages cma reserved [ 822.457344] Out of memory: Kill process 11404 (syz-executor.3) score 1007 or sacrifice child [ 822.465940] Killed process 11404 (syz-executor.3) total-vm:75236kB, anon-rss:16568kB, file-rss:34816kB, shmem-rss:0kB 06:54:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x888300, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f00000002c0)) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 825.347799] NOHZ: local_softirq_pending 08 [ 826.017830] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 826.056508] systemd-udevd cpuset=/ mems_allowed=0-1 [ 826.072981] CPU: 0 PID: 3650 Comm: systemd-udevd Not tainted 4.14.189-syzkaller #0 [ 826.080703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.090057] Call Trace: [ 826.092646] dump_stack+0x1b2/0x283 [ 826.096275] dump_header+0x178/0x82f [ 826.099995] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 826.105077] ? ___ratelimit+0x2cd/0x522 [ 826.109032] oom_kill_process.cold+0x10/0xa69 [ 826.113507] ? lock_downgrade+0x740/0x740 [ 826.117637] out_of_memory+0x2dc/0x1190 [ 826.121592] ? oom_killer_disable+0x1c0/0x1c0 [ 826.126081] ? mutex_trylock+0x152/0x1a0 [ 826.130128] __alloc_pages_nodemask+0x23e1/0x2720 [ 826.134956] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 826.139776] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 826.144771] ? retint_kernel+0x2d/0x2d [ 826.148666] cache_grow_begin+0x8f/0x420 [ 826.152705] ? mempolicy_slab_node+0x100/0x320 [ 826.157265] fallback_alloc+0x207/0x2c0 [ 826.161219] kmem_cache_alloc+0x1e5/0x3c0 [ 826.165363] getname_flags+0xc8/0x550 [ 826.169231] user_path_at_empty+0x2a/0x50 [ 826.173372] vfs_statx+0xd1/0x180 [ 826.176805] ? cp_compat_stat+0x890/0x890 [ 826.180931] SyS_newlstat+0x83/0xe0 [ 826.184535] ? SyS_newstat+0xe0/0xe0 [ 826.188229] ? retint_kernel+0x2d/0x2d [ 826.192092] ? SyS_newstat+0xe0/0xe0 [ 826.195787] ? SyS_newstat+0xe0/0xe0 [ 826.199479] ? SyS_newstat+0xe0/0xe0 [ 826.203173] do_syscall_64+0x1d5/0x640 [ 826.207041] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 826.212224] RIP: 0033:0x7fc45fd28335 [ 826.215915] RSP: 002b:00007ffc2f55b1b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 826.223601] RAX: ffffffffffffffda RBX: 000055ba871f0940 RCX: 00007fc45fd28335 [ 826.230858] RDX: 00007ffc2f55b1f0 RSI: 00007ffc2f55b1f0 RDI: 000055ba871ef940 [ 826.238106] RBP: 00007ffc2f55b2b0 R08: 00007fc45ffe71f8 R09: 0000000000001010 [ 826.245353] R10: 00007fc45ffe6b58 R11: 0000000000000246 R12: 000055ba871ef940 [ 826.252615] R13: 000055ba871ef944 R14: 000055ba871ef441 R15: 000055ba871ef444 [ 826.562833] Mem-Info: [ 826.565481] active_anon:1324410 inactive_anon:9172 isolated_anon:0 [ 826.565481] active_file:131 inactive_file:178 isolated_file:35 [ 826.565481] unevictable:0 dirty:5 writeback:22 unstable:0 [ 826.565481] slab_reclaimable:17607 slab_unreclaimable:121898 [ 826.565481] mapped:53977 shmem:9384 pagetables:18095 bounce:0 [ 826.565481] free:29095 free_pcp:344 free_cma:0 [ 826.602059] Node 0 active_anon:1929272kB inactive_anon:36652kB active_file:124kB inactive_file:292kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:215208kB dirty:20kB writeback:0kB shmem:37492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1296384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 826.631080] Node 1 active_anon:3372716kB inactive_anon:36kB active_file:508kB inactive_file:388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:692kB dirty:0kB writeback:36kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 826.706683] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:4816kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 826.733381] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 826.738461] Node 0 DMA32 free:43480kB min:36272kB low:45340kB high:54408kB active_anon:1924456kB inactive_anon:36652kB active_file:0kB inactive_file:216kB unevictable:0kB writepending:128kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10624kB pagetables:22140kB bounce:0kB free_pcp:1160kB local_pcp:656kB free_cma:0kB [ 826.769554] lowmem_reserve[]: 0 0 0 0 0 [ 826.773554] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 826.809407] lowmem_reserve[]: 0 0 0 0 0 [ 826.813421] Node 1 Normal free:57744kB min:53612kB low:67012kB high:80412kB active_anon:3372768kB inactive_anon:36kB active_file:436kB inactive_file:412kB unevictable:0kB writepending:36kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15744kB pagetables:50264kB bounce:0kB free_pcp:1004kB local_pcp:680kB free_cma:0kB [ 826.846766] lowmem_reserve[]: 0 0 0 0 0 [ 826.850770] Node 0 DMA: 2*4kB (UE) 13*8kB (U) 10*16kB (UM) 11*32kB (UME) 4*64kB (UE) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10352kB [ 826.877072] Node 0 DMA32: 46*4kB (UME) 1479*8kB (UMH) 548*16kB (UMH) 225*32kB (UMEH) 26*64kB (UM) 8*128kB (UM) 3*256kB (M) 2*512kB (UM) 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 43728kB [ 826.899843] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 826.913719] Node 1 Normal: 509*4kB (UME) 364*8kB (UMEH) 152*16kB (UMEH) 456*32kB (UMEH) 225*64kB (UMEH) 44*128kB (MEH) 60*256kB (M) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 57876kB [ 826.935278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 826.951939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 826.961022] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 826.974672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 826.983652] 9505 total pagecache pages [ 826.992269] 0 pages in swap cache [ 826.996115] Swap cache stats: add 0, delete 0, find 0/0 [ 827.001839] Free swap = 0kB [ 827.004848] Total swap = 0kB [ 827.012180] 1965979 pages RAM [ 827.015637] 0 pages HighMem/MovableOnly [ 827.020011] 339056 pages reserved [ 827.023850] 0 pages cma reserved [ 827.033832] Out of memory: Kill process 25903 (syz-executor.2) score 1007 or sacrifice child 06:54:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:40 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, r1, 0x0) 06:54:40 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='('], 0x102f) dup3(r0, r1, 0x0) 06:54:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff84}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f00000002c0)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x3f, 0x401, 0x0, 0x3, 0xff, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:40 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, r1, 0x0) 06:54:40 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) ioctl$LOOP_CLR_FD(r0, 0x4c01) dup3(r0, r1, 0x0) [ 827.326963] ALSA: mixer_oss: invalid OSS volume '(' [ 827.341983] ALSA: mixer_oss: invalid OSS volume '(' [ 827.738316] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 827.791051] systemd-journal cpuset=/ mems_allowed=0-1 [ 827.808873] CPU: 1 PID: 3645 Comm: systemd-journal Not tainted 4.14.189-syzkaller #0 [ 827.816783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 827.826115] Call Trace: [ 827.828684] dump_stack+0x1b2/0x283 [ 827.832291] dump_header+0x178/0x82f [ 827.835987] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 827.841071] ? ___ratelimit+0x2cd/0x522 [ 827.845025] oom_kill_process.cold+0x10/0xa69 [ 827.849500] ? lock_downgrade+0x740/0x740 [ 827.853647] out_of_memory+0x2dc/0x1190 [ 827.857602] ? oom_killer_disable+0x1c0/0x1c0 [ 827.862078] ? mutex_trylock+0x152/0x1a0 [ 827.866153] __alloc_pages_nodemask+0x23e1/0x2720 [ 827.870988] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 827.875810] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 827.880633] ? trace_hardirqs_on+0x10/0x10 [ 827.884855] ? cache_grow_begin+0x3f/0x420 [ 827.889069] cache_grow_begin+0x8f/0x420 [ 827.893110] ? mempolicy_slab_node+0x100/0x320 [ 827.897695] fallback_alloc+0x207/0x2c0 [ 827.901666] kmem_cache_alloc+0x1e5/0x3c0 [ 827.905814] getname_flags+0xc8/0x550 [ 827.909610] do_sys_open+0x1ce/0x410 [ 827.913316] ? filp_open+0x60/0x60 [ 827.916848] ? do_syscall_64+0x4c/0x640 [ 827.921344] ? do_sys_open+0x410/0x410 [ 827.925215] do_syscall_64+0x1d5/0x640 [ 827.929094] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 827.934265] RIP: 0033:0x7f637a98085d [ 827.937957] RSP: 002b:00007fffdaee3e90 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 827.945647] RAX: ffffffffffffffda RBX: 00007fffdaee41a0 RCX: 00007f637a98085d [ 827.952897] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055de0e8329e0 [ 827.960235] RBP: 000000000000000d R08: 000000000000c0ff R09: 00000000ffffffff [ 827.967490] R10: 0000000000000069 R11: 0000000000000293 R12: 00000000ffffffff [ 827.974899] R13: 000055de0e826060 R14: 00007fffdaee4160 R15: 000055de0e829ea0 [ 827.998260] Mem-Info: [ 828.000845] active_anon:1330577 inactive_anon:9173 isolated_anon:0 [ 828.000845] active_file:670 inactive_file:601 isolated_file:64 [ 828.000845] unevictable:0 dirty:71 writeback:2 unstable:0 [ 828.000845] slab_reclaimable:17608 slab_unreclaimable:121954 [ 828.000845] mapped:54992 shmem:9384 pagetables:18142 bounce:0 [ 828.000845] free:21854 free_pcp:35 free_cma:0 [ 828.058529] Node 0 active_anon:1938668kB inactive_anon:36656kB active_file:1688kB inactive_file:1776kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:218500kB dirty:188kB writeback:8kB shmem:37496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1288192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 828.278877] Node 1 active_anon:3373440kB inactive_anon:36kB active_file:168kB inactive_file:168kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:368kB dirty:96kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 828.306916] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:4816kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 828.374979] ALSA: mixer_oss: invalid OSS volume '' [ 828.396137] ALSA: mixer_oss: invalid OSS volume '' [ 828.425545] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 828.434658] Node 0 DMA32 free:36260kB min:36272kB low:45340kB high:54408kB active_anon:1928004kB inactive_anon:36656kB active_file:1436kB inactive_file:1788kB unevictable:0kB writepending:68kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10784kB pagetables:21900kB bounce:0kB free_pcp:964kB local_pcp:416kB free_cma:0kB [ 828.596068] lowmem_reserve[]: 0 0 0 0 0 [ 828.600101] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 828.638035] lowmem_reserve[]: 0 0 0 0 0 [ 828.644043] Node 1 Normal free:56092kB min:53612kB low:67012kB high:80412kB active_anon:3373560kB inactive_anon:36kB active_file:1624kB inactive_file:1536kB unevictable:0kB writepending:12kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15808kB pagetables:50668kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 828.675556] lowmem_reserve[]: 0 0 0 0 0 [ 828.680464] Node 0 DMA: 2*4kB (UE) 13*8kB (U) 10*16kB (UM) 11*32kB (UME) 4*64kB (UE) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10352kB [ 828.696539] Node 0 DMA32: 22*4kB (UME) 1574*8kB (UM) 611*16kB (UM) 224*32kB (UME) 11*64kB (UM) 10*128kB (UM) 1*256kB (M) 1*512kB (U) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 36472kB [ 828.717115] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 828.730336] Node 1 Normal: 665*4kB (UME) 372*8kB (UME) 237*16kB (UME) 386*32kB (UME) 225*64kB (UME) 44*128kB (UME) 60*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 57684kB [ 828.751263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 828.761618] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 828.775262] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 828.785214] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 828.802759] 10643 total pagecache pages [ 828.809238] 0 pages in swap cache [ 828.813263] Swap cache stats: add 0, delete 0, find 0/0 [ 828.822099] Free swap = 0kB [ 828.825200] Total swap = 0kB [ 828.830466] 1965979 pages RAM [ 828.834351] 0 pages HighMem/MovableOnly [ 828.845424] 339056 pages reserved [ 828.849334] 0 pages cma reserved [ 828.853690] Out of memory: Kill process 11453 (syz-executor.3) score 1007 or sacrifice child [ 828.871087] Killed process 11453 (syz-executor.3) total-vm:75236kB, anon-rss:16568kB, file-rss:34816kB, shmem-rss:0kB 06:54:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:42 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, r1, 0x0) 06:54:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:42 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x102f) dup3(r0, r1, 0x0) 06:54:48 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, r1, 0x0) 06:54:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) chroot(&(0x7f0000000200)='./file0\x00') write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCCONS(r2, 0x541d) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x1, 0xfffc, 0x0, 0x9, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x878, 0x0, 0x0, 0xffffffffffffffff, 0xa, 0x0, 0x400000000000036}, 0x0, 0x0) 06:54:48 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r4}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f00000001c0), 0x0}, 0x20) ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400204) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r8}, 0x2c) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) dup(r9) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="1b961cacf51e9b3478007547e91df7b96d08e2cb4848722da183725f807c1f902cd2ad6b0cfd740d864959e6c13dad789bff82e95639cc86af072451b5736c25046b186be0b083d788d2b79403fef6365ec2ca3fb9a37d5303df065c574642eb1fc5b9a91071fd8777d11d0db613e66f1c1c0b04e5978d951d28dc49fd340f4b75dd4d847b752ac510bfc50d77d2d34852552f255802cec11dbb6c096dba6bf0a6f406639559cc6fc6f7e5aa0f208ab3af402e64b4b5e948383a2752473c4cd3751a4b50df9ed715939565010093f5d5a7532b97ab0bda250948252232717c3fc2ee251804b11316de3dad29a29d45f05c0b66935d3d9af7872addc0c4e2dfba36dd57bd459c95ee00000000000000bd6e2e061bc9ad62422a034c019031e03f7095a02b0b1ceea13b2ebe555f1f1105a0c2f3c894a7a209b6d93fdc7b2ef6497e5778d5c1e8538004766daee7e04103cd1b98774b47001372779cfec1fbdd99589fc38d4db15a651567edd94da215adf8cf5f0be3431a81f64cb2c7bcdefa2feba64e2eb0e8a9fa612788c438036a863a47530b11c19deae2e0ec226c45e2f916c9", @ANYRESOCT=r7, @ANYRESOCT=r4], 0xfffffffffffffffa) dup3(r0, r1, 0x0) 06:54:48 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, r1, 0x0) 06:54:49 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, r1, 0x0) [ 835.830034] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 835.883959] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 835.891426] CPU: 0 PID: 25993 Comm: syz-executor.4 Not tainted 4.14.189-syzkaller #0 [ 835.899310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 835.908643] Call Trace: [ 835.911212] dump_stack+0x1b2/0x283 [ 835.914821] dump_header+0x178/0x82f [ 835.918517] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 835.923714] ? ___ratelimit+0x2cd/0x522 [ 835.927675] oom_kill_process.cold+0x10/0xa69 [ 835.932154] ? lock_downgrade+0x740/0x740 [ 835.936284] out_of_memory+0x2dc/0x1190 [ 835.940243] ? oom_killer_disable+0x1c0/0x1c0 [ 835.944720] ? mutex_trylock+0x152/0x1a0 [ 835.948764] __alloc_pages_nodemask+0x23e1/0x2720 [ 835.953613] ? ____cache_alloc_node+0xf4/0x1d0 [ 835.958209] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 835.963029] ? do_raw_spin_unlock+0x164/0x220 [ 835.967525] ? _raw_spin_unlock+0x29/0x40 [ 835.971652] ? ____cache_alloc_node+0xf4/0x1d0 [ 835.976221] ? kmem_cache_alloc_node+0x38b/0x410 [ 835.980963] copy_process.part.0+0x26d/0x6f00 [ 835.985456] ? __handle_mm_fault+0x2095/0x4620 [ 835.990018] ? lock_downgrade+0x740/0x740 [ 835.994143] ? __lru_cache_add+0x178/0x250 [ 835.998357] ? do_raw_spin_unlock+0x164/0x220 [ 836.002832] ? _raw_spin_unlock+0x29/0x40 [ 836.006979] ? __cleanup_sighand+0x40/0x40 [ 836.011190] ? mark_held_locks+0xa6/0xf0 [ 836.015232] _do_fork+0x184/0xc80 [ 836.018665] ? fork_idle+0x270/0x270 [ 836.022362] ? up_read+0x17/0x30 [ 836.025707] ? __do_page_fault+0x19a/0xb50 [ 836.029950] ? do_syscall_64+0x4c/0x640 [ 836.033899] ? sys_vfork+0x20/0x20 [ 836.037418] do_syscall_64+0x1d5/0x640 [ 836.041288] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 836.046454] RIP: 0033:0x45ed39 [ 836.049622] RSP: 002b:00007ffe402d5708 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 836.057308] RAX: ffffffffffffffda RBX: 00007fb9f99ef700 RCX: 000000000045ed39 [ 836.064556] RDX: 00007fb9f99ef9d0 RSI: 00007fb9f99eedb0 RDI: 00000000003d0f00 [ 836.071820] RBP: 00007ffe402d5930 R08: 00007fb9f99ef700 R09: 00007fb9f99ef700 [ 836.079071] R10: 00007fb9f99ef9d0 R11: 0000000000000202 R12: 0000000000000000 [ 836.086320] R13: 00007ffe402d57bf R14: 00007fb9f99ef9c0 R15: 000000000078c0ec [ 836.226686] Mem-Info: [ 836.229750] active_anon:1328093 inactive_anon:9173 isolated_anon:0 [ 836.229750] active_file:481 inactive_file:525 isolated_file:32 [ 836.229750] unevictable:0 dirty:0 writeback:15 unstable:0 [ 836.229750] slab_reclaimable:17676 slab_unreclaimable:121933 [ 836.229750] mapped:54755 shmem:9384 pagetables:18078 bounce:0 [ 836.229750] free:24490 free_pcp:222 free_cma:0 [ 836.343898] Node 0 active_anon:1930272kB inactive_anon:36664kB active_file:988kB inactive_file:1288kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:217348kB dirty:0kB writeback:16kB shmem:37504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1271808kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 836.401520] Node 1 active_anon:3382100kB inactive_anon:28kB active_file:20kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:44kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 06:54:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:49 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0717648900000000000016000000140001"], 0x3}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xdc, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10582992}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1471}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8934}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0xa, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @masq={{0x9, 0x1, 'masq\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MIN={0x8}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3f}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x24000800) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r7}, 0x2c) close(r7) dup3(r0, r6, 0x0) [ 836.494516] Node 0 DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4844kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 06:54:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00), 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000200)) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 836.634223] ALSA: mixer_oss: invalid OSS volume '' [ 836.655389] ALSA: mixer_oss: invalid OSS volume '' [ 836.673021] lowmem_reserve[]: 0 2557 2557 2557 2557 06:54:50 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, r1, 0x0) [ 836.680281] Node 0 DMA32 free:40188kB min:36272kB low:45340kB high:54408kB active_anon:1916860kB inactive_anon:36664kB active_file:3004kB inactive_file:5456kB unevictable:0kB writepending:244kB present:3129332kB managed:2621252kB mlocked:0kB kernel_stack:10688kB pagetables:21960kB bounce:0kB free_pcp:1136kB local_pcp:640kB free_cma:0kB [ 836.734307] ALSA: mixer_oss: invalid OSS volume '' 06:54:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5aca63fd}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) [ 836.734993] lowmem_reserve[]: 0 0 0 0 0 [ 836.795973] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:340kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 836.816980] ALSA: mixer_oss: invalid OSS volume '' 06:54:50 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x20, 0x1, 0x800, 0xca5c57b1a8f7bd3c, 0x6, 0x8001, 0x3e6, 0x38, 0x17, 0x6, 0xbf, 0x20, 0x1, 0x6, 0x8, 0x9}, [{0x1, 0xfffff801, 0xfffffbff, 0x9, 0x80000001, 0x7ff, 0x80000000, 0x6}], "841a4e6357ad568fc636468913e3daa9fc1c02a32eb951d4f7a66cce77c60935ec1fea2bb019aa6cff9f15f9ceeea81f95bcdc53ea5f39a4f6ca3044044bac8bf063770cae8f05f4d6dc2938a85156e725918bd7c46a4deddb251cb3bf78f30b653eb08645da330e1588ad280e46c368b74d3a3f61dbe3c77d9231e4ad0a95f295ef411fc3af9aba1c30e6ea16813f6e0f7ebc17649a1a344a80c338072920f6e727b8f5d31ddb4114e1b786beba9b0a0473d01c5814d03925ea25e07542256be9df52ff3f5b201795f1c2794775c63d06c20fe4b955ae1d162e5445b2ebbff3248e98fe8224c98fd55830133cd5a6d975725b", [[], []]}, 0x34b) dup3(r0, r1, 0x0) [ 836.845647] ALSA: mixer_oss: invalid OSS volume '' [ 836.857871] ALSA: mixer_oss: invalid OSS volume '' [ 837.230006] lowmem_reserve[]: 0 0 0 0 0 [ 837.244183] Node 1 Normal free:42212kB min:53612kB low:67012kB high:80412kB active_anon:3387904kB inactive_anon:28kB active_file:956kB inactive_file:1860kB unevictable:0kB writepending:68kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:16064kB pagetables:50448kB bounce:0kB free_pcp:516kB local_pcp:360kB free_cma:0kB [ 837.312155] lowmem_reserve[]: 0 0 0 0 0 [ 837.340145] Node 0 DMA: 2*4kB (UE) 13*8kB (U) 11*16kB (UM) 11*32kB (UME) 4*64kB (UE) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 837.410097] Node 0 DMA32: 329*4kB (UME) 1248*8kB (UME) 506*16kB (UME) 166*32kB (UME) 2*64kB (UE) 3*128kB (UME) 1*256kB (M) 3*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 30084kB [ 837.468281] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 837.479305] Node 1 Normal: 553*4kB (UME) 364*8kB (UME) 41*16kB (UME) 127*32kB (UME) 227*64kB (UME) 43*128kB (ME) 61*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45492kB [ 837.525061] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 837.539900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 837.560365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 837.590300] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 837.624277] 9448 total pagecache pages [ 837.644600] 0 pages in swap cache [ 837.649396] Swap cache stats: add 0, delete 0, find 0/0 [ 837.654754] Free swap = 0kB [ 837.661317] Total swap = 0kB [ 837.664375] 1965979 pages RAM [ 837.671097] 0 pages HighMem/MovableOnly [ 837.678991] 339056 pages reserved [ 837.682514] 0 pages cma reserved [ 837.687869] Out of memory: Kill process 12653 (syz-executor.3) score 1007 or sacrifice child [ 837.698980] Killed process 12653 (syz-executor.3) total-vm:75236kB, anon-rss:16568kB, file-rss:34816kB, shmem-rss:0kB [ 837.762221] oom_reaper: reaped process 12653 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:54:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:55 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) dup3(r0, r1, 0x0) 06:54:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, 0x5, 0xffffffff) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x40000, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3fffc, 0x3, 0x0, 0x0, 0x7fffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffc, 0x0, 0x401, 0x0, 0x3, 0x8000000000, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x36}, 0x0, 0x0) 06:54:55 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x28c3, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) dup3(r0, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$netrom(r3, &(0x7f0000000180)={{0x3, @default}, [@rose, @default, @bcast, @null, @null, @bcast, @default, @default]}, &(0x7f0000000200)=0x48, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000ffe000/0x1000)=nil}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000040000827c92fe0a535839ed76420f5800ff070000"]) [ 842.057626] ------------[ cut here ]------------ [ 842.062499] WARNING: CPU: 0 PID: 26075 at sound/core/info.c:637 snd_info_get_line+0x1fd/0x2c0 [ 842.071164] Kernel panic - not syncing: panic_on_warn set ... [ 842.071164] [ 842.078527] CPU: 0 PID: 26075 Comm: syz-executor.3 Not tainted 4.14.189-syzkaller #0 [ 842.086406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.095759] Call Trace: [ 842.098347] dump_stack+0x1b2/0x283 [ 842.101957] panic+0x1f9/0x42d [ 842.105144] ? add_taint.cold+0x16/0x16 [ 842.109108] ? snd_info_get_line+0x1fd/0x2c0 [ 842.113493] ? __warn.cold+0x5/0x4b [ 842.117104] ? snd_info_get_line+0x1fd/0x2c0 [ 842.121491] __warn.cold+0x20/0x4b [ 842.125011] ? ist_end_non_atomic+0x10/0x10 [ 842.129313] ? snd_info_get_line+0x1fd/0x2c0 [ 842.133701] report_bug+0x208/0x249 [ 842.137315] do_error_trap+0x195/0x2d0 [ 842.141193] ? math_error+0x2d0/0x2d0 [ 842.144979] ? __schedule+0x893/0x1de0 [ 842.148869] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 842.153710] invalid_op+0x1b/0x40 [ 842.157162] RIP: 0010:snd_info_get_line+0x1fd/0x2c0 [ 842.162169] RSP: 0018:ffff8881be117ac8 EFLAGS: 00010216 [ 842.167526] RAX: 0000000000040000 RBX: ffff88808fea9f00 RCX: ffffc90009b12000 [ 842.174792] RDX: 000000000000007f RSI: ffffffff84eb14bd RDI: ffff88808fea9f00 [ 842.182057] RBP: dffffc0000000000 R08: ffffffff8a06ba70 R09: 0000000000000000 [ 842.189331] R10: 0000000000000000 R11: ffff888024002180 R12: dffffc0000000000 [ 842.196593] R13: 0000000000000080 R14: ffff8880943b2788 R15: ffff888216394840 [ 842.203877] ? snd_info_get_line+0x1fd/0x2c0 [ 842.208291] ? snd_info_get_line+0x1fd/0x2c0 [ 842.212699] ? __lock_acquire+0x5fc/0x3f20 [ 842.217020] snd_mixer_oss_proc_write+0xc9/0x480 [ 842.221782] ? snd_mixer_oss_notify_handler+0x8f0/0x8f0 [ 842.227143] ? futex_wake+0x116/0x3c0 [ 842.230944] ? trace_hardirqs_on+0x10/0x10 [ 842.235178] ? __lock_acquire+0x5fc/0x3f20 [ 842.239418] ? close_pdeo.part.0+0x4f/0x2c0 [ 842.243745] snd_info_text_entry_release+0xfa/0x260 [ 842.248761] ? snd_mixer_oss_notify_handler+0x8f0/0x8f0 [ 842.254123] ? snd_info_register_recursive+0x110/0x110 [ 842.259400] close_pdeo.part.0+0xdd/0x2c0 [ 842.263549] proc_reg_release+0x1fd/0x250 [ 842.268218] ? close_pdeo+0x140/0x140 [ 842.272019] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 842.278683] ? locks_remove_file+0x2cd/0x420 [ 842.283098] ? integrity_iint_find+0x113/0x140 [ 842.287677] ? ima_file_free+0xbc/0x330 [ 842.291647] ? close_pdeo+0x140/0x140 [ 842.295446] __fput+0x25f/0x7a0 [ 842.298758] task_work_run+0x11f/0x190 [ 842.302671] exit_to_usermode_loop+0x1ad/0x200 [ 842.307431] do_syscall_64+0x4a3/0x640 [ 842.311321] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 842.316510] RIP: 0033:0x45c369 [ 842.319692] RSP: 002b:00007f2f98d74c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 842.327404] RAX: 0000000000000004 RBX: 00000000000029c0 RCX: 000000000045c369 [ 842.334697] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 842.341961] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 842.349225] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 842.356514] R13: 00007ffd7fbbc71f R14: 00007f2f98d759c0 R15: 000000000078bf0c [ 842.365430] Kernel Offset: disabled [ 842.369049] Rebooting in 86400 seconds..