bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r1, 0x0, 0x0, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x1407, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x80)
fork()
mlockall(0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getaddr={0x6c, 0x16, 0x100, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x42, 0xfe}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8}, @IFA_FLAGS={0x8, 0x8, 0x40}, @IFA_FLAGS={0x8, 0x8, 0x6}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x80, 0x8, 0x2}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400d1}, 0x48010)

19:57:50 executing program 0:
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:57:50 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2473.454073] Bluetooth: hci2: command 0x040f tx timeout
[ 2473.949727] syz-executor.5 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2473.993507] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 2474.049766] CPU: 0 PID: 5026 Comm: syz-executor.5 Not tainted 4.19.202-syzkaller #0
[ 2474.057581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2474.066937] Call Trace:
[ 2474.069548]  dump_stack+0x1fc/0x2ef
[ 2474.073186]  dump_header+0x15d/0xc3f
[ 2474.076914]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2474.082026]  ? ___ratelimit+0x319/0x590
[ 2474.086001]  oom_kill_process.cold+0x10/0x692
[ 2474.090484]  ? check_preemption_disabled+0x41/0x280
[ 2474.095488]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2474.100751]  out_of_memory+0x1072/0x1390
[ 2474.105037]  ? oom_killer_disable+0x270/0x270
[ 2474.109898]  ? mutex_trylock+0x15f/0x1a0
[ 2474.114015]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2474.118900]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2474.123735]  ? __lock_acquire+0x6de/0x3ff0
[ 2474.127982]  ? mark_held_locks+0xf0/0xf0
[ 2474.132053]  alloc_pages_vma+0xf2/0x780
[ 2474.136018]  do_anonymous_page+0x7c2/0x1be0
[ 2474.140340]  ? __pte_alloc+0x340/0x340
[ 2474.144229]  ? __put_compound_page+0xc0/0xc0
[ 2474.148627]  ? mark_held_locks+0xf0/0xf0
[ 2474.152677]  __handle_mm_fault+0x227a/0x41c0
[ 2474.157076]  ? vm_insert_page+0x9c0/0x9c0
[ 2474.161221]  ? check_preemption_disabled+0x41/0x280
[ 2474.166227]  handle_mm_fault+0x436/0xb10
[ 2474.170272]  __get_user_pages+0x6f0/0x1710
[ 2474.174493]  ? follow_page_mask+0x1d00/0x1d00
[ 2474.178976]  ? check_preemption_disabled+0x41/0x280
[ 2474.183991]  populate_vma_page_range+0x200/0x290
[ 2474.188737]  __mm_populate+0x1ea/0x350
[ 2474.192613]  ? populate_vma_page_range+0x290/0x290
[ 2474.197526]  ? do_mlock+0x6b0/0x6b0
[ 2474.201137]  ? security_capable+0x8f/0xc0
[ 2474.205283]  __se_sys_mlockall+0x362/0x4e0
[ 2474.209510]  do_syscall_64+0xf9/0x620
[ 2474.213307]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2474.218489] RIP: 0033:0x4665e9
[ 2474.221662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2474.240551] RSP: 002b:00007f29fc6fb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2474.248247] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2474.255506] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2474.262762] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2474.270013] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2474.277268] R13: 00007fff2df0db0f R14: 00007f29fc6fb300 R15: 0000000000022000
[ 2474.286625] Mem-Info:
[ 2474.289285] active_anon:228445 inactive_anon:1008258 isolated_anon:0
[ 2474.289285]  active_file:17 inactive_file:0 isolated_file:0
[ 2474.289285]  unevictable:112940 dirty:14 writeback:0 unstable:0
[ 2474.289285]  slab_reclaimable:16391 slab_unreclaimable:151794
[ 2474.289285]  mapped:80878 shmem:7002 pagetables:55357 bounce:0
[ 2474.289285]  free:25025 free_pcp:0 free_cma:0
[ 2474.323476] Node 0 active_anon:725164kB inactive_anon:816048kB active_file:0kB inactive_file:4kB unevictable:200064kB isolated(anon):0kB isolated(file):0kB mapped:188844kB dirty:40kB writeback:0kB shmem:27972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1163264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2474.354214] Node 1 active_anon:188616kB inactive_anon:3216984kB active_file:88kB inactive_file:0kB unevictable:251696kB isolated(anon):0kB isolated(file):0kB mapped:134668kB dirty:16kB writeback:0kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2474.382251] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:396kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:160kB pagetables:276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2474.409548] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2474.415678] Node 0 DMA32 free:35508kB min:35996kB low:44992kB high:53988kB active_anon:724768kB inactive_anon:812676kB active_file:0kB inactive_file:4kB unevictable:199736kB writepending:40kB present:3129332kB managed:2763456kB mlocked:199736kB kernel_stack:21920kB pagetables:53836kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2474.456643] lowmem_reserve[]: 0 0 1 1 1
[ 2474.460737] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2474.492749] lowmem_reserve[]: 0 0 0 0 0
[ 2474.498843] Node 1 Normal free:53604kB min:53876kB low:67344kB high:80812kB active_anon:188616kB inactive_anon:3216984kB active_file:32kB inactive_file:0kB unevictable:251396kB writepending:16kB present:4194304kB managed:4128248kB mlocked:251396kB kernel_stack:54720kB pagetables:167316kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2474.537065] lowmem_reserve[]: 0 0 0 0 0
[ 2474.541145] Node 0 DMA: 16*4kB (M) 41*8kB (UME) 26*16kB (UM) 22*32kB (UME) 6*64kB (UME) 3*128kB (MEH) 4*256kB (MEH) 3*512kB (MEH) 2*1024kB (EH) 2*2048kB (ME) 0*4096kB = 10984kB
[ 2474.569498] Node 0 DMA32: 95*4kB (UMEH) 1573*8kB (UMEH) 1270*16kB (UMEH) 85*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36004kB
[ 2474.593767] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[ 2474.615792] Node 1 Normal: 257*4kB (UME) 53*8kB (UME) 141*16kB (UME) 475*32kB (UME) 21*64kB (UME) 14*128kB (UM) 42*256kB (UM) 33*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 53788kB
[ 2474.632246] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2474.652334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2474.663081] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2474.683238] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2474.706767] 35091 total pagecache pages
[ 2474.735876] 0 pages in swap cache
[ 2474.750683] Swap cache stats: add 0, delete 0, find 0/0
[ 2474.771947] Free swap  = 0kB
[ 2474.793097] Total swap = 0kB
[ 2474.796283] 2097051 pages RAM
[ 2474.799572] 0 pages HighMem/MovableOnly
[ 2474.803546] 369648 pages reserved
[ 2474.833187] 0 pages cma reserved
[ 2474.851500] Out of memory (oom_kill_allocating_task): Kill process 5026 (syz-executor.5) score 0 or sacrifice child
[ 2474.883118] Killed process 5024 (syz-executor.5) total-vm:93252kB, anon-rss:35188kB, file-rss:55612kB, shmem-rss:0kB
[ 2475.044183] oom_reaper: reaped process 5024 (syz-executor.5), now anon-rss:35196kB, file-rss:56572kB, shmem-rss:0kB
[ 2475.046618] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2475.081675] syz-fuzzer cpuset=/ mems_allowed=0-1
[ 2475.086542] CPU: 0 PID: 8086 Comm: syz-fuzzer Not tainted 4.19.202-syzkaller #0
[ 2475.094171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2475.103520] Call Trace:
[ 2475.106116]  dump_stack+0x1fc/0x2ef
[ 2475.109751]  dump_header+0x15d/0xc3f
[ 2475.113473]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2475.118580]  ? ___ratelimit+0x319/0x590
[ 2475.122562]  oom_kill_process.cold+0x10/0x692
[ 2475.127072]  ? check_preemption_disabled+0x41/0x280
[ 2475.132088]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2475.137372]  out_of_memory+0x1072/0x1390
[ 2475.141437]  ? oom_killer_disable+0x270/0x270
[ 2475.145964]  ? mutex_trylock+0x15f/0x1a0
[ 2475.150028]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2475.154877]  ? find_get_entry+0x4cd/0x8a0
[ 2475.159030]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2475.163897]  alloc_pages_current+0x193/0x2a0
[ 2475.168307]  filemap_fault+0x146e/0x2180
[ 2475.172383]  ext4_filemap_fault+0x84/0xb0
[ 2475.176531]  __do_fault+0x10b/0x4b0
[ 2475.180165]  __handle_mm_fault+0x273b/0x41c0
[ 2475.184575]  ? vm_insert_page+0x9c0/0x9c0
[ 2475.188730]  ? check_preemption_disabled+0x41/0x280
[ 2475.193754]  handle_mm_fault+0x436/0xb10
[ 2475.197820]  __do_page_fault+0x68e/0xd60
[ 2475.201901]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2475.206949]  ? spurious_fault+0x840/0x840
[ 2475.211098]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2475.215948]  ? page_fault+0x8/0x30
[ 2475.219498]  page_fault+0x1e/0x30
[ 2475.222952] RIP: 0033:0x46e163
[ 2475.226147] Code: Bad RIP value.
[ 2475.229503] RSP: 002b:000000c00003de80 EFLAGS: 00010206
[ 2475.234859] RAX: ffffffffffffff92 RBX: 000000c00002e000 RCX: 000000000046e163
[ 2475.242134] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001852e58
[ 2475.249400] RBP: 000000c00003dec8 R08: 0000000000000000 R09: 0000000000000000
[ 2475.256665] R10: 000000c00003deb8 R11: 0000000000000206 R12: 000000000043b6a0
[ 2475.263932] R13: 0000000000000000 R14: 000000000094d6b8 R15: 0000000000000000
[ 2475.284204] Mem-Info:
[ 2475.290290] active_anon:228445 inactive_anon:1010058 isolated_anon:0
[ 2475.290290]  active_file:4097 inactive_file:1071 isolated_file:0
[ 2475.290290]  unevictable:100248 dirty:14 writeback:0 unstable:0
[ 2475.290290]  slab_reclaimable:16394 slab_unreclaimable:151023
[ 2475.290290]  mapped:77003 shmem:7002 pagetables:55357 bounce:0
[ 2475.290290]  free:31117 free_pcp:606 free_cma:0
[ 2475.481849] Node 0 active_anon:725164kB inactive_anon:820348kB active_file:952kB inactive_file:4256kB unevictable:193420kB isolated(anon):0kB isolated(file):0kB mapped:193544kB dirty:40kB writeback:0kB shmem:27972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1163264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2475.534296] Bluetooth: hci2: command 0x0419 tx timeout
[ 2475.559432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2475.599957] Node 1 active_anon:188616kB inactive_anon:3231484kB active_file:19736kB inactive_file:6428kB unevictable:196772kB isolated(anon):0kB isolated(file):0kB mapped:119368kB dirty:16kB writeback:0kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
19:57:53 executing program 5:
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d536"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2475.756547] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:396kB inactive_anon:3372kB active_file:20kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2475.901582] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2475.922125] Node 0 DMA32 free:36404kB min:35996kB low:44992kB high:53988kB active_anon:724768kB inactive_anon:815172kB active_file:1364kB inactive_file:14140kB unevictable:187320kB writepending:120kB present:3129332kB managed:2763456kB mlocked:187392kB kernel_stack:21696kB pagetables:53624kB bounce:0kB free_pcp:1488kB local_pcp:696kB free_cma:0kB
19:57:53 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2476.049173] lowmem_reserve[]: 0 0 1 1 1
[ 2476.062709] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2476.148486] lowmem_reserve[]: 0 0 0 0 0
[ 2476.165191] Node 1 Normal free:93248kB min:53876kB low:67344kB high:80812kB active_anon:188620kB inactive_anon:3245732kB active_file:37044kB inactive_file:21300kB unevictable:115884kB writepending:108kB present:4194304kB managed:4128248kB mlocked:115956kB kernel_stack:54880kB pagetables:167420kB bounce:0kB free_pcp:1396kB local_pcp:1300kB free_cma:0kB
[ 2476.231069] lowmem_reserve[]: 0 0 0 0 0
[ 2476.236654] Node 0 DMA: 16*4kB (M) 41*8kB (UME) 26*16kB (UM) 22*32kB (UME) 6*64kB (UME) 3*128kB (MEH) 4*256kB (MEH) 3*512kB (MEH) 2*1024kB (EH) 2*2048kB (ME) 0*4096kB = 10984kB
[ 2476.254415] Node 0 DMA32: 1583*4kB (UMEH) 1658*8kB (UMEH) 1319*16kB (UMEH) 125*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44700kB
19:57:54 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r1 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = accept4$tipc(r1, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2476.270512] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[ 2476.283308] Node 1 Normal: 456*4kB (UME) 1051*8kB (UME) 1569*16kB (ME) 663*32kB (UME) 85*64kB (UME) 24*128kB (UM) 42*256kB (UM) 33*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 96808kB
[ 2476.339075] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2476.370836] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2476.392416] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
19:57:54 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2476.443585] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2476.473715] 39340 total pagecache pages
[ 2476.525307] 0 pages in swap cache
[ 2476.539079] Swap cache stats: add 0, delete 0, find 0/0
[ 2476.577858] Free swap  = 0kB
[ 2476.590027] Total swap = 0kB
[ 2476.601714] 2097051 pages RAM
[ 2476.630763] 0 pages HighMem/MovableOnly
[ 2476.641724] 369648 pages reserved
[ 2476.650124] 0 pages cma reserved
[ 2476.680920] Out of memory (oom_kill_allocating_task): Kill process 8086 (syz-fuzzer) score 0 or sacrifice child
[ 2476.743881] Killed process 4734 (syz-executor.2) total-vm:84924kB, anon-rss:60kB, file-rss:956kB, shmem-rss:0kB
[ 2476.956144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:57:54 executing program 3:
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d536"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:57:55 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2477.808607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:57:55 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r1 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = accept4$tipc(r1, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:57:55 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
fork()
mlockall(0x3)
fork()
syz_open_procfs$namespace(0x0, 0x0)

[ 2478.330858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:57:56 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:57:56 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
fork()
mlockall(0x3)
r0 = fork()
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2479.452870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:57:58 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
fork()
mlockall(0x3)
r0 = fork()
fork()
syz_open_procfs$namespace(r0, 0x0)

19:57:59 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

19:57:59 executing program 5:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r1 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = accept4$tipc(r1, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:57:59 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
fork()
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
syz_open_procfs$namespace(r0, 0x0)

19:57:59 executing program 1:
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2482.056889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2482.501002] IPVS: ftp: loaded support on port[0] = 21
[ 2482.973280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2483.934016] Bluetooth: hci2: command 0x0409 tx timeout
19:58:02 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

19:58:02 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

19:58:02 executing program 1:
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2485.388805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:58:03 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
fork()
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
syz_open_procfs$namespace(r0, 0x0)

19:58:03 executing program 5:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r1 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = accept4$tipc(r1, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2486.020265] Bluetooth: hci2: command 0x041b tx timeout
[ 2486.240475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2487.278356] syz-executor.3 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2487.372830] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 2487.377977] CPU: 0 PID: 5157 Comm: syz-executor.3 Not tainted 4.19.202-syzkaller #0
[ 2487.385859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2487.395212] Call Trace:
[ 2487.397849]  dump_stack+0x1fc/0x2ef
[ 2487.401486]  dump_header+0x15d/0xc3f
[ 2487.405215]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2487.410320]  ? ___ratelimit+0x319/0x590
[ 2487.414305]  oom_kill_process.cold+0x10/0x692
[ 2487.418799]  ? check_preemption_disabled+0x41/0x280
[ 2487.423823]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2487.429114]  out_of_memory+0x1072/0x1390
[ 2487.433184]  ? oom_killer_disable+0x270/0x270
[ 2487.437694]  ? mutex_trylock+0x15f/0x1a0
[ 2487.441763]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2487.446631]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2487.451480]  ? __lock_acquire+0x6de/0x3ff0
[ 2487.455723]  ? mark_held_locks+0xf0/0xf0
[ 2487.459799]  alloc_pages_vma+0xf2/0x780
[ 2487.463823]  do_anonymous_page+0x7c2/0x1be0
[ 2487.468154]  ? __pte_alloc+0x340/0x340
[ 2487.472041]  ? __put_compound_page+0xc0/0xc0
[ 2487.476453]  ? mark_held_locks+0xf0/0xf0
[ 2487.480522]  __handle_mm_fault+0x227a/0x41c0
[ 2487.484938]  ? vm_insert_page+0x9c0/0x9c0
[ 2487.489103]  ? check_preemption_disabled+0x41/0x280
[ 2487.494125]  handle_mm_fault+0x436/0xb10
[ 2487.498192]  __get_user_pages+0x6f0/0x1710
[ 2487.502447]  ? follow_page_mask+0x1d00/0x1d00
[ 2487.506956]  populate_vma_page_range+0x200/0x290
[ 2487.511711]  __mm_populate+0x1ea/0x350
[ 2487.515591]  ? populate_vma_page_range+0x290/0x290
[ 2487.520514]  ? do_mlock+0x6b0/0x6b0
[ 2487.524143]  ? security_capable+0x8f/0xc0
[ 2487.528285]  __se_sys_mlockall+0x362/0x4e0
[ 2487.532515]  do_syscall_64+0xf9/0x620
[ 2487.536316]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2487.541490] RIP: 0033:0x4665e9
[ 2487.544683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2487.563575] RSP: 002b:00007f2e8cd1d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2487.571266] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2487.578522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2487.585781] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2487.593047] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2487.600299] R13: 00007ffd17fd892f R14: 00007f2e8cd1d300 R15: 0000000000022000
[ 2487.689505] Mem-Info:
[ 2487.718243] active_anon:228422 inactive_anon:1035975 isolated_anon:0
[ 2487.718243]  active_file:25 inactive_file:23 isolated_file:0
[ 2487.718243]  unevictable:86249 dirty:23 writeback:6 unstable:0
[ 2487.718243]  slab_reclaimable:16548 slab_unreclaimable:150233
[ 2487.718243]  mapped:69931 shmem:7002 pagetables:55612 bounce:0
[ 2487.718243]  free:24948 free_pcp:0 free_cma:0
[ 2487.763005] Node 0 active_anon:724212kB inactive_anon:846648kB active_file:16kB inactive_file:92kB unevictable:176240kB isolated(anon):0kB isolated(file):0kB mapped:187260kB dirty:4kB writeback:0kB shmem:27968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1163264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2487.809805] Node 1 active_anon:189476kB inactive_anon:3297252kB active_file:84kB inactive_file:0kB unevictable:168756kB isolated(anon):0kB isolated(file):0kB mapped:92464kB dirty:88kB writeback:24kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2487.849411] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:396kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:160kB pagetables:276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2487.896299] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2487.901358] Node 0 DMA32 free:35444kB min:35996kB low:44992kB high:53988kB active_anon:723816kB inactive_anon:843276kB active_file:20kB inactive_file:0kB unevictable:176012kB writepending:12kB present:3129332kB managed:2763456kB mlocked:176012kB kernel_stack:21504kB pagetables:53704kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2487.958754] lowmem_reserve[]: 0 0 1 1 1
[ 2487.978541] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2488.061973] lowmem_reserve[]: 0 0 0 0 0
[ 2488.083427] Node 1 Normal free:53644kB min:53876kB low:67344kB high:80812kB active_anon:189476kB inactive_anon:3297252kB active_file:140kB inactive_file:0kB unevictable:168836kB writepending:0kB present:4194304kB managed:4128248kB mlocked:168836kB kernel_stack:55680kB pagetables:168476kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2488.114355] Bluetooth: hci2: command 0x040f tx timeout
[ 2488.121252] lowmem_reserve[]: 0 0 0 0 0
[ 2488.140575] Node 0 DMA: 6*4kB (M) 46*8kB (UME) 26*16kB (UM) 22*32kB (UME) 6*64kB (UME) 3*128kB (MEH) 4*256kB (MEH) 3*512kB (MEH) 2*1024kB (EH) 2*2048kB (ME) 0*4096kB = 10984kB
[ 2488.166431] Node 0 DMA32: 32*4kB (UMH) 806*8kB (UMH) 1376*16kB (UEH) 229*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35920kB
[ 2488.193276] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2488.213256] Node 1 Normal: 89*4kB (UME) 3*8kB (ME) 537*16kB (UME) 410*32kB (UME) 173*64kB (UME) 48*128kB (UM) 18*256kB (UM) 11*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 53644kB
[ 2488.246293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2488.255626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2488.327028] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2488.457190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2488.552255] 24138 total pagecache pages
[ 2488.594028] 0 pages in swap cache
[ 2488.597679] Swap cache stats: add 0, delete 0, find 0/0
[ 2488.678287] Free swap  = 0kB
[ 2488.681330] Total swap = 0kB
[ 2488.751945] 2097051 pages RAM
[ 2488.755164] 0 pages HighMem/MovableOnly
[ 2488.759135] 369648 pages reserved
[ 2488.762580] 0 pages cma reserved
[ 2488.866176] Out of memory (oom_kill_allocating_task): Kill process 5157 (syz-executor.3) score 0 or sacrifice child
[ 2488.964423] Killed process 5157 (syz-executor.3) total-vm:93516kB, anon-rss:35272kB, file-rss:56576kB, shmem-rss:0kB
[ 2489.044375] oom_reaper: reaped process 5157 (syz-executor.3), now anon-rss:35272kB, file-rss:56572kB, shmem-rss:0kB
[ 2489.796755] chnl_net:caif_netlink_parms(): no params data found
[ 2489.846667] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2489.864334] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2489.884254] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2489.890973] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2489.940714] device bridge_slave_1 left promiscuous mode
[ 2489.947017] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2489.978522] device bridge_slave_0 left promiscuous mode
[ 2489.984130] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2490.016691] device veth1_macvtap left promiscuous mode
[ 2490.022024] device veth0_macvtap left promiscuous mode
[ 2490.033402] device veth1_vlan left promiscuous mode
[ 2490.038472] device veth0_vlan left promiscuous mode
[ 2490.172614] Bluetooth: hci2: command 0x0419 tx timeout
[ 2494.786189] device hsr_slave_1 left promiscuous mode
[ 2494.794381] device hsr_slave_0 left promiscuous mode
[ 2494.811009] team0 (unregistering): Port device team_slave_1 removed
[ 2494.820942] team0 (unregistering): Port device team_slave_0 removed
[ 2494.831455] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 2494.841611] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 2494.878757] bond0 (unregistering): Released all slaves
[ 2495.110955] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2495.121970] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2495.131861] device bridge_slave_0 entered promiscuous mode
[ 2495.151079] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2495.158028] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2495.170948] device bridge_slave_1 entered promiscuous mode
[ 2495.200503] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 2495.215666] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 2495.249481] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 2495.261002] team0: Port device team_slave_0 added
[ 2495.271051] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 2495.280981] team0: Port device team_slave_1 added
[ 2495.314673] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2495.320940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2495.353919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2495.370711] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2495.378506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2495.410177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2495.427421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 2495.435259] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 2495.473380] device hsr_slave_0 entered promiscuous mode
[ 2495.479412] device hsr_slave_1 entered promiscuous mode
[ 2495.491630] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 2495.499581] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 2495.638080] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2495.644485] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2495.651088] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2495.657457] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2495.704146] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 2495.710232] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2495.719436] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 2495.730731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2495.738439] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2495.745836] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2495.754191] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 2495.770708] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 2495.777101] 8021q: adding VLAN 0 to HW filter on device team0
[ 2495.788112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2495.796809] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2495.803220] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2495.823320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2495.830998] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2495.837400] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2495.861657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2495.871651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2495.884010] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 2495.891243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2495.900227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2495.908400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2495.916753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2495.925408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2495.932919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2495.947752] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 2495.955994] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 2495.963616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2495.970329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2495.981460] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2496.010143] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready
[ 2496.029259] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready
[ 2496.037483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2496.048963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2496.078150] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready
[ 2496.085864] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready
[ 2496.093088] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready
[ 2496.101759] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready
[ 2496.110370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2496.118077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2496.126402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2496.134455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2496.143354] device veth0_vlan entered promiscuous mode
[ 2496.153234] device veth1_vlan entered promiscuous mode
[ 2496.159065] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready
[ 2496.168846] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready
[ 2496.180880] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
[ 2496.190423] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready
[ 2496.197405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2496.205765] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2496.213133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2496.220723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2496.230651] device veth0_macvtap entered promiscuous mode
[ 2496.237358] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
[ 2496.246227] device veth1_macvtap entered promiscuous mode
[ 2496.252707] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready
[ 2496.261140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
[ 2496.271012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
[ 2496.279922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2496.289692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2496.299058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2496.309149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2496.318418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2496.328287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2496.337642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2496.347388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2496.356916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2496.368071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2496.378279] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready
[ 2496.385609] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2496.392792] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2496.400017] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2496.407549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2496.416104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2496.426091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2496.436334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2496.445604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2496.455370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2496.464810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2496.474568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2496.483843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2496.493599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2496.502783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2496.512869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2496.523453] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
[ 2496.530332] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2496.537957] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2496.545860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2496.675122] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 2496.681503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2496.699710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2496.700709] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 2496.725362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2496.738641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2496.745961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2496.754117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2497.124355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:58:15 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

19:58:15 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

19:58:15 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
fork()
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
syz_open_procfs$namespace(r0, 0x0)

19:58:15 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

19:58:15 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="f8c00180080003000301000008000240070000000800030005000000080002000100000054e2fa4501f3e94fcb8fed41de9dd0c889c763e7505c7fd1f769cd2ae6a1db6719b8bedfaeefee870023bedc1274df26cbe6b710ed57f6ff45240435e825af05d02f600a354ab813238a963d48210c911da92959adc79dd997380c3633fc3e877275a161ea17c2b6124cc758bb3e3bc8e660aa6755c50db0b6618e00cbcef799ebc1d35b3ec8c3e9ed00b0264a669ac8cca995068dd481de560aed03630281dee7c258ea3d7416ddc570ab10be7d7b9b620db0be71f15998f0c6975a443fd9e6e97c8e3bc61e16414030ca7b34af48c1f40a9b6df00b9303e2cdb3e4d9be291bd40d32ebdc42a45293da5b8bbba5cc7095ad8a9d105070cc78c1a6d774113b5356a961c5573917a1029aa63bf2fdfc2f57ab256a4bb88ad26efc1fe63b3619bdc5c2fa481189dd001bfe3b32cd9e1c4a0650d4d140e9ea4a77f2dbbd38d98a072e46a30c8b279acc3ce8c9cfae3b1bcd497fe13d09fe695c0acd35fafa023af9b75198aac0d518a49ef09ec967330d00"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:58:15 executing program 1:
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2498.940698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2499.855155] syz-executor.4 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2499.907804] syz-executor.4 cpuset=/ mems_allowed=0-1
[ 2499.945202] CPU: 0 PID: 5449 Comm: syz-executor.4 Not tainted 4.19.202-syzkaller #0
[ 2499.953014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2499.962365] Call Trace:
[ 2499.964960]  dump_stack+0x1fc/0x2ef
[ 2499.968590]  dump_header+0x15d/0xc3f
[ 2499.972310]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2499.977424]  ? ___ratelimit+0x319/0x590
[ 2499.981402]  oom_kill_process.cold+0x10/0x692
[ 2499.985904]  ? check_preemption_disabled+0x41/0x280
[ 2499.990925]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2499.996293]  out_of_memory+0x1072/0x1390
[ 2500.000388]  ? oom_killer_disable+0x270/0x270
[ 2500.004887]  ? mutex_trylock+0x15f/0x1a0
[ 2500.008956]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2500.013921]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2500.018766]  ? __lock_acquire+0x6de/0x3ff0
[ 2500.023005]  ? mark_held_locks+0xf0/0xf0
[ 2500.027079]  alloc_pages_vma+0xf2/0x780
[ 2500.031053]  do_anonymous_page+0x7c2/0x1be0
[ 2500.035403]  ? __pte_alloc+0x340/0x340
[ 2500.039288]  ? __put_compound_page+0xc0/0xc0
[ 2500.043698]  ? mark_held_locks+0xf0/0xf0
[ 2500.047772]  __handle_mm_fault+0x227a/0x41c0
[ 2500.052190]  ? vm_insert_page+0x9c0/0x9c0
[ 2500.056359]  ? check_preemption_disabled+0x41/0x280
[ 2500.061384]  handle_mm_fault+0x436/0xb10
[ 2500.065450]  __get_user_pages+0x6f0/0x1710
[ 2500.069699]  ? follow_page_mask+0x1d00/0x1d00
[ 2500.074203]  ? check_preemption_disabled+0x41/0x280
[ 2500.079300]  populate_vma_page_range+0x200/0x290
[ 2500.084073]  __mm_populate+0x1ea/0x350
[ 2500.087957]  ? populate_vma_page_range+0x290/0x290
[ 2500.092966]  ? do_mlock+0x6b0/0x6b0
[ 2500.096592]  ? security_capable+0x8f/0xc0
[ 2500.100748]  __se_sys_mlockall+0x362/0x4e0
[ 2500.104987]  do_syscall_64+0xf9/0x620
[ 2500.110657]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2500.115845] RIP: 0033:0x4665e9
[ 2500.119029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2500.138006] RSP: 002b:00007fd5cc707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2500.145720] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2500.152987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2500.160434] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2500.167706] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2500.174976] R13: 00007fff676f580f R14: 00007fd5cc707300 R15: 0000000000022000
[ 2500.199010] Mem-Info:
[ 2500.201525] active_anon:228464 inactive_anon:1035930 isolated_anon:0
[ 2500.201525]  active_file:26 inactive_file:6 isolated_file:0
[ 2500.201525]  unevictable:88882 dirty:8 writeback:0 unstable:0
[ 2500.201525]  slab_reclaimable:16812 slab_unreclaimable:147335
[ 2500.201525]  mapped:64730 shmem:7002 pagetables:55706 bounce:0
[ 2500.201525]  free:25015 free_pcp:62 free_cma:0
[ 2500.258302] Node 0 active_anon:725280kB inactive_anon:846616kB active_file:104kB inactive_file:0kB unevictable:185732kB isolated(anon):0kB isolated(file):0kB mapped:192012kB dirty:0kB writeback:0kB shmem:27988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1163264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2500.299712] Node 1 active_anon:188576kB inactive_anon:3297104kB active_file:0kB inactive_file:24kB unevictable:169796kB isolated(anon):0kB isolated(file):0kB mapped:66908kB dirty:32kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2500.339797] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:396kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2500.380220] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2500.385626] Node 0 DMA32 free:35384kB min:35996kB low:44992kB high:53988kB active_anon:724884kB inactive_anon:843244kB active_file:104kB inactive_file:0kB unevictable:185332kB writepending:0kB present:3129332kB managed:2763456kB mlocked:185332kB kernel_stack:21984kB pagetables:54468kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
[ 2500.428951] lowmem_reserve[]: 0 0 1 1 1
[ 2500.438290] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2500.477861] lowmem_reserve[]: 0 0 0 0 0
[ 2500.482577] Node 1 Normal free:53792kB min:53876kB low:67344kB high:80812kB active_anon:188576kB inactive_anon:3297104kB active_file:0kB inactive_file:24kB unevictable:169796kB writepending:32kB present:4194304kB managed:4128248kB mlocked:169796kB kernel_stack:55200kB pagetables:168080kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2500.525789] lowmem_reserve[]: 0 0 0 0 0
[ 2500.530103] Node 0 DMA: 13*4kB (M) 46*8kB (UME) 26*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (MEH) 5*256kB (MEH) 4*512kB (MEH) 3*1024kB (MEH) 1*2048kB (M) 0*4096kB = 10884kB
[ 2500.558910] Node 0 DMA32: 3*4kB (UM) 31*8kB (M) 1607*16kB (UE) 293*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35348kB
[ 2500.585100] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2500.596175] Node 1 Normal: 98*4kB (UME) 61*8kB (UME) 487*16kB (UME) 418*32kB (UME) 174*64kB (UME) 47*128kB (UM) 19*256kB (UM) 11*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 53792kB
[ 2500.625562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2500.634812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2500.656503] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2500.665755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2500.688247] 18909 total pagecache pages
[ 2500.692635] 0 pages in swap cache
[ 2500.696372] Swap cache stats: add 0, delete 0, find 0/0
[ 2500.714475] Free swap  = 0kB
[ 2500.717776] Total swap = 0kB
[ 2500.721082] 2097051 pages RAM
[ 2500.724491] 0 pages HighMem/MovableOnly
[ 2500.728742] 369648 pages reserved
[ 2500.744566] 0 pages cma reserved
[ 2500.748224] Out of memory (oom_kill_allocating_task): Kill process 5449 (syz-executor.4) score 0 or sacrifice child
[ 2500.759205] Killed process 5446 (syz-executor.4) total-vm:93252kB, anon-rss:25644kB, file-rss:39148kB, shmem-rss:0kB
[ 2500.809388] oom_reaper: reaped process 5446 (syz-executor.4), now anon-rss:25688kB, file-rss:40192kB, shmem-rss:0kB
19:58:19 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

19:58:19 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

19:58:19 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="f8c00180080003000301000008000240070000000800030005000000080002000100000054e2fa4501f3e94fcb8fed41de9dd0c889c763e7505c7fd1f769cd2ae6a1db6719b8bedfaeefee870023bedc1274df26cbe6b710ed57f6ff45240435e825af05d02f600a354ab813238a963d48210c911da92959adc79dd997380c3633fc3e877275a161ea17c2b6124cc758bb3e3bc8e660aa6755c50db0b6618e00cbcef799ebc1d35b3ec8c3e9ed00b0264a669ac8cca995068dd481de560aed03630281dee7c258ea3d7416ddc570ab10be7d7b9b620db0be71f15998f0c6975a443fd9e6e97c8e3bc61e16414030ca7b34af48c1f40a9b6df00b9303e2cdb3e4d9be291bd40d32ebdc42a45293da5b8bbba5cc7095ad8a9d105070cc78c1a6d774113b5356a961c5573917a1029aa63bf2fdfc2f57ab256a4bb88ad26efc1fe63b3619bdc5c2fa481189dd001bfe3b32cd9e1c4a0650d4d140e9ea4a77f2dbbd38d98a072e46a30c8b279acc3ce8c9cfae3b1bcd497fe13d09fe695c0acd35fafa023af9b75198aac0d518a49ef09ec967330d00"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:58:19 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}, {&(0x7f0000000180)=""/210, 0xd2}], 0x3, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
fork()
mlockall(0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x40000)

19:58:19 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
fork()
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

19:58:20 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2502.985930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:58:21 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}, {&(0x7f0000000180)=""/210, 0xd2}], 0x3, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
fork()
mlockall(0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x40000)

19:58:21 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2504.262349] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2504.367342] syz-executor.4 cpuset=/ mems_allowed=0-1
[ 2504.414169] CPU: 0 PID: 16264 Comm: syz-executor.4 Not tainted 4.19.202-syzkaller #0
[ 2504.422074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2504.431423] Call Trace:
[ 2504.434016]  dump_stack+0x1fc/0x2ef
[ 2504.437646]  dump_header+0x15d/0xc3f
[ 2504.441362]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2504.446466]  ? ___ratelimit+0x319/0x590
[ 2504.450443]  oom_kill_process.cold+0x10/0x692
[ 2504.454941]  ? check_preemption_disabled+0x41/0x280
[ 2504.459990]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2504.465271]  out_of_memory+0x1072/0x1390
[ 2504.469336]  ? oom_killer_disable+0x270/0x270
[ 2504.473830]  ? mutex_trylock+0x15f/0x1a0
[ 2504.477889]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2504.482742]  ? find_get_entry+0x4cd/0x8a0
[ 2504.486894]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2504.491758]  alloc_pages_current+0x193/0x2a0
[ 2504.496163]  filemap_fault+0x146e/0x2180
[ 2504.500237]  ext4_filemap_fault+0x84/0xb0
[ 2504.504382]  __do_fault+0x10b/0x4b0
[ 2504.508008]  __handle_mm_fault+0x273b/0x41c0
[ 2504.512410]  ? debug_object_free+0x1cc/0x380
[ 2504.516817]  ? vm_insert_page+0x9c0/0x9c0
[ 2504.520981]  ? check_preemption_disabled+0x41/0x280
[ 2504.526003]  handle_mm_fault+0x436/0xb10
[ 2504.530069]  __do_page_fault+0x68e/0xd60
[ 2504.534132]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2504.539145]  ? spurious_fault+0x840/0x840
[ 2504.543289]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2504.548158]  ? page_fault+0x8/0x30
[ 2504.551695]  page_fault+0x1e/0x30
[ 2504.555238] RIP: 0033:0x413387
[ 2504.558428] Code: db 34 b6 d7 82 de 1b 43 48 f7 a4 24 d8 00 00 00 48 8b 05 44 20 09 01 48 69 8c 24 d0 00 00 00 e8 03 00 00 48 c1 ea 12 48 01 ca <8b> 08 48 89 d0 41 39 ce 4c 0f 45 ea 48 2b 44 24 10 48 3b 05 e1 1f
[ 2504.577328] RSP: 002b:00007fff676f5a60 EFLAGS: 00010202
[ 2504.582686] RAX: 0000001b33920000 RBX: 0000000000000804 RCX: 0000000000263540
[ 2504.589951] RDX: 0000000000263701 RSI: 00007fff676f5b30 RDI: 00007fff676f5a1c
[ 2504.597221] RBP: 00007fff676f5acc R08: 00007fff67744000 R09: 0000029f8212df20
[ 2504.604485] R10: 000d682681d76547 R11: 0000000000000001 R12: 0000000000000032
[ 2504.611749] R13: 0000000000263602 R14: 0000000000000000 R15: 00007fff676f5b30
[ 2504.835225] Mem-Info:
[ 2504.837687] active_anon:228418 inactive_anon:1045234 isolated_anon:0
[ 2504.837687]  active_file:34 inactive_file:16 isolated_file:0
[ 2504.837687]  unevictable:79213 dirty:0 writeback:14 unstable:0
[ 2504.837687]  slab_reclaimable:17000 slab_unreclaimable:147040
[ 2504.837687]  mapped:66508 shmem:7001 pagetables:55825 bounce:0
[ 2504.837687]  free:25130 free_pcp:226 free_cma:0
[ 2504.979109] Node 0 active_anon:724624kB inactive_anon:863472kB active_file:4kB inactive_file:8kB unevictable:170896kB isolated(anon):0kB isolated(file):0kB mapped:188568kB dirty:0kB writeback:0kB shmem:27976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1163264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2505.257492] Node 1 active_anon:189076kB inactive_anon:3317464kB active_file:120kB inactive_file:0kB unevictable:146156kB isolated(anon):0kB isolated(file):0kB mapped:77476kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2505.554136] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:396kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2505.687633] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2505.700950] Node 0 DMA32 free:36980kB min:35996kB low:44992kB high:53988kB active_anon:724228kB inactive_anon:863628kB active_file:4kB inactive_file:612kB unevictable:166360kB writepending:0kB present:3129332kB managed:2763456kB mlocked:166116kB kernel_stack:21568kB pagetables:53888kB bounce:0kB free_pcp:796kB local_pcp:0kB free_cma:0kB
[ 2505.844887] lowmem_reserve[]: 0 0 1 1 1
[ 2505.848903] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2506.081134] lowmem_reserve[]: 0 0 0 0 0
[ 2506.085139] Node 1 Normal free:93748kB min:53876kB low:67344kB high:80812kB active_anon:189032kB inactive_anon:3344344kB active_file:23176kB inactive_file:11240kB unevictable:42808kB writepending:12kB present:4194304kB managed:4128248kB mlocked:42564kB kernel_stack:55360kB pagetables:168620kB bounce:0kB free_pcp:1724kB local_pcp:380kB free_cma:0kB
19:58:23 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:58:23 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
fork()
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

19:58:24 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2506.248387] lowmem_reserve[]: 0 0 0 0 0
[ 2506.256928] Node 0 DMA: 13*4kB (M) 46*8kB (UME) 26*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10884kB
[ 2506.344781] Node 0 DMA32: 77*4kB (UM) 993*8kB (UE) 1623*16kB (UE) 328*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44716kB
[ 2506.443690] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2506.513993] Node 1 Normal: 1*4kB (U) 2388*8kB (UME) 1397*16kB (UME) 556*32kB (UME) 183*64kB (UME) 47*128kB (UM) 19*256kB (UM) 11*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 91572kB
[ 2506.600771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2506.651070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2506.710590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2506.778240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2506.837699] 22249 total pagecache pages
[ 2506.871049] 0 pages in swap cache
[ 2506.899942] Swap cache stats: add 0, delete 0, find 0/0
[ 2506.938993] Free swap  = 0kB
[ 2506.963074] Total swap = 0kB
[ 2506.985967] 2097051 pages RAM
[ 2507.006063] 0 pages HighMem/MovableOnly
[ 2507.025644] 369648 pages reserved
[ 2507.049326] 0 pages cma reserved
[ 2507.071169] Out of memory (oom_kill_allocating_task): Kill process 16264 (syz-executor.4) score 0 or sacrifice child
[ 2507.142117] Killed process 5490 (syz-executor.4) total-vm:93516kB, anon-rss:36900kB, file-rss:35084kB, shmem-rss:0kB
[ 2507.217505] oom_reaper: reaped process 5490 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
19:58:25 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

[ 2507.774295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:58:26 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

19:58:26 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}, {&(0x7f0000000180)=""/210, 0xd2}], 0x3, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
fork()
mlockall(0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x40000)

19:58:26 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
fork()
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

19:58:27 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:58:28 executing program 5:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:58:28 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

19:58:29 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

[ 2511.655012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:58:30 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

19:58:30 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

[ 2512.480990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:58:31 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2513.624976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:58:31 executing program 5:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:58:32 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2514.947451] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2515.026598] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 2515.088524] CPU: 0 PID: 5581 Comm: syz-executor.2 Not tainted 4.19.202-syzkaller #0
[ 2515.096352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2515.105705] Call Trace:
[ 2515.108298]  dump_stack+0x1fc/0x2ef
[ 2515.111932]  dump_header+0x15d/0xc3f
[ 2515.115656]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2515.120766]  ? ___ratelimit+0x319/0x590
[ 2515.124746]  oom_kill_process.cold+0x10/0x692
[ 2515.129250]  ? check_preemption_disabled+0x41/0x280
[ 2515.134290]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2515.139576]  out_of_memory+0x1072/0x1390
[ 2515.143652]  ? oom_killer_disable+0x270/0x270
[ 2515.148163]  ? mutex_trylock+0x15f/0x1a0
[ 2515.152236]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2515.157106]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2515.161951]  ? __lock_acquire+0x6de/0x3ff0
[ 2515.166198]  ? mark_held_locks+0xf0/0xf0
[ 2515.170270]  alloc_pages_vma+0xf2/0x780
[ 2515.174248]  do_anonymous_page+0x7c2/0x1be0
[ 2515.178602]  ? __pte_alloc+0x340/0x340
[ 2515.182489]  ? __put_compound_page+0xc0/0xc0
[ 2515.186905]  ? mark_held_locks+0xf0/0xf0
[ 2515.190974]  __handle_mm_fault+0x227a/0x41c0
[ 2515.195392]  ? vm_insert_page+0x9c0/0x9c0
[ 2515.199560]  ? check_preemption_disabled+0x41/0x280
[ 2515.204581]  handle_mm_fault+0x436/0xb10
[ 2515.208649]  __get_user_pages+0x6f0/0x1710
[ 2515.212899]  ? follow_page_mask+0x1d00/0x1d00
[ 2515.217404]  ? check_preemption_disabled+0x41/0x280
[ 2515.222435]  populate_vma_page_range+0x200/0x290
[ 2515.227199]  __mm_populate+0x1ea/0x350
[ 2515.231096]  ? populate_vma_page_range+0x290/0x290
[ 2515.236027]  ? do_mlock+0x6b0/0x6b0
[ 2515.239687]  ? security_capable+0x8f/0xc0
[ 2515.243844]  __se_sys_mlockall+0x362/0x4e0
[ 2515.248094]  do_syscall_64+0xf9/0x620
[ 2515.251906]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2515.257102] RIP: 0033:0x4665e9
[ 2515.260294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2515.279191] RSP: 002b:00007f8244f50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2515.286895] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[ 2515.294159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2515.301432] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2515.308699] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038
[ 2515.315964] R13: 00007ffc2dc04a3f R14: 00007f8244f50300 R15: 0000000000022000
[ 2515.391769] Mem-Info:
[ 2515.436808] active_anon:228566 inactive_anon:1059500 isolated_anon:0
[ 2515.436808]  active_file:464 inactive_file:1192 isolated_file:47
[ 2515.436808]  unevictable:61682 dirty:0 writeback:0 unstable:0
[ 2515.436808]  slab_reclaimable:17614 slab_unreclaimable:145536
[ 2515.436808]  mapped:60825 shmem:7001 pagetables:55920 bounce:0
[ 2515.436808]  free:26755 free_pcp:715 free_cma:0
[ 2515.582052] Node 0 active_anon:724604kB inactive_anon:875828kB active_file:124kB inactive_file:48kB unevictable:168488kB isolated(anon):0kB isolated(file):0kB mapped:188668kB dirty:0kB writeback:0kB shmem:27972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1163264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2515.655518] Node 1 active_anon:189660kB inactive_anon:3362172kB active_file:1380kB inactive_file:1444kB unevictable:87940kB isolated(anon):0kB isolated(file):60kB mapped:57432kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2515.719932] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:396kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2515.780268] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2515.792764] Node 0 DMA32 free:35364kB min:35996kB low:44992kB high:53988kB active_anon:724208kB inactive_anon:872456kB active_file:456kB inactive_file:68kB unevictable:169116kB writepending:0kB present:3129332kB managed:2763456kB mlocked:169160kB kernel_stack:21664kB pagetables:53640kB bounce:0kB free_pcp:896kB local_pcp:504kB free_cma:0kB
[ 2515.881097] lowmem_reserve[]: 0 0 1 1 1
[ 2515.889677] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2515.924289] lowmem_reserve[]: 0 0 0 0 0
[ 2515.928388] Node 1 Normal free:55900kB min:53876kB low:67344kB high:80812kB active_anon:189668kB inactive_anon:3362192kB active_file:440kB inactive_file:0kB unevictable:87708kB writepending:48kB present:4194304kB managed:4128248kB mlocked:87708kB kernel_stack:55872kB pagetables:169812kB bounce:0kB free_pcp:1464kB local_pcp:1300kB free_cma:0kB
[ 2515.968657] lowmem_reserve[]: 0 0 0 0 0
[ 2515.973282] Node 0 DMA: 13*4kB (M) 46*8kB (UME) 26*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10884kB
[ 2515.995326] Node 0 DMA32: 1*4kB (M) 1*8kB (M) 1581*16kB (U) 301*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34940kB
[ 2516.009038] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2516.030335] Node 1 Normal: 387*4kB (UM) 103*8kB (UM) 292*16kB (UME) 532*32kB (UME) 183*64kB (UME) 48*128kB (UME) 20*256kB (UME) 12*512kB (UME) 3*1024kB (U) 0*2048kB 0*4096kB = 56260kB
[ 2516.052964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2516.064728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2516.076025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2516.087458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2516.098733] 14450 total pagecache pages
[ 2516.105383] 0 pages in swap cache
[ 2516.171266] Swap cache stats: add 0, delete 0, find 0/0
[ 2516.205809] Free swap  = 0kB
[ 2516.223027] Total swap = 0kB
[ 2516.261846] 2097051 pages RAM
[ 2516.283642] 0 pages HighMem/MovableOnly
[ 2516.309765] 369648 pages reserved
19:58:34 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

19:58:34 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2516.375176] 0 pages cma reserved
[ 2516.396831] Out of memory (oom_kill_allocating_task): Kill process 5581 (syz-executor.2) score 0 or sacrifice child
[ 2516.465149] Killed process 5581 (syz-executor.2) total-vm:93516kB, anon-rss:11308kB, file-rss:40212kB, shmem-rss:0kB
[ 2516.540253] oom_reaper: reaped process 5581 (syz-executor.2), now anon-rss:11308kB, file-rss:40208kB, shmem-rss:0kB
[ 2516.920569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:58:34 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

19:58:36 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:58:36 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

19:58:36 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

[ 2518.902176] syz-executor.4 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2518.918723] syz-executor.4 cpuset=/ mems_allowed=0-1
[ 2518.938333] CPU: 1 PID: 5608 Comm: syz-executor.4 Not tainted 4.19.202-syzkaller #0
[ 2518.946141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2518.955489] Call Trace:
[ 2518.958083]  dump_stack+0x1fc/0x2ef
[ 2518.962145]  dump_header+0x15d/0xc3f
[ 2518.965861]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2518.970962]  ? ___ratelimit+0x319/0x590
[ 2518.974938]  oom_kill_process.cold+0x10/0x692
[ 2518.979434]  ? check_preemption_disabled+0x41/0x280
[ 2518.984457]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2518.989737]  out_of_memory+0x1072/0x1390
[ 2518.993803]  ? oom_killer_disable+0x270/0x270
[ 2518.998310]  ? mutex_trylock+0x15f/0x1a0
[ 2519.002376]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2519.007243]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2519.012103]  ? __lock_acquire+0x6de/0x3ff0
[ 2519.016344]  alloc_pages_vma+0xf2/0x780
[ 2519.020322]  do_anonymous_page+0x7c2/0x1be0
[ 2519.024647]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 2519.029257]  ? _raw_spin_unlock_irq+0x5a/0x80
[ 2519.033759]  ? __pte_alloc+0x340/0x340
[ 2519.037732]  ? switch_mm_irqs_off+0x764/0x1340
[ 2519.042353]  __handle_mm_fault+0x227a/0x41c0
[ 2519.046765]  ? vm_insert_page+0x9c0/0x9c0
[ 2519.050915]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 2519.056043]  ? check_preemption_disabled+0x41/0x280
[ 2519.061076]  handle_mm_fault+0x436/0xb10
[ 2519.065153]  __get_user_pages+0x6f0/0x1710
[ 2519.069400]  ? follow_page_mask+0x1d00/0x1d00
[ 2519.073902]  ? check_preemption_disabled+0x41/0x280
[ 2519.079036]  populate_vma_page_range+0x200/0x290
[ 2519.083800]  __mm_populate+0x1ea/0x350
[ 2519.087696]  ? populate_vma_page_range+0x290/0x290
[ 2519.092622]  ? do_mlock+0x6b0/0x6b0
[ 2519.096250]  ? security_capable+0x8f/0xc0
[ 2519.100405]  __se_sys_mlockall+0x362/0x4e0
[ 2519.104642]  do_syscall_64+0xf9/0x620
[ 2519.108445]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2519.113630] RIP: 0033:0x4665e9
[ 2519.116823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2519.135736] RSP: 002b:00007fd5cc707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2519.143440] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2519.150704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2519.157969] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2519.165231] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2519.172495] R13: 00007fff676f580f R14: 00007fd5cc707300 R15: 0000000000022000
[ 2519.507758] Mem-Info:
[ 2519.520993] active_anon:228654 inactive_anon:1073741 isolated_anon:0
[ 2519.520993]  active_file:35 inactive_file:0 isolated_file:0
[ 2519.520993]  unevictable:51087 dirty:0 writeback:0 unstable:0
[ 2519.520993]  slab_reclaimable:17709 slab_unreclaimable:145705
[ 2519.520993]  mapped:57841 shmem:7001 pagetables:56018 bounce:0
[ 2519.520993]  free:25033 free_pcp:132 free_cma:0
[ 2519.577368] Node 0 active_anon:724756kB inactive_anon:891900kB active_file:16kB inactive_file:60kB unevictable:156632kB isolated(anon):0kB isolated(file):0kB mapped:187024kB dirty:0kB writeback:0kB shmem:27972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1163264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2519.622841] Node 1 active_anon:189860kB inactive_anon:3403064kB active_file:124kB inactive_file:0kB unevictable:47716kB isolated(anon):0kB isolated(file):0kB mapped:44340kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2519.658527] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:396kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2519.695179] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2519.700636] Node 0 DMA32 free:35592kB min:35996kB low:44992kB high:53988kB active_anon:724360kB inactive_anon:888528kB active_file:16kB inactive_file:0kB unevictable:156596kB writepending:0kB present:3129332kB managed:2763456kB mlocked:156596kB kernel_stack:21632kB pagetables:53852kB bounce:0kB free_pcp:296kB local_pcp:4kB free_cma:0kB
[ 2519.737201] lowmem_reserve[]: 0 0 1 1 1
[ 2519.741806] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2519.777010] lowmem_reserve[]: 0 0 0 0 0
[ 2519.781570] Node 1 Normal free:53656kB min:53876kB low:67344kB high:80812kB active_anon:189860kB inactive_anon:3403064kB active_file:24kB inactive_file:24kB unevictable:47716kB writepending:0kB present:4194304kB managed:4128248kB mlocked:47716kB kernel_stack:55776kB pagetables:169944kB bounce:0kB free_pcp:380kB local_pcp:0kB free_cma:0kB
[ 2519.818596] lowmem_reserve[]: 0 0 0 0 0
[ 2519.823126] Node 0 DMA: 13*4kB (M) 46*8kB (UME) 26*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10884kB
[ 2519.847972] Node 0 DMA32: 1*4kB (M) 63*8kB (U) 1609*16kB (UE) 293*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35628kB
[ 2519.867115] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2519.878418] Node 1 Normal: 86*4kB (UM) 14*8kB (U) 478*16kB (UME) 418*32kB (UME) 184*64kB (UME) 48*128kB (UME) 20*256kB (UME) 12*512kB (UME) 3*1024kB (U) 0*2048kB 0*4096kB = 53736kB
[ 2519.904387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2519.913804] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2519.933225] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2519.942640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2519.959576] 12002 total pagecache pages
[ 2519.964079] 0 pages in swap cache
[ 2519.967932] Swap cache stats: add 0, delete 0, find 0/0
[ 2519.982350] Free swap  = 0kB
[ 2519.985745] Total swap = 0kB
[ 2519.989108] 2097051 pages RAM
[ 2519.996627] 0 pages HighMem/MovableOnly
[ 2520.009020] 369648 pages reserved
[ 2520.034527] 0 pages cma reserved
[ 2520.038010] Out of memory (oom_kill_allocating_task): Kill process 5608 (syz-executor.4) score 0 or sacrifice child
[ 2520.068294] Killed process 5608 (syz-executor.4) total-vm:93516kB, anon-rss:20352kB, file-rss:40196kB, shmem-rss:0kB
[ 2520.093192] oom_reaper: reaped process 5608 (syz-executor.4), now anon-rss:20352kB, file-rss:40192kB, shmem-rss:0kB
[ 2520.114542] syz-executor.1 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000
[ 2520.127856] oom_reaper: reaped process 5609 (syz-executor.3), now anon-rss:21692kB, file-rss:40192kB, shmem-rss:0kB
[ 2520.164978] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 2520.178142] CPU: 1 PID: 5621 Comm: syz-executor.1 Not tainted 4.19.202-syzkaller #0
[ 2520.186037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2520.195392] Call Trace:
[ 2520.197990]  dump_stack+0x1fc/0x2ef
[ 2520.201631]  dump_header+0x15d/0xc3f
[ 2520.205373]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2520.210479]  ? ___ratelimit+0x319/0x590
[ 2520.214461]  oom_kill_process.cold+0x10/0x692
[ 2520.218965]  ? check_preemption_disabled+0x41/0x280
[ 2520.223995]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2520.229276]  out_of_memory+0x1072/0x1390
[ 2520.233347]  ? oom_killer_disable+0x270/0x270
[ 2520.237849]  ? mutex_trylock+0x15f/0x1a0
[ 2520.241917]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2520.246772]  ? find_get_entry+0x4cd/0x8a0
[ 2520.250938]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2520.255809]  alloc_pages_current+0x193/0x2a0
[ 2520.260223]  filemap_fault+0x146e/0x2180
[ 2520.264301]  ext4_filemap_fault+0x84/0xb0
[ 2520.268558]  __do_fault+0x10b/0x4b0
[ 2520.272204]  __handle_mm_fault+0x273b/0x41c0
[ 2520.276624]  ? vm_insert_page+0x9c0/0x9c0
[ 2520.280796]  ? check_preemption_disabled+0x41/0x280
[ 2520.285823]  handle_mm_fault+0x436/0xb10
[ 2520.289898]  __get_user_pages+0x6f0/0x1710
[ 2520.294148]  ? follow_page_mask+0x1d00/0x1d00
[ 2520.298654]  ? check_preemption_disabled+0x41/0x280
[ 2520.303682]  populate_vma_page_range+0x200/0x290
[ 2520.308452]  __mm_populate+0x1ea/0x350
[ 2520.312355]  ? populate_vma_page_range+0x290/0x290
[ 2520.317287]  ? do_mlock+0x6b0/0x6b0
[ 2520.320917]  ? security_capable+0x8f/0xc0
[ 2520.325079]  __se_sys_mlockall+0x362/0x4e0
[ 2520.329320]  do_syscall_64+0xf9/0x620
[ 2520.333131]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2520.338322] RIP: 0033:0x4665e9
[ 2520.341518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2520.360457] RSP: 002b:00007f19158de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2520.368168] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2520.375438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2520.382714] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2520.389982] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2520.397249] R13: 00007ffcdaf8b7ef R14: 00007f19158de300 R15: 0000000000022000
[ 2520.438478] Mem-Info:
[ 2520.441034] active_anon:228645 inactive_anon:1078086 isolated_anon:0
[ 2520.441034]  active_file:126 inactive_file:379 isolated_file:0
[ 2520.441034]  unevictable:45827 dirty:0 writeback:0 unstable:0
[ 2520.441034]  slab_reclaimable:17709 slab_unreclaimable:145689
[ 2520.441034]  mapped:57315 shmem:7001 pagetables:55993 bounce:0
[ 2520.441034]  free:25266 free_pcp:277 free_cma:0
[ 2520.480855] Node 0 active_anon:724744kB inactive_anon:896092kB active_file:64kB inactive_file:452kB unevictable:151292kB isolated(anon):0kB isolated(file):0kB mapped:186320kB dirty:0kB writeback:0kB shmem:27972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1163264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2520.514294] Node 1 active_anon:189836kB inactive_anon:3416352kB active_file:280kB inactive_file:304kB unevictable:29616kB isolated(anon):0kB isolated(file):0kB mapped:43040kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2520.639970] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:396kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2520.814636] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2520.819692] Node 0 DMA32 free:35984kB min:35996kB low:44992kB high:53988kB active_anon:724348kB inactive_anon:893372kB active_file:212kB inactive_file:676kB unevictable:150488kB writepending:0kB present:3129332kB managed:2763456kB mlocked:150648kB kernel_stack:21600kB pagetables:53852kB bounce:0kB free_pcp:556kB local_pcp:284kB free_cma:0kB
[ 2520.882665] lowmem_reserve[]: 0 0 1 1 1
[ 2520.882688] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
19:58:38 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)

19:58:38 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2520.882719] lowmem_reserve[]: 0 0 0 0 0
[ 2520.882739] Node 1 Normal free:60728kB min:53876kB low:67344kB high:80812kB active_anon:189836kB inactive_anon:3411520kB active_file:3160kB inactive_file:3152kB unevictable:19612kB writepending:0kB present:4194304kB managed:4128248kB mlocked:19856kB kernel_stack:55776kB pagetables:169844kB bounce:0kB free_pcp:2736kB local_pcp:1332kB free_cma:0kB
[ 2520.882772] lowmem_reserve[]: 0 0 0 0 0
[ 2520.882792] Node 0 DMA: 13*4kB (M) 46*8kB (UME) 26*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10884kB
[ 2520.882870] Node 0 DMA32: 1*4kB (M) 77*8kB (U) 1634*16kB (UE) 291*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36076kB
[ 2520.882933] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2520.882984] Node 1 Normal: 1016*4kB (UM) 480*8kB (M) 614*16kB (UME) 348*32kB (UME) 180*64kB (UME) 48*128kB (UME) 20*256kB (UME) 12*512kB (UME) 3*1024kB (U) 0*2048kB 0*4096kB = 60864kB
[ 2520.883066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2520.883077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2520.883087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2520.883097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2520.883103] 12862 total pagecache pages
[ 2520.883117] 0 pages in swap cache
[ 2520.883126] Swap cache stats: add 0, delete 0, find 0/0
[ 2520.883131] Free swap  = 0kB
[ 2520.883136] Total swap = 0kB
[ 2520.883145] 2097051 pages RAM
[ 2520.883150] 0 pages HighMem/MovableOnly
[ 2520.883155] 369648 pages reserved
[ 2520.883160] 0 pages cma reserved
[ 2520.883172] Out of memory (oom_kill_allocating_task): Kill process 5621 (syz-executor.1) score 0 or sacrifice child
[ 2520.883223] Killed process 5618 (syz-executor.1) total-vm:93252kB, anon-rss:188kB, file-rss:36972kB, shmem-rss:0kB
[ 2520.885240] oom_reaper: reaped process 5618 (syz-executor.1), now anon-rss:232kB, file-rss:38016kB, shmem-rss:0kB
[ 2521.793432] systemd-journal invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0
[ 2521.793444] systemd-journal cpuset=/ mems_allowed=0-1
[ 2521.793470] CPU: 1 PID: 29144 Comm: systemd-journal Not tainted 4.19.202-syzkaller #0
[ 2521.793478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2521.793482] Call Trace:
[ 2521.793505]  dump_stack+0x1fc/0x2ef
[ 2521.793523]  dump_header+0x15d/0xc3f
[ 2521.793540]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2521.793552]  ? ___ratelimit+0x319/0x590
[ 2521.793570]  oom_kill_process.cold+0x10/0x692
[ 2521.793593]  ? check_preemption_disabled+0x41/0x280
[ 2521.793613]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2521.793628]  out_of_memory+0x1072/0x1390
[ 2521.793647]  ? oom_killer_disable+0x270/0x270
[ 2521.793661]  ? mutex_trylock+0x15f/0x1a0
[ 2521.793695]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2521.793723]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2521.793736]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2521.793750]  ? __put_seccomp_filter+0xa0/0xa0
[ 2521.793776]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[ 2521.793791]  ? ____cache_alloc_node+0x156/0x1d0
[ 2521.793803]  ? cache_grow_begin+0x64/0x8a0
[ 2521.793818]  cache_grow_begin+0xa4/0x8a0
[ 2521.793838]  fallback_alloc+0x213/0x2e0
[ 2521.793857]  kmem_cache_alloc+0x1e4/0x370
[ 2521.793875]  getname_flags+0xce/0x590
[ 2521.793892]  do_sys_open+0x26c/0x520
[ 2521.793906]  ? filp_open+0x70/0x70
[ 2521.793923]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 2521.793938]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2521.793951]  ? do_syscall_64+0x21/0x620
[ 2521.793967]  do_syscall_64+0xf9/0x620
19:58:40 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

19:58:40 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

[ 2521.793983]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2521.793994] RIP: 0033:0x7f6ad3018840
[ 2521.794008] Code: Bad RIP value.
[ 2521.794014] RSP: 002b:00007fff4de40698 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 2521.794027] RAX: ffffffffffffffda RBX: 00007fff4de409a0 RCX: 00007f6ad3018840
[ 2521.794035] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 0000557eda601900
[ 2521.794042] RBP: 000000000000000d R08: 000000000000c0ff R09: 00000000ffffffff
[ 2521.794050] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff
[ 2521.794057] R13: 0000557eda5fc040 R14: 00007fff4de40960 R15: 0000557eda6008a0
[ 2521.794075] Mem-Info:
[ 2521.794106] active_anon:228721 inactive_anon:1073756 isolated_anon:0
[ 2521.794106]  active_file:47 inactive_file:11 isolated_file:0
[ 2521.794106]  unevictable:49017 dirty:23 writeback:0 unstable:0
[ 2521.794106]  slab_reclaimable:17717 slab_unreclaimable:146396
[ 2521.794106]  mapped:58028 shmem:7001 pagetables:55980 bounce:0
[ 2521.794106]  free:24979 free_pcp:1244 free_cma:0
[ 2521.794132] Node 0 active_anon:724756kB inactive_anon:891904kB active_file:80kB inactive_file:32kB unevictable:157780kB isolated(anon):0kB isolated(file):0kB mapped:188612kB dirty:8kB writeback:0kB shmem:27972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1163264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2521.794157] Node 1 active_anon:190128kB inactive_anon:3403120kB active_file:108kB inactive_file:12kB unevictable:38288kB isolated(anon):0kB isolated(file):0kB mapped:43500kB dirty:84kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2521.794162] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:396kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2521.794191] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2521.794209] Node 0 DMA32 free:35532kB min:35996kB low:44992kB high:53988kB active_anon:724360kB inactive_anon:888752kB active_file:20kB inactive_file:0kB unevictable:157736kB writepending:0kB present:3129332kB managed:2763456kB mlocked:157424kB kernel_stack:21600kB pagetables:53848kB bounce:0kB free_pcp:2272kB local_pcp:1348kB free_cma:0kB
[ 2521.794237] lowmem_reserve[]: 0 0 1 1 1
[ 2521.794254] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2521.794282] lowmem_reserve[]: 0 0 0 0 0
[ 2521.794299] Node 1 Normal free:53500kB min:53876kB low:67344kB high:80812kB active_anon:189928kB inactive_anon:3403524kB active_file:456kB inactive_file:140kB unevictable:37724kB writepending:28kB present:4194304kB managed:4128248kB mlocked:37656kB kernel_stack:55744kB pagetables:169796kB bounce:0kB free_pcp:2704kB local_pcp:1268kB free_cma:0kB
[ 2521.794330] lowmem_reserve[]: 0 0 0 0 0
[ 2521.794347] Node 0 DMA: 13*4kB (M) 46*8kB (UME) 26*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10884kB
[ 2521.794422] Node 0 DMA32: 28*4kB (U) 59*8kB (UM) 1618*16kB (U) 291*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35784kB
[ 2521.794480] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2521.794527] Node 1 Normal: 95*4kB (UM) 476*8kB (UM) 660*16kB (UME) 349*32kB (UME) 173*64kB (UME) 45*128kB (UME) 18*256kB (UME) 7*512kB (ME) 3*1024kB (U) 0*2048kB 0*4096kB = 54012kB
[ 2521.794607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2521.794617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2521.794627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2521.794636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2521.794641] 12154 total pagecache pages
[ 2521.794653] 0 pages in swap cache
[ 2521.794661] Swap cache stats: add 0, delete 0, find 0/0
[ 2521.794666] Free swap  = 0kB
[ 2521.794670] Total swap = 0kB
[ 2521.794677] 2097051 pages RAM
[ 2521.794682] 0 pages HighMem/MovableOnly
[ 2521.794686] 369648 pages reserved
[ 2521.794691] 0 pages cma reserved
[ 2521.794702] Out of memory (oom_kill_allocating_task): Kill process 29144 (systemd-journal) score 0 or sacrifice child
[ 2521.794979] Killed process 29144 (systemd-journal) total-vm:46096kB, anon-rss:492kB, file-rss:0kB, shmem-rss:2692kB
[ 2521.796886] oom_reaper: reaped process 29144 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2692kB
[ 2522.258002] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2522.258010] in:imklog cpuset=/ mems_allowed=0-1
[ 2522.258080] CPU: 1 PID: 29141 Comm: in:imklog Not tainted 4.19.202-syzkaller #0
[ 2522.258086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2522.258090] Call Trace:
[ 2522.258113]  dump_stack+0x1fc/0x2ef
[ 2522.258129]  dump_header+0x15d/0xc3f
[ 2522.258145]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2522.258156]  ? ___ratelimit+0x319/0x590
[ 2522.258169]  oom_kill_process.cold+0x10/0x692
[ 2522.258184]  ? check_preemption_disabled+0x41/0x280
[ 2522.258202]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2522.258214]  out_of_memory+0x1072/0x1390
[ 2522.258232]  ? oom_killer_disable+0x270/0x270
[ 2522.258245]  ? mutex_trylock+0x15f/0x1a0
[ 2522.258261]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2522.258280]  ? find_get_entry+0x4cd/0x8a0
[ 2522.258300]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2522.258336]  alloc_pages_current+0x193/0x2a0
[ 2522.258348]  filemap_fault+0x146e/0x2180
[ 2522.258372]  ext4_filemap_fault+0x84/0xb0
[ 2522.258385]  __do_fault+0x10b/0x4b0
[ 2522.258401]  __handle_mm_fault+0x273b/0x41c0
[ 2522.258416]  ? vm_insert_page+0x9c0/0x9c0
[ 2522.258431]  ? lock_downgrade+0x720/0x720
[ 2522.258452]  ? check_preemption_disabled+0x41/0x280
[ 2522.258476]  handle_mm_fault+0x436/0xb10
[ 2522.258494]  __do_page_fault+0x68e/0xd60
[ 2522.258512]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2522.258525]  ? spurious_fault+0x840/0x840
[ 2522.258537]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2522.258552]  ? page_fault+0x8/0x30
[ 2522.258565]  page_fault+0x1e/0x30
[ 2522.258575] RIP: 0033:0x7f6c928de58e
[ 2522.258588] Code: Bad RIP value.
[ 2522.258594] RSP: 002b:00007f6c91e8e470 EFLAGS: 00010207
[ 2522.258603] RAX: 0000000000000034 RBX: 00007f6c91e8e4a0 RCX: 0000000000000000
[ 2522.258610] RDX: 0000000000000000 RSI: 00007f6c91e8e4ac RDI: 00007f6c91e8e4a0
[ 2522.258616] RBP: 00007f6c91e8e4ac R08: 00007f6c9366b940 R09: 0000000000000000
[ 2522.258623] R10: 2ce33e6c02ce33e7 R11: 0000000000000000 R12: 00007f6c91e8eda0
[ 2522.258630] R13: 00000000fffff7e7 R14: 0000000000001f9f R15: 00007f6c91e8ee2a
[ 2522.258645] Mem-Info:
[ 2522.258673] active_anon:228616 inactive_anon:1073756 isolated_anon:0
[ 2522.258673]  active_file:47 inactive_file:0 isolated_file:0
[ 2522.258673]  unevictable:49334 dirty:8 writeback:0 unstable:0
[ 2522.258673]  slab_reclaimable:17717 slab_unreclaimable:146181
[ 2522.258673]  mapped:57581 shmem:7001 pagetables:55985 bounce:0
[ 2522.258673]  free:25160 free_pcp:1284 free_cma:0
[ 2522.258697] Node 0 active_anon:724356kB inactive_anon:891904kB active_file:96kB inactive_file:4kB unevictable:158972kB isolated(anon):0kB isolated(file):0kB mapped:186864kB dirty:8kB writeback:0kB shmem:27972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1163264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2522.258720] Node 1 active_anon:190108kB inactive_anon:3403120kB active_file:92kB inactive_file:0kB unevictable:38364kB isolated(anon):0kB isolated(file):0kB mapped:43460kB dirty:24kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2522.258724] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:396kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2522.258751] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2522.258768] Node 0 DMA32 free:35972kB min:35996kB low:44992kB high:53988kB active_anon:723960kB inactive_anon:888520kB active_file:96kB inactive_file:0kB unevictable:158716kB writepending:0kB present:3129332kB managed:2763456kB mlocked:158908kB kernel_stack:21568kB pagetables:53952kB bounce:0kB free_pcp:2368kB local_pcp:1444kB free_cma:0kB
[ 2522.258796] lowmem_reserve[]: 0 0 1 1 1
[ 2522.258811] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2522.258837] lowmem_reserve[]: 0 0 0 0 0
[ 2522.258852] Node 1 Normal free:53784kB min:53876kB low:67344kB high:80812kB active_anon:190008kB inactive_anon:3403524kB active_file:92kB inactive_file:0kB unevictable:38388kB writepending:0kB present:4194304kB managed:4128248kB mlocked:38388kB kernel_stack:55744kB pagetables:169712kB bounce:0kB free_pcp:2768kB local_pcp:1296kB free_cma:0kB
[ 2522.258879] lowmem_reserve[]: 0 0 0 0 0
[ 2522.258895] Node 0 DMA: 13*4kB (M) 46*8kB (UME) 26*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10884kB
[ 2522.258961] Node 0 DMA32: 1*4kB (M) 88*8kB (U) 1620*16kB (U) 292*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35972kB
[ 2522.259011] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2522.259053] Node 1 Normal: 95*4kB (UM) 476*8kB (UM) 660*16kB (UME) 349*32kB (UME) 173*64kB (UME) 45*128kB (UME) 18*256kB (UME) 7*512kB (ME) 3*1024kB (U) 0*2048kB 0*4096kB = 54012kB
[ 2522.259122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2522.259130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2522.259139] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2522.259147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2522.259152] 12382 total pagecache pages
[ 2522.259163] 0 pages in swap cache
[ 2522.259170] Swap cache stats: add 0, delete 0, find 0/0
[ 2522.259174] Free swap  = 0kB
[ 2522.259179] Total swap = 0kB
[ 2522.259186] 2097051 pages RAM
[ 2522.259190] 0 pages HighMem/MovableOnly
[ 2522.259195] 369648 pages reserved
[ 2522.259199] 0 pages cma reserved
[ 2522.259209] Out of memory (oom_kill_allocating_task): Kill process 29141 (in:imklog) score 0 or sacrifice child
[ 2522.259277] Killed process 29111 (rsyslogd) total-vm:254332kB, anon-rss:976kB, file-rss:0kB, shmem-rss:0kB
[ 2522.314062] oom_reaper: reaped process 29111 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 2522.909165] systemd[1]: systemd-journald.service: Failed with result 'signal'.
[ 2524.613618] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart.
[ 2525.957272] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart.
[ 2530.010862] ieee802154 phy0 wpan0: encryption failed: -22
[ 2530.016466] ieee802154 phy1 wpan1: encryption failed: -22
[ 2530.376752] systemd[1]: Stopped System Logging Service.
[ 2530.451575] systemd[1]: Starting System Logging Service...
[ 2530.485701] systemd[1]: Stopped Flush Journal to Persistent Storage.
19:58:48 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

19:58:48 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

19:58:48 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

19:58:48 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

[ 2530.511177] systemd[1]: Stopping Flush Journal to Persistent Storage...
[ 2530.526205] systemd[1]: Stopped Journal Service.
[ 2530.561778] systemd[1]: Starting Journal Service...
19:58:48 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)

19:58:48 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2531.128709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:58:52 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:58:52 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

19:58:52 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)

19:58:52 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)

19:58:52 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)
r0 = fork()
ptrace$cont(0x20, r0, 0x900, 0x6)
syz_open_procfs$namespace(0x0, 0x0)

19:58:52 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)

[ 2535.689079] syz-executor.1 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2535.763303] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 2535.781375] CPU: 1 PID: 5692 Comm: syz-executor.1 Not tainted 4.19.202-syzkaller #0
[ 2535.789188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2535.798540] Call Trace:
[ 2535.801134]  dump_stack+0x1fc/0x2ef
[ 2535.804770]  dump_header+0x15d/0xc3f
[ 2535.808483]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2535.813583]  ? ___ratelimit+0x319/0x590
[ 2535.817554]  oom_kill_process.cold+0x10/0x692
[ 2535.822038]  ? check_preemption_disabled+0x41/0x280
[ 2535.827041]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2535.832317]  out_of_memory+0x1072/0x1390
[ 2535.836377]  ? oom_killer_disable+0x270/0x270
[ 2535.840875]  ? mutex_trylock+0x15f/0x1a0
[ 2535.845056]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2535.849901]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2535.854732]  ? __lock_acquire+0x6de/0x3ff0
[ 2535.858968]  ? mark_held_locks+0xf0/0xf0
[ 2535.863047]  alloc_pages_vma+0xf2/0x780
[ 2535.867017]  do_anonymous_page+0x7c2/0x1be0
[ 2535.871326]  ? __pte_alloc+0x340/0x340
[ 2535.875201]  ? __put_compound_page+0xc0/0xc0
[ 2535.879611]  ? mark_held_locks+0xf0/0xf0
[ 2535.883666]  __handle_mm_fault+0x227a/0x41c0
[ 2535.888061]  ? vm_insert_page+0x9c0/0x9c0
[ 2535.892221]  ? check_preemption_disabled+0x41/0x280
[ 2535.897224]  handle_mm_fault+0x436/0xb10
[ 2535.901287]  __get_user_pages+0x6f0/0x1710
[ 2535.905523]  ? follow_page_mask+0x1d00/0x1d00
[ 2535.910179]  ? check_preemption_disabled+0x41/0x280
[ 2535.915199]  populate_vma_page_range+0x200/0x290
[ 2535.919961]  __mm_populate+0x1ea/0x350
[ 2535.923843]  ? populate_vma_page_range+0x290/0x290
[ 2535.929101]  ? do_mlock+0x6b0/0x6b0
[ 2535.932710]  ? security_capable+0x8f/0xc0
[ 2535.936851]  __se_sys_mlockall+0x362/0x4e0
[ 2535.941084]  do_syscall_64+0xf9/0x620
[ 2535.945055]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2535.950244] RIP: 0033:0x4665e9
[ 2535.953428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2535.972333] RSP: 002b:00007f19158de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2535.980035] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2535.987306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2535.994584] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2536.001859] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2536.009114] R13: 00007ffcdaf8b7ef R14: 00007f19158de300 R15: 0000000000022000
[ 2536.021734] Mem-Info:
[ 2536.024679] active_anon:228623 inactive_anon:1081147 isolated_anon:0
[ 2536.024679]  active_file:14 inactive_file:36 isolated_file:0
[ 2536.024679]  unevictable:43204 dirty:0 writeback:0 unstable:0
[ 2536.024679]  slab_reclaimable:17797 slab_unreclaimable:145647
[ 2536.024679]  mapped:56959 shmem:7001 pagetables:56181 bounce:0
[ 2536.024679]  free:25130 free_pcp:124 free_cma:0
[ 2536.059825] Node 0 active_anon:724228kB inactive_anon:905212kB active_file:48kB inactive_file:36kB unevictable:153192kB isolated(anon):0kB isolated(file):0kB mapped:186812kB dirty:0kB writeback:0kB shmem:27968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1163264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2536.088704] Node 1 active_anon:190264kB inactive_anon:3419376kB active_file:8kB inactive_file:108kB unevictable:19624kB isolated(anon):0kB isolated(file):0kB mapped:41024kB dirty:0kB writeback:0kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2536.118100] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:396kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2536.200001] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2536.228425] Node 0 DMA32 free:35740kB min:35996kB low:44992kB high:53988kB active_anon:723832kB inactive_anon:901840kB active_file:48kB inactive_file:36kB unevictable:152992kB writepending:0kB present:3129332kB managed:2763456kB mlocked:152992kB kernel_stack:21728kB pagetables:54516kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2536.474315] lowmem_reserve[]: 0 0 1 1 1
[ 2536.506513] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2536.715100] lowmem_reserve[]: 0 0 0 0 0
[ 2536.746902] Node 1 Normal free:53844kB min:53876kB low:67344kB high:80812kB active_anon:190264kB inactive_anon:3419376kB active_file:8kB inactive_file:0kB unevictable:19824kB writepending:0kB present:4194304kB managed:4128248kB mlocked:19824kB kernel_stack:56064kB pagetables:169932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2537.022911] lowmem_reserve[]: 0 0 0 0 0
[ 2537.069186] Node 0 DMA: 13*4kB (M) 46*8kB (UME) 26*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10884kB
[ 2537.231285] Node 0 DMA32: 73*4kB (UM) 70*8kB (U) 1613*16kB (UM) 284*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35748kB
[ 2537.344912] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2537.460008] Node 1 Normal: 5*4kB (UME) 486*8kB (UME) 915*16kB (UME) 345*32kB (M) 175*64kB (UME) 44*128kB (ME) 16*256kB (M) 7*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 54100kB
[ 2537.618282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2537.627171] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2537.715342] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2537.793796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2537.857165] 11813 total pagecache pages
[ 2537.908151] 0 pages in swap cache
[ 2537.933149] Swap cache stats: add 0, delete 0, find 0/0
[ 2538.051876] Free swap  = 0kB
[ 2538.071201] Total swap = 0kB
[ 2538.080694] 2097051 pages RAM
[ 2538.090195] 0 pages HighMem/MovableOnly
[ 2538.111571] 369648 pages reserved
[ 2538.129732] 0 pages cma reserved
[ 2538.143971] Out of memory (oom_kill_allocating_task): Kill process 5692 (syz-executor.1) score 0 or sacrifice child
[ 2538.174380] Killed process 5692 (syz-executor.1) total-vm:93384kB, anon-rss:3628kB, file-rss:40196kB, shmem-rss:0kB
[ 2538.259164] oom_reaper: reaped process 5692 (syz-executor.1), now anon-rss:3628kB, file-rss:40192kB, shmem-rss:0kB
19:58:56 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)

19:58:56 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)
r0 = fork()
ptrace$cont(0x20, r0, 0x900, 0x6)
syz_open_procfs$namespace(0x0, 0x0)

19:58:56 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:58:56 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)

[ 2538.715978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2539.915037] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2540.021487] syz-fuzzer cpuset=/ mems_allowed=0-1
[ 2540.066550] CPU: 1 PID: 8086 Comm: syz-fuzzer Not tainted 4.19.202-syzkaller #0
[ 2540.074014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2540.083361] Call Trace:
[ 2540.085953]  dump_stack+0x1fc/0x2ef
[ 2540.089590]  dump_header+0x15d/0xc3f
[ 2540.093314]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2540.098417]  ? ___ratelimit+0x319/0x590
[ 2540.102396]  oom_kill_process.cold+0x10/0x692
[ 2540.106896]  ? check_preemption_disabled+0x41/0x280
[ 2540.111922]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2540.117200]  out_of_memory+0x1072/0x1390
[ 2540.121272]  ? oom_killer_disable+0x270/0x270
[ 2540.125771]  ? mutex_trylock+0x15f/0x1a0
[ 2540.129841]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2540.134689]  ? find_get_entry+0x4cd/0x8a0
[ 2540.138845]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2540.143717]  alloc_pages_current+0x193/0x2a0
[ 2540.148125]  filemap_fault+0x146e/0x2180
[ 2540.152197]  ext4_filemap_fault+0x84/0xb0
[ 2540.156342]  __do_fault+0x10b/0x4b0
[ 2540.159973]  __handle_mm_fault+0x273b/0x41c0
[ 2540.164385]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2540.169486]  ? vm_insert_page+0x9c0/0x9c0
[ 2540.173665]  ? check_preemption_disabled+0x41/0x280
[ 2540.178689]  handle_mm_fault+0x436/0xb10
[ 2540.182759]  __do_page_fault+0x68e/0xd60
[ 2540.186824]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2540.191842]  ? spurious_fault+0x840/0x840
[ 2540.195992]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2540.200842]  ? page_fault+0x8/0x30
[ 2540.204382]  page_fault+0x1e/0x30
[ 2540.207834] RIP: 0033:0x46dabd
[ 2540.211022] Code: Bad RIP value.
[ 2540.214381] RSP: 002b:000000c00003df18 EFLAGS: 00010202
[ 2540.219740] RAX: 0000000000000000 RBX: 0000000000004e20 RCX: 000000000046dabd
[ 2540.227003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c00003df18
[ 2540.234272] RBP: 000000c00003df28 R08: 000000000002afb6 R09: 000002a8f6f350a4
[ 2540.241562] R10: 0016f9a3ce57f8bf R11: 0000000000000202 R12: 000000000043b6a0
[ 2540.248829] R13: 0000000000000000 R14: 000000000094d6b8 R15: 0000000000000000
[ 2541.282520] Mem-Info:
[ 2541.285092] active_anon:228859 inactive_anon:1081149 isolated_anon:0
[ 2541.285092]  active_file:54 inactive_file:0 isolated_file:1
[ 2541.285092]  unevictable:42421 dirty:0 writeback:0 unstable:0
[ 2541.285092]  slab_reclaimable:17848 slab_unreclaimable:146345
[ 2541.285092]  mapped:56643 shmem:7001 pagetables:56204 bounce:0
[ 2541.285092]  free:25053 free_pcp:66 free_cma:0
[ 2541.320737] Node 0 active_anon:724728kB inactive_anon:905224kB active_file:212kB inactive_file:0kB unevictable:151752kB isolated(anon):0kB isolated(file):4kB mapped:184640kB dirty:0kB writeback:0kB shmem:27972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1163264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2541.349291] Node 1 active_anon:190708kB inactive_anon:3419372kB active_file:4kB inactive_file:4kB unevictable:17932kB isolated(anon):0kB isolated(file):0kB mapped:41932kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2541.376777] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:396kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2541.471081] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2541.528116] Node 0 DMA32 free:35956kB min:35996kB low:44992kB high:53988kB active_anon:724332kB inactive_anon:901852kB active_file:28kB inactive_file:12kB unevictable:151752kB writepending:0kB present:3129332kB managed:2763456kB mlocked:151752kB kernel_stack:21792kB pagetables:54868kB bounce:0kB free_pcp:312kB local_pcp:0kB free_cma:0kB
[ 2541.805141] lowmem_reserve[]: 0 0 1 1 1
[ 2541.839451] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2542.051531] lowmem_reserve[]: 0 0 0 0 0
[ 2542.055536] Node 1 Normal free:53544kB min:53876kB low:67344kB high:80812kB active_anon:190692kB inactive_anon:3419372kB active_file:4kB inactive_file:4kB unevictable:17916kB writepending:0kB present:4194304kB managed:4128248kB mlocked:17932kB kernel_stack:55744kB pagetables:169572kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB
[ 2542.167784] lowmem_reserve[]: 0 0 0 0 0
[ 2542.213151] Node 0 DMA: 13*4kB (M) 46*8kB (UME) 26*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10884kB
[ 2542.251100] Node 0 DMA32: 2*4kB (ME) 67*8kB (UME) 1649*16kB (UE) 271*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35600kB
[ 2542.286497] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2542.326625] Node 1 Normal: 50*4kB (UM) 730*8kB (UME) 919*16kB (UM) 357*32kB (UME) 168*64kB (UME) 43*128kB (UM) 16*256kB (M) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53544kB
[ 2542.416043] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2542.486352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2542.495936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2542.534603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2542.574842] 11453 total pagecache pages
[ 2542.608704] 0 pages in swap cache
[ 2542.612206] Swap cache stats: add 0, delete 0, find 0/0
[ 2542.617561] Free swap  = 0kB
[ 2542.656778] Total swap = 0kB
[ 2542.688241] 2097051 pages RAM
[ 2542.691367] 0 pages HighMem/MovableOnly
[ 2542.695334] 369648 pages reserved
[ 2542.725399] 0 pages cma reserved
[ 2542.737309] Out of memory (oom_kill_allocating_task): Kill process 8086 (syz-fuzzer) score 0 or sacrifice child
[ 2542.783221] Killed process 26176 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB
[ 2542.926044] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=-1000
[ 2542.955735] systemd-udevd cpuset=/ mems_allowed=0-1
[ 2542.964512] CPU: 0 PID: 4704 Comm: systemd-udevd Not tainted 4.19.202-syzkaller #0
[ 2542.972223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2542.982442] Call Trace:
[ 2542.985031]  dump_stack+0x1fc/0x2ef
[ 2542.988662]  dump_header+0x15d/0xc3f
[ 2542.992380]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2542.997506]  ? ___ratelimit+0x319/0x590
[ 2543.001487]  oom_kill_process.cold+0x10/0x692
[ 2543.005983]  ? lock_downgrade+0x720/0x720
[ 2543.010132]  ? check_preemption_disabled+0x41/0x280
[ 2543.015158]  out_of_memory+0x34d/0x1390
[ 2543.019136]  ? oom_killer_disable+0x270/0x270
[ 2543.023635]  ? mutex_trylock+0x15f/0x1a0
[ 2543.027702]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2543.032560]  ? find_get_entry+0x4cd/0x8a0
[ 2543.036708]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2543.041663]  alloc_pages_current+0x193/0x2a0
[ 2543.046078]  filemap_fault+0x146e/0x2180
[ 2543.050206]  ext4_filemap_fault+0x84/0xb0
[ 2543.054346]  __do_fault+0x10b/0x4b0
[ 2543.057988]  __handle_mm_fault+0x273b/0x41c0
[ 2543.062400]  ? vm_insert_page+0x9c0/0x9c0
[ 2543.066559]  ? mnt_set_expiry+0x260/0x260
[ 2543.070698]  ? check_preemption_disabled+0x41/0x280
[ 2543.075701]  handle_mm_fault+0x436/0xb10
[ 2543.079745]  __do_page_fault+0x68e/0xd60
[ 2543.083795]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2543.088792]  ? spurious_fault+0x840/0x840
[ 2543.092926]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2543.097761]  ? page_fault+0x8/0x30
[ 2543.101287]  page_fault+0x1e/0x30
[ 2543.104719] RIP: 0033:0x7f3c056c00ba
[ 2543.108417] Code: Bad RIP value.
[ 2543.111771] RSP: 002b:00007ffd49002b28 EFLAGS: 00010202
[ 2543.117114] RAX: ffffffffffffffea RBX: 000055cd7b9072d0 RCX: 00007f3c056c00ba
[ 2543.124363] RDX: 000055cd7b9072d0 RSI: 000055cd7b8fadf0 RDI: 00000000ffffff9c
[ 2543.131612] RBP: 0000000000000064 R08: 000055cd7a955670 R09: 0000000000000070
[ 2543.138859] R10: 0000000000000063 R11: 0000000000000202 R12: 000055cd7b8fadf0
[ 2543.146115] R13: 00000000ffffff9c R14: 00007ffd49002b80 R15: 0000000000000063
[ 2543.217964] Mem-Info:
[ 2543.220426] active_anon:228827 inactive_anon:1081174 isolated_anon:0
[ 2543.220426]  active_file:340 inactive_file:586 isolated_file:59
[ 2543.220426]  unevictable:40687 dirty:0 writeback:0 unstable:0
[ 2543.220426]  slab_reclaimable:17849 slab_unreclaimable:145941
[ 2543.220426]  mapped:55918 shmem:7001 pagetables:56157 bounce:0
[ 2543.220426]  free:25675 free_pcp:541 free_cma:0
[ 2543.297975] Node 0 active_anon:724616kB inactive_anon:905324kB active_file:1556kB inactive_file:3632kB unevictable:148816kB isolated(anon):0kB isolated(file):236kB mapped:185640kB dirty:0kB writeback:0kB shmem:27972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1163264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
19:59:01 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2544.187797] systemd[1]: Started System Logging Service.
[ 2544.198666] systemd-journald[5655]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing.
19:59:02 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)
r0 = fork()
ptrace$cont(0x20, r0, 0x900, 0x6)
syz_open_procfs$namespace(0x0, 0x0)

19:59:02 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
fork()
r0 = fork()
ptrace$cont(0x20, r0, 0x900, 0x6)

[ 2544.514247] Node 1 active_anon:178768kB inactive_anon:3419368kB active_file:308kB inactive_file:1672kB unevictable:13928kB isolated(anon):0kB isolated(file):0kB mapped:40972kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2544.625321] Node 0 DMA free:10940kB min:204kB low:252kB high:300kB active_anon:368kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2544.770974] lowmem_reserve[]: 0 2693 2695 2695 2695
19:59:02 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="f8c00180080003000301000008000240070000000800030005000000080002000100000054e2fa4501f3e94fcb8fed41de9dd0c889c763e7505c7fd1f769cd2ae6a1db6719b8bedfaeefee870023bedc1274df26cbe6b710ed57f6ff45240435e825af05d02f600a354ab813238a963d48210c911da92959adc79dd997380c3633fc3e877275a161ea17c2b6124cc758bb3e3bc8e660aa6755c50db0b6618e00cbcef799ebc1d35b3ec8c3e9ed00b0264a669ac8cca995068dd481de560aed03630281dee7c258ea3d7416ddc570ab10be7d7b9b620db0be71f15998f0c6975a443fd9e6e97c8e3bc61e16414030ca7b34af48c1f40a9b6df00b9303e2cdb3e4d9be291bd40d32ebdc42a45293da5b8bbba5cc7095ad8a9d105070cc78c1a6d774113b5356a961c5573917a1029aa63bf2fdfc2f57ab256a4bb88ad26efc1fe63b3619bdc5c2fa481189dd001bfe3b32cd9e1c4a0650d4d140e9ea4a77f2dbbd38d98a072e46a30c8b279acc3ce8c9cfae3b1bcd497fe13d09fe695c0acd35fafa023af9b75198aac0d518a49ef09ec967330d00"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:59:02 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)

[ 2544.811677] Node 0 DMA32 free:44844kB min:35996kB low:44992kB high:53988kB active_anon:702412kB inactive_anon:912440kB active_file:7928kB inactive_file:3616kB unevictable:153308kB writepending:52kB present:3129332kB managed:2763456kB mlocked:153144kB kernel_stack:20736kB pagetables:50800kB bounce:0kB free_pcp:2664kB local_pcp:1348kB free_cma:0kB
[ 2545.031891] lowmem_reserve[]: 0 0 1 1 1
[ 2545.037025] systemd[1]: Starting Load/Save RF Kill Switch Status...
[ 2545.049265] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
19:59:02 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)

[ 2545.302752] lowmem_reserve[]: 0 0 0 0 0
[ 2545.330419] Node 1 Normal free:66988kB min:53876kB low:67344kB high:80812kB active_anon:178656kB inactive_anon:3419372kB active_file:1304kB inactive_file:2712kB unevictable:37428kB writepending:32kB present:4194304kB managed:4128248kB mlocked:37428kB kernel_stack:51680kB pagetables:157436kB bounce:0kB free_pcp:608kB local_pcp:124kB free_cma:0kB
[ 2545.591456] lowmem_reserve[]: 0 0 0 0 0
[ 2545.615385] Node 0 DMA: 18*4kB (UM) 51*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10960kB
[ 2545.761475] Node 0 DMA32: 19*4kB (UME) 103*8kB (U) 1586*16kB (UM) 302*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35940kB
[ 2545.808855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2545.846311] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2545.917571] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2545.917616] Node 1 Normal: 1750*4kB (UM) 366*8kB (UM) 465*16kB (UM) 513*32kB (UME) 184*64kB (UME) 43*128kB (UM) 12*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54136kB
[ 2545.917684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2545.917693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2545.917702] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2545.917715] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2545.990017] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2545.996744] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2546.051253] device bridge_slave_1 left promiscuous mode
[ 2546.056852] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2546.102632] 14943 total pagecache pages
[ 2546.107113] 0 pages in swap cache
[ 2546.111138] Swap cache stats: add 0, delete 0, find 0/0
[ 2546.117107] Free swap  = 0kB
[ 2546.120665] Total swap = 0kB
[ 2546.123967] 2097051 pages RAM
[ 2546.127321] 0 pages HighMem/MovableOnly
[ 2546.132403] 369648 pages reserved
[ 2546.135858] 0 pages cma reserved
[ 2546.139289] Out of memory: Kill process 5102 (syz-executor.1) score 1010 or sacrifice child
[ 2546.148326] Killed process 5102 (syz-executor.1) total-vm:93516kB, anon-rss:36900kB, file-rss:34640kB, shmem-rss:0kB
[ 2546.169578] oom_reaper: reaped process 5102 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[ 2546.360272] kworker/u4:1 invoked oom-killer: gfp_mask=0x6142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0
[ 2546.385577] kworker/u4:1 cpuset=/ mems_allowed=0-1
[ 2546.465674] CPU: 0 PID: 5230 Comm: kworker/u4:1 Not tainted 4.19.202-syzkaller #0
[ 2546.473312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2546.482673] Workqueue: netns cleanup_net
[ 2546.486721] Call Trace:
[ 2546.489309]  dump_stack+0x1fc/0x2ef
[ 2546.492936]  dump_header+0x15d/0xc3f
[ 2546.496647]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2546.501756]  ? ___ratelimit+0x319/0x590
[ 2546.505733]  oom_kill_process.cold+0x10/0x692
[ 2546.510228]  ? lock_downgrade+0x720/0x720
[ 2546.514374]  ? check_preemption_disabled+0x41/0x280
[ 2546.519390]  out_of_memory+0x34d/0x1390
[ 2546.523365]  ? oom_killer_disable+0x270/0x270
[ 2546.527857]  ? mutex_trylock+0x15f/0x1a0
[ 2546.531919]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2546.536776]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2546.541614]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2546.546452]  ? netdev_upper_dev_unlink+0x13b/0x4f0
[ 2546.551472]  ? del_nbp+0x6be/0xd30
[ 2546.555009]  ? br_dev_delete+0x95/0x190
[ 2546.558991]  ? mark_held_locks+0xa6/0xf0
[ 2546.563051]  ? ____cache_alloc_node+0x156/0x1d0
[ 2546.567714]  ? cache_grow_begin+0x64/0x8a0
[ 2546.571950]  cache_grow_begin+0xa4/0x8a0
[ 2546.576016]  fallback_alloc+0x213/0x2e0
[ 2546.579995]  kmem_cache_alloc_node_trace+0xec/0x3b0
[ 2546.585010]  __kmalloc_node_track_caller+0x38/0x70
[ 2546.589940]  __alloc_skb+0xae/0x560
[ 2546.593568]  rtmsg_ifinfo_build_skb+0x72/0x1a0
[ 2546.598159]  rtnetlink_event+0x123/0x1d0
[ 2546.602219]  notifier_call_chain+0xc0/0x230
[ 2546.606542]  netdev_upper_dev_unlink+0x13b/0x4f0
[ 2546.611298]  ? netdev_master_upper_dev_link+0x40/0x40
[ 2546.616480]  ? mark_held_locks+0xa6/0xf0
[ 2546.620540]  ? br_vlan_enabled+0x3b/0x50
[ 2546.624594]  ? br_manage_promisc+0x258/0x4e0
[ 2546.629004]  del_nbp+0x6be/0xd30
[ 2546.632371]  br_dev_delete+0x95/0x190
[ 2546.636168]  ? unregister_netdevice_queue+0x13c/0x3e0
[ 2546.641351]  ? del_nbp+0xd30/0xd30
[ 2546.644893]  default_device_exit_batch+0x226/0x3c0
[ 2546.649821]  ? unregister_netdevice_many+0x50/0x50
[ 2546.654754]  ? do_wait_intr_irq+0x270/0x270
[ 2546.659074]  ? cfg802154_switch_netns+0x430/0x430
[ 2546.663918]  ? unregister_netdevice_many+0x50/0x50
[ 2546.668840]  ? dev_change_net_namespace+0xe00/0xe00
[ 2546.673863]  ops_exit_list+0xf9/0x150
[ 2546.677663]  cleanup_net+0x3b4/0x8b0
[ 2546.681371]  ? net_drop_ns+0x90/0x90
[ 2546.685085]  ? assoc_array_gc+0x1210/0x1260
[ 2546.689412]  process_one_work+0x864/0x1570
[ 2546.693653]  ? pwq_dec_nr_in_flight+0x2d0/0x2d0
[ 2546.698334]  worker_thread+0x64c/0x1130
[ 2546.702311]  ? __kthread_parkme+0x133/0x1e0
[ 2546.706633]  ? process_one_work+0x1570/0x1570
[ 2546.711123]  kthread+0x33f/0x460
[ 2546.714489]  ? kthread_park+0x180/0x180
[ 2546.718462]  ret_from_fork+0x24/0x30
[ 2547.417798] Mem-Info:
[ 2547.420722] active_anon:219930 inactive_anon:1083212 isolated_anon:0
[ 2547.420722]  active_file:37 inactive_file:0 isolated_file:2
[ 2547.420722]  unevictable:65817 dirty:0 writeback:0 unstable:0
[ 2547.420722]  slab_reclaimable:17927 slab_unreclaimable:144851
[ 2547.420722]  mapped:49831 shmem:9049 pagetables:52079 bounce:0
[ 2547.420722]  free:25171 free_pcp:244 free_cma:0
[ 2547.455374] Node 0 active_anon:701036kB inactive_anon:913692kB active_file:124kB inactive_file:0kB unevictable:209980kB isolated(anon):0kB isolated(file):8kB mapped:164396kB dirty:0kB writeback:0kB shmem:36172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1148928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2547.485119] Node 1 active_anon:178684kB inactive_anon:3419156kB active_file:24kB inactive_file:36kB unevictable:53288kB isolated(anon):0kB isolated(file):0kB mapped:34928kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2547.513978] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:348kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2547.561510] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2547.570704] Node 0 DMA32 free:36720kB min:35996kB low:44992kB high:53988kB active_anon:698624kB inactive_anon:920836kB active_file:1440kB inactive_file:1456kB unevictable:195372kB writepending:0kB present:3129332kB managed:2763456kB mlocked:195372kB kernel_stack:20768kB pagetables:50532kB bounce:0kB free_pcp:2112kB local_pcp:1388kB free_cma:0kB
[ 2547.649930] lowmem_reserve[]: 0 0 1 1 1
[ 2547.661143] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2547.758904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2547.880966] lowmem_reserve[]: 0 0 0 0 0
[ 2547.923367] Node 1 Normal free:62728kB min:53876kB low:67344kB high:80812kB active_anon:178176kB inactive_anon:3419156kB active_file:24kB inactive_file:1064kB unevictable:41100kB writepending:4kB present:4194304kB managed:4128248kB mlocked:41104kB kernel_stack:51584kB pagetables:157492kB bounce:0kB free_pcp:972kB local_pcp:544kB free_cma:0kB
[ 2547.967509] systemd[1]: Started Load/Save RF Kill Switch Status.
19:59:05 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

19:59:05 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2548.127413] lowmem_reserve[]: 0 0 0 0 0
[ 2548.137897] Node 0 DMA: 18*4kB (UM) 51*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10960kB
[ 2548.227801] Node 0 DMA32: 38*4kB (UM) 118*8kB (UM) 1594*16kB (UE) 309*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36488kB
[ 2548.287763] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2548.358784] Node 1 Normal: 1854*4kB (UM) 276*8kB (UM) 456*16kB (UM) 517*32kB (UME) 185*64kB (UME) 43*128kB (UM) 12*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53880kB
[ 2548.419927] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2548.457889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2548.466491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2548.517342] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2548.526039] 18496 total pagecache pages
[ 2548.547323] 0 pages in swap cache
[ 2548.550801] Swap cache stats: add 0, delete 0, find 0/0
[ 2548.556254] Free swap  = 0kB
[ 2548.567312] Total swap = 0kB
[ 2548.570431] 2097051 pages RAM
[ 2548.573530] 0 pages HighMem/MovableOnly
[ 2548.587308] 369648 pages reserved
[ 2548.590773] 0 pages cma reserved
[ 2548.594143] Out of memory: Kill process 5724 (syz-executor.1) score 1010 or sacrifice child
[ 2548.772147] device bridge_slave_0 left promiscuous mode
[ 2548.779747] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2548.829435] device veth1_macvtap left promiscuous mode
[ 2548.834758] device veth0_macvtap left promiscuous mode
[ 2548.903258] device veth1_vlan left promiscuous mode
19:59:06 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)
r0 = fork()
ptrace$cont(0x20, r0, 0x900, 0x6)
syz_open_procfs$namespace(0x0, 0x0)

[ 2548.966128] device veth0_vlan left promiscuous mode
[ 2549.543434] systemd[1]: Started Journal Service.
[ 2549.768236] device hsr_slave_1 left promiscuous mode
[ 2549.826476] device hsr_slave_0 left promiscuous mode
[ 2549.935465] team0 (unregistering): Port device team_slave_1 removed
[ 2549.977694] team0 (unregistering): Port device team_slave_0 removed
[ 2550.060535] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 2550.111437] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 2550.330060] bond0 (unregistering): Released all slaves
19:59:08 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
fork()
r0 = fork()
ptrace$cont(0x20, r0, 0x900, 0x6)

19:59:08 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:59:09 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
fork()
syz_open_procfs$namespace(r0, 0x0)

19:59:09 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2552.894236] syz-executor.4 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2552.926514] syz-executor.4 cpuset=/ mems_allowed=0-1
[ 2553.034539] CPU: 0 PID: 5794 Comm: syz-executor.4 Not tainted 4.19.202-syzkaller #0
[ 2553.042355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2553.051703] Call Trace:
[ 2553.054297]  dump_stack+0x1fc/0x2ef
[ 2553.057935]  dump_header+0x15d/0xc3f
[ 2553.061650]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2553.066750]  ? ___ratelimit+0x319/0x590
[ 2553.070732]  oom_kill_process.cold+0x10/0x692
[ 2553.075228]  ? check_preemption_disabled+0x41/0x280
[ 2553.080252]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2553.085539]  out_of_memory+0x1072/0x1390
[ 2553.089605]  ? oom_killer_disable+0x270/0x270
[ 2553.094110]  ? mutex_trylock+0x15f/0x1a0
[ 2553.098176]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2553.103054]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2553.107908]  ? mark_held_locks+0xf0/0xf0
[ 2553.111973]  ? set_next_entity+0xb52/0x1dc0
[ 2553.116293]  ? pick_next_entity+0x27e/0x580
[ 2553.120616]  alloc_pages_vma+0xf2/0x780
[ 2553.124597]  do_anonymous_page+0x7c2/0x1be0
[ 2553.129012]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 2553.133617]  ? __pte_alloc+0x340/0x340
[ 2553.137591]  ? finish_task_switch+0x146/0x760
[ 2553.142084]  ? finish_task_switch+0x118/0x760
[ 2553.146587]  ? mark_held_locks+0xf0/0xf0
[ 2553.150654]  __handle_mm_fault+0x227a/0x41c0
[ 2553.155154]  ? vm_insert_page+0x9c0/0x9c0
[ 2553.159326]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2553.164095]  ? check_preemption_disabled+0x41/0x280
[ 2553.169116]  handle_mm_fault+0x436/0xb10
[ 2553.173184]  __get_user_pages+0x6f0/0x1710
[ 2553.177431]  ? follow_page_mask+0x1d00/0x1d00
[ 2553.181929]  ? __fdget+0x1a0/0x230
[ 2553.185483]  populate_vma_page_range+0x200/0x290
[ 2553.190244]  __mm_populate+0x1ea/0x350
[ 2553.194131]  ? populate_vma_page_range+0x290/0x290
[ 2553.199055]  ? do_mlock+0x6b0/0x6b0
[ 2553.202678]  ? security_capable+0x8f/0xc0
[ 2553.206831]  __se_sys_mlockall+0x362/0x4e0
[ 2553.211083]  do_syscall_64+0xf9/0x620
[ 2553.214890]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2553.220079] RIP: 0033:0x4665e9
[ 2553.223271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2553.242174] RSP: 002b:00007fd5cc707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2553.249972] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2553.257240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2553.264507] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2553.271777] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2553.279048] R13: 00007fff676f580f R14: 00007fd5cc707300 R15: 0000000000022000
[ 2554.050825] IPVS: ftp: loaded support on port[0] = 21
[ 2554.172711] Mem-Info:
[ 2554.175197] active_anon:219107 inactive_anon:1090300 isolated_anon:0
[ 2554.175197]  active_file:431 inactive_file:540 isolated_file:8
[ 2554.175197]  unevictable:47578 dirty:0 writeback:0 unstable:0
[ 2554.175197]  slab_reclaimable:18140 slab_unreclaimable:144833
[ 2554.175197]  mapped:56900 shmem:9041 pagetables:52040 bounce:0
[ 2554.175197]  free:26578 free_pcp:1001 free_cma:0
[ 2554.263687] Node 0 active_anon:698744kB inactive_anon:933416kB active_file:2144kB inactive_file:1644kB unevictable:177588kB isolated(anon):0kB isolated(file):128kB mapped:180932kB dirty:0kB writeback:0kB shmem:36136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1144832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2554.373495] Node 1 active_anon:177684kB inactive_anon:3427784kB active_file:596kB inactive_file:592kB unevictable:18524kB isolated(anon):0kB isolated(file):0kB mapped:47368kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2554.440175] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:348kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2554.545173] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2554.560245] Node 0 DMA32 free:36084kB min:35996kB low:44992kB high:53988kB active_anon:698396kB inactive_anon:930544kB active_file:892kB inactive_file:780kB unevictable:176872kB writepending:0kB present:3129332kB managed:2763456kB mlocked:177084kB kernel_stack:20640kB pagetables:50520kB bounce:0kB free_pcp:2560kB local_pcp:1400kB free_cma:0kB
[ 2554.631732] lowmem_reserve[]: 0 0 1 1 1
[ 2554.683144] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2554.812941] lowmem_reserve[]: 0 0 0 0 0
[ 2554.822645] Node 1 Normal free:53508kB min:53876kB low:67344kB high:80812kB active_anon:177684kB inactive_anon:3428188kB active_file:0kB inactive_file:732kB unevictable:20628kB writepending:0kB present:4194304kB managed:4128248kB mlocked:20376kB kernel_stack:51584kB pagetables:157384kB bounce:0kB free_pcp:296kB local_pcp:144kB free_cma:0kB
[ 2555.050374] lowmem_reserve[]: 0 0 0 0 0
[ 2555.095194] Node 0 DMA: 18*4kB (UM) 51*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10960kB
[ 2555.180125] syz-executor.5: page allocation failure: order:4, mode:0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null)
[ 2555.236768] Node 0 DMA32: 70*4kB (UME) 43*8kB (UME) 1590*16kB (UE) 320*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36304kB
[ 2555.251596] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 2555.276804] CPU: 1 PID: 5787 Comm: syz-executor.5 Not tainted 4.19.202-syzkaller #0
[ 2555.284619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2555.293972] Call Trace:
[ 2555.296579]  dump_stack+0x1fc/0x2ef
[ 2555.300213]  warn_alloc.cold+0x7b/0x18f
[ 2555.304312]  ? zone_watermark_ok_safe+0x260/0x260
[ 2555.309173]  ? __zone_watermark_ok+0x300/0x300
[ 2555.313767]  __alloc_pages_nodemask+0x232f/0x2890
[ 2555.318629]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2555.323468]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2555.328314]  ? lock_acquire+0x170/0x3c0
[ 2555.332293]  ? mark_held_locks+0xf0/0xf0
[ 2555.336358]  ? tee_netdev_event+0x412/0x5b0
[ 2555.340689]  ? mark_held_locks+0xa6/0xf0
[ 2555.344759]  ? ____cache_alloc_node+0x156/0x1d0
[ 2555.349427]  ? cache_grow_begin+0x64/0x8a0
[ 2555.353668]  cache_grow_begin+0xa4/0x8a0
[ 2555.357731]  fallback_alloc+0x213/0x2e0
[ 2555.361706]  kmem_cache_alloc_trace+0x1f1/0x380
[ 2555.366374]  can_notifier+0x21b/0x330
[ 2555.370181]  notifier_call_chain+0xc0/0x230
[ 2555.374526]  register_netdevice+0xdd2/0x10f0
[ 2555.378953]  ? unregister_netdev+0x20/0x20
[ 2555.383198]  ? rtnl_create_link+0x145/0xa40
[ 2555.387511]  rtnl_newlink+0x13b5/0x15c0
[ 2555.391481]  ? rtnl_getlink+0x620/0x620
[ 2555.395457]  ? __lock_acquire+0x6de/0x3ff0
[ 2555.399685]  ? get_reg+0x1f0/0x1f0
[ 2555.403222]  ? unwind_next_frame+0xeee/0x1400
[ 2555.407704]  ? mark_held_locks+0xf0/0xf0
[ 2555.411758]  ? unwind_next_frame+0xeee/0x1400
[ 2555.416252]  ? __save_stack_trace+0x72/0x190
[ 2555.420649]  ? deref_stack_reg+0x134/0x1d0
[ 2555.424870]  ? get_reg+0x176/0x1f0
[ 2555.428402]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[ 2555.434273]  ? deref_stack_reg+0x1d0/0x1d0
[ 2555.438494]  ? is_bpf_text_address+0xd5/0x1b0
[ 2555.442982]  ? __lock_acquire+0x6de/0x3ff0
[ 2555.447214]  ? __lock_acquire+0x6de/0x3ff0
[ 2555.451444]  ? __lock_acquire+0x6de/0x3ff0
[ 2555.455671]  ? mark_held_locks+0xf0/0xf0
[ 2555.459718]  ? get_reg+0x1f0/0x1f0
[ 2555.463247]  ? unwind_next_frame+0xeee/0x1400
[ 2555.467754]  ? mutex_trylock+0x1a0/0x1a0
[ 2555.471816]  ? rtnl_getlink+0x620/0x620
[ 2555.475799]  rtnetlink_rcv_msg+0x453/0xb80
[ 2555.480025]  ? rtnl_calcit.isra.0+0x430/0x430
[ 2555.484684]  ? __netlink_lookup+0x3fc/0x730
[ 2555.488998]  ? lock_downgrade+0x720/0x720
[ 2555.493133]  ? check_preemption_disabled+0x41/0x280
[ 2555.498155]  netlink_rcv_skb+0x160/0x440
[ 2555.502209]  ? rtnl_calcit.isra.0+0x430/0x430
[ 2555.506692]  ? netlink_ack+0xae0/0xae0
[ 2555.510577]  netlink_unicast+0x4d5/0x690
[ 2555.514629]  ? netlink_sendskb+0x110/0x110
[ 2555.518852]  ? _copy_from_iter_full+0x229/0x7c0
[ 2555.523516]  ? __phys_addr_symbol+0x2c/0x70
[ 2555.527836]  ? __check_object_size+0x17b/0x3e0
[ 2555.532404]  netlink_sendmsg+0x6bb/0xc40
[ 2555.536453]  ? aa_af_perm+0x230/0x230
[ 2555.540241]  ? nlmsg_notify+0x1a0/0x1a0
[ 2555.544219]  ? nlmsg_notify+0x1a0/0x1a0
[ 2555.548187]  sock_sendmsg+0xc3/0x120
[ 2555.551892]  __sys_sendto+0x21a/0x320
[ 2555.555679]  ? __ia32_sys_getpeername+0xb0/0xb0
[ 2555.560345]  ? check_preemption_disabled+0x41/0x280
[ 2555.565351]  ? __fd_install+0x1eb/0x610
[ 2555.569314]  ? __sys_socket+0x16d/0x200
[ 2555.573275]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 2555.577848]  ? move_addr_to_kernel+0x70/0x70
[ 2555.582247]  __x64_sys_sendto+0xdd/0x1b0
[ 2555.586310]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 2555.590881]  do_syscall_64+0xf9/0x620
[ 2555.594688]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2555.599874] RIP: 0033:0x41957c
[ 2555.603074] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 2555.622050] RSP: 002b:00007ffe771f03d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2555.629759] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041957c
[ 2555.637014] RDX: 0000000000000038 RSI: 00000000014a4370 RDI: 0000000000000003
[ 2555.644270] RBP: 0000000000000000 R08: 00007ffe771f0424 R09: 000000000000000c
[ 2555.651784] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 2555.659037] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000
[ 2555.686852] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2555.739194] Node 1 Normal: 41*4kB (UME) 1607*8kB (UME) 893*16kB (ME) 475*32kB (UME) 140*64kB (UME) 19*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53900kB
[ 2555.797416] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2555.806394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2555.846747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2555.855611] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2555.907365] 12932 total pagecache pages
[ 2555.911368] 0 pages in swap cache
[ 2555.915078] Swap cache stats: add 0, delete 0, find 0/0
[ 2555.956686] Free swap  = 0kB
[ 2555.959736] Total swap = 0kB
[ 2555.962758] 2097051 pages RAM
[ 2555.965858] 0 pages HighMem/MovableOnly
[ 2556.006713] Bluetooth: hci4: command 0x0409 tx timeout
[ 2556.016684] 369648 pages reserved
[ 2556.020153] 0 pages cma reserved
[ 2556.023524] Out of memory (oom_kill_allocating_task): Kill process 5794 (syz-executor.4) score 0 or sacrifice child
[ 2556.087163] Killed process 5794 (syz-executor.4) total-vm:93252kB, anon-rss:2920kB, file-rss:40196kB, shmem-rss:0kB
[ 2556.144219] oom_reaper: reaped process 5794 (syz-executor.4), now anon-rss:2984kB, file-rss:40192kB, shmem-rss:0kB
19:59:14 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
fork()
r0 = fork()
ptrace$cont(0x20, r0, 0x900, 0x6)

19:59:14 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2556.446917] Mem-Info:
[ 2556.477741] active_anon:219130 inactive_anon:1094152 isolated_anon:0
[ 2556.477741]  active_file:1982 inactive_file:2016 isolated_file:64
[ 2556.477741]  unevictable:37332 dirty:1 writeback:0 unstable:0
[ 2556.477741]  slab_reclaimable:18189 slab_unreclaimable:145049
[ 2556.477741]  mapped:55720 shmem:9042 pagetables:52017 bounce:0
[ 2556.477741]  free:29118 free_pcp:1139 free_cma:0
19:59:14 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(0x0, 0x0)

[ 2556.514487] Node 0 active_anon:698924kB inactive_anon:933516kB active_file:6124kB inactive_file:8012kB unevictable:146444kB isolated(anon):0kB isolated(file):128kB mapped:179540kB dirty:104kB writeback:0kB shmem:36136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1144832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
19:59:14 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="f8c00180080003000301000008000240070000000800030005000000080002000100000054e2fa4501f3e94fcb8fed41de9dd0c889c763e7505c7fd1f769cd2ae6a1db6719b8bedfaeefee870023bedc1274df26cbe6b710ed57f6ff45240435e825af05d02f600a354ab813238a963d48210c911da92959adc79dd997380c3633fc3e877275a161ea17c2b6124cc758bb3e3bc8e660aa6755c50db0b6618e00cbcef799ebc1d35b3ec8c3e9ed00b0264a669ac8cca995068dd481de560aed03630281dee7c258ea3d7416ddc570ab10be7d7b9b620db0be71f15998f0c6975a443fd9e6e97c8e3bc61e16414030ca7b34af48c1f40a9b6df00b9303e2cdb3e4d9be291bd40d32ebdc42a45293da5b8bbba5cc7095ad8a9d105070cc78c1a6d774113b5356a961c5573917a1029aa63bf2fdfc2f57ab256a4bb88ad26efc1fe63b3619bdc5c2fa481189dd001bfe3b32cd9e1c4a0650d4d140e9ea4a77f2dbbd38d98a072e46a30c8b279acc3ce8c9cfae3b1bcd497fe13d09fe695c0acd35fafa023af9b75198aac0d518a49ef09ec967330d00"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2556.571948] Node 1 active_anon:177596kB inactive_anon:3427692kB active_file:2004kB inactive_file:52kB unevictable:2884kB isolated(anon):0kB isolated(file):0kB mapped:43240kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2556.604220] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:348kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2556.718486] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2556.754781] Node 0 DMA32 free:44524kB min:35996kB low:44992kB high:53988kB active_anon:698576kB inactive_anon:930548kB active_file:6540kB inactive_file:4808kB unevictable:156072kB writepending:4kB present:3129332kB managed:2763456kB mlocked:156172kB kernel_stack:20736kB pagetables:51228kB bounce:0kB free_pcp:2708kB local_pcp:876kB free_cma:0kB
[ 2556.909189] lowmem_reserve[]: 0 0 1 1 1
[ 2556.929463] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2557.018407] lowmem_reserve[]: 0 0 0 0 0
[ 2557.022628] Node 1 Normal free:53572kB min:53876kB low:67344kB high:80812kB active_anon:177472kB inactive_anon:3427680kB active_file:20kB inactive_file:168kB unevictable:22348kB writepending:8kB present:4194304kB managed:4128248kB mlocked:22352kB kernel_stack:51456kB pagetables:157176kB bounce:0kB free_pcp:532kB local_pcp:492kB free_cma:0kB
[ 2557.058264] lowmem_reserve[]: 0 0 0 0 0
[ 2557.062940] Node 0 DMA: 18*4kB (UM) 51*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10960kB
[ 2557.084247] Node 0 DMA32: 0*4kB 122*8kB (U) 1584*16kB (UE) 325*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36720kB
[ 2557.099177] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2557.113153] Node 1 Normal: 30*4kB (UME) 1483*8kB (UME) 917*16kB (UME) 477*32kB (UME) 141*64kB (UME) 19*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53376kB
[ 2557.134854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2557.161560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2557.175896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2557.185219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2557.198598] 13519 total pagecache pages
[ 2557.202586] 0 pages in swap cache
[ 2557.206038] Swap cache stats: add 0, delete 0, find 0/0
[ 2557.212015] Free swap  = 0kB
[ 2557.215028] Total swap = 0kB
[ 2557.220446] 2097051 pages RAM
[ 2557.223545] 0 pages HighMem/MovableOnly
[ 2557.228117] 369648 pages reserved
[ 2557.231562] 0 pages cma reserved
[ 2557.568541] syz-executor.1 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2557.649258] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 2557.679144] CPU: 1 PID: 5853 Comm: syz-executor.1 Not tainted 4.19.202-syzkaller #0
[ 2557.686962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2557.696312] Call Trace:
[ 2557.698911]  dump_stack+0x1fc/0x2ef
[ 2557.702574]  dump_header+0x15d/0xc3f
[ 2557.706290]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2557.711404]  ? ___ratelimit+0x319/0x590
[ 2557.715392]  oom_kill_process.cold+0x10/0x692
[ 2557.719896]  ? check_preemption_disabled+0x41/0x280
[ 2557.724922]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2557.730200]  out_of_memory+0x1072/0x1390
[ 2557.734267]  ? oom_killer_disable+0x270/0x270
[ 2557.738800]  ? mutex_trylock+0x15f/0x1a0
[ 2557.742868]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2557.747741]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2557.752582]  ? __lock_acquire+0x6de/0x3ff0
[ 2557.756824]  ? mark_held_locks+0xf0/0xf0
[ 2557.760903]  alloc_pages_vma+0xf2/0x780
[ 2557.764882]  do_anonymous_page+0x7c2/0x1be0
[ 2557.769216]  ? __pte_alloc+0x340/0x340
[ 2557.773103]  ? __put_compound_page+0xc0/0xc0
[ 2557.777628]  ? mark_held_locks+0xf0/0xf0
[ 2557.781694]  __handle_mm_fault+0x227a/0x41c0
[ 2557.786281]  ? vm_insert_page+0x9c0/0x9c0
[ 2557.790470]  ? check_preemption_disabled+0x41/0x280
[ 2557.795493]  handle_mm_fault+0x436/0xb10
[ 2557.799557]  __get_user_pages+0x6f0/0x1710
[ 2557.803801]  ? follow_page_mask+0x1d00/0x1d00
[ 2557.808306]  ? check_preemption_disabled+0x41/0x280
[ 2557.813331]  populate_vma_page_range+0x200/0x290
[ 2557.818093]  __mm_populate+0x1ea/0x350
[ 2557.821987]  ? populate_vma_page_range+0x290/0x290
[ 2557.826918]  ? do_mlock+0x6b0/0x6b0
[ 2557.830553]  ? security_capable+0x8f/0xc0
[ 2557.834707]  __se_sys_mlockall+0x362/0x4e0
[ 2557.838940]  do_syscall_64+0xf9/0x620
[ 2557.842745]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2557.847933] RIP: 0033:0x4665e9
[ 2557.851126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2557.870021] RSP: 002b:00007f19158de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2557.877730] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2557.884995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2557.892696] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2557.899962] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2557.907231] R13: 00007ffcdaf8b7ef R14: 00007f19158de300 R15: 0000000000022000
[ 2558.086660] Bluetooth: hci4: command 0x041b tx timeout
[ 2559.407315] Mem-Info:
[ 2559.409777] active_anon:219155 inactive_anon:1090305 isolated_anon:0
[ 2559.409777]  active_file:21 inactive_file:3 isolated_file:0
[ 2559.409777]  unevictable:50404 dirty:1 writeback:0 unstable:0
[ 2559.409777]  slab_reclaimable:18207 slab_unreclaimable:145037
[ 2559.409777]  mapped:57040 shmem:9045 pagetables:52100 bounce:0
[ 2559.409777]  free:25093 free_pcp:1 free_cma:0
[ 2559.726132] Node 0 active_anon:699152kB inactive_anon:933540kB active_file:24kB inactive_file:96kB unevictable:178588kB isolated(anon):0kB isolated(file):0kB mapped:182228kB dirty:4kB writeback:0kB shmem:36152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1144832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2559.772493] Node 1 active_anon:177468kB inactive_anon:3427680kB active_file:4kB inactive_file:0kB unevictable:23028kB isolated(anon):0kB isolated(file):0kB mapped:45932kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2559.804340] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:348kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2559.835718] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2559.840806] Node 0 DMA32 free:35912kB min:35996kB low:44992kB high:53988kB active_anon:698804kB inactive_anon:930168kB active_file:56kB inactive_file:84kB unevictable:178588kB writepending:4kB present:3129332kB managed:2763456kB mlocked:178588kB kernel_stack:20672kB pagetables:50660kB bounce:0kB free_pcp:1032kB local_pcp:380kB free_cma:0kB
[ 2559.877759] lowmem_reserve[]: 0 0 1 1 1
[ 2559.881809] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2559.944752] lowmem_reserve[]: 0 0 0 0 0
[ 2559.959130] Node 1 Normal free:53812kB min:53876kB low:67344kB high:80812kB active_anon:177456kB inactive_anon:3429880kB active_file:288kB inactive_file:308kB unevictable:20232kB writepending:0kB present:4194304kB managed:4128248kB mlocked:20140kB kernel_stack:51488kB pagetables:157188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2560.051774] lowmem_reserve[]: 0 0 0 0 0
[ 2560.080518] Node 0 DMA: 18*4kB (UM) 51*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10960kB
[ 2560.166313] Bluetooth: hci4: command 0x040f tx timeout
[ 2560.231515] Node 0 DMA32: 182*4kB (U) 439*8kB (U) 1600*16kB (U) 341*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40752kB
[ 2560.253144] chnl_net:caif_netlink_parms(): no params data found
[ 2560.294450] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2560.316679] Node 1 Normal: 1856*4kB (UME) 1714*8kB (UME) 918*16kB (UME) 476*32kB (UME) 140*64kB (UME) 19*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 62448kB
[ 2560.389455] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2560.418652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2560.444645] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2560.476186] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2560.492058] 13049 total pagecache pages
[ 2560.497536] 0 pages in swap cache
[ 2560.501561] Swap cache stats: add 0, delete 0, find 0/0
[ 2560.513048] Free swap  = 0kB
[ 2560.516076] Total swap = 0kB
[ 2560.520668] 2097051 pages RAM
[ 2560.523779] 0 pages HighMem/MovableOnly
[ 2560.533716] 369648 pages reserved
[ 2560.538132] 0 pages cma reserved
[ 2560.541620] Out of memory (oom_kill_allocating_task): Kill process 5853 (syz-executor.1) score 0 or sacrifice child
[ 2560.566710] Killed process 5853 (syz-executor.1) total-vm:93252kB, anon-rss:16712kB, file-rss:40196kB, shmem-rss:0kB
[ 2560.584981] oom_reaper: reaped process 5853 (syz-executor.1), now anon-rss:16712kB, file-rss:40192kB, shmem-rss:0kB
[ 2560.774545] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2560.791249] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2560.816639] device bridge_slave_0 entered promiscuous mode
[ 2560.836768] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2560.843207] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2560.872366] device bridge_slave_1 entered promiscuous mode
[ 2560.929678] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 2560.939171] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 2561.031089] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 2561.057245] team0: Port device team_slave_0 added
[ 2561.063153] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 2561.080166] team0: Port device team_slave_1 added
[ 2561.121351] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2561.140662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2561.171652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2561.185099] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2561.196639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2561.244064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2561.267504] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 2561.287129] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 2561.347567] device hsr_slave_0 entered promiscuous mode
[ 2561.354265] device hsr_slave_1 entered promiscuous mode
[ 2561.362429] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 2561.371345] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 2561.502619] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 2561.583177] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2561.595105] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 2561.605975] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 2561.613949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2561.622433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2561.639966] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 2561.646046] 8021q: adding VLAN 0 to HW filter on device team0
[ 2561.662814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 2561.669971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2561.684781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2561.695509] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2561.701956] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2561.717840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 2561.727117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2561.734615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2561.742842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2561.751167] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2561.757592] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2561.771413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 2561.778662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2561.793522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 2561.801157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2561.812692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 2561.821026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2561.830034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2561.840966] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 2561.852902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2561.861823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2561.874102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2561.898011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2561.905881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2561.920567] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 2561.929121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2561.951327] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 2561.962615] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 2561.973374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2561.984155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2562.000476] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2562.018279] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready
[ 2562.030297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2562.095521] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready
[ 2562.104712] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready
[ 2562.117755] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready
[ 2562.133993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2562.142815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2562.154707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2562.165879] device veth0_vlan entered promiscuous mode
[ 2562.191599] device veth1_vlan entered promiscuous mode
[ 2562.219171] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
[ 2562.235006] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready
[ 2562.243017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2562.256189] Bluetooth: hci4: command 0x0419 tx timeout
[ 2562.261504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2562.275986] device veth0_macvtap entered promiscuous mode
[ 2562.283755] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
[ 2562.294615] device veth1_macvtap entered promiscuous mode
[ 2562.301711] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready
[ 2562.314490] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
[ 2562.332716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
[ 2562.348446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2562.362207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2562.372910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2562.389057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2562.400020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2562.414753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2562.429529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2562.440415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2562.453460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2562.464227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2562.479666] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready
[ 2562.489803] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2562.499668] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2562.511702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2562.519265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2562.527505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2562.537225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2562.547385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2562.557067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2562.567080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2562.576248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2562.585939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2562.595130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2562.604895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2562.615062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2562.624853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2562.635021] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
[ 2562.642072] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2562.650174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2562.658402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2562.868992] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 2562.875695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2562.890242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2562.913107] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 2562.921450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2562.929539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2562.937721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2562.944562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2563.515924] syz-executor.5 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2563.529716] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 2563.536747] CPU: 0 PID: 6106 Comm: syz-executor.5 Not tainted 4.19.202-syzkaller #0
[ 2563.544548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2563.553899] Call Trace:
[ 2563.556494]  dump_stack+0x1fc/0x2ef
[ 2563.560117]  dump_header+0x15d/0xc3f
[ 2563.563821]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2563.568921]  ? ___ratelimit+0x319/0x590
[ 2563.572879]  oom_kill_process.cold+0x10/0x692
[ 2563.577356]  ? check_preemption_disabled+0x41/0x280
[ 2563.582369]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2563.587631]  out_of_memory+0x1072/0x1390
[ 2563.591689]  ? oom_killer_disable+0x270/0x270
[ 2563.596167]  ? mutex_trylock+0x15f/0x1a0
[ 2563.600214]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2563.605053]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2563.609879]  ? __lock_acquire+0x6de/0x3ff0
[ 2563.614100]  ? mark_held_locks+0xf0/0xf0
[ 2563.618151]  alloc_pages_vma+0xf2/0x780
[ 2563.622112]  do_anonymous_page+0x7c2/0x1be0
[ 2563.626416]  ? __pte_alloc+0x340/0x340
[ 2563.630290]  ? __put_compound_page+0xc0/0xc0
[ 2563.634681]  ? mark_held_locks+0xf0/0xf0
[ 2563.638811]  __handle_mm_fault+0x227a/0x41c0
[ 2563.643201]  ? vm_insert_page+0x9c0/0x9c0
[ 2563.647338]  ? check_preemption_disabled+0x41/0x280
[ 2563.652697]  handle_mm_fault+0x436/0xb10
[ 2563.656742]  __get_user_pages+0x6f0/0x1710
[ 2563.660971]  ? follow_page_mask+0x1d00/0x1d00
[ 2563.665469]  populate_vma_page_range+0x200/0x290
[ 2563.670211]  __mm_populate+0x1ea/0x350
[ 2563.674099]  ? populate_vma_page_range+0x290/0x290
[ 2563.679026]  ? do_mlock+0x6b0/0x6b0
[ 2563.682671]  ? security_capable+0x8f/0xc0
[ 2563.686801]  __se_sys_mlockall+0x362/0x4e0
[ 2563.691016]  do_syscall_64+0xf9/0x620
[ 2563.694811]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2563.699983] RIP: 0033:0x4665e9
[ 2563.703198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2563.722086] RSP: 002b:00007fb4b1402188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2563.729783] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2563.737031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2563.744385] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2563.751631] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2563.758891] R13: 00007ffe771f076f R14: 00007fb4b1402300 R15: 0000000000022000
[ 2563.767886] Mem-Info:
[ 2563.771565] active_anon:219148 inactive_anon:1090308 isolated_anon:0
[ 2563.771565]  active_file:51 inactive_file:36 isolated_file:0
[ 2563.771565]  unevictable:48678 dirty:14 writeback:0 unstable:0
[ 2563.771565]  slab_reclaimable:18182 slab_unreclaimable:146273
[ 2563.771565]  mapped:58087 shmem:9047 pagetables:51942 bounce:0
[ 2563.771565]  free:25091 free_pcp:894 free_cma:0
[ 2563.812774] Node 0 active_anon:699408kB inactive_anon:933452kB active_file:172kB inactive_file:88kB unevictable:171312kB isolated(anon):0kB isolated(file):0kB mapped:181520kB dirty:56kB writeback:0kB shmem:36164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1144832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2563.844787] Node 1 active_anon:177184kB inactive_anon:3427780kB active_file:32kB inactive_file:56kB unevictable:23400kB isolated(anon):0kB isolated(file):0kB mapped:50828kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2563.877552] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:348kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2563.906981] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2563.912091] Node 0 DMA32 free:35896kB min:35996kB low:44992kB high:53988kB active_anon:699012kB inactive_anon:930084kB active_file:44kB inactive_file:72kB unevictable:171204kB writepending:192kB present:3129332kB managed:2763456kB mlocked:171188kB kernel_stack:20576kB pagetables:50236kB bounce:0kB free_pcp:1976kB local_pcp:532kB free_cma:0kB
[ 2563.951088] lowmem_reserve[]: 0 0 1 1 1
[ 2563.955090] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2563.981234] lowmem_reserve[]: 0 0 0 0 0
[ 2563.986060] Node 1 Normal free:55160kB min:53876kB low:67344kB high:80812kB active_anon:177096kB inactive_anon:3427804kB active_file:32kB inactive_file:20kB unevictable:23460kB writepending:0kB present:4194304kB managed:4128248kB mlocked:23460kB kernel_stack:51520kB pagetables:157272kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2564.017477] lowmem_reserve[]: 0 0 0 0 0
[ 2564.022071] Node 0 DMA: 18*4kB (UM) 51*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10960kB
[ 2564.038494] Node 0 DMA32: 84*4kB (UME) 32*8kB (UME) 1521*16kB (UM) 364*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36576kB
[ 2564.052181] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2564.062991] Node 1 Normal: 138*4kB (UME) 1505*8kB (UME) 991*16kB (UME) 476*32kB (UME) 139*64kB (ME) 19*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55008kB
[ 2564.078830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2564.087762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2564.096408] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2564.105253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2564.113995] 14997 total pagecache pages
[ 2564.118052] 0 pages in swap cache
[ 2564.121514] Swap cache stats: add 0, delete 0, find 0/0
[ 2564.126941] Free swap  = 0kB
[ 2564.129961] Total swap = 0kB
[ 2564.133093] 2097051 pages RAM
[ 2564.136577] 0 pages HighMem/MovableOnly
[ 2564.140563] 369648 pages reserved
[ 2564.144016] 0 pages cma reserved
[ 2564.147619] Out of memory (oom_kill_allocating_task): Kill process 6106 (syz-executor.5) score 0 or sacrifice child
[ 2564.181157] Killed process 6108 (syz-executor.5) total-vm:93384kB, anon-rss:28348kB, file-rss:35084kB, shmem-rss:0kB
19:59:23 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
fork()

19:59:23 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

19:59:23 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:59:23 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(0x0, 0x0)

19:59:23 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:59:23 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

19:59:23 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2566.426163] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2566.533783] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 2566.582453] CPU: 1 PID: 6117 Comm: syz-executor.2 Not tainted 4.19.202-syzkaller #0
[ 2566.590367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2566.599725] Call Trace:
[ 2566.602327]  dump_stack+0x1fc/0x2ef
[ 2566.605970]  dump_header+0x15d/0xc3f
[ 2566.609707]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2566.614822]  ? ___ratelimit+0x319/0x590
[ 2566.618806]  oom_kill_process.cold+0x10/0x692
[ 2566.623314]  ? check_preemption_disabled+0x41/0x280
[ 2566.628776]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2566.634062]  out_of_memory+0x1072/0x1390
[ 2566.638140]  ? oom_killer_disable+0x270/0x270
[ 2566.642647]  ? mutex_trylock+0x15f/0x1a0
[ 2566.646721]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2566.651583]  ? _raw_spin_unlock_irq+0x24/0x80
[ 2566.656097]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2566.660950]  ? __schedule+0x88f/0x2040
[ 2566.664934]  ? rcu_nmi_exit+0xb3/0x180
[ 2566.668838]  ? io_schedule_timeout+0x140/0x140
[ 2566.673529]  ? preempt_schedule_common+0x45/0xc0
[ 2566.678295]  alloc_pages_vma+0xf2/0x780
[ 2566.682287]  do_anonymous_page+0x7c2/0x1be0
[ 2566.686625]  ? __pte_alloc+0x340/0x340
[ 2566.690516]  ? __put_compound_page+0xc0/0xc0
[ 2566.695028]  ? mark_held_locks+0xf0/0xf0
[ 2566.699105]  __handle_mm_fault+0x227a/0x41c0
[ 2566.703527]  ? vm_insert_page+0x9c0/0x9c0
[ 2566.707696]  ? check_preemption_disabled+0x41/0x280
[ 2566.712902]  handle_mm_fault+0x436/0xb10
[ 2566.717066]  __get_user_pages+0x6f0/0x1710
[ 2566.721317]  ? follow_page_mask+0x1d00/0x1d00
[ 2566.725840]  populate_vma_page_range+0x200/0x290
[ 2566.730611]  __mm_populate+0x1ea/0x350
[ 2566.734512]  ? populate_vma_page_range+0x290/0x290
[ 2566.739449]  ? do_mlock+0x6b0/0x6b0
[ 2566.743084]  ? security_capable+0x8f/0xc0
[ 2566.747243]  __se_sys_mlockall+0x362/0x4e0
[ 2566.751485]  do_syscall_64+0xf9/0x620
[ 2566.755304]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2566.760583] RIP: 0033:0x4665e9
[ 2566.763782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2566.782686] RSP: 002b:00007f8244f71188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2566.790488] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2566.797785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2566.805063] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2566.812334] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2566.819608] R13: 00007ffc2dc04a3f R14: 00007f8244f71300 R15: 0000000000022000
[ 2567.001912] Mem-Info:
[ 2567.004505] active_anon:219282 inactive_anon:1090293 isolated_anon:0
[ 2567.004505]  active_file:35 inactive_file:3 isolated_file:0
[ 2567.004505]  unevictable:48100 dirty:0 writeback:0 unstable:0
[ 2567.004505]  slab_reclaimable:18174 slab_unreclaimable:147107
[ 2567.004505]  mapped:57873 shmem:9050 pagetables:52196 bounce:0
[ 2567.004505]  free:25015 free_pcp:153 free_cma:0
[ 2567.110796] Node 0 active_anon:699640kB inactive_anon:933500kB active_file:12kB inactive_file:4kB unevictable:170168kB isolated(anon):0kB isolated(file):0kB mapped:182104kB dirty:0kB writeback:0kB shmem:36180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1144832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2567.162253] Node 1 active_anon:177488kB inactive_anon:3427672kB active_file:4kB inactive_file:8kB unevictable:22232kB isolated(anon):0kB isolated(file):0kB mapped:49388kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2567.190545] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:348kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2567.234673] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2567.243380] Node 0 DMA32 free:35440kB min:35996kB low:44992kB high:53988kB active_anon:699292kB inactive_anon:930128kB active_file:36kB inactive_file:40kB unevictable:170068kB writepending:0kB present:3129332kB managed:2763456kB mlocked:170068kB kernel_stack:20768kB pagetables:50492kB bounce:0kB free_pcp:612kB local_pcp:520kB free_cma:0kB
[ 2567.303027] lowmem_reserve[]: 0 0 1 1 1
[ 2567.321578] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2567.364811] lowmem_reserve[]: 0 0 0 0 0
[ 2567.400840] Node 1 Normal free:53660kB min:53876kB low:67344kB high:80812kB active_anon:177488kB inactive_anon:3427672kB active_file:4kB inactive_file:8kB unevictable:22232kB writepending:0kB present:4194304kB managed:4128248kB mlocked:22232kB kernel_stack:51872kB pagetables:158036kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2567.451903] lowmem_reserve[]: 0 0 0 0 0
[ 2567.474350] Node 0 DMA: 18*4kB (UM) 51*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10960kB
[ 2567.500789] Node 0 DMA32: 0*4kB 27*8kB (U) 1489*16kB (UE) 358*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35496kB
[ 2567.513672] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2567.537376] Node 1 Normal: 23*4kB (UME) 1532*8kB (UME) 944*16kB (UME) 465*32kB (UME) 139*64kB (ME) 19*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53660kB
[ 2567.563598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2567.573266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2567.593112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2567.602036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2567.631996] 14331 total pagecache pages
[ 2567.654666] 0 pages in swap cache
[ 2567.658216] Swap cache stats: add 0, delete 0, find 0/0
[ 2567.663576] Free swap  = 0kB
[ 2567.685437] Total swap = 0kB
[ 2567.688593] 2097051 pages RAM
[ 2567.691697] 0 pages HighMem/MovableOnly
[ 2567.713690] 369648 pages reserved
[ 2567.717238] 0 pages cma reserved
[ 2567.720613] Out of memory (oom_kill_allocating_task): Kill process 6117 (syz-executor.2) score 0 or sacrifice child
[ 2567.781882] Killed process 6119 (syz-executor.2) total-vm:93252kB, anon-rss:148kB, file-rss:34952kB, shmem-rss:0kB
[ 2567.816728] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2567.851972] systemd-udevd cpuset=/ mems_allowed=0-1
[ 2567.862285] CPU: 1 PID: 6133 Comm: systemd-udevd Not tainted 4.19.202-syzkaller #0
[ 2567.870011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2567.879358] Call Trace:
[ 2567.882469]  dump_stack+0x1fc/0x2ef
[ 2567.886098]  dump_header+0x15d/0xc3f
[ 2567.889819]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2567.894925]  ? ___ratelimit+0x319/0x590
[ 2567.898947]  oom_kill_process.cold+0x10/0x692
[ 2567.903431]  ? check_preemption_disabled+0x41/0x280
[ 2567.908546]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2567.913816]  out_of_memory+0x1072/0x1390
[ 2567.917872]  ? oom_killer_disable+0x270/0x270
[ 2567.922359]  ? mutex_trylock+0x15f/0x1a0
[ 2567.926859]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2567.931796]  ? find_get_entry+0x4cd/0x8a0
[ 2567.935951]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2567.940843]  alloc_pages_current+0x193/0x2a0
[ 2567.945249]  filemap_fault+0x146e/0x2180
[ 2567.949325]  ext4_filemap_fault+0x84/0xb0
[ 2567.953466]  __do_fault+0x10b/0x4b0
[ 2567.957340]  __handle_mm_fault+0x273b/0x41c0
[ 2567.961732]  ? vm_insert_page+0x9c0/0x9c0
[ 2567.965898]  ? debug_check_no_obj_freed+0x201/0x490
[ 2567.970912]  ? check_preemption_disabled+0x41/0x280
[ 2567.975940]  ? check_preemption_disabled+0x41/0x280
[ 2567.980961]  handle_mm_fault+0x436/0xb10
[ 2567.985010]  __do_page_fault+0x68e/0xd60
[ 2567.989071]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2567.994091]  ? spurious_fault+0x840/0x840
[ 2567.998247]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2568.003096]  ? page_fault+0x8/0x30
[ 2568.006639]  page_fault+0x1e/0x30
[ 2568.010177] RIP: 0033:0x55cd7a928f9f
[ 2568.013888] Code: Bad RIP value.
[ 2568.017248] RSP: 002b:00007ffd49002570 EFLAGS: 00010286
[ 2568.022612] RAX: ffffffffffffffff RBX: 000055cd7b90fbd0 RCX: fffffffffffffe50
[ 2568.029877] RDX: 00007ffd49002585 RSI: 000055cd7a9557dc RDI: 00007ffd49002570
[ 2568.037148] RBP: 000000000000407f R08: 0000000000000001 R09: 0000000000000015
[ 2568.044503] R10: 0000000000000064 R11: 0000000000000297 R12: 00007ffd49002680
[ 2568.051770] R13: 000055cd7b90fbd0 R14: 0000000000000003 R15: 000000000000000e
[ 2568.068589] Mem-Info:
[ 2568.071532] active_anon:219264 inactive_anon:1090293 isolated_anon:0
[ 2568.071532]  active_file:12 inactive_file:13 isolated_file:0
[ 2568.071532]  unevictable:48122 dirty:0 writeback:0 unstable:0
[ 2568.071532]  slab_reclaimable:18174 slab_unreclaimable:147104
[ 2568.071532]  mapped:57873 shmem:9050 pagetables:52159 bounce:0
[ 2568.071532]  free:25029 free_pcp:201 free_cma:0
[ 2568.128928] Node 0 active_anon:699628kB inactive_anon:933500kB active_file:44kB inactive_file:44kB unevictable:170256kB isolated(anon):0kB isolated(file):0kB mapped:182104kB dirty:0kB writeback:0kB shmem:36180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1144832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2568.182285] Node 1 active_anon:177428kB inactive_anon:3427672kB active_file:4kB inactive_file:8kB unevictable:22232kB isolated(anon):0kB isolated(file):0kB mapped:49388kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2568.232852] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:348kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2568.261325] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2568.279750] Node 0 DMA32 free:35496kB min:35996kB low:44992kB high:53988kB active_anon:699280kB inactive_anon:930128kB active_file:144kB inactive_file:0kB unevictable:170256kB writepending:0kB present:3129332kB managed:2763456kB mlocked:170256kB kernel_stack:20768kB pagetables:50492kB bounce:0kB free_pcp:624kB local_pcp:104kB free_cma:0kB
[ 2568.331876] lowmem_reserve[]: 0 0 1 1 1
[ 2568.337026] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2568.389000] lowmem_reserve[]: 0 0 0 0 0
[ 2568.393339] Node 1 Normal free:53660kB min:53876kB low:67344kB high:80812kB active_anon:177428kB inactive_anon:3427672kB active_file:4kB inactive_file:8kB unevictable:22232kB writepending:0kB present:4194304kB managed:4128248kB mlocked:22232kB kernel_stack:51840kB pagetables:157888kB bounce:0kB free_pcp:180kB local_pcp:180kB free_cma:0kB
[ 2568.436252] lowmem_reserve[]: 0 0 0 0 0
[ 2568.440262] Node 0 DMA: 18*4kB (UM) 51*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10960kB
[ 2568.511845] Node 0 DMA32: 0*4kB 27*8kB (U) 1489*16kB (UE) 359*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35528kB
[ 2568.544869] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2568.613606] Node 1 Normal: 23*4kB (UME) 1532*8kB (UME) 944*16kB (UME) 469*32kB (UME) 139*64kB (ME) 19*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53788kB
[ 2568.713522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2568.741712] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2568.770517] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2568.811161] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2568.851457] 14450 total pagecache pages
[ 2568.878281] 0 pages in swap cache
[ 2568.905564] Swap cache stats: add 0, delete 0, find 0/0
[ 2568.910991] Free swap  = 0kB
[ 2568.914012] Total swap = 0kB
[ 2568.917441] 2097051 pages RAM
[ 2568.920535] 0 pages HighMem/MovableOnly
[ 2568.924630] 369648 pages reserved
[ 2568.929713] 0 pages cma reserved
[ 2568.935395] Out of memory (oom_kill_allocating_task): Kill process 6133 (systemd-udevd) score 0 or sacrifice child
[ 2568.946863] Killed process 6133 (systemd-udevd) total-vm:43944kB, anon-rss:1328kB, file-rss:0kB, shmem-rss:0kB
[ 2568.966153] oom_reaper: reaped process 6133 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
19:59:27 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(0x0, 0x0)

19:59:27 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
fork()

19:59:27 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:59:27 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

19:59:27 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:59:27 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2570.335974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:59:28 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2570.414334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2571.233272] rs:main Q:Reg invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2571.307629] rs:main Q:Reg cpuset=/ mems_allowed=0-1
[ 2571.332650] CPU: 1 PID: 5721 Comm: rs:main Q:Reg Not tainted 4.19.202-syzkaller #0
[ 2571.340380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2571.349723] Call Trace:
[ 2571.352408]  dump_stack+0x1fc/0x2ef
[ 2571.356057]  dump_header+0x15d/0xc3f
[ 2571.359765]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2571.364858]  ? ___ratelimit+0x319/0x590
[ 2571.368824]  oom_kill_process.cold+0x10/0x692
[ 2571.373316]  ? check_preemption_disabled+0x41/0x280
[ 2571.378358]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2571.383627]  out_of_memory+0x1072/0x1390
[ 2571.387685]  ? oom_killer_disable+0x270/0x270
[ 2571.392201]  ? mutex_trylock+0x15f/0x1a0
[ 2571.396261]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2571.401216]  ? find_get_entry+0x4cd/0x8a0
[ 2571.405405]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2571.410259]  alloc_pages_current+0x193/0x2a0
[ 2571.414681]  filemap_fault+0x146e/0x2180
[ 2571.418751]  ext4_filemap_fault+0x84/0xb0
[ 2571.422894]  __do_fault+0x10b/0x4b0
[ 2571.426530]  __handle_mm_fault+0x273b/0x41c0
[ 2571.430933]  ? vm_insert_page+0x9c0/0x9c0
[ 2571.435086]  ? check_preemption_disabled+0x41/0x280
[ 2571.440185]  handle_mm_fault+0x436/0xb10
[ 2571.444243]  __do_page_fault+0x68e/0xd60
[ 2571.448301]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2571.453308]  ? spurious_fault+0x840/0x840
[ 2571.457458]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2571.462298]  ? page_fault+0x8/0x30
[ 2571.465828]  page_fault+0x1e/0x30
[ 2571.469275] RIP: 0033:0x560ceefbfe60
[ 2571.473005] Code: Bad RIP value.
[ 2571.476355] RSP: 002b:00007f4a0d8f3a48 EFLAGS: 00010206
[ 2571.481706] RAX: 0000000000000000 RBX: 0000000000000017 RCX: 0000000000000000
[ 2571.488963] RDX: 0000000000000017 RSI: 00007f4a040165a0 RDI: 00007f4a04006420
[ 2571.496227] RBP: 00007f4a04016570 R08: 0000000000000000 R09: 0000000000000000
[ 2571.503497] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000017
[ 2571.510758] R13: 00007f4a04006160 R14: 0000000000000047 R15: 00000000000000a1
[ 2571.542401] Mem-Info:
[ 2571.544914] active_anon:219279 inactive_anon:1090306 isolated_anon:0
[ 2571.544914]  active_file:61 inactive_file:36 isolated_file:33
[ 2571.544914]  unevictable:47389 dirty:0 writeback:0 unstable:0
[ 2571.544914]  slab_reclaimable:18181 slab_unreclaimable:147417
[ 2571.544914]  mapped:58181 shmem:9048 pagetables:52258 bounce:0
[ 2571.544914]  free:25075 free_pcp:170 free_cma:0
[ 2571.584875] Node 0 active_anon:699352kB inactive_anon:933440kB active_file:120kB inactive_file:28kB unevictable:169236kB isolated(anon):0kB isolated(file):132kB mapped:184516kB dirty:0kB writeback:0kB shmem:36172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1144832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2571.625192] Node 1 active_anon:177764kB inactive_anon:3427784kB active_file:4kB inactive_file:4kB unevictable:20320kB isolated(anon):0kB isolated(file):0kB mapped:48008kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2571.677316] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:348kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2571.867162] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2571.872396] Node 0 DMA32 free:35808kB min:35996kB low:44992kB high:53988kB active_anon:699004kB inactive_anon:930068kB active_file:240kB inactive_file:184kB unevictable:169616kB writepending:8kB present:3129332kB managed:2763456kB mlocked:169616kB kernel_stack:20800kB pagetables:50596kB bounce:0kB free_pcp:268kB local_pcp:0kB free_cma:0kB
[ 2571.903668] lowmem_reserve[]: 0 0 1 1 1
[ 2571.908168] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2571.935871] lowmem_reserve[]: 0 0 0 0 0
[ 2571.935893] Node 1 Normal free:53868kB min:53876kB low:67344kB high:80812kB active_anon:177764kB inactive_anon:3427784kB active_file:4kB inactive_file:4kB unevictable:20320kB writepending:0kB present:4194304kB managed:4128248kB mlocked:20320kB kernel_stack:52096kB pagetables:158180kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2571.935931] lowmem_reserve[]: 0 0 0 0 0
[ 2571.973663] Node 0 DMA: 18*4kB (UM) 51*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10960kB
[ 2572.005281] Node 0 DMA32: 56*4kB (UM) 100*8kB (UM) 1479*16kB (U) 364*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36336kB
[ 2572.022080] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2572.034483] Node 1 Normal: 71*4kB (UME) 1712*8kB (UME) 921*16kB (UME) 432*32kB (UME) 139*64kB (ME) 19*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53868kB
[ 2572.050214] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2572.059749] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2572.069013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2572.078443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2572.087644] 14550 total pagecache pages
[ 2572.092037] 0 pages in swap cache
[ 2572.095923] Swap cache stats: add 0, delete 0, find 0/0
[ 2572.101674] Free swap  = 0kB
[ 2572.104721] Total swap = 0kB
[ 2572.110647] 2097051 pages RAM
[ 2572.113745] 0 pages HighMem/MovableOnly
[ 2572.117759] 369648 pages reserved
[ 2572.121204] 0 pages cma reserved
[ 2572.124556] Out of memory (oom_kill_allocating_task): Kill process 5721 (rs:main Q:Reg) score 0 or sacrifice child
[ 2572.136646] Killed process 5654 (rsyslogd) total-vm:254332kB, anon-rss:944kB, file-rss:0kB, shmem-rss:0kB
[ 2572.149768] oom_reaper: reaped process 5654 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 2572.227771] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2572.244910] syz-fuzzer cpuset=/ mems_allowed=0-1
[ 2572.410895] CPU: 0 PID: 8086 Comm: syz-fuzzer Not tainted 4.19.202-syzkaller #0
[ 2572.418366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2572.427723] Call Trace:
[ 2572.430323]  dump_stack+0x1fc/0x2ef
[ 2572.433966]  dump_header+0x15d/0xc3f
[ 2572.437692]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2572.442802]  ? ___ratelimit+0x319/0x590
[ 2572.446789]  oom_kill_process.cold+0x10/0x692
[ 2572.451294]  ? check_preemption_disabled+0x41/0x280
[ 2572.456330]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2572.461618]  out_of_memory+0x1072/0x1390
[ 2572.465698]  ? oom_killer_disable+0x270/0x270
[ 2572.470204]  ? mutex_trylock+0x15f/0x1a0
[ 2572.474276]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2572.479132]  ? find_get_entry+0x4cd/0x8a0
[ 2572.483302]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2572.488175]  alloc_pages_current+0x193/0x2a0
[ 2572.492604]  filemap_fault+0x146e/0x2180
[ 2572.496685]  ext4_filemap_fault+0x84/0xb0
[ 2572.500842]  __do_fault+0x10b/0x4b0
[ 2572.504485]  __handle_mm_fault+0x273b/0x41c0
[ 2572.508904]  ? vm_insert_page+0x9c0/0x9c0
[ 2572.513071]  ? check_preemption_disabled+0x41/0x280
[ 2572.518098]  handle_mm_fault+0x436/0xb10
[ 2572.522171]  __do_page_fault+0x68e/0xd60
[ 2572.526241]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2572.531263]  ? spurious_fault+0x840/0x840
[ 2572.535416]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2572.540271]  ? page_fault+0x8/0x30
[ 2572.543822]  page_fault+0x1e/0x30
[ 2572.547311] RIP: 0033:0x46e163
[ 2572.550509] Code: Bad RIP value.
[ 2572.553874] RSP: 002b:000000c00003de80 EFLAGS: 00010202
[ 2572.559368] RAX: ffffffffffffff92 RBX: 000000c00002e000 RCX: 000000000046e163
[ 2572.566645] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001852e58
[ 2572.573916] RBP: 000000c00003dec8 R08: 0000000000000000 R09: 0000000000000000
[ 2572.581196] R10: 000000c00003deb8 R11: 0000000000000202 R12: 000000000043b6a0
[ 2572.588470] R13: 0000000000000000 R14: 000000000094d6b8 R15: 0000000000000000
19:59:31 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

19:59:31 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
fork()

19:59:31 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

19:59:31 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

19:59:31 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2573.770473] Mem-Info:
[ 2573.786492] active_anon:219160 inactive_anon:1090331 isolated_anon:0
[ 2573.786492]  active_file:1850 inactive_file:2317 isolated_file:64
[ 2573.786492]  unevictable:36777 dirty:25 writeback:0 unstable:0
[ 2573.786492]  slab_reclaimable:18255 slab_unreclaimable:147885
[ 2573.786492]  mapped:56182 shmem:9048 pagetables:52027 bounce:0
[ 2573.786492]  free:30470 free_pcp:1110 free_cma:0
19:59:31 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2574.030039] Node 0 active_anon:698500kB inactive_anon:933440kB active_file:4948kB inactive_file:3564kB unevictable:157660kB isolated(anon):0kB isolated(file):128kB mapped:187408kB dirty:164kB writeback:0kB shmem:36164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1144832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
19:59:31 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2574.232430] Node 1 active_anon:177824kB inactive_anon:3427680kB active_file:1184kB inactive_file:1136kB unevictable:16540kB isolated(anon):0kB isolated(file):24kB mapped:47568kB dirty:32kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2574.394092] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:376kB inactive_anon:3372kB active_file:0kB inactive_file:16kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2574.469966] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2574.480532] Node 0 DMA32 free:35816kB min:35996kB low:44992kB high:53988kB active_anon:698152kB inactive_anon:930068kB active_file:740kB inactive_file:1760kB unevictable:163368kB writepending:164kB present:3129332kB managed:2763456kB mlocked:163404kB kernel_stack:20864kB pagetables:50600kB bounce:0kB free_pcp:708kB local_pcp:148kB free_cma:0kB
[ 2574.580487] lowmem_reserve[]: 0 0 1 1 1
[ 2574.589067] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2574.648400] lowmem_reserve[]: 0 0 0 0 0
[ 2574.657013] Node 1 Normal free:53816kB min:53876kB low:67344kB high:80812kB active_anon:177824kB inactive_anon:3427680kB active_file:376kB inactive_file:0kB unevictable:19276kB writepending:32kB present:4194304kB managed:4128248kB mlocked:19276kB kernel_stack:51744kB pagetables:157868kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[ 2574.721489] lowmem_reserve[]: 0 0 0 0 0
[ 2574.730173] Node 0 DMA: 11*4kB (UM) 42*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 3*128kB (ME) 4*256kB (ME) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 10988kB
[ 2574.746127] Node 0 DMA32: 90*4kB (U) 64*8kB (UE) 1442*16kB (UE) 378*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36040kB
[ 2574.759562] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2574.779273] Node 1 Normal: 135*4kB (UME) 1743*8kB (UME) 921*16kB (UME) 431*32kB (UME) 140*64kB (ME) 19*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54404kB
[ 2574.794641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2574.806836] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2574.817635] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2574.826890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2574.835801] 13421 total pagecache pages
[ 2574.839867] 0 pages in swap cache
[ 2574.844075] Swap cache stats: add 0, delete 0, find 0/0
[ 2574.849894] Free swap  = 0kB
[ 2574.853150] Total swap = 0kB
[ 2574.857364] 2097051 pages RAM
[ 2574.861182] 0 pages HighMem/MovableOnly
[ 2574.866701] 369648 pages reserved
[ 2574.874873] 0 pages cma reserved
[ 2574.878415] Out of memory (oom_kill_allocating_task): Kill process 8086 (syz-fuzzer) score 0 or sacrifice child
[ 2574.890310] Killed process 5776 (syz-executor.5) total-vm:84924kB, anon-rss:68kB, file-rss:512kB, shmem-rss:0kB
[ 2575.068274] syz-executor.4 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2575.143632] syz-executor.4 cpuset=/ mems_allowed=0-1
[ 2575.181246] CPU: 1 PID: 6200 Comm: syz-executor.4 Not tainted 4.19.202-syzkaller #0
[ 2575.189063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2575.198421] Call Trace:
[ 2575.201027]  dump_stack+0x1fc/0x2ef
[ 2575.204668]  dump_header+0x15d/0xc3f
[ 2575.208391]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2575.213496]  ? ___ratelimit+0x319/0x590
[ 2575.217477]  oom_kill_process.cold+0x10/0x692
[ 2575.221992]  ? check_preemption_disabled+0x41/0x280
[ 2575.227017]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2575.232300]  out_of_memory+0x1072/0x1390
[ 2575.236373]  ? oom_killer_disable+0x270/0x270
[ 2575.240882]  ? mutex_trylock+0x15f/0x1a0
[ 2575.244954]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2575.249821]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2575.254678]  ? __lock_acquire+0x6de/0x3ff0
[ 2575.258925]  ? mark_held_locks+0xf0/0xf0
[ 2575.263002]  alloc_pages_vma+0xf2/0x780
[ 2575.266985]  do_anonymous_page+0x7c2/0x1be0
[ 2575.271315]  ? __pte_alloc+0x340/0x340
[ 2575.275206]  ? __put_compound_page+0xc0/0xc0
[ 2575.279627]  ? mark_held_locks+0xf0/0xf0
[ 2575.283695]  __handle_mm_fault+0x227a/0x41c0
[ 2575.288162]  ? vm_insert_page+0x9c0/0x9c0
[ 2575.292336]  ? check_preemption_disabled+0x41/0x280
[ 2575.297361]  handle_mm_fault+0x436/0xb10
[ 2575.301526]  __get_user_pages+0x6f0/0x1710
[ 2575.305774]  ? follow_page_mask+0x1d00/0x1d00
[ 2575.310290]  ? check_preemption_disabled+0x41/0x280
[ 2575.315320]  populate_vma_page_range+0x200/0x290
[ 2575.320084]  __mm_populate+0x1ea/0x350
[ 2575.323976]  ? populate_vma_page_range+0x290/0x290
[ 2575.328915]  ? do_mlock+0x6b0/0x6b0
[ 2575.332546]  ? security_capable+0x8f/0xc0
[ 2575.336697]  __se_sys_mlockall+0x362/0x4e0
[ 2575.340934]  do_syscall_64+0xf9/0x620
[ 2575.344740]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2575.349928] RIP: 0033:0x4665e9
[ 2575.353119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2575.372017] RSP: 002b:00007fd5cc707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2575.379727] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2575.386996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2575.394263] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2575.401534] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2575.408809] R13: 00007fff676f580f R14: 00007fd5cc707300 R15: 0000000000022000
[ 2575.653770] Mem-Info:
[ 2575.689464] active_anon:219123 inactive_anon:1090280 isolated_anon:0
[ 2575.689464]  active_file:24 inactive_file:9 isolated_file:25
[ 2575.689464]  unevictable:47104 dirty:11 writeback:0 unstable:0
[ 2575.689464]  slab_reclaimable:18287 slab_unreclaimable:148259
[ 2575.689464]  mapped:57075 shmem:9048 pagetables:52210 bounce:0
[ 2575.689464]  free:24917 free_pcp:0 free_cma:0
[ 2575.731327] Node 0 active_anon:698576kB inactive_anon:933440kB active_file:96kB inactive_file:36kB unevictable:167644kB isolated(anon):0kB isolated(file):0kB mapped:181644kB dirty:44kB writeback:0kB shmem:36164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1144832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2575.767755] Node 1 active_anon:177916kB inactive_anon:3427680kB active_file:0kB inactive_file:0kB unevictable:20772kB isolated(anon):0kB isolated(file):0kB mapped:46656kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2575.802193] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:384kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:84kB writepending:0kB present:15992kB managed:15908kB mlocked:84kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2575.880857] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2575.922111] Node 0 DMA32 free:35604kB min:35996kB low:44992kB high:53988kB active_anon:698184kB inactive_anon:930068kB active_file:128kB inactive_file:0kB unevictable:167272kB writepending:64kB present:3129332kB managed:2763456kB mlocked:167272kB kernel_stack:20832kB pagetables:50808kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2575.982517] lowmem_reserve[]: 0 0 1 1 1
[ 2575.994057] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2576.053758] lowmem_reserve[]: 0 0 0 0 0
[ 2576.063755] Node 1 Normal free:53720kB min:53876kB low:67344kB high:80812kB active_anon:177908kB inactive_anon:3431880kB active_file:92kB inactive_file:584kB unevictable:15900kB writepending:0kB present:4194304kB managed:4128248kB mlocked:15852kB kernel_stack:51680kB pagetables:157760kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2576.159720] lowmem_reserve[]: 0 0 0 0 0
[ 2576.163988] Node 0 DMA: 8*4kB (UM) 40*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 3*128kB (ME) 4*256kB (ME) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 10960kB
19:59:33 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2576.310622] Node 0 DMA32: 0*4kB 7*8kB (U) 1442*16kB (UE) 374*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35096kB
19:59:34 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2576.418544] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2576.484892] Node 1 Normal: 36*4kB (UE) 1398*8kB (ME) 957*16kB (UME) 386*32kB (UME) 161*64kB (ME) 28*128kB (UME) 4*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53904kB
[ 2576.559788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2576.658126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2576.712146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2576.775609] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2576.837953] 12736 total pagecache pages
[ 2576.855746] 0 pages in swap cache
[ 2576.869439] Swap cache stats: add 0, delete 0, find 0/0
[ 2576.891439] Free swap  = 0kB
[ 2576.902792] Total swap = 0kB
[ 2576.961049] 2097051 pages RAM
[ 2576.977306] 0 pages HighMem/MovableOnly
[ 2576.992682] 369648 pages reserved
[ 2577.012064] 0 pages cma reserved
[ 2577.034877] Out of memory (oom_kill_allocating_task): Kill process 6200 (syz-executor.4) score 0 or sacrifice child
[ 2577.068556] Killed process 6200 (syz-executor.4) total-vm:93252kB, anon-rss:6144kB, file-rss:40196kB, shmem-rss:0kB
[ 2577.102006] oom_reaper: reaped process 6200 (syz-executor.4), now anon-rss:6144kB, file-rss:40192kB, shmem-rss:0kB
19:59:35 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)

19:59:35 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

19:59:35 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

19:59:37 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

19:59:37 executing program 4:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

19:59:37 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

19:59:37 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, 0x0, 0x4804c1, 0x0)
mlockall(0x3)

19:59:37 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

19:59:37 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

19:59:37 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2580.810827] syz-executor.0 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2580.879298] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 2580.925012] CPU: 1 PID: 6275 Comm: syz-executor.0 Not tainted 4.19.202-syzkaller #0
[ 2580.932829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2580.942184] Call Trace:
[ 2580.944784]  dump_stack+0x1fc/0x2ef
[ 2580.948431]  dump_header+0x15d/0xc3f
[ 2580.952156]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2580.957264]  ? ___ratelimit+0x319/0x590
[ 2580.961247]  oom_kill_process.cold+0x10/0x692
[ 2580.965754]  ? check_preemption_disabled+0x41/0x280
[ 2580.970779]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2580.976064]  out_of_memory+0x1072/0x1390
[ 2580.980137]  ? oom_killer_disable+0x270/0x270
[ 2580.984662]  ? mutex_trylock+0x15f/0x1a0
[ 2580.988737]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2580.993608]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2580.998461]  ? finish_task_switch+0x146/0x760
[ 2581.002976]  ? finish_task_switch+0x146/0x760
[ 2581.007503]  alloc_pages_vma+0xf2/0x780
[ 2581.011489]  do_anonymous_page+0x7c2/0x1be0
[ 2581.015818]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2581.020605]  ? __pte_alloc+0x340/0x340
[ 2581.024492]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2581.029254]  ? mark_held_locks+0xf0/0xf0
[ 2581.033327]  __handle_mm_fault+0x227a/0x41c0
[ 2581.037747]  ? vm_insert_page+0x9c0/0x9c0
[ 2581.041911]  ? check_preemption_disabled+0x41/0x280
[ 2581.046936]  handle_mm_fault+0x436/0xb10
[ 2581.051004]  __get_user_pages+0x6f0/0x1710
[ 2581.055256]  ? follow_page_mask+0x1d00/0x1d00
[ 2581.059761]  ? check_preemption_disabled+0x41/0x280
[ 2581.064795]  populate_vma_page_range+0x200/0x290
[ 2581.069563]  __mm_populate+0x1ea/0x350
[ 2581.073485]  ? populate_vma_page_range+0x290/0x290
[ 2581.078425]  ? do_mlock+0x6b0/0x6b0
[ 2581.082055]  ? security_capable+0x8f/0xc0
[ 2581.086229]  __se_sys_mlockall+0x362/0x4e0
[ 2581.090468]  do_syscall_64+0xf9/0x620
[ 2581.094276]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2581.099463] RIP: 0033:0x4665e9
[ 2581.102660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2581.121561] RSP: 002b:00007f43d6822188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2581.129274] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2581.136579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2581.144475] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2581.151743] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2581.159008] R13: 00007ffda310918f R14: 00007f43d6822300 R15: 0000000000022000
[ 2581.175537] Mem-Info:
[ 2581.178267] active_anon:219433 inactive_anon:1090365 isolated_anon:0
[ 2581.178267]  active_file:16 inactive_file:16 isolated_file:0
[ 2581.178267]  unevictable:55944 dirty:0 writeback:0 unstable:0
[ 2581.178267]  slab_reclaimable:18343 slab_unreclaimable:147055
[ 2581.178267]  mapped:48419 shmem:9045 pagetables:52584 bounce:0
[ 2581.178267]  free:25001 free_pcp:232 free_cma:0
[ 2581.224224] Node 0 active_anon:699336kB inactive_anon:933776kB active_file:64kB inactive_file:60kB unevictable:188084kB isolated(anon):0kB isolated(file):0kB mapped:166604kB dirty:0kB writeback:0kB shmem:36156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1144832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2581.266817] Node 1 active_anon:178396kB inactive_anon:3427684kB active_file:0kB inactive_file:4kB unevictable:35692kB isolated(anon):0kB isolated(file):0kB mapped:27072kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2581.355259] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:384kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2581.393136] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2581.398410] Node 0 DMA32 free:35576kB min:35996kB low:44992kB high:53988kB active_anon:698952kB inactive_anon:930404kB active_file:164kB inactive_file:0kB unevictable:187728kB writepending:0kB present:3129332kB managed:2763456kB mlocked:187728kB kernel_stack:21344kB pagetables:52212kB bounce:0kB free_pcp:432kB local_pcp:248kB free_cma:0kB
[ 2581.439194] lowmem_reserve[]: 0 0 1 1 1
[ 2581.443200] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2581.483240] lowmem_reserve[]: 0 0 0 0 0
[ 2581.491468] Node 1 Normal free:53448kB min:53876kB low:67344kB high:80812kB active_anon:178396kB inactive_anon:3427684kB active_file:0kB inactive_file:4kB unevictable:35492kB writepending:0kB present:4194304kB managed:4128248kB mlocked:35492kB kernel_stack:51712kB pagetables:157868kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB
[ 2581.543941] lowmem_reserve[]: 0 0 0 0 0
[ 2581.548840] Node 0 DMA: 7*4kB (U) 43*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 3*128kB (ME) 4*256kB (ME) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 10980kB
[ 2581.593145] Node 0 DMA32: 1*4kB (M) 1*8kB (M) 1497*16kB (U) 356*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35356kB
[ 2581.629508] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2581.640379] Node 1 Normal: 1715*4kB (UE) 56*8kB (UME) 902*16kB (UME) 413*32kB (UME) 191*64kB (UME) 35*128kB (UME) 6*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53196kB
[ 2581.666744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2581.681713] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2581.703849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2581.728994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2581.753666] 13495 total pagecache pages
[ 2581.763799] 0 pages in swap cache
[ 2581.787065] Swap cache stats: add 0, delete 0, find 0/0
[ 2581.792499] Free swap  = 0kB
[ 2581.822795] Total swap = 0kB
[ 2581.839919] 2097051 pages RAM
[ 2581.843095] 0 pages HighMem/MovableOnly
[ 2581.869913] 369648 pages reserved
[ 2581.873731] 0 pages cma reserved
[ 2581.878844] Out of memory (oom_kill_allocating_task): Kill process 6275 (syz-executor.0) score 0 or sacrifice child
[ 2581.892913] Killed process 6271 (syz-executor.0) total-vm:93252kB, anon-rss:14556kB, file-rss:39104kB, shmem-rss:0kB
[ 2581.909378] oom_reaper: reaped process 6271 (syz-executor.0), now anon-rss:14600kB, file-rss:40192kB, shmem-rss:0kB
19:59:41 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

19:59:41 executing program 4:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

19:59:41 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2583.905899] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2583.944875] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2583.971928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2584.012276] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2584.052460] device bridge_slave_1 left promiscuous mode
[ 2584.078506] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2584.108377] device bridge_slave_0 left promiscuous mode
[ 2584.124714] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2584.161687] device veth1_macvtap left promiscuous mode
[ 2584.182190] device veth0_macvtap left promiscuous mode
[ 2584.201862] device veth1_vlan left promiscuous mode
[ 2584.223767] device veth0_vlan left promiscuous mode
[ 2584.895260] syz-executor.4 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2584.924141] syz-executor.4 cpuset=/ mems_allowed=0-1
[ 2584.929315] CPU: 1 PID: 6305 Comm: syz-executor.4 Not tainted 4.19.202-syzkaller #0
[ 2584.937112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2584.946463] Call Trace:
[ 2584.949061]  dump_stack+0x1fc/0x2ef
[ 2584.952698]  dump_header+0x15d/0xc3f
[ 2584.956425]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2584.961530]  ? ___ratelimit+0x319/0x590
[ 2584.965512]  oom_kill_process.cold+0x10/0x692
[ 2584.970013]  ? check_preemption_disabled+0x41/0x280
[ 2584.975035]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2584.980317]  out_of_memory+0x1072/0x1390
[ 2584.984390]  ? oom_killer_disable+0x270/0x270
[ 2584.988891]  ? mutex_trylock+0x15f/0x1a0
[ 2584.992962]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2584.997833]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2585.002680]  ? __lock_acquire+0x6de/0x3ff0
[ 2585.006939]  ? mark_held_locks+0xf0/0xf0
[ 2585.011018]  alloc_pages_vma+0xf2/0x780
[ 2585.015005]  do_anonymous_page+0x7c2/0x1be0
[ 2585.019337]  ? __pte_alloc+0x340/0x340
[ 2585.023307]  ? __put_compound_page+0xc0/0xc0
[ 2585.027721]  ? mark_held_locks+0xf0/0xf0
[ 2585.031794]  __handle_mm_fault+0x227a/0x41c0
[ 2585.036211]  ? vm_insert_page+0x9c0/0x9c0
[ 2585.040380]  ? check_preemption_disabled+0x41/0x280
[ 2585.045406]  handle_mm_fault+0x436/0xb10
[ 2585.049480]  __get_user_pages+0x6f0/0x1710
[ 2585.053726]  ? follow_page_mask+0x1d00/0x1d00
[ 2585.058237]  populate_vma_page_range+0x200/0x290
[ 2585.063004]  __mm_populate+0x1ea/0x350
[ 2585.066901]  ? populate_vma_page_range+0x290/0x290
[ 2585.071834]  ? do_mlock+0x6b0/0x6b0
[ 2585.075463]  ? security_capable+0x8f/0xc0
[ 2585.079622]  __se_sys_mlockall+0x362/0x4e0
[ 2585.083878]  do_syscall_64+0xf9/0x620
[ 2585.087700]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2585.092896] RIP: 0033:0x4665e9
[ 2585.096096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2585.115258] RSP: 002b:00007fd5cc707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2585.122970] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2585.130241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2585.137509] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2585.144781] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2585.152050] R13: 00007fff676f580f R14: 00007fd5cc707300 R15: 0000000000022000
[ 2586.348185] Mem-Info:
[ 2586.350648] active_anon:219483 inactive_anon:1090381 isolated_anon:0
[ 2586.350648]  active_file:10 inactive_file:0 isolated_file:0
[ 2586.350648]  unevictable:47273 dirty:0 writeback:0 unstable:0
[ 2586.350648]  slab_reclaimable:18309 slab_unreclaimable:146943
[ 2586.350648]  mapped:55083 shmem:9041 pagetables:52591 bounce:0
[ 2586.350648]  free:25000 free_pcp:0 free_cma:0
[ 2586.604021] Node 0 active_anon:699572kB inactive_anon:933836kB active_file:116kB inactive_file:0kB unevictable:166544kB isolated(anon):0kB isolated(file):0kB mapped:176404kB dirty:0kB writeback:0kB shmem:36140kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1144832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2586.735358] Node 1 active_anon:178360kB inactive_anon:3427688kB active_file:4kB inactive_file:4kB unevictable:22548kB isolated(anon):0kB isolated(file):0kB mapped:43928kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2586.875831] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:384kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2587.063964] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2587.063985] Node 0 DMA32 free:35888kB min:35996kB low:44992kB high:53988kB active_anon:699168kB inactive_anon:930400kB active_file:56kB inactive_file:520kB unevictable:166536kB writepending:0kB present:3129332kB managed:2763456kB mlocked:166536kB kernel_stack:21216kB pagetables:51984kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2587.064016] lowmem_reserve[]: 0 0 1 1 1
[ 2587.064033] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2587.064061] lowmem_reserve[]: 0 0 0 0 0
[ 2587.416068] Node 1 Normal free:53792kB min:53876kB low:67344kB high:80812kB active_anon:178356kB inactive_anon:3427688kB active_file:4kB inactive_file:4kB unevictable:22548kB writepending:0kB present:4194304kB managed:4128248kB mlocked:22548kB kernel_stack:51712kB pagetables:157924kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2587.567951] lowmem_reserve[]: 0 0 0 0 0
[ 2587.571960] Node 0 DMA: 7*4kB (U) 43*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 3*128kB (ME) 4*256kB (ME) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 10980kB
[ 2587.723911] Node 0 DMA32: 66*4kB (UME) 106*8kB (UM) 1490*16kB (UM) 362*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36536kB
[ 2587.803923] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2587.860859] Node 1 Normal: 61*4kB (UME) 1483*8kB (UME) 989*16kB (UME) 386*32kB (UME) 166*64kB (UME) 23*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53852kB
[ 2587.952742] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2587.983914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2587.992516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2588.082686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2588.132384] 11459 total pagecache pages
[ 2588.148108] 0 pages in swap cache
[ 2588.151603] Swap cache stats: add 0, delete 0, find 0/0
[ 2588.191579] Free swap  = 0kB
[ 2588.213935] Total swap = 0kB
[ 2588.217684] 2097051 pages RAM
[ 2588.220794] 0 pages HighMem/MovableOnly
[ 2588.261579] 369648 pages reserved
[ 2588.278758] 0 pages cma reserved
[ 2588.282148] Out of memory (oom_kill_allocating_task): Kill process 6305 (syz-executor.4) score 0 or sacrifice child
[ 2588.349189] Killed process 6305 (syz-executor.4) total-vm:93384kB, anon-rss:16492kB, file-rss:40196kB, shmem-rss:0kB
[ 2588.415854] oom_reaper: reaped process 6305 (syz-executor.4), now anon-rss:16492kB, file-rss:40192kB, shmem-rss:0kB
[ 2589.923734] Bluetooth: hci4: command 0x0409 tx timeout
[ 2591.456244] ieee802154 phy0 wpan0: encryption failed: -22
[ 2591.461834] ieee802154 phy1 wpan1: encryption failed: -22
[ 2592.003558] Bluetooth: hci4: command 0x041b tx timeout
[ 2593.500253] device hsr_slave_1 left promiscuous mode
[ 2593.509419] device hsr_slave_0 left promiscuous mode
[ 2593.522130] team0 (unregistering): Port device team_slave_1 removed
[ 2593.531981] team0 (unregistering): Port device team_slave_0 removed
[ 2593.545486] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 2593.557153] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 2593.586768] bond0 (unregistering): Released all slaves
[ 2593.594190] can: notifier: receive list not found for dev vcan0
[ 2593.624459] IPVS: ftp: loaded support on port[0] = 21
[ 2593.749515] chnl_net:caif_netlink_parms(): no params data found
[ 2594.083476] Bluetooth: hci4: command 0x040f tx timeout
[ 2594.092560] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2594.099507] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2594.112855] device bridge_slave_0 entered promiscuous mode
[ 2594.120766] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2594.132282] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2594.139797] device bridge_slave_1 entered promiscuous mode
[ 2594.174386] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 2594.190717] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 2594.213983] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 2594.221622] team0: Port device team_slave_0 added
[ 2594.227982] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 2594.235672] team0: Port device team_slave_1 added
[ 2594.259077] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2594.270892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2594.302435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2594.319598] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2594.326234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2594.352867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2594.369890] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 2594.377728] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 2594.414422] device hsr_slave_0 entered promiscuous mode
[ 2594.420346] device hsr_slave_1 entered promiscuous mode
[ 2594.431476] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 2594.438793] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 2594.571675] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2594.578084] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2594.584769] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2594.591158] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2594.649524] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2594.658589] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2594.678555] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2594.686650] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 2594.696658] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 2594.702779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2594.710166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2594.719411] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 2594.726288] 8021q: adding VLAN 0 to HW filter on device team0
[ 2594.735157] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 2594.742145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2594.750479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2594.758225] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2594.764635] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2594.773159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 2594.781917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2594.789956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2594.797687] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2594.804375] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2594.814746] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 2594.821859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2594.831995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 2594.840096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2594.850185] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 2594.857502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2594.867189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2594.875198] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2594.886100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 2594.892902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2594.904166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2594.914286] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 2594.921066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2594.929054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2594.939449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 2594.946525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2594.954339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2594.963922] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 2594.971120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2594.989038] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 2594.998922] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 2595.005961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2595.012615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2595.026278] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2595.040929] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready
[ 2595.050006] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready
[ 2595.057261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2595.065764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2595.098370] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready
[ 2595.106334] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready
[ 2595.112908] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready
[ 2595.122714] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready
[ 2595.129616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2595.137273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2595.146264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2595.153113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2595.162251] device veth0_vlan entered promiscuous mode
[ 2595.174678] device veth1_vlan entered promiscuous mode
[ 2595.180495] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready
[ 2595.189743] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready
[ 2595.201264] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
[ 2595.210992] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready
[ 2595.218521] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2595.226380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2595.234577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2595.242151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2595.251967] device veth0_macvtap entered promiscuous mode
[ 2595.258817] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
[ 2595.268414] device veth1_macvtap entered promiscuous mode
[ 2595.274939] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready
[ 2595.285664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
[ 2595.297358] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
[ 2595.306094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2595.315904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2595.327435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2595.338170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2595.348374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2595.358726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2595.368157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2595.377992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2595.387192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2595.396990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2595.407375] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready
[ 2595.414595] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2595.421964] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2595.429993] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2595.437571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2595.446081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2595.458965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2595.469265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2595.479117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2595.490611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2595.499829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2595.509684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2595.518925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2595.528798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2595.538075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2595.547847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2595.558047] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
[ 2595.565178] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2595.572702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2595.580720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2595.711438] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 2595.718671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2595.734208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2595.741775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2595.772069] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 2595.780509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2595.791567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2595.799545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
19:59:53 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

19:59:53 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)

19:59:53 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, 0x0, 0x4804c1, 0x0)
mlockall(0x3)

19:59:53 executing program 4:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

19:59:53 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

19:59:53 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

19:59:53 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)

[ 2596.163436] Bluetooth: hci4: command 0x0419 tx timeout
19:59:54 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)

19:59:54 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

19:59:54 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)

19:59:54 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

19:59:54 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2597.864400] syz-executor.0 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2597.933273] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 2598.002032] CPU: 0 PID: 6665 Comm: syz-executor.0 Not tainted 4.19.202-syzkaller #0
[ 2598.009924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2598.019287] Call Trace:
[ 2598.021879]  dump_stack+0x1fc/0x2ef
[ 2598.025494]  dump_header+0x15d/0xc3f
[ 2598.029190]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2598.034279]  ? ___ratelimit+0x319/0x590
[ 2598.038237]  oom_kill_process.cold+0x10/0x692
[ 2598.042725]  ? check_preemption_disabled+0x41/0x280
[ 2598.047739]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2598.053002]  out_of_memory+0x1072/0x1390
[ 2598.057051]  ? oom_killer_disable+0x270/0x270
[ 2598.061534]  ? mutex_trylock+0x15f/0x1a0
[ 2598.065581]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2598.070455]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2598.075284]  ? __lock_acquire+0x6de/0x3ff0
[ 2598.079503]  ? mark_held_locks+0xf0/0xf0
[ 2598.083553]  alloc_pages_vma+0xf2/0x780
[ 2598.087512]  do_anonymous_page+0x7c2/0x1be0
[ 2598.091831]  ? __pte_alloc+0x340/0x340
[ 2598.095696]  ? __put_compound_page+0xc0/0xc0
[ 2598.100084]  ? mark_held_locks+0xf0/0xf0
[ 2598.104125]  __handle_mm_fault+0x227a/0x41c0
[ 2598.108526]  ? vm_insert_page+0x9c0/0x9c0
[ 2598.112661]  ? check_preemption_disabled+0x41/0x280
[ 2598.117657]  handle_mm_fault+0x436/0xb10
[ 2598.121702]  __get_user_pages+0x6f0/0x1710
[ 2598.125934]  ? follow_page_mask+0x1d00/0x1d00
[ 2598.130512]  ? __fdget+0x1a0/0x230
[ 2598.134046]  populate_vma_page_range+0x200/0x290
[ 2598.138878]  __mm_populate+0x1ea/0x350
[ 2598.142768]  ? populate_vma_page_range+0x290/0x290
[ 2598.147684]  ? do_mlock+0x6b0/0x6b0
[ 2598.151296]  ? security_capable+0x8f/0xc0
[ 2598.155432]  __se_sys_mlockall+0x362/0x4e0
[ 2598.159653]  do_syscall_64+0xf9/0x620
[ 2598.163439]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2598.168609] RIP: 0033:0x4665e9
[ 2598.171783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2598.190667] RSP: 002b:00007f43d6822188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2598.198359] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2598.205621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2598.213004] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2598.220299] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2598.227559] R13: 00007ffda310918f R14: 00007f43d6822300 R15: 0000000000022000
[ 2598.260823] Mem-Info:
[ 2598.287602] active_anon:219993 inactive_anon:1090415 isolated_anon:0
[ 2598.287602]  active_file:42 inactive_file:35 isolated_file:0
[ 2598.287602]  unevictable:46545 dirty:0 writeback:0 unstable:0
[ 2598.287602]  slab_reclaimable:17885 slab_unreclaimable:146874
[ 2598.287602]  mapped:56157 shmem:9049 pagetables:53010 bounce:0
[ 2598.287602]  free:25049 free_pcp:13 free_cma:0
[ 2598.321900] Node 0 active_anon:699744kB inactive_anon:933772kB active_file:104kB inactive_file:76kB unevictable:161836kB isolated(anon):0kB isolated(file):0kB mapped:178196kB dirty:0kB writeback:0kB shmem:36144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1144832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2598.368507] Node 1 active_anon:180228kB inactive_anon:3427888kB active_file:64kB inactive_file:64kB unevictable:24344kB isolated(anon):0kB isolated(file):0kB mapped:46432kB dirty:0kB writeback:0kB shmem:52kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2598.409677] Node 0 DMA free:10916kB min:204kB low:252kB high:300kB active_anon:384kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2598.438078] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2598.462461] Node 0 DMA32 free:35668kB min:35996kB low:44992kB high:53988kB active_anon:699360kB inactive_anon:930400kB active_file:4kB inactive_file:4kB unevictable:161836kB writepending:0kB present:3129332kB managed:2763456kB mlocked:161836kB kernel_stack:21216kB pagetables:52436kB bounce:0kB free_pcp:52kB local_pcp:52kB free_cma:0kB
[ 2598.498134] lowmem_reserve[]: 0 0 1 1 1
[ 2598.502703] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2598.543524] lowmem_reserve[]: 0 0 0 0 0
[ 2598.547957] Node 1 Normal free:53612kB min:53876kB low:67344kB high:80812kB active_anon:180228kB inactive_anon:3427888kB active_file:84kB inactive_file:32kB unevictable:24344kB writepending:0kB present:4194304kB managed:4128248kB mlocked:24344kB kernel_stack:52352kB pagetables:159348kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2598.580434] lowmem_reserve[]: 0 0 0 0 0
[ 2598.589520] Node 0 DMA: 11*4kB (UM) 49*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (MEH) 5*256kB (MEH) 4*512kB (MEH) 3*1024kB (MEH) 1*2048kB (M) 0*4096kB = 10916kB
[ 2598.610866] Node 0 DMA32: 54*4kB (UMH) 400*8kB (UMH) 1316*16kB (UEH) 364*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36120kB
[ 2598.629928] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2598.641141] Node 1 Normal: 93*4kB (UME) 961*8kB (UME) 965*16kB (UME) 389*32kB (UME) 184*64kB (UME) 36*128kB (UM) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53612kB
[ 2598.660007] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2598.691222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2598.700302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2598.736908] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2598.756566] 12487 total pagecache pages
[ 2598.761661] 0 pages in swap cache
[ 2598.787285] Swap cache stats: add 0, delete 0, find 0/0
[ 2598.800324] Free swap  = 0kB
[ 2598.809080] Total swap = 0kB
[ 2598.812543] 2097051 pages RAM
[ 2598.816835] 0 pages HighMem/MovableOnly
[ 2598.820806] 369648 pages reserved
[ 2598.831716] 0 pages cma reserved
[ 2598.838911] Out of memory (oom_kill_allocating_task): Kill process 6665 (syz-executor.0) score 0 or sacrifice child
[ 2598.864914] Killed process 6662 (syz-executor.0) total-vm:93252kB, anon-rss:784kB, file-rss:39228kB, shmem-rss:0kB
[ 2598.882236] oom_reaper: reaped process 6662 (syz-executor.0), now anon-rss:828kB, file-rss:40192kB, shmem-rss:0kB
19:59:57 executing program 4:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

19:59:57 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, 0x0, 0x4804c1, 0x0)
mlockall(0x3)

19:59:57 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2599.873769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2601.528430] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=-1000
[ 2601.591832] systemd-udevd cpuset=/ mems_allowed=0-1
[ 2601.650718] CPU: 1 PID: 4704 Comm: systemd-udevd Not tainted 4.19.202-syzkaller #0
[ 2601.658450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2601.667805] Call Trace:
[ 2601.670400]  dump_stack+0x1fc/0x2ef
[ 2601.674032]  dump_header+0x15d/0xc3f
[ 2601.677748]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2601.682849]  ? ___ratelimit+0x319/0x590
[ 2601.686998]  oom_kill_process.cold+0x10/0x692
[ 2601.691494]  ? lock_downgrade+0x720/0x720
[ 2601.695646]  ? check_preemption_disabled+0x41/0x280
[ 2601.700664]  out_of_memory+0x34d/0x1390
[ 2601.704645]  ? oom_killer_disable+0x270/0x270
[ 2601.709142]  ? mutex_trylock+0x15f/0x1a0
[ 2601.713206]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2601.718059]  ? find_get_entry+0x4cd/0x8a0
[ 2601.722217]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2601.727088]  alloc_pages_current+0x193/0x2a0
[ 2601.731502]  filemap_fault+0x146e/0x2180
[ 2601.735573]  ext4_filemap_fault+0x84/0xb0
[ 2601.739720]  __do_fault+0x10b/0x4b0
[ 2601.743350]  __handle_mm_fault+0x273b/0x41c0
[ 2601.747758]  ? __phys_addr_symbol+0x2c/0x70
[ 2601.752079]  ? vm_insert_page+0x9c0/0x9c0
[ 2601.756248]  ? check_preemption_disabled+0x41/0x280
[ 2601.761268]  handle_mm_fault+0x436/0xb10
[ 2601.765333]  __do_page_fault+0x68e/0xd60
[ 2601.769401]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2601.774426]  ? spurious_fault+0x840/0x840
[ 2601.778671]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2601.783515]  ? page_fault+0x8/0x30
[ 2601.787058]  page_fault+0x1e/0x30
[ 2601.790506] RIP: 0033:0x7f3c0566d733
[ 2601.794214] Code: Bad RIP value.
[ 2601.797661] RSP: 002b:00007ffd490024b8 EFLAGS: 00010283
[ 2601.803550] RAX: 00000000000007dc RBX: 00007ffd49002a30 RCX: 0000000000000005
[ 2601.810927] RDX: 0000000000000005 RSI: 0000000000000025 RDI: 000055cd7a9557dc
[ 2601.818467] RBP: 00007ffd49002a20 R08: 0000000000000001 R09: 0000000000000015
[ 2601.825737] R10: 0000000000000064 R11: 00000000fffffffb R12: 000055cd7a9557ca
[ 2601.833008] R13: 00007ffd49002ba8 R14: 0000000000000000 R15: 000055cd7a9557dc
[ 2601.854781] Mem-Info:
[ 2601.857678] active_anon:219996 inactive_anon:1090414 isolated_anon:0
[ 2601.857678]  active_file:59 inactive_file:0 isolated_file:0
[ 2601.857678]  unevictable:45785 dirty:0 writeback:0 unstable:0
[ 2601.857678]  slab_reclaimable:17843 slab_unreclaimable:147480
[ 2601.857678]  mapped:56170 shmem:9048 pagetables:53072 bounce:0
[ 2601.857678]  free:25027 free_pcp:0 free_cma:0
[ 2601.892392] Node 0 active_anon:700180kB inactive_anon:933776kB active_file:104kB inactive_file:8kB unevictable:158244kB isolated(anon):0kB isolated(file):0kB mapped:178892kB dirty:0kB writeback:0kB shmem:36152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1144832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2601.983849] Node 1 active_anon:179804kB inactive_anon:3427880kB active_file:8kB inactive_file:8kB unevictable:24988kB isolated(anon):0kB isolated(file):0kB mapped:45684kB dirty:0kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2602.047650] Node 0 DMA free:10916kB min:204kB low:252kB high:300kB active_anon:384kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2602.090866] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2602.096142] Node 0 DMA32 free:35936kB min:35996kB low:44992kB high:53988kB active_anon:699796kB inactive_anon:930404kB active_file:60kB inactive_file:56kB unevictable:158244kB writepending:0kB present:3129332kB managed:2763456kB mlocked:158244kB kernel_stack:21376kB pagetables:52924kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2602.126828] lowmem_reserve[]: 0 0 1 1 1
[ 2602.130912] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2602.180271] lowmem_reserve[]: 0 0 0 0 0
[ 2602.191969] Node 1 Normal free:53760kB min:53876kB low:67344kB high:80812kB active_anon:179804kB inactive_anon:3427880kB active_file:8kB inactive_file:8kB unevictable:24988kB writepending:0kB present:4194304kB managed:4128248kB mlocked:24988kB kernel_stack:52352kB pagetables:159108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2602.241753] lowmem_reserve[]: 0 0 0 0 0
[ 2602.264310] Node 0 DMA: 11*4kB (UM) 49*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (MEH) 5*256kB (MEH) 4*512kB (MEH) 3*1024kB (MEH) 1*2048kB (M) 0*4096kB = 10916kB
[ 2602.299199] Node 0 DMA32: 233*4kB (UMH) 325*8kB (UEH) 1323*16kB (UEH) 359*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36188kB
[ 2602.321361] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2602.346108] Node 1 Normal: 207*4kB (UME) 922*8kB (UME) 964*16kB (UME) 388*32kB (UME) 185*64kB (UME) 36*128kB (UM) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53772kB
[ 2602.371160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2602.380270] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2602.401732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2602.430894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2602.440755] 12502 total pagecache pages
[ 2602.457672] 0 pages in swap cache
[ 2602.461319] Swap cache stats: add 0, delete 0, find 0/0
[ 2602.492880] Free swap  = 0kB
[ 2602.496114] Total swap = 0kB
[ 2602.499310] 2097051 pages RAM
[ 2602.519099] 0 pages HighMem/MovableOnly
[ 2602.523284] 369648 pages reserved
[ 2602.526877] 0 pages cma reserved
[ 2602.530385] Out of memory: Kill process 23800 (syz-executor.0) score 1010 or sacrifice child
[ 2602.540034] Killed process 23800 (syz-executor.0) total-vm:93516kB, anon-rss:36900kB, file-rss:34628kB, shmem-rss:0kB
[ 2602.625438] oom_reaper: reaped process 23800 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
19:59:58 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

19:59:58 executing program 1:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

19:59:58 executing program 5:
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)

20:00:00 executing program 1:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:00 executing program 5:
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)

20:00:00 executing program 1:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:00 executing program 5:
fork()
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)

20:00:01 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mlockall(0x3)

20:00:01 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:00:01 executing program 4:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:00:01 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:01 executing program 5:
fork()
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)

20:00:01 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:01 executing program 5:
fork()
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)

[ 2603.938939] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000
[ 2603.959622] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 2604.044422] CPU: 1 PID: 6746 Comm: syz-executor.5 Not tainted 4.19.202-syzkaller #0
[ 2604.052242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2604.061593] Call Trace:
[ 2604.064191]  dump_stack+0x1fc/0x2ef
[ 2604.067826]  dump_header+0x15d/0xc3f
[ 2604.071546]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2604.076660]  ? ___ratelimit+0x319/0x590
[ 2604.080639]  oom_kill_process.cold+0x10/0x692
[ 2604.085142]  ? check_preemption_disabled+0x41/0x280
[ 2604.090167]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2604.095449]  out_of_memory+0x1072/0x1390
[ 2604.099517]  ? oom_killer_disable+0x270/0x270
[ 2604.104024]  ? mutex_trylock+0x15f/0x1a0
[ 2604.108095]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2604.112960]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2604.117821]  ? __lock_acquire+0x6de/0x3ff0
[ 2604.122061]  alloc_pages_vma+0xf2/0x780
[ 2604.126045]  wp_page_copy+0x219/0x2c40
[ 2604.129944]  ? _vm_normal_page+0x132/0x510
[ 2604.134180]  ? follow_pte_pmd+0x60/0x60
[ 2604.138253]  do_wp_page+0x2d4/0x2210
[ 2604.141974]  ? finish_mkwrite_fault+0x640/0x640
[ 2604.146732]  ? __handle_mm_fault+0x15f6/0x41c0
[ 2604.151318]  ? mark_held_locks+0xf0/0xf0
[ 2604.155396]  __handle_mm_fault+0x258b/0x41c0
[ 2604.159810]  ? vm_insert_page+0x9c0/0x9c0
[ 2604.163958]  ? rt_mutex_futex_unlock+0xf0/0xf0
[ 2604.168555]  ? check_preemption_disabled+0x41/0x280
[ 2604.173578]  handle_mm_fault+0x436/0xb10
[ 2604.177655]  __do_page_fault+0x68e/0xd60
[ 2604.181722]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2604.186743]  ? spurious_fault+0x840/0x840
[ 2604.190893]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2604.195830]  ? page_fault+0x8/0x30
[ 2604.199372]  page_fault+0x1e/0x30
[ 2604.202822] RIP: 0033:0x4123f7
[ 2604.206012] Code: 0a 00 00 49 69 c7 b8 00 00 00 80 7b f8 00 44 89 7c 24 34 48 8d 6b f4 48 89 5c 24 28 48 89 44 24 40 75 bc 80 3d 19 dd 12 00 01 <c6> 43 f8 01 b9 40 42 0f 00 48 89 de 48 19 c0 44 89 7b f4 ba 81 00
[ 2604.225001] RSP: 002b:00007ffc777bffc0 EFLAGS: 00010246
[ 2604.230476] RAX: 00000000000000b8 RBX: 000000000056c044 RCX: 0000000000000000
[ 2604.237750] RDX: 00007ffc777c0120 RSI: 0000000000000000 RDI: 00007ffc777c0148
[ 2604.245020] RBP: 000000000056c038 R08: 0000000000000000 R09: 000002ba2c37d607
[ 2604.252387] R10: 000153835ff23068 R11: 0000000000000016 R12: 0000000000570090
[ 2604.259654] R13: 00007ffc777c00c0 R14: 000000000056bf80 R15: 0000000000000001
[ 2604.940934] Mem-Info:
[ 2604.947655] active_anon:221657 inactive_anon:1081708 isolated_anon:0
[ 2604.947655]  active_file:14 inactive_file:15 isolated_file:0
[ 2604.947655]  unevictable:50325 dirty:0 writeback:0 unstable:0
[ 2604.947655]  slab_reclaimable:17740 slab_unreclaimable:149647
[ 2604.947655]  mapped:57256 shmem:9048 pagetables:53357 bounce:0
[ 2604.947655]  free:25101 free_pcp:126 free_cma:0
[ 2605.012209] Node 0 active_anon:706596kB inactive_anon:898944kB active_file:36kB inactive_file:36kB unevictable:176140kB isolated(anon):0kB isolated(file):0kB mapped:185500kB dirty:0kB writeback:0kB shmem:36144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1130496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2605.042054] Node 1 active_anon:180032kB inactive_anon:3427888kB active_file:20kB inactive_file:24kB unevictable:25160kB isolated(anon):0kB isolated(file):0kB mapped:43524kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2605.093443] Node 0 DMA free:10920kB min:204kB low:252kB high:300kB active_anon:384kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2605.157712] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2605.173323] Node 0 DMA32 free:35820kB min:35996kB low:44992kB high:53988kB active_anon:706212kB inactive_anon:895572kB active_file:36kB inactive_file:36kB unevictable:176140kB writepending:0kB present:3129332kB managed:2763456kB mlocked:176140kB kernel_stack:21408kB pagetables:53064kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB
[ 2605.238582] lowmem_reserve[]: 0 0 1 1 1
[ 2605.257252] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2605.315854] lowmem_reserve[]: 0 0 0 0 0
[ 2605.347742] Node 1 Normal free:53664kB min:53876kB low:67344kB high:80812kB active_anon:180032kB inactive_anon:3427888kB active_file:20kB inactive_file:24kB unevictable:25160kB writepending:0kB present:4194304kB managed:4128248kB mlocked:25160kB kernel_stack:52736kB pagetables:160108kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB
[ 2605.390340] lowmem_reserve[]: 0 0 0 0 0
[ 2605.442836] Node 0 DMA: 12*4kB (UME) 49*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10920kB
[ 2605.485839] Node 0 DMA32: 1235*4kB (UME) 380*8kB (UME) 844*16kB (UME) 380*32kB (UME) 8*64kB (M) 3*128kB (M) 3*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35820kB
[ 2605.538921] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2605.551714] Node 1 Normal: 32*4kB (UE) 862*8kB (UME) 965*16kB (UME) 381*32kB (UME) 179*64kB (UME) 39*128kB (UM) 8*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53664kB
[ 2605.568435] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2605.615724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2605.629871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2605.662568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2605.691450] 13574 total pagecache pages
[ 2605.724268] 0 pages in swap cache
[ 2605.740534] Swap cache stats: add 0, delete 0, find 0/0
[ 2605.751299] Free swap  = 0kB
[ 2605.791257] Total swap = 0kB
[ 2605.801251] 2097051 pages RAM
[ 2605.839224] 0 pages HighMem/MovableOnly
[ 2605.887521] 369648 pages reserved
[ 2605.900082] 0 pages cma reserved
[ 2605.910769] Out of memory (oom_kill_allocating_task): Kill process 6746 (syz-executor.5) score 0 or sacrifice child
[ 2605.967637] Killed process 6750 (syz-executor.5) total-vm:93252kB, anon-rss:112kB, file-rss:34840kB, shmem-rss:0kB
20:00:04 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:00:04 executing program 5:
fork()
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)

20:00:04 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:04 executing program 4:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:00:04 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:04 executing program 5:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:04 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="f8c00180080003000301000008000240070000000800030005000000080002000100000054e2fa4501f3e94fcb8fed41de9dd0c889c763e7505c7fd1f769cd2ae6a1db6719b8bedfaeefee870023bedc1274df26cbe6b710ed57f6ff45240435e825af05d02f600a354ab813238a963d48210c911da92959adc79dd997380c3633fc3e877275a161ea17c2b6124cc758bb3e3bc8e660aa6755c50db0b6618e00cbcef799ebc1d35b3ec8c3e9ed00b0264a669ac8cca995068dd481de560aed03630281dee7c258ea3d7416ddc570ab10be7d7b9b620db0be71f15998f0c6975a443fd9e6e97c8e3bc61e16414030ca7b34af48c1f40a9b6df00b9303e2cdb3e4d9be291bd40d32ebdc42a45293da5b8bbba5cc7095ad8a9d105070cc78c1a6d774113b5356a961c5573917a1029aa63bf2fdfc2f57ab256a4bb88ad26efc1fe63b3619bdc5c2fa481189dd001bfe3b32cd9e1c4a0650d4d140e9ea4a77f2dbbd38d98a072e46a30c8b279acc3ce8c9cfae3b1bcd497fe13d09fe695c0acd35fafa023af9b75198aac0d518a49ef09ec967330d00"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mlockall(0x3)

20:00:04 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x0, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:04 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x0, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:05 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:05 executing program 0:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2608.006662] syz-executor.1 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000
[ 2608.068572] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 2608.158130] CPU: 1 PID: 6800 Comm: syz-executor.1 Not tainted 4.19.202-syzkaller #0
[ 2608.165959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2608.175313] Call Trace:
[ 2608.177903]  dump_stack+0x1fc/0x2ef
[ 2608.181531]  dump_header+0x15d/0xc3f
[ 2608.185247]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2608.190367]  ? ___ratelimit+0x319/0x590
[ 2608.194343]  oom_kill_process.cold+0x10/0x692
[ 2608.198840]  ? check_preemption_disabled+0x41/0x280
[ 2608.203857]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2608.209133]  out_of_memory+0x1072/0x1390
[ 2608.213205]  ? oom_killer_disable+0x270/0x270
[ 2608.217701]  ? mutex_trylock+0x15f/0x1a0
[ 2608.221764]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2608.226615]  ? find_get_entry+0x4cd/0x8a0
[ 2608.230772]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2608.235642]  alloc_pages_current+0x193/0x2a0
[ 2608.240051]  filemap_fault+0x146e/0x2180
[ 2608.244123]  ext4_filemap_fault+0x84/0xb0
[ 2608.248268]  __do_fault+0x10b/0x4b0
[ 2608.252077]  __handle_mm_fault+0x273b/0x41c0
[ 2608.256485]  ? vm_insert_page+0x9c0/0x9c0
[ 2608.260668]  ? check_preemption_disabled+0x41/0x280
[ 2608.265692]  handle_mm_fault+0x436/0xb10
[ 2608.269755]  __do_page_fault+0x68e/0xd60
[ 2608.273824]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2608.278845]  ? spurious_fault+0x840/0x840
[ 2608.282992]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2608.287839]  ? page_fault+0x8/0x30
[ 2608.291378]  page_fault+0x1e/0x30
[ 2608.294828] RIP: 0033:0x406e36
[ 2608.298022] Code: 8d 35 8d 82 0b 00 31 c0 48 8d 3d 93 82 0b 00 e8 50 d1 ff ff 48 8b 17 4c 8d 05 d6 91 56 00 4c 39 c2 73 0b 48 8d 42 08 48 89 07 <48> 8b 02 c3 50 49 8d 88 00 00 c0 ff 48 8d 35 ab 82 0b 00 31 c0 48
[ 2608.317001] RSP: 002b:00007ffcdaf8b868 EFLAGS: 00010287
[ 2608.322361] RAX: 00000000005704f0 RBX: 000000000056cb00 RCX: 000000000027c798
[ 2608.329627] RDX: 00000000005704e8 RSI: 00000000000f4240 RDI: 00007ffcdaf8b928
[ 2608.336890] RBP: 00007ffcdaf8b928 R08: 0000000000970000 R09: 000002bb38ff27f1
[ 2608.344153] R10: 001cca258eb10dee R11: 0000000000000001 R12: 000000000027cb2b
[ 2608.351414] R13: 00000000000003e8 R14: 000000000056bf80 R15: 000000000027ca3a
[ 2608.882337] Bluetooth: hci2: command 0x0406 tx timeout
[ 2610.475661] Mem-Info:
[ 2610.478109] active_anon:222166 inactive_anon:1081711 isolated_anon:0
[ 2610.478109]  active_file:16 inactive_file:4 isolated_file:0
[ 2610.478109]  unevictable:48548 dirty:0 writeback:0 unstable:0
[ 2610.478109]  slab_reclaimable:17631 slab_unreclaimable:150476
[ 2610.478109]  mapped:56208 shmem:9048 pagetables:53707 bounce:0
[ 2610.478109]  free:25109 free_pcp:111 free_cma:0
[ 2610.879054] Node 0 active_anon:707720kB inactive_anon:898960kB active_file:60kB inactive_file:0kB unevictable:170836kB isolated(anon):0kB isolated(file):0kB mapped:182540kB dirty:0kB writeback:0kB shmem:36144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1128448kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2611.170661] Node 1 active_anon:180872kB inactive_anon:3427884kB active_file:4kB inactive_file:8kB unevictable:23356kB isolated(anon):0kB isolated(file):0kB mapped:42292kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2611.460225] Node 0 DMA free:10920kB min:204kB low:252kB high:300kB active_anon:384kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2611.745396] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2611.750523] Node 0 DMA32 free:35760kB min:35996kB low:44992kB high:53988kB active_anon:707336kB inactive_anon:895588kB active_file:12kB inactive_file:20kB unevictable:170836kB writepending:0kB present:3129332kB managed:2763456kB mlocked:170836kB kernel_stack:21888kB pagetables:54108kB bounce:0kB free_pcp:324kB local_pcp:264kB free_cma:0kB
[ 2612.097746] lowmem_reserve[]: 0 0 1 1 1
[ 2612.120391] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2612.184938] lowmem_reserve[]: 0 0 0 0 0
[ 2612.207703] Node 1 Normal free:59712kB min:53876kB low:67344kB high:80812kB active_anon:180872kB inactive_anon:3427884kB active_file:520kB inactive_file:0kB unevictable:17312kB writepending:0kB present:4194304kB managed:4128248kB mlocked:17496kB kernel_stack:52608kB pagetables:160364kB bounce:0kB free_pcp:2496kB local_pcp:1488kB free_cma:0kB
[ 2612.245508] lowmem_reserve[]: 0 0 0 0 0
20:00:10 executing program 0:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2612.274616] Node 0 DMA: 13*4kB (UME) 49*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10924kB
[ 2612.322191] Node 0 DMA32: 1339*4kB (UME) 552*8kB (UME) 730*16kB (UME) 395*32kB (UME) 8*64kB (UM) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36396kB
[ 2612.343541] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2612.363143] Node 1 Normal: 384*4kB (UME) 1294*8kB (UME) 996*16kB (UME) 385*32kB (UME) 166*64kB (UME) 36*128kB (UM) 9*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 58192kB
[ 2612.421634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2612.431251] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2612.443393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2612.454527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2612.482297] 13611 total pagecache pages
[ 2612.486291] 0 pages in swap cache
[ 2612.489737] Swap cache stats: add 0, delete 0, find 0/0
[ 2612.531793] Free swap  = 0kB
[ 2612.535888] Total swap = 0kB
[ 2612.539924] 2097051 pages RAM
[ 2612.548043] 0 pages HighMem/MovableOnly
[ 2612.552796] 369648 pages reserved
[ 2612.556367] 0 pages cma reserved
[ 2612.571779] Out of memory (oom_kill_allocating_task): Kill process 6800 (syz-executor.1) score 0 or sacrifice child
[ 2612.612480] Killed process 6800 (syz-executor.1) total-vm:93252kB, anon-rss:104kB, file-rss:34800kB, shmem-rss:0kB
[ 2612.634948] oom_reaper: reaped process 6800 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
20:00:10 executing program 3:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:00:10 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x0, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:10 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mlockall(0x3)

20:00:10 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:10 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:00:10 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:10 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2613.117719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
20:00:10 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:11 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:11 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:00:11 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2614.003100] systemd-udevd invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000
[ 2614.094467] systemd-udevd cpuset=/ mems_allowed=0-1
[ 2614.128990] CPU: 0 PID: 4704 Comm: systemd-udevd Not tainted 4.19.202-syzkaller #0
[ 2614.136714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2614.146064] Call Trace:
[ 2614.148658]  dump_stack+0x1fc/0x2ef
[ 2614.152290]  dump_header+0x15d/0xc3f
[ 2614.156013]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2614.161113]  ? ___ratelimit+0x319/0x590
[ 2614.165089]  oom_kill_process.cold+0x10/0x692
[ 2614.169681]  ? lock_downgrade+0x720/0x720
[ 2614.173837]  ? check_preemption_disabled+0x41/0x280
[ 2614.178860]  out_of_memory+0x34d/0x1390
[ 2614.182843]  ? oom_killer_disable+0x270/0x270
[ 2614.187348]  ? mutex_trylock+0x15f/0x1a0
[ 2614.191415]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2614.196296]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2614.201136]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2614.205991]  ? mark_held_locks+0xf0/0xf0
[ 2614.210050]  ? debug_object_activate+0x12f/0x450
[ 2614.214816]  ? ____cache_alloc_node+0x156/0x1d0
[ 2614.219495]  ? cache_grow_begin+0x64/0x8a0
[ 2614.223734]  cache_grow_begin+0xa4/0x8a0
[ 2614.227807]  fallback_alloc+0x213/0x2e0
[ 2614.231783]  kmem_cache_alloc+0x1e4/0x370
[ 2614.235932]  getname_flags+0xce/0x590
[ 2614.239743]  user_path_at_empty+0x2a/0x50
[ 2614.243892]  do_readlinkat+0xcd/0x2f0
[ 2614.247694]  ? cp_compat_stat+0x930/0x930
[ 2614.251841]  ? syscall_slow_exit_work+0x630/0x630
[ 2614.256686]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 2614.261273]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 2614.266645]  __x64_sys_readlinkat+0x93/0xf0
[ 2614.270967]  do_syscall_64+0xf9/0x620
[ 2614.274796]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2614.279985] RIP: 0033:0x7f3c056c00ba
[ 2614.283700] Code: Bad RIP value.
[ 2614.287061] RSP: 002b:00007ffd49002b28 EFLAGS: 00000206 ORIG_RAX: 000000000000010b
[ 2614.294791] RAX: ffffffffffffffda RBX: 000055cd7b92c530 RCX: 00007f3c056c00ba
[ 2614.302059] RDX: 000055cd7b92c530 RSI: 000055cd7b8fae00 RDI: 00000000ffffff9c
[ 2614.309324] RBP: 0000000000000064 R08: 000055cd7a955670 R09: 0000000000000070
[ 2614.316590] R10: 0000000000000063 R11: 0000000000000206 R12: 000055cd7b8fae00
[ 2614.323860] R13: 00000000ffffff9c R14: 00007ffd49002b80 R15: 0000000000000063
[ 2614.539883] Mem-Info:
[ 2614.582570] active_anon:224340 inactive_anon:1081706 isolated_anon:0
[ 2614.582570]  active_file:16 inactive_file:0 isolated_file:0
[ 2614.582570]  unevictable:47105 dirty:0 writeback:0 unstable:0
[ 2614.582570]  slab_reclaimable:17605 slab_unreclaimable:149389
[ 2614.582570]  mapped:56172 shmem:9048 pagetables:53910 bounce:0
[ 2614.582570]  free:25056 free_pcp:0 free_cma:0
[ 2614.818686] Node 0 active_anon:716132kB inactive_anon:898940kB active_file:28kB inactive_file:40kB unevictable:164104kB isolated(anon):0kB isolated(file):0kB mapped:181796kB dirty:0kB writeback:0kB shmem:36152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1128448kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2614.897298] Node 1 active_anon:181228kB inactive_anon:3427884kB active_file:8kB inactive_file:12kB unevictable:24452kB isolated(anon):0kB isolated(file):0kB mapped:42892kB dirty:0kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2614.959734] Node 0 DMA free:10924kB min:204kB low:252kB high:300kB active_anon:384kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2615.161136] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2615.200166] Node 0 DMA32 free:35820kB min:35996kB low:44992kB high:53988kB active_anon:715756kB inactive_anon:895568kB active_file:44kB inactive_file:40kB unevictable:164104kB writepending:0kB present:3129332kB managed:2763456kB mlocked:164104kB kernel_stack:21920kB pagetables:54456kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2615.426367] lowmem_reserve[]: 0 0 1 1 1
[ 2615.430652] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2615.539155] lowmem_reserve[]: 0 0 0 0 0
[ 2615.573877] Node 1 Normal free:53640kB min:53876kB low:67344kB high:80812kB active_anon:181228kB inactive_anon:3427884kB active_file:8kB inactive_file:12kB unevictable:24452kB writepending:0kB present:4194304kB managed:4128248kB mlocked:24452kB kernel_stack:53024kB pagetables:160928kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2615.810360] lowmem_reserve[]: 0 0 0 0 0
[ 2615.834215] Node 0 DMA: 13*4kB (UME) 49*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10924kB
[ 2615.960536] Node 0 DMA32: 1472*4kB (UE) 355*8kB (UME) 607*16kB (UME) 413*32kB (UME) 10*64kB (UM) 1*128kB (M) 3*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 35240kB
[ 2615.978174] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2615.993390] Node 1 Normal: 42*4kB (UME) 878*8kB (UME) 1029*16kB (UME) 381*32kB (UME) 168*64kB (UME) 33*128kB (UM) 9*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53640kB
[ 2616.043062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2616.132667] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2616.169303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2616.221760] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2616.252172] 12783 total pagecache pages
[ 2616.265078] 0 pages in swap cache
[ 2616.276550] Swap cache stats: add 0, delete 0, find 0/0
[ 2616.295643] Free swap  = 0kB
[ 2616.309535] Total swap = 0kB
[ 2616.320524] 2097051 pages RAM
[ 2616.327699] 0 pages HighMem/MovableOnly
[ 2616.354917] 369648 pages reserved
[ 2616.366369] 0 pages cma reserved
[ 2616.387651] Out of memory: Kill process 24375 (syz-executor.0) score 1010 or sacrifice child
[ 2616.425743] Killed process 24375 (syz-executor.0) total-vm:93516kB, anon-rss:36900kB, file-rss:34628kB, shmem-rss:0kB
[ 2616.520235] oom_reaper: reaped process 24375 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
20:00:14 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:15 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x0)

20:00:15 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mlockall(0x3)

20:00:15 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:15 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:00:15 executing program 3:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:00:15 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2617.569954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2617.863441] syz-executor.1 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2617.940320] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 2617.975004] CPU: 1 PID: 25752 Comm: syz-executor.1 Not tainted 4.19.202-syzkaller #0
[ 2617.982907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2617.992262] Call Trace:
[ 2617.994859]  dump_stack+0x1fc/0x2ef
[ 2617.998518]  dump_header+0x15d/0xc3f
[ 2618.002239]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2618.007354]  ? ___ratelimit+0x319/0x590
[ 2618.011338]  oom_kill_process.cold+0x10/0x692
[ 2618.015835]  ? check_preemption_disabled+0x41/0x280
[ 2618.020852]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2618.026130]  out_of_memory+0x1072/0x1390
[ 2618.030196]  ? oom_killer_disable+0x270/0x270
[ 2618.034688]  ? mutex_trylock+0x15f/0x1a0
[ 2618.038759]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2618.043607]  ? find_get_entry+0x4cd/0x8a0
[ 2618.047762]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2618.052631]  alloc_pages_current+0x193/0x2a0
[ 2618.057040]  filemap_fault+0x146e/0x2180
[ 2618.061113]  ext4_filemap_fault+0x84/0xb0
[ 2618.065266]  __do_fault+0x10b/0x4b0
[ 2618.068896]  __handle_mm_fault+0x273b/0x41c0
[ 2618.073303]  ? debug_object_free+0x1cc/0x380
[ 2618.077710]  ? vm_insert_page+0x9c0/0x9c0
[ 2618.081871]  ? check_preemption_disabled+0x41/0x280
[ 2618.086893]  handle_mm_fault+0x436/0xb10
[ 2618.090950]  __do_page_fault+0x68e/0xd60
[ 2618.095007]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2618.100027]  ? spurious_fault+0x840/0x840
[ 2618.104179]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2618.109030]  ? page_fault+0x8/0x30
[ 2618.112570]  page_fault+0x1e/0x30
[ 2618.116013] RIP: 0033:0x413387
[ 2618.119203] Code: db 34 b6 d7 82 de 1b 43 48 f7 a4 24 d8 00 00 00 48 8b 05 44 20 09 01 48 69 8c 24 d0 00 00 00 e8 03 00 00 48 c1 ea 12 48 01 ca <8b> 08 48 89 d0 41 39 ce 4c 0f 45 ea 48 2b 44 24 10 48 3b 05 e1 1f
[ 2618.138098] RSP: 002b:00007ffcdaf8ba40 EFLAGS: 00010206
[ 2618.143458] RAX: 0000001b2c820000 RBX: 0000000000000453 RCX: 000000000027f290
[ 2618.150723] RDX: 000000000027f299 RSI: 00007ffcdaf8bb10 RDI: 00007ffcdaf8b9fc
[ 2618.157987] RBP: 00007ffcdaf8baac R08: 00007ffcdafce000 R09: 000002bde96153e8
[ 2618.165249] R10: 0000497fc488247d R11: 0000000000000001 R12: 0000000000000032
[ 2618.172516] R13: 000000000027f1b5 R14: 0000000000000000 R15: 00007ffcdaf8bb10
[ 2618.198833] Mem-Info:
[ 2618.219160] active_anon:225018 inactive_anon:1072527 isolated_anon:0
[ 2618.219160]  active_file:34 inactive_file:0 isolated_file:0
[ 2618.219160]  unevictable:55574 dirty:0 writeback:0 unstable:0
[ 2618.219160]  slab_reclaimable:17652 slab_unreclaimable:149243
[ 2618.219160]  mapped:61858 shmem:9048 pagetables:54110 bounce:0
[ 2618.219160]  free:25042 free_pcp:9 free_cma:0
[ 2618.266069] Node 0 active_anon:718276kB inactive_anon:898488kB active_file:120kB inactive_file:0kB unevictable:162376kB isolated(anon):0kB isolated(file):0kB mapped:189328kB dirty:0kB writeback:0kB shmem:36144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1128448kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2618.299348] Node 1 active_anon:181796kB inactive_anon:3391620kB active_file:16kB inactive_file:20kB unevictable:59920kB isolated(anon):0kB isolated(file):0kB mapped:58104kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2618.337427] Node 0 DMA free:10924kB min:204kB low:252kB high:300kB active_anon:384kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2618.369347] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2618.374992] Node 0 DMA32 free:35836kB min:35996kB low:44992kB high:53988kB active_anon:717892kB inactive_anon:895116kB active_file:44kB inactive_file:36kB unevictable:162176kB writepending:0kB present:3129332kB managed:2763456kB mlocked:162176kB kernel_stack:22112kB pagetables:54548kB bounce:0kB free_pcp:36kB local_pcp:36kB free_cma:0kB
[ 2618.408193] lowmem_reserve[]: 0 0 1 1 1
[ 2618.412574] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2618.451823] lowmem_reserve[]: 0 0 0 0 0
[ 2618.456238] Node 1 Normal free:53408kB min:53876kB low:67344kB high:80812kB active_anon:181796kB inactive_anon:3391620kB active_file:24kB inactive_file:12kB unevictable:59920kB writepending:0kB present:4194304kB managed:4128248kB mlocked:59920kB kernel_stack:53056kB pagetables:161636kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2618.491054] lowmem_reserve[]: 0 0 0 0 0
[ 2618.495398] Node 0 DMA: 13*4kB (UME) 49*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10924kB
[ 2618.521866] Node 0 DMA32: 1380*4kB (UME) 357*8kB (UME) 693*16kB (UME) 392*32kB (UME) 10*64kB (UM) 5*128kB (M) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 35848kB
[ 2618.540328] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2618.558876] Node 1 Normal: 6*4kB (UME) 18*8kB (UME) 33*16kB (UME) 717*32kB (UME) 300*64kB (UME) 62*128kB (UM) 9*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53592kB
[ 2618.582735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2618.592036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2618.600932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2618.618091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2618.629444] 18175 total pagecache pages
[ 2618.641710] 0 pages in swap cache
[ 2618.645443] Swap cache stats: add 0, delete 0, find 0/0
[ 2618.651078] Free swap  = 0kB
[ 2618.654409] Total swap = 0kB
[ 2618.657661] 2097051 pages RAM
[ 2618.660972] 0 pages HighMem/MovableOnly
[ 2618.677851] 369648 pages reserved
[ 2618.697485] 0 pages cma reserved
[ 2618.711046] Out of memory (oom_kill_allocating_task): Kill process 25752 (syz-executor.1) score 0 or sacrifice child
[ 2618.729364] Killed process 4643 (syz-executor.1) total-vm:93384kB, anon-rss:36772kB, file-rss:34640kB, shmem-rss:0kB
[ 2618.791128] syz-executor.1 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2618.837281] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 2618.850366] CPU: 0 PID: 25752 Comm: syz-executor.1 Not tainted 4.19.202-syzkaller #0
[ 2618.858253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2618.867610] Call Trace:
[ 2618.870185]  dump_stack+0x1fc/0x2ef
[ 2618.873805]  dump_header+0x15d/0xc3f
[ 2618.877510]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2618.882602]  ? ___ratelimit+0x319/0x590
[ 2618.886580]  oom_kill_process.cold+0x10/0x692
[ 2618.891075]  ? check_preemption_disabled+0x41/0x280
[ 2618.896076]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2618.901336]  out_of_memory+0x1072/0x1390
[ 2618.905387]  ? oom_killer_disable+0x270/0x270
[ 2618.909867]  ? mutex_trylock+0x15f/0x1a0
[ 2618.913912]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2618.918736]  ? find_get_entry+0x4cd/0x8a0
[ 2618.922868]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2618.927716]  alloc_pages_current+0x193/0x2a0
[ 2618.932115]  filemap_fault+0x146e/0x2180
[ 2618.936165]  ext4_filemap_fault+0x84/0xb0
[ 2618.940293]  __do_fault+0x10b/0x4b0
[ 2618.943902]  __handle_mm_fault+0x273b/0x41c0
[ 2618.948290]  ? debug_object_free+0x1cc/0x380
[ 2618.952674]  ? vm_insert_page+0x9c0/0x9c0
[ 2618.956808]  ? check_preemption_disabled+0x41/0x280
[ 2618.961830]  handle_mm_fault+0x436/0xb10
[ 2618.965897]  __do_page_fault+0x68e/0xd60
[ 2618.969950]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2618.974945]  ? spurious_fault+0x840/0x840
[ 2618.979080]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2618.983903]  ? page_fault+0x8/0x30
[ 2618.987425]  page_fault+0x1e/0x30
[ 2618.990856] RIP: 0033:0x413387
[ 2618.994031] Code: db 34 b6 d7 82 de 1b 43 48 f7 a4 24 d8 00 00 00 48 8b 05 44 20 09 01 48 69 8c 24 d0 00 00 00 e8 03 00 00 48 c1 ea 12 48 01 ca <8b> 08 48 89 d0 41 39 ce 4c 0f 45 ea 48 2b 44 24 10 48 3b 05 e1 1f
[ 2619.013003] RSP: 002b:00007ffcdaf8ba40 EFLAGS: 00010206
[ 2619.018369] RAX: 0000001b2c820000 RBX: 0000000000000453 RCX: 000000000027f290
[ 2619.025633] RDX: 000000000027f299 RSI: 00007ffcdaf8bb10 RDI: 00007ffcdaf8b9fc
[ 2619.032901] RBP: 00007ffcdaf8baac R08: 00007ffcdafce000 R09: 000002bde96153e8
[ 2619.040165] R10: 0000497fc488247d R11: 0000000000000001 R12: 0000000000000032
[ 2619.047521] R13: 000000000027f1b5 R14: 0000000000000000 R15: 00007ffcdaf8bb10
[ 2619.066890] Mem-Info:
[ 2619.069356] active_anon:225018 inactive_anon:1072485 isolated_anon:0
[ 2619.069356]  active_file:0 inactive_file:27 isolated_file:0
[ 2619.069356]  unevictable:55574 dirty:0 writeback:0 unstable:0
[ 2619.069356]  slab_reclaimable:17652 slab_unreclaimable:149243
[ 2619.069356]  mapped:61858 shmem:9048 pagetables:54033 bounce:0
[ 2619.069356]  free:25041 free_pcp:229 free_cma:0
[ 2619.108035] Node 0 active_anon:718276kB inactive_anon:898376kB active_file:0kB inactive_file:72kB unevictable:162412kB isolated(anon):0kB isolated(file):0kB mapped:189332kB dirty:0kB writeback:0kB shmem:36144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1128448kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2619.145361] Node 1 active_anon:181792kB inactive_anon:3391480kB active_file:0kB inactive_file:32kB unevictable:59924kB isolated(anon):0kB isolated(file):0kB mapped:58108kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2619.177719] Node 0 DMA free:10924kB min:204kB low:252kB high:300kB active_anon:384kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2619.226474] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2619.237925] Node 0 DMA32 free:35596kB min:35996kB low:44992kB high:53988kB active_anon:717892kB inactive_anon:895004kB active_file:0kB inactive_file:72kB unevictable:162412kB writepending:0kB present:3129332kB managed:2763456kB mlocked:162412kB kernel_stack:22112kB pagetables:54552kB bounce:0kB free_pcp:408kB local_pcp:348kB free_cma:0kB
[ 2619.279223] lowmem_reserve[]: 0 0 1 1 1
[ 2619.283716] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2619.318856] lowmem_reserve[]: 0 0 0 0 0
[ 2619.323220] Node 1 Normal free:53752kB min:53876kB low:67344kB high:80812kB active_anon:181792kB inactive_anon:3391480kB active_file:0kB inactive_file:32kB unevictable:59924kB writepending:0kB present:4194304kB managed:4128248kB mlocked:59924kB kernel_stack:52896kB pagetables:161328kB bounce:0kB free_pcp:508kB local_pcp:192kB free_cma:0kB
[ 2619.360082] lowmem_reserve[]: 0 0 0 0 0
[ 2619.364435] Node 0 DMA: 13*4kB (UME) 49*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10924kB
[ 2619.388363] Node 0 DMA32: 1317*4kB (UME) 357*8kB (UME) 693*16kB (UME) 392*32kB (UME) 10*64kB (UM) 5*128kB (M) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 35596kB
[ 2619.413508] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2619.427882] Node 1 Normal: 6*4kB (UME) 18*8kB (UME) 33*16kB (UME) 720*32kB (UME) 299*64kB (UME) 63*128kB (UM) 9*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53752kB
[ 2619.453144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2619.466877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2619.488337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2619.509398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2619.520405] 18152 total pagecache pages
[ 2619.538590] 0 pages in swap cache
[ 2619.566308] Swap cache stats: add 0, delete 0, find 0/0
[ 2619.584160] Free swap  = 0kB
[ 2619.587454] Total swap = 0kB
[ 2619.590687] 2097051 pages RAM
[ 2619.594056] 0 pages HighMem/MovableOnly
[ 2619.598250] 369648 pages reserved
[ 2619.614264] 0 pages cma reserved
[ 2619.617868] Out of memory (oom_kill_allocating_task): Kill process 25752 (syz-executor.1) score 0 or sacrifice child
[ 2619.629224] Killed process 4642 (syz-executor.1) total-vm:93384kB, anon-rss:36772kB, file-rss:34640kB, shmem-rss:0kB
[ 2619.731665] oom_reaper: reaped process 4642 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
20:00:17 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:17 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:18 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:00:18 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:19 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x0)

20:00:19 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:19 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:00:19 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:19 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2622.496852] syz-executor.5 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2622.551513] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 2622.587958] CPU: 1 PID: 6938 Comm: syz-executor.5 Not tainted 4.19.202-syzkaller #0
[ 2622.595777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2622.605129] Call Trace:
[ 2622.607722]  dump_stack+0x1fc/0x2ef
[ 2622.611352]  dump_header+0x15d/0xc3f
[ 2622.615068]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2622.620170]  ? ___ratelimit+0x319/0x590
[ 2622.624150]  oom_kill_process.cold+0x10/0x692
[ 2622.628649]  ? check_preemption_disabled+0x41/0x280
[ 2622.633671]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2622.638948]  out_of_memory+0x1072/0x1390
[ 2622.643016]  ? oom_killer_disable+0x270/0x270
[ 2622.647517]  ? mutex_trylock+0x15f/0x1a0
[ 2622.651586]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2622.656454]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2622.661392]  ? __lock_acquire+0x6de/0x3ff0
[ 2622.665639]  ? _raw_spin_unlock_irq+0x24/0x80
[ 2622.670136]  alloc_pages_vma+0xf2/0x780
[ 2622.674116]  do_anonymous_page+0x7c2/0x1be0
[ 2622.678444]  ? __pte_alloc+0x340/0x340
[ 2622.682334]  ? mark_held_locks+0xf0/0xf0
[ 2622.686400]  __handle_mm_fault+0x227a/0x41c0
[ 2622.690816]  ? vm_insert_page+0x9c0/0x9c0
[ 2622.694978]  ? check_preemption_disabled+0x41/0x280
[ 2622.699998]  handle_mm_fault+0x436/0xb10
[ 2622.704063]  __get_user_pages+0x6f0/0x1710
[ 2622.708313]  ? follow_page_mask+0x1d00/0x1d00
[ 2622.712821]  populate_vma_page_range+0x200/0x290
[ 2622.717581]  __mm_populate+0x1ea/0x350
[ 2622.721559]  ? populate_vma_page_range+0x290/0x290
[ 2622.726486]  ? do_mlock+0x6b0/0x6b0
[ 2622.730112]  ? security_capable+0x8f/0xc0
[ 2622.734267]  __se_sys_mlockall+0x362/0x4e0
[ 2622.738501]  do_syscall_64+0xf9/0x620
[ 2622.742331]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2622.747524] RIP: 0033:0x4665e9
[ 2622.750713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2622.769622] RSP: 002b:00007f25c1535188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2622.777331] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2622.784598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2622.791875] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2622.799143] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2622.806495] R13: 00007ffc777bff3f R14: 00007f25c1535300 R15: 0000000000022000
[ 2622.931686] Mem-Info:
[ 2622.934226] active_anon:224257 inactive_anon:1063331 isolated_anon:0
[ 2622.934226]  active_file:13 inactive_file:5 isolated_file:0
[ 2622.934226]  unevictable:64111 dirty:0 writeback:0 unstable:0
[ 2622.934226]  slab_reclaimable:17652 slab_unreclaimable:150278
[ 2622.934226]  mapped:60284 shmem:9048 pagetables:54296 bounce:0
[ 2622.934226]  free:25027 free_pcp:62 free_cma:0
[ 2622.980109] Node 0 active_anon:714448kB inactive_anon:883596kB active_file:40kB inactive_file:40kB unevictable:176788kB isolated(anon):0kB isolated(file):0kB mapped:182544kB dirty:0kB writeback:0kB shmem:36144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1128448kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2623.016749] Node 1 active_anon:182580kB inactive_anon:3369728kB active_file:12kB inactive_file:0kB unevictable:79656kB isolated(anon):0kB isolated(file):0kB mapped:58592kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2623.054080] Node 0 DMA free:10924kB min:204kB low:252kB high:300kB active_anon:384kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2623.090258] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2623.096229] Node 0 DMA32 free:35912kB min:35996kB low:44992kB high:53988kB active_anon:714064kB inactive_anon:880224kB active_file:68kB inactive_file:12kB unevictable:176804kB writepending:0kB present:3129332kB managed:2763456kB mlocked:176804kB kernel_stack:22144kB pagetables:54812kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB
[ 2623.129805] lowmem_reserve[]: 0 0 1 1 1
[ 2623.149941] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2623.183907] lowmem_reserve[]: 0 0 0 0 0
[ 2623.188008] Node 1 Normal free:53644kB min:53876kB low:67344kB high:80812kB active_anon:182580kB inactive_anon:3369728kB active_file:0kB inactive_file:12kB unevictable:79672kB writepending:0kB present:4194304kB managed:4128248kB mlocked:79672kB kernel_stack:53216kB pagetables:162116kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2623.221645] lowmem_reserve[]: 0 0 0 0 0
[ 2623.225739] Node 0 DMA: 13*4kB (UME) 49*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10924kB
[ 2623.245715] Node 0 DMA32: 1321*4kB (UE) 191*8kB (UME) 689*16kB (UME) 409*32kB (UME) 26*64kB (UM) 6*128kB (M) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 35916kB
[ 2623.269629] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2623.280478] Node 1 Normal: 78*4kB (UM) 66*8kB (UME) 88*16kB (UME) 754*32kB (UME) 307*64kB (UME) 52*128kB (M) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53704kB
[ 2623.299937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2623.308942] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2623.321650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2623.331848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2623.340494] 16539 total pagecache pages
[ 2623.345378] 0 pages in swap cache
[ 2623.348897] Swap cache stats: add 0, delete 0, find 0/0
[ 2623.374551] Free swap  = 0kB
[ 2623.377674] Total swap = 0kB
[ 2623.380803] 2097051 pages RAM
[ 2623.385532] 0 pages HighMem/MovableOnly
[ 2623.402820] 369648 pages reserved
[ 2623.418117] 0 pages cma reserved
[ 2623.436438] Out of memory (oom_kill_allocating_task): Kill process 6938 (syz-executor.5) score 0 or sacrifice child
[ 2623.495676] Killed process 6938 (syz-executor.5) total-vm:93384kB, anon-rss:36400kB, file-rss:56576kB, shmem-rss:0kB
[ 2623.566239] oom_reaper: reaped process 6938 (syz-executor.5), now anon-rss:36400kB, file-rss:56572kB, shmem-rss:0kB
[ 2623.712914] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2623.763326] syz-fuzzer cpuset=/ mems_allowed=0-1
[ 2623.768202] CPU: 1 PID: 8086 Comm: syz-fuzzer Not tainted 4.19.202-syzkaller #0
[ 2623.775644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2623.784991] Call Trace:
[ 2623.787587]  dump_stack+0x1fc/0x2ef
[ 2623.791219]  dump_header+0x15d/0xc3f
[ 2623.794936]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2623.800037]  ? ___ratelimit+0x319/0x590
[ 2623.804011]  oom_kill_process.cold+0x10/0x692
[ 2623.808508]  ? check_preemption_disabled+0x41/0x280
[ 2623.813527]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2623.818811]  out_of_memory+0x1072/0x1390
[ 2623.822877]  ? oom_killer_disable+0x270/0x270
[ 2623.827374]  ? mutex_trylock+0x15f/0x1a0
[ 2623.831442]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2623.836294]  ? find_get_entry+0x4cd/0x8a0
[ 2623.840448]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2623.845311]  alloc_pages_current+0x193/0x2a0
[ 2623.849725]  filemap_fault+0x146e/0x2180
[ 2623.853814]  ext4_filemap_fault+0x84/0xb0
[ 2623.857963]  __do_fault+0x10b/0x4b0
[ 2623.861595]  __handle_mm_fault+0x273b/0x41c0
[ 2623.866008]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2623.871111]  ? vm_insert_page+0x9c0/0x9c0
[ 2623.875274]  ? check_preemption_disabled+0x41/0x280
[ 2623.880294]  handle_mm_fault+0x436/0xb10
[ 2623.884364]  __do_page_fault+0x68e/0xd60
[ 2623.888432]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2623.893451]  ? spurious_fault+0x840/0x840
[ 2623.897602]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2623.902451]  ? page_fault+0x8/0x30
[ 2623.905992]  page_fault+0x1e/0x30
[ 2623.909440] RIP: 0033:0x457a72
[ 2623.912627] Code: Bad RIP value.
[ 2623.915984] RSP: 002b:000000c00003dee0 EFLAGS: 00010206
[ 2623.921338] RAX: 0000000001883a68 RBX: 000000c00002e000 RCX: 0000000000000000
[ 2623.928601] RDX: 0000000001883a68 RSI: 000000c00003df00 RDI: 000000c00003dedc
[ 2623.935874] RBP: 000000c00003df28 R08: 00007ffdd2d94000 R09: 000002bf2007f9e9
[ 2623.943134] R10: 001027b3d3f10e8e R11: 0000000000000001 R12: 000000000043b6a0
[ 2623.950397] R13: 0000000000000000 R14: 000000000094d6b8 R15: 0000000000000000
[ 2624.558265] Mem-Info:
[ 2624.570607] active_anon:224254 inactive_anon:1063285 isolated_anon:0
[ 2624.570607]  active_file:22 inactive_file:65 isolated_file:0
[ 2624.570607]  unevictable:64463 dirty:0 writeback:0 unstable:0
[ 2624.570607]  slab_reclaimable:17652 slab_unreclaimable:149864
[ 2624.570607]  mapped:60309 shmem:9048 pagetables:54223 bounce:0
[ 2624.570607]  free:25099 free_pcp:146 free_cma:0
[ 2624.616916] Node 0 active_anon:714440kB inactive_anon:883544kB active_file:4kB inactive_file:96kB unevictable:178180kB isolated(anon):0kB isolated(file):68kB mapped:182644kB dirty:0kB writeback:0kB shmem:36144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1128448kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2624.650458] Node 1 active_anon:182576kB inactive_anon:3369596kB active_file:0kB inactive_file:96kB unevictable:79672kB isolated(anon):0kB isolated(file):0kB mapped:58792kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2624.685968] Node 0 DMA free:10924kB min:204kB low:252kB high:300kB active_anon:384kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2624.717967] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2624.725733] Node 0 DMA32 free:35568kB min:35996kB low:44992kB high:53988kB active_anon:714056kB inactive_anon:880172kB active_file:48kB inactive_file:0kB unevictable:178280kB writepending:0kB present:3129332kB managed:2763456kB mlocked:178280kB kernel_stack:21984kB pagetables:54816kB bounce:0kB free_pcp:736kB local_pcp:248kB free_cma:0kB
[ 2624.801523] lowmem_reserve[]: 0 0 1 1 1
[ 2624.805529] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2624.890712] lowmem_reserve[]: 0 0 0 0 0
[ 2624.894755] Node 1 Normal free:54340kB min:53876kB low:67344kB high:80812kB active_anon:182528kB inactive_anon:3369552kB active_file:92kB inactive_file:108kB unevictable:79636kB writepending:0kB present:4194304kB managed:4128248kB mlocked:79636kB kernel_stack:53056kB pagetables:161768kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB
[ 2624.980678] lowmem_reserve[]: 0 0 0 0 0
[ 2624.984698] Node 0 DMA: 13*4kB (UME) 49*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10924kB
[ 2625.131084] Node 0 DMA32: 1287*4kB (UME) 256*8kB (UME) 655*16kB (UME) 414*32kB (UME) 28*64kB (UM) 8*128kB (M) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36300kB
[ 2625.231343] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2625.284101] Node 1 Normal: 1574*4kB (UM) 382*8kB (UME) 389*16kB (UME) 759*32kB (UME) 307*64kB (UME) 52*128kB (M) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 67192kB
20:00:23 executing program 3:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:00:23 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:23 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2625.358982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2625.371581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2625.381920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2625.390825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2625.399394] 16549 total pagecache pages
[ 2625.403622] 0 pages in swap cache
[ 2625.407070] Swap cache stats: add 0, delete 0, find 0/0
[ 2625.412501] Free swap  = 0kB
[ 2625.415584] Total swap = 0kB
[ 2625.418714] 2097051 pages RAM
[ 2625.422178] 0 pages HighMem/MovableOnly
[ 2625.426144] 369648 pages reserved
[ 2625.429583] 0 pages cma reserved
[ 2625.433414] Out of memory (oom_kill_allocating_task): Kill process 8086 (syz-fuzzer) score 0 or sacrifice child
[ 2625.444202] Killed process 6298 (syz-executor.5) total-vm:84924kB, anon-rss:60kB, file-rss:460kB, shmem-rss:0kB
20:00:23 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:00:23 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:23 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:23 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:23 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x0)

20:00:23 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x0, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:00:24 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:24 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:24 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:24 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2627.107487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
20:00:26 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:26 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2631.169980] IPVS: ftp: loaded support on port[0] = 21
[ 2631.608565] chnl_net:caif_netlink_parms(): no params data found
[ 2631.640310] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2631.647030] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2631.664672] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2631.672120] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2631.683752] device bridge_slave_1 left promiscuous mode
[ 2631.689246] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2631.703078] device bridge_slave_0 left promiscuous mode
[ 2631.708549] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2631.723572] device veth1_macvtap left promiscuous mode
[ 2631.736957] device veth0_macvtap left promiscuous mode
[ 2631.742555] device veth1_vlan left promiscuous mode
[ 2631.747614] device veth0_vlan left promiscuous mode
[ 2633.120017] Bluetooth: hci4: command 0x0409 tx timeout
[ 2635.199829] Bluetooth: hci4: command 0x041b tx timeout
[ 2637.134603] device hsr_slave_1 left promiscuous mode
[ 2637.142383] device hsr_slave_0 left promiscuous mode
[ 2637.161245] team0 (unregistering): Port device team_slave_1 removed
[ 2637.172688] team0 (unregistering): Port device team_slave_0 removed
[ 2637.182118] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 2637.192578] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 2637.229767] bond0 (unregistering): Released all slaves
[ 2637.279808] Bluetooth: hci4: command 0x040f tx timeout
[ 2637.731457] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2637.737874] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2637.754174] device bridge_slave_0 entered promiscuous mode
[ 2637.766007] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2637.776490] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2637.787424] device bridge_slave_1 entered promiscuous mode
[ 2637.823183] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 2637.835786] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 2637.873974] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 2637.884367] team0: Port device team_slave_0 added
[ 2637.894231] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 2637.905198] team0: Port device team_slave_1 added
[ 2637.937927] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2637.944613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2637.974164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2637.997000] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2638.003557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2638.030000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2638.050319] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 2638.057931] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 2638.084628] device hsr_slave_0 entered promiscuous mode
[ 2638.090808] device hsr_slave_1 entered promiscuous mode
[ 2638.097054] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 2638.109295] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 2638.238086] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2638.244499] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2638.251377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2638.257730] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2638.290462] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2638.297250] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2638.311185] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2638.318933] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 2638.328410] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 2638.334717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2638.342000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2638.351529] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 2638.357583] 8021q: adding VLAN 0 to HW filter on device team0
[ 2638.366987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 2638.374334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2638.382345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2638.390170] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2638.396504] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2638.405850] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 2638.413132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2638.421220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2638.428745] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2638.435142] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2638.444712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 2638.451799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2638.461733] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 2638.469634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2638.478262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 2638.485855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2638.493950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2638.501784] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2638.514020] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 2638.520924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2638.528757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2638.541625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 2638.551265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 2638.558040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2638.565754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2638.573290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2638.581202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2638.591730] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 2638.597740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2638.612673] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 2638.620188] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 2638.626618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2638.633392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2638.646241] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2638.681902] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready
[ 2638.692225] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready
[ 2638.699320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2638.710385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2638.741056] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready
[ 2638.748101] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready
[ 2638.754965] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready
[ 2638.763827] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready
[ 2638.770485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2638.777814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2638.786493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2638.794754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2638.803457] device veth0_vlan entered promiscuous mode
[ 2638.814551] device veth1_vlan entered promiscuous mode
[ 2638.820399] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready
[ 2638.828918] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready
[ 2638.842659] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
[ 2638.852052] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready
[ 2638.858862] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2638.866493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2638.873899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2638.882037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2638.895764] device veth0_macvtap entered promiscuous mode
[ 2638.902120] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
[ 2638.912884] device veth1_macvtap entered promiscuous mode
[ 2638.918948] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready
[ 2638.928176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
[ 2638.937671] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
[ 2638.946400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2638.956318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2638.965836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2638.975632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2638.985162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2638.994897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2639.004087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2639.014126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2639.023363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2639.033269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2639.043681] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready
[ 2639.050974] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2639.058160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2639.065903] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2639.073336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2639.081385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2639.092811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2639.102758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2639.112069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2639.121884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2639.131210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2639.140990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2639.150177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2639.159951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2639.169180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2639.178938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2639.189101] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
[ 2639.196169] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2639.204773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2639.213140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2639.327443] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 2639.335161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2639.343580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2639.351746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2639.359853] Bluetooth: hci4: command 0x0419 tx timeout
[ 2639.389565] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 2639.404833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2639.418367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2639.431186] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2640.284737] syz-executor.5 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2640.297931] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 2640.303311] CPU: 1 PID: 7386 Comm: syz-executor.5 Not tainted 4.19.202-syzkaller #0
[ 2640.311121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2640.320470] Call Trace:
[ 2640.323089]  dump_stack+0x1fc/0x2ef
[ 2640.326733]  dump_header+0x15d/0xc3f
[ 2640.330465]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2640.335574]  ? ___ratelimit+0x319/0x590
[ 2640.339558]  oom_kill_process.cold+0x10/0x692
[ 2640.344064]  ? check_preemption_disabled+0x41/0x280
[ 2640.349103]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2640.354386]  out_of_memory+0x1072/0x1390
[ 2640.358455]  ? oom_killer_disable+0x270/0x270
[ 2640.362955]  ? mutex_trylock+0x15f/0x1a0
[ 2640.367040]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2640.371992]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2640.376840]  ? __lock_acquire+0x6de/0x3ff0
[ 2640.381116]  ? mark_held_locks+0xf0/0xf0
[ 2640.385197]  alloc_pages_vma+0xf2/0x780
[ 2640.389182]  do_anonymous_page+0x7c2/0x1be0
[ 2640.393513]  ? __pte_alloc+0x340/0x340
[ 2640.397399]  ? __put_compound_page+0xc0/0xc0
[ 2640.401814]  ? mark_held_locks+0xf0/0xf0
[ 2640.405890]  __handle_mm_fault+0x227a/0x41c0
[ 2640.410328]  ? vm_insert_page+0x9c0/0x9c0
[ 2640.414582]  ? check_preemption_disabled+0x41/0x280
[ 2640.419611]  handle_mm_fault+0x436/0xb10
[ 2640.423687]  __get_user_pages+0x6f0/0x1710
[ 2640.427933]  ? follow_page_mask+0x1d00/0x1d00
[ 2640.432457]  populate_vma_page_range+0x200/0x290
[ 2640.437223]  __mm_populate+0x1ea/0x350
[ 2640.441115]  ? populate_vma_page_range+0x290/0x290
[ 2640.446042]  ? do_mlock+0x6b0/0x6b0
[ 2640.449670]  ? security_capable+0x8f/0xc0
[ 2640.453828]  __se_sys_mlockall+0x362/0x4e0
[ 2640.458067]  do_syscall_64+0xf9/0x620
[ 2640.461876]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2640.467152] RIP: 0033:0x4665e9
[ 2640.470345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2640.489244] RSP: 002b:00007ffad19b4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2640.496952] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2640.504218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2640.511486] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2640.518751] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2640.526022] R13: 00007fff2c0d6aaf R14: 00007ffad19b4300 R15: 0000000000022000
[ 2640.979334] Mem-Info:
[ 2640.981795] active_anon:224818 inactive_anon:1079668 isolated_anon:0
[ 2640.981795]  active_file:23 inactive_file:21 isolated_file:0
[ 2640.981795]  unevictable:48930 dirty:14 writeback:0 unstable:0
[ 2640.981795]  slab_reclaimable:17714 slab_unreclaimable:147943
[ 2640.981795]  mapped:58293 shmem:9048 pagetables:54571 bounce:0
[ 2640.981795]  free:25156 free_pcp:0 free_cma:0
[ 2641.041290] Node 0 active_anon:717144kB inactive_anon:913652kB active_file:56kB inactive_file:56kB unevictable:159976kB isolated(anon):0kB isolated(file):0kB mapped:169400kB dirty:56kB writeback:0kB shmem:36164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1128448kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2641.073644] Node 1 active_anon:182128kB inactive_anon:3405020kB active_file:36kB inactive_file:28kB unevictable:35744kB isolated(anon):0kB isolated(file):0kB mapped:63772kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2641.165214] Node 0 DMA free:10924kB min:204kB low:252kB high:300kB active_anon:384kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2641.217873] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2641.223008] Node 0 DMA32 free:35864kB min:35996kB low:44992kB high:53988kB active_anon:716760kB inactive_anon:910280kB active_file:56kB inactive_file:56kB unevictable:159976kB writepending:56kB present:3129332kB managed:2763456kB mlocked:159976kB kernel_stack:22176kB pagetables:55212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2641.254010] lowmem_reserve[]: 0 0 1 1 1
[ 2641.258008] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2641.290443] lowmem_reserve[]: 0 0 0 0 0
[ 2641.294480] Node 1 Normal free:53836kB min:53876kB low:67344kB high:80812kB active_anon:182128kB inactive_anon:3405020kB active_file:20kB inactive_file:4kB unevictable:35744kB writepending:0kB present:4194304kB managed:4128248kB mlocked:35744kB kernel_stack:53408kB pagetables:162816kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2641.383513] lowmem_reserve[]: 0 0 0 0 0
[ 2641.396507] Node 0 DMA: 13*4kB (UME) 49*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10924kB
[ 2641.444185] Node 0 DMA32: 917*4kB (UME) 1391*8kB (UME) 647*16kB (UME) 337*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35932kB
[ 2641.486476] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2641.514071] Node 1 Normal: 177*4kB (UM) 96*8kB (UM) 1045*16kB (UME) 441*32kB (UME) 275*64kB (UME) 21*128kB (UM) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 54644kB
[ 2641.558728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2641.567733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2641.588226] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2641.612617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2641.634893] 14542 total pagecache pages
[ 2641.648448] 0 pages in swap cache
[ 2641.655758] Swap cache stats: add 0, delete 0, find 0/0
[ 2641.676112] Free swap  = 0kB
[ 2641.692582] Total swap = 0kB
[ 2641.702221] 2097051 pages RAM
[ 2641.711266] 0 pages HighMem/MovableOnly
[ 2641.723647] 369648 pages reserved
[ 2641.732618] 0 pages cma reserved
[ 2641.743431] Out of memory (oom_kill_allocating_task): Kill process 7386 (syz-executor.5) score 0 or sacrifice child
[ 2641.757154] Killed process 7388 (syz-executor.5) total-vm:93384kB, anon-rss:28344kB, file-rss:35084kB, shmem-rss:0kB
[ 2642.138930] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2642.169091] syz-fuzzer cpuset=/ mems_allowed=0-1
[ 2642.185230] CPU: 1 PID: 8087 Comm: syz-fuzzer Not tainted 4.19.202-syzkaller #0
[ 2642.193128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2642.202476] Call Trace:
[ 2642.205067]  dump_stack+0x1fc/0x2ef
[ 2642.208697]  dump_header+0x15d/0xc3f
[ 2642.212411]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2642.217511]  ? ___ratelimit+0x319/0x590
[ 2642.221489]  oom_kill_process.cold+0x10/0x692
[ 2642.225984]  ? check_preemption_disabled+0x41/0x280
[ 2642.231006]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2642.236283]  out_of_memory+0x1072/0x1390
[ 2642.240360]  ? oom_killer_disable+0x270/0x270
[ 2642.244865]  ? mutex_trylock+0x15f/0x1a0
[ 2642.248969]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2642.253820]  ? find_get_entry+0x4cd/0x8a0
[ 2642.258068]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2642.262942]  alloc_pages_current+0x193/0x2a0
[ 2642.267350]  filemap_fault+0x146e/0x2180
[ 2642.271425]  ext4_filemap_fault+0x84/0xb0
[ 2642.275578]  __do_fault+0x10b/0x4b0
[ 2642.279218]  __handle_mm_fault+0x273b/0x41c0
[ 2642.283633]  ? vm_insert_page+0x9c0/0x9c0
[ 2642.287776]  ? __fget+0x356/0x510
[ 2642.291244]  ? check_preemption_disabled+0x41/0x280
[ 2642.296266]  handle_mm_fault+0x436/0xb10
[ 2642.300337]  __do_page_fault+0x68e/0xd60
[ 2642.304410]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2642.309425]  ? spurious_fault+0x840/0x840
[ 2642.313577]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2642.318420]  ? page_fault+0x8/0x30
[ 2642.321977]  page_fault+0x1e/0x30
[ 2642.325423] RIP: 0033:0x46a820
[ 2642.328609] Code: Bad RIP value.
[ 2642.331975] RSP: 002b:000000c0002079e8 EFLAGS: 00010217
[ 2642.337334] RAX: 000000c0002506c0 RBX: 0000000000000000 RCX: 000000c000000180
[ 2642.344599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c00003ff01
[ 2642.351894] RBP: 000000c000207a28 R08: 00007ffdd2d94000 R09: 000002c45ae96c04
[ 2642.359182] R10: 000247d2bfdd53c3 R11: 0000000000000001 R12: 000000c000207b08
[ 2642.366446] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2642.383382] Mem-Info:
[ 2642.385874] active_anon:224816 inactive_anon:1079622 isolated_anon:0
[ 2642.385874]  active_file:11 inactive_file:10 isolated_file:0
[ 2642.385874]  unevictable:49118 dirty:0 writeback:0 unstable:0
[ 2642.385874]  slab_reclaimable:17711 slab_unreclaimable:147912
[ 2642.385874]  mapped:58268 shmem:9048 pagetables:54534 bounce:0
[ 2642.385874]  free:25107 free_pcp:20 free_cma:0
[ 2642.441172] Node 0 active_anon:717140kB inactive_anon:913644kB active_file:24kB inactive_file:24kB unevictable:159976kB isolated(anon):0kB isolated(file):0kB mapped:169400kB dirty:0kB writeback:0kB shmem:36164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1128448kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2642.552375] Node 1 active_anon:182124kB inactive_anon:3404844kB active_file:20kB inactive_file:16kB unevictable:36496kB isolated(anon):0kB isolated(file):0kB mapped:63672kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2642.641487] Node 0 DMA free:10924kB min:204kB low:252kB high:300kB active_anon:384kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2642.709160] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2642.714210] Node 0 DMA32 free:35860kB min:35996kB low:44992kB high:53988kB active_anon:716756kB inactive_anon:910272kB active_file:24kB inactive_file:224kB unevictable:159976kB writepending:0kB present:3129332kB managed:2763456kB mlocked:159976kB kernel_stack:22144kB pagetables:55212kB bounce:0kB free_pcp:540kB local_pcp:460kB free_cma:0kB
[ 2642.849187] lowmem_reserve[]: 0 0 1 1 1
[ 2642.853198] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2642.919160] lowmem_reserve[]: 0 0 0 0 0
[ 2642.923175] Node 1 Normal free:53204kB min:53876kB low:67344kB high:80812kB active_anon:182124kB inactive_anon:3404844kB active_file:20kB inactive_file:20kB unevictable:36500kB writepending:0kB present:4194304kB managed:4128248kB mlocked:36500kB kernel_stack:53312kB pagetables:162668kB bounce:0kB free_pcp:1160kB local_pcp:312kB free_cma:0kB
[ 2642.989193] lowmem_reserve[]: 0 0 0 0 0
[ 2642.995071] Node 0 DMA: 13*4kB (UME) 49*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10924kB
[ 2643.063548] Node 0 DMA32: 941*4kB (UMEH) 1427*8kB (UMEH) 654*16kB (UMEH) 338*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36460kB
[ 2643.113526] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2643.154042] Node 1 Normal: 261*4kB (UM) 106*8kB (UM) 994*16kB (UME) 446*32kB (UME) 275*64kB (UME) 22*128kB (UM) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 54532kB
[ 2643.174301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2643.183184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2643.197048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2643.207494] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2643.227687] 14506 total pagecache pages
[ 2643.235208] 0 pages in swap cache
[ 2643.238670] Swap cache stats: add 0, delete 0, find 0/0
[ 2643.261340] Free swap  = 0kB
[ 2643.264401] Total swap = 0kB
[ 2643.267418] 2097051 pages RAM
[ 2643.282304] 0 pages HighMem/MovableOnly
[ 2643.286293] 369648 pages reserved
[ 2643.298743] 0 pages cma reserved
[ 2643.311293] Out of memory (oom_kill_allocating_task): Kill process 8087 (syz-fuzzer) score 0 or sacrifice child
[ 2643.369187] Killed process 25740 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB
20:00:42 executing program 3:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:00:42 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x0, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:00:42 executing program 2:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:42 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:42 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:42 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:42 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:42 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:43 executing program 2:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)

[ 2645.252167] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2645.267292] batman_adv: batadv0: Removing interface: batadv_slave_0
20:00:43 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)

[ 2645.318644] batman_adv: batadv0: Interface deactivated: batadv_slave_1
20:00:43 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

[ 2645.360154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2645.394521] device bridge_slave_1 left promiscuous mode
[ 2645.440268] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2645.496943] device bridge_slave_0 left promiscuous mode
[ 2645.515099] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2645.556364] device veth1_macvtap left promiscuous mode
[ 2645.578279] device veth0_macvtap left promiscuous mode
[ 2645.599004] device veth1_vlan left promiscuous mode
[ 2645.617966] device veth0_vlan left promiscuous mode
[ 2646.412478] device hsr_slave_1 left promiscuous mode
[ 2646.507590] device hsr_slave_0 left promiscuous mode
[ 2646.642061] team0 (unregistering): Port device team_slave_1 removed
[ 2646.662349] team0 (unregistering): Port device team_slave_0 removed
[ 2646.680703] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 2646.738257] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 2646.938149] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000
[ 2646.979992] bond0 (unregistering): Released all slaves
[ 2646.987507] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 2647.006149] CPU: 1 PID: 7445 Comm: syz-executor.2 Not tainted 4.19.202-syzkaller #0
[ 2647.013960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2647.023313] Call Trace:
[ 2647.025923]  dump_stack+0x1fc/0x2ef
[ 2647.029559]  dump_header+0x15d/0xc3f
[ 2647.033287]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2647.038395]  ? ___ratelimit+0x319/0x590
[ 2647.042572]  oom_kill_process.cold+0x10/0x692
[ 2647.047074]  ? check_preemption_disabled+0x41/0x280
[ 2647.052103]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2647.057388]  out_of_memory+0x1072/0x1390
[ 2647.061462]  ? oom_killer_disable+0x270/0x270
[ 2647.065961]  ? mutex_trylock+0x15f/0x1a0
[ 2647.070027]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2647.074877]  ? ____cache_alloc_node+0xf4/0x1d0
[ 2647.079484]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2647.084327]  ? do_raw_spin_unlock+0x171/0x230
[ 2647.088829]  ? check_preemption_disabled+0x41/0x280
[ 2647.093947]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[ 2647.099050]  ? kmem_cache_alloc_node+0x351/0x3b0
[ 2647.103812]  copy_process.part.0+0x3cf/0x8260
[ 2647.108314]  ? do_wp_page+0x2dc/0x2210
[ 2647.112206]  ? finish_mkwrite_fault+0x640/0x640
[ 2647.116881]  ? __handle_mm_fault+0x15f6/0x41c0
[ 2647.121465]  ? mark_held_locks+0xf0/0xf0
[ 2647.125538]  ? __cleanup_sighand+0x60/0x60
[ 2647.129856]  ? do_mmap+0x59c/0x1080
[ 2647.133482]  ? vm_insert_page+0x9c0/0x9c0
[ 2647.137644]  ? __do_page_fault+0x6d1/0xd60
[ 2647.141886]  _do_fork+0x22f/0xf30
[ 2647.145347]  ? fork_idle+0x220/0x220
[ 2647.149060]  ? up_read+0x17/0x110
[ 2647.152514]  ? __do_page_fault+0x180/0xd60
[ 2647.156759]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 2647.162124]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2647.167140]  ? do_syscall_64+0x21/0x620
[ 2647.171118]  do_syscall_64+0xf9/0x620
[ 2647.174928]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2647.180115] RIP: 0033:0x467a11
[ 2647.183305] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 2647.202205] RSP: 002b:00007ffc2dc04988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 2647.209912] RAX: ffffffffffffffda RBX: 00007f8244f2f700 RCX: 0000000000467a11
[ 2647.217184] RDX: 00007f8244f2f9d0 RSI: 00007f8244f2f2f0 RDI: 00000000003d0f00
[ 2647.224453] RBP: 00007ffc2dc04bc0 R08: 00007f8244f2f700 R09: 00007f8244f2f700
[ 2647.231723] R10: 00007f8244f2f9d0 R11: 0000000000000206 R12: 00007ffc2dc04a3e
[ 2647.238989] R13: 00007ffc2dc04a3f R14: 00007f8244f2f300 R15: 0000000000022000
[ 2647.946376] Mem-Info:
[ 2647.950024] active_anon:219838 inactive_anon:1063178 isolated_anon:0
[ 2647.950024]  active_file:5 inactive_file:12 isolated_file:5
[ 2647.950024]  unevictable:82756 dirty:0 writeback:0 unstable:0
[ 2647.950024]  slab_reclaimable:17487 slab_unreclaimable:145608
[ 2647.950024]  mapped:64682 shmem:9040 pagetables:51908 bounce:0
[ 2647.950024]  free:25087 free_pcp:0 free_cma:0
[ 2647.991914] Node 0 active_anon:703700kB inactive_anon:910452kB active_file:52kB inactive_file:12kB unevictable:218140kB isolated(anon):0kB isolated(file):20kB mapped:173532kB dirty:0kB writeback:0kB shmem:36140kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2648.027557] Node 1 active_anon:175652kB inactive_anon:3342260kB active_file:0kB inactive_file:36kB unevictable:112884kB isolated(anon):0kB isolated(file):0kB mapped:85196kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2648.114387] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:340kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2648.180574] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2648.185629] Node 0 DMA32 free:35760kB min:35996kB low:44992kB high:53988kB active_anon:703360kB inactive_anon:907080kB active_file:52kB inactive_file:12kB unevictable:218240kB writepending:0kB present:3129332kB managed:2763456kB mlocked:218240kB kernel_stack:21408kB pagetables:51504kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2648.248694] lowmem_reserve[]: 0 0 1 1 1
[ 2648.252707] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2648.360837] lowmem_reserve[]: 0 0 0 0 0
[ 2648.365619] Node 1 Normal free:56264kB min:53876kB low:67344kB high:80812kB active_anon:175652kB inactive_anon:3348160kB active_file:1840kB inactive_file:2180kB unevictable:101464kB writepending:0kB present:4194304kB managed:4128248kB mlocked:101800kB kernel_stack:50848kB pagetables:155872kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[ 2648.410043] lowmem_reserve[]: 0 0 0 0 0
[ 2648.414240] Node 0 DMA: 20*4kB (UME) 53*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10984kB
[ 2648.458553] Node 0 DMA32: 219*4kB (UMEH) 683*8kB (UMEH) 1187*16kB (UMEH) 375*32kB (UE) 9*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38036kB
[ 2648.600056] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2648.655686] Node 1 Normal: 1243*4kB (UME) 734*8kB (UM) 346*16kB (UME) 443*32kB (UME) 328*64kB (UME) 44*128kB (UM) 7*256kB (M) 0*512kB 0*1024kB 1*2048kB (U) 0*4096kB = 61020kB
[ 2648.725303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2648.813626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
20:00:46 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x0, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2648.863038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2648.939334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2648.947952] 22747 total pagecache pages
[ 2648.984236] 0 pages in swap cache
[ 2649.010230] Swap cache stats: add 0, delete 0, find 0/0
[ 2649.044153] Free swap  = 0kB
[ 2649.058497] Total swap = 0kB
[ 2649.078032] 2097051 pages RAM
[ 2649.097818] 0 pages HighMem/MovableOnly
[ 2649.118607] 369648 pages reserved
[ 2649.128762] 0 pages cma reserved
[ 2649.132131] Out of memory (oom_kill_allocating_task): Kill process 7445 (syz-executor.2) score 0 or sacrifice child
[ 2649.199337] Killed process 7445 (syz-executor.2) total-vm:93516kB, anon-rss:28280kB, file-rss:51844kB, shmem-rss:0kB
[ 2649.249397] oom_reaper: reaped process 7445 (syz-executor.2), now anon-rss:28280kB, file-rss:51840kB, shmem-rss:0kB
[ 2649.866766] IPVS: ftp: loaded support on port[0] = 21
[ 2650.262563] chnl_net:caif_netlink_parms(): no params data found
[ 2650.757008] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2650.767295] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2650.804097] device bridge_slave_0 entered promiscuous mode
[ 2650.811895] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2650.828554] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2650.852009] device bridge_slave_1 entered promiscuous mode
[ 2650.902522] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 2650.924036] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 2650.984644] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 2651.004112] team0: Port device team_slave_0 added
[ 2651.024574] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 2651.043936] team0: Port device team_slave_1 added
[ 2651.089596] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2651.095861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2651.127054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2651.145736] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2651.152840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2651.184619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2651.196383] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 2651.209801] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 2651.272850] device hsr_slave_0 entered promiscuous mode
[ 2651.299317] device hsr_slave_1 entered promiscuous mode
[ 2651.315144] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 2651.328324] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 2651.476787] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 2651.543043] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2651.552980] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 2651.566637] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 2651.573732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2651.585432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2651.596936] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 2651.604441] 8021q: adding VLAN 0 to HW filter on device team0
[ 2651.614265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 2651.621498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2651.629957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2651.637633] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2651.644063] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2651.655140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 2651.664077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2651.673366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2651.681950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2651.690760] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2651.697332] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2651.709660] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 2651.720072] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 2651.727076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2651.736344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2651.747554] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 2651.755741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2651.764745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2651.775538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 2651.784222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2651.792691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2651.803018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2651.814572] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 2651.822877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2651.831653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2651.843799] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 2651.852160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2651.860903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2651.871531] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 2651.877665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2651.902764] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 2651.918326] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 2651.918480] Bluetooth: hci0: command 0x0409 tx timeout
[ 2651.935151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2651.943063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2651.960056] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2651.979621] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready
[ 2651.995635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2652.077849] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready
[ 2652.086021] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready
[ 2652.093580] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready
[ 2652.106176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2652.114639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2652.126952] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2652.137104] device veth0_vlan entered promiscuous mode
[ 2652.151469] device veth1_vlan entered promiscuous mode
[ 2652.157525] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready
[ 2652.170255] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready
[ 2652.184464] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
[ 2652.195381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2652.204208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2652.214649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2652.229765] device veth0_macvtap entered promiscuous mode
[ 2652.236194] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
[ 2652.256074] device veth1_macvtap entered promiscuous mode
[ 2652.271681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
[ 2652.283017] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
[ 2652.293012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2652.303686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2652.314434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2652.324648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2652.334096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2652.344200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2652.353513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2652.363520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2652.372757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2652.382518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2652.392765] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready
[ 2652.400247] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2652.407038] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2652.416103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2652.424280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2652.434366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2652.444527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2652.453838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2652.464123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2652.473287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2652.483271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2652.492427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2652.502297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2652.511436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2652.521204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2652.531495] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
[ 2652.538562] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2652.545684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2652.553993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2652.713960] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 2652.721909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2652.743513] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 2652.749139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2652.756702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2652.758085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2652.770268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2652.777738] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2652.880778] ieee802154 phy0 wpan0: encryption failed: -22
[ 2652.886469] ieee802154 phy1 wpan1: encryption failed: -22
20:00:50 executing program 3:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:00:50 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)

20:00:50 executing program 2:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)

20:00:50 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:50 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

20:00:50 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:00:50 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:51 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:51 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, 0x0)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2654.008371] Bluetooth: hci0: command 0x041b tx timeout
[ 2654.377155] syz-executor.0 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2654.463899] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 2654.492618] CPU: 1 PID: 7748 Comm: syz-executor.0 Not tainted 4.19.202-syzkaller #0
[ 2654.500426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2654.509774] Call Trace:
[ 2654.512366]  dump_stack+0x1fc/0x2ef
[ 2654.515998]  dump_header+0x15d/0xc3f
[ 2654.519722]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2654.524826]  ? ___ratelimit+0x319/0x590
[ 2654.528810]  oom_kill_process.cold+0x10/0x692
[ 2654.533309]  ? check_preemption_disabled+0x41/0x280
[ 2654.538331]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2654.543607]  out_of_memory+0x1072/0x1390
[ 2654.547677]  ? oom_killer_disable+0x270/0x270
[ 2654.552177]  ? mutex_trylock+0x15f/0x1a0
[ 2654.556245]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2654.561112]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2654.565955]  ? __lock_acquire+0x6de/0x3ff0
[ 2654.570202]  ? mark_held_locks+0xf0/0xf0
[ 2654.574278]  alloc_pages_vma+0xf2/0x780
[ 2654.578270]  do_anonymous_page+0x7c2/0x1be0
[ 2654.582600]  ? __pte_alloc+0x340/0x340
[ 2654.586574]  ? __put_compound_page+0xc0/0xc0
[ 2654.590982]  ? mark_held_locks+0xf0/0xf0
[ 2654.595053]  __handle_mm_fault+0x227a/0x41c0
[ 2654.599466]  ? vm_insert_page+0x9c0/0x9c0
[ 2654.603628]  ? check_preemption_disabled+0x41/0x280
[ 2654.608651]  handle_mm_fault+0x436/0xb10
[ 2654.612716]  __get_user_pages+0x6f0/0x1710
[ 2654.616962]  ? follow_page_mask+0x1d00/0x1d00
[ 2654.621465]  ? check_preemption_disabled+0x41/0x280
[ 2654.626497]  populate_vma_page_range+0x200/0x290
[ 2654.631260]  __mm_populate+0x1ea/0x350
[ 2654.635151]  ? populate_vma_page_range+0x290/0x290
[ 2654.640082]  ? do_mlock+0x6b0/0x6b0
[ 2654.643718]  ? security_capable+0x8f/0xc0
[ 2654.647880]  __se_sys_mlockall+0x362/0x4e0
[ 2654.652122]  do_syscall_64+0xf9/0x620
[ 2654.655987]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2654.661180] RIP: 0033:0x4665e9
[ 2654.664376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2654.683271] RSP: 002b:00007f43d6822188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2654.690978] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2654.698241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2654.705590] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2654.712856] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2654.720123] R13: 00007ffda310918f R14: 00007f43d6822300 R15: 0000000000022000
[ 2656.078141] Bluetooth: hci0: command 0x040f tx timeout
[ 2656.187531] Mem-Info:
[ 2656.206741] active_anon:220125 inactive_anon:1072420 isolated_anon:0
[ 2656.206741]  active_file:10 inactive_file:18 isolated_file:0
[ 2656.206741]  unevictable:65199 dirty:0 writeback:0 unstable:0
[ 2656.206741]  slab_reclaimable:17407 slab_unreclaimable:147736
[ 2656.206741]  mapped:58307 shmem:9048 pagetables:52226 bounce:0
[ 2656.206741]  free:25103 free_pcp:187 free_cma:0
[ 2656.546499] Node 0 active_anon:704332kB inactive_anon:923244kB active_file:0kB inactive_file:48kB unevictable:175120kB isolated(anon):0kB isolated(file):0kB mapped:159904kB dirty:0kB writeback:0kB shmem:36168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2656.799359] Node 1 active_anon:176168kB inactive_anon:3366436kB active_file:36kB inactive_file:16kB unevictable:85676kB isolated(anon):0kB isolated(file):0kB mapped:73324kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2657.043727] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:340kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2657.278065] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2657.283106] Node 0 DMA32 free:35612kB min:35996kB low:44992kB high:53988kB active_anon:703992kB inactive_anon:919872kB active_file:28kB inactive_file:28kB unevictable:175176kB writepending:0kB present:3129332kB managed:2763456kB mlocked:175176kB kernel_stack:21344kB pagetables:52020kB bounce:0kB free_pcp:808kB local_pcp:496kB free_cma:0kB
[ 2657.585505] lowmem_reserve[]: 0 0 1 1 1
[ 2657.627897] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2657.859485] lowmem_reserve[]: 0 0 0 0 0
[ 2657.863511] Node 1 Normal free:53828kB min:53876kB low:67344kB high:80812kB active_anon:176168kB inactive_anon:3366436kB active_file:0kB inactive_file:88kB unevictable:85680kB writepending:0kB present:4194304kB managed:4128248kB mlocked:85680kB kernel_stack:51136kB pagetables:156632kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB
[ 2658.143126] lowmem_reserve[]: 0 0 0 0 0
[ 2658.158273] Bluetooth: hci0: command 0x0419 tx timeout
[ 2658.199826] Node 0 DMA: 20*4kB (UME) 53*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10984kB
[ 2658.353244] Node 0 DMA32: 1*4kB (U) 420*8kB (U) 1235*16kB (UME) 391*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35636kB
[ 2658.471363] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2658.568257] Node 1 Normal: 33*4kB (UME) 16*8kB (UE) 232*16kB (UME) 622*32kB (UME) 326*64kB (UME) 45*128kB (UM) 7*256kB (M) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 53828kB
[ 2658.707856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2658.716730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2658.874178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2658.951418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2659.032758] 14519 total pagecache pages
[ 2659.036758] 0 pages in swap cache
[ 2659.093594] Swap cache stats: add 0, delete 0, find 0/0
[ 2659.139318] Free swap  = 0kB
[ 2659.142370] Total swap = 0kB
[ 2659.145381] 2097051 pages RAM
[ 2659.214000] 0 pages HighMem/MovableOnly
[ 2659.247794] 369648 pages reserved
[ 2659.251304] 0 pages cma reserved
[ 2659.254677] Out of memory (oom_kill_allocating_task): Kill process 7748 (syz-executor.0) score 0 or sacrifice child
[ 2659.367167] Killed process 7748 (syz-executor.0) total-vm:93252kB, anon-rss:21200kB, file-rss:40196kB, shmem-rss:0kB
[ 2659.482643] oom_reaper: reaped process 7748 (syz-executor.0), now anon-rss:21200kB, file-rss:40192kB, shmem-rss:0kB
20:00:57 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, 0x0)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:00:57 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

20:00:57 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:00:57 executing program 2:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)

20:00:57 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)

20:00:57 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, 0x0)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2660.808044] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2660.827446] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 2660.853779] CPU: 1 PID: 7774 Comm: syz-executor.2 Not tainted 4.19.202-syzkaller #0
[ 2660.861590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2660.870937] Call Trace:
[ 2660.873527]  dump_stack+0x1fc/0x2ef
[ 2660.877160]  dump_header+0x15d/0xc3f
[ 2660.880886]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2660.885999]  ? ___ratelimit+0x319/0x590
[ 2660.889979]  oom_kill_process.cold+0x10/0x692
[ 2660.894487]  ? check_preemption_disabled+0x41/0x280
[ 2660.899512]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2660.904797]  out_of_memory+0x1072/0x1390
[ 2660.908865]  ? oom_killer_disable+0x270/0x270
[ 2660.913357]  ? mutex_trylock+0x15f/0x1a0
[ 2660.917422]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2660.922286]  ? _raw_spin_unlock_irq+0x24/0x80
[ 2660.926820]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2660.931667]  ? __schedule+0x88f/0x2040
[ 2660.935567]  ? io_schedule_timeout+0x140/0x140
[ 2660.940167]  ? preempt_schedule_common+0x45/0xc0
[ 2660.944931]  alloc_pages_vma+0xf2/0x780
[ 2660.948915]  do_anonymous_page+0x7c2/0x1be0
[ 2660.953248]  ? __pte_alloc+0x340/0x340
[ 2660.957139]  ? __put_compound_page+0xc0/0xc0
[ 2660.961554]  ? mark_held_locks+0xf0/0xf0
[ 2660.965624]  __handle_mm_fault+0x227a/0x41c0
[ 2660.970035]  ? vm_insert_page+0x9c0/0x9c0
[ 2660.974197]  ? check_preemption_disabled+0x41/0x280
[ 2660.979483]  handle_mm_fault+0x436/0xb10
[ 2660.983552]  __get_user_pages+0x6f0/0x1710
[ 2660.987797]  ? follow_page_mask+0x1d00/0x1d00
[ 2660.992306]  ? check_preemption_disabled+0x41/0x280
[ 2660.997336]  populate_vma_page_range+0x200/0x290
[ 2661.002102]  __mm_populate+0x1ea/0x350
[ 2661.006001]  ? populate_vma_page_range+0x290/0x290
[ 2661.010931]  ? do_mlock+0x6b0/0x6b0
[ 2661.014594]  ? security_capable+0x8f/0xc0
[ 2661.018846]  __se_sys_mlockall+0x362/0x4e0
[ 2661.023084]  do_syscall_64+0xf9/0x620
[ 2661.026893]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2661.032170] RIP: 0033:0x4665e9
[ 2661.035368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
20:00:58 executing program 3:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:00:58 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2661.054272] RSP: 002b:00007f8244f71188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2661.061989] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2661.069285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2661.076560] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2661.083835] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2661.091109] R13: 00007ffc2dc04a3f R14: 00007f8244f71300 R15: 0000000000022000
[ 2661.435755] Mem-Info:
[ 2661.439168] active_anon:220126 inactive_anon:1072429 isolated_anon:0
[ 2661.439168]  active_file:68 inactive_file:56 isolated_file:59
[ 2661.439168]  unevictable:64299 dirty:0 writeback:0 unstable:0
[ 2661.439168]  slab_reclaimable:17410 slab_unreclaimable:147875
[ 2661.439168]  mapped:58971 shmem:9047 pagetables:52265 bounce:0
[ 2661.439168]  free:25114 free_pcp:390 free_cma:0
[ 2661.481608] Node 0 active_anon:703988kB inactive_anon:923240kB active_file:0kB inactive_file:0kB unevictable:171468kB isolated(anon):0kB isolated(file):96kB mapped:165000kB dirty:0kB writeback:0kB shmem:36156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2661.513832] Node 1 active_anon:176516kB inactive_anon:3366476kB active_file:28kB inactive_file:44kB unevictable:85728kB isolated(anon):0kB isolated(file):12kB mapped:70384kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2661.546675] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:340kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2661.574260] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2661.579446] Node 0 DMA32 free:35700kB min:35996kB low:44992kB high:53988kB active_anon:703648kB inactive_anon:919868kB active_file:0kB inactive_file:100kB unevictable:171088kB writepending:0kB present:3129332kB managed:2763456kB mlocked:171088kB kernel_stack:21536kB pagetables:51984kB bounce:0kB free_pcp:492kB local_pcp:492kB free_cma:0kB
[ 2661.610395] lowmem_reserve[]: 0 0 1 1 1
[ 2661.614521] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2661.642226] lowmem_reserve[]: 0 0 0 0 0
[ 2661.646362] Node 1 Normal free:53772kB min:53876kB low:67344kB high:80812kB active_anon:176416kB inactive_anon:3366476kB active_file:328kB inactive_file:540kB unevictable:85648kB writepending:0kB present:4194304kB managed:4128248kB mlocked:85648kB kernel_stack:51200kB pagetables:156820kB bounce:0kB free_pcp:1724kB local_pcp:292kB free_cma:0kB
[ 2661.677118] lowmem_reserve[]: 0 0 0 0 0
[ 2661.681258] Node 0 DMA: 20*4kB (UME) 53*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10984kB
[ 2661.697412] Node 0 DMA32: 1*4kB (U) 278*8kB (UM) 1325*16kB (UME) 392*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35972kB
[ 2661.711030] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2661.721862] Node 1 Normal: 35*4kB (UE) 111*8kB (UE) 194*16kB (UE) 623*32kB (UME) 326*64kB (UME) 45*128kB (UM) 7*256kB (M) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 54020kB
[ 2661.739800] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2661.748962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2661.757703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2661.766688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2661.775775] 15084 total pagecache pages
[ 2661.779898] 0 pages in swap cache
[ 2661.783421] Swap cache stats: add 0, delete 0, find 0/0
[ 2661.789146] Free swap  = 0kB
[ 2661.792276] Total swap = 0kB
[ 2661.795368] 2097051 pages RAM
[ 2661.798620] 0 pages HighMem/MovableOnly
[ 2661.802689] 369648 pages reserved
[ 2661.806207] 0 pages cma reserved
[ 2661.809924] Out of memory (oom_kill_allocating_task): Kill process 7774 (syz-executor.2) score 0 or sacrifice child
[ 2661.820645] Killed process 7771 (syz-executor.2) total-vm:93252kB, anon-rss:21952kB, file-rss:39108kB, shmem-rss:0kB
[ 2661.833612] oom_reaper: reaped process 7771 (syz-executor.2), now anon-rss:21996kB, file-rss:40192kB, shmem-rss:0kB
20:00:59 executing program 2:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:01:01 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:01:01 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:01 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:01:01 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:01:01 executing program 0:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:01:01 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:01:01 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x0, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:01 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2664.811494] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2664.896678] syz-fuzzer cpuset=/ mems_allowed=0-1
[ 2664.975300] CPU: 1 PID: 8087 Comm: syz-fuzzer Not tainted 4.19.202-syzkaller #0
[ 2664.982766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2664.992127] Call Trace:
[ 2664.994725]  dump_stack+0x1fc/0x2ef
[ 2664.998394]  dump_header+0x15d/0xc3f
[ 2665.002113]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2665.007224]  ? ___ratelimit+0x319/0x590
[ 2665.011301]  oom_kill_process.cold+0x10/0x692
[ 2665.015798]  ? check_preemption_disabled+0x41/0x280
[ 2665.020819]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2665.026117]  out_of_memory+0x1072/0x1390
[ 2665.030189]  ? oom_killer_disable+0x270/0x270
[ 2665.034689]  ? mutex_trylock+0x15f/0x1a0
[ 2665.038756]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2665.043606]  ? find_get_entry+0x4cd/0x8a0
[ 2665.047760]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2665.052633]  alloc_pages_current+0x193/0x2a0
[ 2665.057040]  filemap_fault+0x146e/0x2180
[ 2665.061129]  ext4_filemap_fault+0x84/0xb0
[ 2665.065366]  __do_fault+0x10b/0x4b0
[ 2665.068993]  __handle_mm_fault+0x273b/0x41c0
[ 2665.073404]  ? vm_insert_page+0x9c0/0x9c0
[ 2665.077550]  ? lock_downgrade+0x720/0x720
[ 2665.081710]  ? check_preemption_disabled+0x41/0x280
[ 2665.086732]  handle_mm_fault+0x436/0xb10
[ 2665.090800]  __do_page_fault+0x68e/0xd60
[ 2665.094866]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2665.099883]  ? spurious_fault+0x840/0x840
[ 2665.104217]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2665.109062]  ? page_fault+0x8/0x30
[ 2665.112606]  page_fault+0x1e/0x30
[ 2665.116055] RIP: 0033:0x46e2c7
[ 2665.119243] Code: Bad RIP value.
[ 2665.122606] RSP: 002b:000000c00003fdb0 EFLAGS: 00010202
[ 2665.128049] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 000000000046e2c7
[ 2665.135312] RDX: 000000c000020f68 RSI: 0000000000000004 RDI: 000000000000131a
[ 2665.142576] RBP: 000000c00003fdf0 R08: 0000000000000000 R09: 0000000000000000
[ 2665.149842] R10: 0000000000000001 R11: 0000000000000202 R12: 0000000000000003
[ 2665.157107] R13: 000000c000000900 R14: 0000000000000004 R15: 0000000000000000
[ 2666.039067] Mem-Info:
[ 2666.045611] active_anon:220431 inactive_anon:1072443 isolated_anon:0
[ 2666.045611]  active_file:415 inactive_file:488 isolated_file:32
[ 2666.045611]  unevictable:56568 dirty:0 writeback:0 unstable:0
[ 2666.045611]  slab_reclaimable:17513 slab_unreclaimable:147676
[ 2666.045611]  mapped:60366 shmem:9047 pagetables:52603 bounce:0
[ 2666.045611]  free:30856 free_pcp:1049 free_cma:0
[ 2666.081210] Node 0 active_anon:704300kB inactive_anon:923336kB active_file:372kB inactive_file:292kB unevictable:161364kB isolated(anon):0kB isolated(file):108kB mapped:163036kB dirty:0kB writeback:0kB shmem:36160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
20:01:03 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2666.201214] Node 1 active_anon:177424kB inactive_anon:3366436kB active_file:3884kB inactive_file:3036kB unevictable:69108kB isolated(anon):0kB isolated(file):0kB mapped:82828kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
20:01:04 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2666.445174] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:340kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2666.612860] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2666.653285] Node 0 DMA32 free:38192kB min:35996kB low:44992kB high:53988kB active_anon:703960kB inactive_anon:928432kB active_file:1460kB inactive_file:1136kB unevictable:151436kB writepending:0kB present:3129332kB managed:2763456kB mlocked:151560kB kernel_stack:21504kB pagetables:52140kB bounce:0kB free_pcp:1504kB local_pcp:1116kB free_cma:0kB
20:01:04 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:04 executing program 2:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2666.857247] lowmem_reserve[]: 0 0 1 1 1
20:01:04 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2666.885457] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2667.081515] lowmem_reserve[]: 0 0 0 0 0
20:01:04 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2667.109684] Node 1 Normal free:67104kB min:53876kB low:67344kB high:80812kB active_anon:177528kB inactive_anon:3385756kB active_file:5344kB inactive_file:13324kB unevictable:35248kB writepending:40kB present:4194304kB managed:4128248kB mlocked:35048kB kernel_stack:51712kB pagetables:158252kB bounce:0kB free_pcp:2152kB local_pcp:1708kB free_cma:0kB
20:01:05 executing program 0:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2667.332654] lowmem_reserve[]: 0 0 0 0 0
20:01:05 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2667.369871] Node 0 DMA: 20*4kB (UME) 53*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10984kB
[ 2667.482378] Node 0 DMA32: 1626*4kB (UME) 589*8kB (UME) 1306*16kB (UME) 401*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44944kB
[ 2667.566786] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
20:01:05 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(0x0, 0x0)

[ 2667.641198] Node 1 Normal: 1*4kB (U) 29*8kB (UME) 913*16kB (UME) 696*32kB (UME) 333*64kB (UME) 45*128kB (ME) 7*256kB (M) 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 67516kB
20:01:05 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x0, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2667.785669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2667.846475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2667.902774] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2667.929557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2667.945383] 17077 total pagecache pages
[ 2667.952310] 0 pages in swap cache
[ 2667.956103] Swap cache stats: add 0, delete 0, find 0/0
[ 2667.964344] Free swap  = 0kB
[ 2667.969886] Total swap = 0kB
[ 2667.980597] 2097051 pages RAM
[ 2668.047349] 0 pages HighMem/MovableOnly
[ 2668.080823] 369648 pages reserved
[ 2668.130586] 0 pages cma reserved
[ 2668.164972] Out of memory (oom_kill_allocating_task): Kill process 8087 (syz-fuzzer) score 0 or sacrifice child
[ 2668.245537] Killed process 7464 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:928kB, shmem-rss:0kB
[ 2668.386824] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2668.510598] syz-fuzzer cpuset=/ mems_allowed=0-1
[ 2668.515397] CPU: 1 PID: 8089 Comm: syz-fuzzer Not tainted 4.19.202-syzkaller #0
[ 2668.522849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2668.532196] Call Trace:
[ 2668.534790]  dump_stack+0x1fc/0x2ef
[ 2668.538434]  dump_header+0x15d/0xc3f
[ 2668.542164]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2668.547268]  ? ___ratelimit+0x319/0x590
[ 2668.551250]  oom_kill_process.cold+0x10/0x692
[ 2668.555753]  ? check_preemption_disabled+0x41/0x280
[ 2668.560778]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2668.566062]  out_of_memory+0x1072/0x1390
[ 2668.570131]  ? oom_killer_disable+0x270/0x270
[ 2668.574631]  ? mutex_trylock+0x15f/0x1a0
[ 2668.578696]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2668.583549]  ? find_get_entry+0x4cd/0x8a0
[ 2668.587707]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2668.592577]  alloc_pages_current+0x193/0x2a0
[ 2668.596988]  filemap_fault+0x146e/0x2180
[ 2668.601065]  ext4_filemap_fault+0x84/0xb0
[ 2668.605219]  __do_fault+0x10b/0x4b0
[ 2668.608845]  ? do_raw_spin_unlock+0x171/0x230
[ 2668.613345]  __handle_mm_fault+0x273b/0x41c0
[ 2668.617759]  ? vm_insert_page+0x9c0/0x9c0
[ 2668.621906]  ? fsnotify+0x84e/0xe10
[ 2668.625544]  ? check_preemption_disabled+0x41/0x280
[ 2668.630569]  handle_mm_fault+0x436/0xb10
[ 2668.634639]  __do_page_fault+0x68e/0xd60
[ 2668.638710]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2668.643727]  ? spurious_fault+0x840/0x840
[ 2668.647878]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2668.652727]  ? page_fault+0x8/0x30
[ 2668.656271]  page_fault+0x1e/0x30
[ 2668.659722] RIP: 0033:0x411a7f
[ 2668.662913] Code: Bad RIP value.
[ 2668.666276] RSP: 002b:000000c000e07768 EFLAGS: 00010246
[ 2668.671637] RAX: 0000000000752ee0 RBX: 0000000000000004 RCX: 0000000000745a40
[ 2668.678910] RDX: 00000000008ee180 RSI: 000000c000e077b8 RDI: 0000000000000072
[ 2668.686173] RBP: 000000c000e07798 R08: 00007f1876273731 R09: 0000000000203001
[ 2668.693441] R10: 0000000000000004 R11: 0000000000000032 R12: 00000000000000f2
[ 2668.700713] R13: 0000000000000000 R14: 000000000094d4c1 R15: 0000000000000000
[ 2669.726915] Mem-Info:
[ 2669.732090] active_anon:219928 inactive_anon:1072439 isolated_anon:0
[ 2669.732090]  active_file:50 inactive_file:34 isolated_file:8
[ 2669.732090]  unevictable:68242 dirty:0 writeback:0 unstable:0
[ 2669.732090]  slab_reclaimable:17510 slab_unreclaimable:147479
[ 2669.732090]  mapped:52371 shmem:9047 pagetables:52319 bounce:0
[ 2669.732090]  free:25167 free_pcp:710 free_cma:0
[ 2669.810064] Node 0 active_anon:703220kB inactive_anon:923244kB active_file:188kB inactive_file:12kB unevictable:180128kB isolated(anon):0kB isolated(file):32kB mapped:142460kB dirty:0kB writeback:0kB shmem:36156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2669.987759] Node 1 active_anon:176432kB inactive_anon:3387908kB active_file:116kB inactive_file:68kB unevictable:69012kB isolated(anon):0kB isolated(file):0kB mapped:64848kB dirty:0kB writeback:24kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2670.186859] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:340kB inactive_anon:3372kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2670.397598] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2670.432100] Node 0 DMA32 free:40156kB min:35996kB low:44992kB high:53988kB active_anon:703008kB inactive_anon:919864kB active_file:2224kB inactive_file:2304kB unevictable:183528kB writepending:0kB present:3129332kB managed:2763456kB mlocked:183620kB kernel_stack:21216kB pagetables:51124kB bounce:0kB free_pcp:2880kB local_pcp:1424kB free_cma:0kB
20:01:08 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2670.607994] lowmem_reserve[]: 0 0 1 1 1
[ 2670.626947] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2670.695148] lowmem_reserve[]: 0 0 0 0 0
[ 2670.746554] Node 1 Normal free:67100kB min:53876kB low:67344kB high:80812kB active_anon:176368kB inactive_anon:3366608kB active_file:1720kB inactive_file:2684kB unevictable:82224kB writepending:0kB present:4194304kB managed:4128248kB mlocked:82300kB kernel_stack:51168kB pagetables:156764kB bounce:0kB free_pcp:1288kB local_pcp:724kB free_cma:0kB
[ 2670.932582] lowmem_reserve[]: 0 0 0 0 0
[ 2670.956386] Node 0 DMA: 20*4kB (UME) 53*8kB (UME) 27*16kB (UM) 22*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10984kB
[ 2671.057994] Node 0 DMA32: 0*4kB 0*8kB 1399*16kB (U) 407*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35408kB
[ 2671.165288] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
20:01:08 executing program 0:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:01:09 executing program 2:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2671.231436] Node 1 Normal: 3934*4kB (UM) 2684*8kB (UME) 990*16kB (UME) 622*32kB (UME) 334*64kB (UME) 45*128kB (ME) 7*256kB (M) 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 103416kB
[ 2671.334952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2671.386823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2671.426335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2671.465923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2671.513650] 20352 total pagecache pages
[ 2671.536747] 0 pages in swap cache
[ 2671.556755] Swap cache stats: add 0, delete 0, find 0/0
[ 2671.582635] Free swap  = 0kB
[ 2671.594711] Total swap = 0kB
[ 2671.608937] 2097051 pages RAM
[ 2671.623145] 0 pages HighMem/MovableOnly
[ 2671.640446] 369648 pages reserved
[ 2671.655425] 0 pages cma reserved
[ 2671.672332] Out of memory (oom_kill_allocating_task): Kill process 8089 (syz-fuzzer) score 0 or sacrifice child
[ 2671.722316] Killed process 16253 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB
20:01:10 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:10 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(0x0, 0x0)

20:01:11 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(0x0, 0x0)

20:01:11 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:01:12 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x0, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:12 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:01:13 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:13 executing program 2:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:13 executing program 5:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2676.237035] IPVS: ftp: loaded support on port[0] = 21
20:01:14 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x0, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2676.801318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
20:01:14 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="f8c00180080003000301000008000240070000000800030005000000080002000100000054e2fa4501f3e94fcb8fed41de9dd0c889c763e7505c7fd1f769cd2ae6a1db6719b8bedfaeefee870023bedc1274df26cbe6b710ed57f6ff45240435e825af05d02f600a354ab813238a963d48210c911da92959adc79dd997380c3633fc3e877275a161ea17c2b6124cc758bb3e3bc8e660aa6755c50db0b6618e00cbcef799ebc1d35b3ec8c3e9ed00b0264a669ac8cca995068dd481de560aed03630281dee7c258ea3d7416ddc570ab10be7d7b9b620db0be71f15998f0c6975a443fd9e6e97c8e3bc61e16414030ca7b34af48c1f40a9b6df00b9303e2cdb3e4d9be291bd40d32ebdc42a45293da5b8bbba5cc7095ad8a9d105070cc78c1a6d774113b5356a961c5573917a1029aa63bf2fdfc2f57ab256a4bb88ad26efc1fe63b3619bdc5c2fa481189dd001bfe3b32cd9e1c4a0650d4d140e9ea4a77f2dbbd38d98a072e46a30c8b279acc3ce8c9cfae3b1bcd497fe13d09fe695c0acd35fafa023af9b75198aac0d518a49ef09ec967330d00"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:01:15 executing program 2:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

[ 2677.558772] IPVS: ftp: loaded support on port[0] = 21
[ 2678.076318] Bluetooth: hci0: command 0x0409 tx timeout
[ 2678.159631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2679.011241] chnl_net:caif_netlink_parms(): no params data found
[ 2679.063621] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2679.082166] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2679.106798] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2679.113649] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2679.130007] device bridge_slave_1 left promiscuous mode
[ 2679.141550] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2679.150920] device bridge_slave_0 left promiscuous mode
[ 2679.161520] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2679.183613] device veth1_macvtap left promiscuous mode
[ 2679.194281] device veth0_macvtap left promiscuous mode
[ 2679.200014] device veth1_vlan left promiscuous mode
[ 2679.205205] device veth0_vlan left promiscuous mode
[ 2679.356135] Bluetooth: hci5: command 0x0409 tx timeout
[ 2680.156090] Bluetooth: hci0: command 0x041b tx timeout
[ 2681.436037] Bluetooth: hci5: command 0x041b tx timeout
[ 2682.236015] Bluetooth: hci0: command 0x040f tx timeout
[ 2683.515762] Bluetooth: hci5: command 0x040f tx timeout
[ 2683.912267] device hsr_slave_1 left promiscuous mode
[ 2683.920033] device hsr_slave_0 left promiscuous mode
[ 2683.935532] team0 (unregistering): Port device team_slave_1 removed
[ 2683.950483] team0 (unregistering): Port device team_slave_0 removed
[ 2683.960428] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 2683.973246] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 2684.006802] bond0 (unregistering): Released all slaves
[ 2684.083150] chnl_net:caif_netlink_parms(): no params data found
[ 2684.315709] Bluetooth: hci0: command 0x0419 tx timeout
[ 2684.409106] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2684.422233] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2684.430250] device bridge_slave_0 entered promiscuous mode
[ 2684.454990] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2684.464032] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2684.472117] device bridge_slave_1 entered promiscuous mode
[ 2684.479203] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2684.486684] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2684.494211] device bridge_slave_0 entered promiscuous mode
[ 2684.535250] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2684.541744] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2684.551579] device bridge_slave_1 entered promiscuous mode
[ 2684.560444] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 2684.583931] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 2684.612413] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 2684.630664] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 2684.644270] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 2684.652432] team0: Port device team_slave_0 added
[ 2684.664614] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 2684.672956] team0: Port device team_slave_1 added
[ 2684.687028] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 2684.694618] team0: Port device team_slave_0 added
[ 2684.712549] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 2684.720446] team0: Port device team_slave_1 added
[ 2684.748516] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2684.754765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2684.788957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2684.803541] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2684.814650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2684.846773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2684.863390] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2684.873094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2684.905279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2684.923511] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2684.929795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2684.955744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2684.966736] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 2684.975114] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 2684.985984] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 2685.007762] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 2685.044187] device hsr_slave_0 entered promiscuous mode
[ 2685.050577] device hsr_slave_1 entered promiscuous mode
[ 2685.090998] device hsr_slave_0 entered promiscuous mode
[ 2685.103046] device hsr_slave_1 entered promiscuous mode
[ 2685.110357] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 2685.125936] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 2685.133012] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 2685.154756] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 2685.338175] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 2685.346570] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 2685.404243] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2685.426188] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2685.436599] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 2685.444330] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 2685.454085] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 2685.461643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2685.469031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2685.478683] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 2685.484889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2685.492300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2685.507208] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 2685.513362] 8021q: adding VLAN 0 to HW filter on device team0
[ 2685.524354] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 2685.531168] 8021q: adding VLAN 0 to HW filter on device team0
[ 2685.540524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 2685.550821] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 2685.563948] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 2685.572021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2685.580126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2685.587950] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2685.594293] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2685.601605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2685.605584] Bluetooth: hci5: command 0x0419 tx timeout
[ 2685.610122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2685.621860] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2685.628246] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2685.635059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2685.643086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2685.650779] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2685.657176] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2685.667176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 2685.679063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2685.688537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2685.696234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2685.705657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 2685.714860] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 2685.722563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2685.731210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2685.738950] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2685.745296] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2685.752594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2685.768996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 2685.776976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2685.786126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 2685.793093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2685.801507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2685.812286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 2685.823188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2685.831237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2685.842076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 2685.850516] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 2685.858033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2685.866979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2685.874514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2685.883477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2685.901184] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 2685.908482] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2685.915423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2685.926102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2685.934754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 2685.944769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2685.952826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2685.961895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 2685.971520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2685.982264] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 2685.988505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2686.002558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2686.010178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2686.020346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 2686.029279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2686.039385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2686.060030] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 2686.069610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2686.079507] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 2686.086872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2686.094099] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 2686.102620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2686.110420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2686.124543] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 2686.135156] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2686.143946] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 2686.151470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2686.158712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2686.178443] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2686.197848] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready
[ 2686.209682] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready
[ 2686.228209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2686.241335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2686.275123] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready
[ 2686.297387] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready
[ 2686.307030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2686.318334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2686.331258] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2686.341857] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2686.353454] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2686.363092] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2686.371367] device bridge_slave_1 left promiscuous mode
[ 2686.377721] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2686.384679] device bridge_slave_0 left promiscuous mode
[ 2686.390788] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2686.402378] device veth1_macvtap left promiscuous mode
[ 2686.408966] device veth0_macvtap left promiscuous mode
[ 2686.414289] device veth1_vlan left promiscuous mode
[ 2686.420383] device veth0_vlan left promiscuous mode
[ 2686.518581] device hsr_slave_1 left promiscuous mode
[ 2686.527497] device hsr_slave_0 left promiscuous mode
[ 2686.543413] team0 (unregistering): Port device team_slave_1 removed
[ 2686.554748] team0 (unregistering): Port device team_slave_0 removed
[ 2686.565013] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 2686.576552] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 2686.609342] bond0 (unregistering): Released all slaves
[ 2686.630331] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready
[ 2686.637882] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready
[ 2686.644452] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready
[ 2686.658634] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready
[ 2686.665343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2686.672948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2686.680758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2686.687827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2686.696165] device veth0_vlan entered promiscuous mode
[ 2686.705303] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready
[ 2686.716960] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready
[ 2686.723611] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready
[ 2686.740786] device veth1_vlan entered promiscuous mode
[ 2686.747084] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready
[ 2686.757891] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready
[ 2686.766442] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2686.773698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2686.781898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2686.790322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2686.798187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2686.816928] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready
[ 2686.824397] device veth0_vlan entered promiscuous mode
[ 2686.841594] device veth1_vlan entered promiscuous mode
[ 2686.848543] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready
[ 2686.856975] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
[ 2686.867828] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready
[ 2686.877964] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready
[ 2686.888581] device veth0_macvtap entered promiscuous mode
[ 2686.895029] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
[ 2686.902997] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2686.910972] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2686.919337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2686.932331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2686.941288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2686.958746] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2686.972609] device veth1_macvtap entered promiscuous mode
[ 2686.980632] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready
[ 2686.997851] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
[ 2687.013849] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
[ 2687.027313] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready
[ 2687.034446] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2687.043869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2687.058188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2687.073702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
[ 2687.084092] device veth0_macvtap entered promiscuous mode
[ 2687.097773] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
[ 2687.105170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2687.122913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2687.133560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.142984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2687.153424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.162915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2687.173042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.182429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2687.192578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.203482] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready
[ 2687.211082] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2687.221737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2687.231660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2687.246544] device veth1_macvtap entered promiscuous mode
[ 2687.255217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2687.270491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.279829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2687.294759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.304225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2687.320086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.331535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2687.341567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.352475] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
[ 2687.359953] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2687.371574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
[ 2687.381826] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2687.390203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2687.414693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
[ 2687.424892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2687.441395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.461693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2687.471819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.481448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2687.491660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.501067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2687.511723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.521740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2687.531759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.547792] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready
[ 2687.554776] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2687.568747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2687.578276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2687.590081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2687.607033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.620881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2687.632949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.649044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2687.660666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.671761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2687.684254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.695362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2687.705290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2687.716994] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
[ 2687.723908] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2687.766142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2687.774149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2688.026048] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 2688.032590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2688.056707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2688.073270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2688.081924] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 2688.111034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2688.115040] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 2688.118834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2688.128008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2688.133687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2688.140862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2688.169371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2688.181392] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 2688.190483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2688.198122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2688.204960] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
20:01:26 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:26 executing program 5:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r1 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = accept4$tipc(r1, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:01:26 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x0, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:01:26 executing program 2:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x0, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:01:26 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
fork()
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:26 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(0x0, 0x0)

[ 2689.967264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
20:01:28 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:29 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x0, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:01:29 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:29 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:29 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:29 executing program 2:
r0 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000)
accept4$x25(r0, 0x0, &(0x7f0000000040), 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f00000000c0)={0x39})
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)=""/158, 0x9e}, 0x10001)
fork()
ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000080)={0x1, 0x40})
mlockall(0x3)

20:01:31 executing program 2:
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:01:31 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:31 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:01:31 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:32 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
fork()
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

[ 2694.634515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
20:01:34 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:01:34 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
fork()
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:01:34 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:34 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r1 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = accept4$tipc(r1, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:01:34 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
fork()
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:01:34 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10c00, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000280)={0x1, 0x2})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x32, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x89}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x24048840}, 0x40000)

[ 2698.579384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2698.799559] syz-executor.5 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2698.862122] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 2698.884178] CPU: 1 PID: 8706 Comm: syz-executor.5 Not tainted 4.19.202-syzkaller #0
[ 2698.891990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2698.901360] Call Trace:
[ 2698.903960]  dump_stack+0x1fc/0x2ef
[ 2698.907606]  dump_header+0x15d/0xc3f
[ 2698.911328]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2698.916520]  ? ___ratelimit+0x319/0x590
[ 2698.920500]  oom_kill_process.cold+0x10/0x692
[ 2698.924997]  ? check_preemption_disabled+0x41/0x280
[ 2698.930020]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2698.935298]  out_of_memory+0x1072/0x1390
[ 2698.939367]  ? oom_killer_disable+0x270/0x270
[ 2698.943862]  ? mutex_trylock+0x15f/0x1a0
[ 2698.947932]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2698.952797]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2698.957644]  ? __lock_acquire+0x6de/0x3ff0
[ 2698.961888]  ? mark_held_locks+0xf0/0xf0
[ 2698.965967]  alloc_pages_vma+0xf2/0x780
[ 2698.969949]  do_anonymous_page+0x7c2/0x1be0
[ 2698.974279]  ? __pte_alloc+0x340/0x340
[ 2698.978173]  ? __put_compound_page+0xc0/0xc0
[ 2698.982585]  ? mark_held_locks+0xf0/0xf0
[ 2698.986647]  __handle_mm_fault+0x227a/0x41c0
[ 2698.991057]  ? vm_insert_page+0x9c0/0x9c0
[ 2698.995219]  ? check_preemption_disabled+0x41/0x280
[ 2699.000242]  handle_mm_fault+0x436/0xb10
[ 2699.004398]  __get_user_pages+0x6f0/0x1710
[ 2699.008640]  ? follow_page_mask+0x1d00/0x1d00
[ 2699.013158]  populate_vma_page_range+0x200/0x290
[ 2699.017928]  __mm_populate+0x1ea/0x350
[ 2699.021826]  ? populate_vma_page_range+0x290/0x290
[ 2699.026756]  ? do_mlock+0x6b0/0x6b0
[ 2699.030395]  ? security_capable+0x8f/0xc0
[ 2699.034552]  __se_sys_mlockall+0x362/0x4e0
[ 2699.038800]  do_syscall_64+0xf9/0x620
[ 2699.042618]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2699.047809] RIP: 0033:0x4665e9
[ 2699.051004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2699.070084] RSP: 002b:00007ffad19b4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2699.077816] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2699.085348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2699.092619] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2699.099894] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2699.107167] R13: 00007fff2c0d6aaf R14: 00007ffad19b4300 R15: 0000000000022000
[ 2699.675987] Mem-Info:
[ 2699.678705] active_anon:204231 inactive_anon:1039724 isolated_anon:0
[ 2699.678705]  active_file:1347 inactive_file:1449 isolated_file:53
[ 2699.678705]  unevictable:106520 dirty:3 writeback:0 unstable:0
[ 2699.678705]  slab_reclaimable:17003 slab_unreclaimable:145709
[ 2699.678705]  mapped:79652 shmem:9046 pagetables:49887 bounce:0
[ 2699.678705]  free:34802 free_pcp:1103 free_cma:0
[ 2699.821296] Node 0 active_anon:645888kB inactive_anon:937884kB active_file:1488kB inactive_file:1512kB unevictable:212904kB isolated(anon):0kB isolated(file):84kB mapped:203392kB dirty:4kB writeback:0kB shmem:36096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2699.856561] Node 1 active_anon:171036kB inactive_anon:3220812kB active_file:1104kB inactive_file:1336kB unevictable:213176kB isolated(anon):0kB isolated(file):0kB mapped:115516kB dirty:8kB writeback:0kB shmem:88kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2699.890456] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2699.938416] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2699.952218] Node 0 DMA32 free:46296kB min:35996kB low:44992kB high:53988kB active_anon:645636kB inactive_anon:934536kB active_file:968kB inactive_file:1744kB unevictable:212760kB writepending:76kB present:3129332kB managed:2763456kB mlocked:212784kB kernel_stack:19904kB pagetables:46996kB bounce:0kB free_pcp:1732kB local_pcp:308kB free_cma:0kB
[ 2700.000494] lowmem_reserve[]: 0 0 1 1 1
[ 2700.006111] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2700.046315] lowmem_reserve[]: 0 0 0 0 0
[ 2700.051310] Node 1 Normal free:89192kB min:53876kB low:67344kB high:80812kB active_anon:170928kB inactive_anon:3220636kB active_file:1256kB inactive_file:1384kB unevictable:213224kB writepending:8kB present:4194304kB managed:4128248kB mlocked:213224kB kernel_stack:49056kB pagetables:151240kB bounce:0kB free_pcp:2680kB local_pcp:1304kB free_cma:0kB
20:01:37 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2700.204445] lowmem_reserve[]: 0 0 0 0 0
[ 2700.213162] Node 0 DMA: 10*4kB (UE) 52*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (MEH) 5*256kB (MEH) 4*512kB (MEH) 3*1024kB (MEH) 1*2048kB (M) 0*4096kB = 10968kB
[ 2700.239996] Node 0 DMA32: 576*4kB (UME) 837*8kB (UMH) 1250*16kB (UM) 492*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44744kB
[ 2700.255313] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2700.268474] Node 1 Normal: 496*4kB (UM) 512*8kB (UME) 773*16kB (UME) 716*32kB (UME) 235*64kB (UME) 10*128kB (UME) 10*256kB (UM) 27*512kB (ME) 11*1024kB (ME) 2*2048kB (M) 0*4096kB = 89424kB
[ 2700.312447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2700.344356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2700.352986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2700.413177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2700.452531] 36937 total pagecache pages
[ 2700.477728] 0 pages in swap cache
[ 2700.481210] Swap cache stats: add 0, delete 0, find 0/0
[ 2700.524316] Free swap  = 0kB
[ 2700.527359] Total swap = 0kB
[ 2700.530376] 2097051 pages RAM
[ 2700.533477] 0 pages HighMem/MovableOnly
[ 2700.584379] 369648 pages reserved
[ 2700.587882] 0 pages cma reserved
[ 2700.591253] Out of memory (oom_kill_allocating_task): Kill process 8706 (syz-executor.5) score 0 or sacrifice child
[ 2700.634430] Killed process 8706 (syz-executor.5) total-vm:93252kB, anon-rss:36184kB, file-rss:56576kB, shmem-rss:0kB
[ 2700.696058] oom_reaper: reaped process 8706 (syz-executor.5), now anon-rss:36184kB, file-rss:56572kB, shmem-rss:0kB
20:01:38 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10c00, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000280)={0x1, 0x2})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x32, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x89}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x24048840}, 0x40000)

20:01:38 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r1 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = accept4$tipc(r1, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r4, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r5, @ANYBLOB="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"/416], 0x78}}, 0x8800)
mlockall(0x3)

20:01:38 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:38 executing program 2:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2701.159993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
20:01:39 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
fork()
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()
syz_open_procfs$namespace(r0, 0x0)

20:01:41 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:01:41 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:01:41 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:41 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r1 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = accept4$tipc(r1, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r4, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r5, @ANYBLOB="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"/416], 0x78}}, 0x8800)
mlockall(0x3)

20:01:41 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:41 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
mlockall(0x5)

20:01:42 executing program 2:
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2704.582565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2705.339621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
20:01:44 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:01:45 executing program 2:
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:01:45 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:01:45 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:01:45 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r1 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = accept4$tipc(r1, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r4, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r5, @ANYBLOB="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"/416], 0x78}}, 0x8800)
mlockall(0x3)

20:01:45 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2708.457256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2709.264188] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2709.300716] systemd-journal cpuset=/ mems_allowed=0-1
[ 2709.336029] CPU: 0 PID: 5655 Comm: systemd-journal Not tainted 4.19.202-syzkaller #0
[ 2709.343925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2709.353278] Call Trace:
[ 2709.355873]  dump_stack+0x1fc/0x2ef
[ 2709.359502]  dump_header+0x15d/0xc3f
[ 2709.363221]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2709.368322]  ? ___ratelimit+0x319/0x590
[ 2709.372303]  oom_kill_process.cold+0x10/0x692
[ 2709.376805]  ? check_preemption_disabled+0x41/0x280
[ 2709.381828]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2709.387107]  out_of_memory+0x1072/0x1390
[ 2709.391174]  ? oom_killer_disable+0x270/0x270
[ 2709.395676]  ? mutex_trylock+0x15f/0x1a0
[ 2709.399742]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2709.404593]  ? find_get_entry+0x4cd/0x8a0
[ 2709.408847]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2709.413716]  alloc_pages_current+0x193/0x2a0
[ 2709.418132]  filemap_fault+0x146e/0x2180
[ 2709.422206]  ext4_filemap_fault+0x84/0xb0
[ 2709.426359]  __do_fault+0x10b/0x4b0
[ 2709.429993]  __handle_mm_fault+0x273b/0x41c0
[ 2709.434407]  ? vm_insert_page+0x9c0/0x9c0
[ 2709.438568]  ? check_preemption_disabled+0x41/0x280
[ 2709.443592]  handle_mm_fault+0x436/0xb10
[ 2709.447663]  __do_page_fault+0x68e/0xd60
[ 2709.451734]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2709.456751]  ? spurious_fault+0x840/0x840
[ 2709.460899]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2709.465750]  ? page_fault+0x8/0x30
[ 2709.469289]  page_fault+0x1e/0x30
[ 2709.472737] RIP: 0033:0x7f23993832e3
[ 2709.476448] Code: Bad RIP value.
[ 2709.479802] RSP: 002b:00007fff482f3ef8 EFLAGS: 00010246
[ 2709.485169] RAX: 0000000000000001 RBX: 0000557a387581e0 RCX: 00007f23993832e3
[ 2709.492434] RDX: 0000000000000013 RSI: 00007fff482f3f00 RDI: 000000000000000c
[ 2709.499700] RBP: 00007fff482f40f0 R08: 431bde82d7b634db R09: 000002d635507ab6
[ 2709.507053] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff482f3f00
[ 2709.514321] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005c939f8b26a60
[ 2709.667531] Mem-Info:
[ 2709.670224] active_anon:204377 inactive_anon:1081574 isolated_anon:0
[ 2709.670224]  active_file:223 inactive_file:182 isolated_file:32
[ 2709.670224]  unevictable:77051 dirty:11 writeback:0 unstable:0
[ 2709.670224]  slab_reclaimable:17017 slab_unreclaimable:146074
[ 2709.670224]  mapped:64376 shmem:9046 pagetables:49946 bounce:0
[ 2709.670224]  free:25088 free_pcp:277 free_cma:0
[ 2709.706621] Node 0 active_anon:646516kB inactive_anon:994148kB active_file:8kB inactive_file:12kB unevictable:171104kB isolated(anon):0kB isolated(file):0kB mapped:155228kB dirty:0kB writeback:0kB shmem:36100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2709.741646] Node 1 active_anon:170992kB inactive_anon:3332148kB active_file:140kB inactive_file:64kB unevictable:137100kB isolated(anon):0kB isolated(file):0kB mapped:100876kB dirty:44kB writeback:0kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2710.055631] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:44kB writepending:0kB present:15992kB managed:15908kB mlocked:44kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2710.294378] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2710.341801] Node 0 DMA32 free:35668kB min:35996kB low:44992kB high:53988kB active_anon:646192kB inactive_anon:990876kB active_file:4kB inactive_file:0kB unevictable:170916kB writepending:0kB present:3129332kB managed:2763456kB mlocked:170916kB kernel_stack:19904kB pagetables:47752kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2710.572200] lowmem_reserve[]: 0 0 1 1 1
[ 2710.609594] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2710.824908] lowmem_reserve[]: 0 0 0 0 0
[ 2710.845555] Node 1 Normal free:53740kB min:53876kB low:67344kB high:80812kB active_anon:170992kB inactive_anon:3332184kB active_file:40kB inactive_file:0kB unevictable:139252kB writepending:0kB present:4194304kB managed:4128248kB mlocked:139248kB kernel_stack:49504kB pagetables:151936kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
[ 2710.951648] lowmem_reserve[]: 0 0 0 0 0
[ 2710.959955] Node 0 DMA: 13*4kB (UME) 52*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2711.071296] Node 0 DMA32: 23*4kB (UME) 54*8kB (UM) 1228*16kB (U) 491*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35884kB
[ 2711.270851] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2711.361000] Node 1 Normal: 46*4kB (UM) 13*8kB (UME) 4*16kB (UME) 383*32kB (UE) 73*64kB (UME) 36*128kB (UME) 11*256kB (UM) 27*512kB (ME) 11*1024kB (ME) 2*2048kB (M) 0*4096kB = 53888kB
[ 2711.481106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2711.552096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2711.630816] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2711.701057] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2711.773400] 20562 total pagecache pages
[ 2711.801283] 0 pages in swap cache
[ 2711.823426] Swap cache stats: add 0, delete 0, find 0/0
[ 2711.828807] Free swap  = 0kB
[ 2711.831832] Total swap = 0kB
[ 2711.912773] 2097051 pages RAM
[ 2711.936603] 0 pages HighMem/MovableOnly
[ 2711.940608] 369648 pages reserved
[ 2711.980257] 0 pages cma reserved
[ 2712.010254] Out of memory (oom_kill_allocating_task): Kill process 5655 (systemd-journal) score 0 or sacrifice child
[ 2712.021023] Killed process 5655 (systemd-journal) total-vm:46096kB, anon-rss:488kB, file-rss:0kB, shmem-rss:2884kB
[ 2712.054694] oom_reaper: reaped process 5655 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2884kB
[ 2712.125066] oom_reaper: reaped process 8814 (syz-executor.5), now anon-rss:28472kB, file-rss:40564kB, shmem-rss:0kB
20:01:50 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:01:50 executing program 0:
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:01:50 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:01:50 executing program 2:
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:01:50 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:01:51 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2713.397818] systemd[1]: systemd-journald.service: Failed with result 'signal'.
[ 2713.428028] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart.
[ 2713.572229] systemd[1]: Stopped Flush Journal to Persistent Storage.
[ 2713.620546] systemd[1]: Stopping Flush Journal to Persistent Storage...
[ 2713.676608] systemd[1]: Stopped Journal Service.
[ 2713.781743] systemd[1]: Starting Journal Service...
[ 2714.315907] ieee802154 phy0 wpan0: encryption failed: -22
[ 2714.321491] ieee802154 phy1 wpan1: encryption failed: -22
[ 2714.473661] syz-executor.5 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2714.490334] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 2714.495583] CPU: 1 PID: 8838 Comm: syz-executor.5 Not tainted 4.19.202-syzkaller #0
[ 2714.503366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2714.513660] Call Trace:
[ 2714.516252]  dump_stack+0x1fc/0x2ef
[ 2714.519884]  dump_header+0x15d/0xc3f
[ 2714.523591]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2714.528680]  ? ___ratelimit+0x319/0x590
[ 2714.532656]  oom_kill_process.cold+0x10/0x692
[ 2714.537143]  ? check_preemption_disabled+0x41/0x280
[ 2714.542156]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2714.547429]  out_of_memory+0x1072/0x1390
[ 2714.551481]  ? oom_killer_disable+0x270/0x270
[ 2714.555969]  ? mutex_trylock+0x15f/0x1a0
[ 2714.560038]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2714.564899]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2714.569733]  ? mark_held_locks+0xf0/0xf0
[ 2714.573782]  ? set_next_entity+0xb52/0x1dc0
[ 2714.578276]  ? __lock_acquire+0x6de/0x3ff0
[ 2714.582519]  alloc_pages_vma+0xf2/0x780
[ 2714.586552]  do_anonymous_page+0x7c2/0x1be0
[ 2714.590862]  ? finish_task_switch+0x146/0x760
[ 2714.595343]  ? __pte_alloc+0x340/0x340
[ 2714.599226]  ? __schedule+0x88f/0x2040
[ 2714.603120]  __handle_mm_fault+0x227a/0x41c0
[ 2714.607524]  ? vm_insert_page+0x9c0/0x9c0
[ 2714.611660]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 2714.616771]  ? check_preemption_disabled+0x41/0x280
[ 2714.621784]  handle_mm_fault+0x436/0xb10
[ 2714.626382]  __get_user_pages+0x6f0/0x1710
[ 2714.630624]  ? follow_page_mask+0x1d00/0x1d00
[ 2714.635108]  ? check_preemption_disabled+0x41/0x280
[ 2714.640126]  populate_vma_page_range+0x200/0x290
[ 2714.644882]  __mm_populate+0x1ea/0x350
[ 2714.648758]  ? populate_vma_page_range+0x290/0x290
[ 2714.653708]  ? do_mlock+0x6b0/0x6b0
[ 2714.657330]  ? security_capable+0x8f/0xc0
[ 2714.661469]  __se_sys_mlockall+0x362/0x4e0
[ 2714.665710]  do_syscall_64+0xf9/0x620
[ 2714.669519]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2714.674702] RIP: 0033:0x4665e9
[ 2714.677889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2714.696789] RSP: 002b:00007ffad19b4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2714.704484] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2714.711826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2714.719077] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2714.726345] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2714.733610] R13: 00007fff2c0d6aaf R14: 00007ffad19b4300 R15: 0000000000022000
[ 2714.742149] Mem-Info:
[ 2714.744623] active_anon:204261 inactive_anon:1081568 isolated_anon:0
[ 2714.744623]  active_file:35 inactive_file:62 isolated_file:23
[ 2714.744623]  unevictable:77359 dirty:2 writeback:1 unstable:0
[ 2714.744623]  slab_reclaimable:17054 slab_unreclaimable:146319
[ 2714.744623]  mapped:58700 shmem:9046 pagetables:49892 bounce:0
[ 2714.744623]  free:25092 free_pcp:195 free_cma:0
[ 2714.778890] Node 0 active_anon:646176kB inactive_anon:994180kB active_file:96kB inactive_file:216kB unevictable:169252kB isolated(anon):0kB isolated(file):92kB mapped:151524kB dirty:8kB writeback:0kB shmem:36100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2714.807625] Node 1 active_anon:170868kB inactive_anon:3332092kB active_file:44kB inactive_file:32kB unevictable:140184kB isolated(anon):0kB isolated(file):0kB mapped:83276kB dirty:0kB writeback:4kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2714.835384] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2714.862544] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2714.868258] Node 0 DMA32 free:35752kB min:35996kB low:44992kB high:53988kB active_anon:645852kB inactive_anon:990828kB active_file:80kB inactive_file:208kB unevictable:169156kB writepending:8kB present:3129332kB managed:2763456kB mlocked:169156kB kernel_stack:20192kB pagetables:48040kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
[ 2714.899030] lowmem_reserve[]: 0 0 1 1 1
[ 2714.903024] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2714.928997] lowmem_reserve[]: 0 0 0 0 0
[ 2714.932986] Node 1 Normal free:53652kB min:53876kB low:67344kB high:80812kB active_anon:170904kB inactive_anon:3332092kB active_file:64kB inactive_file:64kB unevictable:140224kB writepending:0kB present:4194304kB managed:4128248kB mlocked:140224kB kernel_stack:49184kB pagetables:151288kB bounce:0kB free_pcp:536kB local_pcp:0kB free_cma:0kB
[ 2714.963744] lowmem_reserve[]: 0 0 0 0 0
[ 2714.967733] Node 0 DMA: 17*4kB (UME) 48*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10964kB
[ 2714.984743] Node 0 DMA32: 1*4kB (H) 1*8kB (M) 1243*16kB (UH) 487*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35484kB
[ 2715.005879] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2715.054069] Node 1 Normal: 96*4kB (U) 22*8kB (UME) 12*16kB (UE) 394*32kB (UME) 70*64kB (UE) 30*128kB (UME) 11*256kB (UM) 27*512kB (ME) 11*1024kB (ME) 2*2048kB (M) 0*4096kB = 53680kB
[ 2715.070550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2715.080501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2715.089136] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2715.098029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2715.106656] 15551 total pagecache pages
[ 2715.110634] 0 pages in swap cache
[ 2715.114137] Swap cache stats: add 0, delete 0, find 0/0
[ 2715.119493] Free swap  = 0kB
[ 2715.122521] Total swap = 0kB
[ 2715.126076] 2097051 pages RAM
[ 2715.129178] 0 pages HighMem/MovableOnly
[ 2715.133173] 369648 pages reserved
[ 2715.136624] 0 pages cma reserved
[ 2715.139981] Out of memory (oom_kill_allocating_task): Kill process 8838 (syz-executor.5) score 0 or sacrifice child
[ 2715.150656] Killed process 8834 (syz-executor.5) total-vm:93252kB, anon-rss:27488kB, file-rss:39164kB, shmem-rss:0kB
[ 2715.162578] oom_reaper: reaped process 8834 (syz-executor.5), now anon-rss:27532kB, file-rss:40192kB, shmem-rss:0kB
[ 2715.463349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2715.465242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2715.773102] syz-executor.1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000
[ 2715.808483] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 2715.850102] CPU: 0 PID: 8857 Comm: syz-executor.1 Not tainted 4.19.202-syzkaller #0
[ 2715.857918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2715.867269] Call Trace:
[ 2715.869866]  dump_stack+0x1fc/0x2ef
[ 2715.873500]  dump_header+0x15d/0xc3f
[ 2715.877226]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2715.882436]  ? ___ratelimit+0x319/0x590
[ 2715.886444]  oom_kill_process.cold+0x10/0x692
[ 2715.890946]  ? check_preemption_disabled+0x41/0x280
[ 2715.895988]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2715.901271]  out_of_memory+0x1072/0x1390
[ 2715.905340]  ? oom_killer_disable+0x270/0x270
[ 2715.910274]  ? mutex_trylock+0x15f/0x1a0
[ 2715.914338]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2715.919199]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2715.924043]  ? should_fail+0x142/0x7b0
[ 2715.928126]  ? fs_reclaim_release+0xd0/0x110
[ 2715.932793]  ? check_preemption_disabled+0x41/0x280
[ 2715.937843]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[ 2715.942853]  ? kmem_cache_alloc_node+0x351/0x3b0
[ 2715.947606]  copy_process.part.0+0x3cf/0x8260
[ 2715.952092]  ? kcov_ioctl+0x4d/0x1e0
[ 2715.955802]  ? lock_downgrade+0x720/0x720
[ 2715.959947]  ? lock_acquire+0x170/0x3c0
[ 2715.963909]  ? kcov_ioctl+0x1e/0x1e0
[ 2715.967615]  ? __cleanup_sighand+0x60/0x60
[ 2715.971835]  ? _raw_spin_unlock+0x29/0x40
[ 2715.975970]  ? kcov_ioctl+0x4d/0x1e0
[ 2715.979681]  ? kcov_close+0x10/0x10
[ 2715.983305]  ? do_vfs_ioctl+0x110/0x12e0
[ 2715.987363]  ? ioctl_preallocate+0x200/0x200
[ 2715.991762]  _do_fork+0x22f/0xf30
[ 2715.995219]  ? fork_idle+0x220/0x220
[ 2715.999208]  ? lock_acquire+0x170/0x3c0
[ 2716.003167]  ? finish_task_switch+0x118/0x760
[ 2716.007651]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 2716.013010]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2716.018018]  ? do_syscall_64+0x21/0x620
[ 2716.021991]  do_syscall_64+0xf9/0x620
[ 2716.025808]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2716.030996] RIP: 0033:0x4665e9
[ 2716.034176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2716.053066] RSP: 002b:00007fd4d5e9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2716.060772] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[ 2716.068027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2716.075283] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2716.082632] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038
[ 2716.089894] R13: 00007ffc6077510f R14: 00007fd4d5e9c300 R15: 0000000000022000
[ 2716.112016] Mem-Info:
[ 2716.114533] active_anon:204277 inactive_anon:1081569 isolated_anon:0
[ 2716.114533]  active_file:36 inactive_file:42 isolated_file:0
[ 2716.114533]  unevictable:77667 dirty:0 writeback:0 unstable:0
[ 2716.114533]  slab_reclaimable:17054 slab_unreclaimable:146071
[ 2716.114533]  mapped:60518 shmem:9046 pagetables:49875 bounce:0
[ 2716.114533]  free:24971 free_pcp:80 free_cma:0
[ 2716.157603] Node 0 active_anon:646136kB inactive_anon:994176kB active_file:20kB inactive_file:84kB unevictable:170976kB isolated(anon):0kB isolated(file):0kB mapped:153680kB dirty:0kB writeback:0kB shmem:36096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2716.187913] Node 1 active_anon:170972kB inactive_anon:3332100kB active_file:224kB inactive_file:2172kB unevictable:137892kB isolated(anon):0kB isolated(file):0kB mapped:88892kB dirty:0kB writeback:0kB shmem:88kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2716.234264] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2716.319159] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2716.330498] Node 0 DMA32 free:35856kB min:35996kB low:44992kB high:53988kB active_anon:645812kB inactive_anon:993848kB active_file:524kB inactive_file:0kB unevictable:167424kB writepending:0kB present:3129332kB managed:2763456kB mlocked:167208kB kernel_stack:20160kB pagetables:47944kB bounce:0kB free_pcp:204kB local_pcp:204kB free_cma:0kB
[ 2716.468833] lowmem_reserve[]: 0 0 1 1 1
[ 2716.479715] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
20:01:54 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

[ 2716.552857] lowmem_reserve[]: 0 0 0 0 0
[ 2716.566669] Node 1 Normal free:67816kB min:53876kB low:67344kB high:80812kB active_anon:170972kB inactive_anon:3332100kB active_file:1036kB inactive_file:1828kB unevictable:120140kB writepending:0kB present:4194304kB managed:4128248kB mlocked:120384kB kernel_stack:49248kB pagetables:151300kB bounce:0kB free_pcp:1732kB local_pcp:1444kB free_cma:0kB
[ 2716.641638] lowmem_reserve[]: 0 0 0 0 0
[ 2716.682986] Node 0 DMA: 17*4kB (UME) 48*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10964kB
[ 2716.731244] Node 0 DMA32: 447*4kB (UMH) 442*8kB (UMH) 1280*16kB (UMH) 494*32kB (UMEH) 3*64kB (UME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41804kB
20:01:54 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2716.778694] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2716.812731] Node 1 Normal: 189*4kB (M) 469*8kB (ME) 305*16kB (UME) 490*32kB (UME) 112*64kB (UME) 30*128kB (UME) 11*256kB (UM) 27*512kB (ME) 11*1024kB (ME) 2*2048kB (M) 0*4096kB = 68076kB
[ 2716.869567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2716.917938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2716.978898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2717.038091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2717.083401] 19756 total pagecache pages
[ 2717.132929] 0 pages in swap cache
[ 2717.136404] Swap cache stats: add 0, delete 0, find 0/0
[ 2717.141850] Free swap  = 0kB
[ 2717.167692] Total swap = 0kB
[ 2717.170732] 2097051 pages RAM
[ 2717.193073] 0 pages HighMem/MovableOnly
[ 2717.197067] 369648 pages reserved
[ 2717.200519] 0 pages cma reserved
[ 2717.222985] Out of memory (oom_kill_allocating_task): Kill process 8857 (syz-executor.1) score 0 or sacrifice child
[ 2717.262944] Killed process 8857 (syz-executor.1) total-vm:93384kB, anon-rss:28344kB, file-rss:40448kB, shmem-rss:0kB
[ 2717.313094] oom_reaper: reaped process 8857 (syz-executor.1), now anon-rss:28344kB, file-rss:40444kB, shmem-rss:0kB
20:01:55 executing program 2:
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="f8c00180080003000301000008000240070000000800030005000000080002000100000054e2fa4501f3e94fcb8fed41de9dd0c889c763e7505c7fd1f769cd2ae6a1db6719b8bedfaeefee870023bedc1274df26cbe6b710ed57f6ff45240435e825af05d02f600a354ab813238a963d48210c911da92959adc79dd997380c3633fc3e877275a161ea17c2b6124cc758bb3e3bc8e660aa6755c50db0b6618e00cbcef799ebc1d35b3ec8c3e9ed00b0264a669ac8cca995068dd481de560aed03630281dee7c258ea3d7416ddc570ab10be7d7b9b620db0be71f15998f0c6975a443fd9e6e97c8e3bc61e16414030ca7b34af48c1f40a9b6df00b9303e2cdb3e4d9be291bd40d32ebdc42a45293da5b8bbba5cc7095ad8a9d105070cc78c1a6d774113b5356a961c5573917a1029aa63bf2fdfc2f57ab256a4bb88ad26efc1fe63b3619bdc5c2fa481189dd001bfe3b32cd9e1c4a0650d4d140e9ea4a77f2dbbd38d98a072e46a30c8b279acc3ce8c9cfae3b1bcd497fe13d09fe695c0acd35fafa023af9b75198aac0d518a49ef09ec967330d00"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2717.620104] systemd-journald[8851]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing.
20:01:55 executing program 0:
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:01:56 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:01:56 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

20:01:56 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2719.116863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2719.936897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2720.544790] systemd-journal invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0
[ 2720.661168] systemd-journal cpuset=/ mems_allowed=0-1
[ 2720.686592] CPU: 1 PID: 8851 Comm: systemd-journal Not tainted 4.19.202-syzkaller #0
[ 2720.694605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2720.703951] Call Trace:
[ 2720.706579]  dump_stack+0x1fc/0x2ef
[ 2720.710219]  dump_header+0x15d/0xc3f
[ 2720.713974]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2720.719082]  ? ___ratelimit+0x319/0x590
[ 2720.723067]  oom_kill_process.cold+0x10/0x692
[ 2720.727570]  ? check_preemption_disabled+0x41/0x280
[ 2720.732589]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2720.737870]  out_of_memory+0x1072/0x1390
[ 2720.741944]  ? oom_killer_disable+0x270/0x270
[ 2720.746447]  ? mutex_trylock+0x15f/0x1a0
[ 2720.750536]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2720.755399]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2720.760241]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2720.765088]  ? __put_cred+0x1de/0x250
[ 2720.768894]  ? do_faccessat+0x64e/0x7a0
[ 2720.772866]  ? do_syscall_64+0xf9/0x620
[ 2720.776847]  ? kmem_cache_free+0x226/0x260
[ 2720.781089]  ? ____cache_alloc_node+0x156/0x1d0
[ 2720.785843]  ? cache_grow_begin+0x64/0x8a0
[ 2720.790080]  cache_grow_begin+0xa4/0x8a0
[ 2720.794235]  fallback_alloc+0x213/0x2e0
[ 2720.798205]  kmem_cache_alloc+0x1e4/0x370
[ 2720.802352]  getname_flags+0xce/0x590
[ 2720.806158]  do_mkdirat+0x8d/0x2d0
[ 2720.809700]  ? __ia32_sys_mknod+0x120/0x120
[ 2720.814025]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 2720.819391]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2720.824407]  ? do_syscall_64+0x21/0x620
[ 2720.828381]  do_syscall_64+0xf9/0x620
[ 2720.832188]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2720.837377] RIP: 0033:0x7f8cdd029687
[ 2720.841094] Code: Bad RIP value.
[ 2720.844452] RSP: 002b:00007ffeb8637a78 EFLAGS: 00000293 ORIG_RAX: 0000000000000053
[ 2720.852157] RAX: ffffffffffffffda RBX: 00007ffeb863a990 RCX: 00007f8cdd029687
[ 2720.859422] RDX: 00007f8cdda9aa00 RSI: 00000000000001ed RDI: 0000562544cc8d60
[ 2720.866693] RBP: 00007ffeb8637ab0 R08: 0000000000000000 R09: 0000000000000000
[ 2720.873960] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000
[ 2720.881228] R13: 0000000000000000 R14: 00007ffeb863a990 R15: 00007ffeb8637fa0
[ 2720.924086] Mem-Info:
[ 2720.927038] active_anon:204439 inactive_anon:1100008 isolated_anon:0
[ 2720.927038]  active_file:16 inactive_file:16 isolated_file:0
[ 2720.927038]  unevictable:59445 dirty:0 writeback:0 unstable:0
[ 2720.927038]  slab_reclaimable:17110 slab_unreclaimable:145658
[ 2720.927038]  mapped:59500 shmem:11094 pagetables:50009 bounce:0
[ 2720.927038]  free:25109 free_pcp:7 free_cma:0
[ 2720.968592] Node 0 active_anon:646380kB inactive_anon:1007716kB active_file:28kB inactive_file:28kB unevictable:165184kB isolated(anon):0kB isolated(file):0kB mapped:154748kB dirty:0kB writeback:0kB shmem:36416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2721.032668] Node 1 active_anon:171376kB inactive_anon:3392316kB active_file:36kB inactive_file:36kB unevictable:72596kB isolated(anon):0kB isolated(file):0kB mapped:83252kB dirty:0kB writeback:0kB shmem:7960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2721.244031] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2721.467941] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2721.497737] Node 0 DMA32 free:35244kB min:35996kB low:44992kB high:53988kB active_anon:646056kB inactive_anon:1004364kB active_file:28kB inactive_file:28kB unevictable:165184kB writepending:0kB present:3129332kB managed:2763456kB mlocked:165184kB kernel_stack:19904kB pagetables:47936kB bounce:0kB free_pcp:476kB local_pcp:244kB free_cma:0kB
[ 2721.538485] lowmem_reserve[]: 0 0 1 1 1
[ 2721.542563] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2721.586813] lowmem_reserve[]: 0 0 0 0 0
[ 2721.590824] Node 1 Normal free:53648kB min:53876kB low:67344kB high:80812kB active_anon:171376kB inactive_anon:3392316kB active_file:36kB inactive_file:36kB unevictable:72596kB writepending:0kB present:4194304kB managed:4128248kB mlocked:72596kB kernel_stack:49440kB pagetables:151844kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB
[ 2721.639718] lowmem_reserve[]: 0 0 0 0 0
[ 2721.651015] Node 0 DMA: 24*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10976kB
[ 2721.687968] Node 0 DMA32: 5*4kB (M) 13*8kB (M) 1211*16kB (UM) 490*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35244kB
[ 2721.717339] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2721.728127] Node 1 Normal: 44*4kB (UM) 4*8kB (UE) 26*16kB (UME) 301*32kB (UME) 119*64kB (UME) 30*128kB (UME) 11*256kB (UM) 27*512kB (ME) 11*1024kB (ME) 2*2048kB (M) 0*4096kB = 53712kB
[ 2721.771229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2721.783898] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2721.807418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2721.817597] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2721.830632] 18087 total pagecache pages
[ 2721.840620] 0 pages in swap cache
[ 2721.862224] Swap cache stats: add 0, delete 0, find 0/0
[ 2721.886302] Free swap  = 0kB
[ 2721.889330] Total swap = 0kB
[ 2721.892342] 2097051 pages RAM
[ 2721.895498] 0 pages HighMem/MovableOnly
[ 2721.899459] 369648 pages reserved
[ 2721.921544] 0 pages cma reserved
[ 2721.924971] Out of memory (oom_kill_allocating_task): Kill process 8851 (systemd-journal) score 0 or sacrifice child
[ 2721.941717] Killed process 8851 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1256kB
[ 2721.975311] oom_reaper: reaped process 8851 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1256kB
[ 2722.010087] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2722.031969] syz-fuzzer cpuset=/ mems_allowed=0-1
[ 2722.038565] CPU: 0 PID: 8092 Comm: syz-fuzzer Not tainted 4.19.202-syzkaller #0
[ 2722.046022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2722.055381] Call Trace:
[ 2722.058005]  dump_stack+0x1fc/0x2ef
[ 2722.061623]  dump_header+0x15d/0xc3f
[ 2722.065318]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2722.070523]  ? ___ratelimit+0x319/0x590
[ 2722.074497]  oom_kill_process.cold+0x10/0x692
[ 2722.078987]  ? check_preemption_disabled+0x41/0x280
[ 2722.084031]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2722.089297]  out_of_memory+0x1072/0x1390
[ 2722.093367]  ? oom_killer_disable+0x270/0x270
[ 2722.097853]  ? mutex_trylock+0x15f/0x1a0
[ 2722.101901]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2722.106731]  ? find_get_entry+0x4cd/0x8a0
[ 2722.110866]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2722.116042]  alloc_pages_current+0x193/0x2a0
[ 2722.120436]  filemap_fault+0x146e/0x2180
[ 2722.124488]  ext4_filemap_fault+0x84/0xb0
[ 2722.128631]  __do_fault+0x10b/0x4b0
[ 2722.132238]  ? do_raw_spin_unlock+0x171/0x230
[ 2722.136716]  __handle_mm_fault+0x273b/0x41c0
[ 2722.141114]  ? vm_insert_page+0x9c0/0x9c0
[ 2722.145254]  ? check_preemption_disabled+0x41/0x280
[ 2722.150262]  handle_mm_fault+0x436/0xb10
[ 2722.154312]  __do_page_fault+0x68e/0xd60
[ 2722.158362]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2722.163358]  ? spurious_fault+0x840/0x840
[ 2722.167486]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2722.172319]  ? page_fault+0x8/0x30
[ 2722.175841]  page_fault+0x1e/0x30
[ 2722.179277] RIP: 0033:0x58e969
[ 2722.182451] Code: Bad RIP value.
[ 2722.185800] RSP: 002b:000000c000e00ff8 EFLAGS: 00010202
[ 2722.191147] RAX: 00000000010ae680 RBX: 000000000098db60 RCX: 0000000000990c00
[ 2722.198397] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000bdb110
[ 2722.205645] RBP: 000000c000e010a0 R08: 0000000000000001 R09: 0000000000000009
[ 2722.212892] R10: 000000c005bed950 R11: 0000000000000009 R12: 000000000163d880
[ 2722.220144] R13: 0000000000000009 R14: 000000c000099040 R15: 0000000000000000
[ 2722.270790] Mem-Info:
[ 2722.276944] active_anon:204339 inactive_anon:1100008 isolated_anon:0
[ 2722.276944]  active_file:18 inactive_file:14 isolated_file:0
[ 2722.276944]  unevictable:59446 dirty:0 writeback:0 unstable:0
[ 2722.276944]  slab_reclaimable:17110 slab_unreclaimable:145676
[ 2722.276944]  mapped:59201 shmem:11094 pagetables:50009 bounce:0
[ 2722.276944]  free:24983 free_pcp:277 free_cma:0
[ 2722.323176] Node 0 active_anon:646280kB inactive_anon:1007716kB active_file:28kB inactive_file:28kB unevictable:165184kB isolated(anon):0kB isolated(file):0kB mapped:154748kB dirty:0kB writeback:0kB shmem:36416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2722.364591] Node 1 active_anon:171076kB inactive_anon:3392316kB active_file:44kB inactive_file:28kB unevictable:72600kB isolated(anon):0kB isolated(file):0kB mapped:82056kB dirty:0kB writeback:0kB shmem:7960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2722.400057] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2722.438293] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2722.472595] Node 0 DMA32 free:35244kB min:35996kB low:44992kB high:53988kB active_anon:645956kB inactive_anon:1004364kB active_file:28kB inactive_file:28kB unevictable:165184kB writepending:0kB present:3129332kB managed:2763456kB mlocked:165184kB kernel_stack:19904kB pagetables:47936kB bounce:0kB free_pcp:380kB local_pcp:60kB free_cma:0kB
[ 2722.722455] lowmem_reserve[]: 0 0 1 1 1
[ 2722.726474] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2722.938197] lowmem_reserve[]: 0 0 0 0 0
[ 2722.942209] Node 1 Normal free:53808kB min:53876kB low:67344kB high:80812kB active_anon:171052kB inactive_anon:3392312kB active_file:72kB inactive_file:0kB unevictable:72600kB writepending:0kB present:4194304kB managed:4128248kB mlocked:72600kB kernel_stack:49344kB pagetables:151764kB bounce:0kB free_pcp:676kB local_pcp:676kB free_cma:0kB
[ 2723.240336] lowmem_reserve[]: 0 0 0 0 0
[ 2723.272079] Node 0 DMA: 24*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10976kB
[ 2723.382178] Node 0 DMA32: 6*4kB (UM) 21*8kB (UM) 1197*16kB (UM) 491*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35120kB
[ 2723.489842] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2723.559499] Node 1 Normal: 44*4kB (UM) 4*8kB (UE) 26*16kB (UME) 304*32kB (UME) 119*64kB (UME) 30*128kB (UME) 11*256kB (UM) 27*512kB (ME) 11*1024kB (ME) 2*2048kB (M) 0*4096kB = 53808kB
[ 2723.685742] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2723.752374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2723.761019] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2723.824961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2723.886058] 18088 total pagecache pages
[ 2723.890084] 0 pages in swap cache
[ 2723.947423] Swap cache stats: add 0, delete 0, find 0/0
[ 2724.000354] Free swap  = 0kB
[ 2724.026317] Total swap = 0kB
[ 2724.029382] 2097051 pages RAM
[ 2724.076493] 0 pages HighMem/MovableOnly
[ 2724.080487] 369648 pages reserved
[ 2724.127323] 0 pages cma reserved
[ 2724.130719] Out of memory (oom_kill_allocating_task): Kill process 8092 (syz-fuzzer) score 0 or sacrifice child
[ 2724.240096] Killed process 7971 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:888kB, shmem-rss:0kB
[ 2724.419442] oom_reaper: reaped process 8867 (syz-executor.0), now anon-rss:28344kB, file-rss:45632kB, shmem-rss:0kB
[ 2724.460850] syz-executor.3 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2724.510495] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 2724.517382] CPU: 0 PID: 6533 Comm: syz-executor.3 Not tainted 4.19.202-syzkaller #0
[ 2724.525191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2724.534627] Call Trace:
[ 2724.537219]  dump_stack+0x1fc/0x2ef
[ 2724.540856]  dump_header+0x15d/0xc3f
[ 2724.544572]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2724.549672]  ? ___ratelimit+0x319/0x590
[ 2724.553648]  oom_kill_process.cold+0x10/0x692
[ 2724.558143]  ? check_preemption_disabled+0x41/0x280
[ 2724.563250]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2724.568532]  out_of_memory+0x1072/0x1390
[ 2724.572600]  ? oom_killer_disable+0x270/0x270
[ 2724.577094]  ? mutex_trylock+0x15f/0x1a0
[ 2724.581159]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2724.586004]  ? aa_get_task_label+0x1e6/0x7f0
[ 2724.590416]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2724.595256]  ? deref_stack_reg+0x1d0/0x1d0
[ 2724.599503]  ? __lock_acquire+0x6de/0x3ff0
[ 2724.603751]  ? __lock_acquire+0x6de/0x3ff0
[ 2724.607988]  alloc_pages_vma+0xf2/0x780
[ 2724.611971]  wp_page_copy+0x219/0x2c40
[ 2724.615868]  ? _vm_normal_page+0x132/0x510
[ 2724.620109]  ? follow_pte_pmd+0x60/0x60
[ 2724.624088]  do_wp_page+0x2d4/0x2210
[ 2724.627810]  ? finish_mkwrite_fault+0x640/0x640
[ 2724.632478]  ? __handle_mm_fault+0x15f6/0x41c0
[ 2724.637065]  ? mark_held_locks+0xf0/0xf0
[ 2724.641130]  __handle_mm_fault+0x258b/0x41c0
[ 2724.645560]  ? vm_insert_page+0x9c0/0x9c0
[ 2724.649718]  ? check_preemption_disabled+0x41/0x280
[ 2724.654738]  handle_mm_fault+0x436/0xb10
[ 2724.658807]  __do_page_fault+0x68e/0xd60
[ 2724.662882]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2724.667900]  ? spurious_fault+0x840/0x840
[ 2724.672075]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2724.676928]  ? page_fault+0x8/0x30
[ 2724.680474]  page_fault+0x1e/0x30
[ 2724.683920] RIP: 0033:0x4355b5
[ 2724.687114] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d 4a cb 09 00 e8 75 c9 ff ff
[ 2724.706805] RSP: 002b:00007ffd17fd89c0 EFLAGS: 00010206
[ 2724.712178] RAX: 00000000000187c1 RBX: 00000000005465c0 RCX: 0000000001518840
[ 2724.719446] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004
[ 2724.726719] RBP: 0000000000008030 R08: 0000000000000003 R09: 0000000000546620
[ 2724.733984] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802
[ 2724.741249] R13: 0000000000008040 R14: 0000000000000804 R15: 0000000001510800
[ 2724.753502] Mem-Info:
[ 2724.756501] active_anon:204324 inactive_anon:1084932 isolated_anon:0
[ 2724.756501]  active_file:38 inactive_file:56 isolated_file:0
[ 2724.756501]  unevictable:58496 dirty:0 writeback:0 unstable:0
[ 2724.756501]  slab_reclaimable:17110 slab_unreclaimable:145684
[ 2724.756501]  mapped:58337 shmem:11094 pagetables:49984 bounce:0
[ 2724.756501]  free:39868 free_pcp:578 free_cma:0
[ 2724.797920] Node 0 active_anon:646244kB inactive_anon:1007516kB active_file:48kB inactive_file:60kB unevictable:163884kB isolated(anon):0kB isolated(file):0kB mapped:153844kB dirty:0kB writeback:0kB shmem:36416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2724.838896] Node 1 active_anon:171052kB inactive_anon:3312112kB active_file:104kB inactive_file:2520kB unevictable:70100kB isolated(anon):0kB isolated(file):0kB mapped:79104kB dirty:0kB writeback:0kB shmem:7960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2724.884022] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
20:02:02 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:02:02 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2725.000308] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL
[ 2725.077870] systemd[1]: Failed to start Journal Service.
[ 2725.100383] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2725.106096] systemd[1]: Dependency failed for Flush Journal to Persistent Storage.
[ 2725.114031] Node 0 DMA32 free:42024kB min:35996kB low:44992kB high:53988kB active_anon:645768kB inactive_anon:998560kB active_file:20kB inactive_file:44kB unevictable:163700kB writepending:16kB present:3129332kB managed:2763456kB mlocked:163700kB kernel_stack:19872kB pagetables:47732kB bounce:0kB free_pcp:1940kB local_pcp:552kB free_cma:0kB
[ 2725.114066] lowmem_reserve[]: 0 0 1 1 1
[ 2725.114083] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2725.114110] lowmem_reserve[]: 0 0 0 0 0
[ 2725.114128] Node 1 Normal free:259656kB min:53876kB low:67344kB high:80812kB active_anon:170992kB inactive_anon:3177944kB active_file:1132kB inactive_file:9208kB unevictable:70040kB writepending:172kB present:4194304kB managed:4128248kB mlocked:70040kB kernel_stack:49184kB pagetables:150556kB bounce:0kB free_pcp:2516kB local_pcp:1132kB free_cma:0kB
[ 2725.114159] lowmem_reserve[]: 0 0 0 0 0
[ 2725.114176] Node 0 DMA: 24*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10976kB
[ 2725.114248] Node 0 DMA32: 614*4kB (UME) 577*8kB (UME) 1200*16kB (UME) 492*32kB (UME) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42080kB
[ 2725.114309] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2725.114357] Node 1 Normal: 5411*4kB (UM) 6096*8kB (UME) 4986*16kB (UME) 1957*32kB (UME) 170*64kB (UME) 31*128kB (UME) 11*256kB (UM) 27*512kB (ME) 11*1024kB (ME) 2*2048kB (M) 0*4096kB = 259660kB
[ 2725.114436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2725.114446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2725.114455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2725.114464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2725.114469] 19751 total pagecache pages
[ 2725.114482] 0 pages in swap cache
[ 2725.114490] Swap cache stats: add 0, delete 0, find 0/0
[ 2725.114495] Free swap  = 0kB
[ 2725.114499] Total swap = 0kB
[ 2725.114507] 2097051 pages RAM
[ 2725.114511] 0 pages HighMem/MovableOnly
[ 2725.114516] 369648 pages reserved
[ 2725.114520] 0 pages cma reserved
[ 2725.114531] Out of memory (oom_kill_allocating_task): Kill process 6533 (syz-executor.3) score 0 or sacrifice child
[ 2725.118987] Killed process 8790 (syz-executor.3) total-vm:93516kB, anon-rss:36900kB, file-rss:35000kB, shmem-rss:0kB
[ 2725.370930] systemd[1]: systemd-journal-flush.service: Job systemd-journal-flush.service/start failed with result 'dependency'.
[ 2725.390684] systemd[1]: systemd-journald.service: Unit entered failed state.
[ 2725.428150] systemd[1]: systemd-journald.service: Failed with result 'signal'.
[ 2725.450245] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart.
[ 2725.498731] systemd[1]: Starting Load/Save RF Kill Switch Status...
[ 2725.540209] systemd[1]: Stopped Journal Service.
20:02:03 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
fork()

[ 2725.623938] systemd[1]: Starting Journal Service...
20:02:03 executing program 2:
mlockall(0x3)
ptrace$pokeuser(0x6, 0x0, 0x40, 0x8)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="f8c00180080003000301000008000240070000000800030005000000080002000100000054e2fa4501f3e94fcb8fed41de9dd0c889c763e7505c7fd1f769cd2ae6a1db6719b8bedfaeefee870023bedc1274df26cbe6b710ed57f6ff45240435e825af05d02f600a354ab813238a963d48210c911da92959adc79dd997380c3633fc3e877275a161ea17c2b6124cc758bb3e3bc8e660aa6755c50db0b6618e00cbcef799ebc1d35b3ec8c3e9ed00b0264a669ac8cca995068dd481de560aed03630281dee7c258ea3d7416ddc570ab10be7d7b9b620db0be71f15998f0c6975a443fd9e6e97c8e3bc61e16414030ca7b34af48c1f40a9b6df00b9303e2cdb3e4d9be291bd40d32ebdc42a45293da5b8bbba5cc7095ad8a9d105070cc78c1a6d774113b5356a961c5573917a1029aa63bf2fdfc2f57ab256a4bb88ad26efc1fe63b3619bdc5c2fa481189dd001bfe3b32cd9e1c4a0650d4d140e9ea4a77f2dbbd38d98a072e46a30c8b279acc3ce8c9cfae3b1bcd497fe13d09fe695c0acd35fafa023af9b75198aac0d518a49ef09ec967330d00"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:02:03 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1, &(0x7f0000000240)=""/20, 0x14}, 0xe02036e0c14363a2)
socketpair(0x3, 0x800, 0x3ff, &(0x7f0000000580))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r1)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0))
sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000)
connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x204e22, 0x1}}, 0x10)
fork()
mlockall(0x3)

[ 2725.972052] systemd-journald[8902]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing.
20:02:04 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:02:05 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1, &(0x7f0000000240)=""/20, 0x14}, 0xe02036e0c14363a2)
socketpair(0x3, 0x800, 0x3ff, &(0x7f0000000580))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r1)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0))
sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000)
connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x204e22, 0x1}}, 0x10)
fork()
mlockall(0x3)

20:02:05 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)

[ 2727.952585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
20:02:06 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2729.949158] IPVS: ftp: loaded support on port[0] = 21
20:02:08 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:02:08 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1, &(0x7f0000000240)=""/20, 0x14}, 0xe02036e0c14363a2)
socketpair(0x3, 0x800, 0x3ff, &(0x7f0000000580))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r1)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0))
sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000)
connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x204e22, 0x1}}, 0x10)
fork()
mlockall(0x3)

20:02:08 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
mlockall(0x3)

[ 2731.591884] Bluetooth: hci5: command 0x0409 tx timeout
[ 2732.641164] chnl_net:caif_netlink_parms(): no params data found
[ 2733.050976] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2733.057624] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2733.065774] device bridge_slave_0 entered promiscuous mode
[ 2733.179647] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2733.189214] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2733.198289] device bridge_slave_1 entered promiscuous mode
[ 2733.213541] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2733.220258] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2733.228556] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2733.236079] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2733.245309] device bridge_slave_1 left promiscuous mode
[ 2733.250764] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2733.258432] device bridge_slave_0 left promiscuous mode
[ 2733.264182] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2733.273929] device veth1_macvtap left promiscuous mode
[ 2733.279215] device veth0_macvtap left promiscuous mode
[ 2733.284728] device veth1_vlan left promiscuous mode
[ 2733.289855] device veth0_vlan left promiscuous mode
[ 2733.681608] Bluetooth: hci5: command 0x041b tx timeout
[ 2735.751460] Bluetooth: hci5: command 0x040f tx timeout
[ 2737.715220] device hsr_slave_1 left promiscuous mode
[ 2737.725737] device hsr_slave_0 left promiscuous mode
[ 2737.742084] team0 (unregistering): Port device team_slave_1 removed
[ 2737.753280] team0 (unregistering): Port device team_slave_0 removed
[ 2737.764162] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 2737.776032] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 2737.807419] bond0 (unregistering): Released all slaves
[ 2737.832409] Bluetooth: hci5: command 0x0419 tx timeout
[ 2737.835275] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 2737.847814] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 2737.873168] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 2737.880418] team0: Port device team_slave_0 added
[ 2737.889664] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 2737.897423] team0: Port device team_slave_1 added
[ 2737.930251] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2737.937617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2737.968228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2737.980410] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2737.996749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2738.028424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2738.039826] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 2738.052909] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 2738.089212] device hsr_slave_0 entered promiscuous mode
[ 2738.096195] device hsr_slave_1 entered promiscuous mode
[ 2738.106861] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 2738.116688] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 2738.250097] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 2738.317855] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 2738.325983] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2738.340873] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 2738.356009] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 2738.363476] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 2738.377235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2738.385289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2738.403178] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 2738.410745] 8021q: adding VLAN 0 to HW filter on device team0
[ 2738.425903] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 2738.438132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2738.449683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2738.464415] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2738.470774] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2738.490478] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 2738.499765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2738.515775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2738.527580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2738.545963] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2738.552386] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2738.571311] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 2738.588183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2738.612109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2738.648691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2738.667472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2738.684899] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 2738.691849] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2738.699011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2738.710280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2738.718458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2738.726719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2738.740994] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 2738.750353] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 2738.756717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2738.764213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2738.776171] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2738.793370] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready
[ 2738.806635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2738.869600] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready
[ 2738.878470] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready
[ 2738.885897] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready
[ 2738.896857] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready
[ 2738.904288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2738.912639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2738.925784] device veth0_vlan entered promiscuous mode
[ 2738.933257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2738.940237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2738.953899] device veth1_vlan entered promiscuous mode
[ 2738.960057] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready
[ 2738.970308] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready
[ 2738.985753] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
[ 2738.996464] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready
[ 2739.004588] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2739.013371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2739.020717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2739.029669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2739.042092] device veth0_macvtap entered promiscuous mode
[ 2739.048611] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
[ 2739.058340] device veth1_macvtap entered promiscuous mode
[ 2739.064757] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready
[ 2739.074439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
[ 2739.084873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
[ 2739.094242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2739.104813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2739.114019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2739.124249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2739.133456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2739.144318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2739.153570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2739.163509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2739.172721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2739.182556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2739.193204] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready
[ 2739.200176] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2739.208685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2739.216314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2739.223956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2739.232131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2739.244531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2739.254514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2739.264644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2739.275075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2739.284657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2739.294433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2739.303635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2739.313404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2739.323314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2739.333064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2739.343658] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
[ 2739.350572] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2739.358236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2739.366699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2739.490216] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 2739.496928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2739.523148] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 2739.527749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2739.537242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2739.550533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2739.558173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2739.567562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
20:02:18 executing program 1:
mlockall(0x3)
mlockall(0x3)

20:02:18 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:02:18 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1, &(0x7f0000000240)=""/20, 0x14}, 0xe02036e0c14363a2)
socketpair(0x3, 0x800, 0x3ff, &(0x7f0000000580))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r1)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0))
sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000)
connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x204e22, 0x1}}, 0x10)
fork()

20:02:18 executing program 2:
mlockall(0x3)
mlockall(0x3)

20:02:18 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:02:18 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)

20:02:18 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1, &(0x7f0000000240)=""/20, 0x14}, 0xe02036e0c14363a2)
socketpair(0x3, 0x800, 0x3ff, &(0x7f0000000580))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r1)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0))
sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000)
connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x204e22, 0x1}}, 0x10)

20:02:18 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1, &(0x7f0000000240)=""/20, 0x14}, 0xe02036e0c14363a2)
socketpair(0x3, 0x800, 0x3ff, &(0x7f0000000580))
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0))
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000)

20:02:18 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1, &(0x7f0000000240)=""/20, 0x14}, 0xe02036e0c14363a2)
socketpair(0x3, 0x800, 0x3ff, &(0x7f0000000580))
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0))

20:02:18 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1, &(0x7f0000000240)=""/20, 0x14}, 0xe02036e0c14363a2)
socketpair(0x3, 0x800, 0x3ff, &(0x7f0000000580))
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)

20:02:18 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1, &(0x7f0000000240)=""/20, 0x14}, 0xe02036e0c14363a2)
socketpair(0x3, 0x800, 0x3ff, &(0x7f0000000580))
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0)

[ 2741.672547] syz-executor.1 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2741.685670] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 2741.690803] CPU: 1 PID: 9264 Comm: syz-executor.1 Not tainted 4.19.202-syzkaller #0
[ 2741.698600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2741.707974] Call Trace:
[ 2741.710565]  dump_stack+0x1fc/0x2ef
[ 2741.714202]  dump_header+0x15d/0xc3f
[ 2741.717911]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2741.723007]  ? ___ratelimit+0x319/0x590
[ 2741.726984]  oom_kill_process.cold+0x10/0x692
[ 2741.731480]  ? check_preemption_disabled+0x41/0x280
[ 2741.736497]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2741.741775]  out_of_memory+0x1072/0x1390
[ 2741.745832]  ? oom_killer_disable+0x270/0x270
[ 2741.750312]  ? mutex_trylock+0x15f/0x1a0
[ 2741.754363]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2741.759201]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2741.764044]  ? finish_task_switch+0x146/0x760
[ 2741.768559]  ? _raw_spin_unlock_irq+0x24/0x80
[ 2741.773062]  alloc_pages_vma+0xf2/0x780
[ 2741.777145]  do_anonymous_page+0x7c2/0x1be0
[ 2741.781470]  ? __pte_alloc+0x340/0x340
[ 2741.785360]  ? io_schedule_timeout+0x140/0x140
[ 2741.789947]  ? mark_held_locks+0xf0/0xf0
[ 2741.794019]  __handle_mm_fault+0x227a/0x41c0
[ 2741.798434]  ? vm_insert_page+0x9c0/0x9c0
[ 2741.802601]  ? check_preemption_disabled+0x41/0x280
[ 2741.807620]  handle_mm_fault+0x436/0xb10
[ 2741.811705]  __get_user_pages+0x6f0/0x1710
[ 2741.816982]  ? follow_page_mask+0x1d00/0x1d00
[ 2741.821481]  populate_vma_page_range+0x200/0x290
[ 2741.826292]  __mm_populate+0x1ea/0x350
[ 2741.830181]  ? populate_vma_page_range+0x290/0x290
[ 2741.835114]  ? do_mlock+0x6b0/0x6b0
[ 2741.838740]  ? security_capable+0x8f/0xc0
[ 2741.842896]  __se_sys_mlockall+0x362/0x4e0
[ 2741.847130]  do_syscall_64+0xf9/0x620
[ 2741.850929]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2741.856120] RIP: 0033:0x4665e9
[ 2741.859300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2741.878188] RSP: 002b:00007fd4d5ebd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2741.885896] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2741.893149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2741.900421] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2741.907682] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2741.914946] R13: 00007ffc6077510f R14: 00007fd4d5ebd300 R15: 0000000000022000
[ 2741.942820] Mem-Info:
[ 2741.945505] active_anon:204321 inactive_anon:1090717 isolated_anon:0
[ 2741.945505]  active_file:24 inactive_file:9 isolated_file:0
[ 2741.945505]  unevictable:67023 dirty:0 writeback:0 unstable:0
[ 2741.945505]  slab_reclaimable:16960 slab_unreclaimable:147266
[ 2741.945505]  mapped:62147 shmem:13144 pagetables:50010 bounce:0
[ 2741.945505]  free:25258 free_pcp:0 free_cma:0
[ 2742.010911] Node 0 active_anon:645268kB inactive_anon:1036852kB active_file:8kB inactive_file:8kB unevictable:157732kB isolated(anon):0kB isolated(file):0kB mapped:130832kB dirty:0kB writeback:0kB shmem:36412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2742.080905] Node 1 active_anon:172016kB inactive_anon:3326016kB active_file:132kB inactive_file:32kB unevictable:110960kB isolated(anon):0kB isolated(file):0kB mapped:117756kB dirty:0kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2742.109679] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2742.139886] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2742.144999] Node 0 DMA32 free:35796kB min:35996kB low:44992kB high:53988kB active_anon:644944kB inactive_anon:1033500kB active_file:8kB inactive_file:8kB unevictable:157732kB writepending:0kB present:3129332kB managed:2763456kB mlocked:157732kB kernel_stack:19872kB pagetables:47576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2742.179325] lowmem_reserve[]: 0 0 1 1 1
[ 2742.199089] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2742.229916] lowmem_reserve[]: 0 0 0 0 0
[ 2742.234857] Node 1 Normal free:53252kB min:53876kB low:67344kB high:80812kB active_anon:172016kB inactive_anon:3326016kB active_file:132kB inactive_file:32kB unevictable:110560kB writepending:0kB present:4194304kB managed:4128248kB mlocked:110560kB kernel_stack:49728kB pagetables:152208kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[ 2742.265918] lowmem_reserve[]: 0 0 0 0 0
[ 2742.270605] Node 0 DMA: 24*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10976kB
[ 2742.294678] Node 0 DMA32: 12*4kB (UM) 36*8kB (UMH) 1287*16kB (UM) 482*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36352kB
[ 2742.317367] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2742.328164] Node 1 Normal: 320*4kB (UM) 9*8kB (ME) 4*16kB (ME) 447*32kB (UME) 258*64kB (ME) 28*128kB (M) 10*256kB (UM) 22*512kB (M) 4*1024kB (M) 0*2048kB 0*4096kB = 53736kB
[ 2742.345479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2742.359521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2742.385658] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2742.409464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2742.443841] 22705 total pagecache pages
[ 2742.467349] 0 pages in swap cache
[ 2742.475855] Swap cache stats: add 0, delete 0, find 0/0
[ 2742.507195] Free swap  = 0kB
[ 2742.510556] Total swap = 0kB
[ 2742.514908] 2097051 pages RAM
[ 2742.518022] 0 pages HighMem/MovableOnly
[ 2742.527662] 369648 pages reserved
[ 2742.549227] 0 pages cma reserved
[ 2742.581650] Out of memory (oom_kill_allocating_task): Kill process 9264 (syz-executor.1) score 0 or sacrifice child
[ 2742.605489] Killed process 9260 (syz-executor.1) total-vm:93384kB, anon-rss:11660kB, file-rss:39232kB, shmem-rss:0kB
[ 2742.693855] oom_reaper: reaped process 9260 (syz-executor.1), now anon-rss:11796kB, file-rss:40192kB, shmem-rss:0kB
[ 2742.749470] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2742.803380] syz-fuzzer cpuset=/ mems_allowed=0-1
[ 2742.815187] CPU: 0 PID: 8086 Comm: syz-fuzzer Not tainted 4.19.202-syzkaller #0
[ 2742.822655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2742.832013] Call Trace:
[ 2742.834617]  dump_stack+0x1fc/0x2ef
[ 2742.838291]  dump_header+0x15d/0xc3f
[ 2742.842036]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2742.847141]  ? ___ratelimit+0x319/0x590
[ 2742.851122]  oom_kill_process.cold+0x10/0x692
[ 2742.855619]  ? check_preemption_disabled+0x41/0x280
[ 2742.860664]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2742.865961]  out_of_memory+0x1072/0x1390
[ 2742.870016]  ? oom_killer_disable+0x270/0x270
[ 2742.874499]  ? mutex_trylock+0x15f/0x1a0
[ 2742.878552]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2742.883586]  ? find_get_entry+0x4cd/0x8a0
[ 2742.887818]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2742.892669]  alloc_pages_current+0x193/0x2a0
[ 2742.897069]  filemap_fault+0x146e/0x2180
[ 2742.901142]  ext4_filemap_fault+0x84/0xb0
[ 2742.905281]  __do_fault+0x10b/0x4b0
[ 2742.908896]  __handle_mm_fault+0x273b/0x41c0
[ 2742.913310]  ? vm_insert_page+0x9c0/0x9c0
[ 2742.917458]  ? check_preemption_disabled+0x41/0x280
[ 2742.922466]  handle_mm_fault+0x436/0xb10
[ 2742.926523]  __do_page_fault+0x68e/0xd60
[ 2742.930581]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2742.935604]  ? spurious_fault+0x840/0x840
[ 2742.939754]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2742.944759]  ? page_fault+0x8/0x30
[ 2742.948282]  page_fault+0x1e/0x30
[ 2742.951719] RIP: 0033:0x46e163
[ 2742.954897] Code: Bad RIP value.
[ 2742.958244] RSP: 002b:000000c00003de80 EFLAGS: 00010202
[ 2742.963605] RAX: ffffffffffffff92 RBX: 000000c00002e000 RCX: 000000000046e163
[ 2742.970860] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001852e58
[ 2742.978129] RBP: 000000c00003dec8 R08: 0000000000000000 R09: 0000000000000000
[ 2742.985384] R10: 000000c00003deb8 R11: 0000000000000202 R12: 000000000043b6a0
[ 2742.992654] R13: 0000000000000000 R14: 000000000094d6b8 R15: 0000000000000000
[ 2743.008086] Mem-Info:
[ 2743.010540] active_anon:204321 inactive_anon:1090742 isolated_anon:0
[ 2743.010540]  active_file:111 inactive_file:109 isolated_file:0
[ 2743.010540]  unevictable:63190 dirty:0 writeback:0 unstable:0
[ 2743.010540]  slab_reclaimable:16960 slab_unreclaimable:147268
[ 2743.010540]  mapped:61284 shmem:13144 pagetables:50032 bounce:0
[ 2743.010540]  free:27775 free_pcp:1450 free_cma:0
[ 2743.101018] Node 0 active_anon:645268kB inactive_anon:1036856kB active_file:52kB inactive_file:28kB unevictable:155612kB isolated(anon):0kB isolated(file):44kB mapped:129356kB dirty:0kB writeback:0kB shmem:36412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2743.185842] Node 1 active_anon:172004kB inactive_anon:3326016kB active_file:620kB inactive_file:504kB unevictable:109548kB isolated(anon):0kB isolated(file):100kB mapped:117952kB dirty:12kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2743.250827] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2743.282670] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2743.287723] Node 0 DMA32 free:35832kB min:35996kB low:44992kB high:53988kB active_anon:644944kB inactive_anon:1033504kB active_file:268kB inactive_file:0kB unevictable:156620kB writepending:0kB present:3129332kB managed:2763456kB mlocked:156620kB kernel_stack:19872kB pagetables:47624kB bounce:0kB free_pcp:948kB local_pcp:452kB free_cma:0kB
[ 2743.318218] lowmem_reserve[]: 0 0 1 1 1
[ 2743.322268] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2743.350602] lowmem_reserve[]: 0 0 0 0 0
[ 2743.356355] Node 1 Normal free:54536kB min:53876kB low:67344kB high:80812kB active_anon:172004kB inactive_anon:3326016kB active_file:0kB inactive_file:40kB unevictable:109128kB writepending:12kB present:4194304kB managed:4128248kB mlocked:109128kB kernel_stack:49600kB pagetables:152124kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB
[ 2743.387638] lowmem_reserve[]: 0 0 0 0 0
[ 2743.392195] Node 0 DMA: 24*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10976kB
[ 2743.409693] Node 0 DMA32: 65*4kB (U) 81*8kB (UMH) 1273*16kB (U) 482*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36700kB
[ 2743.424175] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2743.436219] Node 1 Normal: 242*4kB (UME) 11*8kB (UME) 6*16kB (ME) 472*32kB (UME) 259*64kB (UME) 28*128kB (M) 10*256kB (UM) 22*512kB (M) 4*1024kB (M) 0*2048kB 0*4096kB = 54336kB
[ 2743.452477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2743.462194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2743.487294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2743.507317] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2743.516034] 22558 total pagecache pages
[ 2743.520095] 0 pages in swap cache
[ 2743.525689] Swap cache stats: add 0, delete 0, find 0/0
[ 2743.534322] Free swap  = 0kB
[ 2743.538022] Total swap = 0kB
[ 2743.573132] 2097051 pages RAM
[ 2743.595549] 0 pages HighMem/MovableOnly
[ 2743.623533] 369648 pages reserved
[ 2743.640597] 0 pages cma reserved
[ 2743.665241] Out of memory (oom_kill_allocating_task): Kill process 8086 (syz-fuzzer) score 0 or sacrifice child
[ 2743.750666] Killed process 8943 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:956kB, shmem-rss:0kB
20:02:21 executing program 1:
mlockall(0x3)
mlockall(0x3)

20:02:21 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1, &(0x7f0000000240)=""/20, 0x14}, 0xe02036e0c14363a2)
socketpair(0x3, 0x800, 0x3ff, &(0x7f0000000580))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

20:02:22 executing program 2:
mlockall(0x3)
mlockall(0x3)

20:02:22 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:02:22 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x900, 0x6)

20:02:22 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:02:22 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1, &(0x7f0000000240)=""/20, 0x14}, 0xe02036e0c14363a2)
socketpair(0x3, 0x800, 0x3ff, &(0x7f0000000580))

20:02:22 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1, &(0x7f0000000240)=""/20, 0x14}, 0xe02036e0c14363a2)

20:02:23 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1, &(0x7f0000000240)=""/20, 0x14}, 0xe02036e0c14363a2)

20:02:23 executing program 0:
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1, &(0x7f0000000240)=""/20, 0x14}, 0xe02036e0c14363a2)

20:02:23 executing program 0:
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0xe02036e0c14363a2)

20:02:23 executing program 0:
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)

20:02:23 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1, &(0x7f0000000240)=""/20, 0x14}, 0xe02036e0c14363a2)
socketpair(0x3, 0x800, 0x3ff, &(0x7f0000000580))
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0))

20:02:23 executing program 0:
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)

[ 2748.111685] IPVS: ftp: loaded support on port[0] = 21
[ 2748.392982] chnl_net:caif_netlink_parms(): no params data found
[ 2748.702486] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2748.708963] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2748.717306] device bridge_slave_0 entered promiscuous mode
[ 2748.725143] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2748.732476] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2748.739486] device bridge_slave_1 entered promiscuous mode
[ 2748.758809] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2748.768039] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2748.777002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2748.784223] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2748.792322] device bridge_slave_1 left promiscuous mode
[ 2748.797769] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2748.806643] device bridge_slave_0 left promiscuous mode
[ 2748.812706] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2748.823076] device veth1_macvtap left promiscuous mode
[ 2748.828367] device veth0_macvtap left promiscuous mode
[ 2748.833962] device veth1_vlan left promiscuous mode
[ 2748.839001] device veth0_vlan left promiscuous mode
[ 2750.070301] Bluetooth: hci5: command 0x0409 tx timeout
[ 2752.150125] Bluetooth: hci5: command 0x041b tx timeout
[ 2753.358648] device hsr_slave_1 left promiscuous mode
[ 2753.366181] device hsr_slave_0 left promiscuous mode
[ 2753.384492] team0 (unregistering): Port device team_slave_1 removed
[ 2753.394574] team0 (unregistering): Port device team_slave_0 removed
[ 2753.404617] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 2753.415779] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 2753.448654] bond0 (unregistering): Released all slaves
[ 2753.469491] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 2753.478346] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 2753.498658] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 2753.507051] team0: Port device team_slave_0 added
[ 2753.513384] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 2753.521463] team0: Port device team_slave_1 added
[ 2753.537812] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2753.544158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2753.569817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2753.583242] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2753.589526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2753.615557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2753.626511] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 2753.634206] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 2753.657927] device hsr_slave_0 entered promiscuous mode
[ 2753.664271] device hsr_slave_1 entered promiscuous mode
[ 2753.670759] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 2753.678824] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 2753.801783] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 2753.863241] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 2753.869316] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2753.886380] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 2753.903785] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 2753.914358] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 2753.926940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2753.937253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2753.956863] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 2753.973073] 8021q: adding VLAN 0 to HW filter on device team0
[ 2753.987247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 2753.997542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2754.017540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2754.027847] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2754.034260] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2754.051114] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 2754.065701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2754.073196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2754.089498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2754.098572] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2754.105072] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2754.120485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 2754.131300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2754.142166] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 2754.151540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2754.172929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2754.182234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2754.191058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2754.203839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2754.216912] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 2754.223497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2754.231508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2754.246199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2754.246838] Bluetooth: hci5: command 0x040f tx timeout
[ 2754.261824] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 2754.274399] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 2754.281235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2754.293046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2754.307695] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2754.377247] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready
[ 2754.397127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2754.469104] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready
[ 2754.478695] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready
[ 2754.491440] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready
[ 2754.504703] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready
[ 2754.511423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2754.518941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2754.530118] device veth0_vlan entered promiscuous mode
[ 2754.545939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2754.553176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2754.566684] device veth1_vlan entered promiscuous mode
[ 2754.573225] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready
[ 2754.591314] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready
[ 2754.611831] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
[ 2754.627930] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready
[ 2754.637276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2754.646344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2754.654785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2754.663357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2754.674292] device veth0_macvtap entered promiscuous mode
[ 2754.682148] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
[ 2754.698269] device veth1_macvtap entered promiscuous mode
[ 2754.705096] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready
[ 2754.717671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
[ 2754.728752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
[ 2754.739145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2754.749754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2754.760365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2754.770924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2754.780773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2754.791243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2754.800893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2754.812788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2754.822671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2754.832954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2754.843643] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready
[ 2754.851740] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2754.858815] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2754.867818] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2754.875676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2754.884109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2754.894683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2754.905411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2754.914675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2754.924475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2754.933659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2754.943563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2754.953575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2754.963452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2754.972743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2754.982574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2754.993238] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
[ 2755.000312] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2755.007834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2755.015885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2755.150848] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 2755.157237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2755.173625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2755.199837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2755.208628] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 2755.216835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2755.224930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2755.232108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
20:02:33 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1, &(0x7f0000000240)=""/20, 0x14}, 0xe02036e0c14363a2)
socketpair(0x3, 0x800, 0x3ff, &(0x7f0000000580))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r1)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0))
sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000)
connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x204e22, 0x1}}, 0x10)

20:02:33 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:02:33 executing program 2:
mlockall(0x3)
mlockall(0x3)

20:02:33 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
fork()
r0 = fork()
ptrace$cont(0x20, r0, 0x900, 0x6)

20:02:33 executing program 0:
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)

20:02:34 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:02:34 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2756.309991] Bluetooth: hci5: command 0x0419 tx timeout
20:02:34 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2757.277401] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2757.334000] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 2757.339149] CPU: 0 PID: 9664 Comm: syz-executor.2 Not tainted 4.19.202-syzkaller #0
[ 2757.346939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2757.356322] Call Trace:
[ 2757.358920]  dump_stack+0x1fc/0x2ef
[ 2757.362557]  dump_header+0x15d/0xc3f
[ 2757.366281]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2757.371389]  ? ___ratelimit+0x319/0x590
[ 2757.375375]  oom_kill_process.cold+0x10/0x692
[ 2757.379921]  ? check_preemption_disabled+0x41/0x280
[ 2757.384945]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2757.390236]  out_of_memory+0x1072/0x1390
[ 2757.394314]  ? oom_killer_disable+0x270/0x270
[ 2757.398816]  ? mutex_trylock+0x15f/0x1a0
[ 2757.402889]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2757.407757]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2757.412627]  ? finish_task_switch+0x146/0x760
[ 2757.417134]  ? _raw_spin_unlock_irq+0x24/0x80
[ 2757.421647]  alloc_pages_vma+0xf2/0x780
[ 2757.425634]  do_anonymous_page+0x7c2/0x1be0
[ 2757.429965]  ? __pte_alloc+0x340/0x340
[ 2757.433860]  ? io_schedule_timeout+0x140/0x140
[ 2757.438451]  ? mark_held_locks+0xf0/0xf0
[ 2757.442517]  __handle_mm_fault+0x227a/0x41c0
[ 2757.446936]  ? vm_insert_page+0x9c0/0x9c0
[ 2757.451103]  ? check_preemption_disabled+0x41/0x280
[ 2757.456131]  handle_mm_fault+0x436/0xb10
[ 2757.460204]  __get_user_pages+0x6f0/0x1710
[ 2757.464453]  ? follow_page_mask+0x1d00/0x1d00
[ 2757.468964]  ? check_preemption_disabled+0x41/0x280
[ 2757.473997]  populate_vma_page_range+0x200/0x290
[ 2757.478760]  __mm_populate+0x1ea/0x350
[ 2757.482655]  ? populate_vma_page_range+0x290/0x290
[ 2757.487587]  ? do_mlock+0x6b0/0x6b0
[ 2757.491220]  ? security_capable+0x8f/0xc0
[ 2757.495384]  __se_sys_mlockall+0x362/0x4e0
[ 2757.499650]  do_syscall_64+0xf9/0x620
[ 2757.503465]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2757.508683] RIP: 0033:0x4665e9
[ 2757.511874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2757.530952] RSP: 002b:00007f8244f71188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2757.538876] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2757.546153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2757.553425] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2757.560696] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2757.567968] R13: 00007ffc2dc04a3f R14: 00007f8244f71300 R15: 0000000000022000
[ 2757.590689] Mem-Info:
[ 2757.593150] active_anon:204398 inactive_anon:1104915 isolated_anon:0
[ 2757.593150]  active_file:18 inactive_file:0 isolated_file:0
[ 2757.593150]  unevictable:50929 dirty:0 writeback:0 unstable:0
[ 2757.593150]  slab_reclaimable:17073 slab_unreclaimable:148876
[ 2757.593150]  mapped:58337 shmem:13143 pagetables:50131 bounce:0
[ 2757.593150]  free:25036 free_pcp:0 free_cma:0
[ 2757.649950] Bluetooth: hci4: command 0x0406 tx timeout
[ 2757.905984] Node 0 active_anon:645404kB inactive_anon:1038128kB active_file:16kB inactive_file:20kB unevictable:153120kB isolated(anon):0kB isolated(file):0kB mapped:134604kB dirty:0kB writeback:0kB shmem:36404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2758.171067] Node 1 active_anon:172188kB inactive_anon:3381532kB active_file:116kB inactive_file:0kB unevictable:50712kB isolated(anon):0kB isolated(file):0kB mapped:98740kB dirty:0kB writeback:0kB shmem:16168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2758.382663] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2758.538882] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2758.591608] Node 0 DMA32 free:35584kB min:35996kB low:44992kB high:53988kB active_anon:645080kB inactive_anon:1034776kB active_file:16kB inactive_file:12kB unevictable:153120kB writepending:0kB present:3129332kB managed:2763456kB mlocked:153120kB kernel_stack:19872kB pagetables:47844kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2758.809526] lowmem_reserve[]: 0 0 1 1 1
[ 2758.813537] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2759.096238] lowmem_reserve[]: 0 0 0 0 0
[ 2759.139523] Node 1 Normal free:53876kB min:53876kB low:67344kB high:80812kB active_anon:172188kB inactive_anon:3381532kB active_file:32kB inactive_file:32kB unevictable:50724kB writepending:0kB present:4194304kB managed:4128248kB mlocked:50724kB kernel_stack:49888kB pagetables:152436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2759.366140] lowmem_reserve[]: 0 0 0 0 0
[ 2759.396440] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2759.531367] Node 0 DMA32: 29*4kB (M) 113*8kB (UM) 1264*16kB (UM) 476*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36476kB
[ 2759.668463] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2759.778676] Node 1 Normal: 48*4kB (UM) 2*8kB (ME) 325*16kB (UME) 685*32kB (UME) 162*64kB (UME) 18*128kB (ME) 9*256kB (UME) 19*512kB (M) 2*1024kB (ME) 0*2048kB 0*4096kB = 54080kB
[ 2759.889615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2759.898481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2759.942564] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2759.969407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2759.978054] 18694 total pagecache pages
[ 2760.020170] 0 pages in swap cache
[ 2760.024377] Swap cache stats: add 0, delete 0, find 0/0
[ 2760.050537] Free swap  = 0kB
[ 2760.069671] Total swap = 0kB
[ 2760.072719] 2097051 pages RAM
[ 2760.075818] 0 pages HighMem/MovableOnly
[ 2760.137747] 369648 pages reserved
[ 2760.163054] 0 pages cma reserved
[ 2760.173201] Out of memory (oom_kill_allocating_task): Kill process 9664 (syz-executor.2) score 0 or sacrifice child
[ 2760.197042] Killed process 9664 (syz-executor.2) total-vm:93252kB, anon-rss:11924kB, file-rss:40196kB, shmem-rss:0kB
20:02:37 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
fork()
r0 = fork()
ptrace$cont(0x20, r0, 0x900, 0x6)

20:02:37 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:02:37 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:02:37 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2760.220875] oom_reaper: reaped process 9664 (syz-executor.2), now anon-rss:12152kB, file-rss:40192kB, shmem-rss:0kB
[ 2762.329927] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=-1000
[ 2762.395635] systemd-udevd cpuset=/ mems_allowed=0-1
[ 2762.443130] CPU: 1 PID: 4704 Comm: systemd-udevd Not tainted 4.19.202-syzkaller #0
[ 2762.450863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2762.460217] Call Trace:
[ 2762.462910]  dump_stack+0x1fc/0x2ef
[ 2762.466543]  dump_header+0x15d/0xc3f
[ 2762.470260]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2762.475359]  ? ___ratelimit+0x319/0x590
[ 2762.479333]  oom_kill_process.cold+0x10/0x692
[ 2762.483832]  ? lock_downgrade+0x720/0x720
[ 2762.487982]  ? check_preemption_disabled+0x41/0x280
[ 2762.493001]  out_of_memory+0x34d/0x1390
[ 2762.496981]  ? oom_killer_disable+0x270/0x270
[ 2762.501477]  ? mutex_trylock+0x15f/0x1a0
[ 2762.505540]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2762.510388]  ? find_get_entry+0x4cd/0x8a0
[ 2762.514550]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2762.519415]  alloc_pages_current+0x193/0x2a0
[ 2762.523822]  filemap_fault+0x146e/0x2180
[ 2762.527901]  ext4_filemap_fault+0x84/0xb0
[ 2762.532051]  __do_fault+0x10b/0x4b0
[ 2762.535679]  __handle_mm_fault+0x273b/0x41c0
[ 2762.540111]  ? vm_insert_page+0x9c0/0x9c0
[ 2762.544257]  ? mnt_set_expiry+0x260/0x260
[ 2762.548416]  ? check_preemption_disabled+0x41/0x280
[ 2762.553444]  handle_mm_fault+0x436/0xb10
[ 2762.557511]  __do_page_fault+0x68e/0xd60
[ 2762.561576]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2762.566588]  ? spurious_fault+0x840/0x840
[ 2762.570824]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2762.575677]  ? page_fault+0x8/0x30
[ 2762.579230]  page_fault+0x1e/0x30
[ 2762.582676] RIP: 0033:0x7f3c056be320
[ 2762.586397] Code: Bad RIP value.
[ 2762.589752] RSP: 002b:00007ffd490019e8 EFLAGS: 00010202
[ 2762.595107] RAX: 000055cd7b8fd8a4 RBX: 000055cd7b8fe8a0 RCX: 0000000000007379
[ 2762.602369] RDX: 00007ffd49001a20 RSI: 000055cd7b8fd8a0 RDI: 0000000000000001
[ 2762.609632] RBP: 00007ffd49001ae0 R08: 00007f3c0597d1d8 R09: 0000000000001010
[ 2762.616902] R10: 00007f3c0597cb58 R11: 0000000000000206 R12: 000055cd7b8fd8a0
[ 2762.624169] R13: 000055cd7b8fd8a4 R14: 000055cd7b8fac01 R15: 000055cd7b8fac04
[ 2763.957392] Mem-Info:
[ 2763.977374] active_anon:204286 inactive_anon:1104916 isolated_anon:0
[ 2763.977374]  active_file:16 inactive_file:18 isolated_file:0
[ 2763.977374]  unevictable:51552 dirty:0 writeback:0 unstable:0
[ 2763.977374]  slab_reclaimable:17156 slab_unreclaimable:148357
[ 2763.977374]  mapped:57064 shmem:13142 pagetables:50059 bounce:0
[ 2763.977374]  free:25172 free_pcp:303 free_cma:0
[ 2764.268269] Node 0 active_anon:645400kB inactive_anon:1038132kB active_file:16kB inactive_file:28kB unevictable:155768kB isolated(anon):0kB isolated(file):0kB mapped:133344kB dirty:0kB writeback:0kB shmem:36404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2764.487396] Node 1 active_anon:171744kB inactive_anon:3381532kB active_file:128kB inactive_file:0kB unevictable:50440kB isolated(anon):0kB isolated(file):0kB mapped:94912kB dirty:0kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2764.672315] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2764.870452] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2764.875505] Node 0 DMA32 free:36248kB min:35996kB low:44992kB high:53988kB active_anon:645076kB inactive_anon:1034780kB active_file:32kB inactive_file:32kB unevictable:155764kB writepending:0kB present:3129332kB managed:2763456kB mlocked:155764kB kernel_stack:19872kB pagetables:47624kB bounce:0kB free_pcp:592kB local_pcp:252kB free_cma:0kB
[ 2764.949277] lowmem_reserve[]: 0 0 1 1 1
[ 2764.953268] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2764.983020] lowmem_reserve[]: 0 0 0 0 0
[ 2764.987048] Node 1 Normal free:62372kB min:53876kB low:67344kB high:80812kB active_anon:171744kB inactive_anon:3381632kB active_file:3936kB inactive_file:100kB unevictable:36740kB writepending:0kB present:4194304kB managed:4128248kB mlocked:36788kB kernel_stack:49536kB pagetables:152356kB bounce:0kB free_pcp:1876kB local_pcp:448kB free_cma:0kB
[ 2765.093983] lowmem_reserve[]: 0 0 0 0 0
[ 2765.098000] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2765.215794] Node 0 DMA32: 15*4kB (UM) 1*8kB (M) 1319*16kB (UM) 462*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35956kB
[ 2765.308334] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2765.368997] Node 1 Normal: 1185*4kB (UM) 436*8kB (UM) 536*16kB (UME) 681*32kB (UME) 172*64kB (ME) 18*128kB (M) 7*256kB (M) 19*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 65476kB
[ 2765.438989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2765.479006] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2765.505277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
20:02:43 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
mlockall(0x3)

20:02:43 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:02:43 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2765.571922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2765.645381] 18153 total pagecache pages
[ 2765.668954] 0 pages in swap cache
[ 2765.672427] Swap cache stats: add 0, delete 0, find 0/0
[ 2765.704351] Free swap  = 0kB
[ 2765.734430] Total swap = 0kB
[ 2765.745340] 2097051 pages RAM
[ 2765.764264] 0 pages HighMem/MovableOnly
[ 2765.786783] 369648 pages reserved
[ 2765.815659] 0 pages cma reserved
20:02:43 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
fork()
r0 = fork()
ptrace$cont(0x20, r0, 0x900, 0x6)

20:02:43 executing program 0:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2765.854201] Out of memory: Kill process 8931 (syz-executor.1) score 1010 or sacrifice child
[ 2765.909094] Killed process 8931 (syz-executor.1) total-vm:93516kB, anon-rss:36900kB, file-rss:35084kB, shmem-rss:0kB
20:02:43 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2766.415193] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2766.529064] systemd-udevd cpuset=/ mems_allowed=0-1
[ 2766.537487] CPU: 0 PID: 9716 Comm: systemd-udevd Not tainted 4.19.202-syzkaller #0
[ 2766.545204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2766.554556] Call Trace:
[ 2766.557152]  dump_stack+0x1fc/0x2ef
[ 2766.560847]  dump_header+0x15d/0xc3f
[ 2766.564553]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2766.569641]  ? ___ratelimit+0x319/0x590
[ 2766.573602]  oom_kill_process.cold+0x10/0x692
[ 2766.578088]  ? check_preemption_disabled+0x41/0x280
[ 2766.583138]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2766.588401]  out_of_memory+0x1072/0x1390
[ 2766.592454]  ? oom_killer_disable+0x270/0x270
[ 2766.596933]  ? mutex_trylock+0x15f/0x1a0
[ 2766.600980]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2766.605817]  ? find_get_entry+0x4cd/0x8a0
[ 2766.609968]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2766.614849]  alloc_pages_current+0x193/0x2a0
[ 2766.619247]  filemap_fault+0x146e/0x2180
[ 2766.623398]  ext4_filemap_fault+0x84/0xb0
[ 2766.627528]  __do_fault+0x10b/0x4b0
[ 2766.631155]  __handle_mm_fault+0x273b/0x41c0
[ 2766.635572]  ? vm_insert_page+0x9c0/0x9c0
[ 2766.639699]  ? vfs_statx+0x182/0x210
[ 2766.643405]  ? sync_mm_rss+0x97/0x1a0
[ 2766.647214]  handle_mm_fault+0x436/0xb10
[ 2766.651265]  __do_page_fault+0x68e/0xd60
[ 2766.655325]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2766.660329]  ? spurious_fault+0x840/0x840
[ 2766.664464]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2766.669291]  ? page_fault+0x8/0x30
[ 2766.673335]  page_fault+0x1e/0x30
[ 2766.676772] RIP: 0033:0x7f3c0664b150
[ 2766.680471] Code: Bad RIP value.
[ 2766.683835] RSP: 002b:00007ffd48ffd768 EFLAGS: 00010246
[ 2766.689199] RAX: 00000000ffffffff RBX: 00007ffd48ffdcc0 RCX: 0000000000000000
[ 2766.696458] RDX: 00007f3c0597eea0 RSI: 00007ffd48ffdcc0 RDI: 0000000000000000
[ 2766.703811] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 2766.711062] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 2766.718313] R13: 0000000000000000 R14: 000055cd7b8fb760 R15: 00000000ffffffff
[ 2766.735391] Mem-Info:
[ 2766.737837] active_anon:204330 inactive_anon:1104907 isolated_anon:0
[ 2766.737837]  active_file:14 inactive_file:0 isolated_file:0
[ 2766.737837]  unevictable:51680 dirty:12 writeback:0 unstable:0
[ 2766.737837]  slab_reclaimable:17159 slab_unreclaimable:147995
[ 2766.737837]  mapped:59096 shmem:13142 pagetables:50079 bounce:0
[ 2766.737837]  free:25084 free_pcp:344 free_cma:0
[ 2766.772252] Node 0 active_anon:645488kB inactive_anon:1038212kB active_file:44kB inactive_file:0kB unevictable:158276kB isolated(anon):0kB isolated(file):0kB mapped:136720kB dirty:60kB writeback:0kB shmem:36404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2766.803530] Node 1 active_anon:171832kB inactive_anon:3381416kB active_file:12kB inactive_file:88kB unevictable:48544kB isolated(anon):0kB isolated(file):0kB mapped:99664kB dirty:0kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2766.831494] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2766.858519] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2766.869864] Node 0 DMA32 free:35816kB min:35996kB low:44992kB high:53988kB active_anon:645236kB inactive_anon:1034776kB active_file:40kB inactive_file:36kB unevictable:158328kB writepending:0kB present:3129332kB managed:2763456kB mlocked:158328kB kernel_stack:20192kB pagetables:48032kB bounce:0kB free_pcp:920kB local_pcp:476kB free_cma:0kB
[ 2766.904954] lowmem_reserve[]: 0 0 1 1 1
[ 2766.908991] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2766.939053] lowmem_reserve[]: 0 0 0 0 0
[ 2766.939075] Node 1 Normal free:53512kB min:53876kB low:67344kB high:80812kB active_anon:171796kB inactive_anon:3381304kB active_file:28kB inactive_file:28kB unevictable:48656kB writepending:0kB present:4194304kB managed:4128248kB mlocked:48656kB kernel_stack:49664kB pagetables:152096kB bounce:0kB free_pcp:460kB local_pcp:92kB free_cma:0kB
[ 2766.977204] lowmem_reserve[]: 0 0 0 0 0
[ 2766.981309] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2767.004481] Node 0 DMA32: 0*4kB 51*8kB (U) 1307*16kB (UE) 453*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35816kB
[ 2767.017274] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2767.028083] Node 1 Normal: 94*4kB (UM) 20*8kB (UE) 421*16kB (UME) 669*32kB (UM) 172*64kB (UME) 20*128kB (UM) 6*256kB (M) 19*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 53512kB
[ 2767.044622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2767.084062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2767.117856] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2767.126771] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2767.166225] 19643 total pagecache pages
[ 2767.176032] 0 pages in swap cache
[ 2767.202993] Swap cache stats: add 0, delete 0, find 0/0
[ 2767.208998] Free swap  = 0kB
[ 2767.212551] Total swap = 0kB
[ 2767.216106] 2097051 pages RAM
[ 2767.227963] 0 pages HighMem/MovableOnly
[ 2767.232672] 369648 pages reserved
[ 2767.236790] 0 pages cma reserved
[ 2767.258336] Out of memory (oom_kill_allocating_task): Kill process 9716 (systemd-udevd) score 0 or sacrifice child
[ 2767.295021] Killed process 9716 (systemd-udevd) total-vm:43944kB, anon-rss:1332kB, file-rss:0kB, shmem-rss:0kB
[ 2767.327732] oom_reaper: reaped process 9716 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 2767.364227] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2767.376395] systemd-journal cpuset=/ mems_allowed=0-1
[ 2767.491651] CPU: 0 PID: 8902 Comm: systemd-journal Not tainted 4.19.202-syzkaller #0
[ 2767.499563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2767.508915] Call Trace:
[ 2767.511510]  dump_stack+0x1fc/0x2ef
[ 2767.515144]  dump_header+0x15d/0xc3f
[ 2767.518865]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2767.523973]  ? ___ratelimit+0x319/0x590
[ 2767.527955]  oom_kill_process.cold+0x10/0x692
[ 2767.532454]  ? check_preemption_disabled+0x41/0x280
[ 2767.537474]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2767.542757]  out_of_memory+0x1072/0x1390
[ 2767.546822]  ? oom_killer_disable+0x270/0x270
[ 2767.551320]  ? mutex_trylock+0x15f/0x1a0
[ 2767.555387]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2767.560238]  ? find_get_entry+0x4cd/0x8a0
[ 2767.564396]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2767.569267]  alloc_pages_current+0x193/0x2a0
[ 2767.573943]  filemap_fault+0x146e/0x2180
[ 2767.578020]  ext4_filemap_fault+0x84/0xb0
[ 2767.582170]  __do_fault+0x10b/0x4b0
[ 2767.585804]  __handle_mm_fault+0x273b/0x41c0
[ 2767.590219]  ? vm_insert_page+0x9c0/0x9c0
[ 2767.594382]  ? check_preemption_disabled+0x41/0x280
[ 2767.599403]  handle_mm_fault+0x436/0xb10
[ 2767.603469]  __do_page_fault+0x68e/0xd60
[ 2767.607538]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2767.612555]  ? spurious_fault+0x840/0x840
[ 2767.616764]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2767.621610]  ? page_fault+0x8/0x30
[ 2767.625159]  page_fault+0x1e/0x30
[ 2767.628623] RIP: 0033:0x7f47e7a9d09d
[ 2767.632336] Code: Bad RIP value.
[ 2767.635691] RSP: 002b:00007ffff6079b60 EFLAGS: 00010206
[ 2767.641056] RAX: 0000000000000000 RBX: 0000555636327310 RCX: 0000000000000017
[ 2767.648321] RDX: 0000000000000000 RSI: 00007ffff6079b60 RDI: 00007ffff6079b1c
[ 2767.655589] RBP: 00007ffff6079d90 R08: 00007ffff61fa000 R09: 000002e5b4b6c7f4
[ 2767.662855] R10: 0005ee9c1c4397a9 R11: 0000000000000000 R12: 00007ffff6079ba0
[ 2767.670119] R13: 0000000000000001 R14: 0000000000000001 R15: 0005c939fc1e22d5
[ 2767.735603] Mem-Info:
[ 2767.738293] active_anon:204314 inactive_anon:1104858 isolated_anon:0
[ 2767.738293]  active_file:66 inactive_file:0 isolated_file:1
[ 2767.738293]  unevictable:51921 dirty:0 writeback:0 unstable:0
[ 2767.738293]  slab_reclaimable:17196 slab_unreclaimable:148019
[ 2767.738293]  mapped:59118 shmem:13142 pagetables:50096 bounce:0
[ 2767.738293]  free:25179 free_pcp:124 free_cma:0
[ 2767.777632] Node 0 active_anon:645560kB inactive_anon:1038128kB active_file:140kB inactive_file:0kB unevictable:159028kB isolated(anon):0kB isolated(file):0kB mapped:136768kB dirty:0kB writeback:0kB shmem:36404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2767.807525] Node 1 active_anon:171696kB inactive_anon:3381304kB active_file:124kB inactive_file:0kB unevictable:48656kB isolated(anon):0kB isolated(file):4kB mapped:99704kB dirty:0kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2767.836727] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2767.865336] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2767.870840] Node 0 DMA32 free:35896kB min:35996kB low:44992kB high:53988kB active_anon:645208kB inactive_anon:1034776kB active_file:72kB inactive_file:0kB unevictable:159028kB writepending:0kB present:3129332kB managed:2763456kB mlocked:159028kB kernel_stack:20160kB pagetables:47948kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
[ 2767.901570] lowmem_reserve[]: 0 0 1 1 1
[ 2767.905888] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2767.933108] lowmem_reserve[]: 0 0 0 0 0
[ 2767.937098] Node 1 Normal free:53636kB min:53876kB low:67344kB high:80812kB active_anon:171616kB inactive_anon:3381304kB active_file:4kB inactive_file:56kB unevictable:48924kB writepending:0kB present:4194304kB managed:4128248kB mlocked:48924kB kernel_stack:49664kB pagetables:152096kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
[ 2767.967543] lowmem_reserve[]: 0 0 0 0 0
[ 2767.971586] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2767.990226] Node 0 DMA32: 0*4kB 51*8kB (U) 1310*16kB (UE) 454*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35896kB
[ 2768.006715] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2768.035519] Node 1 Normal: 93*4kB (U) 20*8kB (UE) 429*16kB (UME) 669*32kB (UM) 172*64kB (UME) 20*128kB (UM) 6*256kB (M) 19*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 53636kB
[ 2768.067317] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2768.077524] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2768.107196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2768.135720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2768.162279] 19645 total pagecache pages
[ 2768.166276] 0 pages in swap cache
[ 2768.169777] Swap cache stats: add 0, delete 0, find 0/0
[ 2768.175136] Free swap  = 0kB
[ 2768.178149] Total swap = 0kB
[ 2768.198600] 2097051 pages RAM
[ 2768.201775] 0 pages HighMem/MovableOnly
[ 2768.205745] 369648 pages reserved
[ 2768.228240] 0 pages cma reserved
[ 2768.235066] Out of memory (oom_kill_allocating_task): Kill process 8902 (systemd-journal) score 0 or sacrifice child
[ 2768.272433] Killed process 8902 (systemd-journal) total-vm:46096kB, anon-rss:484kB, file-rss:0kB, shmem-rss:1684kB
[ 2768.304332] oom_reaper: reaped process 8902 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1684kB
[ 2768.346977] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2768.508502] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 2768.544322] CPU: 0 PID: 9700 Comm: syz-executor.2 Not tainted 4.19.202-syzkaller #0
[ 2768.552135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2768.561489] Call Trace:
[ 2768.564087]  dump_stack+0x1fc/0x2ef
[ 2768.567718]  dump_header+0x15d/0xc3f
[ 2768.571436]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2768.576535]  ? ___ratelimit+0x319/0x590
[ 2768.580512]  oom_kill_process.cold+0x10/0x692
[ 2768.585013]  ? check_preemption_disabled+0x41/0x280
[ 2768.590047]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2768.595327]  out_of_memory+0x1072/0x1390
[ 2768.599402]  ? oom_killer_disable+0x270/0x270
[ 2768.603897]  ? mutex_trylock+0x15f/0x1a0
[ 2768.607961]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2768.612825]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2768.617672]  ? __lock_acquire+0x6de/0x3ff0
[ 2768.621919]  ? mark_held_locks+0xf0/0xf0
[ 2768.626041]  alloc_pages_vma+0xf2/0x780
[ 2768.630025]  do_anonymous_page+0x7c2/0x1be0
[ 2768.634354]  ? __pte_alloc+0x340/0x340
[ 2768.638237]  ? __put_compound_page+0xc0/0xc0
[ 2768.642735]  ? mark_held_locks+0xf0/0xf0
[ 2768.646816]  __handle_mm_fault+0x227a/0x41c0
[ 2768.651232]  ? vm_insert_page+0x9c0/0x9c0
[ 2768.655393]  ? check_preemption_disabled+0x41/0x280
[ 2768.660413]  handle_mm_fault+0x436/0xb10
[ 2768.664479]  __get_user_pages+0x6f0/0x1710
[ 2768.668722]  ? follow_page_mask+0x1d00/0x1d00
[ 2768.673227]  ? check_preemption_disabled+0x41/0x280
[ 2768.678250]  populate_vma_page_range+0x200/0x290
[ 2768.683008]  __mm_populate+0x1ea/0x350
[ 2768.686898]  ? populate_vma_page_range+0x290/0x290
[ 2768.691825]  ? do_mlock+0x6b0/0x6b0
[ 2768.695459]  ? security_capable+0x8f/0xc0
[ 2768.699616]  __se_sys_mlockall+0x362/0x4e0
[ 2768.703859]  do_syscall_64+0xf9/0x620
[ 2768.707665]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2768.712855] RIP: 0033:0x4665e9
[ 2768.716044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2768.734945] RSP: 002b:00007f8244f71188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2768.742653] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2768.749917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2768.757183] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2768.764449] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2768.771733] R13: 00007ffc2dc04a3f R14: 00007f8244f71300 R15: 0000000000022000
[ 2768.881359] Mem-Info:
[ 2768.883826] active_anon:204145 inactive_anon:1104857 isolated_anon:0
[ 2768.883826]  active_file:8 inactive_file:8 isolated_file:18
[ 2768.883826]  unevictable:52432 dirty:0 writeback:0 unstable:0
[ 2768.883826]  slab_reclaimable:17196 slab_unreclaimable:147680
[ 2768.883826]  mapped:58694 shmem:13142 pagetables:50051 bounce:0
[ 2768.883826]  free:25079 free_pcp:349 free_cma:0
[ 2768.920515] Node 0 active_anon:645340kB inactive_anon:1038128kB active_file:20kB inactive_file:16kB unevictable:160608kB isolated(anon):0kB isolated(file):40kB mapped:136772kB dirty:0kB writeback:0kB shmem:36404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2768.951168] Node 1 active_anon:171240kB inactive_anon:3381300kB active_file:12kB inactive_file:16kB unevictable:49120kB isolated(anon):0kB isolated(file):32kB mapped:98004kB dirty:0kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2768.979893] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2769.008178] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2769.013248] Node 0 DMA32 free:36324kB min:35996kB low:44992kB high:53988kB active_anon:645016kB inactive_anon:1034776kB active_file:20kB inactive_file:16kB unevictable:160608kB writepending:0kB present:3129332kB managed:2763456kB mlocked:160608kB kernel_stack:20000kB pagetables:47920kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
[ 2769.045322] lowmem_reserve[]: 0 0 1 1 1
[ 2769.049380] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2769.099693] lowmem_reserve[]: 0 0 0 0 0
[ 2769.103711] Node 1 Normal free:54292kB min:53876kB low:67344kB high:80812kB active_anon:171240kB inactive_anon:3381300kB active_file:12kB inactive_file:16kB unevictable:49120kB writepending:0kB present:4194304kB managed:4128248kB mlocked:49120kB kernel_stack:49472kB pagetables:152028kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2769.148659] lowmem_reserve[]: 0 0 0 0 0
[ 2769.152671] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2769.274982] Node 0 DMA32: 16*4kB (U) 51*8kB (U) 1316*16kB (U) 457*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36152kB
[ 2769.338810] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2769.412570] Node 1 Normal: 151*4kB (UM) 30*8kB (UME) 445*16kB (UME) 672*32kB (UM) 174*64kB (UME) 20*128kB (UM) 6*256kB (M) 19*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 54428kB
[ 2769.492824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2769.533841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2769.578709] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2769.587590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2769.658666] 19692 total pagecache pages
[ 2769.668620] 0 pages in swap cache
[ 2769.672089] Swap cache stats: add 0, delete 0, find 0/0
[ 2769.677447] Free swap  = 0kB
[ 2769.708657] Total swap = 0kB
[ 2769.711703] 2097051 pages RAM
[ 2769.715091] 0 pages HighMem/MovableOnly
[ 2769.748691] 369648 pages reserved
[ 2769.752166] 0 pages cma reserved
[ 2769.755532] Out of memory (oom_kill_allocating_task): Kill process 9700 (syz-executor.2) score 0 or sacrifice child
[ 2769.813696] Killed process 9700 (syz-executor.2) total-vm:93252kB, anon-rss:11932kB, file-rss:40200kB, shmem-rss:0kB
[ 2769.840446] oom_reaper: reaped process 9700 (syz-executor.2), now anon-rss:11932kB, file-rss:40196kB, shmem-rss:0kB
20:02:48 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r4, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r5, @ANYBLOB="f8c00180080003000301000008000240070000000800030005000000080002000100000054e2fa4501f3e94fcb8fed41de9dd0c889c763e7505c7fd1f769cd2ae6a1db6719b8bedfaeefee870023bedc1274df26cbe6b710ed57f6ff45240435e825af05d02f600a354ab813238a963d48210c911da92959adc79dd997380c3633fc3e877275a161ea17c2b6124cc758bb3e3bc8e660aa6755c50db0b6618e00cbcef799ebc1d35b3ec8c3e9ed00b0264a669ac8cca995068dd481de560aed03630281dee7c258ea3d7416ddc570ab10be7d7b9b620db0be71f15998f0c6975a443fd9e6e97c8e3bc61e16414030ca7b34af48c1f40a9b6df00b9303e2cdb3e4d9be291bd40d32ebdc42a45293da5b8bbba5cc7095ad8a9d105070cc78c1a6d774113b5356a961c5573917a1029aa63bf2fdfc2f57ab256a4bb88ad26efc1fe63b3619bdc5c2fa481189dd001bfe3b32cd9e1c4a0650d4d140e9ea4a77f2dbbd38d98a072e46a30c8b279acc3ce8c9cfae3b1bcd497fe13d09fe695c0acd35fafa023af9b75198aac0d518a49ef09ec967330d00"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:02:48 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:02:48 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2770.766788] systemd[1]: systemd-journald.service: Failed with result 'signal'.
20:02:48 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r4, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r5, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:02:48 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)
r0 = fork()
ptrace$cont(0x20, r0, 0x900, 0x6)

[ 2770.882965] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart.
[ 2770.993816] systemd[1]: Stopped Journal Service.
20:02:48 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
mlockall(0x3)

[ 2771.113056] systemd[1]: Starting Journal Service...
[ 2771.872698] syz-executor.1 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2771.920802] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 2771.926137] CPU: 1 PID: 9738 Comm: syz-executor.1 Not tainted 4.19.202-syzkaller #0
[ 2771.933959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2771.943320] Call Trace:
[ 2771.945971]  dump_stack+0x1fc/0x2ef
[ 2771.949611]  dump_header+0x15d/0xc3f
[ 2771.953335]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2771.958443]  ? ___ratelimit+0x319/0x590
[ 2771.962427]  oom_kill_process.cold+0x10/0x692
[ 2771.966929]  ? check_preemption_disabled+0x41/0x280
[ 2771.971963]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2771.977251]  out_of_memory+0x1072/0x1390
[ 2771.981367]  ? oom_killer_disable+0x270/0x270
[ 2771.985871]  ? mutex_trylock+0x15f/0x1a0
[ 2771.989945]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2771.994803]  ? _raw_spin_unlock_irq+0x24/0x80
[ 2771.999319]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2772.004170]  ? __schedule+0x88f/0x2040
[ 2772.008066]  ? io_schedule_timeout+0x140/0x140
[ 2772.012660]  ? preempt_schedule_common+0x45/0xc0
[ 2772.017423]  alloc_pages_vma+0xf2/0x780
[ 2772.021419]  do_anonymous_page+0x7c2/0x1be0
[ 2772.025754]  ? __pte_alloc+0x340/0x340
[ 2772.029642]  ? __put_compound_page+0xc0/0xc0
[ 2772.034061]  ? mark_held_locks+0xf0/0xf0
[ 2772.038135]  __handle_mm_fault+0x227a/0x41c0
[ 2772.042566]  ? vm_insert_page+0x9c0/0x9c0
[ 2772.046740]  ? check_preemption_disabled+0x41/0x280
[ 2772.051775]  handle_mm_fault+0x436/0xb10
[ 2772.055848]  __get_user_pages+0x6f0/0x1710
[ 2772.060096]  ? follow_page_mask+0x1d00/0x1d00
[ 2772.064604]  ? check_preemption_disabled+0x41/0x280
[ 2772.069635]  populate_vma_page_range+0x200/0x290
[ 2772.074837]  __mm_populate+0x1ea/0x350
[ 2772.078733]  ? populate_vma_page_range+0x290/0x290
[ 2772.083674]  ? do_mlock+0x6b0/0x6b0
[ 2772.087388]  ? security_capable+0x8f/0xc0
[ 2772.091545]  __se_sys_mlockall+0x362/0x4e0
[ 2772.095789]  do_syscall_64+0xf9/0x620
[ 2772.099601]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2772.104789] RIP: 0033:0x4665e9
[ 2772.107986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2772.126976] RSP: 002b:00007fd4d5ebd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2772.134700] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2772.141976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2772.149249] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2772.156543] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2772.163811] R13: 00007ffc6077510f R14: 00007fd4d5ebd300 R15: 0000000000022000
[ 2772.187735] Mem-Info:
[ 2772.205074] active_anon:204280 inactive_anon:1104857 isolated_anon:0
[ 2772.205074]  active_file:3 inactive_file:21 isolated_file:1
[ 2772.205074]  unevictable:52341 dirty:0 writeback:0 unstable:0
[ 2772.205074]  slab_reclaimable:17296 slab_unreclaimable:147501
[ 2772.205074]  mapped:57953 shmem:13141 pagetables:50136 bounce:0
[ 2772.205074]  free:25075 free_pcp:184 free_cma:0
[ 2772.243682] Node 0 active_anon:645448kB inactive_anon:1038132kB active_file:4kB inactive_file:48kB unevictable:163184kB isolated(anon):0kB isolated(file):0kB mapped:137104kB dirty:0kB writeback:0kB shmem:36408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2772.277188] Node 1 active_anon:171672kB inactive_anon:3381296kB active_file:8kB inactive_file:36kB unevictable:46180kB isolated(anon):0kB isolated(file):4kB mapped:94708kB dirty:0kB writeback:0kB shmem:16156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2772.314446] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2772.344000] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2772.350059] Node 0 DMA32 free:35884kB min:35996kB low:44992kB high:53988kB active_anon:645124kB inactive_anon:1034780kB active_file:4kB inactive_file:48kB unevictable:163184kB writepending:0kB present:3129332kB managed:2763456kB mlocked:163184kB kernel_stack:19936kB pagetables:47800kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB
[ 2772.381625] lowmem_reserve[]: 0 0 1 1 1
[ 2772.386409] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2772.460633] lowmem_reserve[]: 0 0 0 0 0
[ 2772.467373] Node 1 Normal free:53436kB min:53876kB low:67344kB high:80812kB active_anon:171672kB inactive_anon:3381296kB active_file:108kB inactive_file:36kB unevictable:45880kB writepending:0kB present:4194304kB managed:4128248kB mlocked:45880kB kernel_stack:49824kB pagetables:152488kB bounce:0kB free_pcp:488kB local_pcp:240kB free_cma:0kB
[ 2772.546061] lowmem_reserve[]: 0 0 0 0 0
[ 2772.572745] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2772.607307] Node 0 DMA32: 43*4kB (UME) 40*8kB (U) 1300*16kB (UME) 456*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35884kB
[ 2772.624900] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2772.677774] Node 1 Normal: 53*4kB (UE) 5*8kB (UME) 540*16kB (UM) 664*32kB (UME) 176*64kB (UME) 20*128kB (ME) 5*256kB (M) 16*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53436kB
[ 2772.702850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2772.727736] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2772.736413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2772.757533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2772.780906] 18895 total pagecache pages
[ 2772.784900] 0 pages in swap cache
[ 2772.793448] Swap cache stats: add 0, delete 0, find 0/0
[ 2772.806095] Free swap  = 0kB
[ 2772.813691] Total swap = 0kB
[ 2772.816707] 2097051 pages RAM
[ 2772.841321] 0 pages HighMem/MovableOnly
[ 2772.847381] 369648 pages reserved
[ 2772.855945] 0 pages cma reserved
[ 2772.861218] Out of memory (oom_kill_allocating_task): Kill process 9738 (syz-executor.1) score 0 or sacrifice child
[ 2772.877852] Killed process 9740 (syz-executor.1) total-vm:93252kB, anon-rss:148kB, file-rss:35004kB, shmem-rss:0kB
[ 2772.918160] syz-executor.5 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2772.951574] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 2772.956812] CPU: 0 PID: 9737 Comm: syz-executor.5 Not tainted 4.19.202-syzkaller #0
[ 2772.964597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2772.973969] Call Trace:
[ 2772.976571]  dump_stack+0x1fc/0x2ef
[ 2772.980235]  dump_header+0x15d/0xc3f
[ 2772.983964]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2772.989075]  ? ___ratelimit+0x319/0x590
[ 2772.993088]  oom_kill_process.cold+0x10/0x692
[ 2772.997583]  ? check_preemption_disabled+0x41/0x280
[ 2773.002632]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2773.007894]  out_of_memory+0x1072/0x1390
[ 2773.012045]  ? oom_killer_disable+0x270/0x270
[ 2773.016548]  ? mutex_trylock+0x15f/0x1a0
[ 2773.020618]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2773.025486]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2773.030334]  ? __lock_acquire+0x6de/0x3ff0
[ 2773.034587]  ? mark_held_locks+0xf0/0xf0
[ 2773.038664]  alloc_pages_vma+0xf2/0x780
[ 2773.042649]  do_anonymous_page+0x7c2/0x1be0
[ 2773.046991]  ? __pte_alloc+0x340/0x340
[ 2773.050883]  ? __put_compound_page+0xc0/0xc0
[ 2773.055302]  ? mark_held_locks+0xf0/0xf0
[ 2773.059374]  __handle_mm_fault+0x227a/0x41c0
[ 2773.063792]  ? vm_insert_page+0x9c0/0x9c0
[ 2773.067966]  ? check_preemption_disabled+0x41/0x280
[ 2773.072993]  handle_mm_fault+0x436/0xb10
[ 2773.077061]  __get_user_pages+0x6f0/0x1710
[ 2773.081306]  ? follow_page_mask+0x1d00/0x1d00
[ 2773.085813]  ? check_preemption_disabled+0x41/0x280
[ 2773.090841]  populate_vma_page_range+0x200/0x290
[ 2773.095601]  __mm_populate+0x1ea/0x350
[ 2773.099493]  ? populate_vma_page_range+0x290/0x290
[ 2773.104420]  ? do_mlock+0x6b0/0x6b0
[ 2773.108046]  ? security_capable+0x8f/0xc0
[ 2773.112193]  __se_sys_mlockall+0x362/0x4e0
[ 2773.116611]  do_syscall_64+0xf9/0x620
[ 2773.120416]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2773.125603] RIP: 0033:0x4665e9
[ 2773.128793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2773.147713] RSP: 002b:00007ffad19b4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2773.155414] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2773.162689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2773.169959] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2773.177230] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2773.184498] R13: 00007fff2c0d6aaf R14: 00007ffad19b4300 R15: 0000000000022000
[ 2773.197472] Mem-Info:
[ 2773.225048] active_anon:204280 inactive_anon:1104857 isolated_anon:0
[ 2773.225048]  active_file:15 inactive_file:14 isolated_file:0
[ 2773.225048]  unevictable:52368 dirty:0 writeback:0 unstable:0
[ 2773.225048]  slab_reclaimable:17295 slab_unreclaimable:147461
[ 2773.225048]  mapped:57958 shmem:13141 pagetables:50136 bounce:0
[ 2773.225048]  free:25034 free_pcp:316 free_cma:0
[ 2773.266358] Node 0 active_anon:645448kB inactive_anon:1038132kB active_file:20kB inactive_file:32kB unevictable:163188kB isolated(anon):0kB isolated(file):0kB mapped:137104kB dirty:0kB writeback:0kB shmem:36408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2773.312345] Node 1 active_anon:171672kB inactive_anon:3381296kB active_file:40kB inactive_file:24kB unevictable:46284kB isolated(anon):0kB isolated(file):0kB mapped:94728kB dirty:0kB writeback:0kB shmem:16156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2773.348005] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2773.387430] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2773.395940] Node 0 DMA32 free:35664kB min:35996kB low:44992kB high:53988kB active_anon:645124kB inactive_anon:1034780kB active_file:20kB inactive_file:32kB unevictable:163188kB writepending:0kB present:3129332kB managed:2763456kB mlocked:163188kB kernel_stack:19936kB pagetables:47800kB bounce:0kB free_pcp:648kB local_pcp:76kB free_cma:0kB
[ 2773.455977] lowmem_reserve[]: 0 0 1 1 1
[ 2773.465517] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2773.528184] lowmem_reserve[]: 0 0 0 0 0
[ 2773.552153] Node 1 Normal free:53492kB min:53876kB low:67344kB high:80812kB active_anon:171672kB inactive_anon:3381296kB active_file:140kB inactive_file:0kB unevictable:46284kB writepending:0kB present:4194304kB managed:4128248kB mlocked:46284kB kernel_stack:49792kB pagetables:152488kB bounce:0kB free_pcp:616kB local_pcp:376kB free_cma:0kB
[ 2773.603411] lowmem_reserve[]: 0 0 0 0 0
[ 2773.607688] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2773.643534] Node 0 DMA32: 6*4kB (ME) 29*8kB (U) 1301*16kB (UME) 456*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35664kB
[ 2773.657268] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2773.688988] Node 1 Normal: 53*4kB (UE) 10*8kB (UME) 541*16kB (UM) 669*32kB (UME) 176*64kB (UME) 20*128kB (ME) 5*256kB (M) 16*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53652kB
[ 2773.728885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2773.853701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2773.920609] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2774.031277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2774.104131] 19059 total pagecache pages
[ 2774.136807] 0 pages in swap cache
[ 2774.166457] Swap cache stats: add 0, delete 0, find 0/0
[ 2774.222076] Free swap  = 0kB
[ 2774.251432] Total swap = 0kB
[ 2774.272076] 2097051 pages RAM
[ 2774.275988] 0 pages HighMem/MovableOnly
[ 2774.337150] 369648 pages reserved
[ 2774.358231] 0 pages cma reserved
[ 2774.361622] Out of memory (oom_kill_allocating_task): Kill process 9737 (syz-executor.5) score 0 or sacrifice child
[ 2774.494954] Killed process 9737 (syz-executor.5) total-vm:93252kB, anon-rss:11948kB, file-rss:40196kB, shmem-rss:0kB
[ 2774.583153] oom_reaper: reaped process 9737 (syz-executor.5), now anon-rss:11948kB, file-rss:40192kB, shmem-rss:0kB
[ 2774.723119] syz-executor.2 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2774.835442] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 2774.868725] CPU: 0 PID: 5101 Comm: syz-executor.2 Not tainted 4.19.202-syzkaller #0
[ 2774.876886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2774.886420] Call Trace:
[ 2774.889033]  dump_stack+0x1fc/0x2ef
[ 2774.892667]  dump_header+0x15d/0xc3f
[ 2774.896383]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2774.901485]  ? ___ratelimit+0x319/0x590
[ 2774.905493]  oom_kill_process.cold+0x10/0x692
[ 2774.909997]  ? check_preemption_disabled+0x41/0x280
[ 2774.915022]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2774.920308]  out_of_memory+0x1072/0x1390
[ 2774.924376]  ? oom_killer_disable+0x270/0x270
[ 2774.928895]  ? mutex_trylock+0x15f/0x1a0
[ 2774.932964]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2774.937820]  ? aa_get_task_label+0x1e6/0x7f0
[ 2774.942238]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2774.947088]  ? deref_stack_reg+0x1d0/0x1d0
[ 2774.951333]  ? __lock_acquire+0x6de/0x3ff0
[ 2774.955577]  ? __lock_acquire+0x6de/0x3ff0
[ 2774.959811]  alloc_pages_vma+0xf2/0x780
[ 2774.963793]  wp_page_copy+0x219/0x2c40
[ 2774.967684]  ? _vm_normal_page+0x132/0x510
[ 2774.972380]  ? follow_pte_pmd+0x60/0x60
[ 2774.976361]  do_wp_page+0x2d4/0x2210
[ 2774.980079]  ? finish_mkwrite_fault+0x640/0x640
[ 2774.984745]  ? __handle_mm_fault+0x15f6/0x41c0
[ 2774.989337]  ? mark_held_locks+0xf0/0xf0
[ 2774.993402]  __handle_mm_fault+0x258b/0x41c0
[ 2774.997811]  ? vm_insert_page+0x9c0/0x9c0
[ 2775.001970]  ? check_preemption_disabled+0x41/0x280
[ 2775.006992]  handle_mm_fault+0x436/0xb10
[ 2775.011060]  __do_page_fault+0x68e/0xd60
[ 2775.015131]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2775.020145]  ? spurious_fault+0x840/0x840
[ 2775.024300]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2775.029150]  ? page_fault+0x8/0x30
[ 2775.032701]  page_fault+0x1e/0x30
[ 2775.036153] RIP: 0033:0x4355b5
[ 2775.039345] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d 4a cb 09 00 e8 75 c9 ff ff
[ 2775.058262] RSP: 002b:00007ffc2dc04ad0 EFLAGS: 00010206
[ 2775.063619] RAX: 00000000000187c1 RBX: 00000000005465c0 RCX: 0000000001f90840
[ 2775.071063] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004
[ 2775.078324] RBP: 0000000000008030 R08: 0000000000000003 R09: 0000000000546620
[ 2775.085592] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802
[ 2775.092957] R13: 0000000000008040 R14: 0000000000000804 R15: 0000000001f88800
[ 2775.751426] ieee802154 phy0 wpan0: encryption failed: -22
[ 2775.757021] ieee802154 phy1 wpan1: encryption failed: -22
[ 2776.213298] Mem-Info:
[ 2776.216362] active_anon:204224 inactive_anon:1107507 isolated_anon:0
[ 2776.216362]  active_file:239 inactive_file:2038 isolated_file:64
[ 2776.216362]  unevictable:44542 dirty:0 writeback:0 unstable:0
[ 2776.216362]  slab_reclaimable:17298 slab_unreclaimable:147350
[ 2776.216362]  mapped:57558 shmem:13141 pagetables:50061 bounce:0
[ 2776.216362]  free:27242 free_pcp:1259 free_cma:0
[ 2776.351091] Node 0 active_anon:645404kB inactive_anon:1038332kB active_file:2996kB inactive_file:3072kB unevictable:152564kB isolated(anon):0kB isolated(file):0kB mapped:138776kB dirty:100kB writeback:0kB shmem:36408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2776.402881] Node 1 active_anon:171492kB inactive_anon:3381296kB active_file:1712kB inactive_file:2148kB unevictable:25404kB isolated(anon):0kB isolated(file):104kB mapped:91156kB dirty:0kB writeback:0kB shmem:16156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
20:02:54 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2776.438747] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2776.475575] lowmem_reserve[]: 0 2693 2695 2695 2695
20:02:54 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r4, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r5, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2776.502671] Node 0 DMA32 free:39040kB min:35996kB low:44992kB high:53988kB active_anon:645080kB inactive_anon:1039316kB active_file:2516kB inactive_file:3544kB unevictable:147940kB writepending:0kB present:3129332kB managed:2763456kB mlocked:147576kB kernel_stack:19872kB pagetables:47756kB bounce:0kB free_pcp:2528kB local_pcp:1272kB free_cma:0kB
20:02:54 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)
r0 = fork()
ptrace$cont(0x20, r0, 0x900, 0x6)

[ 2776.642761] lowmem_reserve[]: 0 0 1 1 1
[ 2776.647650] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
20:02:54 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:02:54 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r4, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r5, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2776.801760] lowmem_reserve[]: 0 0 0 0 0
[ 2776.821370] Node 1 Normal free:84236kB min:53876kB low:67344kB high:80812kB active_anon:171492kB inactive_anon:3381800kB active_file:7444kB inactive_file:5108kB unevictable:2252kB writepending:0kB present:4194304kB managed:4128248kB mlocked:2268kB kernel_stack:49792kB pagetables:152232kB bounce:0kB free_pcp:1920kB local_pcp:1188kB free_cma:0kB
[ 2776.900781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2777.068409] lowmem_reserve[]: 0 0 0 0 0
[ 2777.088484] systemd-journald[9741]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing.
[ 2777.114496] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2777.206856] Node 0 DMA32: 226*4kB (UE) 202*8kB (UM) 1351*16kB (U) 451*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38568kB
[ 2777.274108] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2777.289754] Node 1 Normal: 144*4kB (UME) 38*8kB (UME) 490*16kB (UM) 679*32kB (UM) 179*64kB (UM) 21*128kB (UM) 6*256kB (UM) 16*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 54320kB
[ 2777.306661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2777.316685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2777.328225] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2777.348954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2777.366589] 18700 total pagecache pages
[ 2777.376506] 0 pages in swap cache
[ 2777.387334] Swap cache stats: add 0, delete 0, find 0/0
[ 2777.394084] Free swap  = 0kB
[ 2777.397622] Total swap = 0kB
[ 2777.401221] 2097051 pages RAM
[ 2777.409941] 0 pages HighMem/MovableOnly
[ 2777.414410] 369648 pages reserved
[ 2777.418077] 0 pages cma reserved
[ 2777.421463] Out of memory (oom_kill_allocating_task): Kill process 5101 (syz-executor.2) score 0 or sacrifice child
[ 2777.432206] Killed process 7988 (syz-executor.2) total-vm:93384kB, anon-rss:36772kB, file-rss:35012kB, shmem-rss:0kB
[ 2777.454433] oom_reaper: reaped process 7988 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[ 2778.031699] syz-executor.5 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2778.044840] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 2778.055652] CPU: 0 PID: 9766 Comm: syz-executor.5 Not tainted 4.19.202-syzkaller #0
[ 2778.063460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2778.072818] Call Trace:
[ 2778.075417]  dump_stack+0x1fc/0x2ef
[ 2778.079062]  dump_header+0x15d/0xc3f
[ 2778.082791]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2778.087895]  ? ___ratelimit+0x319/0x590
[ 2778.091878]  oom_kill_process.cold+0x10/0x692
[ 2778.096378]  ? check_preemption_disabled+0x41/0x280
[ 2778.101403]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2778.106770]  out_of_memory+0x1072/0x1390
[ 2778.110849]  ? oom_killer_disable+0x270/0x270
[ 2778.115353]  ? mutex_trylock+0x15f/0x1a0
[ 2778.119433]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2778.124303]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2778.129146]  ? __lock_acquire+0x6de/0x3ff0
[ 2778.133390]  ? mark_held_locks+0xf0/0xf0
[ 2778.137468]  alloc_pages_vma+0xf2/0x780
[ 2778.141458]  do_anonymous_page+0x7c2/0x1be0
[ 2778.145789]  ? __pte_alloc+0x340/0x340
[ 2778.149676]  ? __put_compound_page+0xc0/0xc0
[ 2778.154093]  ? mark_held_locks+0xf0/0xf0
[ 2778.158164]  __handle_mm_fault+0x227a/0x41c0
[ 2778.162582]  ? vm_insert_page+0x9c0/0x9c0
[ 2778.166743]  ? check_preemption_disabled+0x41/0x280
[ 2778.171769]  handle_mm_fault+0x436/0xb10
[ 2778.175835]  __get_user_pages+0x6f0/0x1710
[ 2778.180080]  ? follow_page_mask+0x1d00/0x1d00
[ 2778.184587]  ? check_preemption_disabled+0x41/0x280
[ 2778.189611]  populate_vma_page_range+0x200/0x290
[ 2778.194380]  __mm_populate+0x1ea/0x350
[ 2778.198455]  ? populate_vma_page_range+0x290/0x290
[ 2778.203389]  ? do_mlock+0x6b0/0x6b0
[ 2778.207033]  ? security_capable+0x8f/0xc0
[ 2778.211191]  __se_sys_mlockall+0x362/0x4e0
[ 2778.215436]  do_syscall_64+0xf9/0x620
[ 2778.219430]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2778.224623] RIP: 0033:0x4665e9
[ 2778.227854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2778.246760] RSP: 002b:00007ffad19b4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2778.254476] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2778.261752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2778.269025] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2778.276301] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2778.283575] R13: 00007fff2c0d6aaf R14: 00007ffad19b4300 R15: 0000000000022000
[ 2778.644783] Mem-Info:
[ 2778.647328] active_anon:204344 inactive_anon:1105163 isolated_anon:0
[ 2778.647328]  active_file:23 inactive_file:8 isolated_file:0
[ 2778.647328]  unevictable:52435 dirty:0 writeback:0 unstable:0
[ 2778.647328]  slab_reclaimable:17336 slab_unreclaimable:147084
[ 2778.647328]  mapped:57673 shmem:13474 pagetables:50057 bounce:0
[ 2778.647328]  free:25114 free_pcp:52 free_cma:0
[ 2778.713438] Node 0 active_anon:645504kB inactive_anon:1038700kB active_file:84kB inactive_file:28kB unevictable:162420kB isolated(anon):0kB isolated(file):0kB mapped:135924kB dirty:0kB writeback:0kB shmem:36976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2778.881288] Node 1 active_anon:171872kB inactive_anon:3381952kB active_file:4kB inactive_file:28kB unevictable:47328kB isolated(anon):0kB isolated(file):0kB mapped:94768kB dirty:0kB writeback:0kB shmem:16920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2778.963701] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2779.006714] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2779.012540] Node 0 DMA32 free:35656kB min:35996kB low:44992kB high:53988kB active_anon:645180kB inactive_anon:1035348kB active_file:136kB inactive_file:0kB unevictable:162476kB writepending:0kB present:3129332kB managed:2763456kB mlocked:162476kB kernel_stack:19904kB pagetables:47592kB bounce:0kB free_pcp:236kB local_pcp:0kB free_cma:0kB
[ 2779.060854] lowmem_reserve[]: 0 0 1 1 1
[ 2779.064915] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2779.108874] lowmem_reserve[]: 0 0 0 0 0
[ 2779.112937] Node 1 Normal free:53664kB min:53876kB low:67344kB high:80812kB active_anon:171872kB inactive_anon:3381952kB active_file:4kB inactive_file:0kB unevictable:47328kB writepending:0kB present:4194304kB managed:4128248kB mlocked:47328kB kernel_stack:49824kB pagetables:152380kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB
[ 2779.160809] lowmem_reserve[]: 0 0 0 0 0
[ 2779.164859] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2779.194841] Node 0 DMA32: 35*4kB (UM) 2*8kB (M) 1317*16kB (UM) 451*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35660kB
[ 2779.223225] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2779.234095] Node 1 Normal: 112*4kB (UE) 50*8kB (UE) 447*16kB (UM) 681*32kB (UM) 179*64kB (UM) 21*128kB (UM) 6*256kB (UM) 16*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53664kB
[ 2779.262744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2779.276914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2779.297438] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2779.306400] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2779.333353] 18978 total pagecache pages
[ 2779.337404] 0 pages in swap cache
[ 2779.340969] Swap cache stats: add 0, delete 0, find 0/0
[ 2779.346360] Free swap  = 0kB
[ 2779.360858] Total swap = 0kB
[ 2779.363957] 2097051 pages RAM
[ 2779.367108] 0 pages HighMem/MovableOnly
[ 2779.371152] 369648 pages reserved
[ 2779.374643] 0 pages cma reserved
[ 2779.378435] Out of memory (oom_kill_allocating_task): Kill process 9766 (syz-executor.5) score 0 or sacrifice child
[ 2779.389143] Killed process 9761 (syz-executor.5) total-vm:93252kB, anon-rss:10088kB, file-rss:39104kB, shmem-rss:0kB
[ 2779.400955] oom_reaper: reaped process 9761 (syz-executor.5), now anon-rss:10132kB, file-rss:40192kB, shmem-rss:0kB
[ 2779.411828] syz-executor.4 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2779.433548] syz-executor.4 cpuset=/ mems_allowed=0-1
[ 2779.440528] CPU: 0 PID: 9763 Comm: syz-executor.4 Not tainted 4.19.202-syzkaller #0
[ 2779.448325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2779.457675] Call Trace:
[ 2779.460274]  dump_stack+0x1fc/0x2ef
[ 2779.463917]  dump_header+0x15d/0xc3f
[ 2779.467640]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2779.472748]  ? ___ratelimit+0x319/0x590
[ 2779.476732]  oom_kill_process.cold+0x10/0x692
[ 2779.481235]  ? check_preemption_disabled+0x41/0x280
[ 2779.486347]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2779.491633]  out_of_memory+0x1072/0x1390
[ 2779.495702]  ? oom_killer_disable+0x270/0x270
[ 2779.500210]  ? mutex_trylock+0x15f/0x1a0
[ 2779.504280]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2779.509151]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2779.513998]  ? __lock_acquire+0x6de/0x3ff0
[ 2779.518242]  ? mark_held_locks+0xf0/0xf0
[ 2779.522318]  alloc_pages_vma+0xf2/0x780
[ 2779.526314]  do_anonymous_page+0x7c2/0x1be0
[ 2779.530645]  ? __pte_alloc+0x340/0x340
[ 2779.534566]  ? __put_compound_page+0xc0/0xc0
[ 2779.538993]  ? mark_held_locks+0xf0/0xf0
[ 2779.543065]  __handle_mm_fault+0x227a/0x41c0
[ 2779.547503]  ? vm_insert_page+0x9c0/0x9c0
[ 2779.551667]  ? check_preemption_disabled+0x41/0x280
[ 2779.556692]  handle_mm_fault+0x436/0xb10
[ 2779.560761]  __get_user_pages+0x6f0/0x1710
[ 2779.565007]  ? follow_page_mask+0x1d00/0x1d00
[ 2779.569511]  ? check_preemption_disabled+0x41/0x280
[ 2779.574539]  populate_vma_page_range+0x200/0x290
[ 2779.579306]  __mm_populate+0x1ea/0x350
[ 2779.583557]  ? populate_vma_page_range+0x290/0x290
[ 2779.588488]  ? do_mlock+0x6b0/0x6b0
[ 2779.592119]  ? security_capable+0x8f/0xc0
[ 2779.596276]  __se_sys_mlockall+0x362/0x4e0
[ 2779.600521]  do_syscall_64+0xf9/0x620
[ 2779.604337]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2779.609533] RIP: 0033:0x4665e9
[ 2779.612728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2779.631625] RSP: 002b:00007fddf4d77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2779.639334] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2779.646599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2779.653872] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2779.661144] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2779.668416] R13: 00007ffe3a883c4f R14: 00007fddf4d77300 R15: 0000000000022000
[ 2779.954829] Mem-Info:
[ 2779.962849] active_anon:204274 inactive_anon:1106848 isolated_anon:0
[ 2779.962849]  active_file:187 inactive_file:618 isolated_file:0
[ 2779.962849]  unevictable:47479 dirty:14 writeback:0 unstable:0
[ 2779.962849]  slab_reclaimable:17336 slab_unreclaimable:147021
[ 2779.962849]  mapped:56107 shmem:15166 pagetables:49979 bounce:0
[ 2779.962849]  free:26820 free_pcp:1073 free_cma:0
20:02:57 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)
r0 = fork()
ptrace$cont(0x20, r0, 0x900, 0x6)

20:02:57 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r4, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r5, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:02:57 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
mlockall(0x3)

[ 2780.085484] Node 0 active_anon:645496kB inactive_anon:1041604kB active_file:396kB inactive_file:1876kB unevictable:156432kB isolated(anon):0kB isolated(file):0kB mapped:137124kB dirty:12kB writeback:0kB shmem:39872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2780.258080] Node 1 active_anon:171800kB inactive_anon:3385788kB active_file:2404kB inactive_file:2656kB unevictable:33684kB isolated(anon):0kB isolated(file):128kB mapped:92504kB dirty:44kB writeback:0kB shmem:20792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2780.430763] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2780.544033] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2780.570064] Node 0 DMA32 free:35996kB min:35996kB low:44992kB high:53988kB active_anon:645172kB inactive_anon:1038160kB active_file:120kB inactive_file:148kB unevictable:159456kB writepending:12kB present:3129332kB managed:2763456kB mlocked:159460kB kernel_stack:19872kB pagetables:47580kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[ 2780.667252] lowmem_reserve[]: 0 0 1 1 1
[ 2780.680468] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2780.768613] lowmem_reserve[]: 0 0 0 0 0
[ 2780.787494] Node 1 Normal free:53732kB min:53876kB low:67344kB high:80812kB active_anon:171600kB inactive_anon:3385680kB active_file:168kB inactive_file:0kB unevictable:39028kB writepending:44kB present:4194304kB managed:4128248kB mlocked:39028kB kernel_stack:49600kB pagetables:152080kB bounce:0kB free_pcp:1512kB local_pcp:260kB free_cma:0kB
[ 2780.863410] lowmem_reserve[]: 0 0 0 0 0
[ 2780.874482] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2781.020522] Node 0 DMA32: 4*4kB (U) 47*8kB (UM) 1324*16kB (U) 451*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36008kB
[ 2781.093331] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2781.126518] Node 1 Normal: 914*4kB (UM) 461*8kB (UME) 805*16kB (UME) 659*32kB (ME) 180*64kB (UM) 21*128kB (UME) 6*256kB (UM) 15*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 64736kB
[ 2781.186952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2781.197476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2781.206457] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2781.227698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2781.236392] 20576 total pagecache pages
[ 2781.283403] 0 pages in swap cache
[ 2781.286920] Swap cache stats: add 0, delete 0, find 0/0
20:02:59 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r4, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r5, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:02:59 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2781.326655] Free swap  = 0kB
[ 2781.329783] Total swap = 0kB
[ 2781.332806] 2097051 pages RAM
[ 2781.335906] 0 pages HighMem/MovableOnly
[ 2781.374497] 369648 pages reserved
[ 2781.388341] 0 pages cma reserved
[ 2781.407664] Out of memory (oom_kill_allocating_task): Kill process 9763 (syz-executor.4) score 0 or sacrifice child
[ 2781.457707] Killed process 9763 (syz-executor.4) total-vm:93252kB, anon-rss:7980kB, file-rss:40196kB, shmem-rss:0kB
[ 2781.489922] oom_reaper: reaped process 9763 (syz-executor.4), now anon-rss:7980kB, file-rss:40192kB, shmem-rss:0kB
[ 2782.206851] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2782.294097] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 2782.335893] CPU: 1 PID: 9777 Comm: syz-executor.2 Not tainted 4.19.202-syzkaller #0
[ 2782.343726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2782.353171] Call Trace:
[ 2782.355767]  dump_stack+0x1fc/0x2ef
[ 2782.359402]  dump_header+0x15d/0xc3f
[ 2782.363127]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2782.368238]  ? ___ratelimit+0x319/0x590
[ 2782.372222]  oom_kill_process.cold+0x10/0x692
[ 2782.376727]  ? check_preemption_disabled+0x41/0x280
[ 2782.381754]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2782.387048]  out_of_memory+0x1072/0x1390
[ 2782.391124]  ? oom_killer_disable+0x270/0x270
[ 2782.395627]  ? mutex_trylock+0x15f/0x1a0
[ 2782.399704]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2782.404571]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2782.409418]  ? __lock_acquire+0x6de/0x3ff0
[ 2782.413670]  ? mark_held_locks+0xf0/0xf0
[ 2782.417751]  alloc_pages_vma+0xf2/0x780
[ 2782.421739]  do_anonymous_page+0x7c2/0x1be0
[ 2782.426081]  ? __pte_alloc+0x340/0x340
[ 2782.429976]  ? __put_compound_page+0xc0/0xc0
[ 2782.434389]  ? mark_held_locks+0xf0/0xf0
[ 2782.438458]  __handle_mm_fault+0x227a/0x41c0
[ 2782.442870]  ? vm_insert_page+0x9c0/0x9c0
[ 2782.447035]  ? check_preemption_disabled+0x41/0x280
[ 2782.452061]  handle_mm_fault+0x436/0xb10
[ 2782.456136]  __get_user_pages+0x6f0/0x1710
[ 2782.460416]  ? follow_page_mask+0x1d00/0x1d00
[ 2782.464922]  ? check_preemption_disabled+0x41/0x280
[ 2782.469949]  populate_vma_page_range+0x200/0x290
[ 2782.474718]  __mm_populate+0x1ea/0x350
[ 2782.478616]  ? populate_vma_page_range+0x290/0x290
[ 2782.483550]  ? do_mlock+0x6b0/0x6b0
[ 2782.487267]  ? security_capable+0x8f/0xc0
[ 2782.491427]  __se_sys_mlockall+0x362/0x4e0
[ 2782.495668]  do_syscall_64+0xf9/0x620
[ 2782.499482]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2782.504671] RIP: 0033:0x4665e9
[ 2782.507875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2782.526785] RSP: 002b:00007f8244f71188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2782.534537] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2782.541817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2782.549090] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2782.556372] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2782.563651] R13: 00007ffc2dc04a3f R14: 00007f8244f71300 R15: 0000000000022000
[ 2782.915587] Mem-Info:
[ 2782.918580] active_anon:204316 inactive_anon:1106876 isolated_anon:0
[ 2782.918580]  active_file:20 inactive_file:22 isolated_file:0
[ 2782.918580]  unevictable:50393 dirty:0 writeback:0 unstable:0
[ 2782.918580]  slab_reclaimable:17355 slab_unreclaimable:147347
[ 2782.918580]  mapped:56453 shmem:15189 pagetables:50004 bounce:0
[ 2782.918580]  free:25119 free_pcp:474 free_cma:0
[ 2782.955778] Node 0 active_anon:645692kB inactive_anon:1041688kB active_file:52kB inactive_file:104kB unevictable:161224kB isolated(anon):0kB isolated(file):0kB mapped:136984kB dirty:0kB writeback:0kB shmem:39960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2782.986065] Node 1 active_anon:171572kB inactive_anon:3385816kB active_file:28kB inactive_file:0kB unevictable:40348kB isolated(anon):0kB isolated(file):0kB mapped:88828kB dirty:0kB writeback:0kB shmem:20796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2783.014221] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2783.197562] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2783.202618] Node 0 DMA32 free:36112kB min:35996kB low:44992kB high:53988kB active_anon:645368kB inactive_anon:1038336kB active_file:556kB inactive_file:1080kB unevictable:160416kB writepending:0kB present:3129332kB managed:2763456kB mlocked:160288kB kernel_stack:19968kB pagetables:47884kB bounce:0kB free_pcp:1048kB local_pcp:576kB free_cma:0kB
[ 2783.277540] lowmem_reserve[]: 0 0 1 1 1
[ 2783.281558] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2783.409657] lowmem_reserve[]: 0 0 0 0 0
[ 2783.414507] Node 1 Normal free:62464kB min:53876kB low:67344kB high:80812kB active_anon:171572kB inactive_anon:3397408kB active_file:1388kB inactive_file:896kB unevictable:16660kB writepending:0kB present:4194304kB managed:4128248kB mlocked:16608kB kernel_stack:49536kB pagetables:151876kB bounce:0kB free_pcp:1500kB local_pcp:452kB free_cma:0kB
[ 2783.486717] lowmem_reserve[]: 0 0 0 0 0
[ 2783.493687] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2783.564828] Node 0 DMA32: 635*4kB (UM) 692*8kB (UM) 1360*16kB (UME) 446*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44172kB
20:03:01 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:01 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:03:01 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)

[ 2783.607492] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2783.638307] Node 1 Normal: 0*4kB 1006*8kB (ME) 917*16kB (UME) 657*32kB (UME) 181*64kB (UM) 20*128kB (ME) 5*256kB (M) 14*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 66336kB
[ 2783.703315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2783.777616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2783.832521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2783.851285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2783.909036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2783.967814] 20534 total pagecache pages
[ 2783.989716] 0 pages in swap cache
[ 2784.007100] Swap cache stats: add 0, delete 0, find 0/0
[ 2784.027308] Free swap  = 0kB
[ 2784.045538] Total swap = 0kB
[ 2784.052110] 2097051 pages RAM
[ 2784.058940] 0 pages HighMem/MovableOnly
[ 2784.074028] 369648 pages reserved
[ 2784.082189] 0 pages cma reserved
[ 2784.093829] Out of memory (oom_kill_allocating_task): Kill process 9777 (syz-executor.2) score 0 or sacrifice child
[ 2784.123678] Killed process 9777 (syz-executor.2) total-vm:93252kB, anon-rss:14280kB, file-rss:40200kB, shmem-rss:0kB
[ 2784.136319] oom_reaper: reaped process 9777 (syz-executor.2), now anon-rss:14280kB, file-rss:40196kB, shmem-rss:0kB
20:03:02 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
mlockall(0x3)
mlockall(0x3)

20:03:02 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2785.752476] syz-executor.5 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2785.860756] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 2785.883754] CPU: 1 PID: 9794 Comm: syz-executor.5 Not tainted 4.19.202-syzkaller #0
[ 2785.891573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2785.900928] Call Trace:
[ 2785.903533]  dump_stack+0x1fc/0x2ef
[ 2785.907168]  dump_header+0x15d/0xc3f
[ 2785.910892]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2785.915999]  ? ___ratelimit+0x319/0x590
[ 2785.919981]  oom_kill_process.cold+0x10/0x692
[ 2785.924483]  ? check_preemption_disabled+0x41/0x280
[ 2785.929507]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2785.934837]  out_of_memory+0x1072/0x1390
[ 2785.939029]  ? oom_killer_disable+0x270/0x270
[ 2785.943520]  ? mutex_trylock+0x15f/0x1a0
[ 2785.947583]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2785.952427]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2785.957529]  ? __update_load_avg_se+0x5ec/0xa00
[ 2785.962201]  alloc_pages_vma+0xf2/0x780
[ 2785.966240]  do_anonymous_page+0x7c2/0x1be0
[ 2785.970554]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 2785.975124]  ? __pte_alloc+0x340/0x340
[ 2785.979003]  ? finish_task_switch+0x118/0x760
[ 2785.983491]  ? switch_mm_irqs_off+0x764/0x1340
[ 2785.988070]  ? mark_held_locks+0xf0/0xf0
[ 2785.992141]  __handle_mm_fault+0x227a/0x41c0
[ 2785.996553]  ? vm_insert_page+0x9c0/0x9c0
[ 2786.000723]  ? check_preemption_disabled+0x41/0x280
[ 2786.005748]  handle_mm_fault+0x436/0xb10
[ 2786.011794]  __get_user_pages+0x6f0/0x1710
[ 2786.016023]  ? follow_page_mask+0x1d00/0x1d00
[ 2786.020523]  ? __fdget+0x1a0/0x230
[ 2786.024060]  populate_vma_page_range+0x200/0x290
[ 2786.028819]  __mm_populate+0x1ea/0x350
[ 2786.032702]  ? populate_vma_page_range+0x290/0x290
[ 2786.037622]  ? do_mlock+0x6b0/0x6b0
[ 2786.041248]  ? security_capable+0x8f/0xc0
[ 2786.045402]  __se_sys_mlockall+0x362/0x4e0
[ 2786.049627]  do_syscall_64+0xf9/0x620
[ 2786.053419]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2786.058601] RIP: 0033:0x4665e9
[ 2786.061807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2786.080702] RSP: 002b:00007ffad19b4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2786.088420] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2786.095683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2786.102942] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2786.110199] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2786.117464] R13: 00007fff2c0d6aaf R14: 00007ffad19b4300 R15: 0000000000022000
[ 2786.130676] Mem-Info:
[ 2786.134287] active_anon:204355 inactive_anon:1106875 isolated_anon:0
[ 2786.134287]  active_file:2 inactive_file:12 isolated_file:4
[ 2786.134287]  unevictable:50574 dirty:0 writeback:0 unstable:0
[ 2786.134287]  slab_reclaimable:17382 slab_unreclaimable:147222
[ 2786.134287]  mapped:57030 shmem:15189 pagetables:50029 bounce:0
[ 2786.134287]  free:24920 free_pcp:314 free_cma:0
[ 2786.168433] Node 0 active_anon:645760kB inactive_anon:1041692kB active_file:4kB inactive_file:48kB unevictable:165108kB isolated(anon):0kB isolated(file):16kB mapped:137088kB dirty:0kB writeback:0kB shmem:39964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2786.197104] Node 1 active_anon:171660kB inactive_anon:3385808kB active_file:4kB inactive_file:0kB unevictable:37188kB isolated(anon):0kB isolated(file):0kB mapped:91032kB dirty:0kB writeback:0kB shmem:20792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2786.224827] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2786.256229] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2786.262007] Node 0 DMA32 free:35960kB min:35996kB low:44992kB high:53988kB active_anon:645436kB inactive_anon:1038340kB active_file:0kB inactive_file:280kB unevictable:164908kB writepending:0kB present:3129332kB managed:2763456kB mlocked:164892kB kernel_stack:20128kB pagetables:47864kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2786.292013] lowmem_reserve[]: 0 0 1 1 1
[ 2786.295987] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2786.322000] lowmem_reserve[]: 0 0 0 0 0
[ 2786.325989] Node 1 Normal free:53840kB min:53876kB low:67344kB high:80812kB active_anon:171660kB inactive_anon:3385808kB active_file:4kB inactive_file:0kB unevictable:37188kB writepending:0kB present:4194304kB managed:4128248kB mlocked:37188kB kernel_stack:49600kB pagetables:151996kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2786.357135] lowmem_reserve[]: 0 0 0 0 0
[ 2786.361179] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2786.377984] Node 0 DMA32: 11*4kB (UM) 77*8kB (UM) 1343*16kB (UM) 435*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36068kB
[ 2786.392015] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2786.402908] Node 1 Normal: 146*4kB (UME) 9*8kB (UM) 815*16kB (UME) 656*32kB (UME) 182*64kB (UM) 19*128kB (ME) 4*256kB (UM) 8*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53888kB
[ 2786.418484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2786.427485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2786.436103] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2786.446450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2786.455072] 19724 total pagecache pages
[ 2786.459108] 0 pages in swap cache
[ 2786.462553] Swap cache stats: add 0, delete 0, find 0/0
[ 2786.467945] Free swap  = 0kB
[ 2786.471038] Total swap = 0kB
[ 2786.474062] 2097051 pages RAM
[ 2786.477153] 0 pages HighMem/MovableOnly
[ 2786.481175] 369648 pages reserved
[ 2786.484616] 0 pages cma reserved
[ 2786.488019] Out of memory (oom_kill_allocating_task): Kill process 9794 (syz-executor.5) score 0 or sacrifice child
[ 2786.499602] Killed process 9789 (syz-executor.5) total-vm:93384kB, anon-rss:16504kB, file-rss:40196kB, shmem-rss:0kB
[ 2786.512053] oom_reaper: reaped process 9789 (syz-executor.5), now anon-rss:16564kB, file-rss:40192kB, shmem-rss:0kB
20:03:04 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r4, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r5, @ANYBLOB="f8c00180080003000301000008000240070000000800030005000000080002000100000054e2fa4501f3e94fcb8fed41de9dd0c889c763e7505c7fd1f769cd2ae6a1db6719b8bedfaeefee870023bedc1274df26cbe6b710ed57f6ff45240435e825af05d02f600a354ab813238a963d48210c911da92959adc79dd997380c3633fc3e877275a161ea17c2b6124cc758bb3e3bc8e660aa6755c50db0b6618e00cbcef799ebc1d35b3ec8c3e9ed00b0264a669ac8cca995068dd481de560aed03630281dee7c258ea3d7416ddc570ab10be7d7b9b620db0be71f15998f0c6975a443fd9e6e97c8e3bc61e16414030ca7b34af48c1f40a9b6df00b9303e2cdb3e4d9be291bd40d32ebdc42a45293da5b8bbba5cc7095ad8a9d105070cc78c1a6d774113b5356a961c5573917a1029aa63bf2fdfc2f57ab256a4bb88ad26efc1fe63b3619bdc5c2fa481189dd001bfe3b32cd9e1c4a0650d4d140e9ea4a77f2dbbd38d98a072e46a30c8b279acc3ce8c9cfae3b1bcd497fe13d09fe695c0acd35fafa023af9b75198aac0d518a49ef09ec967330d00"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:03:04 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:04 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r4, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r5, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:03:04 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2788.527722] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2788.550657] systemd-udevd cpuset=/ mems_allowed=0-1
[ 2788.568157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2788.600455] CPU: 1 PID: 9820 Comm: systemd-udevd Not tainted 4.19.202-syzkaller #0
[ 2788.608177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2788.617563] Call Trace:
[ 2788.620156]  dump_stack+0x1fc/0x2ef
[ 2788.623789]  dump_header+0x15d/0xc3f
[ 2788.627515]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2788.632626]  ? ___ratelimit+0x319/0x590
[ 2788.636615]  oom_kill_process.cold+0x10/0x692
[ 2788.641115]  ? check_preemption_disabled+0x41/0x280
[ 2788.646135]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2788.651416]  out_of_memory+0x1072/0x1390
[ 2788.655483]  ? oom_killer_disable+0x270/0x270
[ 2788.660070]  ? mutex_trylock+0x15f/0x1a0
[ 2788.664137]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2788.668987]  ? find_get_entry+0x4cd/0x8a0
[ 2788.673189]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2788.678059]  alloc_pages_current+0x193/0x2a0
[ 2788.682467]  filemap_fault+0x146e/0x2180
[ 2788.686541]  ext4_filemap_fault+0x84/0xb0
[ 2788.690695]  __do_fault+0x10b/0x4b0
[ 2788.694319]  ? do_raw_spin_unlock+0x171/0x230
[ 2788.698866]  __handle_mm_fault+0x273b/0x41c0
[ 2788.703274]  ? vm_insert_page+0x9c0/0x9c0
[ 2788.707418]  ? vfs_statx+0x182/0x210
[ 2788.711147]  ? check_preemption_disabled+0x41/0x280
[ 2788.716170]  handle_mm_fault+0x436/0xb10
[ 2788.720239]  __do_page_fault+0x68e/0xd60
[ 2788.724306]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2788.729320]  ? spurious_fault+0x840/0x840
[ 2788.733469]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2788.738320]  ? page_fault+0x8/0x30
[ 2788.741861]  page_fault+0x1e/0x30
[ 2788.745309] RIP: 0033:0x55cd7a9458d0
[ 2788.749022] Code: Bad RIP value.
[ 2788.752378] RSP: 002b:00007ffd48ffe098 EFLAGS: 00010206
[ 2788.757738] RAX: 0000000000000000 RBX: 000055cd7b9da730 RCX: 0000000000000000
[ 2788.765004] RDX: 00007ffd48ffe0e0 RSI: 000055cd7b91245c RDI: 000055cd7b9da730
[ 2788.772271] RBP: 000055cd7b91245c R08: 0d0964289eff72e3 R09: 00000000000000f0
[ 2788.779535] R10: 8468b85228020898 R11: 62554b13bf18c8b0 R12: 00007ffd48ffe0e0
[ 2788.786805] R13: 000055cd7b8fb8a0 R14: 000055cd7b91245c R15: 000055cd7b8faca0
[ 2789.843035] Mem-Info:
[ 2789.845720] active_anon:204437 inactive_anon:1107624 isolated_anon:0
[ 2789.845720]  active_file:19 inactive_file:1028 isolated_file:15
[ 2789.845720]  unevictable:46670 dirty:5 writeback:0 unstable:0
[ 2789.845720]  slab_reclaimable:17371 slab_unreclaimable:149233
[ 2789.845720]  mapped:57214 shmem:15189 pagetables:50073 bounce:0
[ 2789.845720]  free:25127 free_pcp:77 free_cma:0
[ 2789.885454] Node 0 active_anon:645964kB inactive_anon:1049888kB active_file:3120kB inactive_file:56kB unevictable:150232kB isolated(anon):0kB isolated(file):60kB mapped:138812kB dirty:16kB writeback:0kB shmem:39964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2789.919030] Node 1 active_anon:171784kB inactive_anon:3385872kB active_file:960kB inactive_file:4kB unevictable:11432kB isolated(anon):0kB isolated(file):0kB mapped:85908kB dirty:4kB writeback:0kB shmem:20792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2789.949246] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2789.977283] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2789.982976] Node 0 DMA32 free:43940kB min:35996kB low:44992kB high:53988kB active_anon:645640kB inactive_anon:1038416kB active_file:3172kB inactive_file:32kB unevictable:150248kB writepending:16kB present:3129332kB managed:2763456kB mlocked:150248kB kernel_stack:19968kB pagetables:47756kB bounce:0kB free_pcp:1644kB local_pcp:1644kB free_cma:0kB
[ 2790.014560] lowmem_reserve[]: 0 0 1 1 1
[ 2790.019266] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2790.045988] lowmem_reserve[]: 0 0 0 0 0
[ 2790.050569] Node 1 Normal free:71204kB min:53876kB low:67344kB high:80812kB active_anon:171784kB inactive_anon:3385872kB active_file:420kB inactive_file:1004kB unevictable:11432kB writepending:4kB present:4194304kB managed:4128248kB mlocked:11432kB kernel_stack:49632kB pagetables:152136kB bounce:0kB free_pcp:932kB local_pcp:612kB free_cma:0kB
[ 2790.083943] lowmem_reserve[]: 0 0 0 0 0
[ 2790.132420] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
20:03:07 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
mlockall(0x3)
mlockall(0x3)

20:03:08 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2790.188101] Node 0 DMA32: 43*4kB (UME) 3*8kB (M) 1329*16kB (UM) 442*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35604kB
[ 2790.225747] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2790.258984] Node 1 Normal: 2*4kB (ME) 720*8kB (M) 1239*16kB (UME) 634*32kB (UME) 186*64kB (M) 14*128kB (ME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 59832kB
[ 2790.375602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2790.442337] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2790.505061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2790.567239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
20:03:08 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:08 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r4, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r5, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:03:08 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r4, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r5, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:03:08 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2790.662522] 23509 total pagecache pages
[ 2790.688121] 0 pages in swap cache
[ 2790.702292] Swap cache stats: add 0, delete 0, find 0/0
[ 2790.742184] Free swap  = 0kB
[ 2790.776976] Total swap = 0kB
[ 2790.796000] 2097051 pages RAM
[ 2790.843403] 0 pages HighMem/MovableOnly
[ 2790.853174] 369648 pages reserved
[ 2790.856638] 0 pages cma reserved
[ 2790.926902] Out of memory (oom_kill_allocating_task): Kill process 9820 (systemd-udevd) score 0 or sacrifice child
[ 2790.961787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2790.992652] Killed process 9820 (systemd-udevd) total-vm:43944kB, anon-rss:1332kB, file-rss:0kB, shmem-rss:0kB
[ 2791.031649] oom_reaper: reaped process 9820 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 2791.367878] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2791.381050] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 2791.391711] CPU: 1 PID: 9827 Comm: syz-executor.2 Not tainted 4.19.202-syzkaller #0
[ 2791.399520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2791.408878] Call Trace:
[ 2791.412429]  dump_stack+0x1fc/0x2ef
[ 2791.417289]  dump_header+0x15d/0xc3f
[ 2791.421009]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2791.426108]  ? ___ratelimit+0x319/0x590
[ 2791.430263]  oom_kill_process.cold+0x10/0x692
[ 2791.434853]  ? check_preemption_disabled+0x41/0x280
[ 2791.439874]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2791.445154]  out_of_memory+0x1072/0x1390
[ 2791.449227]  ? oom_killer_disable+0x270/0x270
[ 2791.453731]  ? mutex_trylock+0x15f/0x1a0
[ 2791.457802]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2791.462667]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2791.467512]  ? __lock_acquire+0x6de/0x3ff0
[ 2791.471757]  ? mark_held_locks+0xf0/0xf0
[ 2791.475830]  alloc_pages_vma+0xf2/0x780
[ 2791.479813]  do_anonymous_page+0x7c2/0x1be0
[ 2791.484149]  ? __pte_alloc+0x340/0x340
[ 2791.488035]  ? __put_compound_page+0xc0/0xc0
[ 2791.492448]  ? mark_held_locks+0xf0/0xf0
[ 2791.496516]  __handle_mm_fault+0x227a/0x41c0
[ 2791.500928]  ? vm_insert_page+0x9c0/0x9c0
[ 2791.505093]  ? check_preemption_disabled+0x41/0x280
[ 2791.510120]  handle_mm_fault+0x436/0xb10
[ 2791.514194]  __get_user_pages+0x6f0/0x1710
[ 2791.518444]  ? follow_page_mask+0x1d00/0x1d00
[ 2791.522950]  ? check_preemption_disabled+0x41/0x280
[ 2791.527987]  populate_vma_page_range+0x200/0x290
[ 2791.532755]  __mm_populate+0x1ea/0x350
[ 2791.536653]  ? populate_vma_page_range+0x290/0x290
[ 2791.541687]  ? do_mlock+0x6b0/0x6b0
[ 2791.545321]  ? security_capable+0x8f/0xc0
[ 2791.549478]  __se_sys_mlockall+0x362/0x4e0
[ 2791.553737]  do_syscall_64+0xf9/0x620
[ 2791.557548]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2791.562740] RIP: 0033:0x4665e9
[ 2791.565953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2791.584897] RSP: 002b:00007f8244f71188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2791.592609] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2791.599877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2791.607144] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2791.614415] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2791.621684] R13: 00007ffc2dc04a3f R14: 00007f8244f71300 R15: 0000000000022000
[ 2791.832306] Mem-Info:
[ 2791.834880] active_anon:204481 inactive_anon:1106873 isolated_anon:0
[ 2791.834880]  active_file:4 inactive_file:0 isolated_file:1
[ 2791.834880]  unevictable:47734 dirty:17 writeback:6 unstable:0
[ 2791.834880]  slab_reclaimable:17338 slab_unreclaimable:149928
[ 2791.834880]  mapped:58517 shmem:15189 pagetables:50117 bounce:0
[ 2791.834880]  free:25183 free_pcp:0 free_cma:0
[ 2791.871368] Node 0 active_anon:646112kB inactive_anon:1041684kB active_file:28kB inactive_file:0kB unevictable:161612kB isolated(anon):0kB isolated(file):4kB mapped:143340kB dirty:16kB writeback:20kB shmem:39960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2791.900867] Node 1 active_anon:171812kB inactive_anon:3385808kB active_file:0kB inactive_file:0kB unevictable:29324kB isolated(anon):0kB isolated(file):0kB mapped:90728kB dirty:52kB writeback:4kB shmem:20796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2791.928895] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2791.956986] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2791.962095] Node 0 DMA32 free:35960kB min:35996kB low:44992kB high:53988kB active_anon:645748kB inactive_anon:1038332kB active_file:28kB inactive_file:28kB unevictable:161628kB writepending:0kB present:3129332kB managed:2763456kB mlocked:161628kB kernel_stack:20064kB pagetables:47964kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2791.994762] lowmem_reserve[]: 0 0 1 1 1
[ 2791.998843] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2792.024974] lowmem_reserve[]: 0 0 0 0 0
[ 2792.029756] Node 1 Normal free:53760kB min:53876kB low:67344kB high:80812kB active_anon:171800kB inactive_anon:3385808kB active_file:20kB inactive_file:120kB unevictable:29332kB writepending:0kB present:4194304kB managed:4128248kB mlocked:29332kB kernel_stack:49664kB pagetables:152180kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
[ 2792.060098] lowmem_reserve[]: 0 0 0 0 0
[ 2792.064263] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2792.101332] Node 0 DMA32: 0*4kB 99*8kB (UM) 1322*16kB (U) 438*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35960kB
[ 2792.114126] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2792.124917] Node 1 Normal: 77*4kB (UE) 5*8kB (U) 1244*16kB (UM) 657*32kB (UM) 182*64kB (UM) 7*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53820kB
[ 2792.139456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2792.148363] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2792.157618] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2792.166459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2792.176071] 21111 total pagecache pages
[ 2792.180115] 0 pages in swap cache
[ 2792.183560] Swap cache stats: add 0, delete 0, find 0/0
[ 2792.188975] Free swap  = 0kB
[ 2792.191992] Total swap = 0kB
[ 2792.195003] 2097051 pages RAM
[ 2792.198190] 0 pages HighMem/MovableOnly
[ 2792.202163] 369648 pages reserved
[ 2792.205609] 0 pages cma reserved
[ 2792.209062] Out of memory (oom_kill_allocating_task): Kill process 9827 (syz-executor.2) score 0 or sacrifice child
[ 2792.219851] Killed process 9825 (syz-executor.2) total-vm:93252kB, anon-rss:9272kB, file-rss:39232kB, shmem-rss:0kB
[ 2792.231749] oom_reaper: reaped process 9825 (syz-executor.2), now anon-rss:9316kB, file-rss:40192kB, shmem-rss:0kB
[ 2792.940739] systemd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2793.024318] systemd cpuset=/ mems_allowed=0-1
[ 2793.064864] CPU: 1 PID: 1 Comm: systemd Not tainted 4.19.202-syzkaller #0
[ 2793.071814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2793.081169] Call Trace:
[ 2793.083768]  dump_stack+0x1fc/0x2ef
[ 2793.087406]  dump_header+0x15d/0xc3f
[ 2793.091126]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2793.096230]  ? ___ratelimit+0x319/0x590
[ 2793.100209]  oom_kill_process.cold+0x10/0x692
[ 2793.104706]  ? lock_downgrade+0x720/0x720
[ 2793.108857]  ? check_preemption_disabled+0x41/0x280
[ 2793.113877]  out_of_memory+0x34d/0x1390
[ 2793.117860]  ? oom_killer_disable+0x270/0x270
[ 2793.122370]  ? mutex_trylock+0x15f/0x1a0
[ 2793.126444]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2793.131296]  ? find_get_entry+0x4cd/0x8a0
[ 2793.135460]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2793.140329]  alloc_pages_current+0x193/0x2a0
[ 2793.144750]  filemap_fault+0x146e/0x2180
[ 2793.148828]  ext4_filemap_fault+0x84/0xb0
[ 2793.152974]  __do_fault+0x10b/0x4b0
[ 2793.156601]  __handle_mm_fault+0x273b/0x41c0
[ 2793.161012]  ? vm_insert_page+0x9c0/0x9c0
[ 2793.165160]  ? fsnotify+0x84e/0xe10
[ 2793.168813]  ? check_preemption_disabled+0x41/0x280
[ 2793.173833]  handle_mm_fault+0x436/0xb10
[ 2793.177898]  __do_page_fault+0x68e/0xd60
[ 2793.181966]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2793.186984]  ? spurious_fault+0x840/0x840
[ 2793.191133]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2793.195976]  ? page_fault+0x8/0x30
[ 2793.199520]  page_fault+0x1e/0x30
[ 2793.202975] RIP: 0033:0x55b71d822451
[ 2793.206689] Code: Bad RIP value.
[ 2793.210049] RSP: 002b:00007fff99662ab0 EFLAGS: 00010206
[ 2793.215421] RAX: 0000000000000001 RBX: 0000000000000007 RCX: 2020202020202020
[ 2793.222691] RDX: 0000000000000005 RSI: 0000000000000020 RDI: 00007fff99662af0
[ 2793.229958] RBP: 0000000000000005 R08: 0000000000000005 R09: 000055b71da00270
[ 2793.237227] R10: 0000000000000078 R11: 00007f4194e05140 R12: 0000000000000001
[ 2793.244496] R13: 00007fff99662af5 R14: 000055b71d9fc0d0 R15: 000055b71d9929a0
[ 2794.382244] Mem-Info:
[ 2794.386564] active_anon:204415 inactive_anon:1107999 isolated_anon:0
[ 2794.386564]  active_file:1915 inactive_file:1402 isolated_file:97
[ 2794.386564]  unevictable:41078 dirty:0 writeback:0 unstable:0
[ 2794.386564]  slab_reclaimable:17327 slab_unreclaimable:149850
[ 2794.386564]  mapped:56148 shmem:15189 pagetables:50024 bounce:0
[ 2794.386564]  free:26803 free_pcp:667 free_cma:0
[ 2794.429268] Node 0 active_anon:646004kB inactive_anon:1041784kB active_file:7328kB inactive_file:1336kB unevictable:148928kB isolated(anon):0kB isolated(file):260kB mapped:134504kB dirty:0kB writeback:0kB shmem:39960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2794.462552] Node 1 active_anon:171656kB inactive_anon:3385912kB active_file:392kB inactive_file:344kB unevictable:14384kB isolated(anon):0kB isolated(file):128kB mapped:85888kB dirty:0kB writeback:0kB shmem:20796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2794.492396] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2794.531900] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2794.537630] Node 0 DMA32 free:37652kB min:35996kB low:44992kB high:53988kB active_anon:645680kB inactive_anon:1038836kB active_file:7084kB inactive_file:2544kB unevictable:149424kB writepending:0kB present:3129332kB managed:2763456kB mlocked:149404kB kernel_stack:19968kB pagetables:47808kB bounce:0kB free_pcp:1548kB local_pcp:264kB free_cma:0kB
[ 2794.570306] lowmem_reserve[]: 0 0 1 1 1
[ 2794.578103] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
20:03:12 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
mlockall(0x3)
mlockall(0x3)

20:03:12 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r4, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r5, @ANYBLOB="f8c00180080003000301000008000240070000000800030005000000080002000100000054e2fa4501f3e94fcb8fed41de9dd0c889c763e7505c7fd1f769cd2ae6a1db6719b8bedfaeefee870023bedc1274df26cbe6b710ed57f6ff45240435e825af05d02f600a354ab813238a963d48210c911da92959adc79dd997380c3633fc3e877275a161ea17c2b6124cc758bb3e3bc8e660aa6755c50db0b6618e00cbcef799ebc1d35b3ec8c3e9ed00b0264a669ac8cca995068dd481de560aed03630281dee7c258ea3d7416ddc570ab10be7d7b9b620db0be71f15998f0c6975a443fd9e6e97c8e3bc61e16414030ca7b34af48c1f40a9b6df00b9303e2cdb3e4d9be291bd40d32ebdc42a45293da5b8bbba5cc7095ad8a9d105070cc78c1a6d774113b5356a961c5573917a1029aa63bf2fdfc2f57ab256a4bb88ad26efc1fe63b3619bdc5c2fa481189dd001bfe3b32cd9e1c4a0650d4d140e9ea4a77f2dbbd38d98a072e46a30c8b279acc3ce8c9cfae3b1bcd497fe13d09fe695c0acd35fafa023af9b75198aac0d518a49ef09ec967330d00"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:03:12 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:03:12 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2794.684638] lowmem_reserve[]: 0 0 0 0 0
[ 2794.697846] Node 1 Normal free:65668kB min:53876kB low:67344kB high:80812kB active_anon:171656kB inactive_anon:3386048kB active_file:152kB inactive_file:996kB unevictable:14728kB writepending:0kB present:4194304kB managed:4128248kB mlocked:14780kB kernel_stack:49440kB pagetables:152032kB bounce:0kB free_pcp:1624kB local_pcp:1572kB free_cma:0kB
[ 2794.844041] lowmem_reserve[]: 0 0 0 0 0
[ 2794.868417] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2794.991420] Node 0 DMA32: 101*4kB (UM) 40*8kB (UM) 1323*16kB (U) 439*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35940kB
[ 2795.080863] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
20:03:12 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:12 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r4, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r5, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2795.196067] Node 1 Normal: 6*4kB (UE) 458*8kB (M) 1448*16kB (M) 601*32kB (UM) 158*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56200kB
[ 2795.284763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2795.300646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2795.311661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2795.321840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2795.334405] 21123 total pagecache pages
[ 2795.339820] 0 pages in swap cache
[ 2795.355874] Swap cache stats: add 0, delete 0, find 0/0
[ 2795.384563] Free swap  = 0kB
[ 2795.393737] Total swap = 0kB
[ 2795.397421] 2097051 pages RAM
[ 2795.402555] 0 pages HighMem/MovableOnly
[ 2795.409309] 369648 pages reserved
[ 2795.413337] 0 pages cma reserved
[ 2795.419048] Out of memory: Kill process 8962 (syz-executor.1) score 1010 or sacrifice child
[ 2795.432059] Killed process 8962 (syz-executor.1) total-vm:93516kB, anon-rss:36900kB, file-rss:35064kB, shmem-rss:0kB
[ 2795.462880] oom_reaper: reaped process 8962 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[ 2796.647054] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2796.661558] syz-fuzzer cpuset=/ mems_allowed=0-1
[ 2796.668909] CPU: 1 PID: 8088 Comm: syz-fuzzer Not tainted 4.19.202-syzkaller #0
[ 2796.676369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2796.685718] Call Trace:
[ 2796.688402]  dump_stack+0x1fc/0x2ef
[ 2796.692039]  dump_header+0x15d/0xc3f
[ 2796.695756]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2796.700859]  ? ___ratelimit+0x319/0x590
[ 2796.704844]  oom_kill_process.cold+0x10/0x692
[ 2796.709346]  ? check_preemption_disabled+0x41/0x280
[ 2796.714365]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2796.719639]  out_of_memory+0x1072/0x1390
[ 2796.723706]  ? oom_killer_disable+0x270/0x270
[ 2796.728299]  ? mutex_trylock+0x15f/0x1a0
[ 2796.732373]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2796.737224]  ? find_get_entry+0x4cd/0x8a0
[ 2796.741379]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2796.746242]  alloc_pages_current+0x193/0x2a0
[ 2796.750652]  filemap_fault+0x146e/0x2180
[ 2796.754724]  ext4_filemap_fault+0x84/0xb0
[ 2796.760955]  __do_fault+0x10b/0x4b0
[ 2796.764674]  __handle_mm_fault+0x273b/0x41c0
[ 2796.769094]  ? vm_insert_page+0x9c0/0x9c0
[ 2796.773267]  ? __fget+0x356/0x510
[ 2796.776733]  ? check_preemption_disabled+0x41/0x280
[ 2796.781752]  handle_mm_fault+0x436/0xb10
[ 2796.785832]  __do_page_fault+0x68e/0xd60
[ 2796.789898]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2796.794911]  ? spurious_fault+0x840/0x840
[ 2796.799054]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2796.803901]  ? page_fault+0x8/0x30
[ 2796.807441]  page_fault+0x1e/0x30
[ 2796.810890] RIP: 0033:0x45756b
[ 2796.814080] Code: Bad RIP value.
[ 2796.817433] RSP: 002b:000000c000039d70 EFLAGS: 00010202
[ 2796.822793] RAX: 0000000000000000 RBX: 000000c0002701e8 RCX: 0000000000000000
[ 2796.830063] RDX: 00000000008ee4a0 RSI: 0000028b23c278f7 RDI: 000000c005c92680
[ 2796.837327] RBP: 000000c000039db8 R08: 0000000000000000 R09: 0000000000000003
[ 2796.844592] R10: 000002965fdfd6ed R11: 0000000000000001 R12: 0000028b47b4dc74
[ 2796.851870] R13: 0000000000000001 R14: 0000028b47b4dc74 R15: 0000000000000200
[ 2797.836027] Mem-Info:
[ 2797.843486] active_anon:204403 inactive_anon:1106819 isolated_anon:0
[ 2797.843486]  active_file:0 inactive_file:10 isolated_file:2
[ 2797.843486]  unevictable:48326 dirty:0 writeback:3 unstable:0
[ 2797.843486]  slab_reclaimable:17270 slab_unreclaimable:149692
[ 2797.843486]  mapped:57968 shmem:15188 pagetables:50038 bounce:0
[ 2797.843486]  free:25134 free_pcp:81 free_cma:0
[ 2797.878482] Node 0 active_anon:645892kB inactive_anon:1041692kB active_file:20kB inactive_file:0kB unevictable:168256kB isolated(anon):0kB isolated(file):8kB mapped:143276kB dirty:0kB writeback:12kB shmem:39964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2797.908642] Node 1 active_anon:171720kB inactive_anon:3385584kB active_file:0kB inactive_file:20kB unevictable:25048kB isolated(anon):0kB isolated(file):0kB mapped:88596kB dirty:0kB writeback:0kB shmem:20788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2797.936769] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2797.972528] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2797.977714] Node 0 DMA32 free:35976kB min:35996kB low:44992kB high:53988kB active_anon:645568kB inactive_anon:1038340kB active_file:92kB inactive_file:0kB unevictable:168276kB writepending:0kB present:3129332kB managed:2763456kB mlocked:168276kB kernel_stack:19968kB pagetables:47960kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2798.007704] lowmem_reserve[]: 0 0 1 1 1
[ 2798.012071] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2798.038156] lowmem_reserve[]: 0 0 0 0 0
[ 2798.042181] Node 1 Normal free:53764kB min:53876kB low:67344kB high:80812kB active_anon:171720kB inactive_anon:3385584kB active_file:0kB inactive_file:20kB unevictable:25048kB writepending:0kB present:4194304kB managed:4128248kB mlocked:25048kB kernel_stack:49568kB pagetables:151936kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2798.072129] lowmem_reserve[]: 0 0 0 0 0
[ 2798.076116] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2798.095897] Node 0 DMA32: 10*4kB (U) 58*8kB (UM) 1350*16kB (U) 443*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36280kB
[ 2798.109233] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2798.120440] Node 1 Normal: 236*4kB (UME) 77*8kB (UM) 1448*16kB (UM) 602*32kB (UM) 154*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53848kB
[ 2798.134735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2798.143655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2798.152494] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2798.161530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2798.170185] 20552 total pagecache pages
[ 2798.174195] 0 pages in swap cache
[ 2798.177738] Swap cache stats: add 0, delete 0, find 0/0
[ 2798.183093] Free swap  = 0kB
[ 2798.186099] Total swap = 0kB
[ 2798.189151] 2097051 pages RAM
[ 2798.192246] 0 pages HighMem/MovableOnly
[ 2798.196356] 369648 pages reserved
[ 2798.199801] 0 pages cma reserved
[ 2798.203159] Out of memory (oom_kill_allocating_task): Kill process 8088 (syz-fuzzer) score 0 or sacrifice child
[ 2798.214832] Killed process 9354 (syz-executor.4) total-vm:84924kB, anon-rss:60kB, file-rss:904kB, shmem-rss:0kB
[ 2798.307041] Bluetooth: hci0: command 0x0406 tx timeout
20:03:16 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
mlockall(0x3)

[ 2798.737336] systemd[1]: Started Journal Service.
20:03:16 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:16 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
mlockall(0x3)

20:03:16 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
mlockall(0x3)

20:03:17 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:18 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:03:18 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
mlockall(0x3)

[ 2801.969968] syz-executor.3 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000
[ 2802.003235] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 2802.041838] CPU: 0 PID: 9886 Comm: syz-executor.3 Not tainted 4.19.202-syzkaller #0
[ 2802.049659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2802.059021] Call Trace:
[ 2802.061642]  dump_stack+0x1fc/0x2ef
[ 2802.065273]  dump_header+0x15d/0xc3f
[ 2802.068993]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2802.074095]  ? ___ratelimit+0x319/0x590
[ 2802.078073]  oom_kill_process.cold+0x10/0x692
[ 2802.082665]  ? check_preemption_disabled+0x41/0x280
[ 2802.087694]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2802.093061]  out_of_memory+0x1072/0x1390
[ 2802.097129]  ? oom_killer_disable+0x270/0x270
[ 2802.101635]  ? mutex_trylock+0x15f/0x1a0
[ 2802.105701]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2802.110562]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2802.115408]  ? __update_load_avg_se+0x5ec/0xa00
[ 2802.120085]  ? __lock_acquire+0x6de/0x3ff0
[ 2802.124318]  alloc_pages_vma+0xf2/0x780
[ 2802.128323]  wp_page_copy+0x219/0x2c40
[ 2802.132222]  ? _vm_normal_page+0x132/0x510
[ 2802.136541]  ? follow_pte_pmd+0x60/0x60
[ 2802.140527]  do_wp_page+0x2d4/0x2210
[ 2802.144244]  ? finish_mkwrite_fault+0x640/0x640
[ 2802.148910]  ? __handle_mm_fault+0x15f6/0x41c0
[ 2802.153499]  ? mark_held_locks+0xf0/0xf0
[ 2802.157560]  __handle_mm_fault+0x258b/0x41c0
[ 2802.161991]  ? vm_insert_page+0x9c0/0x9c0
[ 2802.166140]  ? rt_mutex_futex_unlock+0xf0/0xf0
[ 2802.170754]  ? check_preemption_disabled+0x41/0x280
[ 2802.175766]  handle_mm_fault+0x436/0xb10
[ 2802.179858]  __do_page_fault+0x68e/0xd60
[ 2802.183905]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2802.188934]  ? spurious_fault+0x840/0x840
[ 2802.193060]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2802.197894]  ? page_fault+0x8/0x30
[ 2802.201422]  page_fault+0x1e/0x30
[ 2802.204864] RIP: 0033:0x4665fb
[ 2802.208048] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41
[ 2802.227028] RSP: 002b:00007ffd17fd89a8 EFLAGS: 00010213
[ 2802.232371] RAX: 000000000000006e RBX: 0000000000000032 RCX: ffffffffffffffbc
[ 2802.239618] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056c044
[ 2802.246867] RBP: 000000000056c044 R08: 000002ef1accaa60 R09: 0000000000000000
[ 2802.254118] R10: 00007ffd17fd8a80 R11: 0000000000000246 R12: 00000000002ac054
[ 2802.261371] R13: 00000000000003e8 R14: 000000000056bf80 R15: 00000000002ab94d
20:03:20 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
mlockall(0x3)

20:03:20 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:20 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
mlockall(0x3)

[ 2803.046075] Mem-Info:
[ 2803.048545] active_anon:204391 inactive_anon:1097581 isolated_anon:0
[ 2803.048545]  active_file:2690 inactive_file:3933 isolated_file:32
[ 2803.048545]  unevictable:54085 dirty:23 writeback:0 unstable:0
[ 2803.048545]  slab_reclaimable:17259 slab_unreclaimable:148129
[ 2803.048545]  mapped:51088 shmem:15185 pagetables:49990 bounce:0
[ 2803.048545]  free:31566 free_pcp:800 free_cma:0
[ 2803.206755] Node 0 active_anon:645880kB inactive_anon:1040084kB active_file:0kB inactive_file:108kB unevictable:177452kB isolated(anon):0kB isolated(file):0kB mapped:135976kB dirty:36kB writeback:0kB shmem:39964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2803.399960] Node 1 active_anon:171684kB inactive_anon:3350240kB active_file:5220kB inactive_file:5192kB unevictable:79888kB isolated(anon):0kB isolated(file):128kB mapped:74276kB dirty:56kB writeback:0kB shmem:20776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2803.553502] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2803.672905] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2803.678447] Node 0 DMA32 free:35500kB min:35996kB low:44992kB high:53988kB active_anon:645556kB inactive_anon:1046948kB active_file:2148kB inactive_file:1004kB unevictable:166364kB writepending:36kB present:3129332kB managed:2763456kB mlocked:166384kB kernel_stack:19904kB pagetables:47768kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB
20:03:21 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
mlockall(0x3)

[ 2803.875947] lowmem_reserve[]: 0 0 1 1 1
[ 2803.879958] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2804.073278] lowmem_reserve[]: 0 0 0 0 0
[ 2804.093114] Node 1 Normal free:54304kB min:53876kB low:67344kB high:80812kB active_anon:171692kB inactive_anon:3350364kB active_file:840kB inactive_file:1240kB unevictable:87324kB writepending:112kB present:4194304kB managed:4128248kB mlocked:87324kB kernel_stack:49504kB pagetables:151984kB bounce:0kB free_pcp:492kB local_pcp:296kB free_cma:0kB
[ 2804.186568] lowmem_reserve[]: 0 0 0 0 0
[ 2804.190595] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2804.251554] Node 0 DMA32: 55*4kB (U) 50*8kB (U) 1309*16kB (U) 451*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35996kB
[ 2804.283026] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2804.294043] Node 1 Normal: 1200*4kB (UME) 1284*8kB (UM) 180*16kB (UM) 525*32kB (UM) 243*64kB (UM) 13*128kB (U) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54016kB
[ 2804.311156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2804.328081] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2804.345749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2804.364892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2804.390281] 21369 total pagecache pages
[ 2804.402457] 0 pages in swap cache
[ 2804.409372] Swap cache stats: add 0, delete 0, find 0/0
[ 2804.420335] Free swap  = 0kB
[ 2804.427932] Total swap = 0kB
[ 2804.434354] 2097051 pages RAM
[ 2804.440912] 0 pages HighMem/MovableOnly
[ 2804.455139] 369648 pages reserved
[ 2804.464818] 0 pages cma reserved
[ 2804.478297] Out of memory (oom_kill_allocating_task): Kill process 9886 (syz-executor.3) score 0 or sacrifice child
[ 2804.511290] Killed process 9886 (syz-executor.3) total-vm:93384kB, anon-rss:28272kB, file-rss:44096kB, shmem-rss:0kB
[ 2804.535030] oom_reaper: reaped process 9886 (syz-executor.3), now anon-rss:28272kB, file-rss:44092kB, shmem-rss:0kB
[ 2804.998780] syz-executor.1 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000
[ 2805.079334] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 2805.112313] CPU: 0 PID: 9916 Comm: syz-executor.1 Not tainted 4.19.202-syzkaller #0
[ 2805.120140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2805.129582] Call Trace:
[ 2805.132186]  dump_stack+0x1fc/0x2ef
[ 2805.135819]  dump_header+0x15d/0xc3f
[ 2805.139633]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2805.144740]  ? ___ratelimit+0x319/0x590
[ 2805.148723]  oom_kill_process.cold+0x10/0x692
[ 2805.153227]  ? check_preemption_disabled+0x41/0x280
[ 2805.158259]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2805.163544]  out_of_memory+0x1072/0x1390
[ 2805.167616]  ? oom_killer_disable+0x270/0x270
[ 2805.172118]  ? mutex_trylock+0x15f/0x1a0
[ 2805.176190]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2805.181044]  ? find_get_entry+0x4cd/0x8a0
[ 2805.185212]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2805.190092]  alloc_pages_current+0x193/0x2a0
[ 2805.194518]  filemap_fault+0x146e/0x2180
[ 2805.198598]  ext4_filemap_fault+0x84/0xb0
[ 2805.202759]  __do_fault+0x10b/0x4b0
[ 2805.206391]  __handle_mm_fault+0x273b/0x41c0
[ 2805.210809]  ? vm_insert_page+0x9c0/0x9c0
[ 2805.214979]  ? check_preemption_disabled+0x41/0x280
[ 2805.220005]  handle_mm_fault+0x436/0xb10
[ 2805.224082]  __get_user_pages+0x6f0/0x1710
[ 2805.228344]  ? follow_page_mask+0x1d00/0x1d00
[ 2805.232849]  ? check_preemption_disabled+0x41/0x280
[ 2805.237879]  populate_vma_page_range+0x200/0x290
[ 2805.242681]  __mm_populate+0x1ea/0x350
[ 2805.246575]  ? populate_vma_page_range+0x290/0x290
[ 2805.251507]  ? do_mlock+0x6b0/0x6b0
[ 2805.255142]  ? security_capable+0x8f/0xc0
[ 2805.259301]  __se_sys_mlockall+0x362/0x4e0
[ 2805.263541]  do_syscall_64+0xf9/0x620
[ 2805.267354]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2805.272545] RIP: 0033:0x4665e9
[ 2805.275748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2805.294926] RSP: 002b:00007fd4d5ebd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2805.302732] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2805.310002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2805.317530] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2805.324799] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2805.332069] R13: 00007ffc6077510f R14: 00007fd4d5ebd300 R15: 0000000000022000
[ 2805.844750] Mem-Info:
[ 2805.848980] active_anon:204479 inactive_anon:1097594 isolated_anon:0
[ 2805.848980]  active_file:30 inactive_file:0 isolated_file:1
[ 2805.848980]  unevictable:66910 dirty:0 writeback:0 unstable:0
[ 2805.848980]  slab_reclaimable:17259 slab_unreclaimable:147841
[ 2805.848980]  mapped:50933 shmem:15185 pagetables:50089 bounce:0
[ 2805.848980]  free:25024 free_pcp:179 free_cma:0
[ 2805.888603] Node 0 active_anon:646056kB inactive_anon:1040120kB active_file:32kB inactive_file:8kB unevictable:177776kB isolated(anon):0kB isolated(file):4kB mapped:136672kB dirty:0kB writeback:0kB shmem:39964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2805.965441] Node 1 active_anon:171788kB inactive_anon:3350256kB active_file:40kB inactive_file:116kB unevictable:89872kB isolated(anon):0kB isolated(file):0kB mapped:67076kB dirty:0kB writeback:0kB shmem:20776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2806.091539] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2806.190876] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2806.220257] Node 0 DMA32 free:35776kB min:35996kB low:44992kB high:53988kB active_anon:645716kB inactive_anon:1048360kB active_file:932kB inactive_file:524kB unevictable:164748kB writepending:0kB present:3129332kB managed:2763456kB mlocked:164448kB kernel_stack:20000kB pagetables:47908kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2806.398182] lowmem_reserve[]: 0 0 1 1 1
[ 2806.425879] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2806.591558] lowmem_reserve[]: 0 0 0 0 0
[ 2806.634927] Node 1 Normal free:54076kB min:53876kB low:67344kB high:80812kB active_anon:171788kB inactive_anon:3350256kB active_file:864kB inactive_file:1344kB unevictable:67192kB writepending:0kB present:4194304kB managed:4128248kB mlocked:67372kB kernel_stack:49472kB pagetables:152096kB bounce:0kB free_pcp:636kB local_pcp:192kB free_cma:0kB
[ 2806.702077] lowmem_reserve[]: 0 0 0 0 0
[ 2806.763754] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2806.836058] Node 0 DMA32: 177*4kB (UME) 84*8kB (UM) 1293*16kB (UM) 454*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36596kB
[ 2806.895641] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2806.944382] Node 1 Normal: 1845*4kB (UME) 1110*8kB (UM) 326*16kB (UM) 440*32kB (UM) 244*64kB (UM) 15*128kB (U) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55140kB
[ 2807.015605] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2807.065210] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2807.113826] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2807.165025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2807.199118] 20251 total pagecache pages
[ 2807.203122] 0 pages in swap cache
[ 2807.232846] Swap cache stats: add 0, delete 0, find 0/0
[ 2807.314422] Free swap  = 0kB
[ 2807.334073] Total swap = 0kB
[ 2807.344266] 2097051 pages RAM
[ 2807.367810] 0 pages HighMem/MovableOnly
[ 2807.371801] 369648 pages reserved
[ 2807.375247] 0 pages cma reserved
[ 2807.442969] Out of memory (oom_kill_allocating_task): Kill process 9916 (syz-executor.1) score 0 or sacrifice child
[ 2807.514926] Killed process 9916 (syz-executor.1) total-vm:93252kB, anon-rss:148kB, file-rss:35972kB, shmem-rss:0kB
[ 2807.577645] oom_reaper: reaped process 9916 (syz-executor.1), now anon-rss:148kB, file-rss:35968kB, shmem-rss:0kB
[ 2807.653559] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2807.688047] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2807.729232] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2807.768181] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2807.800211] device bridge_slave_1 left promiscuous mode
[ 2807.843331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2807.857224] device bridge_slave_0 left promiscuous mode
[ 2807.862829] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2807.889464] device veth1_macvtap left promiscuous mode
[ 2807.909177] device veth0_macvtap left promiscuous mode
[ 2807.914624] device veth1_vlan left promiscuous mode
[ 2807.923418] device veth0_vlan left promiscuous mode
20:03:26 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
mlockall(0x3)

20:03:26 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
mlockall(0x3)
mlockall(0x3)

20:03:26 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
mlockall(0x3)

20:03:26 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:26 executing program 5:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2809.836074] syz-executor.1 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2809.865368] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 2809.870548] CPU: 1 PID: 9949 Comm: syz-executor.1 Not tainted 4.19.202-syzkaller #0
[ 2809.878427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2809.889176] Call Trace:
[ 2809.891785]  dump_stack+0x1fc/0x2ef
[ 2809.895427]  dump_header+0x15d/0xc3f
[ 2809.899158]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2809.904350]  ? ___ratelimit+0x319/0x590
[ 2809.908330]  oom_kill_process.cold+0x10/0x692
[ 2809.912834]  ? check_preemption_disabled+0x41/0x280
[ 2809.917884]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2809.923162]  out_of_memory+0x1072/0x1390
[ 2809.927445]  ? oom_killer_disable+0x270/0x270
[ 2809.931958]  ? mutex_trylock+0x15f/0x1a0
[ 2809.936032]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2809.940899]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2809.945758]  ? __lock_acquire+0x6de/0x3ff0
[ 2809.950002]  ? mark_held_locks+0xf0/0xf0
[ 2809.954105]  alloc_pages_vma+0xf2/0x780
[ 2809.958115]  do_anonymous_page+0x7c2/0x1be0
[ 2809.962448]  ? __pte_alloc+0x340/0x340
[ 2809.966335]  ? __put_compound_page+0xc0/0xc0
[ 2809.970751]  ? mark_held_locks+0xf0/0xf0
[ 2809.974824]  __handle_mm_fault+0x227a/0x41c0
[ 2809.979244]  ? vm_insert_page+0x9c0/0x9c0
[ 2809.983409]  ? check_preemption_disabled+0x41/0x280
[ 2809.988432]  handle_mm_fault+0x436/0xb10
[ 2809.992506]  __get_user_pages+0x6f0/0x1710
[ 2809.996753]  ? follow_page_mask+0x1d00/0x1d00
[ 2810.001262]  ? check_preemption_disabled+0x41/0x280
[ 2810.006292]  populate_vma_page_range+0x200/0x290
[ 2810.011060]  __mm_populate+0x1ea/0x350
[ 2810.014955]  ? populate_vma_page_range+0x290/0x290
[ 2810.019890]  ? do_mlock+0x6b0/0x6b0
[ 2810.023557]  ? security_capable+0x8f/0xc0
[ 2810.027726]  __se_sys_mlockall+0x362/0x4e0
[ 2810.031974]  do_syscall_64+0xf9/0x620
[ 2810.035822]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2810.041015] RIP: 0033:0x4665e9
[ 2810.044212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2810.063116] RSP: 002b:00007fd4d5ebd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2810.070832] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2810.078106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2810.085381] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2810.092653] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2810.099929] R13: 00007ffc6077510f R14: 00007fd4d5ebd300 R15: 0000000000022000
[ 2810.116963] Mem-Info:
[ 2810.119422] active_anon:204502 inactive_anon:1097579 isolated_anon:0
[ 2810.119422]  active_file:11 inactive_file:11 isolated_file:0
[ 2810.119422]  unevictable:59228 dirty:0 writeback:0 unstable:0
[ 2810.119422]  slab_reclaimable:17282 slab_unreclaimable:147824
[ 2810.119422]  mapped:58129 shmem:15185 pagetables:50078 bounce:0
[ 2810.119422]  free:25211 free_pcp:0 free_cma:0
[ 2810.305410] Bluetooth: hci5: command 0x0409 tx timeout
[ 2810.311057] Node 0 active_anon:646384kB inactive_anon:1040092kB active_file:40kB inactive_file:40kB unevictable:165612kB isolated(anon):0kB isolated(file):0kB mapped:144240kB dirty:0kB writeback:0kB shmem:39984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2810.523852] Node 1 active_anon:171624kB inactive_anon:3350224kB active_file:4kB inactive_file:4kB unevictable:71300kB isolated(anon):0kB isolated(file):0kB mapped:88276kB dirty:0kB writeback:0kB shmem:20756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2810.686831] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2810.869671] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2810.887460] Node 0 DMA32 free:35836kB min:35996kB low:44992kB high:53988kB active_anon:646060kB inactive_anon:1036740kB active_file:40kB inactive_file:40kB unevictable:165616kB writepending:0kB present:3129332kB managed:2763456kB mlocked:165616kB kernel_stack:20096kB pagetables:48064kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB
[ 2810.937708] lowmem_reserve[]: 0 0 1 1 1
[ 2810.942193] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2810.983879] lowmem_reserve[]: 0 0 0 0 0
[ 2810.988300] Node 1 Normal free:53672kB min:53876kB low:67344kB high:80812kB active_anon:171624kB inactive_anon:3350224kB active_file:4kB inactive_file:4kB unevictable:71304kB writepending:0kB present:4194304kB managed:4128248kB mlocked:71304kB kernel_stack:49568kB pagetables:151992kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB
[ 2811.031307] lowmem_reserve[]: 0 0 0 0 0
[ 2811.039584] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2811.068508] Node 0 DMA32: 1*4kB (M) 49*8kB (U) 1320*16kB (U) 449*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35884kB
[ 2811.081966] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2811.105054] Node 1 Normal: 32*4kB (UE) 139*8kB (U) 705*16kB (UM) 634*32kB (UM) 262*64kB (UM) 16*128kB (UM) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53672kB
[ 2811.132714] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2811.154714] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2811.163904] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2811.185359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2811.185366] 20653 total pagecache pages
[ 2811.185377] 0 pages in swap cache
[ 2811.185385] Swap cache stats: add 0, delete 0, find 0/0
[ 2811.185390] Free swap  = 0kB
[ 2811.185394] Total swap = 0kB
[ 2811.185401] 2097051 pages RAM
[ 2811.185406] 0 pages HighMem/MovableOnly
[ 2811.185410] 369648 pages reserved
[ 2811.185415] 0 pages cma reserved
[ 2811.185426] Out of memory (oom_kill_allocating_task): Kill process 9949 (syz-executor.1) score 0 or sacrifice child
[ 2811.185468] Killed process 9952 (syz-executor.1) total-vm:93252kB, anon-rss:148kB, file-rss:35004kB, shmem-rss:0kB
[ 2811.208058] syz-executor.0 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2811.208067] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 2811.208138] CPU: 1 PID: 9942 Comm: syz-executor.0 Not tainted 4.19.202-syzkaller #0
[ 2811.208146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2811.208151] Call Trace:
[ 2811.208175]  dump_stack+0x1fc/0x2ef
[ 2811.208194]  dump_header+0x15d/0xc3f
[ 2811.208213]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2811.208227]  ? ___ratelimit+0x319/0x590
[ 2811.208246]  oom_kill_process.cold+0x10/0x692
[ 2811.208263]  ? check_preemption_disabled+0x41/0x280
20:03:29 executing program 5:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2811.208284]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2811.208300]  out_of_memory+0x1072/0x1390
[ 2811.208322]  ? oom_killer_disable+0x270/0x270
[ 2811.208339]  ? mutex_trylock+0x15f/0x1a0
[ 2811.208358]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2811.208393]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2811.208409]  ? __lock_acquire+0x6de/0x3ff0
[ 2811.208430]  ? mark_held_locks+0xf0/0xf0
[ 2811.208459]  alloc_pages_vma+0xf2/0x780
[ 2811.208480]  do_anonymous_page+0x7c2/0x1be0
[ 2811.208500]  ? __pte_alloc+0x340/0x340
[ 2811.208512]  ? __put_compound_page+0xc0/0xc0
[ 2811.208529]  ? mark_held_locks+0xf0/0xf0
[ 2811.208549]  __handle_mm_fault+0x227a/0x41c0
[ 2811.208568]  ? vm_insert_page+0x9c0/0x9c0
[ 2811.208596]  ? check_preemption_disabled+0x41/0x280
[ 2811.208617]  handle_mm_fault+0x436/0xb10
[ 2811.208637]  __get_user_pages+0x6f0/0x1710
[ 2811.208661]  ? follow_page_mask+0x1d00/0x1d00
[ 2811.208690]  populate_vma_page_range+0x200/0x290
[ 2811.208710]  __mm_populate+0x1ea/0x350
[ 2811.208727]  ? populate_vma_page_range+0x290/0x290
[ 2811.208739]  ? do_mlock+0x6b0/0x6b0
[ 2811.208753]  ? security_capable+0x8f/0xc0
[ 2811.208771]  __se_sys_mlockall+0x362/0x4e0
[ 2811.208787]  do_syscall_64+0xf9/0x620
[ 2811.208807]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2811.208818] RIP: 0033:0x4665e9
[ 2811.208833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2811.208840] RSP: 002b:00007f43d6822188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2811.208853] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2811.208861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2811.208869] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2811.208877] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2811.208886] R13: 00007ffda310918f R14: 00007f43d6822300 R15: 0000000000022000
[ 2811.212370] Mem-Info:
[ 2811.212400] active_anon:204502 inactive_anon:1097579 isolated_anon:0
[ 2811.212400]  active_file:36 inactive_file:0 isolated_file:0
[ 2811.212400]  unevictable:59230 dirty:0 writeback:0 unstable:0
[ 2811.212400]  slab_reclaimable:17282 slab_unreclaimable:147824
[ 2811.212400]  mapped:58129 shmem:15185 pagetables:50041 bounce:0
[ 2811.212400]  free:25059 free_pcp:193 free_cma:0
[ 2811.212425] Node 0 active_anon:646384kB inactive_anon:1040092kB active_file:140kB inactive_file:0kB unevictable:165616kB isolated(anon):0kB isolated(file):0kB mapped:144240kB dirty:0kB writeback:0kB shmem:39984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2811.212447] Node 1 active_anon:171624kB inactive_anon:3350224kB active_file:4kB inactive_file:4kB unevictable:71304kB isolated(anon):0kB isolated(file):0kB mapped:88276kB dirty:0kB writeback:0kB shmem:20756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2811.212452] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2811.212479] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2811.212495] Node 0 DMA32 free:35584kB min:35996kB low:44992kB high:53988kB active_anon:646060kB inactive_anon:1036740kB active_file:140kB inactive_file:0kB unevictable:165616kB writepending:0kB present:3129332kB managed:2763456kB mlocked:165616kB kernel_stack:20096kB pagetables:48064kB bounce:0kB free_pcp:432kB local_pcp:4kB free_cma:0kB
[ 2811.212522] lowmem_reserve[]: 0 0 1 1 1
[ 2811.212675] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2811.212705] lowmem_reserve[]: 0 0 0 0 0
[ 2811.212724] Node 1 Normal free:53672kB min:53876kB low:67344kB high:80812kB active_anon:171624kB inactive_anon:3350224kB active_file:4kB inactive_file:4kB unevictable:71304kB writepending:0kB present:4194304kB managed:4128248kB mlocked:71304kB kernel_stack:49568kB pagetables:151844kB bounce:0kB free_pcp:340kB local_pcp:0kB free_cma:0kB
[ 2811.212756] lowmem_reserve[]: 0 0 0 0 0
[ 2811.212774] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2811.212853] Node 0 DMA32: 2*4kB (UM) 17*8kB (U) 1320*16kB (U) 449*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35632kB
[ 2811.212915] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2811.212966] Node 1 Normal: 32*4kB (UE) 139*8kB (U) 705*16kB (UM) 634*32kB (UM) 262*64kB (UM) 16*128kB (UM) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53672kB
[ 2811.213043] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2811.213053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2811.213064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2811.213074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2811.213079] 20653 total pagecache pages
[ 2811.213099] 0 pages in swap cache
[ 2811.213108] Swap cache stats: add 0, delete 0, find 0/0
[ 2811.213113] Free swap  = 0kB
[ 2811.213118] Total swap = 0kB
[ 2811.213125] 2097051 pages RAM
[ 2811.213130] 0 pages HighMem/MovableOnly
[ 2811.213135] 369648 pages reserved
[ 2811.213140] 0 pages cma reserved
[ 2811.213152] Out of memory (oom_kill_allocating_task): Kill process 9942 (syz-executor.0) score 0 or sacrifice child
[ 2811.213200] Killed process 9943 (syz-executor.0) total-vm:93252kB, anon-rss:148kB, file-rss:34968kB, shmem-rss:0kB
[ 2811.234117] syz-executor.5 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2811.234126] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 2811.234153] CPU: 0 PID: 9954 Comm: syz-executor.5 Not tainted 4.19.202-syzkaller #0
[ 2811.234161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2811.234166] Call Trace:
[ 2811.234187]  dump_stack+0x1fc/0x2ef
[ 2811.234206]  dump_header+0x15d/0xc3f
[ 2811.234225]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2811.234238]  ? ___ratelimit+0x319/0x590
[ 2811.234257]  oom_kill_process.cold+0x10/0x692
[ 2811.234275]  ? check_preemption_disabled+0x41/0x280
[ 2811.234296]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2811.234312]  out_of_memory+0x1072/0x1390
[ 2811.234334]  ? oom_killer_disable+0x270/0x270
[ 2811.234350]  ? mutex_trylock+0x15f/0x1a0
[ 2811.234370]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2811.234404]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2811.234420]  ? __lock_acquire+0x6de/0x3ff0
[ 2811.234442]  ? mark_held_locks+0xf0/0xf0
[ 2811.234470]  alloc_pages_vma+0xf2/0x780
[ 2811.234491]  do_anonymous_page+0x7c2/0x1be0
[ 2811.234512]  ? __pte_alloc+0x340/0x340
[ 2811.234524]  ? __put_compound_page+0xc0/0xc0
[ 2811.234541]  ? mark_held_locks+0xf0/0xf0
[ 2811.234561]  __handle_mm_fault+0x227a/0x41c0
[ 2811.234580]  ? vm_insert_page+0x9c0/0x9c0
[ 2811.234615]  ? check_preemption_disabled+0x41/0x280
[ 2811.234636]  handle_mm_fault+0x436/0xb10
[ 2811.234655]  __get_user_pages+0x6f0/0x1710
[ 2811.234678]  ? follow_page_mask+0x1d00/0x1d00
[ 2811.234698]  ? check_preemption_disabled+0x41/0x280
[ 2811.234724]  populate_vma_page_range+0x200/0x290
[ 2811.234743]  __mm_populate+0x1ea/0x350
[ 2811.234761]  ? populate_vma_page_range+0x290/0x290
[ 2811.234775]  ? do_mlock+0x6b0/0x6b0
[ 2811.234790]  ? security_capable+0x8f/0xc0
[ 2811.234812]  __se_sys_mlockall+0x362/0x4e0
[ 2811.234828]  do_syscall_64+0xf9/0x620
[ 2811.234847]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2811.234858] RIP: 0033:0x4665e9
[ 2811.234872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2811.234879] RSP: 002b:00007ffad19b4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2811.234893] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2811.234900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2811.234909] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2811.234917] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2811.234925] R13: 00007fff2c0d6aaf R14: 00007ffad19b4300 R15: 0000000000022000
[ 2811.248938] Mem-Info:
[ 2811.248975] active_anon:204477 inactive_anon:1097579 isolated_anon:0
[ 2811.248975]  active_file:36 inactive_file:0 isolated_file:0
[ 2811.248975]  unevictable:59230 dirty:0 writeback:0 unstable:0
[ 2811.248975]  slab_reclaimable:17282 slab_unreclaimable:147824
[ 2811.248975]  mapped:58129 shmem:15185 pagetables:50004 bounce:0
[ 2811.248975]  free:25059 free_pcp:246 free_cma:0
[ 2811.249004] Node 0 active_anon:646384kB inactive_anon:1040092kB active_file:140kB inactive_file:0kB unevictable:165616kB isolated(anon):0kB isolated(file):0kB mapped:144240kB dirty:0kB writeback:0kB shmem:39984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2811.249032] Node 1 active_anon:171524kB inactive_anon:3350224kB active_file:4kB inactive_file:4kB unevictable:71304kB isolated(anon):0kB isolated(file):0kB mapped:88276kB dirty:0kB writeback:0kB shmem:20756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2811.249037] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2811.249070] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2811.249089] Node 0 DMA32 free:35584kB min:35996kB low:44992kB high:53988kB active_anon:646060kB inactive_anon:1036740kB active_file:140kB inactive_file:0kB unevictable:165616kB writepending:0kB present:3129332kB managed:2763456kB mlocked:165616kB kernel_stack:20096kB pagetables:47916kB bounce:0kB free_pcp:512kB local_pcp:508kB free_cma:0kB
[ 2811.249121] lowmem_reserve[]: 0 0 1 1 1
[ 2811.249140] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2811.249170] lowmem_reserve[]: 0 0 0 0 0
[ 2811.249189] Node 1 Normal free:53672kB min:53876kB low:67344kB high:80812kB active_anon:171524kB inactive_anon:3350224kB active_file:4kB inactive_file:4kB unevictable:71304kB writepending:0kB present:4194304kB managed:4128248kB mlocked:71304kB kernel_stack:49536kB pagetables:151844kB bounce:0kB free_pcp:472kB local_pcp:472kB free_cma:0kB
[ 2811.249221] lowmem_reserve[]: 0 0 0 0 0
[ 2811.249240] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2811.249319] Node 0 DMA32: 2*4kB (UM) 17*8kB (U) 1320*16kB (U) 449*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35632kB
[ 2811.249381] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2811.249432] Node 1 Normal: 32*4kB (UE) 139*8kB (U) 705*16kB (UM) 635*32kB (UM) 262*64kB (UM) 16*128kB (UM) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53704kB
[ 2811.249509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2811.249520] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2811.249531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2811.249540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2811.249545] 20653 total pagecache pages
[ 2811.249558] 0 pages in swap cache
[ 2811.249566] Swap cache stats: add 0, delete 0, find 0/0
[ 2811.249572] Free swap  = 0kB
[ 2811.249576] Total swap = 0kB
[ 2811.249590] 2097051 pages RAM
[ 2811.249597] 0 pages HighMem/MovableOnly
[ 2811.249601] 369648 pages reserved
[ 2811.249606] 0 pages cma reserved
[ 2811.249618] Out of memory (oom_kill_allocating_task): Kill process 9954 (syz-executor.5) score 0 or sacrifice child
[ 2811.249659] Killed process 9953 (syz-executor.5) total-vm:93252kB, anon-rss:9032kB, file-rss:39104kB, shmem-rss:0kB
[ 2811.252871] oom_reaper: reaped process 9953 (syz-executor.5), now anon-rss:9076kB, file-rss:40192kB, shmem-rss:0kB
[ 2811.258498] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2811.258506] syz-fuzzer cpuset=/ mems_allowed=0-1
[ 2811.258530] CPU: 0 PID: 8086 Comm: syz-fuzzer Not tainted 4.19.202-syzkaller #0
[ 2811.258538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2811.258543] Call Trace:
[ 2811.258561]  dump_stack+0x1fc/0x2ef
[ 2811.258578]  dump_header+0x15d/0xc3f
[ 2811.258601]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2811.258615]  ? ___ratelimit+0x319/0x590
[ 2811.258633]  oom_kill_process.cold+0x10/0x692
[ 2811.258649]  ? check_preemption_disabled+0x41/0x280
[ 2811.258670]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2811.258685]  out_of_memory+0x1072/0x1390
[ 2811.258706]  ? oom_killer_disable+0x270/0x270
[ 2811.258721]  ? mutex_trylock+0x15f/0x1a0
[ 2811.258739]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2811.258760]  ? find_get_entry+0x4cd/0x8a0
[ 2811.258785]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2811.258825]  alloc_pages_current+0x193/0x2a0
[ 2811.258841]  filemap_fault+0x146e/0x2180
[ 2811.258868]  ext4_filemap_fault+0x84/0xb0
[ 2811.258882]  __do_fault+0x10b/0x4b0
[ 2811.258900]  __handle_mm_fault+0x273b/0x41c0
[ 2811.258918]  ? vm_insert_page+0x9c0/0x9c0
[ 2811.258946]  ? check_preemption_disabled+0x41/0x280
[ 2811.258965]  handle_mm_fault+0x436/0xb10
[ 2811.258986]  __do_page_fault+0x68e/0xd60
[ 2811.259007]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2811.259021]  ? spurious_fault+0x840/0x840
[ 2811.259037]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2811.259054]  ? page_fault+0x8/0x30
[ 2811.259068]  page_fault+0x1e/0x30
[ 2811.259079] RIP: 0033:0x46e163
[ 2811.259091] Code: Bad RIP value.
[ 2811.259099] RSP: 002b:000000c00003de80 EFLAGS: 00010202
[ 2811.259109] RAX: ffffffffffffff92 RBX: 000000c00002e000 RCX: 000000000046e163
[ 2811.259117] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001852e58
[ 2811.259124] RBP: 000000c00003dec8 R08: 0000000000000000 R09: 0000000000000000
[ 2811.259132] R10: 000000c00003deb8 R11: 0000000000000202 R12: 000000000043b6a0
[ 2811.259140] R13: 0000000000000000 R14: 000000000094d6b8 R15: 0000000000000000
[ 2811.259158] Mem-Info:
[ 2811.259188] active_anon:204477 inactive_anon:1097579 isolated_anon:0
[ 2811.259188]  active_file:36 inactive_file:0 isolated_file:0
[ 2811.259188]  unevictable:59230 dirty:0 writeback:0 unstable:0
[ 2811.259188]  slab_reclaimable:17282 slab_unreclaimable:147824
[ 2811.259188]  mapped:58129 shmem:15185 pagetables:50004 bounce:0
[ 2811.259188]  free:25059 free_pcp:295 free_cma:0
[ 2811.259215] Node 0 active_anon:646384kB inactive_anon:1040092kB active_file:140kB inactive_file:0kB unevictable:165616kB isolated(anon):0kB isolated(file):0kB mapped:144240kB dirty:0kB writeback:0kB shmem:39984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2811.259241] Node 1 active_anon:171524kB inactive_anon:3350224kB active_file:4kB inactive_file:4kB unevictable:71304kB isolated(anon):0kB isolated(file):0kB mapped:88276kB dirty:0kB writeback:0kB shmem:20756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2811.259246] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2811.259276] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2811.259305] Node 0 DMA32 free:35584kB min:35996kB low:44992kB high:53988kB active_anon:646060kB inactive_anon:1036740kB active_file:140kB inactive_file:0kB unevictable:165616kB writepending:0kB present:3129332kB managed:2763456kB mlocked:165616kB kernel_stack:20064kB pagetables:47916kB bounce:0kB free_pcp:708kB local_pcp:704kB free_cma:0kB
[ 2811.259336] lowmem_reserve[]: 0 0 1 1 1
[ 2811.259354] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2811.259383] lowmem_reserve[]: 0 0 0 0 0
[ 2811.259401] Node 1 Normal free:53672kB min:53876kB low:67344kB high:80812kB active_anon:171524kB inactive_anon:3350224kB active_file:4kB inactive_file:4kB unevictable:71304kB writepending:0kB present:4194304kB managed:4128248kB mlocked:71304kB kernel_stack:49504kB pagetables:151844kB bounce:0kB free_pcp:472kB local_pcp:472kB free_cma:0kB
[ 2811.259440] lowmem_reserve[]: 0 0 0 0 0
[ 2811.259458] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2811.259527] Node 0 DMA32: 2*4kB (UM) 17*8kB (U) 1320*16kB (U) 450*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35664kB
[ 2811.259582] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2811.259651] Node 1 Normal: 32*4kB (UE) 139*8kB (U) 705*16kB (UM) 636*32kB (UM) 262*64kB (UM) 16*128kB (UM) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53736kB
[ 2811.259725] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2811.259735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2811.259745] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2811.259754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2811.259760] 20653 total pagecache pages
[ 2811.259772] 0 pages in swap cache
[ 2811.259780] Swap cache stats: add 0, delete 0, find 0/0
[ 2811.259785] Free swap  = 0kB
[ 2811.259790] Total swap = 0kB
[ 2811.259798] 2097051 pages RAM
[ 2811.259802] 0 pages HighMem/MovableOnly
[ 2811.259807] 369648 pages reserved
[ 2811.259812] 0 pages cma reserved
[ 2811.259823] Out of memory (oom_kill_allocating_task): Kill process 8086 (syz-fuzzer) score 0 or sacrifice child
[ 2811.259890] Killed process 9913 (syz-executor.4) total-vm:84924kB, anon-rss:60kB, file-rss:956kB, shmem-rss:0kB
[ 2814.296131] Bluetooth: hci5: command 0x041b tx timeout
[ 2816.304973] Bluetooth: hci5: command 0x040f tx timeout
[ 2816.862562] device hsr_slave_1 left promiscuous mode
[ 2816.870809] device hsr_slave_0 left promiscuous mode
[ 2816.888141] team0 (unregistering): Port device team_slave_1 removed
[ 2816.898150] team0 (unregistering): Port device team_slave_0 removed
[ 2816.910370] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 2816.920340] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 2816.952414] bond0 (unregistering): Released all slaves
[ 2819.451433] IPVS: ftp: loaded support on port[0] = 21
[ 2819.561971] chnl_net:caif_netlink_parms(): no params data found
[ 2819.808437] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2819.814901] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2819.821983] device bridge_slave_0 entered promiscuous mode
[ 2819.830403] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2819.837351] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2819.844489] device bridge_slave_1 entered promiscuous mode
[ 2819.865454] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 2819.874348] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 2819.896011] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 2819.903274] team0: Port device team_slave_0 added
[ 2819.909883] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 2819.918391] team0: Port device team_slave_1 added
[ 2819.933685] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2819.940532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2819.966085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2819.979676] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2819.986334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2820.011956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2820.023235] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 2820.032519] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 2820.057386] device hsr_slave_0 entered promiscuous mode
[ 2820.063102] device hsr_slave_1 entered promiscuous mode
[ 2820.069690] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 2820.077243] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 2820.150200] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2820.156612] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2820.163188] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2820.169589] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2820.203110] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 2820.210331] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2820.219946] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 2820.229410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2820.238288] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2820.245436] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2820.252395] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 2820.263248] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 2820.269757] 8021q: adding VLAN 0 to HW filter on device team0
[ 2820.279571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2820.287405] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2820.293802] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2820.307661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2820.315477] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2820.321818] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2820.342063] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2820.352192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2820.363435] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 2820.371007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2820.379231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2820.387589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2820.395737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2820.403701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2820.410765] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2820.423090] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 2820.432344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2820.440675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2820.452462] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2820.469519] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready
[ 2820.480593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2820.513659] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready
[ 2820.524740] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready
[ 2820.531432] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready
[ 2820.547379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2820.558040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2820.564963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2820.573735] device veth0_vlan entered promiscuous mode
[ 2820.583686] device veth1_vlan entered promiscuous mode
[ 2820.600883] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
[ 2820.610286] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready
[ 2820.617960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2820.626294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2820.636076] device veth0_macvtap entered promiscuous mode
[ 2820.643222] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
[ 2820.652546] device veth1_macvtap entered promiscuous mode
[ 2820.658924] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready
[ 2820.669295] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
[ 2820.679273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
[ 2820.688084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2820.697893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2820.707296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2820.717164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2820.726414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2820.736191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2820.746869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2820.756658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2820.765816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2820.775591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2820.785821] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready
[ 2820.792762] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2820.801134] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2820.808734] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2820.816298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2820.823999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2820.833816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2820.844469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2820.853591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2820.863357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2820.872940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2820.882707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2820.892134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2820.901913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2820.911070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2820.920815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2820.931060] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
[ 2820.938639] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2820.950981] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2820.959277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2821.081472] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 2821.088250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2821.101726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2821.119385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2821.131771] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 2821.138338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2821.146548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2821.153316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2821.505183] Bluetooth: hci5: command 0x0409 tx timeout
20:03:40 executing program 5:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:40 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:03:40 executing program 2:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:40 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:40 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
mlockall(0x3)

20:03:40 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)

[ 2823.032946] syz-executor.1 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000
[ 2823.080554] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 2823.115041] CPU: 0 PID: 10261 Comm: syz-executor.1 Not tainted 4.19.202-syzkaller #0
[ 2823.122942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2823.132291] Call Trace:
[ 2823.134885]  dump_stack+0x1fc/0x2ef
[ 2823.138517]  dump_header+0x15d/0xc3f
[ 2823.142236]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2823.147337]  ? ___ratelimit+0x319/0x590
[ 2823.151314]  oom_kill_process.cold+0x10/0x692
[ 2823.155811]  ? check_preemption_disabled+0x41/0x280
[ 2823.160839]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2823.166106]  out_of_memory+0x1072/0x1390
[ 2823.170318]  ? oom_killer_disable+0x270/0x270
[ 2823.174813]  ? mutex_trylock+0x15f/0x1a0
[ 2823.178866]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2823.183794]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2823.188623]  ? mark_held_locks+0xf0/0xf0
[ 2823.192671]  ? reacquire_held_locks+0xb5/0x430
[ 2823.197247]  ? __lock_acquire+0x6de/0x3ff0
[ 2823.201482]  alloc_pages_vma+0xf2/0x780
[ 2823.205446]  wp_page_copy+0x219/0x2c40
[ 2823.209326]  ? _vm_normal_page+0x132/0x510
[ 2823.213549]  ? follow_pte_pmd+0x60/0x60
[ 2823.217529]  do_wp_page+0x2d4/0x2210
[ 2823.221728]  ? finish_mkwrite_fault+0x640/0x640
[ 2823.226381]  ? __handle_mm_fault+0x15f6/0x41c0
[ 2823.230957]  ? mark_held_locks+0xf0/0xf0
[ 2823.235004]  __handle_mm_fault+0x258b/0x41c0
[ 2823.239401]  ? vm_insert_page+0x9c0/0x9c0
[ 2823.243538]  ? rt_mutex_futex_unlock+0xf0/0xf0
[ 2823.248184]  ? check_preemption_disabled+0x41/0x280
[ 2823.253187]  handle_mm_fault+0x436/0xb10
[ 2823.257252]  __do_page_fault+0x68e/0xd60
[ 2823.261297]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2823.266307]  ? spurious_fault+0x840/0x840
[ 2823.270438]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2823.275266]  ? page_fault+0x8/0x30
[ 2823.278804]  page_fault+0x1e/0x30
[ 2823.282238] RIP: 0033:0x414611
[ 2823.285414] Code: 5e 41 5f c3 c3 0f 1f 40 00 48 89 f0 48 29 f8 48 3d 80 00 00 00 0f 8e 99 01 00 00 41 57 49 89 f0 49 89 d7 41 56 49 89 fe 41 55 <41> 54 4c 8d 67 08 55 48 8d 6f 10 53 48 83 ec 08 48 85 d2 0f 84 f1
[ 2823.304292] RSP: 002b:00007ffc60775000 EFLAGS: 00010202
[ 2823.309648] RAX: 000000000016b378 RBX: 00007fd4d8753c88 RCX: ffffffff818c6070
[ 2823.316899] RDX: 0000000000000020 RSI: 00007fd4d88bf000 RDI: 00007fd4d8753c88
[ 2823.324172] RBP: 00007fd4d86d4008 R08: 00007fd4d88bf000 R09: 0000001b2c82024c
[ 2823.331421] R10: 00000000000009d6 R11: 00000000c561e9da R12: 00007fd4d86d4000
[ 2823.338681] R13: 00007fd4d8753c88 R14: 00007fd4d8753c88 R15: 0000000000000020
[ 2823.345945]  ? copy_page_range+0xe00/0x2ff0
[ 2823.357325] Mem-Info:
[ 2823.359767] active_anon:204551 inactive_anon:1111789 isolated_anon:0
[ 2823.359767]  active_file:0 inactive_file:7 isolated_file:0
[ 2823.359767]  unevictable:44732 dirty:0 writeback:0 unstable:0
[ 2823.359767]  slab_reclaimable:17345 slab_unreclaimable:147552
[ 2823.359767]  mapped:55396 shmem:15190 pagetables:50205 bounce:0
[ 2823.359767]  free:25104 free_pcp:0 free_cma:0
[ 2823.397459] Node 0 active_anon:646612kB inactive_anon:1063768kB active_file:12kB inactive_file:0kB unevictable:154356kB isolated(anon):0kB isolated(file):0kB mapped:143224kB dirty:0kB writeback:0kB shmem:39996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2823.448010] Node 1 active_anon:171592kB inactive_anon:3383388kB active_file:0kB inactive_file:0kB unevictable:24572kB isolated(anon):0kB isolated(file):0kB mapped:78360kB dirty:0kB writeback:0kB shmem:20764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2823.483728] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2823.529597] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2823.550375] Node 0 DMA32 free:35596kB min:35996kB low:44992kB high:53988kB active_anon:646188kB inactive_anon:1060416kB active_file:116kB inactive_file:232kB unevictable:153868kB writepending:0kB present:3129332kB managed:2763456kB mlocked:153868kB kernel_stack:20096kB pagetables:48336kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2823.594363] Bluetooth: hci5: command 0x041b tx timeout
[ 2823.612887] lowmem_reserve[]: 0 0 1 1 1
[ 2823.620982] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2823.701942] lowmem_reserve[]: 0 0 0 0 0
[ 2823.710105] Node 1 Normal free:53840kB min:53876kB low:67344kB high:80812kB active_anon:171492kB inactive_anon:3383388kB active_file:72kB inactive_file:16kB unevictable:24184kB writepending:0kB present:4194304kB managed:4128248kB mlocked:24184kB kernel_stack:49824kB pagetables:152228kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2823.742054] lowmem_reserve[]: 0 0 0 0 0
[ 2823.765821] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2823.808476] Node 0 DMA32: 36*4kB (UH) 82*8kB (UMH) 1320*16kB (UMH) 447*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36224kB
[ 2823.853374] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2823.883871] Node 1 Normal: 143*4kB (UME) 80*8kB (M) 1329*16kB (UM) 629*32kB (M) 175*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53804kB
[ 2823.899053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2823.931211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2823.958710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2823.967686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2823.998589] 17923 total pagecache pages
[ 2824.002638] 0 pages in swap cache
[ 2824.009848] Swap cache stats: add 0, delete 0, find 0/0
[ 2824.039078] Free swap  = 0kB
[ 2824.042175] Total swap = 0kB
[ 2824.049237] 2097051 pages RAM
[ 2824.052417] 0 pages HighMem/MovableOnly
[ 2824.083818] 369648 pages reserved
[ 2824.104806] 0 pages cma reserved
[ 2824.108259] Out of memory (oom_kill_allocating_task): Kill process 10261 (syz-executor.1) score 0 or sacrifice child
[ 2824.142600] Killed process 10275 (syz-executor.1) total-vm:93252kB, anon-rss:148kB, file-rss:35004kB, shmem-rss:0kB
[ 2824.179356] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000
[ 2824.292233] syz-executor.4 cpuset=/ mems_allowed=0-1
[ 2824.333318] CPU: 0 PID: 10256 Comm: syz-executor.4 Not tainted 4.19.202-syzkaller #0
[ 2824.341223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2824.350573] Call Trace:
[ 2824.353360]  dump_stack+0x1fc/0x2ef
[ 2824.357395]  dump_header+0x15d/0xc3f
[ 2824.361115]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2824.366225]  ? ___ratelimit+0x319/0x590
[ 2824.370230]  oom_kill_process.cold+0x10/0x692
[ 2824.374738]  ? check_preemption_disabled+0x41/0x280
[ 2824.379852]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2824.385131]  out_of_memory+0x1072/0x1390
[ 2824.389195]  ? oom_killer_disable+0x270/0x270
[ 2824.393691]  ? mutex_trylock+0x15f/0x1a0
[ 2824.397755]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2824.402606]  ? find_get_entry+0x4cd/0x8a0
[ 2824.406766]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2824.411634]  alloc_pages_current+0x193/0x2a0
[ 2824.416043]  filemap_fault+0x146e/0x2180
[ 2824.420116]  ext4_filemap_fault+0x84/0xb0
[ 2824.424262]  __do_fault+0x10b/0x4b0
[ 2824.427905]  __handle_mm_fault+0x273b/0x41c0
[ 2824.432329]  ? vm_insert_page+0x9c0/0x9c0
[ 2824.436493]  ? check_preemption_disabled+0x41/0x280
[ 2824.441513]  handle_mm_fault+0x436/0xb10
[ 2824.445578]  __get_user_pages+0x6f0/0x1710
[ 2824.449822]  ? follow_page_mask+0x1d00/0x1d00
[ 2824.454333]  populate_vma_page_range+0x200/0x290
[ 2824.459093]  __mm_populate+0x1ea/0x350
[ 2824.462987]  ? populate_vma_page_range+0x290/0x290
[ 2824.467913]  ? do_mlock+0x6b0/0x6b0
[ 2824.471560]  ? security_capable+0x8f/0xc0
[ 2824.475716]  __se_sys_mlockall+0x362/0x4e0
[ 2824.479953]  do_syscall_64+0xf9/0x620
[ 2824.483757]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2824.488944] RIP: 0033:0x4665e9
[ 2824.492134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2824.511029] RSP: 002b:00007f4862503188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2824.518738] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2824.526001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2824.533625] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2824.540887] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2824.548152] R13: 00007ffd7d36762f R14: 00007f4862503300 R15: 0000000000022000
[ 2824.615703] Mem-Info:
[ 2824.618507] active_anon:204585 inactive_anon:1111803 isolated_anon:0
[ 2824.618507]  active_file:16 inactive_file:14 isolated_file:0
[ 2824.618507]  unevictable:44760 dirty:0 writeback:0 unstable:0
[ 2824.618507]  slab_reclaimable:17345 slab_unreclaimable:147546
[ 2824.618507]  mapped:55429 shmem:15190 pagetables:50287 bounce:0
[ 2824.618507]  free:25063 free_pcp:229 free_cma:0
[ 2824.705706] Node 0 active_anon:646676kB inactive_anon:1063764kB active_file:40kB inactive_file:32kB unevictable:154400kB isolated(anon):0kB isolated(file):0kB mapped:143208kB dirty:0kB writeback:0kB shmem:39996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2824.959488] Node 1 active_anon:171624kB inactive_anon:3383448kB active_file:24kB inactive_file:24kB unevictable:24640kB isolated(anon):0kB isolated(file):0kB mapped:78508kB dirty:0kB writeback:0kB shmem:20764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2825.030496] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2825.241092] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2825.290665] Node 0 DMA32 free:35468kB min:35996kB low:44992kB high:53988kB active_anon:646332kB inactive_anon:1060412kB active_file:140kB inactive_file:0kB unevictable:154400kB writepending:0kB present:3129332kB managed:2763456kB mlocked:154400kB kernel_stack:20096kB pagetables:48372kB bounce:0kB free_pcp:808kB local_pcp:684kB free_cma:0kB
[ 2825.472070] lowmem_reserve[]: 0 0 1 1 1
[ 2825.496501] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2825.664277] Bluetooth: hci5: command 0x040f tx timeout
[ 2825.671411] lowmem_reserve[]: 0 0 0 0 0
[ 2825.695800] Node 1 Normal free:53736kB min:53876kB low:67344kB high:80812kB active_anon:171624kB inactive_anon:3383448kB active_file:124kB inactive_file:108kB unevictable:24136kB writepending:0kB present:4194304kB managed:4128248kB mlocked:24092kB kernel_stack:49696kB pagetables:152272kB bounce:0kB free_pcp:384kB local_pcp:0kB free_cma:0kB
[ 2825.731987] lowmem_reserve[]: 0 0 0 0 0
[ 2825.769710] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2825.858725] Node 0 DMA32: 0*4kB 58*8kB (U) 1306*16kB (U) 446*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35632kB
[ 2825.875950] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2825.933944] Node 1 Normal: 223*4kB (UME) 110*8kB (UM) 1340*16kB (UM) 645*32kB (UM) 177*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55180kB
[ 2825.984639] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2826.004573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2826.023198] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2826.104072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2826.125970] 18642 total pagecache pages
[ 2826.131670] 0 pages in swap cache
[ 2826.162718] Swap cache stats: add 0, delete 0, find 0/0
[ 2826.179855] Free swap  = 0kB
[ 2826.182888] Total swap = 0kB
[ 2826.193957] 2097051 pages RAM
[ 2826.219716] 0 pages HighMem/MovableOnly
[ 2826.223835] 369648 pages reserved
[ 2826.228363] 0 pages cma reserved
[ 2826.231740] Out of memory (oom_kill_allocating_task): Kill process 10256 (syz-executor.4) score 0 or sacrifice child
[ 2826.298381] Killed process 10256 (syz-executor.4) total-vm:93384kB, anon-rss:28348kB, file-rss:41920kB, shmem-rss:0kB
[ 2826.366971] oom_reaper: reaped process 10256 (syz-executor.4), now anon-rss:28348kB, file-rss:41916kB, shmem-rss:0kB
20:03:45 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)

20:03:45 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:03:45 executing program 5:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:45 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:45 executing program 2:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:45 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
mlockall(0x3)

[ 2827.744100] Bluetooth: hci5: command 0x0419 tx timeout
[ 2828.900500] syz-executor.4 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2828.920436] syz-executor.4 cpuset=/ mems_allowed=0-1
[ 2828.959661] CPU: 1 PID: 10288 Comm: syz-executor.4 Not tainted 4.19.202-syzkaller #0
[ 2828.967566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2828.976921] Call Trace:
[ 2828.979520]  dump_stack+0x1fc/0x2ef
[ 2828.983160]  dump_header+0x15d/0xc3f
[ 2828.986884]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2828.991994]  ? ___ratelimit+0x319/0x590
[ 2828.995987]  oom_kill_process.cold+0x10/0x692
[ 2829.000498]  ? check_preemption_disabled+0x41/0x280
[ 2829.005526]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2829.010805]  out_of_memory+0x1072/0x1390
[ 2829.014876]  ? oom_killer_disable+0x270/0x270
[ 2829.019461]  ? mutex_trylock+0x15f/0x1a0
[ 2829.023530]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2829.028384]  ? _raw_spin_unlock_irq+0x24/0x80
[ 2829.032889]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2829.037738]  ? __schedule+0x88f/0x2040
[ 2829.041752]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2829.046521]  ? io_schedule_timeout+0x140/0x140
[ 2829.051116]  ? preempt_schedule_common+0x45/0xc0
[ 2829.055964]  alloc_pages_vma+0xf2/0x780
[ 2829.059956]  do_anonymous_page+0x7c2/0x1be0
[ 2829.064290]  ? __pte_alloc+0x340/0x340
[ 2829.068177]  ? __put_compound_page+0xc0/0xc0
[ 2829.072591]  ? mark_held_locks+0xf0/0xf0
[ 2829.076661]  __handle_mm_fault+0x227a/0x41c0
[ 2829.081075]  ? vm_insert_page+0x9c0/0x9c0
[ 2829.085246]  ? check_preemption_disabled+0x41/0x280
[ 2829.090271]  handle_mm_fault+0x436/0xb10
[ 2829.094340]  __get_user_pages+0x6f0/0x1710
[ 2829.098585]  ? follow_page_mask+0x1d00/0x1d00
[ 2829.103086]  ? check_preemption_disabled+0x41/0x280
[ 2829.108117]  populate_vma_page_range+0x200/0x290
[ 2829.112889]  __mm_populate+0x1ea/0x350
[ 2829.116791]  ? populate_vma_page_range+0x290/0x290
[ 2829.121739]  ? do_mlock+0x6b0/0x6b0
[ 2829.125395]  ? security_capable+0x8f/0xc0
[ 2829.129556]  __se_sys_mlockall+0x362/0x4e0
[ 2829.133821]  do_syscall_64+0xf9/0x620
[ 2829.137623]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2829.142812] RIP: 0033:0x4665e9
[ 2829.146006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2829.164995] RSP: 002b:00007f4862503188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2829.172708] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2829.179978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2829.187251] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2829.194521] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2829.201789] R13: 00007ffd7d36762f R14: 00007f4862503300 R15: 0000000000022000
[ 2829.258162] Mem-Info:
[ 2829.266400] active_anon:204503 inactive_anon:1111770 isolated_anon:0
[ 2829.266400]  active_file:15 inactive_file:15 isolated_file:0
[ 2829.266400]  unevictable:45119 dirty:1 writeback:0 unstable:0
[ 2829.266400]  slab_reclaimable:17318 slab_unreclaimable:147542
[ 2829.266400]  mapped:59110 shmem:15189 pagetables:50197 bounce:0
[ 2829.266400]  free:24980 free_pcp:179 free_cma:0
[ 2829.327748] Node 0 active_anon:646140kB inactive_anon:1063752kB active_file:24kB inactive_file:24kB unevictable:154832kB isolated(anon):0kB isolated(file):0kB mapped:145652kB dirty:4kB writeback:0kB shmem:39992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2829.381640] Node 1 active_anon:171872kB inactive_anon:3383328kB active_file:36kB inactive_file:36kB unevictable:25644kB isolated(anon):0kB isolated(file):0kB mapped:90788kB dirty:0kB writeback:0kB shmem:20764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2829.429964] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2829.476451] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2829.481854] Node 0 DMA32 free:35572kB min:35996kB low:44992kB high:53988kB active_anon:645816kB inactive_anon:1060400kB active_file:24kB inactive_file:24kB unevictable:154632kB writepending:4kB present:3129332kB managed:2763456kB mlocked:154632kB kernel_stack:20096kB pagetables:48144kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2829.530517] lowmem_reserve[]: 0 0 1 1 1
[ 2829.542713] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2829.588900] lowmem_reserve[]: 0 0 0 0 0
[ 2829.593064] Node 1 Normal free:53368kB min:53876kB low:67344kB high:80812kB active_anon:171872kB inactive_anon:3383328kB active_file:36kB inactive_file:36kB unevictable:25344kB writepending:0kB present:4194304kB managed:4128248kB mlocked:25344kB kernel_stack:49760kB pagetables:152388kB bounce:0kB free_pcp:716kB local_pcp:220kB free_cma:0kB
[ 2829.641251] lowmem_reserve[]: 0 0 0 0 0
[ 2829.668822] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2829.706421] Node 0 DMA32: 29*4kB (UME) 60*8kB (UM) 1312*16kB (U) 448*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35924kB
[ 2829.747646] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2829.800179] Node 1 Normal: 3*4kB (UME) 2*8kB (UM) 1307*16kB (UM) 647*32kB (UM) 178*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53164kB
[ 2829.841903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2829.881447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2829.930529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2829.941547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2829.999240] 21581 total pagecache pages
[ 2830.007087] 0 pages in swap cache
[ 2830.010707] Swap cache stats: add 0, delete 0, find 0/0
[ 2830.043589] Free swap  = 0kB
[ 2830.051005] Total swap = 0kB
[ 2830.105080] 2097051 pages RAM
[ 2830.118781] 0 pages HighMem/MovableOnly
[ 2830.147713] 369648 pages reserved
[ 2830.151316] 0 pages cma reserved
[ 2830.163605] Out of memory (oom_kill_allocating_task): Kill process 10288 (syz-executor.4) score 0 or sacrifice child
[ 2830.207064] Killed process 10280 (syz-executor.4) total-vm:93252kB, anon-rss:2400kB, file-rss:39168kB, shmem-rss:0kB
[ 2830.253683] oom_reaper: reaped process 10280 (syz-executor.4), now anon-rss:2444kB, file-rss:40192kB, shmem-rss:0kB
[ 2830.369595] kworker/u4:2 invoked oom-killer: gfp_mask=0x6040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2830.413803] kworker/u4:2 cpuset=/ mems_allowed=0-1
[ 2830.419829] CPU: 1 PID: 62 Comm: kworker/u4:2 Not tainted 4.19.202-syzkaller #0
[ 2830.427283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2830.436645] Workqueue: writeback wb_workfn (flush-8:0)
[ 2830.441915] Call Trace:
[ 2830.444504]  dump_stack+0x1fc/0x2ef
[ 2830.448155]  dump_header+0x15d/0xc3f
[ 2830.451865]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2830.456964]  ? ___ratelimit+0x319/0x590
[ 2830.460969]  oom_kill_process.cold+0x10/0x692
[ 2830.465466]  ? lock_downgrade+0x720/0x720
[ 2830.469608]  ? check_preemption_disabled+0x41/0x280
[ 2830.474610]  out_of_memory+0x34d/0x1390
[ 2830.478596]  ? oom_killer_disable+0x270/0x270
[ 2830.483073]  ? mutex_trylock+0x15f/0x1a0
[ 2830.487139]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2830.492064]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2830.496914]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2830.501780]  ? mark_held_locks+0xa6/0xf0
[ 2830.505846]  ? ____cache_alloc_node+0x156/0x1d0
[ 2830.510507]  ? cache_grow_begin+0x64/0x8a0
[ 2830.514746]  cache_grow_begin+0xa4/0x8a0
[ 2830.518821]  fallback_alloc+0x213/0x2e0
[ 2830.522811]  kmem_cache_alloc+0x1e4/0x370
[ 2830.526970]  ext4_init_io_end+0x23/0x110
[ 2830.531034]  ext4_writepages+0x10f2/0x37f0
[ 2830.535301]  ? tag_pages_for_writeback+0x2f0/0x2f0
[ 2830.540234]  ? ext4_mark_inode_dirty+0x870/0x870
[ 2830.544991]  ? __lock_acquire+0x6de/0x3ff0
[ 2830.549233]  ? __lock_acquire+0x6de/0x3ff0
[ 2830.553472]  ? __lock_acquire+0x6de/0x3ff0
[ 2830.557708]  ? generic_writepages+0xeb/0x150
[ 2830.562139]  ? mark_held_locks+0xf0/0xf0
[ 2830.566202]  ? mark_held_locks+0xf0/0xf0
[ 2830.570352]  ? mark_held_locks+0xf0/0xf0
[ 2830.574426]  ? ext4_mark_inode_dirty+0x870/0x870
[ 2830.579178]  do_writepages+0xe5/0x290
[ 2830.582983]  ? page_writeback_cpu_online+0x10/0x10
[ 2830.587916]  ? lock_downgrade+0x720/0x720
[ 2830.592061]  ? check_preemption_disabled+0x41/0x280
[ 2830.597089]  __writeback_single_inode+0x10c/0x11d0
[ 2830.602020]  writeback_sb_inodes+0x537/0xef0
[ 2830.606448]  ? wbc_detach_inode+0x840/0x840
[ 2830.610774]  ? down_read_trylock+0x4e/0x90
[ 2830.615015]  ? trylock_super+0x1d/0x100
[ 2830.618994]  __writeback_inodes_wb+0xc6/0x280
[ 2830.623590]  wb_writeback+0x841/0xcc0
[ 2830.627400]  ? writeback_inodes_wb.constprop.0+0x1d0/0x1d0
[ 2830.633015]  ? cpumask_next+0x3c/0x40
[ 2830.636806]  ? get_nr_dirty_inodes+0x19e/0x210
[ 2830.641380]  wb_workfn+0xbf4/0x1250
[ 2830.645145]  ? inode_wait_for_writeback+0x30/0x30
[ 2830.650081]  process_one_work+0x864/0x1570
[ 2830.654315]  ? pwq_dec_nr_in_flight+0x2d0/0x2d0
[ 2830.659002]  worker_thread+0x64c/0x1130
[ 2830.662975]  ? process_one_work+0x1570/0x1570
[ 2830.667455]  kthread+0x33f/0x460
[ 2830.670805]  ? kthread_park+0x180/0x180
[ 2830.674773]  ret_from_fork+0x24/0x30
[ 2831.275182] Mem-Info:
[ 2831.281961] active_anon:204477 inactive_anon:1111796 isolated_anon:0
[ 2831.281961]  active_file:742 inactive_file:426 isolated_file:38
[ 2831.281961]  unevictable:43286 dirty:1 writeback:0 unstable:0
[ 2831.281961]  slab_reclaimable:17308 slab_unreclaimable:147321
[ 2831.281961]  mapped:57149 shmem:15189 pagetables:50123 bounce:0
[ 2831.281961]  free:25406 free_pcp:742 free_cma:0
[ 2831.360705] Node 0 active_anon:646120kB inactive_anon:1063756kB active_file:812kB inactive_file:1508kB unevictable:151544kB isolated(anon):0kB isolated(file):328kB mapped:142188kB dirty:4kB writeback:0kB shmem:39992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2831.538679] Node 1 active_anon:171788kB inactive_anon:3383528kB active_file:116kB inactive_file:4108kB unevictable:17200kB isolated(anon):0kB isolated(file):84kB mapped:86508kB dirty:0kB writeback:0kB shmem:20764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2831.701175] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2831.782253] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2831.793272] Node 0 DMA32 free:41304kB min:35996kB low:44992kB high:53988kB active_anon:645796kB inactive_anon:1060908kB active_file:6508kB inactive_file:2480kB unevictable:139724kB writepending:4kB present:3129332kB managed:2763456kB mlocked:139488kB kernel_stack:20096kB pagetables:48140kB bounce:0kB free_pcp:2376kB local_pcp:848kB free_cma:0kB
[ 2831.826522] lowmem_reserve[]: 0 0 1 1 1
[ 2831.852438] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2831.917615] lowmem_reserve[]: 0 0 0 0 0
[ 2831.927870] Node 1 Normal free:74548kB min:53876kB low:67344kB high:80812kB active_anon:171608kB inactive_anon:3383336kB active_file:1412kB inactive_file:3188kB unevictable:0kB writepending:72kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:49344kB pagetables:151564kB bounce:0kB free_pcp:1776kB local_pcp:320kB free_cma:0kB
[ 2831.959133] lowmem_reserve[]: 0 0 0 0 0
20:03:49 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, 0x0)
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:49 executing program 5:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2831.965530] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2831.989507] Node 0 DMA32: 85*4kB (UM) 640*8kB (U) 1330*16kB (U) 449*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41108kB
[ 2832.016259] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2832.034984] Node 1 Normal: 1973*4kB (UME) 852*8kB (UM) 1702*16kB (UM) 650*32kB (UM) 178*64kB (UM) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 74516kB
[ 2832.087230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2832.138592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
20:03:49 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x0)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:03:49 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
mlockall(0x3)

20:03:49 executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)

20:03:49 executing program 2:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2832.179502] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2832.237723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2832.305737] 19508 total pagecache pages
[ 2832.368865] 0 pages in swap cache
[ 2832.396892] Swap cache stats: add 0, delete 0, find 0/0
[ 2832.440537] Free swap  = 0kB
[ 2832.455271] Total swap = 0kB
[ 2832.475953] 2097051 pages RAM
[ 2832.525912] 0 pages HighMem/MovableOnly
[ 2832.552045] 369648 pages reserved
[ 2832.572178] 0 pages cma reserved
[ 2832.589294] Out of memory: Kill process 9008 (syz-executor.3) score 1010 or sacrifice child
[ 2832.631590] Killed process 9008 (syz-executor.3) total-vm:93516kB, anon-rss:36900kB, file-rss:35152kB, shmem-rss:0kB
[ 2832.667295] oom_reaper: reaped process 9008 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
20:03:50 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x0)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2833.310228] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2833.341339] in:imklog cpuset=/ mems_allowed=0-1
[ 2833.386629] CPU: 0 PID: 6244 Comm: in:imklog Not tainted 4.19.202-syzkaller #0
[ 2833.394119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2833.403470] Call Trace:
[ 2833.406074]  dump_stack+0x1fc/0x2ef
[ 2833.409709]  dump_header+0x15d/0xc3f
[ 2833.413428]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2833.418538]  ? ___ratelimit+0x319/0x590
[ 2833.422520]  oom_kill_process.cold+0x10/0x692
[ 2833.427023]  ? check_preemption_disabled+0x41/0x280
[ 2833.432050]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2833.437335]  out_of_memory+0x1072/0x1390
[ 2833.441501]  ? oom_killer_disable+0x270/0x270
[ 2833.446002]  ? mutex_trylock+0x15f/0x1a0
[ 2833.450075]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2833.454926]  ? find_get_entry+0x4cd/0x8a0
[ 2833.459090]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2833.463961]  alloc_pages_current+0x193/0x2a0
[ 2833.468378]  filemap_fault+0x146e/0x2180
[ 2833.472455]  ext4_filemap_fault+0x84/0xb0
[ 2833.476602]  __do_fault+0x10b/0x4b0
[ 2833.480223]  ? do_raw_spin_unlock+0x171/0x230
[ 2833.484719]  __handle_mm_fault+0x273b/0x41c0
[ 2833.489129]  ? vm_insert_page+0x9c0/0x9c0
[ 2833.493290]  ? check_preemption_disabled+0x41/0x280
[ 2833.498307]  handle_mm_fault+0x436/0xb10
[ 2833.502371]  __do_page_fault+0x68e/0xd60
[ 2833.506438]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2833.511474]  ? spurious_fault+0x840/0x840
[ 2833.515618]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2833.520461]  ? page_fault+0x8/0x30
[ 2833.524000]  page_fault+0x1e/0x30
[ 2833.527451] RIP: 0033:0x5651764af970
[ 2833.531159] Code: Bad RIP value.
[ 2833.534518] RSP: 002b:00007f3f65e43408 EFLAGS: 00010202
[ 2833.539876] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000009c40
[ 2833.547145] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00005651779750e0
[ 2833.554409] RBP: 0000000000000000 R08: 00005651779750b0 R09: 0000000000000000
[ 2833.561672] R10: 2ce33e6c02ce33e7 R11: 00007f3f65e433d0 R12: 0000565176718520
[ 2833.568934] R13: 0000565177974e80 R14: 00005651764ea770 R15: 0000565177974d70
[ 2834.965236] Mem-Info:
[ 2834.993366] active_anon:204482 inactive_anon:1111717 isolated_anon:0
[ 2834.993366]  active_file:11 inactive_file:4 isolated_file:0
[ 2834.993366]  unevictable:44776 dirty:5 writeback:0 unstable:0
[ 2834.993366]  slab_reclaimable:17327 slab_unreclaimable:147977
[ 2834.993366]  mapped:57835 shmem:15189 pagetables:50161 bounce:0
[ 2834.993366]  free:25158 free_pcp:65 free_cma:0
[ 2835.393372] Node 0 active_anon:646284kB inactive_anon:1065856kB active_file:1868kB inactive_file:1860kB unevictable:146952kB isolated(anon):0kB isolated(file):128kB mapped:141496kB dirty:8kB writeback:0kB shmem:39992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2835.521343] Node 1 active_anon:171544kB inactive_anon:3386012kB active_file:3616kB inactive_file:4672kB unevictable:10352kB isolated(anon):0kB isolated(file):128kB mapped:79444kB dirty:12kB writeback:0kB shmem:20764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2835.551074] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2835.593445] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2835.606362] Node 0 DMA32 free:35692kB min:35996kB low:44992kB high:53988kB active_anon:645960kB inactive_anon:1060404kB active_file:1412kB inactive_file:1852kB unevictable:147004kB writepending:8kB present:3129332kB managed:2763456kB mlocked:147196kB kernel_stack:20192kB pagetables:48356kB bounce:0kB free_pcp:3220kB local_pcp:1768kB free_cma:0kB
20:03:53 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:53 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
accept4$tipc(r1, 0x0, 0x0, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:03:53 executing program 5:
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2835.702068] lowmem_reserve[]: 0 0 1 1 1
[ 2835.720730] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
20:03:53 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2835.768216] lowmem_reserve[]: 0 0 0 0 0
[ 2835.780729] Node 1 Normal free:61004kB min:53876kB low:67344kB high:80812kB active_anon:171544kB inactive_anon:3383616kB active_file:1564kB inactive_file:3512kB unevictable:10628kB writepending:12kB present:4194304kB managed:4128248kB mlocked:10724kB kernel_stack:49440kB pagetables:152032kB bounce:0kB free_pcp:1788kB local_pcp:468kB free_cma:0kB
[ 2835.817572] lowmem_reserve[]: 0 0 0 0 0
[ 2835.821666] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2835.841873] Node 0 DMA32: 38*4kB (U) 28*8kB (UME) 1331*16kB (UE) 432*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35496kB
[ 2835.860278] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2835.872688] Node 1 Normal: 73*4kB (M) 628*8kB (M) 1588*16kB (UM) 619*32kB (M) 142*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 59620kB
[ 2835.917947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2835.963609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2836.000678] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2836.027547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2836.040848] 20059 total pagecache pages
[ 2836.045050] 0 pages in swap cache
[ 2836.048506] Swap cache stats: add 0, delete 0, find 0/0
[ 2836.059888] Free swap  = 0kB
[ 2836.064399] Total swap = 0kB
[ 2836.067423] 2097051 pages RAM
[ 2836.070516] 0 pages HighMem/MovableOnly
[ 2836.101133] 369648 pages reserved
[ 2836.113104] 0 pages cma reserved
[ 2836.123396] Out of memory (oom_kill_allocating_task): Kill process 6244 (in:imklog) score 0 or sacrifice child
[ 2836.142990] Killed process 6189 (rsyslogd) total-vm:254332kB, anon-rss:956kB, file-rss:0kB, shmem-rss:0kB
[ 2836.217690] oom_reaper: reaped process 6189 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
20:03:54 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x0)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2837.079556] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2837.173554] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 2837.178717] CPU: 1 PID: 10326 Comm: syz-executor.2 Not tainted 4.19.202-syzkaller #0
[ 2837.186601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2837.195956] Call Trace:
[ 2837.198557]  dump_stack+0x1fc/0x2ef
[ 2837.202202]  dump_header+0x15d/0xc3f
[ 2837.205926]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2837.211039]  ? ___ratelimit+0x319/0x590
[ 2837.215027]  oom_kill_process.cold+0x10/0x692
[ 2837.219534]  ? check_preemption_disabled+0x41/0x280
[ 2837.224570]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2837.229854]  out_of_memory+0x1072/0x1390
[ 2837.234066]  ? oom_killer_disable+0x270/0x270
[ 2837.238570]  ? mutex_trylock+0x15f/0x1a0
[ 2837.242637]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2837.247517]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2837.252366]  ? __lock_acquire+0x6de/0x3ff0
[ 2837.256620]  ? mark_held_locks+0xf0/0xf0
[ 2837.260706]  alloc_pages_vma+0xf2/0x780
[ 2837.264694]  do_anonymous_page+0x7c2/0x1be0
[ 2837.269116]  ? __pte_alloc+0x340/0x340
[ 2837.273000]  ? __put_compound_page+0xc0/0xc0
[ 2837.277415]  ? mark_held_locks+0xf0/0xf0
[ 2837.281491]  __handle_mm_fault+0x227a/0x41c0
[ 2837.285910]  ? vm_insert_page+0x9c0/0x9c0
[ 2837.290079]  ? check_preemption_disabled+0x41/0x280
[ 2837.295108]  handle_mm_fault+0x436/0xb10
[ 2837.299186]  __get_user_pages+0x6f0/0x1710
[ 2837.303441]  ? follow_page_mask+0x1d00/0x1d00
[ 2837.307946]  ? check_preemption_disabled+0x41/0x280
[ 2837.312978]  populate_vma_page_range+0x200/0x290
[ 2837.317742]  __mm_populate+0x1ea/0x350
[ 2837.321638]  ? populate_vma_page_range+0x290/0x290
[ 2837.326569]  ? do_mlock+0x6b0/0x6b0
[ 2837.330197]  ? security_capable+0x8f/0xc0
[ 2837.334358]  __se_sys_mlockall+0x362/0x4e0
[ 2837.338600]  do_syscall_64+0xf9/0x620
[ 2837.342406]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2837.347595] RIP: 0033:0x4665e9
[ 2837.350785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2837.369684] RSP: 002b:00007f8244f71188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2837.377394] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2837.384661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2837.391932] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2837.399206] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2837.406477] R13: 00007ffc2dc04a3f R14: 00007f8244f71300 R15: 0000000000022000
[ 2837.425278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2837.430875] ieee802154 phy1 wpan1: encryption failed: -22
[ 2837.905476] Mem-Info:
[ 2837.908168] active_anon:204296 inactive_anon:1111718 isolated_anon:0
[ 2837.908168]  active_file:40 inactive_file:0 isolated_file:9
[ 2837.908168]  unevictable:43769 dirty:0 writeback:0 unstable:0
[ 2837.908168]  slab_reclaimable:17443 slab_unreclaimable:149026
[ 2837.908168]  mapped:56250 shmem:15189 pagetables:50183 bounce:0
[ 2837.908168]  free:25229 free_pcp:0 free_cma:0
[ 2837.942313] Node 0 active_anon:645496kB inactive_anon:1063760kB active_file:100kB inactive_file:0kB unevictable:154144kB isolated(anon):0kB isolated(file):36kB mapped:141348kB dirty:0kB writeback:0kB shmem:39992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2837.971323] Node 1 active_anon:171688kB inactive_anon:3383112kB active_file:60kB inactive_file:0kB unevictable:20932kB isolated(anon):0kB isolated(file):0kB mapped:83652kB dirty:0kB writeback:0kB shmem:20764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2837.999475] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2838.028910] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2838.034023] Node 0 DMA32 free:35900kB min:35996kB low:44992kB high:53988kB active_anon:645172kB inactive_anon:1060408kB active_file:20kB inactive_file:36kB unevictable:154144kB writepending:0kB present:3129332kB managed:2763456kB mlocked:154144kB kernel_stack:20128kB pagetables:48392kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB
[ 2838.064508] lowmem_reserve[]: 0 0 1 1 1
[ 2838.068758] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2838.094691] lowmem_reserve[]: 0 0 0 0 0
[ 2838.098683] Node 1 Normal free:53784kB min:53876kB low:67344kB high:80812kB active_anon:171688kB inactive_anon:3383112kB active_file:0kB inactive_file:44kB unevictable:20932kB writepending:0kB present:4194304kB managed:4128248kB mlocked:20932kB kernel_stack:49664kB pagetables:152084kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2838.128598] lowmem_reserve[]: 0 0 0 0 0
[ 2838.132570] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2838.149182] Node 0 DMA32: 9*4kB (U) 69*8kB (U) 1347*16kB (UE) 430*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35900kB
[ 2838.162435] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2838.173217] Node 1 Normal: 50*4kB (UM) 34*8kB (ME) 1574*16kB (UME) 613*32kB (UME) 133*64kB (UME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53784kB
[ 2838.187631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2838.196556] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2838.205184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2838.214089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2838.222681] 18700 total pagecache pages
[ 2838.226677] 0 pages in swap cache
[ 2838.230145] Swap cache stats: add 0, delete 0, find 0/0
[ 2838.235544] Free swap  = 0kB
[ 2838.238549] Total swap = 0kB
[ 2838.241570] 2097051 pages RAM
[ 2838.244718] 0 pages HighMem/MovableOnly
[ 2838.248709] 369648 pages reserved
[ 2838.252149] 0 pages cma reserved
[ 2838.255566] Out of memory (oom_kill_allocating_task): Kill process 10326 (syz-executor.2) score 0 or sacrifice child
[ 2838.267180] Killed process 10321 (syz-executor.2) total-vm:93252kB, anon-rss:6620kB, file-rss:39180kB, shmem-rss:0kB
[ 2838.279133] oom_reaper: reaped process 10321 (syz-executor.2), now anon-rss:6664kB, file-rss:40192kB, shmem-rss:0kB
[ 2838.769561] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2838.805775] syz-fuzzer cpuset=/ mems_allowed=0-1
[ 2838.810826] CPU: 1 PID: 8086 Comm: syz-fuzzer Not tainted 4.19.202-syzkaller #0
[ 2838.818475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2838.827813] Call Trace:
[ 2838.830391]  dump_stack+0x1fc/0x2ef
[ 2838.834006]  dump_header+0x15d/0xc3f
[ 2838.837708]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2838.842798]  ? ___ratelimit+0x319/0x590
[ 2838.846761]  oom_kill_process.cold+0x10/0x692
[ 2838.851247]  ? check_preemption_disabled+0x41/0x280
[ 2838.856259]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2838.861544]  out_of_memory+0x1072/0x1390
[ 2838.865701]  ? oom_killer_disable+0x270/0x270
[ 2838.870195]  ? mutex_trylock+0x15f/0x1a0
[ 2838.874251]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2838.879088]  ? find_get_entry+0x4cd/0x8a0
[ 2838.883226]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2838.888073]  alloc_pages_current+0x193/0x2a0
[ 2838.892469]  filemap_fault+0x146e/0x2180
[ 2838.896525]  ext4_filemap_fault+0x84/0xb0
[ 2838.900660]  __do_fault+0x10b/0x4b0
[ 2838.904278]  __handle_mm_fault+0x273b/0x41c0
[ 2838.908673]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2838.913759]  ? vm_insert_page+0x9c0/0x9c0
[ 2838.917901]  ? check_preemption_disabled+0x41/0x280
[ 2838.922907]  handle_mm_fault+0x436/0xb10
[ 2838.926972]  __do_page_fault+0x68e/0xd60
[ 2838.931036]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2838.936037]  ? spurious_fault+0x840/0x840
[ 2838.940169]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2838.944999]  ? page_fault+0x8/0x30
[ 2838.948524]  page_fault+0x1e/0x30
[ 2838.952410] RIP: 0033:0x46dabd
[ 2838.955589] Code: 8b 44 24 20 b9 40 42 0f 00 f7 f1 48 89 04 24 b8 e8 03 00 00 f7 e2 48 89 44 24 08 48 89 e7 be 00 00 00 00 b8 23 00 00 00 0f 05 <48> 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc cc cc cc cc cc cc
[ 2838.974475] RSP: 002b:000000c00003df18 EFLAGS: 00010202
[ 2838.979921] RAX: 0000000000000000 RBX: 0000000000004e20 RCX: 000000000046dabd
[ 2838.987172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c00003df18
[ 2838.994514] RBP: 000000c00003df28 R08: 000000000002eac8 R09: 000002f901342b18
[ 2839.001779] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000043b6a0
[ 2839.009127] R13: 0000000000000000 R14: 000000000094d6b8 R15: 0000000000000000
[ 2839.062637] Mem-Info:
[ 2839.065391] active_anon:204277 inactive_anon:1111719 isolated_anon:0
[ 2839.065391]  active_file:37 inactive_file:59 isolated_file:8
[ 2839.065391]  unevictable:43672 dirty:5 writeback:0 unstable:0
[ 2839.065391]  slab_reclaimable:17467 slab_unreclaimable:148767
[ 2839.065391]  mapped:56118 shmem:15189 pagetables:50156 bounce:0
[ 2839.065391]  free:25188 free_pcp:218 free_cma:0
[ 2839.102164] Node 0 active_anon:645484kB inactive_anon:1063760kB active_file:148kB inactive_file:40kB unevictable:153764kB isolated(anon):0kB isolated(file):0kB mapped:139608kB dirty:16kB writeback:0kB shmem:39992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2839.132075] Node 1 active_anon:171624kB inactive_anon:3383116kB active_file:100kB inactive_file:92kB unevictable:20924kB isolated(anon):0kB isolated(file):32kB mapped:84764kB dirty:4kB writeback:0kB shmem:20764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2839.196980] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2839.314710] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2839.320509] Node 0 DMA32 free:36340kB min:35996kB low:44992kB high:53988kB active_anon:645160kB inactive_anon:1060408kB active_file:468kB inactive_file:144kB unevictable:153764kB writepending:16kB present:3129332kB managed:2763456kB mlocked:153764kB kernel_stack:20128kB pagetables:48380kB bounce:0kB free_pcp:584kB local_pcp:584kB free_cma:0kB
[ 2839.480679] lowmem_reserve[]: 0 0 1 1 1
[ 2839.521168] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2839.643161] lowmem_reserve[]: 0 0 0 0 0
[ 2839.647157] Node 1 Normal free:53568kB min:53876kB low:67344kB high:80812kB active_anon:171624kB inactive_anon:3383116kB active_file:100kB inactive_file:92kB unevictable:20924kB writepending:4kB present:4194304kB managed:4128248kB mlocked:20924kB kernel_stack:49472kB pagetables:151988kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[ 2839.833077] lowmem_reserve[]: 0 0 0 0 0
[ 2839.837088] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2839.876285] Node 0 DMA32: 602*4kB (UME) 811*8kB (UME) 1377*16kB (UME) 433*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44784kB
[ 2839.898374] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2839.916845] Node 1 Normal: 1741*4kB (UM) 308*8kB (UM) 1637*16kB (UME) 621*32kB (UME) 128*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 63684kB
[ 2839.931912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2839.941905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2839.951208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2839.961185] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2839.998900] 19058 total pagecache pages
[ 2840.017324] 0 pages in swap cache
[ 2840.020801] Swap cache stats: add 0, delete 0, find 0/0
[ 2840.057594] Free swap  = 0kB
[ 2840.060631] Total swap = 0kB
[ 2840.092974] 2097051 pages RAM
[ 2840.096454] 0 pages HighMem/MovableOnly
[ 2840.100423] 369648 pages reserved
20:03:57 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:57 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2840.132710] 0 pages cma reserved
[ 2840.136810] Out of memory (oom_kill_allocating_task): Kill process 8086 (syz-fuzzer) score 0 or sacrifice child
[ 2840.167727] Killed process 9976 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:776kB, shmem-rss:0kB
20:03:58 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:03:58 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:03:58 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
accept4$tipc(r1, 0x0, 0x0, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

[ 2842.236810] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 2842.365756] syz-fuzzer cpuset=/ mems_allowed=0-1
[ 2842.391345] CPU: 0 PID: 8089 Comm: syz-fuzzer Not tainted 4.19.202-syzkaller #0
[ 2842.398812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2842.408164] Call Trace:
[ 2842.410761]  dump_stack+0x1fc/0x2ef
[ 2842.414396]  dump_header+0x15d/0xc3f
[ 2842.418114]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2842.423218]  ? ___ratelimit+0x319/0x590
[ 2842.427204]  oom_kill_process.cold+0x10/0x692
[ 2842.431731]  ? check_preemption_disabled+0x41/0x280
[ 2842.436751]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2842.442024]  out_of_memory+0x1072/0x1390
[ 2842.446090]  ? oom_killer_disable+0x270/0x270
[ 2842.450588]  ? mutex_trylock+0x15f/0x1a0
[ 2842.454652]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2842.459501]  ? find_get_entry+0x4cd/0x8a0
[ 2842.463657]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2842.468530]  alloc_pages_current+0x193/0x2a0
[ 2842.472940]  filemap_fault+0x146e/0x2180
[ 2842.477016]  ext4_filemap_fault+0x84/0xb0
[ 2842.481165]  __do_fault+0x10b/0x4b0
[ 2842.484795]  __handle_mm_fault+0x273b/0x41c0
[ 2842.489205]  ? vm_insert_page+0x9c0/0x9c0
[ 2842.493364]  ? check_preemption_disabled+0x41/0x280
[ 2842.498381]  handle_mm_fault+0x436/0xb10
[ 2842.502443]  __do_page_fault+0x68e/0xd60
[ 2842.506506]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2842.511522]  ? spurious_fault+0x840/0x840
[ 2842.515680]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2842.520522]  ? page_fault+0x8/0x30
[ 2842.524071]  page_fault+0x1e/0x30
[ 2842.527521] RIP: 0033:0x45476a
[ 2842.530710] Code: Bad RIP value.
[ 2842.534065] RSP: 002b:000000c000307878 EFLAGS: 00010202
[ 2842.539420] RAX: 0000000000ba34a0 RBX: 00000000009984b4 RCX: 0000000000ba34a0
[ 2842.546685] RDX: 0000000000000008 RSI: 00000000004da846 RDI: 000000c000307ac0
[ 2842.553951] RBP: 000000c000307888 R08: 0000000000000055 R09: 0000000000000044
[ 2842.561218] R10: 000000000094d49b R11: 000000c00652d7e0 R12: ffffffffffffffff
[ 2842.568489] R13: 000000000000017f R14: 000000000000017e R15: 0000000000000200
[ 2842.670729] Mem-Info:
[ 2842.675285] active_anon:204276 inactive_anon:1104622 isolated_anon:0
[ 2842.675285]  active_file:44 inactive_file:3 isolated_file:0
[ 2842.675285]  unevictable:59622 dirty:12 writeback:0 unstable:0
[ 2842.675285]  slab_reclaimable:17618 slab_unreclaimable:148870
[ 2842.675285]  mapped:49962 shmem:15185 pagetables:50057 bounce:0
[ 2842.675285]  free:25057 free_pcp:0 free_cma:0
[ 2842.813381] Node 0 active_anon:645400kB inactive_anon:1043924kB active_file:0kB inactive_file:0kB unevictable:184240kB isolated(anon):0kB isolated(file):0kB mapped:140816kB dirty:36kB writeback:0kB shmem:39976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2843.018911] Node 1 active_anon:171772kB inactive_anon:3374568kB active_file:88kB inactive_file:20kB unevictable:54492kB isolated(anon):0kB isolated(file):0kB mapped:59236kB dirty:12kB writeback:0kB shmem:20764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2843.230299] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2843.332047] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2843.367447] Node 0 DMA32 free:35912kB min:35996kB low:44992kB high:53988kB active_anon:645084kB inactive_anon:1040620kB active_file:4kB inactive_file:4kB unevictable:184292kB writepending:36kB present:3129332kB managed:2763456kB mlocked:184292kB kernel_stack:20256kB pagetables:48292kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2843.410904] lowmem_reserve[]: 0 0 1 1 1
[ 2843.418304] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2843.458787] lowmem_reserve[]: 0 0 0 0 0
[ 2843.483687] Node 1 Normal free:53220kB min:53876kB low:67344kB high:80812kB active_anon:171772kB inactive_anon:3374568kB active_file:88kB inactive_file:196kB unevictable:55400kB writepending:12kB present:4194304kB managed:4128248kB mlocked:55400kB kernel_stack:49376kB pagetables:151724kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2843.560920] lowmem_reserve[]: 0 0 0 0 0
[ 2843.569793] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2843.638246] Node 0 DMA32: 29*4kB (UM) 71*8kB (UM) 1373*16kB (UME) 425*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36252kB
[ 2843.672688] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2843.702801] Node 1 Normal: 1652*4kB (UME) 1183*8kB (UME) 201*16kB (UME) 734*32kB (UME) 174*64kB (UME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53912kB
[ 2843.742877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2843.751741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2843.786558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2843.796194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2843.808557] 21279 total pagecache pages
[ 2843.812546] 0 pages in swap cache
[ 2843.840320] Swap cache stats: add 0, delete 0, find 0/0
[ 2843.876431] Free swap  = 0kB
[ 2843.879465] Total swap = 0kB
[ 2843.882494] 2097051 pages RAM
[ 2843.902688] 0 pages HighMem/MovableOnly
[ 2843.906677] 369648 pages reserved
[ 2843.910120] 0 pages cma reserved
[ 2843.943379] Out of memory (oom_kill_allocating_task): Kill process 8089 (syz-fuzzer) score 0 or sacrifice child
[ 2844.054247] Killed process 7948 (syz-executor.1) total-vm:84924kB, anon-rss:60kB, file-rss:652kB, shmem-rss:0kB
20:04:02 executing program 4:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

20:04:02 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:04:02 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:04:02 executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000480)=ANY=[@ANYBLOB="b4000067744f22c6b0c66aae44ae446681ad766dfc16e7ee9fd58e804e99f0d5362000b5079859bc09b908e94447a07f8f2ffb80a635891ec0eae3c2e53bc6ddef0a"], 0x10)
accept4$tipc(r1, 0x0, 0x0, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
accept4$tipc(r3, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250100000040000180060005004e2400000500020006000000050002001d000000060005004e2400001400040000000000000000000000ffffffffffff08000700", @ANYRES32=r4, @ANYBLOB="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"/416], 0x78}}, 0x8800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4804c1, 0x0)
mlockall(0x3)

20:04:02 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:04:03 executing program 1:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2845.699059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2846.693413] syz-executor.0 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2846.713381] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 2846.719084] CPU: 0 PID: 10389 Comm: syz-executor.0 Not tainted 4.19.202-syzkaller #0
[ 2846.726967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2846.736314] Call Trace:
[ 2846.738910]  dump_stack+0x1fc/0x2ef
[ 2846.742545]  dump_header+0x15d/0xc3f
[ 2846.746263]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2846.751368]  ? ___ratelimit+0x319/0x590
[ 2846.755349]  oom_kill_process.cold+0x10/0x692
[ 2846.759843]  ? check_preemption_disabled+0x41/0x280
[ 2846.764863]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2846.770145]  out_of_memory+0x1072/0x1390
[ 2846.774214]  ? oom_killer_disable+0x270/0x270
[ 2846.778710]  ? mutex_trylock+0x15f/0x1a0
[ 2846.782776]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2846.787640]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2846.792483]  ? __lock_acquire+0x6de/0x3ff0
[ 2846.796740]  ? mark_held_locks+0xf0/0xf0
[ 2846.800813]  alloc_pages_vma+0xf2/0x780
[ 2846.804820]  do_anonymous_page+0x7c2/0x1be0
[ 2846.809153]  ? __pte_alloc+0x340/0x340
[ 2846.813034]  ? __put_compound_page+0xc0/0xc0
[ 2846.817477]  ? mark_held_locks+0xf0/0xf0
[ 2846.821540]  __handle_mm_fault+0x227a/0x41c0
[ 2846.825955]  ? vm_insert_page+0x9c0/0x9c0
[ 2846.830115]  ? check_preemption_disabled+0x41/0x280
[ 2846.835155]  handle_mm_fault+0x436/0xb10
[ 2846.839218]  __get_user_pages+0x6f0/0x1710
[ 2846.843475]  ? follow_page_mask+0x1d00/0x1d00
[ 2846.847972]  ? check_preemption_disabled+0x41/0x280
[ 2846.852994]  populate_vma_page_range+0x200/0x290
[ 2846.857839]  __mm_populate+0x1ea/0x350
[ 2846.861724]  ? populate_vma_page_range+0x290/0x290
[ 2846.866647]  ? do_mlock+0x6b0/0x6b0
[ 2846.870273]  ? security_capable+0x8f/0xc0
[ 2846.874426]  __se_sys_mlockall+0x362/0x4e0
[ 2846.878661]  do_syscall_64+0xf9/0x620
[ 2846.882467]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2846.887652] RIP: 0033:0x4665e9
[ 2846.890841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2846.909863] RSP: 002b:00007f43d6822188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2846.917624] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2846.924904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2846.932164] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2846.939415] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2846.946670] R13: 00007ffda310918f R14: 00007f43d6822300 R15: 0000000000022000
[ 2846.998425] Mem-Info:
[ 2847.001404] active_anon:204211 inactive_anon:1077110 isolated_anon:0
[ 2847.001404]  active_file:14 inactive_file:14 isolated_file:0
[ 2847.001404]  unevictable:88569 dirty:13 writeback:0 unstable:0
[ 2847.001404]  slab_reclaimable:17686 slab_unreclaimable:148580
[ 2847.001404]  mapped:63871 shmem:15182 pagetables:49827 bounce:0
[ 2847.001404]  free:25100 free_pcp:217 free_cma:0
[ 2847.049126] Node 0 active_anon:645816kB inactive_anon:1014616kB active_file:48kB inactive_file:48kB unevictable:235048kB isolated(anon):0kB isolated(file):0kB mapped:129964kB dirty:52kB writeback:0kB shmem:39988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2847.092149] Node 1 active_anon:171028kB inactive_anon:3293824kB active_file:8kB inactive_file:8kB unevictable:119228kB isolated(anon):0kB isolated(file):0kB mapped:125520kB dirty:0kB writeback:0kB shmem:20740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2847.147939] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2847.201599] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2847.240353] Node 0 DMA32 free:35628kB min:35996kB low:44992kB high:53988kB active_anon:645492kB inactive_anon:1011264kB active_file:48kB inactive_file:48kB unevictable:235048kB writepending:52kB present:3129332kB managed:2763456kB mlocked:235048kB kernel_stack:20416kB pagetables:48452kB bounce:0kB free_pcp:364kB local_pcp:364kB free_cma:0kB
[ 2847.288996] lowmem_reserve[]: 0 0 1 1 1
[ 2847.293476] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2847.332790] lowmem_reserve[]: 0 0 0 0 0
[ 2847.337167] Node 1 Normal free:53792kB min:53876kB low:67344kB high:80812kB active_anon:171028kB inactive_anon:3293824kB active_file:8kB inactive_file:8kB unevictable:119228kB writepending:0kB present:4194304kB managed:4128248kB mlocked:119228kB kernel_stack:49024kB pagetables:150600kB bounce:0kB free_pcp:504kB local_pcp:256kB free_cma:0kB
[ 2847.381308] lowmem_reserve[]: 0 0 0 0 0
[ 2847.386029] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2847.414650] Node 0 DMA32: 1*4kB (U) 187*8kB (U) 1297*16kB (U) 418*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35628kB
[ 2847.440924] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2847.467978] Node 1 Normal: 116*4kB (ME) 149*8kB (UME) 27*16kB (UME) 1076*32kB (UME) 258*64kB (UME) 4*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53800kB
[ 2847.496574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2847.506021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2847.527051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2847.538063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2847.579339] 36008 total pagecache pages
[ 2847.609078] 0 pages in swap cache
[ 2847.650028] Swap cache stats: add 0, delete 0, find 0/0
[ 2847.682287] Free swap  = 0kB
[ 2847.720311] Total swap = 0kB
[ 2847.749939] 2097051 pages RAM
[ 2847.777762] 0 pages HighMem/MovableOnly
[ 2847.800132] 369648 pages reserved
[ 2847.811327] 0 pages cma reserved
[ 2847.840743] Out of memory (oom_kill_allocating_task): Kill process 10389 (syz-executor.0) score 0 or sacrifice child
[ 2847.941593] Killed process 10390 (syz-executor.0) total-vm:93252kB, anon-rss:148kB, file-rss:34968kB, shmem-rss:0kB
[ 2847.989954] oom_reaper: reaped process 10390 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[ 2847.999390] syz-executor.0 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000
[ 2848.124694] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 2848.152002] CPU: 0 PID: 10389 Comm: syz-executor.0 Not tainted 4.19.202-syzkaller #0
[ 2848.159907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2848.169524] Call Trace:
[ 2848.172105]  dump_stack+0x1fc/0x2ef
[ 2848.175829]  dump_header+0x15d/0xc3f
[ 2848.179554]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2848.184652]  ? ___ratelimit+0x319/0x590
[ 2848.188637]  oom_kill_process.cold+0x10/0x692
[ 2848.193121]  ? check_preemption_disabled+0x41/0x280
[ 2848.198562]  ? has_intersects_mems_allowed+0x1d6/0x290
[ 2848.203845]  out_of_memory+0x1072/0x1390
[ 2848.207904]  ? oom_killer_disable+0x270/0x270
[ 2848.212421]  ? mutex_trylock+0x15f/0x1a0
[ 2848.216554]  __alloc_pages_nodemask+0x23a2/0x2890
[ 2848.221397]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2848.226221]  ? __lock_acquire+0x6de/0x3ff0
[ 2848.230438]  ? mark_held_locks+0xf0/0xf0
[ 2848.234491]  alloc_pages_vma+0xf2/0x780
[ 2848.238452]  do_anonymous_page+0x7c2/0x1be0
[ 2848.242771]  ? __pte_alloc+0x340/0x340
[ 2848.246655]  ? __put_compound_page+0xc0/0xc0
[ 2848.251053]  ? mark_held_locks+0xf0/0xf0
[ 2848.255098]  __handle_mm_fault+0x227a/0x41c0
[ 2848.259488]  ? vm_insert_page+0x9c0/0x9c0
[ 2848.263640]  ? check_preemption_disabled+0x41/0x280
[ 2848.268681]  handle_mm_fault+0x436/0xb10
[ 2848.272744]  __get_user_pages+0x6f0/0x1710
[ 2848.276987]  ? follow_page_mask+0x1d00/0x1d00
[ 2848.281473]  ? check_preemption_disabled+0x41/0x280
[ 2848.286483]  populate_vma_page_range+0x200/0x290
[ 2848.291222]  __mm_populate+0x1ea/0x350
[ 2848.295102]  ? populate_vma_page_range+0x290/0x290
[ 2848.300019]  ? do_mlock+0x6b0/0x6b0
[ 2848.303635]  ? security_capable+0x8f/0xc0
[ 2848.307786]  __se_sys_mlockall+0x362/0x4e0
[ 2848.312056]  do_syscall_64+0xf9/0x620
[ 2848.315848]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2848.321020] RIP: 0033:0x4665e9
[ 2848.324197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2848.343078] RSP: 002b:00007f43d6822188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 2848.350766] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[ 2848.358023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2848.365283] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[ 2848.372556] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[ 2848.379819] R13: 00007ffda310918f R14: 00007f43d6822300 R15: 0000000000022000
[ 2848.417570] Mem-Info:
[ 2848.420029] active_anon:204204 inactive_anon:1077033 isolated_anon:0
[ 2848.420029]  active_file:14 inactive_file:14 isolated_file:0
[ 2848.420029]  unevictable:88569 dirty:13 writeback:0 unstable:0
[ 2848.420029]  slab_reclaimable:17682 slab_unreclaimable:148577
[ 2848.420029]  mapped:63871 shmem:15182 pagetables:49678 bounce:0
[ 2848.420029]  free:25182 free_pcp:502 free_cma:0
[ 2848.522356] Node 0 active_anon:645796kB inactive_anon:1014448kB active_file:48kB inactive_file:48kB unevictable:235048kB isolated(anon):0kB isolated(file):0kB mapped:129964kB dirty:52kB writeback:0kB shmem:39988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2848.719584] Node 1 active_anon:171020kB inactive_anon:3293684kB active_file:8kB inactive_file:8kB unevictable:119228kB isolated(anon):0kB isolated(file):0kB mapped:125520kB dirty:0kB writeback:0kB shmem:20740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 2848.911354] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2849.012484] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2849.038233] Node 0 DMA32 free:35640kB min:35996kB low:44992kB high:53988kB active_anon:645372kB inactive_anon:1031300kB active_file:1404kB inactive_file:2500kB unevictable:208088kB writepending:0kB present:3129332kB managed:2763456kB mlocked:208348kB kernel_stack:20064kB pagetables:48080kB bounce:0kB free_pcp:1584kB local_pcp:248kB free_cma:0kB
[ 2849.211799] lowmem_reserve[]: 0 0 1 1 1
[ 2849.232027] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2849.353919] lowmem_reserve[]: 0 0 0 0 0
[ 2849.392399] Node 1 Normal free:88508kB min:53876kB low:67344kB high:80812kB active_anon:171016kB inactive_anon:3295576kB active_file:12160kB inactive_file:11908kB unevictable:59792kB writepending:0kB present:4194304kB managed:4128248kB mlocked:59812kB kernel_stack:48960kB pagetables:150424kB bounce:0kB free_pcp:2700kB local_pcp:1264kB free_cma:0kB
[ 2849.434872] lowmem_reserve[]: 0 0 0 0 0
[ 2849.438907] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2849.461209] Node 0 DMA32: 2951*4kB (UME) 2023*8kB (UME) 1335*16kB (UM) 430*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 63108kB
[ 2849.484366] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2849.499085] Node 1 Normal: 3250*4kB (UME) 2292*8kB (UME) 386*16kB (UME) 1065*32kB (UME) 260*64kB (UME) 6*128kB (UM) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 90280kB
[ 2849.517304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
20:04:07 executing program 5:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

20:04:07 executing program 2:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x80000000, 0x20})
mlockall(0x0)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)
syz_open_procfs$namespace(r0, 0x0)

[ 2849.576980] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2849.616975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2849.673445] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2849.704254] 34983 total pagecache pages
[ 2849.717502] 0 pages in swap cache
[ 2849.742965] Swap cache stats: add 0, delete 0, find 0/0
[ 2849.774773] Free swap  = 0kB
[ 2849.785169] Total swap = 0kB
[ 2849.788369] 2097051 pages RAM
[ 2849.791552] 0 pages HighMem/MovableOnly
[ 2849.797040] 369648 pages reserved
[ 2849.800592] 0 pages cma reserved
[ 2849.805153] Out of memory (oom_kill_allocating_task): Kill process 10389 (syz-executor.0) score 0 or sacrifice child
[ 2849.817762] Killed process 10389 (syz-executor.0) total-vm:93516kB, anon-rss:30680kB, file-rss:56576kB, shmem-rss:0kB
20:04:07 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
mlockall(0x3)

[ 2849.833579] oom_reaper: reaped process 10389 (syz-executor.0), now anon-rss:30680kB, file-rss:56572kB, shmem-rss:0kB
[ 2850.939637] IPVS: ftp: loaded support on port[0] = 21
[ 2850.960371] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2850.985544] IPVS: ftp: loaded support on port[0] = 21
[ 2850.997259] batman_adv: batadv0: Removing interface: batadv_slave_0
20:04:08 executing program 3:
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x20})
mlockall(0x3)
r0 = fork()
ptrace$setsig(0x4203, r0, 0x0, 0x0)
r1 = fork()
ptrace$cont(0x20, r1, 0x900, 0x6)

[ 2851.069780] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2851.122164] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2851.134925] device bridge_slave_1 left promiscuous mode
[ 2851.140422] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2851.193201] device bridge_slave_0 left promiscuous mode
[ 2851.198801] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2851.246100] device veth1_macvtap left promiscuous mode
[ 2851.251432] device veth0_macvtap left promiscuous mode
[ 2851.282335] device veth1_vlan left promiscuous mode
[ 2851.287412] device veth0_vlan left promiscuous mode
20:04:09 executing program 0:
mlockall(0x3)
mlockall(0x0)

20:04:09 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000000380)=""/159, 0x9f}, 0x0)
r0 = fork()
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x20, 0xa1})
mlockall(0x3)
ptrace$pokeuser(0x6, r0, 0x40, 0x8)
mlockall(0x3)

[ 2852.222230] Bluetooth: hci0: command 0x0409 tx timeout
[ 2852.862043] Bluetooth: hci5: command 0x0409 tx timeout
[ 2854.302118] Bluetooth: hci0: command 0x041b tx timeout
[ 2854.941952] Bluetooth: hci5: command 0x041b tx timeout
[ 2856.381892] Bluetooth: hci0: command 0x040f tx timeout
[ 2857.021754] Bluetooth: hci5: command 0x040f tx timeout
[ 2858.027490] device hsr_slave_1 left promiscuous mode
[ 2858.035267] device hsr_slave_0 left promiscuous mode
[ 2858.050554] team0 (unregistering): Port device team_slave_1 removed
[ 2858.065260] team0 (unregistering): Port device team_slave_0 removed
[ 2858.075472] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 2858.085893] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 2858.118337] bond0 (unregistering): Released all slaves
[ 2858.256669] chnl_net:caif_netlink_parms(): no params data found
[ 2858.345259] chnl_net:caif_netlink_parms(): no params data found
[ 2858.359995] syz-executor.4: page allocation failure: order:5, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
[ 2858.370581] syz-executor.4 cpuset=/ mems_allowed=0-1
[ 2858.375700] CPU: 0 PID: 10407 Comm: syz-executor.4 Not tainted 4.19.202-syzkaller #0
[ 2858.383593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2858.392947] Call Trace:
[ 2858.395538]  dump_stack+0x1fc/0x2ef
[ 2858.399172]  warn_alloc.cold+0x7b/0x18f
[ 2858.403144]  ? zone_watermark_ok_safe+0x260/0x260
[ 2858.408011]  ? wakeup_kswapd+0x151/0x660
[ 2858.412074]  ? __zone_watermark_ok+0x300/0x300
[ 2858.416654]  ? wake_all_kswapds+0x143/0x2c0
[ 2858.420981]  __alloc_pages_nodemask+0x232f/0x2890
[ 2858.425855]  ? batadv_hash_new+0x6f/0x290
[ 2858.430007]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2858.434857]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2858.439698]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2858.444537]  ? netlink_sendmsg+0x6bb/0xc40
[ 2858.448773]  ? sock_sendmsg+0xc3/0x120
[ 2858.452665]  ? __sys_sendto+0x21a/0x320
[ 2858.456645]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2858.461756]  ? mod_timer+0x4ef/0x1010
[ 2858.465562]  ? ____cache_alloc_node+0x156/0x1d0
[ 2858.470233]  cache_grow_begin+0xa4/0x8a0
[ 2858.474297]  fallback_alloc+0x213/0x2e0
[ 2858.478278]  __kmalloc+0x213/0x3c0
[ 2858.481813]  ? batadv_hash_new+0xaa/0x290
[ 2858.485958]  batadv_hash_new+0xaa/0x290
[ 2858.489934]  ? queue_delayed_work_on+0x122/0x200
[ 2858.494865]  batadv_dat_init+0x61/0x190
[ 2858.498892]  batadv_mesh_init+0x4d0/0x690
[ 2858.503041]  batadv_softif_init_late+0xad7/0xd90
[ 2858.507802]  ? batadv_get_strings+0x40/0x40
[ 2858.512122]  ? __dev_get_by_name+0x117/0x150
[ 2858.516527]  ? batadv_get_strings+0x40/0x40
[ 2858.520850]  register_netdevice+0x2dc/0x10f0
[ 2858.525288]  ? unregister_netdev+0x20/0x20
[ 2858.529542]  ? rtnl_create_link+0x145/0xa40
[ 2858.533863]  rtnl_newlink+0x13b5/0x15c0
[ 2858.537845]  ? rtnl_getlink+0x620/0x620
[ 2858.541819]  ? __lock_acquire+0x6de/0x3ff0
[ 2858.546062]  ? __lock_acquire+0x6de/0x3ff0
[ 2858.550298]  ? get_reg+0x1f0/0x1f0
[ 2858.553837]  ? unwind_next_frame+0xeee/0x1400
[ 2858.558327]  ? mark_held_locks+0xf0/0xf0
[ 2858.562386]  ? unwind_next_frame+0xeee/0x1400
[ 2858.566929]  ? __save_stack_trace+0x72/0x190
[ 2858.571335]  ? deref_stack_reg+0x134/0x1d0
[ 2858.575567]  ? get_reg+0x176/0x1f0
[ 2858.579112]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[ 2858.585005]  ? deref_stack_reg+0x1d0/0x1d0
[ 2858.589234]  ? is_bpf_text_address+0xd5/0x1b0
[ 2858.593730]  ? __lock_acquire+0x6de/0x3ff0
[ 2858.597967]  ? __lock_acquire+0x6de/0x3ff0
[ 2858.602207]  ? __lock_acquire+0x6de/0x3ff0
[ 2858.606436]  ? mark_held_locks+0xf0/0xf0
[ 2858.610508]  ? get_reg+0x1f0/0x1f0
[ 2858.614046]  ? unwind_next_frame+0xeee/0x1400
[ 2858.618570]  ? mutex_trylock+0x1a0/0x1a0
[ 2858.622646]  ? rtnl_getlink+0x620/0x620
[ 2858.626627]  rtnetlink_rcv_msg+0x453/0xb80
[ 2858.630864]  ? rtnl_calcit.isra.0+0x430/0x430
[ 2858.635356]  ? __netlink_lookup+0x3fc/0x730
[ 2858.639677]  ? lock_downgrade+0x720/0x720
[ 2858.643827]  ? check_preemption_disabled+0x41/0x280
[ 2858.648844]  netlink_rcv_skb+0x160/0x440
[ 2858.652903]  ? rtnl_calcit.isra.0+0x430/0x430
[ 2858.657397]  ? netlink_ack+0xae0/0xae0
[ 2858.661299]  netlink_unicast+0x4d5/0x690
[ 2858.665367]  ? netlink_sendskb+0x110/0x110
[ 2858.669607]  ? _copy_from_iter_full+0x229/0x7c0
[ 2858.674271]  ? __phys_addr_symbol+0x2c/0x70
[ 2858.678586]  ? __check_object_size+0x17b/0x3e0
[ 2858.683165]  netlink_sendmsg+0x6bb/0xc40
[ 2858.687227]  ? aa_af_perm+0x230/0x230
[ 2858.691111]  ? nlmsg_notify+0x1a0/0x1a0
[ 2858.695108]  ? nlmsg_notify+0x1a0/0x1a0
[ 2858.699084]  sock_sendmsg+0xc3/0x120
[ 2858.702824]  __sys_sendto+0x21a/0x320
[ 2858.706621]  ? __ia32_sys_getpeername+0xb0/0xb0
[ 2858.711301]  ? check_preemption_disabled+0x41/0x280
[ 2858.716315]  ? __fd_install+0x1eb/0x610
[ 2858.720286]  ? __sys_socket+0x16d/0x200
[ 2858.724255]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 2858.728835]  ? move_addr_to_kernel+0x70/0x70
[ 2858.733252]  __x64_sys_sendto+0xdd/0x1b0
[ 2858.737316]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 2858.741908]  do_syscall_64+0xf9/0x620
[ 2858.745713]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2858.750893] RIP: 0033:0x41957c
[ 2858.754104] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 2858.773028] RSP: 002b:00007ffc180d6390 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2858.780994] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041957c
[ 2858.788265] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003
[ 2858.795531] RBP: 0000000000000000 R08: 00007ffc180d63e4 R09: 000000000000000c
[ 2858.802801] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 2858.810154] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000
[ 2858.817434] Mem-Info:
[ 2858.819860] active_anon:204298 inactive_anon:1091202 isolated_anon:12
[ 2858.819860]  active_file:10902 inactive_file:2122 isolated_file:0
[ 2858.819860]  unevictable:34816 dirty:25 writeback:0 unstable:0
[ 2858.819860]  slab_reclaimable:17629 slab_unreclaimable:149146
[ 2858.819860]  mapped:54699 shmem:15185 pagetables:49749 bounce:0
[ 2858.819860]  free:41143 free_pcp:792 free_cma:0
[ 2858.854509] Node 0 active_anon:645856kB inactive_anon:1043356kB active_file:22504kB inactive_file:3052kB unevictable:139264kB isolated(anon):0kB isolated(file):0kB mapped:125968kB dirty:40kB writeback:0kB shmem:39992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2858.883608] Node 1 active_anon:171336kB inactive_anon:3321452kB active_file:21068kB inactive_file:5436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92812kB dirty:60kB writeback:0kB shmem:20748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2858.912062] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:324kB inactive_anon:3352kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2858.939070] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 2858.944090] Node 0 DMA32 free:50264kB min:35996kB low:44992kB high:53988kB active_anon:645532kB inactive_anon:1040004kB active_file:22504kB inactive_file:3056kB unevictable:139264kB writepending:40kB present:3129332kB managed:2763456kB mlocked:139264kB kernel_stack:20096kB pagetables:47868kB bounce:0kB free_pcp:1768kB local_pcp:444kB free_cma:0kB
[ 2858.974909] lowmem_reserve[]: 0 0 1 1 1
[ 2858.978890] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2859.004762] lowmem_reserve[]: 0 0 0 0 0
[ 2859.008744] Node 1 Normal free:103892kB min:53876kB low:67344kB high:80812kB active_anon:171336kB inactive_anon:3321452kB active_file:21068kB inactive_file:5436kB unevictable:0kB writepending:60kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:49152kB pagetables:150872kB bounce:0kB free_pcp:1400kB local_pcp:1284kB free_cma:0kB
[ 2859.039038] lowmem_reserve[]: 0 0 0 0 0
[ 2859.043021] Node 0 DMA: 25*4kB (UME) 46*8kB (UME) 27*16kB (UM) 23*32kB (UME) 6*64kB (UME) 4*128kB (ME) 5*256kB (ME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 0*4096kB = 10980kB
[ 2859.058784] Node 0 DMA32: 752*4kB (UME) 1174*8kB (UME) 1515*16kB (UME) 424*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 50208kB
[ 2859.072731] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2859.083424] Node 1 Normal: 2373*4kB (UME) 2508*8kB (UME) 1734*16kB (UME) 1126*32kB (UME) 131*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 103892kB
[ 2859.099021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2859.107872] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2859.116440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2859.125270] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2859.133833] 28259 total pagecache pages
[ 2859.137800] 0 pages in swap cache
[ 2859.141247] Swap cache stats: add 0, delete 0, find 0/0
[ 2859.146596] Free swap  = 0kB
[ 2859.149634] Total swap = 0kB
[ 2859.152649] 2097051 pages RAM
[ 2859.155745] 0 pages HighMem/MovableOnly
[ 2859.159711] 369648 pages reserved
[ 2859.163158] 0 pages cma reserved
[ 2859.172001] Bluetooth: hci0: command 0x0419 tx timeout
[ 2859.181939] Bluetooth: hci5: command 0x0419 tx timeout
[ 2859.196993] ------------[ cut here ]------------
[ 2859.201767] ODEBUG: assert_init not available (active state 0) object type: timer_list hint:           (null)
[ 2859.212114] WARNING: CPU: 0 PID: 10407 at lib/debugobjects.c:325 debug_print_object+0x160/0x250
[ 2859.220947] Kernel panic - not syncing: panic_on_warn set ...
[ 2859.220947] 
[ 2859.228309] CPU: 0 PID: 10407 Comm: syz-executor.4 Not tainted 4.19.202-syzkaller #0
[ 2859.236269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2859.245763] Call Trace:
[ 2859.248355]  dump_stack+0x1fc/0x2ef
[ 2859.251988]  panic+0x26a/0x50e
[ 2859.255182]  ? __warn_printk+0xf3/0xf3
[ 2859.259074]  ? debug_print_object+0x160/0x250
[ 2859.263573]  ? __probe_kernel_read+0x130/0x1b0
[ 2859.268154]  ? __warn.cold+0x5/0x5a
[ 2859.271780]  ? __warn+0xe4/0x200
[ 2859.275143]  ? debug_print_object+0x160/0x250
[ 2859.279635]  __warn.cold+0x20/0x5a
[ 2859.283175]  ? debug_print_object+0x160/0x250
[ 2859.287940]  report_bug+0x262/0x2b0
[ 2859.291575]  do_error_trap+0x1d7/0x310
[ 2859.295470]  ? math_error+0x310/0x310
[ 2859.299271]  ? irq_work_claim+0xa6/0xc0
[ 2859.303251]  ? irq_work_queue+0x29/0x80
[ 2859.307225]  ? error_entry+0x72/0xd0
[ 2859.311028]  ? trace_hardirqs_off_caller+0x2c/0x210
[ 2859.316046]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2859.320891]  invalid_op+0x14/0x20
[ 2859.324342] RIP: 0010:debug_print_object+0x160/0x250
[ 2859.329442] Code: dd a0 ee b3 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 14 dd a0 ee b3 88 48 c7 c7 c0 e2 b3 88 e8 e0 41 7b 04 <0f> 0b 83 05 f3 f2 af 07 01 48 83 c4 20 5b 5d 41 5c 41 5d c3 48 89
[ 2859.348343] RSP: 0018:ffff8880836fed60 EFLAGS: 00010082
[ 2859.353709] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000
[ 2859.360972] RDX: 0000000000000000 RSI: ffffffff814dfd61 RDI: ffffed10106dfd9e
[ 2859.368241] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[ 2859.375594] R10: 0000000000000005 R11: ffffffff8c66401b R12: ffffffff89f90a40
[ 2859.382857] R13: ffffffff81531250 R14: ffff88802e6adfc0 R15: 1ffff110106dfdb7
[ 2859.390133]  ? calc_wheel_index+0x230/0x230
[ 2859.394459]  ? vprintk_func+0x81/0x180
[ 2859.398352]  debug_object_assert_init+0x1f0/0x2e0
[ 2859.403192]  ? debug_object_free+0x380/0x380
[ 2859.407687]  ? mark_held_locks+0xf0/0xf0
[ 2859.411749]  ? batadv_mesh_init+0x5b7/0x690
[ 2859.416070]  ? batadv_softif_init_late+0xad7/0xd90
[ 2859.420991]  ? register_netdevice+0x2dc/0x10f0
[ 2859.425570]  ? rtnl_newlink+0x13b5/0x15c0
[ 2859.429728]  ? rtnetlink_rcv_msg+0x453/0xb80
[ 2859.434165]  ? netlink_rcv_skb+0x160/0x440
[ 2859.438396]  ? netlink_unicast+0x4d5/0x690
[ 2859.442630]  del_timer+0x6d/0x100
[ 2859.446084]  ? run_timer_softirq+0x670/0x670
[ 2859.450496]  ? batadv_tvlv_handler_get+0x314/0x470
[ 2859.455687]  ? trace_hardirqs_off+0x64/0x200
[ 2859.460094]  try_to_grab_pending+0x2b6/0x6f0
[ 2859.464503]  __cancel_work_timer+0xa6/0x590
[ 2859.468829]  ? try_to_grab_pending+0x6f0/0x6f0
[ 2859.473430]  ? batadv_tvlv_handler_get+0x33b/0x470
[ 2859.478356]  ? batadv_tvlv_handler_put+0x40/0x40
[ 2859.483109]  ? mark_held_locks+0xa6/0xf0
[ 2859.487173]  batadv_nc_mesh_free+0x41/0x120
[ 2859.491494]  batadv_mesh_free+0x7d/0x170
[ 2859.495551]  batadv_mesh_init+0x5b7/0x690
[ 2859.499722]  batadv_softif_init_late+0xad7/0xd90
[ 2859.504476]  ? batadv_get_strings+0x40/0x40
[ 2859.508800]  ? __dev_get_by_name+0x117/0x150
[ 2859.513208]  ? batadv_get_strings+0x40/0x40
[ 2859.517533]  register_netdevice+0x2dc/0x10f0
[ 2859.521939]  ? unregister_netdev+0x20/0x20
[ 2859.526178]  ? rtnl_create_link+0x145/0xa40
[ 2859.530505]  rtnl_newlink+0x13b5/0x15c0
[ 2859.534485]  ? rtnl_getlink+0x620/0x620
[ 2859.538455]  ? __lock_acquire+0x6de/0x3ff0
[ 2859.542693]  ? __lock_acquire+0x6de/0x3ff0
[ 2859.546930]  ? get_reg+0x1f0/0x1f0
[ 2859.550468]  ? unwind_next_frame+0xeee/0x1400
[ 2859.554961]  ? mark_held_locks+0xf0/0xf0
[ 2859.559018]  ? unwind_next_frame+0xeee/0x1400
[ 2859.563534]  ? __save_stack_trace+0x72/0x190
[ 2859.567938]  ? deref_stack_reg+0x134/0x1d0
[ 2859.572170]  ? get_reg+0x176/0x1f0
[ 2859.575711]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[ 2859.581590]  ? deref_stack_reg+0x1d0/0x1d0
[ 2859.585817]  ? is_bpf_text_address+0xd5/0x1b0
[ 2859.590324]  ? __lock_acquire+0x6de/0x3ff0
[ 2859.594567]  ? __lock_acquire+0x6de/0x3ff0
[ 2859.598810]  ? __lock_acquire+0x6de/0x3ff0
[ 2859.603044]  ? mark_held_locks+0xf0/0xf0
[ 2859.607103]  ? get_reg+0x1f0/0x1f0
[ 2859.610641]  ? unwind_next_frame+0xeee/0x1400
[ 2859.615165]  ? mutex_trylock+0x1a0/0x1a0
[ 2859.619242]  ? rtnl_getlink+0x620/0x620
[ 2859.623220]  rtnetlink_rcv_msg+0x453/0xb80
[ 2859.627460]  ? rtnl_calcit.isra.0+0x430/0x430
[ 2859.631951]  ? __netlink_lookup+0x3fc/0x730
[ 2859.636276]  ? lock_downgrade+0x720/0x720
[ 2859.640434]  ? check_preemption_disabled+0x41/0x280
[ 2859.645450]  netlink_rcv_skb+0x160/0x440
[ 2859.649512]  ? rtnl_calcit.isra.0+0x430/0x430
[ 2859.654007]  ? netlink_ack+0xae0/0xae0
[ 2859.657905]  netlink_unicast+0x4d5/0x690
[ 2859.662052]  ? netlink_sendskb+0x110/0x110
[ 2859.666304]  ? _copy_from_iter_full+0x229/0x7c0
[ 2859.670971]  ? __phys_addr_symbol+0x2c/0x70
[ 2859.675378]  ? __check_object_size+0x17b/0x3e0
[ 2859.679959]  netlink_sendmsg+0x6bb/0xc40
[ 2859.684023]  ? aa_af_perm+0x230/0x230
[ 2859.687821]  ? nlmsg_notify+0x1a0/0x1a0
[ 2859.691802]  ? nlmsg_notify+0x1a0/0x1a0
[ 2859.695776]  sock_sendmsg+0xc3/0x120
[ 2859.699499]  __sys_sendto+0x21a/0x320
[ 2859.703299]  ? __ia32_sys_getpeername+0xb0/0xb0
[ 2859.707986]  ? check_preemption_disabled+0x41/0x280
[ 2859.713006]  ? __fd_install+0x1eb/0x610
[ 2859.716977]  ? __sys_socket+0x16d/0x200
[ 2859.720950]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 2859.725532]  ? move_addr_to_kernel+0x70/0x70
[ 2859.729941]  __x64_sys_sendto+0xdd/0x1b0
[ 2859.734092]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 2859.738691]  do_syscall_64+0xf9/0x620
[ 2859.742497]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2859.747681] RIP: 0033:0x41957c
[ 2859.750892] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 2859.769813] RSP: 002b:00007ffc180d6390 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2859.777524] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041957c
[ 2859.784793] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003
[ 2859.792064] RBP: 0000000000000000 R08: 00007ffc180d63e4 R09: 000000000000000c
[ 2859.799327] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 2859.806764] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000
[ 2859.815613] Kernel Offset: disabled
[ 2859.819235] Rebooting in 86400 seconds..