rogram 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket(0x11, 0x800000003, 0x81) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl(r2, 0x3, &(0x7f0000000040)="600fb616cc5c683f2fb02cd5aa3e66c4a5e5b8acf3143ef6e10b305a93a2e11942c970df70402243c44c2d5a84807f37a91a33c1455addf4f1a4d0056eec1b2432bc9b02b285512afdbeb29ac5a6183b086e60724fb5502057cbdcf6d2004e24c8d630ed4c24a913b0697d29e86d8dcc45a58cd655ae7fd5c4ba53da0a0671f6c977ed923eeffee487c470114bc1c97156f8b067f8e30dae91e91904183cb8a48a47121aa2eb9380098db92235") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="7000000096de4be85153d271339f2fb130000000", @ANYRES32=0x0, @ANYBLOB="1f00000000140000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005002a00000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) 01:46:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x60, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x81) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e23, 0x10000, @empty, 0x2}, {0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, 0x0, [0x5, 0x67, 0x3d2, 0x8000, 0x80000001, 0x7, 0xd75f, 0xa30]}, 0x5c) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000140)=0x10000) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f000059aff8), 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) sendmsg$kcm(r3, 0x0, 0x20000830) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x11b280, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000100)={0x0, 0x10, 0x81, 0x800, 0x1e, 0xffffff01, &(0x7f00000000c0)="532bc63e018d366b1f72664ac6ab9bda3297075114add6d1b3bf88c63d68"}) 01:46:26 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x6558, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:26 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xf4, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:46:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x63, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:26 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x6800, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x6b, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:26 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x6c00, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x71, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:26 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x6e01, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x82, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:26 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x3, 0x0, "32b9f5e1747a5797b233fafbec"}, 0x15, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x200000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r1, 0x4) r2 = accept4$tipc(r0, &(0x7f00000001c0)=@id, &(0x7f0000000200)=0x10, 0x80000) syncfs(r2) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/bsg\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000300)=0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r8 = socket$qrtr(0x2a, 0x2, 0x0) kcmp(r6, r7, 0x0, r0, r8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r9, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) fcntl$setlease(r4, 0x400, 0x1) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x7, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 01:46:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0xa4, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0xa7, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:26 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x7400, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="4466350a000000440f22c0d5d501c43e640fade5643e0f070f23c80f21f866350800e1000f23f8480f35660f113f0f0fcb9e0f01c3365c", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000040)={0x2, r5, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 01:46:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100000000}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20002000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x986, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x22) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x21) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r4, r1, 0x0, 0x1, &(0x7f0000000280)='\x00', 0xffffffffffffffff}, 0x30) dup2(0xffffffffffffffff, r5) sendmmsg$inet(r3, &(0x7f0000003b40)=[{{0x0, 0x1010000, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0xc01}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x800000}, {{0x0, 0x4, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000) 01:46:26 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xf5, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:46:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f000059aff8), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x88c0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201b9e200000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x81) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000009c0)=0x8001) syz_usb_control_io$hid(r2, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="002205ad83fe3c3d33222b7ce1e81c8214cabf6fb528483f0c44cd4c282a9bdd74d860b000ab9c0e960e832b4f1c2c0609c17518c6cd5e0b70ea31bf7cee42afaf0ab26454"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0xc2, &(0x7f00000004c0)="1420e1fcc2b866d6faf33d7c23f5ed719311568e86c10da91896d4659832e42ed39dd56e5ef8b6ff958f29d00359bfc185462d7a6908ea78430283b030cd29def8d3fe38273382a4e219543374f5e0e2cf3ea6d174ef37eaf066248c4ea13bac4e087419a60f6b1a25b5cd1237aa9da3044caf7388e8001178a28866d3c5d58ea5ce23fc06309892f603ff0360ba84cbdaa8d5efed9857c5fcbe134ac94f33a45c338cc45b8ba50366fe8bc590a30cd1998c7a4f92faf1c40fe288a0f33632f08921") syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, &(0x7f0000000000)={0x40, 0x1, 0x101, {0x101, 0x9, "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"}}, &(0x7f0000000140)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "52abe9c7a91cd4947131c87365a22ece4b17e9dc58697fbb2d2d29e843b9977b011d4677febb50fe58d6f9f333fa647831c446b533c9ca285d4720aa8374ff1825429b94754abe8ac38fdefbdb3f10d58e025c165d457600d64711828166c32593113040f941fd47"}}, &(0x7f0000000a00)={0x0, 0xf, 0x12f, {0x5, 0xf, 0x12f, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x9, 0x3b, 0x1}, @generic={0x41, 0x10, 0xa, "dbdca2e72b80226c36500d94dc1f3102542386423d6ba2ffdb7f1ae1fad9856c6af8b37a1612e294ab6d6a593ebd1c9f6453c66ce9f4c1d77925190bf49e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa8, 0xfc, 0x7, 0x7f, 0x2e}, @generic={0xd1, 0x10, 0x2, "42dcea903a899eeb1d8f519a05d745edf4e39323b0434091e39fdbcef5beb7021bd80fe3ab5973bfd3ac61e06784271c0b518e3122a476ac949e7cf4dbc61f699cb9e399cf6be8bd32f604a145bbc1e099864b25efc959a7e4795b207319801bd699633c6a5248694fc6d9e7f7730787c661f7307ccafdf569ecfeacfdfc02527a743ce3de55ec6f4a5cf676f8d4d59832e45029104dc3701a43d2912e30972513a5b90e0eb79e85d38ae356ad6278b70c99601f2634ee74be1565c7789b915d9f4578ebdedd9f57eb7ca30a4bbb"}, @ptm_cap={0x3}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x0, 0x2, "7661ad12", "7089c99f"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x4, 0x80, 0x81, 0x5f, 0xe621, 0xd57}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="4003c70000000a3d452c42cb9232b62735c8808cc930faebfe6b0b32c90bde3f5225c483cbdd651398d00f8e4af1970e69507faf984275426e8d962fb5e44b488f3b3b920bb5693245a72f58a224a1316f0a1b8eac7ee8436c68a74eab55d2fb45ae6fa15c101a32257d26c19f551cf643b559504236905e05908d911bf2bf7520eee5c9e39db9fa9b30cf7a5684a989398eff2344ba461eb4b757620e3957a5a19e535c34cdc5a1307993151b3f2e7427951c69a6c976a1b4323975a477aab849"], &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="3e0000000000001c1000a15a6caefd2767bcb8e6a3977ffadbb3ad3f5bc22599dc9e289fd317e34e2ba92d696c98b98e17713c0bac0f3e50b697d766cfdbb4b38fceba6c67106a8b702c5afd46aa0b46c2bed9073a9991bdf94442c3ce355dcd2968cc97c56f3d598103413ffe1d155308433ec673f094c5072990a29ef37fd2025f77184e05e4078c7d5ae21c7a52acb49e9b3887ea3815fad2"], &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x3f}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000640)={0x40, 0xb, 0x2, "877d"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x80}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x17, 0x6, @random="a8d860380267"}, &(0x7f0000000740)={0x40, 0x19, 0x2, "c2a9"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x62}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0xfd}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x7}}) 01:46:27 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x7401, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0xce, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x11, 0x800000003, 0x81) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xe68}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x5, 0x200, 0x40e, 0xc35f, 0xfc97, 0x8, 0x1523, 0x9, r4}, 0x20) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4008000) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="5010bc67b295d700050700010000000000", @ANYRES32=0x0, @ANYBLOB="02560400000000001c0012800b0001006970766c616e00000c00028006000100020000000a000500040000000000000008000a00", @ANYRES32=r5, @ANYBLOB], 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4008000) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45602}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}}, 0x0) 01:46:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0xe7, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:27 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x7600, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0xed, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:27 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x7800, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1198.196530][T18972] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:46:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x612, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) [ 1198.276418][T18972] gretap0: Device is already in use. [ 1198.282358][ T3832] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1198.288428][T18990] __nla_validate_parse: 10 callbacks suppressed [ 1198.288438][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1198.389105][T18995] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1198.405919][T18972] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1198.418867][T18972] gretap0: Device is already in use. [ 1198.718902][ T3832] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1198.805566][ T3832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.816535][ T3832] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1198.831767][ T3832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.845026][ T3832] usb 2-1: config 0 descriptor?? 01:46:28 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) 01:46:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x1a, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) [ 1199.922714][ T3832] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 1199.945513][ T3832] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0011/input/input28 [ 1200.030286][ T3832] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1200.665819][ T7895] usb 2-1: USB disconnect, device number 24 [ 1201.491982][ T7895] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1201.941944][ T7895] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1202.042571][ T7895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 1202.053799][ T7895] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1202.063268][ T7895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.076209][ T7895] usb 2-1: config 0 descriptor?? 01:46:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@remote}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f000059aff8), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x88c0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x200080, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000180)={0x80, 0x1000, 0x556, 0xf0, 0x1, 0x8, 0x4, 0x2, {0x1000, 0x81}, {0x1d, 0x7, 0x1}, {0x6, 0x42b5, 0x1}, {0x0, 0x5e}, 0x1, 0x1, 0x1e, 0x7, 0x1, 0x2, 0x4, 0x3, 0x8817, 0x100, 0x7, 0xffffffff, 0x23, 0x1, 0x2, 0xb}) 01:46:31 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x7a00, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:31 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xf6, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:46:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x5, 0x0, 0x4, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xad], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x78) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000000c0)=""/19) 01:46:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x23, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) [ 1202.146473][ T7895] usb 2-1: can't set config #0, error -71 [ 1202.162841][ T7895] usb 2-1: USB disconnect, device number 25 01:46:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x2c, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:31 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x7a03, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x2f, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x628181, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f000059aff8), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x88c0) 01:46:31 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000100)=0x54) syz_open_dev$tty20(0xc, 0x4, 0x0) 01:46:31 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x80fe, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x30, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:31 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x8100, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1202.655159][T19107] IPVS: ftp: loaded support on port[0] = 21 01:46:32 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xf7, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:46:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x31, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000001440)={0xa44, 0x7, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@dup_ipv4={{0x8, 0x1, 'dup\x00'}, @void}]}, {0x78, 0x1, 0x0, 0x1, [@rt={{0x7, 0x1, 'rt\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8}]}}, @objref={{0xb, 0x1, 'objref\x00'}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}, @match={{0xa, 0x1, 'match\x00'}, @void}]}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x978, 0x4, 0x0, 0x1, [{0x604, 0x1, 0x0, 0x1, [@dup={{0x8, 0x1, 'dup\x00'}, @void}, @ct={{0x7, 0x1, 'ct\x00'}, @void}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @val={0x53c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x98, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x21, 0x1, "d9a6eaca0c60c6d78ebd1ff2ac410bf24d63048011d5e7fbc92e92f226"}, @NFTA_DATA_VERDICT={0x70, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_MASK={0xfc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf5, 0x1, "b19259f9f9cbfdf085842fa230d677e9ac7a8e9fcab5b78ef3e65c10c2b5e9b8b60ea30bbd1a8c5cfc7fb85bdd3023c71fd8dd0964fb772d8a239def108990ea66c24aa79b29fcea2db09553998146d0e4ed48e10f5d689012cdf4c426437a023acd64fe1aad55540ccee4c1db8d06db84c673074f53c742ec9ddcbf0e27e5f7d08cc10d8285d72b7a1dd91246bf6be41ad064a80c202a95cad8d9ca596561968248d2a7adf469182f36f0c7cfcccbbf6a107e40bc2e4b017afa17a67c6a261b52f0606c38751c0486ad934cef18177a9f1679e4055a3eaf6767993f11a42fd72cb818b7a63e0515c8a796b325447d40dd"}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xfffffffa}, @NFTA_BITWISE_XOR={0x12c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x23, 0x1, "607abd813c39139eee3f82f3302bb6d0e180359046dc73c1a34d71a09ae756"}, @NFTA_DATA_VALUE={0x4a, 0x1, "0210f3dcbfe201f3176976cd8f5965c15c4c33e444a71fbee25438e2df8bd43ef932c202ee6b31bb01cad6fb4ef603d608baca401292dafdf7ab3fac137252a30c3acd785f47"}, @NFTA_DATA_VALUE={0x70, 0x1, "811f28e9c80ac0f6e4cd42c83b3bd9c53e2834be873f5858a7eff66305f21ecf9c04f9600be95c718fe7d22b6a6352cd015d0e7f9ec28e047ae2aa55f261cbef6156188ba53543fc1cac201a2e323cb8e7bd4d4092326c0d18c3ce6ab0921c5a524845fab9d5175359a7c494"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xd, 0x1, "c619a5aba155c8365b"}]}, @NFTA_BITWISE_XOR={0x80, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7a, 0x1, "a7fa2f7d1eda2355489a57fd48d95108b4e69da8a23fec8fa853b769cec5e3821710d5b9e55857828c1bd41fbdae48b0e63a2367d8b41339987666e190ed459c2c34085c2fb0cafbd92f85f0e08211a8deef216a0d1197a1b9cc200c0691c584324849cca70e22b0ab9801a952334339ccfe80aceb2e"}]}, @NFTA_BITWISE_XOR={0x1d8, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000000}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "9435aa914e17fd3ed307750d14967645e127df5efa2a1781f773f87d7907d9fda94eca9c491eba4c19870a7d8c49506d8d28ee921f555e5aca3504b8d2400e580d325c9c8733d96a4f1ea995936e29bd42545290920dcdcff0b2dd38b68d5d758800d35ed08ae0e338d483de26fa1f8e7c5839760a2b52072c20e0f1013b80d6fadc143531a5fdb98276c22a491be4e3c18eeef789ae513dd0ead33167b68d90e8d679da855dfa5584370721ec683525c50d16a87ad71673a57be6a1b370dff3a99118fbaf43ff44f7537ba665fa803abea24b0c1e48a23b2f"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x8001}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}, @lookup={{0xb, 0x1, 'lookup\x00'}, @void}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x66}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @void}]}, {0x6c, 0x1, 0x0, 0x1, [@redir={{0xa, 0x1, 'redir\x00'}, @void}, @cmp={{0x8, 0x1, 'cmp\x00'}, @void}, @hash={{0x9, 0x1, 'hash\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x1f0}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xf7}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xff}]}}, @target={{0xb, 0x1, 'target\x00'}, @void}]}, {0x104, 0x1, 0x0, 0x1, [@rt={{0x7, 0x1, 'rt\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xe79b00b10907fbc3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}, @nat={{0x8, 0x1, 'nat\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}, @rt={{0x7, 0x1, 'rt\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @masq={{0x9, 0x1, 'masq\x00'}, @void}, @meta={{0x9, 0x1, 'meta\x00'}, @void}, @nat={{0x8, 0x1, 'nat\x00'}, @val={0x4}}, @lookup={{0xb, 0x1, 'lookup\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @void}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xdee}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x100}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x4}]}}]}, {0x110, 0x1, 0x0, 0x1, [@redir={{0xa, 0x1, 'redir\x00'}, @void}, @lookup={{0xb, 0x1, 'lookup\x00'}, @void}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}, @redir={{0xa, 0x1, 'redir\x00'}, @void}, @masq={{0x9, 0x1, 'masq\x00'}, @void}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb, 0x1, 'lookup\x00'}, @void}}]}}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xfffffff8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}]}, {0x4}, {0x5c, 0x1, 0x0, 0x1, [@exthdr={{0xb, 0x1, 'exthdr\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xbd}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x97}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}]}, {0x70, 0x1, 0x0, 0x1, [@payload={{0xc, 0x1, 'payload\x00'}, @void}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @void}, @redir={{0xa, 0x1, 'redir\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x29}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}]}}, @hash={{0x9, 0x1, 'hash\x00'}, @void}, @match={{0xa, 0x1, 'match\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x6}]}}]}, {0x20, 0x1, 0x0, 0x1, [@quota={{0xa, 0x1, 'quota\x00'}, @void}, @connlimit={{0xe, 0x1, 'connlimit\x00'}, @void}]}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x4}]}, 0xa44}, 0x1, 0x0, 0x0, 0x10000}, 0x4000) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f000059aff8), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x88c0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x6c4880, 0x2e) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000000040)) 01:46:32 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x8a00, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a0012000a00142603000e1208001e000000812fa800040008000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x2) 01:46:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x33, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x9, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f000059aff8), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x88c0) 01:46:32 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x8b00, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1203.068603][T19145] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1203.108234][T19145] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 01:46:32 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000100)=0x54) syz_open_dev$tty20(0xc, 0x4, 0x0) 01:46:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f000059aff8), 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x45a340, 0x0) sendmsg$kcm(r2, 0x0, 0x88c0) 01:46:32 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) write$FUSE_IOCTL(r0, &(0x7f00000001c0)={0x20, 0x0, 0x8, {0x6, 0x4, 0x7}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)='gfs2meta\x00', 0x888000, &(0x7f0000000500)='\x00') r1 = open(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000001080000046d0900010073797a30000000000900010073797a3100000000060002408901010000000300"/64], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4804) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RGETATTR(r2, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xa0) fallocate(r2, 0x0, 0x0, 0x8800000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 01:46:32 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x8f00, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1203.542119][T19173] IPVS: ftp: loaded support on port[0] = 21 [ 1203.572478][ T3662] tipc: TX() has been purged, node left! 01:46:33 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xf8, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:46:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x36, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:33 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x9200, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f000059aff8), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x88c0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)={0x813, {{0x2, 0x4e21, @multicast2}}, 0x1, 0x8, [{{0x2, 0x4e23, @private=0xa010101}}, {{0x2, 0x4e23, @private=0xa010101}}, {{0x2, 0x4e22, @private=0xa010101}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}}, {{0x2, 0x4e23, @private=0xa010102}}, {{0x2, 0x4e23, @private=0xa010100}}]}, 0x490) 01:46:33 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x9a00, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x37, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f000059aff8), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x88c0) 01:46:33 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x9e00, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x38, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:33 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xa000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x3a, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:33 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cgroups\x00', 0x0, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000180)) r2 = gettid() wait4(r2, 0x0, 0x20000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="450000000005eb3030b1a74b05947c4606", 0x11}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x5, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x9}}}, 0x78) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000000)={0x61}) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0xfffffffffffffffe, 0x0) 01:46:33 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xf9, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:46:33 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xa601, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x3d, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:33 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x7922, 0x0, [], {0x0, @reserved}}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0', [{}, {0x20, '*(]-'}, {0x20, '$'}, {0x20, '^&{'}], 0xa, "20f48fbb33635de896115e44000eb61ace15234e1786df84e91e5ad72afbde3c069af5560af5ce0d"}, 0x3f) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x135a40, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x10005, 0x0) shutdown(r7, 0x0) splice(r4, 0x0, r5, 0x0, 0x10005, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x7fffffff, 0xfffffffffffffc6a) 01:46:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x55, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:34 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xae01, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:34 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xc000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x56, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:34 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xc00e, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x60, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) [ 1205.252010][T13576] usb 2-1: new high-speed USB device number 26 using dummy_hcd 01:46:34 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xc0fe, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6b, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) [ 1205.541777][T13576] usb 2-1: device descriptor read/64, error 18 01:46:34 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xfa, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:46:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x71, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:34 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) r2 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)=ANY=[]}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESOCT=r3, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xb0, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x31}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x3f}]}, 0x24}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18, 0xffffffffffffffda, 0x6, {0x7}}, 0x18) [ 1205.971778][T13576] usb 2-1: device descriptor read/64, error 18 [ 1206.241780][T13576] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1206.511817][T13576] usb 2-1: device descriptor read/64, error 18 [ 1206.921819][T13576] usb 2-1: device descriptor read/64, error 18 [ 1207.044112][T13576] usb usb2-port1: attempt power cycle [ 1207.333384][ T3662] tipc: TX() has been purged, node left! [ 1207.761801][T13576] usb 2-1: new high-speed USB device number 28 using dummy_hcd 01:46:36 executing program 1: socketpair(0x18, 0x0, 0x7, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 01:46:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x82, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:36 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xc202, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x810002, 0x0) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x54, r1, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @broadcast}}, {0x14, 0x2, @in={0x2, 0x0, @local}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x390, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6d814ab19ee684c899e370deb0350eb243c741b23c1bdbf2aaaf10655abc"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xee, 0x3, "1e332711a674d0fe7118ccdaf49297202f34d2f09255fd74c2a0f1675c025a4b4da2c79de51d9393f05d43179566b94c9a35bad811668d6f7e3f8085a57f8226981d3593a0424e533f0e08ff3a5d6f71752e2b6bcf9ca1c1bc59e1eeffbdf4a81a6a19f0c4d1ba6a90b4f8addb95d5d32c2e286737b25bf5cefc33abdc8ad70b3e1611a98e7f5ff5fdb56ec7c116cb53809cacfb7736eef8305bffa4a182a253a4e6878cfd4a93a2427b2ba6dda7be4be225c2a96f78bcc5df60b8810b6c455cc3db04c504d040a2d7047f53b061427046fdb959e68520bf148b0746ddc6146dcdf9dbb2b04aa28ab327"}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffcb057db2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffc1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "1708bde8e80ba49649e2544a9b401b9771927afcaff9f2f8f138"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4e, 0x3, "22ecbdd91c7ba33fb99de2fec77e94974b98678e61450b2c30bb8573cb7fe465a678b5f60c8994feea89c47fcf1bf833c2dc2502eb9edf92ce8db2039d95aba570db01e6d1f692599ccb"}, @TIPC_NLA_NODE_ID={0xcb, 0x3, "7c7b62c7c6bbcdcce0935bec8722a56943dd9fa1432b3c046315bfb0871845f5d0c92ad4a312de17ffb0da114d2f583403b3cd1cc42276e8aad1a995df428424262482ac0f6b726491b7fdadb577f3fb47dd372683c31beffece88a22e8a963f069c04ce33e59c68623db8b81444392042743f9aff02403ed06554d78d0bb11159bc6355a4aabbcfb009e8ef60cdb0c2e7472357897bce4056ff7ec10a821dc57da8b070c4c8dac0a03cf115a195cc2e859934869abdb3dd06def4346094e493b5f1895e9bd8d4"}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xebc}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf1f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x390}, 0x1, 0x0, 0x0, 0x4004000}, 0x40884) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="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", 0x10c}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x22) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') ptrace$cont(0x18, r2, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) r4 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000000)={0x4b, 0x1, 0x0, 0x4, 0x2, 0x8}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x21) 01:46:36 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xfb, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:46:36 executing program 3: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x2d1}, "", [[]]}, 0x120) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000003c0)=""/155, 0xd6}], 0x1}}], 0x1, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x1c1, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000240)=0x4e92) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3f}]}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, 0x0) gettid() 01:46:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0xa4, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) [ 1207.931849][T13576] usb 2-1: device descriptor read/8, error -71 01:46:37 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xc603, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0xa7, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:37 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xca01, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1208.151968][T13576] usb 2-1: device descriptor read/8, error -71 01:46:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0xce, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:37 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xcc03, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') sendfile(r0, r1, 0x0, 0xa808) 01:46:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0xe7, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:37 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xd002, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0xed, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:40 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xfc, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:46:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000340)={0x14, &(0x7f0000000240)={0x40, 0x0, 0xa5, {0xa5, 0xa, "e74ecf2ba1f6d20ab9fcbca6f9036623b8a4cdc0b7a6eb91e235cdb2044cdb2d8aafc28fc6cc2c90cf8293db3f911cb0e0a7fe0c48a4fe8eda7b84b7c585a222ba7c972578141d1287dd43792c3e8fa7f30e4544d01249e87a3a78374b27af7a7aa0b709b420a8c49c7c992c0a36a805da0501e7a4e051dff393ea12b08b114a058e6ee43e7edf9e96b56cb5f5d49556a155a9a2cc49de00d9148b61c56ce5825ed239"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001a40)={0x44, &(0x7f0000000380)={0x20, 0x9, 0xe1, "80049c3dcce4f6a807f6760ead6b0f22157a54e13fd3b569a7429a72db68eb9c1c3ef0ef6d4bf1fc035996f8dc4063d0156d48acca56bfa227ba1453d3c465ad6b62807c996fc77834107baad9508ac293f0b8a6793c8b1adc62cc2d79e1ad9caee14883e5b8be54ec8cf444408b3b991c7740f1868fc364d57e96eca6df1433836169a027bd23ae0feb567d38d21c16d15810c88b8effd6436c8f3c2f2fcdb7be1ca134f3bb260ac863f008e6953850e1b36de16944e9ff9ae1d14d286ec14e086dbf28b6608d7cf1f6a186a520fbad05443261fb172fbc87364977065503e667"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xad}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x6, 0x7, 0x2b, 0x3f, 0x7c20, 0x3, 0x3ff, 0x3, 0x4, 0x5, 0x6, 0xd6}}, &(0x7f0000000540)={0x20, 0x85, 0x4, 0x10001}, &(0x7f0000000580)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000600)={0x20, 0x89, 0x2}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) memfd_create(0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x2, 0x3, 0x310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x278, 0x278, 0x278, 0x278, 0x278, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x200000, 0x0) getdents64(r3, &(0x7f00000001c0)=""/19, 0x13) prctl$PR_SET_DUMPABLE(0x4, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f0000000a00)={0x0, 0x1000, "cff95222cc5ce80af5428821c4af4d30b653fb25786e221d25d29b1a9dec243c203b1ce125ee3b46aaf54e4b90763866cb53d962fb31fcc801edf2b5a82a870ee91478cca1db2a875c6779dd4e3b52229c95694197129dc3dbb67f22146f784676409abd6afaf943bed9714809069b3351afeb8f88cf5e4f8f8f026b7918f9b9a09ad97ee35d678ec05a474b542cff2a5e90be925d4628ea7c88ebb6cdf67d23cfdb3ca0ab8aa7d69c40899e4b04689f773031c2b439399f927b123a92cb79d2a09e78b8ea66a8a16da8786e5a5acc6e81103896c7a971c6162dace3cda2c6b8ef294aac8ea071b4e11b72d8c794ed07e19a39280b12d28d49991acbffc5ef2e9052387811881575fa985c6d6880c2c0f00153af52397252f79347f7d4895c5268fd97814d1c15ba260526c320a313018c10bbd1631189296021bd80b458241f3960ae1d8e36237c15f2bfd88cabc768e231d036c66cf12c4a2f49966cee226643b703ac5e6b9a58eae4a4275aec6dc3fc56808742f97dea7c7d79c98eb49747f01b564598a96792ad560ee9afa4c177edb11383ba25af11b45ed692e09bcbff39b88b22caebaf3b67bc240afc08bddf8b16d783e87cea19ef6a438d55ac910c6b78984cedddadb28b066bc3c5932fa26dd2f5d2c523ef52119c9d5dcd915821561f53317d04476d91d575ba6036b62599de5c07038201d371d8711d15ccbaa5ed229fa53f57be2ecf796e892e6decff022c2b931c85f4af76b6bdbbc3e493c07156ef4d9f9138e62bb125cea15e20b997f58abc793387a5b8c07e40882881b76ef7aedaec8b0afb3c8ba9ac9c0c9d0428aa59559a0bec9ab24bef502e50a8976235549c92ae76e76ed2500d45ba1ed9b93fdc7c1b8188c02b85fe42137f288dfe1838a6767d4028e0cbc90940c61a639ac97e52769471687fa00cb71336b3ab8c667eb55ee5ad0c792d3b24ce33be6894a3fa223567af8bf2e7df3979744f331f25d4417ee2c0a8f361b24c94f0e0e2bb5607211c4b2d3d428e71e4dbbf4dcf3d4650d9302cb1b0ac59e7f189ccbbb6b214b2b078a6efc4f67d8b43b1de598600d67e0791ab589d13fa76bc227d6b32d61fe553df78f650a9e1b40154a7408d9e7ae416fac5266157ee241716905314d1a9edb7f711584e14d795f27068170fe3e1a1195debe868c02b9946d5752f6352a71fb9edbf1854955757a9728b3b2d5761226bdeb081e6330fb958d0f1119999b6e4a6d505016d7ab6c92596a20d87d651c02998303cafc552481fe62680b59db9e99bb7ffa7a04a9d4b7d6264e654c348e60c889910875b3f799863db9f95dc5c9c45224f11f73bc2c3a813f099021f9850598ecfc0996f970e3a25e7374b8aa0ac163bfccc3d256d2a41002c38d0fe129b9fca83dedb93517720899c373b8151c90afedf3e650e83ebc78d55cbf56f3d377c9c27e157801a87884c6ebee59dd75a66847bc448075688cc68b389d6aa6f6cd2318c2b825615a47a95844aad5f934daa39ea1838fdf44cf1a96eb1a93424db6bbc3e7eea248a92f528268db1ed3fe8a49b5ebf5a413148ae13901b1c85f14d5f11abeee8ce04e086165f8b3d5a82f43ff1d360f79df0cb7d3c64b182ef880484380deb2c1fa0846b83b65ca47c610d3a5d1fd5f5704492d04768ddefac4b94d627c2fbe42bf349e88aff690efe1d9e81187534c3d34b8fa7e90b7202cb31f92ff499367fc98bd0096232c95341fb146bda1790eb1e6ed922b94e743663c24722947b24ac08ee776a081b8fd29a7c6412343cec5d7ba0088b573c48c3a2000628f0abecb89349a7b9fb4bbd609869606ce44bb2d33e5f5301fd9ba2dd0a7119d8484524b7a9b9a31cbc4896452db290881e5ec96d10c7fa8039e35487f4af6c7ed7ea9ac591e4e6d5be652564bee6d45311ab027467b0cd44d482ac8e876b47794ff4fcd254b8ed6a2c7ec2f13c6b442cd707fc97c98206352e56ec29b83f98ef051734b7e6c208e20d8f79822cdd40fb95905c0004b492f4d39ac63f851d7b6a2645889520098b684676cb2f97cb0581964017913b839cbc73c62dc06f21897d32995b68d38da36098faa40cb9afd7ce35f507b13593b066ac6fb9a0a40224ac9b16c6553d668dbf483a0311f04d5efe223c1b6e4a546cd9ceee6f531b8188edac45c4489cf4386b67f7d225203e45287701a2277a56f2bba9954dddf8e8c2ee3ca4e4226a4d9979e835e62c7eb68854d415824924d4faa448f5199457c8525a0cfc395dbe88e8831d701ed6d9bdba6a5e1650a9487cac742b895a94a2f563717bf303838fee3819b292684966e1d2ccf5143d0329dc84561eb6556d60a83d76b9028a52ad6efc9bba78044bbc06e9d1d91d5032ac32b4b251bf39aea70748fc39137a818a97aabb1b614bb47f6dc216c9e5a0c9c768b89ef861935120e42a162d8428e5961c09b31bfe04884264617a509291f9599f0adfc44a7d9495bd3310dc20222651baff341d08133602b23d81cc710b369ad037d4282629af5d852485c11e204762933cf7d937fd6e71ba02a162e00997932c9b2277daf99d56196e3ac1ae816cb34a6054ed73e88fd80c539d06cc8f0390446f53c75c6c4aefc6d91dcff8c28b389b3e03bfd8c7b311bcda8697f95ab5fdc7133fbf6534c0d6dfe5aa164acee3f3f035a8c0e9eaf3fe026147bc2dc741e3e3ef36b5547072bb7fba1b1119cbe7bdccf9419fb4fb821ff0315cd4836f9b1aa7ee367f0f00f8fb2984c0bc74e2e117930872177623f7957c5b5aa83c88e13158db7e3ec8efd320c7e7120ac5b7f482b5d2e41dbb53cfbc6511021d291cf2689c52370a0728bcc7da536692854977bb6181186f3dcda971d5b8c8a1382127dbe4afd3cfe44899547d1c63c754072b4025397e4bf356c07b6206bac6d8af5ccafe50b0bd06f86c90fb37343abe48dd25368c331c1be6b24c2de8a32fc860b7ff64b10cc4a6148d92fdb9efb3cc22cd6a1d04b88dcb6d5c984dc5fb59ea670cdfa5740df12f2ce33499a987cc5b41f6a936327a36928a54ff1c085dabb871493ae5abdf3d0ec6e3dcc0f19eeba150328f7c5cd86c9c81ef2944d48e319463efbbb8704236b849524b714b3e590ee02e23032a0ca69de5d9b6b593e2d60c1d2a5dc40733fc720bc5edf8edd64eabbf17d06a728d11a61256b5f293dc2648c9e0d1060cf09b7328b378fadcca05a87cc96165380cb00e53e5c2b0ac2d84e2b7f6aa7014d2d7a8eb74b1bad1f2dc1bbaabbe869fca341b98c8061794e648671ece94f9c331dfde4577a5a678343feebe4578d4b26baec18e3ad1f17587c7cbb8a27c2f16507d99af7b6f803ec4c451efb171fe98cf15d8dd173fcf7f8560bf03bc9ea1f12cdfb77bcbe1bcd386197932c9a01b9c4d44ee9e9e9d373a0c67d6f2d5224558aa55302fe06e6e56ca0c2d2425939b3a9853269d9ff0305df76b7ba4e076ffd02434d8e670b50261a387f31f9b8bf9bb301bfe6c5a0f26f8e337b3c3def53743ea71da5ebcb99c60a92ca4f0111a936cc71ce6650ac74e40aa0415eda2fac0a127e28119ced56f0ea5f5f22f87adcb48aba596f547a4aa56b04d74439670509bb71bb0074e0e477168a167c4cf89b2e22b49faa080f00c157a2f64fdeb039904de9324eeb88fed299fac005ca08467dee1ec33ae01ddb6a8965d5be126e2ca0bbc73d77e56152558080c11437404fd48858e4a4221502848dffde578cb9620d268b45e7131955c3247da67ea44e2d71f3d203577f72de877995fc9d5fcc7f0cb5a543c5b2e99d46c75cbb0b3180bae7975c53be27c0e561286936ce4248945a7fe3f68b32f9caa1f11c48d490efd7bb85df0a2347ebe7afeba8eeefffe40ff06ad5f48e2a0f3b9adc53e79aa6d1528b27a7cfb2f5ed9c1f90b629eed2af6c673aad6e3ca42cab9ed2c4b54477c1f57980dc363704212a9fe3f3958e1ea401d0d7e64eee941b9f0e8b0bf2ea366999a5c42550089bd03a1294875bf92219490e6df9e54c08d79dee36325ee7ccd5675271685a57aa4ab22c950e775e12ea79058795415e627fcb981ad3ed925438c1ad7bbcbc6bc4107c252ddeac407ede418cf1f2e79bff4db221b25fbb791375136eb06834c26784829427aaff8367f3da609ff1c65ad1c9da51cb6881d0f4ed07a5b7a1ce3772c200f5c334184522f4722fff70f75b652fc4c1ad6d8831e55232215bdd61c7ff2fe1c2f80d0c74ae7b0efa897146b6d163b91011834c0b79f1add4d4b9bfee67fd82ec5159b314ecdb36ed207aaabdc9dcc308c063987c381c6315ec6d07382bb7228b058a7f034be7cef7ccce5aad42644734d853258f46ce4fb4e297dd048f868b2d31f63830c989ddc85cd1db3bd4259634b56ed66d0adb5005802c6045e88dcb988e7781291778df79d0a979e735013b9c8bf4216fd8ef9ef3bfd0f4a5c8bd1536ace228170959327d2f26cd214ca88782bf445ae9490a0c744181acefaaf00f19c4a8af8a395d156147e2b7204b56572c8ef7b0b99bae61c87f633ca678ad3463b7a126a44f119dc36ce529a3a8d527917684484f8562d90a78d425296077b452c18bc504eb476f58ac91b484e154f31630ae8bb0c2dbfd02cc8cd8c629affb22b60e109bd7f8fe638a288f72d805444a491c64f495a7c2ce397428d27eaf4deb61f721dab4dc76e2f9e2f84a31f65923a74e6f1fe3239344d6c6f1a2992a1422edc733256356ceba8ae715f713cb1157712990ef121c04f5701c94d119604536fadf4db90c77328ab2ee590462941c9e5d33cbf8fb1cf2504606e08e085fa11f9011724003dac076ea0ecf88b167cb90329fdc5e80930f06a27f3f68f186cb1c0a0b3d7d0282186a6e26dda5b738ee354c23807c6f90bf86c9924a616b0d82fc3af655c39414a3e95dc0b19f1644354f47a5337add00cf09801950edb414fa457022d4b72dc6ffcafd5070146722a966a27cf4d889fea62fc0d1641c0963e92ac13021e3a4ad3c9d0482e7aa900401c69b37ef0588ef9eb61548600234e90b077e515197e917c7b24f20cf9e024370fb58ea29173cf6fdd2b06bbae76a23b94130a3c30d9ae21e2cb62d7dc316423a25a629d2ad27112ba3744ac58df496b772b1243e7dba490925701aca6eadec69059a835b85d57f8d2ef7ba2674bb952f1228dc3717e0ba14bf2e90b422f25f948962c590b91e539fa30ec7134f1f3c84fd967ad095d85e6b5be87dbb138e87cb707ae06848586297a886ce6cc62382d16cbcdd5ca7e53f0a803043798f62a6aa0ee06c662eb3331863ba52668a5c3b7ad2316fcc3cd41f8dee204d4a9d864b97a989db1c1dc12a4b315c9a402b14663c7e0f51f72e259f5ffe0277f1bf725090781271e9cd920665bbf031396047c467c967b1ec2e2716a2fbab3eec08d75c8a719bb6a0e70ac2124096644a3015b69632771dff045eac4faa7474e09c3c6d49f9efbc6485d987e4eaa99ee3a7730174e033c6c5aa961574a5dbf3bd9d8338d0f09f1628d4257d1732a998fd491dfbd7db0ccc6e10624c528711eff4687b04b8c66087ec2a3b83feeb7610434d4d06827250a5fb040fed0e2a9a14ce371a2093f6272759e2b1ed53db787d4ed473d3ceb65fc89974bf8afd4a96efc2cf6a40112e9088d647c4d79f409710d181df13b63a1062ac79f983a9f27279db27e217cbad720dce4cdfe316205d6fa63c144157a1b4c7481e9fe984a9583a4ff763f2ab88919fce56ced52629805cd96cbcf55ccb7e68458dd235efb37ca1d05fa48"}) close(r4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r6, 0x0, 0x4}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001ac0)=ANY=[@ANYRES64, @ANYBLOB="f3c540316818000000000000fa49ffff00000021be7e32986f6500000000"], &(0x7f0000000640)=0x1b) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080), 0x8) 01:46:40 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xda02, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:40 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22674, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x1000000c8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x10005, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000180)={0x80, 0x258, 0x640, 0x640, 0x20, 0x3e, 0x10, 0x0, {0x9, 0xcf, 0x1}, {0xf80000, 0x400}, {0xa9, 0x1}, {0xd7c, 0x3f}, 0x0, 0x80, 0x4, 0x6, 0x0, 0x73, 0xe85, 0x4, 0x8, 0x45, 0x2, 0xffff, 0xf, 0x100, 0x3, 0x5}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 01:46:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001540)={@private2, 0x0}, &(0x7f0000001580)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)={0x19, 0x0, 0x8c, 0x7ff, 0x12, r1, 0x1, [], r3, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x40) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000100)={0x9, 0x2, {0xffffffffffffffff, 0x1, 0x3ac, 0x0, 0xab}, 0x3}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000007c80)=ANY=[@ANYBLOB="2c20000082fe89dc230bc3cdab6c88d81f444f1636ada1864a5c82498aabb15e8c2b952d2032376324076c00d443e1acac7f3e44e19bfd236d90025330415a3047e8d2f84dcfdd196774fe4543017a24c5ba21679c65d0e398a98612d7caa80e868fae", @ANYRES16=r5, @ANYBLOB="000000000000060000000200000006000b002600000008000700ac1e000108000800e0000001"], 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020844}, 0x4000040) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, [], 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0x4040aea0, &(0x7f00000000c0)={0x0, 0x0, [0x4c000000, 0x0, 0x3, 0x8, 0xfdfdffff]}) r7 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) [ 1211.444866][T19360] xt_nfacct: accounting object `syz0' does not exists 01:46:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:40 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xe403, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd811) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 01:46:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:40 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xec03, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1211.720348][T19385] syz-executor.5: vmalloc: allocation failure: 17179869208 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 01:46:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) [ 1211.780856][T19385] CPU: 1 PID: 19385 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1211.789564][T19385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1211.799629][T19385] Call Trace: [ 1211.802930][T19385] dump_stack+0x18f/0x20d [ 1211.807286][T19385] warn_alloc.cold+0x87/0x17a [ 1211.811974][T19385] ? zone_watermark_ok_safe+0x260/0x260 [ 1211.817532][T19385] ? mark_lock+0xbc/0x1710 [ 1211.821961][T19385] ? lock_is_held_type+0xb0/0xe0 [ 1211.826912][T19385] ? ip_set_alloc+0x48/0x60 [ 1211.831421][T19385] vzalloc+0x163/0x1a0 [ 1211.835503][T19385] ip_set_alloc+0x48/0x60 [ 1211.839842][T19385] hash_netnet_create+0x401/0xd70 [ 1211.844880][T19385] ? hash_netnet6_head+0xcd0/0xcd0 [ 1211.850002][T19385] ip_set_create+0x6a2/0x13c0 [ 1211.854693][T19385] ? ip_set_sockfn_get+0xe00/0xe00 [ 1211.859835][T19385] ? lock_is_held_type+0xb0/0xe0 [ 1211.864782][T19385] ? ip_set_sockfn_get+0xe00/0xe00 [ 1211.869901][T19385] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1211.874856][T19385] ? nfnetlink_rcv+0x420/0x420 [ 1211.879624][T19385] ? is_bpf_text_address+0xcb/0x160 [ 1211.884841][T19385] ? __lock_acquire+0xc1e/0x56e0 [ 1211.889794][T19385] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1211.895793][T19385] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1211.901781][T19385] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1211.907686][T19385] netlink_rcv_skb+0x15a/0x430 [ 1211.912466][T19385] ? nfnetlink_rcv+0x420/0x420 [ 1211.917236][T19385] ? netlink_ack+0xa10/0xa10 [ 1211.921840][T19385] ? ns_capable+0xde/0x100 [ 1211.926352][T19385] nfnetlink_rcv+0x1ac/0x420 [ 1211.930942][T19385] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1211.936412][T19385] netlink_unicast+0x533/0x7d0 [ 1211.941190][T19385] ? netlink_attachskb+0x810/0x810 [ 1211.946299][T19385] ? _copy_from_iter_full+0x247/0x890 [ 1211.951679][T19385] ? __phys_addr+0x9a/0x110 [ 1211.956180][T19385] ? __phys_addr_symbol+0x2c/0x70 [ 1211.961208][T19385] ? __check_object_size+0x171/0x3e4 [ 1211.966500][T19385] netlink_sendmsg+0x856/0xd90 [ 1211.971357][T19385] ? netlink_unicast+0x7d0/0x7d0 [ 1211.976305][T19385] ? netlink_unicast+0x7d0/0x7d0 [ 1211.981247][T19385] sock_sendmsg+0xcf/0x120 [ 1211.985670][T19385] ____sys_sendmsg+0x6e8/0x810 [ 1211.990436][T19385] ? kernel_sendmsg+0x50/0x50 [ 1211.995165][T19385] ? do_recvmmsg+0x6d0/0x6d0 [ 1211.999763][T19385] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1212.005745][T19385] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1212.011724][T19385] ? __lock_acquire+0xc1e/0x56e0 [ 1212.016665][T19385] ___sys_sendmsg+0xf3/0x170 [ 1212.021255][T19385] ? sendmsg_copy_msghdr+0x160/0x160 [ 1212.026541][T19385] ? __fget_files+0x272/0x400 01:46:41 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xf000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1212.031220][T19385] ? lock_downgrade+0x820/0x820 [ 1212.036065][T19385] ? find_held_lock+0x2d/0x110 [ 1212.040834][T19385] ? __might_fault+0x11f/0x1d0 [ 1212.045608][T19385] ? __fget_files+0x294/0x400 [ 1212.050290][T19385] ? __fget_light+0xea/0x280 [ 1212.054889][T19385] __sys_sendmsg+0xe5/0x1b0 [ 1212.059393][T19385] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1212.064434][T19385] ? __x64_sys_futex+0x382/0x4e0 [ 1212.069386][T19385] ? do_syscall_64+0x1c/0xe0 [ 1212.073977][T19385] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1212.079983][T19385] do_syscall_64+0x60/0xe0 [ 1212.084402][T19385] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1212.090291][T19385] RIP: 0033:0x45cb29 [ 1212.094175][T19385] Code: Bad RIP value. [ 1212.098236][T19385] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1212.106647][T19385] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1212.114625][T19385] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1212.122595][T19385] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1212.130567][T19385] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1212.138538][T19385] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1212.206890][T19385] Mem-Info: [ 1212.210138][T19385] active_anon:230755 inactive_anon:4157 isolated_anon:0 [ 1212.210138][T19385] active_file:2071 inactive_file:6729 isolated_file:0 [ 1212.210138][T19385] unevictable:1 dirty:122 writeback:0 [ 1212.210138][T19385] slab_reclaimable:15886 slab_unreclaimable:119764 [ 1212.210138][T19385] mapped:58054 shmem:4417 pagetables:8864 bounce:0 [ 1212.210138][T19385] free:1113580 free_pcp:566 free_cma:0 01:46:41 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xfd, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:46:41 executing program 4: open(&(0x7f0000000080)='.\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x3, 0x33) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ocfs2_control\x00', 0x250400, 0x0) r5 = socket$nl_generic(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000400)=0x201400) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)=ANY=[]}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESOCT=r7, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x9c, 0x0, 0xbba0f4744b149fac, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2080}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xaccc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff00fa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) sendmsg$nl_crypto(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x74000171}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10, 0x14, 0x52b, 0x70bd25, 0x25dfdbfd, "", ["", ""]}, 0x10}}, 0x191) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 01:46:41 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xf203, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1212.254587][T19385] Node 0 active_anon:920860kB inactive_anon:16628kB active_file:8284kB inactive_file:26912kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:232216kB dirty:484kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 673792kB writeback_tmp:0kB all_unreclaimable? yes 01:46:41 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffffef, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x2c, 0x2, 0x0, 0x1, {{0x8}, {0x8}, [@IFLA_GTP_FD0={0x8, 0x1, r1}, @IFLA_GTP_ROLE={0x8, 0x4, 0x2}, @IFLA_GTP_FD1={0x8, 0x2, r3}]}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x0) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) 01:46:41 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xfa03, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1212.311862][T19385] Node 1 active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1212.353053][T19385] Node 0 DMA free:13852kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1212.383561][T19385] lowmem_reserve[]: 0 2515 2515 2515 2515 01:46:41 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xfc00, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1212.398392][T19385] Node 0 DMA32 free:703040kB min:35916kB low:44892kB high:53868kB reserved_highatomic:0KB active_anon:920820kB inactive_anon:16628kB active_file:8284kB inactive_file:26912kB unevictable:4kB writepending:484kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:19168kB pagetables:35660kB bounce:0kB free_pcp:2040kB local_pcp:952kB free_cma:0kB [ 1212.448769][T19385] lowmem_reserve[]: 0 0 0 0 0 [ 1212.455671][T19385] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1212.485713][T19385] lowmem_reserve[]: 0 0 0 0 0 [ 1212.501175][T19385] Node 1 Normal free:3738504kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:36kB local_pcp:12kB free_cma:0kB [ 1212.545446][T19385] lowmem_reserve[]: 0 0 0 0 0 01:46:41 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="094800002b000535d25a80648c63940d0224fc6010000940080000005a3582c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuset.memory_pressure\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0xb07100) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x7ff, 0x151002) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=""/156, 0x4}, 0x20) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x00\x00\x00\x00\xa8L\x06\xb5\x12\x03\\CF\xd9\x1f\xb9\xf2-\xda,C\xf9j\xe3\x8d\xb2\xfa\xe3\xd6\xe0|2l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9') perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5=\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 01:46:41 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xfc02, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1212.550478][T19385] Node 0 DMA: 3*4kB (U) 2*8kB (U) 2*16kB (U) 3*32kB (U) 4*64kB (U) 3*128kB (U) 3*256kB (U) 2*512kB (U) 1*1024kB (U) 1*2048kB (U) 2*4096kB (M) = 13852kB [ 1212.591448][T19385] Node 0 DMA32: 2105*4kB (UME) 800*8kB (UME) 960*16kB (UME) 1996*32kB (UME) 1225*64kB (UME) 756*128kB (UME) 361*256kB (UME) 198*512kB (UM) 120*1024kB (UM) 33*2048kB (UM) 12*4096kB (UM) = 702628kB [ 1212.639176][T19385] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1212.657676][T19385] Node 1 Normal: 359*4kB (UME) 432*8kB (UME) 368*16kB (UME) 228*32kB (UME) 154*64kB (UM) 113*128kB (UME) 52*256kB (UME) 43*512kB (UM) 33*1024kB (UE) 5*2048kB (UM) 883*4096kB (UM) = 3738524kB [ 1212.684262][T19385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1212.706217][T19385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1212.719058][T19385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1212.720279][T19427] device wlan1 left promiscuous mode [ 1212.737312][T19385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1212.748681][T19385] 11988 total pagecache pages [ 1212.759314][T19385] 0 pages in swap cache [ 1212.765435][T19385] Swap cache stats: add 0, delete 0, find 0/0 [ 1212.771593][T19385] Free swap = 0kB [ 1212.784477][T19385] Total swap = 0kB 01:46:41 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xfc03, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) [ 1212.788306][T19385] 1965979 pages RAM [ 1212.797681][T19385] 0 pages HighMem/MovableOnly [ 1212.807765][T19385] 349903 pages reserved [ 1212.816820][T19385] 0 pages cma reserved 01:46:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:42 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xfe, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:46:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xfe80, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:42 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="094800002b000535d25a80648c63940d0224fc6010000940080000005a3582c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuset.memory_pressure\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0xb07100) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x7ff, 0x151002) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=""/156, 0x4}, 0x20) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x00\x00\x00\x00\xa8L\x06\xb5\x12\x03\\CF\xd9\x1f\xb9\xf2-\xda,C\xf9j\xe3\x8d\xb2\xfa\xe3\xd6\xe0|2l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9') perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5=\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 01:46:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xfec0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:42 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) sendto(r3, &(0x7f00000001c0)="31937f1ca34f6a8ca96d2fd95b649d487ee3598df01efdca9212a09b07b4bf976fcfb8e3b35b756de5927127bd86575a6b662393701d80d8a04c978e392eb8ac7e04e7bff3db571a1d9a4dbd58ecf90e9659939ddf43d8b3c4a9ba09f8c059fb1a04932a4fd3fdcf31190a8ecf277795901cb7903e7ce35736d46f074fc71fe0361e9de99e93df39aa33fd4bb5a38e232543397928c2fe51996967ff11bb6425af8328d5bcb3bbe6ae528e11292c831f4b7ab18ff2c34d4c25cf756eb06a0bef01d0f10527b49d7b955f0217597c517f545a16dc6a784191c7c31021fb6f2616168ebb1175f2fa7e", 0xe8, 0x0, &(0x7f0000000080)=@caif=@dbg={0x25, 0x80, 0x8}, 0x80) 01:46:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xfeff, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1213.778233][T19460] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:46:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xff00, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1213.822760][T19460] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:46:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xff03, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:43 executing program 1: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xec, &(0x7f0000000380)="c4fe910c6786b1c90000000000000008ee6333b5cacd891969b71832cb470c94d61f3514dca7712c225da4a455f4c9fd98a568097aa4acd6ecd74d473ff2bdb9693106311ae02ebaef7cd058ec3a54a90a11c890a73cef2d28533220798a410180140000000000c6f836cea17bd8d700000000005b162dc66a58c3ca8ff3622730a50927eced002f21edcfdeffaba5d913761e3b416c00000000d1a3b31bdba0c944352bfe681abbfe73194bb7634795d2ce39be7bc8d7cfea6d2329590d78116396e8faa066cff2c0b03005fe637e68328e878c1a74984602fb32ff53163efcd47645f95831a64bc9d39eb0"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000fd9d1e0f050000000000", @ANYRES32, @ANYBLOB="0000000000001800280012800a00010076786c616e00000018000280140010"], 0x3}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) 01:46:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xff0f, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:43 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x102, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:46:43 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xff7f, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:43 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xfffe, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:43 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:43 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x20000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:46 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f3b, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:46 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:46 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x103, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:46:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:46 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffe, 0x0, 0x7f}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="4ff21cc1a62602679f90f03feabbfa60527b82238961ba95524626f69bd8c6a16b36ac9bdb6aa0ea87afdeb8f0ed4ff85f05ef6cace9a919802e020b35a8e1385f55611bb8381181", 0x48, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 01:46:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:46 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:46 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f3c, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 01:46:46 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f3d, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 01:46:46 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f3e, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 01:46:46 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f3f, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:46 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x104, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:46:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 01:46:48 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:48 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f40, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:48 executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000001c0)='/dev/usb/hiddev#\x00', 0x5, 0x2000) splice(r2, &(0x7f0000000180)=0x1ff, r4, &(0x7f0000000200)=0x6a, 0x952c, 0x8) close(r3) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xfffffffa}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r5, 0x2c, &(0x7f0000000140)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x9, @private0, 0xfff}]}, &(0x7f0000000100)=0x10) write(r0, &(0x7f0000000280)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c080017001600f000", 0x24) close(0xffffffffffffffff) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r7, 0x0, 0x4}, 0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xc) r8 = socket(0x11, 0x800000003, 0x81) bind(r8, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) accept(r1, &(0x7f0000000300)=@nfc_llcp, &(0x7f00000003c0)=0x80) pwrite64(r8, &(0x7f0000000240), 0x0, 0x3f) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x1000}) 01:46:48 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x105, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:46:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 01:46:48 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f41, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 01:46:48 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f42, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 01:46:49 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x11, 0x800000003, 0x81) r1 = socket(0x11, 0x800000003, 0x81) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x10005, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000100)={0xffffffff, 0x1, 0x4, 0x800, 0x1000, {0x0, 0x2710}, {0x4, 0x8, 0x0, 0x6, 0x8e, 0x7, "19856086"}, 0xfffffe00, 0x4, @offset, 0x7484, 0x0, r4}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r6, 0x7c80, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x70b, 0x2, 0x4, 0x0, 0x0, [{{r0}, 0x80}, {{r0}, 0x2}, {{r1}, 0xfffffffffffffffe}, {{r2}, 0x6}]}) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x80}}, 0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f0000000180), 0x400000000000117, 0x0) 01:46:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 01:46:51 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f43, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:51 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:51 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x106, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:46:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001740)=[{&(0x7f0000000000)=0xfffff0a9, 0x1}, {&(0x7f0000000040)=0x1}, {&(0x7f0000000080), 0x1}, {&(0x7f0000000180)=0x2, 0x1}, {&(0x7f00000001c0)=0x1, 0x1}, {&(0x7f0000000200)=0x1, 0x1}, {&(0x7f0000000240), 0x2}, {&(0x7f0000000280)=0x2}, {&(0x7f00000002c0)=0x2, 0x1}, {&(0x7f0000000300), 0x1}, {&(0x7f0000000340)=0x1, 0x1}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=0x1}, {&(0x7f0000000400), 0x2}, {&(0x7f0000000440)}, {&(0x7f0000000480)=0x1}, {&(0x7f00000004c0)=0x1}, {&(0x7f0000000500), 0x2}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580), 0x2}, {&(0x7f00000005c0)=0x2, 0x1}, {&(0x7f0000000600)=0x2, 0x2}, {&(0x7f0000000640)=0x1, 0x1}, {&(0x7f0000000680), 0x2}, {&(0x7f00000006c0)=0x1, 0x2}, {&(0x7f0000000700)=0x1, 0x2}, {&(0x7f0000000740)=0x1}, {&(0x7f0000000780)=0x2, 0x2}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=0x2}, {&(0x7f0000000840), 0x2}, {&(0x7f0000000880), 0x1}, {&(0x7f00000008c0)=0x1}, {&(0x7f0000000900)=0x1, 0x2}, {&(0x7f0000000940)}, {&(0x7f0000000980), 0x2}, {&(0x7f00000009c0)=0x1}, {&(0x7f0000000a00)=0x2, 0x2}, {&(0x7f0000000a40)=0x2}, {&(0x7f0000000a80), 0x1}, {&(0x7f0000000ac0)=0x2}, {&(0x7f0000000b00), 0x2}, {&(0x7f0000000b40)=0x1, 0x2}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)=0x1}, {&(0x7f0000000c00)=0x1, 0x2}, {&(0x7f0000000c40)=0x2, 0x1}, {&(0x7f0000000c80)=0x2, 0x2}, {&(0x7f0000000cc0)=0x2, 0x2}, {&(0x7f0000000d00), 0x1}, {&(0x7f0000000d40), 0x2}, {&(0x7f0000000d80), 0x2}, {&(0x7f0000000dc0)=0x2, 0x2}, {&(0x7f0000000e00), 0x2}, {&(0x7f0000000e40)=0x1, 0x1}, {&(0x7f0000000e80)=0x1}, {&(0x7f0000000ec0)=0x1, 0x1}, {&(0x7f0000000f00)=0x2, 0x2}, {&(0x7f0000000f40)=0x1, 0x2}, {&(0x7f0000000f80), 0x2}, {&(0x7f0000000fc0)}, {&(0x7f0000001000)=0x2, 0x1}, {&(0x7f0000001040)=0x2, 0x2}, {&(0x7f0000001080)}, {&(0x7f00000010c0), 0x2}, {&(0x7f0000001100)=0x2}, {&(0x7f0000001140), 0x9}, {&(0x7f0000001180)=0x2, 0x1}, {&(0x7f00000011c0)=0x2, 0x2}, {&(0x7f0000001200)=0x2, 0x1}, {&(0x7f0000001240)=0x1}, {&(0x7f0000001280)=0x1, 0x1}, {&(0x7f00000012c0), 0x1}, {&(0x7f0000001300)=0x1, 0x2}, {&(0x7f0000001340)=0x2}, {&(0x7f0000001380), 0x1}, {&(0x7f00000013c0)=0x1, 0x1}, {&(0x7f0000001400)=0x2}, {&(0x7f0000001440)=0x2}, {&(0x7f0000001480)=0x1}, {&(0x7f00000014c0)=0x1}, {&(0x7f0000001500)=0x2}, {&(0x7f0000001540)=0x2, 0x1}, {&(0x7f0000001580)=0x1}, {&(0x7f00000015c0)=0x2}, {&(0x7f0000001600), 0x1}, {&(0x7f0000001640), 0x1}, {&(0x7f0000001680)=0x1, 0x1}, {&(0x7f00000016c0)}, {&(0x7f0000001700)=0x1}], 0xd, 0x5a, &(0x7f0000001d00), 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\a~\x00', 0x1c, 0x2c, 0x0, @remote, @local, {[@dstopts={0x2c}], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5}}}}}}}, 0x0) 01:46:51 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:51 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f44, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 01:46:51 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100a288c3788c815974188ead5fb38f00a2cd4208f0031d588e0100000001090224dd010000b5000904000002ff01071309058b020000b5", @ANYRES16=r0], 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() tkill(r4, 0x13) 01:46:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:51 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f45, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1222.441810][T20348] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1222.711851][T20348] usb 2-1: device descriptor read/64, error 18 [ 1223.101881][T20348] usb 2-1: device descriptor read/64, error 18 [ 1223.371864][T20348] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1223.641834][T20348] usb 2-1: device descriptor read/64, error 18 [ 1224.031856][T20348] usb 2-1: device descriptor read/64, error 18 [ 1224.151972][T20348] usb usb2-port1: attempt power cycle [ 1224.861826][T20348] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1224.951945][T20348] usb 2-1: Invalid ep0 maxpacket: 140 [ 1225.101820][T20348] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1225.211906][T20348] usb 2-1: device descriptor read/8, error -71 [ 1225.421888][T20348] usb 2-1: device descriptor read/8, error -71 [ 1225.542817][T20348] usb usb2-port1: unable to enumerate USB device 01:46:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:55 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:46:55 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f46, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:55 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x107, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:46:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4c392e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) 01:46:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) [ 1226.515580][T19655] device bond0 entered promiscuous mode [ 1226.541123][T19655] device bond_slave_0 entered promiscuous mode 01:46:55 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f47, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1226.575461][T19655] device bond_slave_1 entered promiscuous mode 01:46:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x60000000}]}]}, 0x44}}, 0x0) 01:46:55 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f48, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:55 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f49, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:46:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f4a, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:47:00 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:47:00 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f4b, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x40000000001e, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, r3, 0x90d, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4014}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) 01:47:00 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x108, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:47:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x60000000}]}]}, 0x44}}, 0x0) 01:47:00 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f4c, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:00 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f4d, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r2 = dup2(r1, r0) write$cgroup_int(r2, &(0x7f0000000000), 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@loopback, 0x64, r3}) r4 = socket(0x11, 0x800000003, 0x81) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000280)={@loopback, 0x64, r7}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000000280)={@loopback, 0x64, r9}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000280)={@loopback, 0x64, r11}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c010000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf2502000000440001801400020067656e65766531000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="5c00018008000100", @ANYRES32=0x0, @ANYBLOB="140002007663616e30000000000000000000000008000300010000001400020077673200000000000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001c00018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000300060000000c00018008000100", @ANYRES32=r7, @ANYBLOB="300001800800030001000000140002006e65747063693000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="080003000300000018000180140002006272696467655f736c6176655f300000480001800800030002000000080003000000000008000100", @ANYRES32=r11, @ANYBLOB="1400020076657468305f746f5f626f6e640000000800030003000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="2000018014000200697036746e6c3000000000000100000008000100", @ANYRES32=r12, @ANYBLOB], 0x18c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 01:47:00 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f4e, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:00 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:47:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) [ 1232.619005][ T0] NOHZ: local_softirq_pending 08 01:47:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:47:04 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f4f, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 01:47:04 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3f, 0x7f, 0x1, 0x80000000}, {0x1ff, 0x4, 0x10, 0x6}]}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "6c0f7c064d9c806002ab515b7af0dd1c"}, 0x11, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r1, 0x80084121, &(0x7f0000000140)) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6e0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000300)={0x21, 0x221, [], [@pad1, @generic={0x54, 0x1000, "18a271256ea113fa34bccdf3760c1648fc22cb76fb57581a6d68563315d00fb6c268a0dca1d74c3b26e39acaa11dc8891f7126609af70d9a1be73c2628e462af72fd872ea9b969198e615db26d550cce98d840a0d58ccffc13094f42acc9f3aa29edf4f1956808c2734e357a957d9f2cecdcf47d55b2148f16045ff314291439de61ecf38e9bd3f8cfa378a8373e57855d72673ec441f40ee80ef0734924995f226a8c6db171487b65b782cd6b995d6610e8798d569e209ca422f771aba07a0e890ef77712b7083c59fbe0926aa75502ba64b2996b213360717994d4bd78a5f2b4beb9df55100b3f8421dbe9a63db9c9147313943ffe6b7c7fd1eb9fd8ee0542d53d30bb299cda6c39180d44a26bb6f3637eaadb6e17fbbe7508e32b0de2557f23007166c688d6b039bad8274eefe6756aee808c2977f533a9d995e5f80afaf852b456184c1f0401c6c05a28fdf2c0986783d107cd200333c0b4b9b1c2658c210f68db03fba46cb7147421484c41c97a6bdb588252ccec6639caca88511ee249cdefa5fafe3eda959f7072fb17e34f229c632d4942ea04f7983cb2f4af84dad7e55f1eb89a3e32d12b5f2478975d0442b5027400ddb5503b27fd123aa4ad4b30f14b1ba2e00b45bf1d34603e6695b20758abb4d871c846e8acb3a09cd65a96972e7fe5c8bc688d6109c5d750acc0b7b830ed0939edae4a63cdb4ea022935036fa892cd4d1173208037e5cbac1d214e770318c7bd95c9ef2ff6b97fca10f4afaa32acdd5b129d76c841283b7fdbaf4382c80adda8131160a6ad53442981ab8d18529fe8d85ca34754b85bfa3d77a49da5e568bc2f39e56862d85916a14399c6d83bd8a940a8e11a38ef8da82fbed8ae8843dbdfd75a53bed91f6aa837185cf78ce30bb8f95a9f07124ad3946ca61aa802bbf44f40f20cd8f57ddb969adf7993c11f2392d702ac049358f6ee204abc5372b026fff445693a45db7aa1d1418a082d2fa9f40a69e678c4895c78a8b844d9380de5c97055f49a5cc47c2874687bcf9169449e437444c0168b255cd7da2de0f30a96bdaa0ab0777570fa382174461fda23bd5bbaab352aaf1a4f81559c879b1358212023eb3110c4a22f57764d9730d885fa8fd9759d05482bd64cea7165f6690fe546487d45fee742d6fdf9f880a2f84181e933b91e51e5c8893cea663b75a28c663428d6c71fc725a4fad22c7de772e21524e5cb1351a17ae59eb90cfa8c2957e5b41858a39f9040d3b9b6121458d189b541a5603004f894f892f726ffd1627a6498e1704fd2b1ebdfb88d76a013fab7110c9c5ff60e9fb6d703948ca012fa45f12b5ff706dfc44812a7b085d6dd63db8b2afb98b1214fbafcc3ee120a057308872c47d7554cb18e54e5c9c69b8da727b2e0c8af308a39cc36774058b79d6bf4968ee12e783c59523e1a0c5cb504c552284e58e83d82a3d49572cf7f7988d5dc97bd3870fb7152ad2d8a2603e8b78d5f73c4002e31f12df9036dbe0cff9f88833ad301a1bb86b2fccb73224408fd24e8f5ae02b10aa708ad1926aabab039d2e64abbd7e203821e99b38c662069ab1d3559b3459cf74856adf15118f47af4eb8ba9d3b9afba43475bfaafaeadbca5bfd63541c6b6cf6ce0b87c529465569621dc675e54b7c1d7b24bd92114a2b4172401623cf484b8a48b0ce51d30321345f86273404681c858e6f8cd78472e53794ed3ee32d440113ece52f1426589345f213ebb63844f568b41ba6233db4a0996e97fc08186e6df68978522c08ce36e9e499b77f2d2d48826071563d157baeb78bd8f866e908d320c954f415e64c8b028b4ec521c93c223835e1e7667b45a87a6b77fd0a2271ee9c0faaf25d5426add21c47328e419f4c98db5a92178d539db9008cd227e474662d211d759a34d4f24fb07bba69fb9b329801703e53b9bf0da8a5c8f4105660c0db39c6e1b0929edbc7d033f557d9f77acbbeb8504679eb024527ae61b834857b4036f1ea7e42113a326b4a51c7dbe0cb4b6aeb6b6754b15074ed7a2c59b177308a6a03b88c4884f1757a48a368b13bca480ca2f07b849ad1986280e86590c59d36ad2cb96868541ba7dd03387068b77e0a17ea20ba75479e206e9d68060c3b5544e203a4c5a5ada1c6b104d17a2f2d6b89054773eb0362cf669555aa71351c9e327dcde19f85ef7cce6bdaebae665976df755a8f7f2e43ba6130340164eb445e3733d5ae16579be60faae3fab18797c6b9b4e4e94ef9cdef884487653f0934a7f025aec2161d18cd747859f5c03acc082bc2550f165ff0353ea4e3009fe88f635cc54ad76b4ba1478af67f44c7976627d5f60caf8410c11a449dd760455abd069dab4eef3c2749e4fadd6b5b91c2504dd66003a91ca282911c80ea9541f2fc8b3bd63c8dd602ffc4eda34225d9c7d1bf5274053c8eee5f2fa358cfd3e7b270a04fa2dbb801facc4a20511d1e14008c79d1ac5cd7b453341e67a5305754ebd5ae4c05afaf5a00daa1003e25034d418848d069afa5b60fc0ff2406d738a0c26ab7a439d3a946ee24972efccc89bee951921c920a9566026b1701ab9ace18e2777d53b4946ea5d7b189bc852bfa39b9d0bd0252da08ebcaf835449796fc131fe58e50220700e21d20b7c411fbf6826c51b708618bebe791bbd0594d60c0ded91dfcc180c66ae562eb02b08d6a14d9dc1ab7993eacb142a0f41ba302e389674985f22780e86a03bace93369bc055b1e4a745e1f84d667c9fb502f587bf833016287d6ef3e59dedf194d241983b5480dd35848cbc0490378500a86aa697528c3a98ace92955b5cf1dba16ffd75e17addf3d3c6f08031221fcfd1171deb2d552997bdca0c386db19c59d7679a207083335a71109277117040b515f9e8a6a8ec4b48212b2d4222bee4b0146696cba3fe9ec8ca2b4473a4f2de1cfcd09bfd5322a7486883f495b630dba2e12f414e41b36c06071854de55ee3fd75e1e849ed21f6751f15af15f7afae996ccee65979111b308b7e839795f21454dc974d19cc7d3baf0a8434c6531b61c70e8a3c34391f37384fed621c103599292d5c32f48edef01e3a41fb7eecb308ee86f3b6970d9500ff103fa70c7a3753c19a56d7be010f6ef68c977b90ba5373856d397b4f8d7fbe0c1e544fb3f30bfdde26c3773498db4d00309259d7836febe8cc9b9ee9eb6ef9e2627e92f5c8e9d690380eb4d74793726ad5cae7bde74f397bd1f7eedd2a4497a2e7524ca47ca37d9c66a9f76447490b3fc0e2f745b5471a03c03ef2d0b034569663e486b810a10a4d6aa4af294091f25a8cdc558fff3c49fa3bf01e16dde932a6ee58249c110fc631d895c8347c38f70c6eac8734fd3f5fbeae76200d5d3a738ecdef8f4ebbbdbf7f8890c5cd8219d385f82fa86730ecd038ec0b9409a37b568d4117163f6bc92dccee1035c6f251f1aea593a2068ab60d5ab2d9d16eeec888d0db4ca4c577d88e0113db8b5d8310b4e67d6061be1d6c4484796e78c3b4837bb0ad8508f77c91f53f55b686dc106c48dbf8efe5062ed86ee8e0e750e14962b757c7d9c0f698d610dff47fae726352a88fd48a0f8b6fcc94a5236eaa852d097819b0c7b3251463defe7ed78f9e506a5ac020464622425a95127eb83232b8c81630c45daefbe5fcdc2aac3ae58a333c7eef435d0dec7defcec4546a8bfd40fe612f96fbd468a22139470baddec0ec2082ae739f2bbb772ad553b84247cf3caf7eae1d77d3f84bf13aa10e3d008a8c11ff059170c3a17aa9f8b0b5f1fd7ffd7c066038ac66e2a66edeaff5e5bb694bcdefdd05806061a279734bdfd23529e2291262103ae187656eb3833c9b23ce90e54d97f68a529c752661fac00a25046eae51306500f7f7a021b1212bc6883540f0327644e25b5c12de68f3b981fabfeb479488b96b0bf54bb8019c3513dbefc03980e1a9b348bdb991b497c3bb06ac177441b8cf8b8679c2b39e3efc0b2cab949bf004a12c587d8887e93c37ea270d0e1e667924600a492e3038cbe5f5eccb0df5d856c31e35326bc1d5a8b64b14d0e93d1ed16de652d6c6547ff6d31931d390b35936ea8ea9cba7ebad1b3eea7b091583c36a00b043985ef4c73bfdafa68f0847df3f9114cd994f66050aeff11db0ced2b862ea2838e45274e76365651b3e01efd6834c9e3c661ef0590aa0140c89527e74de353a2c717168ab5bd19806a152e925811e976fdeb6c51d51f95ca880f904640b8775c90e4a2495fa8b85c7b72e422449600d6838e4805a9d2cbfd02ba0977d839d5b11c71530ab4713ef58ed11ece63a2c5b7186bb5902b4761682caa8491a6c2e4e88c09647a2c8735f0899ccdc6acf292139a3d60738179d64cee13f004cad89aa23c50f7db73ef2bec6376956ea6f59197639219d1919a336e7363dc54d90209414ce087c91ca1864cd882391ccf36b7d61b2935af993658d9e6edd08dd19feada3be2f86ea1be2be88db637053e3b046d285f2f40735e42fe26f472e78a39d3000a3862b80b135c58b50fd4dc1fbbfe804a6c411494bcde1526c3c731f7d8f10f6ee97583754a87ee4f8a9d52ce87d50f593ac46bc63ae19674350d1874308f29fbbdfe1762b9f09d734a2f81a057c5b1733a832e55bec7905b53324a25ce5d6e01e97b3205082e8191bf990748303fdccb430988c8b2959094b16245f06650dd2d6e56edc4f5fa9d513afe5e100e670dafde7083262c2985377381e1ccfc01128e9c5872853de15aa0fd17186818fe50636a3787170c0ed6eb17efdefa3ca551eb1e123395e3d8f16a77fcea6f7536951ce6fbd1455851f00d50c655a8c8ef1e724663189f59e822922facd0d7e36571b3c4608c3120609bb96e9d9f98853ba8000c62bcfed3bc0faf0652f754bb1c2627c655bc446fc5aa6749e0c2f3fe212becafb34182c550fc4e31f95a9f9fc28ecaeca3463664f2377fa7c7d4f2da8c0f954987372aa1354a86f8b30011857d68bef21d4fc562caccaa6175b5af42da53f79b89f964ab107b717a519b7eeeb223d0f0ee0bdd0748f616b8a6e7ea9cd207f3e1cebe45e132ffa6c244bb56dadd4dc999c02c0d5abf82ade2813f17876af8f15228cf2bdf89a5f71b95c577cdd385a0d6a20245513ae414aa75ef513ec91bc1b674ebf955029ca809e65380bff3bebca0af3d7af64b049cef08a2ac535dc39e816028597b48da8ddb1772473adb895cd3bae49276a6d735833476a97285a1c2aa9fd47b5c0cc3124edd4394291c9e3a1adef45632412f738b5a2bfa5efc6806af90725dcabb9e2ca065b0f8aad43c55225f4d77da9f36e91fbfcafa8a7afd70c35a4404624c7feeb7ad060ff748b56ec58afb956d9f5b3ef9e03d3ae58688a020aa296222ba80db7e3e9571aec325bf38b01db643c1363e38ab487370fe200d4574645664f59881b40b756fc0ac2c41b84d94f82777a734b3dab8ece504d90bc8b023e5fdf832ccdc632296dc39de3375807e8ef36fe4f92a65bb94d43cd56e1c09a80a74d2cca4aeb1be1f911b955ecb3e3c9d8ee6964e0b4fd7bad09d212c138d743374949d3f9b4d18b014600da10e0486558300804e0ebce36f494c6a25b546402274d047d44d9b9d8fa8c3e80cf932b7e18933f7db022cd7803a7a07bd4d4d73d72f23aba66f75caa131f3194f0281d5caafbbc9eef3f60d78e7c94783b93bfea760fc316696f096ad5ffb2dc1d14f8b6564fd05ed8b56458b4b9f48c1d08189ce527c4e6190f134f8560bae4ff6ddee9828cc21c9bc40319392d9b0d5737a32e2063f106838"}, @ra={0x5, 0x2, 0x5}, @generic={0x5, 0x48, "9c74404888fd4ffbcf4175c9ef77352d71fe9fe7b4ec3e6a4dc3cb29177685afc9a294429112657130307abc6fe42a9e6fe15f4ac5e4a947f80cc55d28e6af536ae9854a969c5bf1"}, @generic={0x7f, 0x8d, "8d5892c6a5b1971e66baed3f9bcef2f6427fc1da64a01b0d525fcade3065de28f89be3d434b042ceed40c8b78b915c58e5f24a3ceddb59c3849f80e52b0ce426db01c255ad9673f837a86d8bc76a2234bf9aaf11221dfff4919aaf2ada51138a48a505653d485470251a3e9dcd744e3732b59b0d9a093301bed861a6cae771281054cacfea6ea7e9da62a0c5d7"}, @ra={0x5, 0x2, 0xd89f}, @calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0x6, [0x10001, 0x8]}}, @padn, @pad1, @enc_lim={0x4, 0x1, 0x9}]}, 0x1110) getxattr(&(0x7f0000001440)='./file0\x00', &(0x7f0000001480)=@known='trusted.overlay.impure\x00', &(0x7f00000014c0)=""/138, 0x8a) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001580)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f00000015c0)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x38, 0x140c, 0x800, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1c000004}, 0x4000000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001700)='cpu.stat\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001780)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20000004) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000001880)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/video37\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r6) 01:47:04 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x109, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:47:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x60000000}]}]}, 0x44}}, 0x0) 01:47:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x44001) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f00000040c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004340)={&(0x7f0000004100)=ANY=[@ANYBLOB="20020000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="7801028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636156745f72656a6f69eb5f636f756e74000000000005000300030000000800040000100000b3c3f818120100240001006d636173745f72656a6f69657276616c00000000e998c1054525879500030003000000080006000000000000000100"/114, @ANYRES32=0x0, @ANYBLOB="780002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040003000000"], 0x220}, 0x1, 0x0, 0x0, 0x4040005}, 0x4000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000100005126b1ceba6000000", @ANYRES32, @ANYBLOB="000000000000000028001200090a1ab6168232dad86124eb41e9b41d45dd7441e4c165eba26560f96161036b959ad86b63e45dbd2c67fc3ee6ad567a6e537075b6dee489c7e7192c35258d0f012b4993a3b73cf8b11e9517aaf6208a1dd9783d5346e296d46269b906b0f648e1710b74fd37c473"], 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d7", @ANYRES32, @ANYBLOB="00000000ffffffe2010000006a9aaf00010068"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=@newlink={0xb0, 0x10, 0xc3b, 0x1, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x88, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x78, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x97465}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_TTL={0x5, 0x8, 0x80}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x30}}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}]}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x200088d4}, 0x20000800) r6 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 01:47:04 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f50, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) 01:47:04 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f51, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 01:47:04 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) sched_getscheduler(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0xffffff68, 0x0, 0x0, 0xffffa5eb}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffe0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setown(r4, 0x8, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000001c0)=""/22) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ee0870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 01:47:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:47:09 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f52, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 01:47:09 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x10a, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:47:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffe}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x44, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x24}}, 0x1c) 01:47:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) 01:47:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) 01:47:09 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f53, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:09 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x13, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x611eac2f04ada12b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x1000, 0x100000000, 0x400, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) socket$inet6(0xa, 0x400000000001, 0x0) 01:47:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 01:47:09 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f54, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 01:47:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:47:17 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f55, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 01:47:17 executing program 1: getpid() getpid() creat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x3f, 0x42000) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f00000000c0)=0x8001, 0x4) close(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8d5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x200005) sendfile(r0, r2, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x0, 0x4}, 0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={r3, 0x0, 0x30, 0x400, 0x81}, &(0x7f0000000140)=0x18) 01:47:17 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x10b, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:47:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:47:17 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f56, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1248.479503][ T29] audit: type=1800 audit(1594000037.576:33): pid=19806 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15692 res=0 01:47:17 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f57, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1248.623917][ T29] audit: type=1800 audit(1594000037.726:34): pid=19822 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15708 res=0 01:47:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000080)=""/115) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/181, 0xb5}, 0x7}, {{&(0x7f0000000700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x8}, {{&(0x7f00000029c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000002b00)=""/4096, 0x1000}, 0xfffffff7}, {{&(0x7f0000004dc0)=@alg, 0x80, &(0x7f0000006000)=[{0x0}, {0x0}, {&(0x7f0000005fc0)}], 0x3}, 0x3dee}, {{&(0x7f0000006040)=@xdp, 0x80, 0x0}, 0xb97}, {{0x0, 0x0, &(0x7f0000007c40)=[{&(0x7f0000007a00)=""/198, 0xc6}, {&(0x7f0000007b00)=""/16, 0x10}, {&(0x7f0000007b40)=""/103, 0x67}], 0x3, &(0x7f0000008f40)=""/4107, 0x100b}, 0x10000}], 0x7, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) syz_open_dev$video(0x0, 0x0, 0x4002) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x40, 0x0) sendfile(r2, r0, 0x0, 0x7ffff000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)=""/110, 0x6e, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 01:47:17 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f58, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:17 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f59, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 1252.454589][ T0] NOHZ: local_softirq_pending 08 01:47:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xb000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:47:25 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f5a, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 01:47:25 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x10c, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:47:25 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0fbc"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:47:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:47:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:47:25 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f5b, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:26 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f5c, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:26 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f5d, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:26 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f5e, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:47:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:47:34 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f5f, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:47:34 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x10d, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:47:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x200) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e28, 0x3, @local, 0x1}}, 0x0, 0x9, 0x3}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2, 0x0, "0000000000000000000000000000000000000000000000ff00"}, 0xd8) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "080002000000000008ff43944eeba71a4976e252922cb18f6e2e48ba000000012e0b385404b03ae96d09800000000000000101013c5811039e15825527ecba66fd767ce7a7f6e1b6b408561839ede6dd248a00000000000000000000000000000006ad8e5ecc326d3a09ffc2c6540200e4f200"}, 0x80) r2 = socket$inet(0x2, 0x4000000000000001, 0xfffffffd) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x3}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0xc0a00, 0x0) fchdir(0xffffffffffffffff) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRES16], 0x1000001bd) 01:47:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:47:34 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f60, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:47:34 executing program 1: r0 = socket(0x11, 0x800000003, 0x81) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@loopback, @private=0xa010102, @multicast2}, 0xc) connect(r0, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x20, @mcast2, 0x9}}, 0x80) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001100)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 01:47:34 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f61, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:34 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f62, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:47:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:47:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f63, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}]}, 0x44}}, 0x0) 01:47:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x8a040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x20c, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8efb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x38000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5afe5b94}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b5089db}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ae}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe10c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20044000}, 0x40) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000053, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) io_destroy(r3) socket(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x4000) socketpair(0x1e, 0x80005, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0xfdfdffff, 0x7fffffff}}) r5 = socket(0x0, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r5}) 01:47:42 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x10e, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:47:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:47:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}]}, 0x44}}, 0x0) 01:47:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f64, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f65, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:42 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20000010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1015, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) ftruncate(r4, 0x200005) sendfile(r3, r4, 0x0, 0x80001d00c0d0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) 01:47:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f66, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f67, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1273.517171][ T29] audit: type=1800 audit(1594000062.616:35): pid=19947 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15778 res=0 01:47:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:47:50 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f68, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:50 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x10f, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:47:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000001040)="d6bfe7b9d7ebb2d9421d6c3d49c502e824816737d0202f1a88362c93182162b7430d6647c0ed3030d4757323f5361de7de10323256fd7cc26972b1485eab618999be89a2da80039524c176ddffd297e3d6141d8037861414d21b3c342bfddc779a74fec797852e9bb4fff1248ae813a50d4dec4739a9e248c1b4cb7d8511de8a477683b512db5054bd43cd7cb60d27a95f727b81d19a1117ce2a173075", 0x9d) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r3, &(0x7f0000001180)=[{{&(0x7f0000000a40)=@can, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000240)=""/43, 0x34}, {&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000fc0)=""/114, 0x72}, {&(0x7f00000001c0)=""/33, 0x21}], 0x5}, 0x401}, {{0x0, 0x0, &(0x7f0000000600)}, 0x3}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000180)=""/43, 0x67}, {&(0x7f00000006c0)=""/7, 0x7}, {&(0x7f0000000700)=""/21, 0x15}, {&(0x7f0000000080)=""/17, 0x11}, {&(0x7f0000000780)=""/253, 0xfd}, {&(0x7f0000000880)=""/224, 0xe0}, {&(0x7f0000000980)=""/166, 0xfffffea4}], 0x7, &(0x7f0000000ac0)=""/216, 0xd8}, 0x3f}, {{&(0x7f0000000bc0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/191, 0xbf}], 0x1, &(0x7f0000000d80)=""/154, 0x9a}, 0x8}], 0x4, 0x0, &(0x7f0000000f40)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0x8a) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000280)={@loopback, 0x64, r5}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', r5}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x40, 0x0) setsockopt$inet6_int(r9, 0x29, 0x50, &(0x7f0000000f80)=0xfffffff7, 0x4) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x76, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="0503d03206023e0001a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0x4c, 0x4000095, 0x0, 0x0) 01:47:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:47:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}]}, 0x44}}, 0x0) 01:47:50 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f69, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:47:50 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f6a, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:50 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f6b, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:50 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f6c, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:50 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f6d, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xf000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:47:58 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f6e, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:58 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x110, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:47:58 executing program 1: r0 = socket$inet6(0xa, 0x5, 0xffff) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket(0x1e, 0x800000003, 0x184) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x42000, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180), 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0x8000000000}, 0x16, 0x1) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'security.', '+,]@-$}.\x00'}, &(0x7f0000000200)='.\x00', 0x2, 0x0) 01:47:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) 01:47:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:47:58 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1000000000, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') preadv(r0, &(0x7f0000000500), 0x5d, 0xa300) socket$pppoe(0x18, 0x1, 0x0) io_submit(0x0, 0x0, &(0x7f0000000280)) 01:47:58 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f6f, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:58 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f70, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:59 executing program 1: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0xa00}], 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x68002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @private}, 0x0, 0x80800) 01:47:59 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f71, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:47:59 executing program 1: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r3 = socket(0x40000000015, 0x5, 0x0) close(r3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r5, 0x0, 0x4}, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x401, 0x1, 0x8203, 0x81, 0x2, 0xffffff01, 0xe2e4, 0xe4, r5}, &(0x7f0000000040)=0x20) 01:48:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:48:07 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f72, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:07 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10b24, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0x11301, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$qrtrtun(&(0x7f00000b8000/0x2000)=nil, 0x2000, 0x0, 0x50, r8, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) 01:48:07 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x111, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:48:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) 01:48:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:48:07 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f73, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:07 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f74, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:07 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f75, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468c009000000000000006817cb327649cf188538ab139f36bfad05574e8156aae6c6a92bb40d99c3c6c40cf6b3674cc8a4dabd9dcf715a0281109f3c39ef3da2bc237f2336c8c1b6dcba736345922936f392be0592cce58050741e7a77714b991972f515d296347864cbb5810521e0e1ac7e11dae5db763d6a6028a9a4fb007a82006135cde7127586273631a0a91fb18b706deeb5e760d48367b04b7657f0d46f0c9357126f1e5b070757d845d5dd5e4503466c883734687358d14b4316acdc90"], 0x48}}, 0x1) r4 = dup(r1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x0, 0x0) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x4}}]}, 0x30}}, 0x0) 01:48:07 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f76, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:07 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f77, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1302.373295][ T0] NOHZ: local_softirq_pending 08 01:48:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x11000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:48:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x20000, 0xf0, 0xa}, 0x18) setsockopt$inet6_tcp_int(r4, 0x6, 0xc, &(0x7f00000002c0)=0x9, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x10005, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="e6c7e5d85f2d7c87f501", @ANYRESOCT=r7], 0xa) close(r5) socket$netlink(0x10, 0x3, 0x4) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f00000003c0)={0xb4, &(0x7f0000000300)=""/180}) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000000)="f98ac6", 0x3}], 0x1) add_key$user(0x0, 0x0, &(0x7f0000000240)="fbed5272414258d57f5e0966060952fd9f08a70235eac9a93a573ced1fc41550d44df1b75fad2ebc0f65846223d36ee544f9a43a891085c82886b69e945c57d2f7dfac5b3736889792", 0x49, 0x0) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[], 0xfef0) splice(r2, 0x0, r5, 0x0, 0x80000001, 0x0) 01:48:15 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f78, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:15 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x112, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:48:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) 01:48:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:48:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) r1 = add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x1, 0x0, "ee34773925c856fa1b769c53f630ddb073f986b754e5b6cebeef367424e74b5b6dbc514d3f87eb7f95fa86d0809648ef149baf283e558573dd9c8b28bc6de3bb15130012305e90108b051b928d8f"}, 0x56, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140)={r1, 0x1000, 0xae}, &(0x7f0000000180)={'enc=', 'oaep', ' hash=', {'rmd160\x00'}}, &(0x7f00000013c0)="72960e533d2dd078ac6091977f1218634c87626f0d850fcde167a565856b61f28c3450bfea537eeab114335a7a8895ebd28327618e8aa38d7f101f5b13730ccfa109b44832d9f3a43315ea3f6284663a547a1225340de9e3561306c07d273e718010fa3669a706b2bb5fc815615f472d004839600e5543e96db1752c5fa7c3953d799c68c22cb11ef94795b4b6557db0b2ed222b5f7e3309d8c4e7fa42960468066b62ed2c73b687704f2e459551441118499d66670b3b6457b209817cb36d01dcf6cf30ad3a222b69325c5daf0f8bb26972a4e30d395991e393c0bb6612aaef87990fca181398b9a4c7a11f9311d2121174441fd0168467245105a82900637511d05dd73659fd641f5e01a13987b49234bfb9d58e1b3957405a502dda72070fb4617b323905034617e5847daa0634671b5f6ee8f8301f962538ebcbef0fb1fd487a92e92272b99e8598e5686ea0537c2867d148b6f35a0dec5a376a2fd0fc3838fd56d159a7688b87f8f6f6f7f76290986db259353206f678d251c80438bed81cea8b1d2d75aa01a6aa2739226e2d249aaa2aa78a4982d837d0c41a2a951364d0e8a288baf1fbaf0949ea8cdab5bc166f5fcc95ebcd9a38db62d56677e132a072494ee0b9c745a4fab2860a0da64c0dfa45abf517e86043cb8800e895827168c2b4cc809255281717b23c8724a64e138245b035a2ba34644b3c543d57d86cfbd228fc920e058ebe8deca800c4a09db66c41ae0d4b30dfb5b90415cf6028be29b71b0a14424a6d8796c845cfc3d4f9d78f4ba96a46d4b42b856c6bf75a46915c2489432afe0c3031c783c8fc56f52a448ad7bb1e32bdde1e6efd0faaf58b34c61337bb0e75876c066d7df2b77d483448c09b6c6457687449f32d5e7b6159e9eec4e82c9cacb31db70bab2dcc509a24905c444c1aa7d1032911c6053aac2f3ece2d4ef25c807deeb5ed210f279f91d068dfe30dd795a4d452c3100968b419273d266995353cf1805698a47737c6be0e32e9aba95c36fcb0b35670dfe6b1d13b8a8796ae6d22c906598b603cb73e12322455e5df2bfec55e00dbffac7f1e290f557ee432dda85841a5b37982e98e9be984446f8f639e4969e670976e24b331a179ac3b725b476d5b49e71562c4deebdb289c5bff184e9cdc501a5784abe26dc381719f16c17dde8d59f2268cfe092d59a3d068a9134083735583cc2cf2fdb96b3c15e7aef1782f22fd7d709e4931aa1e6886cc0c492aafdeac60bdaacc2a8457e9a93bcda6695aaf8b2e78aa088295c0044d32d124cdcb4a42eff6771ddb02976c0aee2e6f8d617088c1f62e74db00ab6735ff96a850da8bda10258c3ff89bca096535b4677ffd2f5c4aba06015f16a9bfaad8c3cb6842e8f828ea6c7c6f84972b1d75c8d7d2e0fd575d7ea90155dff5d634b13d39b6a4a13e2a4f7b674c5177020cf76d9a1cfa75684ac68b8735db407fb44a791eaa43911d0789e0f9cbc13c5bcd9350492be3ee6498f7a17cca003f9bbf57308a43a8b027d2e8fef74750539edc68dc926d76b3f30257dfa852308145c722d4b87bb143d8964763e3d676282bcbccfbb719cf4101422bccf0929a70d77ec4f5f92157e4dc029240fe71f0d3d58491e04f9498367575a68d6da0235ce73452a5147a1d8534f8996f054f14f1e48e905dcf31fdfd12c6b8f3cd1206472143c50d602c6b80df85d1a124ff10c6be9ef00d0c2fbde1f85702dc09872ce48aa5d2990ccff3472389a936685a48046da8d7756f7f85f9f3a356b6bd179414f36f6a8f70a9d6090f1d63b9553093ad2324260ebeb7a45a8f5f39771af91db956e51acf023ef14c3978542f40a15d1966e84a7fb60f2b9929c17fc0a6b8daf3250777ef8645dc9644d477de534d058bc7326dc552534a023c880f9f3c0a7974a884bb94da58cc778ff2afd7fdd26286ff2afaff7d11bd56f7521831f17fbffa6d9b5b30990182b5b298b14f802234141c13f11f3c667ca1ccf264571fea4d186f3184a92eeb70e851ccf9516fdb64a5cd864a1423f20877785a84977933a8b7c24d37a49e53a45380def2abf0877d435c09f2b685904f69fd4f241ad3ce1e784c8aaa3a38bb0e6942b502cf068ddf158ec5727803667e7f759b34b1b8fd1b4d52a07afc423bcac8e9e91b7392bfae001fe29dd91cd2195ecb054cd79456dbfbe222bbcf5f99427e6ab5eb796fb6c3261f8c9a814e006e4d96f37e568e574b1dc43fab15e7f8f723c2142dfc302a4f06119ad04fc2664333f4c27e78333243dbbf7970a67bf7f5882c8c0377ec8e817c81a0f256b0d4cd34c2557e370cd912e13b4aa318aac0a2da5e803211fcb2bb1bc800eba45c7defe64da93a2d198162d0d374437b63e517a473b4f05c9e6f3decf4d80d1616a59e64eba8aba2a4a05daa6def5b0390d536e10dbfbd676def5bd3838f49eebd6d94a695ababe33d8bf755c120feecd8dd752b6b908f238cc3a1f3fddd6bf9cfd0f283dfe84370702aeac649e16b87f320ecb2780f0b3a00ccef00dbe3fe4a2d3f38dc8fa2dde8859907d044e4effd068852f8e49ca770d7a41c9a99d330c8ff1c7a3ad66d91f5019b9b4ecbf126a751424791d63f2ae6b0d75cb9c59bb41b946df2ebc718caeb13c43f43767b2941f998705251587bd4a8c7e06600e6872f5d205184e866031e700948d8629c6ff594a22007ac1685bed869f279ca85ca5928d55acc9cde40d8c9d7a6e02240f072ea381333bbc4888e7b1f0c2a02403996cfade7542c83532d6618e4e670b06ce76ee21d2d569b7fa97406265cd467efd8144d2c2d3425f0afe72ceac96fdec0e2ef4022463f46fb2c06729f1468b2403b52557e411ed0e7af0ddadc112481879ae53fb9434fd839b24cd4d0b84c94f58e7afc97650dfca6856da984b24d12889c9dd293b9ba824dcd7003dd63d9379b748e55f14f4808b77a3ef51d6924440d68840d86bcf0d93c9883e0b129133e6a290ecfc1bd2d0bf1e2e4cc24ae5a4097f6565f36dcd4e28c5dabc1c55e251354461313f73b589d30102a84c3c388bcb6e6c89f9ebc39d3df72d434306864fd1dbef503efb7fb2b6c13152486b6b8759ab2521ff81ce0cada710319ddb87af38fb3d92e6b08f6393dbcc1befbcca373e7b58dc43613e02ffa3fbce894668762061dbc3c16df83d5d28c8287e761a778809999b7278aad6637ed62a248b3c95b831c5fde2670f07a7415ad69427289ac2ea4206af9f2f50e2d851e4bc6d1ea32979e3f84a3a5ebfb7add52a97f3da8a7978663b0dea425cb641474c97d07419600460a3278296566668b5967599e84d723735203815de0d82c433ee0e91a478f3edd39769165a43349acc36da6fa0a7fc55e4afa823acc3945f2afd4ccff92588ac5368f3bc57fb2cb12f7b291094214115bce650cdbd8ff0d07b5461e5d96b884b60343da7529cbc9e00e7082fc598ba46e003d95c6f725111dea72dd4c526c912f1f450ac035abb5ed35425c5334a434894c4a81bc60720de684a124fcb32aa245d5df491e79e34d6a4905c0f702f7579bc0dc43c3f50894abf57500b1e671d1a86ff383c368ee3f01c509826bf3bacd6e547312e2347808ef35ba9345b3c343fd5108be2576493c949d03313682571a06805cb2fa406ba4eee4790654a59780abd38fdd12ca157a4b415f92ece60179f0862c79b87060936cfdf87cc151c51276c9d1449f2ec787391d1af20e9bce2a231cf2b9e03ddee695819325f38f000e3f5ae160903673beb29b338619111bf42897c949f647cc803b15d4166b40de899fb0bfb554e48f7a4cfdd2b043a1a42108c489ffca4e66644cc0bf99963bc4b4b23ec2fac2d1e807f6e90e20378cea62e88e5622dfa2c10960affaa0816789ea489c4386d95a9082376a4764adb969116be5749b83f15956229f7a6d24f41fb54d9eaf943eee621ca9cf7c2cb827812324c86810648d425f421aa3c2fd5e836da79dc07b091b7135c9ae318636b89b78d1c2871b9e557089f97c3269b8998974d642973b35cf13f72775cbdaadcc25311a63fb1a8b780103dded89125b476a1dd9cfad9d6932e47540d6406b066e806933e0c2c33aae5b4da584e4ecdc40336c69a8c097a4dcb7bc393f01d1ce9b268671f03986855b9b87337b183bc7b01261ff5a10f3ae5cad58d9a36f739a436452dba3321d952c10d3b82ce7edf7d3e0815a7f55eea4fe981327ba67baa4150122ffadc1fcc7fc16dab7cab50eb38f17af9977c91ca1926dd300124104e39679e4b9ada81f5ed96897377e89a4fa663e2014aebfe9c54ebb3965932176c7b0998eb58a33768b64ff7f071bacc87e24b9b14369d228450f4330958477f7f6a1930cb9f11e7ddb7b2857b96bd22d39615be04db00ba59582a3dbd3fe3c296baff02434b3865b313e64beec9c757dc11f9ecea00de6bf8379b703c9e670f4051614d9724ce28fd1e23bd4abfa6a851ec9b17ebb3b9fe83a84ebefeba9b61a6e335a39edc65abbd81080a6a0b2455577651bd25a01cd4b519bd5e7c9930d0421c92a03e82bd3c8630eef1a56d21f30c56056da1bace7d24b5db44af1d31ef589c6fd049e4d38352c82e42e95bbdf5a49a523417de10d51333abac876eb51cf20ce843f4763c0c0646e12a8e9d429ac45c12019957863fc03ee53b4950a2fcd469f8846e49ead8a382bb207fa242cb7b18b644ccd7785f647746cf669163ce4556987a13f9a8bb2ca0618a3e09024f95f7f8cdba8fd77f8d76bfd60c200cf80e6a373c6c5c14b8f97eed8c67a4d6b601d8b643ec3e447c549935b0e8d69c92ea54342c296091e4b4cc5d9f91d6ca86d538983bc7632c8ebab43170482dc81a13eb941824143573e3daa0ee46c1e126eb4f7a8317c85028f8beb07a81b6c8df3219d973635551b59c4539eb3d552a5694b8ce603d296c83dfb478430f1963d259f45c989badd702281a7ab5aced5bffb35bd3367ac5fe5dd11e33e1d6d968caef6702c9531b66792accec2ee448e261880332f839a58566f1d12c6eb4b5848c4efa913fbbcc796f92914c20ce07cf827a02620e3c6398c5288d03edac162dfd1cdb2ae64f98f744cf25e4e23c01e24ef736d18211809b62d4438da19b62195078fd8634689511cd6d23f0335df4ca5cae624c3887485ab11dd53283e599cc43211b71a1ac8f75ad329491362293a3148535ef4862c6931635a90f66f7e95639f0fe6953dad95afa366d39bd16f5509ba039a9a8f324ce9edc0e085e1e3a8477e1ea51bdde403e033ceefa9f34491ea4e12bf6b38441c149ed37c56689a4547ab7f60655850b5259a20361c302b5b1c5cee50c484c55ac6aaa66c97970384f02d2e90f7212d061abded9289dfd0b3ec041312428696ff02b92e82b58b81519248e1aa3618af6e20b97e0c2c1cbd6b890d2445832fa8a49ae157dd5eb4dfff7182ed9d2bbf30fe6fb8d46dfed495a1bd2876f1f42b4507e1a787ad27c40e11ee45bef8ad6084d9c91a9b57e0c3eedfcedac9aff2f8beed4e20c426f399400e19eb696e6ba7262210e33c905a2362865375be7503e7924eeda247953f7c78661e87b1dbff3320b81cfc6a7333d6ffa28ec21e9cc23e3a248e870f64345dd13fd5f05d766060507edc81dc99a7002e4e09650983e3dfc12cc829c72afd375d0ec08f915482024162676164ac7673d443b39a34031cdb8b18a0d0de383b9e0cacfc5b1530d205c71d980355b45103b515f3a424d6c173a62f96a6a8f43aa54b5da60da1ab4877dbb258c70ccd358add26bbded4c8", &(0x7f0000000200)="78ab1c01023d1eb3fb912853edcf3e0d19c61b8802372d899efaa73f2104d71e15dc819c138b6b6a224fb398a28625e2ad9a8d75499b6b53352a6e78ed7c47b8db48e62c61432c1c36a4be84dcabafc055e778348732d4153935b9128a5132e1b37499b47b6b1c86425721286cdafd77069adf0195b9009b9d5692f4cafc183dd6e56134458deaf894aa1d9b82e24c8f56fb60c7129a13a97709bc1521fed5e6fc8fbad405d7009cf3811a1c239d") 01:48:15 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f79, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:15 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f7a, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) 01:48:15 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f7b, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:15 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') dup2(r0, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet6_dccp_int(r2, 0x21, 0x0, &(0x7f0000000040), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x73d7, &(0x7f00000001c0)={r3, r4+10000000}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0), &(0x7f0000000300)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8) [ 1311.706283][ T1151] oom_reaper: reaped process 20086 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 1311.758968][ T6820] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1311.776044][ T6820] CPU: 1 PID: 6820 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1311.784282][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1311.794327][ T6820] Call Trace: [ 1311.797639][ T6820] dump_stack+0x18f/0x20d [ 1311.801979][ T6820] dump_header+0x10b/0x7e4 [ 1311.806399][ T6820] oom_kill_process.cold+0x10/0x15 [ 1311.811514][ T6820] out_of_memory+0x326/0x1340 [ 1311.816198][ T6820] ? oom_killer_disable+0x270/0x270 [ 1311.821401][ T6820] ? mutex_trylock+0x246/0x2c0 [ 1311.826163][ T6820] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1311.832839][ T6820] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1311.839445][ T6820] ? warn_alloc+0x120/0x120 [ 1311.843949][ T6820] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1311.849503][ T6820] ? lock_is_held_type+0xb0/0xe0 [ 1311.854447][ T6820] __alloc_pages_nodemask+0x68f/0x930 [ 1311.859821][ T6820] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1311.866584][ T6820] ? page_cache_readahead_unbounded+0x572/0x850 [ 1311.872826][ T6820] ? __lock_page_or_retry+0x650/0x650 [ 1311.878197][ T6820] alloc_pages_current+0x187/0x280 [ 1311.883310][ T6820] __page_cache_alloc+0x31e/0x450 [ 1311.888336][ T6820] pagecache_get_page+0x27d/0xe10 [ 1311.893375][ T6820] ? __do_page_cache_readahead+0xc2/0xf0 [ 1311.899007][ T6820] filemap_fault+0x1a99/0x2ad0 [ 1311.903798][ T6820] ext4_filemap_fault+0x87/0xb6 [ 1311.908651][ T6820] __do_fault+0x10d/0x4d0 [ 1311.913003][ T6820] handle_mm_fault+0x37a3/0x43f0 [ 1311.917944][ T6820] ? apply_to_existing_page_range+0x40/0x40 [ 1311.923852][ T6820] do_user_addr_fault+0x5a2/0xd00 [ 1311.928878][ T6820] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1311.934424][ T6820] exc_page_fault+0xab/0x170 [ 1311.939032][ T6820] ? asm_exc_page_fault+0x8/0x30 [ 1311.943965][ T6820] asm_exc_page_fault+0x1e/0x30 [ 1311.948807][ T6820] RIP: 0033:0x460800 [ 1311.952687][ T6820] Code: Bad RIP value. [ 1311.956747][ T6820] RSP: 002b:000000c000051f48 EFLAGS: 00010246 [ 1311.962805][ T6820] RAX: 0000000000000000 RBX: 0000000000004e20 RCX: 0000000000000051 [ 1311.970774][ T6820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c000051f30 [ 1311.972270][T20086] syz-executor.5: vmalloc: allocation failure, allocated 4009902080 of 4294975488 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1311.978741][ T6820] RBP: 000000c000051f48 R08: 000000c000066480 R09: 00007ffcbafd8090 [ 1312.003182][ T6820] R10: 000000000003ef4c R11: 0000000000000202 R12: 00000000004338c0 [ 1312.011145][ T6820] R13: 0000000000000000 R14: 0000000000adca10 R15: 0000000000000000 [ 1312.019132][T20086] CPU: 0 PID: 20086 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1312.027802][T20086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1312.036090][ T6820] Mem-Info: [ 1312.037856][T20086] Call Trace: [ 1312.040981][ T6820] active_anon:231442 inactive_anon:4157 isolated_anon:0 [ 1312.040981][ T6820] active_file:11 inactive_file:0 isolated_file:0 [ 1312.040981][ T6820] unevictable:1 dirty:8 writeback:6 [ 1312.040981][ T6820] slab_reclaimable:15692 slab_unreclaimable:115010 [ 1312.040981][ T6820] mapped:53556 shmem:4417 pagetables:8866 bounce:0 [ 1312.040981][ T6820] free:15668 free_pcp:191 free_cma:0 [ 1312.044230][T20086] dump_stack+0x18f/0x20d [ 1312.044251][T20086] warn_alloc.cold+0x87/0x17a [ 1312.044267][T20086] ? mark_held_locks+0x9f/0xe0 [ 1312.044282][T20086] ? zone_watermark_ok_safe+0x260/0x260 [ 1312.044307][T20086] ? asm_sysvec_call_function_single+0x12/0x20 [ 1312.044338][T20086] __vmalloc_area_node+0x49e/0x7a0 [ 1312.087339][ T6820] Node 0 active_anon:925732kB inactive_anon:16628kB active_file:36kB inactive_file:0kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214224kB dirty:32kB writeback:24kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 677888kB writeback_tmp:0kB all_unreclaimable? yes [ 1312.089684][T20086] ? ip_set_alloc+0x48/0x60 [ 1312.095474][ T6820] Node 1 active_anon:36kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1312.099934][T20086] ? ip_set_alloc+0x48/0x60 [ 1312.110839][ T6820] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.111152][T20086] vzalloc+0x116/0x1a0 [ 1312.154439][ T6820] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1312.168458][T20086] ip_set_alloc+0x48/0x60 [ 1312.168481][T20086] hash_netnet_create+0x401/0xd70 [ 1312.168499][T20086] ? hash_netnet6_head+0xcd0/0xcd0 [ 1312.168514][T20086] ip_set_create+0x6a2/0x13c0 [ 1312.168534][T20086] ? ip_set_sockfn_get+0xe00/0xe00 [ 1312.168575][T20086] ? lock_is_held_type+0xb0/0xe0 [ 1312.168588][T20086] ? ip_set_sockfn_get+0xe00/0xe00 [ 1312.168609][T20086] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1312.178825][ T6820] Node 0 DMA32 free:25696kB min:52300kB low:61276kB high:70252kB reserved_highatomic:0KB active_anon:923684kB inactive_anon:16628kB active_file:36kB inactive_file:0kB unevictable:4kB writepending:56kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18960kB pagetables:35372kB bounce:0kB free_pcp:516kB local_pcp:156kB free_cma:0kB [ 1312.202289][T20086] ? nfnetlink_rcv+0x420/0x420 [ 1312.202306][T20086] ? is_bpf_text_address+0xcb/0x160 [ 1312.202330][T20086] ? __lock_acquire+0xc1e/0x56e0 [ 1312.202352][T20086] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1312.202367][T20086] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1312.202384][T20086] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1312.202403][T20086] netlink_rcv_skb+0x15a/0x430 [ 1312.202417][T20086] ? nfnetlink_rcv+0x420/0x420 [ 1312.202431][T20086] ? netlink_ack+0xa10/0xa10 [ 1312.202455][T20086] ? ns_capable+0xde/0x100 [ 1312.202477][T20086] nfnetlink_rcv+0x1ac/0x420 [ 1312.202498][T20086] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1312.211873][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 1312.212260][T20086] netlink_unicast+0x533/0x7d0 [ 1312.216557][ T6820] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.221564][T20086] ? netlink_attachskb+0x810/0x810 [ 1312.232086][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 1312.236392][T20086] ? _copy_from_iter_full+0x247/0x890 [ 1312.241293][ T6820] Node 1 Normal free:26816kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1312.246385][T20086] ? __phys_addr+0x9a/0x110 [ 1312.246399][T20086] ? __phys_addr_symbol+0x2c/0x70 [ 1312.246413][T20086] ? __check_object_size+0x171/0x3e4 [ 1312.246431][T20086] netlink_sendmsg+0x856/0xd90 [ 1312.246450][T20086] ? netlink_unicast+0x7d0/0x7d0 [ 1312.246478][T20086] ? netlink_unicast+0x7d0/0x7d0 [ 1312.246495][T20086] sock_sendmsg+0xcf/0x120 [ 1312.246512][T20086] ____sys_sendmsg+0x6e8/0x810 [ 1312.246529][T20086] ? kernel_sendmsg+0x50/0x50 [ 1312.246540][T20086] ? do_recvmmsg+0x6d0/0x6d0 [ 1312.246560][T20086] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1312.246579][T20086] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1312.258224][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 1312.283420][T20086] ? __lock_acquire+0xc1e/0x56e0 [ 1312.283440][T20086] ___sys_sendmsg+0xf3/0x170 [ 1312.283455][T20086] ? sendmsg_copy_msghdr+0x160/0x160 [ 1312.283474][T20086] ? __fget_files+0x272/0x400 [ 1312.283491][T20086] ? lock_downgrade+0x820/0x820 [ 1312.283503][T20086] ? find_held_lock+0x2d/0x110 [ 1312.283517][T20086] ? __might_fault+0x11f/0x1d0 [ 1312.283535][T20086] ? __fget_files+0x294/0x400 [ 1312.283555][T20086] ? __fget_light+0xea/0x280 [ 1312.283573][T20086] __sys_sendmsg+0xe5/0x1b0 [ 1312.283586][T20086] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1312.283601][T20086] ? __x64_sys_futex+0x382/0x4e0 [ 1312.283627][T20086] ? do_syscall_64+0x1c/0xe0 [ 1312.283650][T20086] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1312.295010][ T6820] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 2*4096kB (M) = 10160kB [ 1312.298514][T20086] do_syscall_64+0x60/0xe0 [ 1312.306462][ T6820] Node 0 DMA32: 3850*4kB (UME) 1171*8kB (ME) 32*16kB (UM) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 25696kB [ 1312.310449][T20086] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1312.320130][ T6820] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1312.321054][T20086] RIP: 0033:0x45cb29 [ 1312.327775][ T6820] Node 1 Normal: 138*4kB (UME) 63*8kB (ME) 44*16kB (ME) 18*32kB (ME) 1*64kB (M) 3*128kB (UME) 4*256kB (UME) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26848kB [ 1312.330355][T20086] Code: Bad RIP value. [ 1312.338587][ T6820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1312.339314][T20086] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1312.346703][ T6820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1312.349398][T20086] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1312.349412][T20086] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1312.358082][ T6820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1312.382166][T20086] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1312.382175][T20086] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1312.382183][T20086] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1312.389965][T20086] Mem-Info: [ 1312.439185][ T6820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1312.443061][T20086] active_anon:231442 inactive_anon:4157 isolated_anon:0 [ 1312.443061][T20086] active_file:11 inactive_file:0 isolated_file:0 [ 1312.443061][T20086] unevictable:1 dirty:8 writeback:6 [ 1312.443061][T20086] slab_reclaimable:15692 slab_unreclaimable:115010 [ 1312.443061][T20086] mapped:53556 shmem:4417 pagetables:8866 bounce:0 [ 1312.443061][T20086] free:15668 free_pcp:191 free_cma:0 [ 1312.473097][ T6820] 4424 total pagecache pages [ 1312.476464][T20086] Node 0 active_anon:925716kB inactive_anon:16628kB active_file:12kB inactive_file:12kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214208kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 675840kB writeback_tmp:0kB all_unreclaimable? yes [ 1312.488162][ T6820] 0 pages in swap cache [ 1312.488481][T20086] Node 1 active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1312.501198][ T6820] Swap cache stats: add 0, delete 0, find 0/0 [ 1312.518685][T20086] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.531281][ T6820] Free swap = 0kB [ 1312.547562][T20086] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1312.565521][ T6820] Total swap = 0kB [ 1312.595119][T20086] Node 0 DMA32 free:25696kB min:52300kB low:61276kB high:70252kB reserved_highatomic:0KB active_anon:923668kB inactive_anon:16628kB active_file:12kB inactive_file:12kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18960kB pagetables:35368kB bounce:0kB free_pcp:520kB local_pcp:372kB free_cma:0kB [ 1312.618854][ T6820] 1965979 pages RAM [ 1312.654504][T20086] lowmem_reserve[]: 0 0 0 0 0 [ 1312.662722][ T6820] 0 pages HighMem/MovableOnly [ 1312.681930][T20086] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.702058][ T6820] 349903 pages reserved [ 1312.714740][T20086] lowmem_reserve[]: 0 0 0 0 0 [ 1312.720548][ T6820] 0 pages cma reserved [ 1312.743325][T20086] Node 1 Normal free:26848kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1312.782238][ T6820] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=15509,uid=0 [ 1312.797621][T20086] lowmem_reserve[]: 0 0 0 0 0 [ 1312.814129][ T6820] Out of memory: Killed process 15509 (syz-executor.1) total-vm:75112kB, anon-rss:4268kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1312.832650][T20086] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 2*4096kB (M) = 10160kB [ 1312.898127][ T6833] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1312.910818][T20086] Node 0 DMA32: 3850*4kB (UME) 1172*8kB (UME) 32*16kB (UM) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 29160kB [ 1312.930360][ T6833] CPU: 1 PID: 6833 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1312.960245][T20086] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1312.990810][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1312.990817][ T6833] Call Trace: [ 1312.990842][ T6833] dump_stack+0x18f/0x20d [ 1312.990861][ T6833] dump_header+0x10b/0x7e4 [ 1312.990880][ T6833] oom_kill_process.cold+0x10/0x15 [ 1313.006787][T20086] Node 1 Normal: 138*4kB (UME) 63*8kB (ME) 44*16kB (ME) 18*32kB (ME) 1*64kB (M) 3*128kB (UME) 4*256kB (UME) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26848kB [ 1313.009750][ T6833] out_of_memory+0x326/0x1340 [ 1313.025986][T20086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.039824][ T6833] ? oom_killer_disable+0x270/0x270 [ 1313.039844][ T6833] ? mutex_trylock+0x246/0x2c0 [ 1313.039867][ T6833] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1313.050536][T20086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.065941][ T6833] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1313.065975][ T6833] ? warn_alloc+0x120/0x120 [ 1313.074210][T20086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.085531][ T6833] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1313.085555][ T6833] ? lock_is_held_type+0xb0/0xe0 [ 1313.085576][ T6833] __alloc_pages_nodemask+0x68f/0x930 [ 1313.095632][T20086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.098885][ T6833] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1313.103202][T20086] 4424 total pagecache pages [ 1313.107581][ T6833] ? page_cache_readahead_unbounded+0x572/0x850 [ 1313.112684][T20086] 0 pages in swap cache [ 1313.129570][ T6833] ? __lock_page_or_retry+0x650/0x650 [ 1313.129587][ T6833] alloc_pages_current+0x187/0x280 [ 1313.129615][ T6833] __page_cache_alloc+0x31e/0x450 [ 1313.134292][T20086] Swap cache stats: add 0, delete 0, find 0/0 [ 1313.143794][ T6833] pagecache_get_page+0x27d/0xe10 [ 1313.143812][ T6833] ? __do_page_cache_readahead+0xc2/0xf0 [ 1313.143831][ T6833] filemap_fault+0x1a99/0x2ad0 [ 1313.149010][T20086] Free swap = 0kB [ 1313.153776][ T6833] ext4_filemap_fault+0x87/0xb6 [ 1313.153792][ T6833] __do_fault+0x10d/0x4d0 [ 1313.153809][ T6833] handle_mm_fault+0x37a3/0x43f0 [ 1313.160457][T20086] Total swap = 0kB [ 1313.169727][ T6833] ? apply_to_existing_page_range+0x40/0x40 [ 1313.169760][ T6833] do_user_addr_fault+0x5a2/0xd00 [ 1313.176339][T20086] 1965979 pages RAM [ 1313.180812][ T6833] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1313.190340][T20086] 0 pages HighMem/MovableOnly [ 1313.195852][ T6833] exc_page_fault+0xab/0x170 [ 1313.195869][ T6833] ? asm_exc_page_fault+0x8/0x30 [ 1313.195886][ T6833] asm_exc_page_fault+0x1e/0x30 [ 1313.200797][T20086] 349903 pages reserved [ 1313.206145][ T6833] RIP: 0033:0x44dab9 [ 1313.206151][ T6833] Code: Bad RIP value. [ 1313.206158][ T6833] RSP: 002b:000000c00003bf60 EFLAGS: 00010202 [ 1313.206169][ T6833] RAX: 0000000000000000 RBX: 0000000000880720 RCX: 0000000000000000 [ 1313.206183][ T6833] RDX: 0000000000a68fb8 RSI: 0000000000000000 RDI: 000000c00006a600 [ 1313.215463][T20086] 0 pages cma reserved [ 1313.222175][ T6833] RBP: 000000c00003bf58 R08: 0000000000000000 R09: 0000000000000001 [ 1313.222183][ T6833] R10: 000000000003ef1a R11: 0000000000000206 R12: 0000013c2b0c8241 [ 1313.222191][ T6833] R13: 0000000000000001 R14: 0000013c2b0c8241 R15: 0000000000000000 [ 1313.240723][ T6833] Mem-Info: [ 1313.416019][ T6833] active_anon:230385 inactive_anon:4157 isolated_anon:0 [ 1313.416019][ T6833] active_file:3 inactive_file:4 isolated_file:0 [ 1313.416019][ T6833] unevictable:1 dirty:0 writeback:0 [ 1313.416019][ T6833] slab_reclaimable:15690 slab_unreclaimable:115500 [ 1313.416019][ T6833] mapped:53552 shmem:4417 pagetables:8865 bounce:0 [ 1313.416019][ T6833] free:16232 free_pcp:229 free_cma:0 [ 1313.457742][ T6833] Node 0 active_anon:921504kB inactive_anon:16628kB active_file:12kB inactive_file:12kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214208kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 675840kB writeback_tmp:0kB all_unreclaimable? yes [ 1313.502406][ T6833] Node 1 active_anon:36kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1313.544475][ T6833] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1313.587060][ T6833] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1313.593017][ T6833] Node 0 DMA32 free:27328kB min:52300kB low:61276kB high:70252kB reserved_highatomic:0KB active_anon:919432kB inactive_anon:16628kB active_file:12kB inactive_file:12kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18960kB pagetables:35360kB bounce:0kB free_pcp:712kB local_pcp:340kB free_cma:0kB [ 1313.639456][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1313.646149][ T6833] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1313.681883][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1313.686583][ T6833] Node 1 Normal free:26848kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1313.722964][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1313.727685][ T6833] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 2*4096kB (M) = 10160kB [ 1313.751804][ T6833] Node 0 DMA32: 3850*4kB (UME) 1171*8kB (ME) 32*16kB (UM) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26080kB [ 1313.773652][ T6833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1313.789250][ T6833] Node 1 Normal: 138*4kB (UME) 63*8kB (ME) 44*16kB (ME) 18*32kB (ME) 1*64kB (M) 3*128kB (UME) 4*256kB (UME) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26848kB [ 1313.812558][ T6833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.827307][ T6833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.837718][ T6833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.872578][ T6833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.890114][ T6833] 4424 total pagecache pages [ 1313.895585][ T6833] 0 pages in swap cache [ 1313.899742][ T6833] Swap cache stats: add 0, delete 0, find 0/0 [ 1313.927657][ T6833] Free swap = 0kB [ 1313.931416][ T6833] Total swap = 0kB [ 1313.936234][ T6833] 1965979 pages RAM [ 1313.940038][ T6833] 0 pages HighMem/MovableOnly [ 1313.961012][ T6833] 349903 pages reserved [ 1313.968414][ T6833] 0 pages cma reserved [ 1313.991910][ T6833] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=25715,uid=0 [ 1314.024250][ T6833] Out of memory: Killed process 25715 (syz-executor.3) total-vm:74848kB, anon-rss:4260kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1314.070031][ T1151] oom_reaper: reaped process 25715 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1314.130287][ T6833] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1314.151890][ T6833] CPU: 1 PID: 6833 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1314.160140][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1314.170187][ T6833] Call Trace: [ 1314.173483][ T6833] dump_stack+0x18f/0x20d [ 1314.177818][ T6833] dump_header+0x10b/0x7e4 [ 1314.182234][ T6833] oom_kill_process.cold+0x10/0x15 [ 1314.187344][ T6833] out_of_memory+0x326/0x1340 [ 1314.192015][ T6833] ? oom_killer_disable+0x270/0x270 [ 1314.197189][ T6833] ? mutex_trylock+0x246/0x2c0 [ 1314.201961][ T6833] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1314.208612][ T6833] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1314.215185][ T6833] ? warn_alloc+0x120/0x120 [ 1314.219673][ T6833] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1314.225200][ T6833] ? lock_is_held_type+0xb0/0xe0 [ 1314.230116][ T6833] __alloc_pages_nodemask+0x68f/0x930 [ 1314.235480][ T6833] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1314.242221][ T6833] ? page_cache_readahead_unbounded+0x572/0x850 [ 1314.248445][ T6833] ? __lock_page_or_retry+0x650/0x650 [ 1314.253808][ T6833] alloc_pages_current+0x187/0x280 [ 1314.258907][ T6833] __page_cache_alloc+0x31e/0x450 [ 1314.263911][ T6833] pagecache_get_page+0x27d/0xe10 [ 1314.268922][ T6833] ? __do_page_cache_readahead+0xc2/0xf0 [ 1314.274538][ T6833] filemap_fault+0x1a99/0x2ad0 [ 1314.279295][ T6833] ext4_filemap_fault+0x87/0xb6 [ 1314.284135][ T6833] __do_fault+0x10d/0x4d0 [ 1314.288441][ T6833] handle_mm_fault+0x37a3/0x43f0 [ 1314.293361][ T6833] ? apply_to_existing_page_range+0x40/0x40 [ 1314.299234][ T6833] do_user_addr_fault+0x5a2/0xd00 [ 1314.304236][ T6833] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1314.309756][ T6833] exc_page_fault+0xab/0x170 [ 1314.314322][ T6833] ? asm_exc_page_fault+0x8/0x30 [ 1314.319243][ T6833] asm_exc_page_fault+0x1e/0x30 [ 1314.324066][ T6833] RIP: 0033:0x44dab9 [ 1314.327927][ T6833] Code: Bad RIP value. [ 1314.331982][ T6833] RSP: 002b:000000c00003bf60 EFLAGS: 00010202 [ 1314.338030][ T6833] RAX: 0000000000000000 RBX: 0000000000880720 RCX: 0000000000000000 [ 1314.345989][ T6833] RDX: 0000000000a68fb8 RSI: 0000000000000000 RDI: 000000c00006a600 [ 1314.353936][ T6833] RBP: 000000c00003bf58 R08: 0000000000000000 R09: 0000000000000001 [ 1314.361881][ T6833] R10: 000000000003ef1a R11: 0000000000000206 R12: 0000013c2b0c8241 [ 1314.369864][ T6833] R13: 0000000000000001 R14: 0000013c2b0c8241 R15: 0000000000000000 [ 1314.415008][ T6833] Mem-Info: [ 1314.418211][ T6833] active_anon:229331 inactive_anon:4157 isolated_anon:0 [ 1314.418211][ T6833] active_file:3 inactive_file:4 isolated_file:0 [ 1314.418211][ T6833] unevictable:1 dirty:0 writeback:0 [ 1314.418211][ T6833] slab_reclaimable:15690 slab_unreclaimable:116261 [ 1314.418211][ T6833] mapped:53552 shmem:4417 pagetables:8826 bounce:0 [ 1314.418211][ T6833] free:16484 free_pcp:358 free_cma:0 [ 1314.480915][ T6833] Node 0 active_anon:917280kB inactive_anon:16628kB active_file:0kB inactive_file:24kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214208kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB all_unreclaimable? yes [ 1314.523890][ T6833] Node 1 active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1314.599910][ T6833] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1314.651036][ T6833] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1314.684520][ T6833] Node 0 DMA32 free:34672kB min:52300kB low:61276kB high:70252kB reserved_highatomic:0KB active_anon:915232kB inactive_anon:16628kB active_file:12kB inactive_file:12kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18864kB pagetables:35152kB bounce:0kB free_pcp:1336kB local_pcp:356kB free_cma:0kB [ 1314.729374][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1314.742507][ T336] tipc: TX() has been purged, node left! [ 1314.757543][ T6833] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1314.809662][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1314.814533][ T6833] Node 1 Normal free:26848kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1314.891897][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1314.896618][ T6833] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 2*4096kB (M) = 10160kB [ 1314.941801][ T6833] Node 0 DMA32: 3850*4kB (UME) 1220*8kB (UME) 39*16kB (UM) 5*32kB (U) 1*64kB (U) 2*128kB (U) 1*256kB (U) 3*512kB (U) 5*1024kB (U) 1*2048kB (M) 0*4096kB = 35224kB [ 1314.975069][ T6833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1315.020684][ T6833] Node 1 Normal: 138*4kB (UME) 63*8kB (ME) 44*16kB (ME) 18*32kB (ME) 1*64kB (M) 3*128kB (UME) 4*256kB (UME) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26848kB [ 1315.083655][ T6833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1315.111733][ T6833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1315.134379][ T6833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1315.159940][ T6833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1315.201189][ T6833] 4424 total pagecache pages [ 1315.233739][ T6833] 0 pages in swap cache [ 1315.240884][ T6833] Swap cache stats: add 0, delete 0, find 0/0 [ 1315.275017][ T6833] Free swap = 0kB [ 1315.279282][ T6833] Total swap = 0kB [ 1315.309676][ T6833] 1965979 pages RAM [ 1315.313718][ T6833] 0 pages HighMem/MovableOnly [ 1315.330467][ T6833] 349903 pages reserved [ 1315.343630][ T6833] 0 pages cma reserved [ 1315.347703][ T6833] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=25390,uid=0 [ 1315.367066][ T6833] Out of memory: Killed process 25390 (syz-executor.3) total-vm:74848kB, anon-rss:4260kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1315.393784][ T1151] oom_reaper: reaped process 25390 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1315.447872][ T6835] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1315.477153][ T6835] CPU: 0 PID: 6835 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1315.485435][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1315.495485][ T6835] Call Trace: [ 1315.498783][ T6835] dump_stack+0x18f/0x20d [ 1315.503124][ T6835] dump_header+0x10b/0x7e4 [ 1315.507542][ T6835] oom_kill_process.cold+0x10/0x15 [ 1315.512654][ T6835] out_of_memory+0x326/0x1340 [ 1315.517335][ T6835] ? oom_killer_disable+0x270/0x270 [ 1315.522535][ T6835] ? mutex_trylock+0x246/0x2c0 [ 1315.527299][ T6835] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1315.533982][ T6835] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1315.540581][ T6835] ? warn_alloc+0x120/0x120 [ 1315.545082][ T6835] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1315.550632][ T6835] ? lock_is_held_type+0xb0/0xe0 [ 1315.555581][ T6835] __alloc_pages_nodemask+0x68f/0x930 [ 1315.560966][ T6835] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1315.567733][ T6835] ? page_cache_readahead_unbounded+0x572/0x850 [ 1315.573979][ T6835] ? __lock_page_or_retry+0x650/0x650 [ 1315.579350][ T6835] alloc_pages_current+0x187/0x280 [ 1315.584464][ T6835] __page_cache_alloc+0x31e/0x450 [ 1315.589489][ T6835] pagecache_get_page+0x27d/0xe10 [ 1315.594510][ T6835] ? __do_page_cache_readahead+0xc2/0xf0 [ 1315.600149][ T6835] filemap_fault+0x1a99/0x2ad0 [ 1315.604930][ T6835] ext4_filemap_fault+0x87/0xb6 [ 1315.609779][ T6835] __do_fault+0x10d/0x4d0 [ 1315.614127][ T6835] handle_mm_fault+0x37a3/0x43f0 [ 1315.619076][ T6835] ? apply_to_existing_page_range+0x40/0x40 [ 1315.624986][ T6835] ? vmacache_update+0xce/0x140 [ 1315.629855][ T6835] do_user_addr_fault+0x5a2/0xd00 [ 1315.634885][ T6835] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1315.640438][ T6835] exc_page_fault+0xab/0x170 [ 1315.645030][ T6835] ? asm_exc_page_fault+0x8/0x30 [ 1315.649965][ T6835] asm_exc_page_fault+0x1e/0x30 [ 1315.654814][ T6835] RIP: 0033:0x460c23 [ 1315.658695][ T6835] Code: Bad RIP value. [ 1315.662750][ T6835] RSP: 002b:000000c00003f6a0 EFLAGS: 00010202 [ 1315.668814][ T6835] RAX: ffffffffffffff92 RBX: 000000003b97d308 RCX: 0000000000460c23 [ 1315.676779][ T6835] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703a40 [ 1315.684746][ T6835] RBP: 000000c00003f6e8 R08: 0000000000000000 R09: 0000000000000000 [ 1315.692713][ T6835] R10: 000000c00003f6d8 R11: 0000000000000202 R12: 0000000000000000 [ 1315.700677][ T6835] R13: 0000000000000001 R14: 000000c006b91e60 R15: 0000000000000000 [ 1316.331921][ T6835] Mem-Info: [ 1316.331956][ T6835] active_anon:228279 inactive_anon:4157 isolated_anon:0 [ 1316.331956][ T6835] active_file:4 inactive_file:3 isolated_file:0 [ 1316.331956][ T6835] unevictable:1 dirty:0 writeback:0 [ 1316.331956][ T6835] slab_reclaimable:15677 slab_unreclaimable:115982 [ 1316.331956][ T6835] mapped:53552 shmem:4417 pagetables:8784 bounce:0 [ 1316.331956][ T6835] free:17752 free_pcp:467 free_cma:0 [ 1316.331984][ T6835] Node 0 active_anon:913080kB inactive_anon:16628kB active_file:12kB inactive_file:12kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214208kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 663552kB writeback_tmp:0kB all_unreclaimable? yes [ 1316.332008][ T6835] Node 1 active_anon:36kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1316.332015][ T6835] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1316.332057][ T6835] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1316.514425][ T6835] Node 0 DMA32 free:33352kB min:52300kB low:61276kB high:70252kB reserved_highatomic:0KB active_anon:911032kB inactive_anon:16628kB active_file:4kB inactive_file:20kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18832kB pagetables:35044kB bounce:0kB free_pcp:1620kB local_pcp:640kB free_cma:0kB [ 1316.574209][ T6835] lowmem_reserve[]: 0 0 0 0 0 [ 1316.578920][ T6835] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1316.630014][ T6835] lowmem_reserve[]: 0 0 0 0 0 [ 1316.657989][ T6835] Node 1 Normal free:26848kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1316.702938][ T6835] lowmem_reserve[]: 0 0 0 0 0 [ 1316.707647][ T6835] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 2*4096kB (M) = 10160kB [ 1316.745003][ T6835] Node 0 DMA32: 3850*4kB (UME) 1171*8kB (ME) 32*16kB (UM) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 3*2048kB (M) 0*4096kB = 32128kB [ 1316.769634][ T6835] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1316.821916][ T6835] Node 1 Normal: 138*4kB (UME) 63*8kB (ME) 44*16kB (ME) 19*32kB (UME) 1*64kB (M) 3*128kB (UME) 4*256kB (UME) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26880kB [ 1316.928575][ T6835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1316.970384][ T6835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1317.000514][ T6835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1317.050346][ T6835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1317.105395][ T6835] 4424 total pagecache pages [ 1317.110025][ T6835] 0 pages in swap cache [ 1317.122117][ T6835] Swap cache stats: add 0, delete 0, find 0/0 [ 1317.128201][ T6835] Free swap = 0kB [ 1317.155126][ T6835] Total swap = 0kB [ 1317.158891][ T6835] 1965979 pages RAM [ 1317.171937][ T6835] 0 pages HighMem/MovableOnly [ 1317.176624][ T6835] 349903 pages reserved [ 1317.180762][ T6835] 0 pages cma reserved [ 1317.211905][ T6835] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=12557,uid=0 [ 1317.252015][ T6835] Out of memory: Killed process 12557 (syz-executor.2) total-vm:74980kB, anon-rss:4260kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1317.293719][ T1151] oom_reaper: reaped process 12557 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 01:48:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x12000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:48:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:48:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:48:29 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x113, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:48:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x22) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x21) syz_open_procfs(r2, &(0x7f00000000c0)='net/nf_conntrack\x00') writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f00000003c0)='7', 0x1}], 0x2) 01:48:29 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f7c, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) [ 1320.176699][T20123] new mount options do not match the existing superblock, will be ignored 01:48:29 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f7d, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:29 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f7e, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:29 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x19, 0x80980) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc0045520, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "5737dcc5ff9b561a9852864c0b111c3f"}) 01:48:29 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f7f, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:29 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000000)=0x4040) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="80fd02", 0xfffffffffffffd7c}], 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket(0x11, 0x800000003, 0x81) bind(r5, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000040)={0x3a, 0x2, [], [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x20) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) [ 1320.702370][ T336] tipc: TX() has been purged, node left! [ 1326.361596][ T1151] oom_reaper: reaped process 20124 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 1326.430681][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1326.462070][ T3859] CPU: 0 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1326.470743][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1326.480789][ T3859] Call Trace: [ 1326.484089][ T3859] dump_stack+0x18f/0x20d [ 1326.488420][ T3859] dump_header+0x10b/0x7e4 [ 1326.492844][ T3859] oom_kill_process.cold+0x10/0x15 [ 1326.497961][ T3859] out_of_memory+0x326/0x1340 [ 1326.502644][ T3859] ? oom_killer_disable+0x270/0x270 [ 1326.507838][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1326.512591][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1326.519266][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1326.525879][ T3859] ? warn_alloc+0x120/0x120 [ 1326.530382][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1326.535950][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1326.540865][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1326.546231][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1326.553001][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1326.559242][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1326.564616][ T3859] alloc_pages_current+0x187/0x280 [ 1326.569732][ T3859] __page_cache_alloc+0x31e/0x450 [ 1326.574762][ T3859] pagecache_get_page+0x27d/0xe10 [ 1326.579789][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1326.585422][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1326.590194][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1326.595041][ T3859] __do_fault+0x10d/0x4d0 [ 1326.599371][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1326.604315][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1326.610243][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1326.615273][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1326.620842][ T3859] exc_page_fault+0xab/0x170 [ 1326.625433][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1326.630378][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1326.635236][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1326.639633][ T3859] Code: Bad RIP value. [ 1326.643680][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1326.649745][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1326.655430][T20124] syz-executor.5: vmalloc: allocation failure, allocated 4027117568 of 4294975488 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1326.657705][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1326.657720][ T3859] RBP: 00007ffd902c6780 R08: 0000000000000008 R09: 00007ffd90355080 [ 1326.690111][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1326.698076][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc1257d66c [ 1326.709452][T20124] CPU: 1 PID: 20124 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1326.716257][ T3859] Mem-Info: [ 1326.718134][T20124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1326.721253][ T3859] active_anon:227236 inactive_anon:4157 isolated_anon:0 [ 1326.721253][ T3859] active_file:16 inactive_file:14 isolated_file:0 [ 1326.721253][ T3859] unevictable:1 dirty:0 writeback:0 [ 1326.721253][ T3859] slab_reclaimable:15698 slab_unreclaimable:116348 [ 1326.721253][ T3859] mapped:53594 shmem:4417 pagetables:8757 bounce:0 [ 1326.721253][ T3859] free:14364 free_pcp:256 free_cma:0 [ 1326.731270][T20124] Call Trace: [ 1326.731298][T20124] dump_stack+0x18f/0x20d [ 1326.731319][T20124] warn_alloc.cold+0x87/0x17a [ 1326.731352][T20124] ? zone_watermark_ok_safe+0x260/0x260 [ 1326.767857][ T3859] Node 0 active_anon:908904kB inactive_anon:16628kB active_file:60kB inactive_file:56kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214376kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 659456kB writeback_tmp:0kB all_unreclaimable? yes [ 1326.771065][T20124] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1326.775418][ T3859] Node 1 active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1326.780036][T20124] ? alloc_pages_current+0x39/0x280 [ 1326.785580][ T3859] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1326.812984][T20124] __vmalloc_area_node+0x49e/0x7a0 [ 1326.813008][T20124] ? ip_set_alloc+0x48/0x60 [ 1326.813028][T20124] ? ip_set_alloc+0x48/0x60 [ 1326.819158][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1326.844510][T20124] vzalloc+0x116/0x1a0 [ 1326.844529][T20124] ip_set_alloc+0x48/0x60 [ 1326.844544][T20124] hash_netnet_create+0x401/0xd70 [ 1326.844565][T20124] ? hash_netnet6_head+0xcd0/0xcd0 [ 1326.849741][ T3859] Node 0 DMA32 free:20432kB min:44108kB low:53084kB high:62060kB reserved_highatomic:0KB active_anon:906856kB inactive_anon:16628kB active_file:60kB inactive_file:56kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18800kB pagetables:34936kB bounce:0kB free_pcp:592kB local_pcp:248kB free_cma:0kB [ 1326.878895][T20124] ip_set_create+0x6a2/0x13c0 [ 1326.878916][T20124] ? ip_set_sockfn_get+0xe00/0xe00 [ 1326.878954][T20124] ? lock_is_held_type+0xb0/0xe0 [ 1326.884052][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1326.888524][T20124] ? ip_set_sockfn_get+0xe00/0xe00 [ 1326.893015][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1326.898694][T20124] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1326.902745][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1326.907046][T20124] ? nfnetlink_rcv+0x420/0x420 [ 1326.912082][ T3859] Node 1 Normal free:26852kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:432kB local_pcp:180kB free_cma:0kB [ 1326.917158][T20124] ? is_bpf_text_address+0xcb/0x160 [ 1326.949134][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1326.953765][T20124] ? __lock_acquire+0xc1e/0x56e0 [ 1326.953791][T20124] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1326.958867][ T3859] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 2*4096kB (M) = 10172kB [ 1326.963784][T20124] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1326.963803][T20124] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1326.963823][T20124] netlink_rcv_skb+0x15a/0x430 [ 1326.968468][ T3859] Node 0 DMA32: 2983*4kB (UME) 1019*8kB (UME) 6*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20180kB [ 1326.973560][T20124] ? nfnetlink_rcv+0x420/0x420 [ 1326.973575][T20124] ? netlink_ack+0xa10/0xa10 [ 1326.973600][T20124] ? ns_capable+0xde/0x100 [ 1327.001640][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1327.006556][T20124] nfnetlink_rcv+0x1ac/0x420 [ 1327.006574][T20124] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1327.006596][T20124] netlink_unicast+0x533/0x7d0 [ 1327.011253][ T3859] Node 1 Normal: 125*4kB (UME) 64*8kB (UME) 45*16kB (ME) 19*32kB (ME) 3*64kB (UM) 4*128kB (UME) 3*256kB (UME) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26852kB [ 1327.016016][T20124] ? netlink_attachskb+0x810/0x810 [ 1327.016032][T20124] ? _copy_from_iter_full+0x247/0x890 [ 1327.016053][T20124] ? __phys_addr+0x9a/0x110 [ 1327.046698][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1327.051855][T20124] ? __phys_addr_symbol+0x2c/0x70 [ 1327.056528][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1327.061420][T20124] ? __check_object_size+0x171/0x3e4 [ 1327.067389][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1327.081918][T20124] netlink_sendmsg+0x856/0xd90 [ 1327.081944][T20124] ? netlink_unicast+0x7d0/0x7d0 [ 1327.087898][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1327.093772][T20124] ? netlink_unicast+0x7d0/0x7d0 [ 1327.093791][T20124] sock_sendmsg+0xcf/0x120 [ 1327.093810][T20124] ____sys_sendmsg+0x6e8/0x810 [ 1327.098546][ T3859] 4447 total pagecache pages [ 1327.112158][T20124] ? kernel_sendmsg+0x50/0x50 [ 1327.112169][T20124] ? do_recvmmsg+0x6d0/0x6d0 [ 1327.112188][T20124] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1327.112208][T20124] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1327.116952][ T3859] 0 pages in swap cache [ 1327.121525][T20124] ? __lock_acquire+0xc1e/0x56e0 [ 1327.125943][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1327.137265][T20124] ___sys_sendmsg+0xf3/0x170 [ 1327.137283][T20124] ? sendmsg_copy_msghdr+0x160/0x160 [ 1327.137303][T20124] ? __fget_files+0x272/0x400 [ 1327.141884][ T3859] Free swap = 0kB [ 1327.147309][T20124] ? lock_downgrade+0x820/0x820 [ 1327.152063][ T3859] Total swap = 0kB [ 1327.169116][T20124] ? find_held_lock+0x2d/0x110 [ 1327.169131][T20124] ? __might_fault+0x11f/0x1d0 [ 1327.169157][T20124] ? __fget_files+0x294/0x400 [ 1327.174264][ T3859] 1965979 pages RAM [ 1327.179595][T20124] ? __fget_light+0xea/0x280 [ 1327.184088][ T3859] 0 pages HighMem/MovableOnly [ 1327.193594][T20124] __sys_sendmsg+0xe5/0x1b0 [ 1327.193611][T20124] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1327.193631][T20124] ? __x64_sys_futex+0x382/0x4e0 [ 1327.198625][ T3859] 349903 pages reserved [ 1327.207896][T20124] ? do_syscall_64+0x1c/0xe0 [ 1327.207912][T20124] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1327.207931][T20124] do_syscall_64+0x60/0xe0 [ 1327.213210][ T3859] 0 pages cma reserved [ 1327.222724][T20124] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1327.222737][T20124] RIP: 0033:0x45cb29 [ 1327.222752][T20124] Code: Bad RIP value. [ 1327.227500][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14690,uid=0 [ 1327.232407][T20124] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1327.232420][T20124] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1327.232428][T20124] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1327.232436][T20124] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1327.232444][T20124] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1327.232459][T20124] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1327.241777][ T3859] Out of memory: Killed process 14690 (syz-executor.2) total-vm:74980kB, anon-rss:4260kB, file-rss:34624kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1327.254654][T20124] Mem-Info: [ 1327.340185][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1327.456743][T20124] active_anon:226184 inactive_anon:4157 isolated_anon:0 [ 1327.456743][T20124] active_file:16 inactive_file:14 isolated_file:0 [ 1327.456743][T20124] unevictable:1 dirty:0 writeback:0 [ 1327.456743][T20124] slab_reclaimable:15698 slab_unreclaimable:116504 [ 1327.456743][T20124] mapped:53594 shmem:4417 pagetables:8720 bounce:0 [ 1327.456743][T20124] free:15167 free_pcp:319 free_cma:0 [ 1327.458452][ T3859] CPU: 0 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1327.491170][T20124] Node 0 active_anon:904696kB inactive_anon:16628kB active_file:60kB inactive_file:56kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214376kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 659456kB writeback_tmp:0kB all_unreclaimable? yes [ 1327.495927][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1327.495933][ T3859] Call Trace: [ 1327.495957][ T3859] dump_stack+0x18f/0x20d [ 1327.495975][ T3859] dump_header+0x10b/0x7e4 [ 1327.495991][ T3859] oom_kill_process.cold+0x10/0x15 [ 1327.496009][ T3859] out_of_memory+0x326/0x1340 [ 1327.496031][ T3859] ? oom_killer_disable+0x270/0x270 [ 1327.496049][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1327.496065][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1327.496085][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1327.496115][ T3859] ? warn_alloc+0x120/0x120 [ 1327.559186][T20124] Node 1 active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1327.568634][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1327.568657][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1327.568678][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1327.568700][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1327.568721][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1327.618809][T20124] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1327.623614][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1327.623634][ T3859] alloc_pages_current+0x187/0x280 [ 1327.623652][ T3859] __page_cache_alloc+0x31e/0x450 [ 1327.623670][ T3859] pagecache_get_page+0x27d/0xe10 [ 1327.623689][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1327.623706][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1327.623731][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1327.623753][ T3859] __do_fault+0x10d/0x4d0 [ 1327.648463][T20124] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1327.653581][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1327.653603][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1327.653634][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1327.653653][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1327.653672][ T3859] exc_page_fault+0xab/0x170 [ 1327.653686][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1327.653706][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1327.668086][T20124] Node 0 DMA32 free:22476kB min:44108kB low:53084kB high:62060kB reserved_highatomic:0KB active_anon:902648kB inactive_anon:16628kB active_file:56kB inactive_file:60kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18800kB pagetables:34788kB bounce:0kB free_pcp:976kB local_pcp:476kB free_cma:0kB [ 1327.669513][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1327.678290][T20124] lowmem_reserve[]: 0 0 0 0 0 [ 1327.682458][ T3859] Code: Bad RIP value. [ 1327.682468][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1327.682479][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1327.682488][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1327.682496][ T3859] RBP: 00007ffd902c6780 R08: 0000000000000008 R09: 00007ffd90355080 [ 1327.682505][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1327.682513][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc1257d66c [ 1327.695563][ T3859] Mem-Info: [ 1327.724727][T20124] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1327.735219][ T3859] active_anon:226184 inactive_anon:4157 isolated_anon:0 [ 1327.735219][ T3859] active_file:15 inactive_file:15 isolated_file:0 [ 1327.735219][ T3859] unevictable:1 dirty:0 writeback:0 [ 1327.735219][ T3859] slab_reclaimable:15698 slab_unreclaimable:116883 [ 1327.735219][ T3859] mapped:53594 shmem:4417 pagetables:8720 bounce:0 [ 1327.735219][ T3859] free:14771 free_pcp:352 free_cma:0 [ 1327.744584][T20124] lowmem_reserve[]: 0 0 0 0 0 [ 1327.757219][ T3859] Node 0 active_anon:904696kB inactive_anon:16628kB active_file:56kB inactive_file:60kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214376kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 659456kB writeback_tmp:0kB all_unreclaimable? no [ 1327.758483][T20124] Node 1 Normal free:27252kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1327.778427][ T3859] Node 1 active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1327.785098][T20124] lowmem_reserve[]: 0 0 0 0 0 [ 1327.791944][ T3859] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1327.794602][T20124] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 2*4096kB (M) = 10172kB [ 1327.837986][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1327.854244][T20124] Node 0 DMA32: 3153*4kB (UME) 999*8kB (ME) 5*16kB (M) 1*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 22380kB [ 1327.877774][ T3859] Node 0 DMA32 free:22344kB min:44108kB low:53084kB high:62060kB reserved_highatomic:0KB active_anon:902648kB inactive_anon:16628kB active_file:56kB inactive_file:60kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18800kB pagetables:34788kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1327.883315][T20124] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1327.894234][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1327.937016][T20124] Node 1 Normal: 125*4kB (UME) 64*8kB (ME) 46*16kB (UME) 21*32kB (UME) 3*64kB (UM) 5*128kB (UME) 2*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 27316kB [ 1327.956813][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1327.975878][T20124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1327.988364][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1328.063382][T20124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1328.090392][ T3859] Node 1 Normal free:26944kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1328.105627][T20124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1328.126826][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1328.148298][T20124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1328.168693][ T3859] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 2*4096kB (M) = 10172kB [ 1328.181669][T20124] 4447 total pagecache pages [ 1328.218896][ T3859] Node 0 DMA32: 3153*4kB (UME) 1000*8kB (UME) 5*16kB (M) 0*32kB 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 21460kB [ 1328.237326][T20124] 0 pages in swap cache [ 1328.274248][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1328.287902][T20124] Swap cache stats: add 0, delete 0, find 0/0 [ 1328.316451][ T3859] Node 1 Normal: 125*4kB (UME) 65*8kB (UME) 45*16kB (ME) 20*32kB (UME) 2*64kB (M) 3*128kB (ME) 2*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26956kB [ 1328.334753][T20124] Free swap = 0kB [ 1328.349072][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1328.362742][T20124] Total swap = 0kB [ 1328.371166][T20124] 1965979 pages RAM [ 1328.381298][T20124] 0 pages HighMem/MovableOnly [ 1328.382800][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1328.386039][T20124] 349903 pages reserved [ 1328.406717][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1328.414663][T20124] 0 pages cma reserved [ 1328.416300][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1328.441929][ T3859] 4447 total pagecache pages [ 1328.446520][ T3859] 0 pages in swap cache [ 1328.450662][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1328.465796][ T3859] Free swap = 0kB [ 1328.469524][ T3859] Total swap = 0kB [ 1328.475318][ T3859] 1965979 pages RAM [ 1328.479147][ T3859] 0 pages HighMem/MovableOnly [ 1328.483852][ T3859] 349903 pages reserved [ 1328.487999][ T3859] 0 pages cma reserved [ 1328.500763][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=13800,uid=0 [ 1328.517109][ T3859] Out of memory: Killed process 13800 (syz-executor.1) total-vm:75772kB, anon-rss:2272kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1328.545704][ T1151] oom_reaper: reaped process 13800 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1328.585427][ T6833] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1328.612486][ T6833] CPU: 0 PID: 6833 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1328.620729][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1328.630784][ T6833] Call Trace: [ 1328.634085][ T6833] dump_stack+0x18f/0x20d [ 1328.638414][ T6833] dump_header+0x10b/0x7e4 [ 1328.642830][ T6833] oom_kill_process.cold+0x10/0x15 [ 1328.647950][ T6833] out_of_memory+0x326/0x1340 [ 1328.652637][ T6833] ? oom_killer_disable+0x270/0x270 [ 1328.657837][ T6833] ? mutex_trylock+0x246/0x2c0 [ 1328.662600][ T6833] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1328.669279][ T6833] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1328.675890][ T6833] ? warn_alloc+0x120/0x120 [ 1328.680393][ T6833] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1328.685947][ T6833] ? lock_is_held_type+0xb0/0xe0 [ 1328.690895][ T6833] __alloc_pages_nodemask+0x68f/0x930 [ 1328.696276][ T6833] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1328.703046][ T6833] ? page_cache_readahead_unbounded+0x572/0x850 [ 1328.709290][ T6833] ? __lock_page_or_retry+0x650/0x650 [ 1328.714665][ T6833] alloc_pages_current+0x187/0x280 [ 1328.719784][ T6833] __page_cache_alloc+0x31e/0x450 [ 1328.724813][ T6833] pagecache_get_page+0x27d/0xe10 [ 1328.729849][ T6833] ? __do_page_cache_readahead+0xc2/0xf0 [ 1328.735480][ T6833] filemap_fault+0x1a99/0x2ad0 [ 1328.740251][ T6833] ext4_filemap_fault+0x87/0xb6 [ 1328.745125][ T6833] __do_fault+0x10d/0x4d0 [ 1328.749457][ T6833] handle_mm_fault+0x37a3/0x43f0 [ 1328.754399][ T6833] ? apply_to_existing_page_range+0x40/0x40 [ 1328.760303][ T6833] do_user_addr_fault+0x5a2/0xd00 [ 1328.765345][ T6833] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1328.770895][ T6833] exc_page_fault+0xab/0x170 [ 1328.775484][ T6833] ? asm_exc_page_fault+0x8/0x30 [ 1328.780418][ T6833] asm_exc_page_fault+0x1e/0x30 [ 1328.785261][ T6833] RIP: 0033:0x460c23 [ 1328.789138][ T6833] Code: Bad RIP value. [ 1328.793220][ T6833] RSP: 002b:000000c00003bea0 EFLAGS: 00010206 [ 1328.799282][ T6833] RAX: ffffffffffffff92 RBX: 000000003b973a05 RCX: 0000000000460c23 [ 1328.807244][ T6833] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703ac0 [ 1328.815209][ T6833] RBP: 000000c00003bee8 R08: 0000000000000000 R09: 0000000000000000 [ 1328.823202][ T6833] R10: 000000c00003bed8 R11: 0000000000000206 R12: 000001415725d55f [ 1328.831169][ T6833] R13: 0000000000000001 R14: 000001415725d55f R15: 0000000000000000 [ 1328.852274][ T6833] Mem-Info: [ 1328.855423][ T6833] active_anon:225638 inactive_anon:4157 isolated_anon:0 [ 1328.855423][ T6833] active_file:20 inactive_file:10 isolated_file:0 [ 1328.855423][ T6833] unevictable:1 dirty:0 writeback:0 [ 1328.855423][ T6833] slab_reclaimable:15694 slab_unreclaimable:118003 [ 1328.855423][ T6833] mapped:53594 shmem:4417 pagetables:8731 bounce:0 [ 1328.855423][ T6833] free:14482 free_pcp:108 free_cma:0 [ 1328.909577][ T6833] Node 0 active_anon:902512kB inactive_anon:16628kB active_file:68kB inactive_file:48kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214376kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 655360kB writeback_tmp:0kB all_unreclaimable? yes [ 1328.957966][ T6833] Node 1 active_anon:40kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1328.991251][ T6833] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1329.037166][ T6833] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1329.049910][ T6833] Node 0 DMA32 free:20768kB min:42060kB low:51036kB high:60012kB reserved_highatomic:0KB active_anon:900464kB inactive_anon:16628kB active_file:68kB inactive_file:48kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18740kB pagetables:34684kB bounce:0kB free_pcp:568kB local_pcp:364kB free_cma:0kB [ 1329.094806][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1329.099542][ T6833] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1329.145940][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1329.150673][ T6833] Node 1 Normal free:26988kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1329.190375][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1329.196222][ T6833] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 2*4096kB (M) = 10172kB [ 1329.225827][ T6833] Node 0 DMA32: 3090*4kB (UME) 977*8kB (UME) 1*16kB (M) 0*32kB 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 20768kB [ 1329.248372][ T6833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1329.276474][ T6833] Node 1 Normal: 125*4kB (UME) 65*8kB (UME) 45*16kB (ME) 21*32kB (UME) 2*64kB (M) 3*128kB (ME) 2*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26988kB [ 1329.303104][ T6833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1329.312798][ T6833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1329.330532][ T6833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1329.342927][ T6833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1329.352680][ T6833] 4447 total pagecache pages [ 1329.357294][ T6833] 0 pages in swap cache [ 1329.361438][ T6833] Swap cache stats: add 0, delete 0, find 0/0 [ 1329.373594][ T6833] Free swap = 0kB [ 1329.377317][ T6833] Total swap = 0kB [ 1329.381027][ T6833] 1965979 pages RAM [ 1329.384903][ T6833] 0 pages HighMem/MovableOnly [ 1329.389568][ T6833] 349903 pages reserved [ 1329.399152][ T6833] 0 pages cma reserved [ 1329.406680][ T6833] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=19647,uid=0 [ 1329.490913][ T6833] Out of memory: Killed process 19647 (syz-executor.1) total-vm:75112kB, anon-rss:2240kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 01:48:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x13000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:48:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) 01:48:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x2) ioctl$USBDEVFS_RESET(r2, 0x5514) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x581000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x60d2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002b000523d25a80648c63940d0324fc60", 0x14}], 0x1}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x10005, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x1b, 0x5, 0x420, 0xa8, 0xa8, 0xffffffff, 0xa8, 0x0, 0x388, 0x388, 0xffffffff, 0x388, 0x388, 0x5, &(0x7f0000000140), {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @remote, @local, @icmp_id=0x64, @gre_key=0x3}}}}, {{@ip={@private=0xa010100, @local, 0xffffffff, 0xff000000, 'team0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x32, 0x1, 0x40}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0xe, "a17d"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x6, @rand_addr=0x64010101, @broadcast, @icmp_id=0x64, @port=0x4e23}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x2}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xe, @ipv4=@multicast1, @ipv4=@local, @gre_key=0x1, @gre_key=0x2}}}, {{@ip={@local, @loopback, 0xffffffff, 0xff, 'bond_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6c, 0x2}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz1\x00', 0x0, 0xd, 0x1}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00'}, {0x0, 0x0, 0x80000000, 0x3ff, 0x7fff}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @private=0xa010102, @empty, @port=0x4e23, @icmp_id=0x64}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x800, 0x4) 01:48:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f80, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:48:42 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x114, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:48:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) 01:48:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f81, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f82, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f83, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f84, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1333.542564][ T336] tipc: TX() has been purged, node left! 01:48:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f85, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1339.740354][ T1151] oom_reaper: reaped process 20163 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 1339.809217][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1339.841971][ T3859] CPU: 0 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1339.850683][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1339.860715][ T3859] Call Trace: [ 1339.864024][ T3859] dump_stack+0x18f/0x20d [ 1339.868369][ T3859] dump_header+0x10b/0x7e4 [ 1339.872797][ T3859] oom_kill_process.cold+0x10/0x15 [ 1339.877887][ T3859] out_of_memory+0x326/0x1340 [ 1339.882567][ T3859] ? oom_killer_disable+0x270/0x270 [ 1339.887744][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1339.892485][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1339.900140][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1339.906717][ T3859] ? warn_alloc+0x120/0x120 [ 1339.911200][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1339.916749][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1339.921679][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1339.927035][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1339.933779][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1339.940011][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1339.945361][ T3859] alloc_pages_current+0x187/0x280 [ 1339.950450][ T3859] __page_cache_alloc+0x31e/0x450 [ 1339.955455][ T3859] pagecache_get_page+0x27d/0xe10 [ 1339.960459][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1339.966070][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1339.970833][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1339.975659][ T3859] __do_fault+0x10d/0x4d0 [ 1339.979967][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1339.984885][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1339.990765][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1339.995769][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1340.001306][ T3859] exc_page_fault+0xab/0x170 [ 1340.005872][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1340.010782][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1340.015622][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1340.020023][ T3859] Code: Bad RIP value. [ 1340.024062][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1340.030100][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1340.038062][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1340.046021][ T3859] RBP: 00007ffd902c6780 R08: 0000000000000008 R09: 00007ffd90355080 [ 1340.053968][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1340.061919][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc131a6045 [ 1340.100090][ T3859] Mem-Info: [ 1340.105377][ T3859] active_anon:217175 inactive_anon:4157 isolated_anon:0 [ 1340.105377][ T3859] active_file:14 inactive_file:14 isolated_file:0 [ 1340.105377][ T3859] unevictable:1 dirty:0 writeback:0 [ 1340.105377][ T3859] slab_reclaimable:15708 slab_unreclaimable:117728 [ 1340.105377][ T3859] mapped:53628 shmem:4417 pagetables:8677 bounce:0 [ 1340.105377][ T3859] free:14293 free_pcp:497 free_cma:0 [ 1340.121962][T20163] syz-executor.5: vmalloc: allocation failure, allocated 4062797824 of 4294975488 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1340.153096][ T3859] Node 0 active_anon:868652kB inactive_anon:16628kB active_file:56kB inactive_file:52kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214512kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 653312kB writeback_tmp:0kB all_unreclaimable? yes [ 1340.158537][T20163] CPU: 0 PID: 20163 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1340.185943][ T3859] Node 1 active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1340.194513][T20163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.194520][T20163] Call Trace: [ 1340.194546][T20163] dump_stack+0x18f/0x20d [ 1340.194570][T20163] warn_alloc.cold+0x87/0x17a [ 1340.219922][ T3859] Node 0 DMA free:10152kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.229950][T20163] ? zone_watermark_ok_safe+0x260/0x260 [ 1340.229986][T20163] __vmalloc_area_node+0x49e/0x7a0 [ 1340.233250][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1340.237552][T20163] ? ip_set_alloc+0x48/0x60 [ 1340.242216][ T3859] Node 0 DMA32 free:20240kB min:42060kB low:51036kB high:60012kB reserved_highatomic:0KB active_anon:866604kB inactive_anon:16628kB active_file:56kB inactive_file:52kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18672kB pagetables:34616kB bounce:0kB free_pcp:1568kB local_pcp:1268kB free_cma:0kB [ 1340.271346][T20163] ? ip_set_alloc+0x48/0x60 [ 1340.271363][T20163] vzalloc+0x116/0x1a0 [ 1340.271379][T20163] ip_set_alloc+0x48/0x60 [ 1340.271399][T20163] hash_netnet_create+0x401/0xd70 [ 1340.276945][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1340.282030][T20163] ? hash_netnet6_head+0xcd0/0xcd0 [ 1340.282047][T20163] ip_set_create+0x6a2/0x13c0 [ 1340.282067][T20163] ? ip_set_sockfn_get+0xe00/0xe00 [ 1340.287777][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.292287][T20163] ? lock_is_held_type+0xb0/0xe0 [ 1340.292306][T20163] ? ip_set_sockfn_get+0xe00/0xe00 [ 1340.324441][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1340.328917][T20163] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1340.332970][ T3859] Node 1 Normal free:26780kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:420kB local_pcp:8kB free_cma:0kB [ 1340.337263][T20163] ? nfnetlink_rcv+0x420/0x420 [ 1340.342266][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1340.346916][T20163] ? is_bpf_text_address+0xcb/0x160 [ 1340.352054][ T3859] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 2*4096kB (M) = 10152kB [ 1340.356698][T20163] ? __lock_acquire+0xc1e/0x56e0 [ 1340.361768][ T3859] Node 0 DMA32: 2129*4kB (UME) 1127*8kB (UME) 109*16kB (UME) 18*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19852kB [ 1340.389831][T20163] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1340.389848][T20163] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1340.389865][T20163] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1340.389885][T20163] netlink_rcv_skb+0x15a/0x430 [ 1340.394815][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1340.399895][T20163] ? nfnetlink_rcv+0x420/0x420 [ 1340.404562][ T3859] Node 1 Normal: 119*4kB (ME) 68*8kB (ME) 47*16kB (UME) 22*32kB (ME) 3*64kB (M) 2*128kB (ME) 1*256kB (E) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26732kB [ 1340.409481][T20163] ? netlink_ack+0xa10/0xa10 [ 1340.439971][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1340.444680][T20163] ? ns_capable+0xde/0x100 [ 1340.444701][T20163] nfnetlink_rcv+0x1ac/0x420 [ 1340.449351][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1340.454526][T20163] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1340.454557][T20163] netlink_unicast+0x533/0x7d0 [ 1340.468457][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1340.473348][T20163] ? netlink_attachskb+0x810/0x810 [ 1340.473373][T20163] ? _copy_from_iter_full+0x247/0x890 [ 1340.487793][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1340.493720][T20163] ? __phys_addr+0x9a/0x110 [ 1340.493735][T20163] ? __phys_addr_symbol+0x2c/0x70 [ 1340.493756][T20163] ? __check_object_size+0x171/0x3e4 [ 1340.499709][ T3859] 4445 total pagecache pages [ 1340.505594][T20163] netlink_sendmsg+0x856/0xd90 [ 1340.505614][T20163] ? netlink_unicast+0x7d0/0x7d0 [ 1340.505635][T20163] ? netlink_unicast+0x7d0/0x7d0 [ 1340.510375][ T3859] 0 pages in swap cache [ 1340.521723][T20163] sock_sendmsg+0xcf/0x120 [ 1340.521739][T20163] ____sys_sendmsg+0x6e8/0x810 [ 1340.521764][T20163] ? kernel_sendmsg+0x50/0x50 [ 1340.526544][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1340.543262][T20163] ? do_recvmmsg+0x6d0/0x6d0 [ 1340.543283][T20163] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1340.543302][T20163] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1340.547862][ T3859] Free swap = 0kB [ 1340.557375][T20163] ? __lock_acquire+0xc1e/0x56e0 [ 1340.557393][T20163] ___sys_sendmsg+0xf3/0x170 [ 1340.557415][T20163] ? sendmsg_copy_msghdr+0x160/0x160 [ 1340.561801][ T3859] Total swap = 0kB [ 1340.566370][T20163] ? __fget_files+0x272/0x400 [ 1340.566389][T20163] ? lock_downgrade+0x820/0x820 [ 1340.566407][T20163] ? find_held_lock+0x2d/0x110 [ 1340.575681][ T3859] 1965979 pages RAM [ 1340.581106][T20163] ? __might_fault+0x11f/0x1d0 [ 1340.585918][ T3859] 0 pages HighMem/MovableOnly [ 1340.595428][T20163] ? __fget_files+0x294/0x400 [ 1340.595448][T20163] ? __fget_light+0xea/0x280 [ 1340.600531][ T3859] 349903 pages reserved [ 1340.605909][T20163] __sys_sendmsg+0xe5/0x1b0 [ 1340.605926][T20163] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1340.605947][T20163] ? __x64_sys_futex+0x382/0x4e0 [ 1340.615239][ T3859] 0 pages cma reserved [ 1340.619712][T20163] ? do_syscall_64+0x1c/0xe0 [ 1340.624739][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=18573,uid=0 [ 1340.629988][T20163] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1340.634636][ T3859] Out of memory: Killed process 18573 (syz-executor.1) total-vm:75244kB, anon-rss:2236kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1340.639292][T20163] do_syscall_64+0x60/0xe0 [ 1340.639311][T20163] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1340.645528][ T1151] oom_reaper: reaped process 18573 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1340.649139][T20163] RIP: 0033:0x45cb29 [ 1340.665065][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1340.667054][T20163] Code: Bad RIP value. [ 1340.852988][T20163] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1340.861402][T20163] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1340.869372][T20163] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1340.877343][T20163] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1340.885397][T20163] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1340.893365][T20163] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1340.901355][ T3859] CPU: 1 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1340.910031][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.920085][ T3859] Call Trace: [ 1340.923384][ T3859] dump_stack+0x18f/0x20d [ 1340.927715][ T3859] dump_header+0x10b/0x7e4 [ 1340.932133][ T3859] oom_kill_process.cold+0x10/0x15 [ 1340.934523][T20163] Mem-Info: [ 1340.937274][ T3859] out_of_memory+0x326/0x1340 [ 1340.940382][T20163] active_anon:216631 inactive_anon:4157 isolated_anon:0 [ 1340.940382][T20163] active_file:12 inactive_file:16 isolated_file:0 [ 1340.940382][T20163] unevictable:1 dirty:0 writeback:0 [ 1340.940382][T20163] slab_reclaimable:15708 slab_unreclaimable:117726 [ 1340.940382][T20163] mapped:53628 shmem:4417 pagetables:8677 bounce:0 [ 1340.940382][T20163] free:14708 free_pcp:534 free_cma:0 [ 1340.945024][ T3859] ? oom_killer_disable+0x270/0x270 [ 1340.945042][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1340.945058][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1340.945080][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1340.986818][T20163] Node 0 active_anon:866476kB inactive_anon:16628kB active_file:44kB inactive_file:64kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214512kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 653312kB writeback_tmp:0kB all_unreclaimable? yes [ 1340.991466][ T3859] ? warn_alloc+0x120/0x120 [ 1340.998154][T20163] Node 1 active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1341.004676][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1341.004700][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1341.004722][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1341.004743][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1341.042075][T20163] Node 0 DMA free:10152kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.061986][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1341.062003][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1341.062020][ T3859] alloc_pages_current+0x187/0x280 [ 1341.062037][ T3859] __page_cache_alloc+0x31e/0x450 [ 1341.062053][ T3859] pagecache_get_page+0x27d/0xe10 [ 1341.062069][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1341.062090][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1341.072735][T20163] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1341.077947][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1341.085623][T20163] Node 0 DMA32 free:21900kB min:42060kB low:51036kB high:60012kB reserved_highatomic:0KB active_anon:864428kB inactive_anon:16628kB active_file:44kB inactive_file:64kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18672kB pagetables:34616kB bounce:0kB free_pcp:1716kB local_pcp:300kB free_cma:0kB [ 1341.113832][ T3859] __do_fault+0x10d/0x4d0 [ 1341.113849][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1341.113867][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1341.113895][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1341.113914][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1341.113933][ T3859] exc_page_fault+0xab/0x170 [ 1341.113946][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1341.113958][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1341.113971][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1341.113977][ T3859] Code: Bad RIP value. [ 1341.113984][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1341.113996][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1341.114003][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1341.114010][ T3859] RBP: 00007ffd902c6780 R08: 0000000000000008 R09: 00007ffd90355080 [ 1341.114018][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1341.114025][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc131a6045 [ 1341.188812][ T3859] Mem-Info: [ 1341.205221][T20163] lowmem_reserve[]: 0 0 0 0 0 [ 1341.232666][ T3859] active_anon:216622 inactive_anon:4157 isolated_anon:0 [ 1341.232666][ T3859] active_file:14 inactive_file:14 isolated_file:0 [ 1341.232666][ T3859] unevictable:1 dirty:0 writeback:0 [ 1341.232666][ T3859] slab_reclaimable:15708 slab_unreclaimable:117902 [ 1341.232666][ T3859] mapped:53628 shmem:4417 pagetables:8675 bounce:0 [ 1341.232666][ T3859] free:14536 free_pcp:534 free_cma:0 [ 1341.239466][T20163] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.270990][ T3859] Node 0 active_anon:866444kB inactive_anon:16628kB active_file:52kB inactive_file:56kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214512kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 649216kB writeback_tmp:0kB all_unreclaimable? yes [ 1341.278676][T20163] lowmem_reserve[]: 0 0 0 0 0 [ 1341.281993][ T3859] Node 1 active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1341.289674][T20163] Node 1 Normal free:26732kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:420kB local_pcp:412kB free_cma:0kB [ 1341.298584][ T3859] Node 0 DMA free:10152kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.344984][T20163] lowmem_reserve[]: 0 0 0 0 0 [ 1341.370008][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1341.409973][T20163] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 2*4096kB (M) = 10152kB [ 1341.438016][ T3859] Node 0 DMA32 free:20948kB min:42060kB low:51036kB high:60012kB reserved_highatomic:0KB active_anon:864396kB inactive_anon:16628kB active_file:52kB inactive_file:56kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18672kB pagetables:34608kB bounce:0kB free_pcp:1716kB local_pcp:1416kB free_cma:0kB [ 1341.465713][T20163] Node 0 DMA32: 2129*4kB (UME) 1124*8kB (ME) 107*16kB (ME) 18*32kB (UM) 0*64kB 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 20948kB [ 1341.490961][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1341.525733][T20163] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1341.573305][T20163] Node 1 Normal: 119*4kB (ME) 68*8kB (ME) 47*16kB (UME) 22*32kB (ME) 3*64kB (M) 2*128kB (ME) 1*256kB (E) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26732kB [ 1341.590265][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.618692][T20163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.628297][T20163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.637664][T20163] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.648115][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1341.652908][ T3859] Node 1 Normal free:26732kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:424kB local_pcp:416kB free_cma:0kB [ 1341.683718][T20163] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.693052][T20163] 4445 total pagecache pages [ 1341.697661][T20163] 0 pages in swap cache [ 1341.701810][T20163] Swap cache stats: add 0, delete 0, find 0/0 [ 1341.707935][T20163] Free swap = 0kB [ 1341.711649][T20163] Total swap = 0kB [ 1341.715435][T20163] 1965979 pages RAM [ 1341.719237][T20163] 0 pages HighMem/MovableOnly [ 1341.723973][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1341.728661][ T3859] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 2*4096kB (M) = 10152kB [ 1341.737698][T20163] 349903 pages reserved [ 1341.742598][ T3859] Node 0 DMA32: 2182*4kB (UME) 1129*8kB (UME) 108*16kB (UME) 18*32kB (UM) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 20960kB [ 1341.742674][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1341.742728][ T3859] Node 1 Normal: 119*4kB (ME) 68*8kB (ME) 47*16kB (UME) 22*32kB (ME) 3*64kB (M) 2*128kB (ME) 1*256kB (E) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26732kB [ 1341.742823][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.742834][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.742844][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.742855][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.742861][ T3859] 4445 total pagecache pages [ 1341.742869][ T3859] 0 pages in swap cache [ 1341.742878][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1341.742884][ T3859] Free swap = 0kB [ 1341.742899][ T3859] Total swap = 0kB [ 1341.742905][ T3859] 1965979 pages RAM [ 1341.742911][ T3859] 0 pages HighMem/MovableOnly [ 1341.742917][ T3859] 349903 pages reserved [ 1341.742923][ T3859] 0 pages cma reserved [ 1341.742934][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=17978,uid=0 [ 1341.743032][ T3859] Out of memory: Killed process 17978 (syz-executor.5) total-vm:75112kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1341.782018][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1341.910912][T20163] 0 pages cma reserved [ 1342.001967][ T3859] CPU: 0 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1342.010660][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.020708][ T3859] Call Trace: [ 1342.024004][ T3859] dump_stack+0x18f/0x20d [ 1342.028336][ T3859] dump_header+0x10b/0x7e4 [ 1342.032743][ T3859] oom_kill_process.cold+0x10/0x15 [ 1342.037849][ T3859] out_of_memory+0x326/0x1340 [ 1342.042519][ T3859] ? oom_killer_disable+0x270/0x270 [ 1342.047695][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1342.052449][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1342.059103][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1342.065677][ T3859] ? warn_alloc+0x120/0x120 [ 1342.070172][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1342.075717][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1342.080651][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1342.086021][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1342.092779][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1342.099002][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1342.104354][ T3859] alloc_pages_current+0x187/0x280 [ 1342.109445][ T3859] __page_cache_alloc+0x31e/0x450 [ 1342.114449][ T3859] pagecache_get_page+0x27d/0xe10 [ 1342.119452][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1342.125063][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1342.129821][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1342.134650][ T3859] __do_fault+0x10d/0x4d0 [ 1342.139009][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1342.143929][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1342.149807][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1342.154840][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1342.160364][ T3859] exc_page_fault+0xab/0x170 [ 1342.164933][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1342.169860][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1342.174703][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1342.179104][ T3859] Code: Bad RIP value. [ 1342.183152][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1342.189193][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1342.197145][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1342.205110][ T3859] RBP: 00007ffd902c6780 R08: 0000000000000008 R09: 00007ffd90355080 [ 1342.213062][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1342.221015][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc131a6045 [ 1342.232648][ T3859] Mem-Info: [ 1342.235978][ T3859] active_anon:216079 inactive_anon:4157 isolated_anon:0 [ 1342.235978][ T3859] active_file:14 inactive_file:14 isolated_file:0 [ 1342.235978][ T3859] unevictable:1 dirty:0 writeback:0 [ 1342.235978][ T3859] slab_reclaimable:15708 slab_unreclaimable:118529 [ 1342.235978][ T3859] mapped:53628 shmem:4417 pagetables:8601 bounce:0 [ 1342.235978][ T3859] free:14479 free_pcp:616 free_cma:0 [ 1342.283004][ T3859] Node 0 active_anon:864272kB inactive_anon:16628kB active_file:52kB inactive_file:56kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214512kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 649216kB writeback_tmp:0kB all_unreclaimable? yes [ 1342.315950][ T3859] Node 1 active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1342.352775][ T3859] Node 0 DMA free:10152kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.412255][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1342.418016][ T3859] Node 0 DMA32 free:20780kB min:42060kB low:51036kB high:60012kB reserved_highatomic:0KB active_anon:862224kB inactive_anon:16628kB active_file:52kB inactive_file:56kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18588kB pagetables:34312kB bounce:0kB free_pcp:2232kB local_pcp:756kB free_cma:0kB [ 1342.515358][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1342.520088][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.568071][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1342.576618][ T3859] Node 1 Normal free:26732kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:424kB local_pcp:8kB free_cma:0kB [ 1342.635933][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1342.640679][ T3859] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 2*4096kB (M) = 10152kB [ 1342.665069][ T3859] Node 0 DMA32: 2151*4kB (ME) 1128*8kB (ME) 107*16kB (ME) 17*32kB (M) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 20780kB [ 1342.726809][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1342.761751][ T3859] Node 1 Normal: 119*4kB (ME) 68*8kB (ME) 47*16kB (UME) 22*32kB (ME) 3*64kB (M) 2*128kB (ME) 1*256kB (E) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26732kB [ 1342.837536][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.878185][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1342.902541][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.920489][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1342.931528][ T3859] 4445 total pagecache pages [ 1342.951054][ T3859] 0 pages in swap cache [ 1342.971970][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1342.978072][ T3859] Free swap = 0kB [ 1342.981782][ T3859] Total swap = 0kB [ 1342.991920][ T3859] 1965979 pages RAM [ 1342.995750][ T3859] 0 pages HighMem/MovableOnly [ 1343.000413][ T3859] 349903 pages reserved [ 1343.022029][ T3859] 0 pages cma reserved [ 1343.026137][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=10447,uid=0 [ 1343.043195][ T3859] Out of memory: Killed process 10447 (syz-executor.5) total-vm:75244kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1343.091293][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1343.107822][ T3859] CPU: 1 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1343.116497][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.126547][ T3859] Call Trace: [ 1343.129854][ T3859] dump_stack+0x18f/0x20d [ 1343.134190][ T3859] dump_header+0x10b/0x7e4 [ 1343.138606][ T3859] oom_kill_process.cold+0x10/0x15 [ 1343.143720][ T3859] out_of_memory+0x326/0x1340 [ 1343.148402][ T3859] ? oom_killer_disable+0x270/0x270 [ 1343.153601][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1343.158363][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1343.165072][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1343.171676][ T3859] ? warn_alloc+0x120/0x120 [ 1343.176175][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1343.181724][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1343.186684][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1343.192058][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1343.198819][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1343.205058][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1343.210427][ T3859] alloc_pages_current+0x187/0x280 [ 1343.215535][ T3859] __page_cache_alloc+0x31e/0x450 [ 1343.220559][ T3859] pagecache_get_page+0x27d/0xe10 [ 1343.226451][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1343.232082][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1343.236871][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1343.241733][ T3859] __do_fault+0x10d/0x4d0 [ 1343.246064][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1343.251001][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1343.256907][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1343.261936][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1343.267484][ T3859] exc_page_fault+0xab/0x170 [ 1343.272241][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1343.277189][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1343.282030][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1343.286428][ T3859] Code: Bad RIP value. [ 1343.290485][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1343.296553][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1343.304549][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1343.312514][ T3859] RBP: 00007ffd902c6780 R08: 0000000000000008 R09: 00007ffd90355080 [ 1343.320474][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1343.328434][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc131a6045 [ 1343.347594][ T3859] Mem-Info: [ 1343.350758][ T3859] active_anon:215532 inactive_anon:4157 isolated_anon:0 [ 1343.350758][ T3859] active_file:3 inactive_file:25 isolated_file:0 [ 1343.350758][ T3859] unevictable:1 dirty:0 writeback:0 [ 1343.350758][ T3859] slab_reclaimable:15698 slab_unreclaimable:118746 [ 1343.350758][ T3859] mapped:53628 shmem:4417 pagetables:8586 bounce:0 [ 1343.350758][ T3859] free:14849 free_pcp:624 free_cma:0 [ 1343.398192][ T3859] Node 0 active_anon:862084kB inactive_anon:16628kB active_file:152kB inactive_file:0kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214512kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 647168kB writeback_tmp:0kB all_unreclaimable? yes [ 1343.434590][ T3859] Node 1 active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1343.466646][ T3859] Node 0 DMA free:10152kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.516302][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1343.522993][ T3859] Node 0 DMA32 free:21800kB min:42060kB low:51036kB high:60012kB reserved_highatomic:0KB active_anon:860004kB inactive_anon:16628kB active_file:56kB inactive_file:0kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18576kB pagetables:34292kB bounce:0kB free_pcp:2076kB local_pcp:1316kB free_cma:0kB [ 1343.564092][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1343.568795][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.600252][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1343.605099][ T3859] Node 1 Normal free:26764kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:424kB local_pcp:8kB free_cma:0kB [ 1343.635846][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1343.640547][ T3859] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 2*4096kB (M) = 10152kB [ 1343.654588][ T3859] Node 0 DMA32: 2196*4kB (UME) 1137*8kB (UME) 107*16kB (ME) 17*32kB (M) 1*64kB (U) 0*128kB 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 21224kB [ 1343.669619][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1343.683000][ T3859] Node 1 Normal: 119*4kB (ME) 68*8kB (ME) 47*16kB (UME) 23*32kB (UME) 3*64kB (M) 2*128kB (ME) 1*256kB (E) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26764kB [ 1343.700039][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1343.711419][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1343.720789][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1343.730393][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1343.746019][ T3859] 4445 total pagecache pages [ 1343.750635][ T3859] 0 pages in swap cache [ 1343.756946][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1343.767213][ T3859] Free swap = 0kB [ 1343.770929][ T3859] Total swap = 0kB [ 1343.776812][ T3859] 1965979 pages RAM [ 1343.780615][ T3859] 0 pages HighMem/MovableOnly [ 1343.789475][ T3859] 349903 pages reserved [ 1343.796186][ T3859] 0 pages cma reserved [ 1343.800253][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=12959,uid=0 [ 1343.826715][ T3859] Out of memory: Killed process 12959 (syz-executor.2) total-vm:75244kB, anon-rss:2236kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 01:48:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) 01:48:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:48:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x14000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:48:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0xa3) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r2, @ANYBLOB="00020000056f6e0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 01:48:55 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f86, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:55 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x115, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:48:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:48:55 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f87, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1346.819520][T20206] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1346.838997][T20206] device bond0 left promiscuous mode [ 1346.845869][T20206] device bond_slave_0 left promiscuous mode [ 1346.857011][T20206] device bond_slave_1 left promiscuous mode [ 1346.924478][T20215] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 01:48:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f88, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x0, 0x100, 0x0, 0x3, 0x0, 0x1d84}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x100, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES64, @ANYRES16, @ANYRESOCT, @ANYRES64], 0x1ac) dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$peek(0x1, 0x0, &(0x7f0000000000)) waitid(0x2, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x2) pipe(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffff8}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000300)={0x4, r2}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000140), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') 01:48:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f89, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f8a, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1347.234304][T20224] IPVS: ftp: loaded support on port[0] = 21 [ 1347.302134][ T336] tipc: TX() has been purged, node left! [ 1347.343024][ T336] tipc: TX() has been purged, node left! [ 1347.349201][ T336] tipc: TX() has been purged, node left! 01:48:56 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x116, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:48:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f8b, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x29f8c, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1347.844633][T20258] IPVS: ftp: loaded support on port[0] = 21 [ 1352.999542][ T1151] oom_reaper: reaped process 20207 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 1353.036274][ T6496] cron invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1353.049934][ T6496] CPU: 1 PID: 6496 Comm: cron Not tainted 5.8.0-rc3-syzkaller #0 [ 1353.057662][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.067717][ T6496] Call Trace: [ 1353.071034][ T6496] dump_stack+0x18f/0x20d [ 1353.075371][ T6496] dump_header+0x10b/0x7e4 [ 1353.079797][ T6496] oom_kill_process.cold+0x10/0x15 [ 1353.084916][ T6496] out_of_memory+0x326/0x1340 [ 1353.089603][ T6496] ? oom_killer_disable+0x270/0x270 [ 1353.094809][ T6496] ? mutex_trylock+0x246/0x2c0 [ 1353.099576][ T6496] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1353.106257][ T6496] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1353.112870][ T6496] ? warn_alloc+0x120/0x120 [ 1353.117385][ T6496] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1353.122947][ T6496] ? lock_is_held_type+0xb0/0xe0 [ 1353.127930][ T6496] __alloc_pages_nodemask+0x68f/0x930 [ 1353.133287][ T6496] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1353.140028][ T6496] ? page_cache_readahead_unbounded+0x572/0x850 [ 1353.146264][ T6496] ? __lock_page_or_retry+0x650/0x650 [ 1353.151640][ T6496] alloc_pages_current+0x187/0x280 [ 1353.156758][ T6496] __page_cache_alloc+0x31e/0x450 [ 1353.156986][T20207] syz-executor.5: vmalloc: allocation failure, allocated 4056887296 of 4294975488 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1353.161784][ T6496] pagecache_get_page+0x27d/0xe10 [ 1353.183286][ T6496] ? __do_page_cache_readahead+0xc2/0xf0 [ 1353.188963][ T6496] filemap_fault+0x1a99/0x2ad0 [ 1353.193741][ T6496] ext4_filemap_fault+0x87/0xb6 [ 1353.198591][ T6496] __do_fault+0x10d/0x4d0 [ 1353.202929][ T6496] handle_mm_fault+0x37a3/0x43f0 [ 1353.207872][ T6496] ? apply_to_existing_page_range+0x40/0x40 [ 1353.213786][ T6496] do_user_addr_fault+0x5a2/0xd00 [ 1353.218811][ T6496] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1353.224358][ T6496] exc_page_fault+0xab/0x170 [ 1353.228943][ T6496] ? asm_exc_page_fault+0x8/0x30 [ 1353.233874][ T6496] asm_exc_page_fault+0x1e/0x30 [ 1353.238718][ T6496] RIP: 0033:0x7f8e4cc50270 [ 1353.243119][ T6496] Code: Bad RIP value. [ 1353.247177][ T6496] RSP: 002b:00007ffc6a6b2bb8 EFLAGS: 00010246 [ 1353.253232][ T6496] RAX: 0000000000000000 RBX: fffffffffffffeb0 RCX: 00007f8e4cc50270 [ 1353.261195][ T6496] RDX: 00007ffc6a785080 RSI: 00007ffc6a6b2bc0 RDI: 00007ffc6a6b2bc0 [ 1353.269181][ T6496] RBP: 0000000000000002 R08: 0000000000000002 R09: 0000000000000000 [ 1353.277148][ T6496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1353.285130][ T6496] R13: 00007ffc6a6b2d10 R14: 0000000000000000 R15: 0000000000000000 [ 1353.293126][T20207] CPU: 0 PID: 20207 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1353.301804][T20207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.311854][T20207] Call Trace: [ 1353.315146][T20207] dump_stack+0x18f/0x20d [ 1353.319482][T20207] warn_alloc.cold+0x87/0x17a [ 1353.324159][T20207] ? mark_held_locks+0x9f/0xe0 [ 1353.328924][T20207] ? zone_watermark_ok_safe+0x260/0x260 [ 1353.334476][T20207] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1353.339070][ T6496] Mem-Info: [ 1353.340635][T20207] __vmalloc_area_node+0x49e/0x7a0 [ 1353.343769][ T6496] active_anon:215530 inactive_anon:4157 isolated_anon:0 [ 1353.343769][ T6496] active_file:15 inactive_file:11 isolated_file:0 [ 1353.343769][ T6496] unevictable:1 dirty:0 writeback:5 [ 1353.343769][ T6496] slab_reclaimable:15645 slab_unreclaimable:117434 [ 1353.343769][ T6496] mapped:53664 shmem:4417 pagetables:8597 bounce:0 [ 1353.343769][ T6496] free:18124 free_pcp:186 free_cma:0 [ 1353.348824][T20207] ? ip_set_alloc+0x48/0x60 [ 1353.385309][ T6496] Node 0 active_anon:862076kB inactive_anon:16628kB active_file:56kB inactive_file:44kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214656kB dirty:0kB writeback:16kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 647168kB writeback_tmp:0kB all_unreclaimable? no [ 1353.389740][T20207] ? ip_set_alloc+0x48/0x60 [ 1353.417199][ T6496] Node 1 active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:4kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1353.421632][T20207] vzalloc+0x116/0x1a0 [ 1353.446988][ T6496] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.451020][T20207] ip_set_alloc+0x48/0x60 [ 1353.480190][ T6496] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1353.484481][T20207] hash_netnet_create+0x401/0xd70 [ 1353.484501][T20207] ? hash_netnet6_head+0xcd0/0xcd0 [ 1353.484523][T20207] ip_set_create+0x6a2/0x13c0 [ 1353.490220][ T6496] Node 0 DMA32 free:35704kB min:35916kB low:44892kB high:53868kB reserved_highatomic:0KB active_anon:860028kB inactive_anon:16628kB active_file:56kB inactive_file:44kB unevictable:4kB writepending:16kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18576kB pagetables:34296kB bounce:0kB free_pcp:496kB local_pcp:0kB free_cma:0kB [ 1353.495230][T20207] ? ip_set_sockfn_get+0xe00/0xe00 [ 1353.495272][T20207] ? lock_is_held_type+0xb0/0xe0 [ 1353.500349][ T6496] lowmem_reserve[]: 0 0 0 0 0 [ 1353.505016][T20207] ? ip_set_sockfn_get+0xe00/0xe00 [ 1353.505034][T20207] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1353.505063][T20207] ? nfnetlink_rcv+0x420/0x420 [ 1353.536948][ T6496] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.542004][T20207] ? is_bpf_text_address+0xcb/0x160 [ 1353.542035][T20207] ? __lock_acquire+0xc1e/0x56e0 [ 1353.546943][ T6496] lowmem_reserve[]: 0 0 0 0 0 [ 1353.551616][T20207] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1353.556729][ T6496] Node 1 Normal free:26620kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1353.561622][T20207] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1353.566379][ T6496] lowmem_reserve[]: 0 0 0 0 0 [ 1353.594378][T20207] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1353.594398][T20207] netlink_rcv_skb+0x15a/0x430 [ 1353.594418][T20207] ? nfnetlink_rcv+0x420/0x420 [ 1353.599610][ T6496] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 2*4096kB (M) = 10172kB [ 1353.604539][T20207] ? netlink_ack+0xa10/0xa10 [ 1353.604564][T20207] ? ns_capable+0xde/0x100 [ 1353.604585][T20207] nfnetlink_rcv+0x1ac/0x420 [ 1353.609248][ T6496] Node 0 DMA32: 3410*4kB (UME) 1682*8kB (ME) 245*16kB (UME) 102*32kB (UME) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35368kB [ 1353.615209][T20207] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1353.615231][T20207] netlink_unicast+0x533/0x7d0 [ 1353.615249][T20207] ? netlink_attachskb+0x810/0x810 [ 1353.645755][ T6496] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1353.651697][T20207] ? _copy_from_iter_full+0x247/0x890 [ 1353.656367][ T6496] Node 1 Normal: 133*4kB (ME) 67*8kB (UME) 47*16kB (UME) 21*32kB (UME) 5*64kB (UM) 4*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26620kB [ 1353.662214][T20207] ? __phys_addr+0x9a/0x110 [ 1353.662229][T20207] ? __phys_addr_symbol+0x2c/0x70 [ 1353.662250][T20207] ? __check_object_size+0x171/0x3e4 [ 1353.667006][ T6496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.671765][T20207] netlink_sendmsg+0x856/0xd90 [ 1353.686387][ T6496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1353.690913][T20207] ? netlink_unicast+0x7d0/0x7d0 [ 1353.695325][ T6496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.699877][T20207] ? netlink_unicast+0x7d0/0x7d0 [ 1353.714884][ T6496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1353.720301][T20207] sock_sendmsg+0xcf/0x120 [ 1353.725052][ T6496] 4443 total pagecache pages [ 1353.730127][T20207] ____sys_sendmsg+0x6e8/0x810 [ 1353.741498][ T6496] 0 pages in swap cache [ 1353.746836][T20207] ? kernel_sendmsg+0x50/0x50 [ 1353.746855][T20207] ? do_recvmmsg+0x6d0/0x6d0 [ 1353.763768][ T6496] Swap cache stats: add 0, delete 0, find 0/0 [ 1353.768239][T20207] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1353.773267][ T6496] Free swap = 0kB [ 1353.778517][T20207] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1353.788042][ T6496] Total swap = 0kB [ 1353.792763][T20207] ? __lock_acquire+0xc1e/0x56e0 [ 1353.792782][T20207] ___sys_sendmsg+0xf3/0x170 [ 1353.792799][T20207] ? sendmsg_copy_msghdr+0x160/0x160 [ 1353.802071][ T6496] 1965979 pages RAM [ 1353.806975][T20207] ? __fget_files+0x272/0x400 [ 1353.816519][ T6496] 0 pages HighMem/MovableOnly [ 1353.821422][T20207] ? lock_downgrade+0x820/0x820 [ 1353.830689][ T6496] 349903 pages reserved [ 1353.835060][T20207] ? find_held_lock+0x2d/0x110 [ 1353.835076][T20207] ? __might_fault+0x11f/0x1d0 [ 1353.835097][T20207] ? __fget_files+0x294/0x400 [ 1353.839655][ T6496] 0 pages cma reserved [ 1353.844400][T20207] ? __fget_light+0xea/0x280 [ 1353.844426][T20207] __sys_sendmsg+0xe5/0x1b0 [ 1353.848555][ T6496] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=4426,uid=0 [ 1353.853229][T20207] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1353.853245][T20207] ? __x64_sys_futex+0x382/0x4e0 [ 1353.853270][T20207] ? do_syscall_64+0x1c/0xe0 [ 1353.857895][ T6496] Out of memory: Killed process 4426 (syz-executor.3) total-vm:75112kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1353.863876][T20207] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1353.863896][T20207] do_syscall_64+0x60/0xe0 [ 1353.863915][T20207] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1353.871215][ T1151] oom_reaper: reaped process 4426 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1353.873566][T20207] RIP: 0033:0x45cb29 [ 1353.873572][T20207] Code: Bad RIP value. [ 1353.873579][T20207] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1353.873593][T20207] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1353.873607][T20207] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1354.055465][T20207] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1354.063438][T20207] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1354.071415][T20207] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1354.088863][T20207] Mem-Info: [ 1354.092069][T20207] active_anon:214986 inactive_anon:4157 isolated_anon:0 [ 1354.092069][T20207] active_file:301 inactive_file:259 isolated_file:0 [ 1354.092069][T20207] unevictable:1 dirty:0 writeback:5 [ 1354.092069][T20207] slab_reclaimable:15645 slab_unreclaimable:117304 [ 1354.092069][T20207] mapped:54114 shmem:4417 pagetables:8597 bounce:0 [ 1354.092069][T20207] free:18195 free_pcp:244 free_cma:0 [ 1354.128915][T20207] Node 0 active_anon:859876kB inactive_anon:16628kB active_file:608kB inactive_file:560kB unevictable:4kB isolated(anon):0kB isolated(file):68kB mapped:215700kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 643072kB writeback_tmp:0kB all_unreclaimable? no [ 1354.156717][T20207] Node 1 active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1354.191957][T20207] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1354.261929][T20207] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1354.268015][T20207] Node 0 DMA32 free:36816kB min:35916kB low:44892kB high:53868kB reserved_highatomic:0KB active_anon:857828kB inactive_anon:16628kB active_file:404kB inactive_file:880kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18544kB pagetables:34184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1354.341934][T20207] lowmem_reserve[]: 0 0 0 0 0 [ 1354.346655][T20207] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1354.401964][T20207] lowmem_reserve[]: 0 0 0 0 0 [ 1354.406693][T20207] Node 1 Normal free:26868kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1354.438486][T20207] lowmem_reserve[]: 0 0 0 0 0 [ 1354.443929][T20207] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 2*4096kB (M) = 10172kB [ 1354.459748][T20207] Node 0 DMA32: 3208*4kB (ME) 1686*8kB (UME) 242*16kB (UME) 100*32kB (UME) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 36528kB [ 1354.476295][T20207] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1354.488700][T20207] Node 1 Normal: 135*4kB (ME) 66*8kB (ME) 47*16kB (UME) 22*32kB (UME) 5*64kB (UM) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26908kB [ 1354.512013][T20207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1354.521928][T20207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1354.531231][T20207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1354.541337][T20207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1354.556184][T20207] 4882 total pagecache pages [ 1354.564089][T20207] 0 pages in swap cache [ 1354.570251][T20207] Swap cache stats: add 0, delete 0, find 0/0 [ 1354.576383][T20207] Free swap = 0kB [ 1354.580098][T20207] Total swap = 0kB [ 1354.583859][T20207] 1965979 pages RAM [ 1354.587656][T20207] 0 pages HighMem/MovableOnly [ 1354.592362][T20207] 349903 pages reserved [ 1354.596531][T20207] 0 pages cma reserved [ 1355.470488][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1355.481675][ T3859] CPU: 0 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1355.490341][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1355.500392][ T3859] Call Trace: [ 1355.503687][ T3859] dump_stack+0x18f/0x20d [ 1355.508019][ T3859] dump_header+0x10b/0x7e4 [ 1355.512439][ T3859] oom_kill_process.cold+0x10/0x15 [ 1355.517560][ T3859] out_of_memory+0x326/0x1340 [ 1355.522267][ T3859] ? oom_killer_disable+0x270/0x270 [ 1355.527491][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1355.532286][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1355.538973][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1355.545598][ T3859] ? warn_alloc+0x120/0x120 [ 1355.550100][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1355.555652][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1355.560595][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1355.565968][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1355.572730][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1355.578970][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1355.584337][ T3859] alloc_pages_current+0x187/0x280 [ 1355.589449][ T3859] __page_cache_alloc+0x31e/0x450 [ 1355.594473][ T3859] pagecache_get_page+0x27d/0xe10 [ 1355.599496][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1355.605124][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1355.609892][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1355.614737][ T3859] __do_fault+0x10d/0x4d0 [ 1355.619064][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1355.624003][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1355.629920][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1355.634951][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1355.640503][ T3859] exc_page_fault+0xab/0x170 [ 1355.645121][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1355.650051][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1355.654924][ T3859] RIP: 0033:0x7f4b4d742b80 [ 1355.659346][ T3859] Code: Bad RIP value. [ 1355.663406][ T3859] RSP: 002b:00007ffd902c3718 EFLAGS: 00010293 [ 1355.669468][ T3859] RAX: 0000000000000007 RBX: 00000000000000d0 RCX: 00000000000000f0 [ 1355.677444][ T3859] RDX: 000000000057c1d7 RSI: 00007ffd902c3720 RDI: 0000000000000001 [ 1355.685413][ T3859] RBP: 0000000000000003 R08: 0000000000800000 R09: 0000000000000010 [ 1355.693381][ T3859] R10: b244d776dc1e9ddf R11: e7e58db85f5177e9 R12: 0000558d09127e80 [ 1355.701373][ T3859] R13: 00007ffd902c3870 R14: 00007ffd902c3868 R15: 000000005101bddf [ 1355.710755][ T3859] Mem-Info: [ 1355.714000][ T3859] active_anon:214982 inactive_anon:4157 isolated_anon:0 [ 1355.714000][ T3859] active_file:16 inactive_file:16 isolated_file:0 [ 1355.714000][ T3859] unevictable:1 dirty:0 writeback:0 [ 1355.714000][ T3859] slab_reclaimable:15641 slab_unreclaimable:117903 [ 1355.714000][ T3859] mapped:53670 shmem:4417 pagetables:8569 bounce:0 [ 1355.714000][ T3859] free:18276 free_pcp:89 free_cma:0 [ 1355.750643][ T3859] Node 0 active_anon:859884kB inactive_anon:16628kB active_file:64kB inactive_file:60kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214680kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 643072kB writeback_tmp:0kB all_unreclaimable? yes [ 1355.784376][ T3859] Node 1 active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1355.816050][ T3859] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1355.846275][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1355.852069][ T3859] Node 0 DMA32 free:35608kB min:40012kB low:48988kB high:57964kB reserved_highatomic:0KB active_anon:857836kB inactive_anon:16628kB active_file:64kB inactive_file:60kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18544kB pagetables:34184kB bounce:0kB free_pcp:356kB local_pcp:0kB free_cma:0kB [ 1355.888125][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1355.892891][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1355.936829][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1355.941531][ T3859] Node 1 Normal free:26908kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1355.987996][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1355.998675][ T3859] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 2*4096kB (M) = 10172kB [ 1356.030713][ T3859] Node 0 DMA32: 3412*4kB (UME) 1651*8kB (UME) 227*16kB (ME) 92*32kB (UME) 11*64kB (M) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34264kB [ 1356.049997][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1356.061454][ T3859] Node 1 Normal: 135*4kB (ME) 66*8kB (ME) 47*16kB (UME) 22*32kB (UME) 5*64kB (UM) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26908kB [ 1356.095853][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1356.109496][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1356.119645][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1356.149397][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1356.195227][ T3859] 4449 total pagecache pages [ 1356.199886][ T3859] 0 pages in swap cache [ 1356.221073][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1356.227901][ T3859] Free swap = 0kB [ 1356.231650][ T3859] Total swap = 0kB [ 1356.256868][ T3859] 1965979 pages RAM [ 1356.260736][ T3859] 0 pages HighMem/MovableOnly [ 1356.278699][ T3859] 349903 pages reserved [ 1356.282959][ T3859] 0 pages cma reserved [ 1356.287020][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=19621,uid=0 [ 1356.322088][ T3859] Out of memory: Killed process 19621 (syz-executor.3) total-vm:75244kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 01:49:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x15000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:49:08 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x201, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5008, 0x0) r1 = socket(0x11, 0x800000003, 0x81) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x2, 0x7, 0x9, 0x8000}, 0x8) 01:49:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:49:08 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x117, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:49:08 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x33fe0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:49:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:49:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:49:08 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x34000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:49:08 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x3ffff, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:49:08 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x10005, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f00000001c0)={{0x0, 0x0, 0x80}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0x11300, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) 01:49:08 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x40000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:49:08 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x400300, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1359.682012][ T336] tipc: TX() has been purged, node left! [ 1359.842579][ T336] tipc: TX() has been purged, node left! 01:49:09 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x118, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:49:09 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r3, 0x0, r5, 0x0, 0x10005, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8000000000000000) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x2) r6 = dup3(r0, r2, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1365.503390][ T1151] oom_reaper: reaped process 20296 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 1365.575959][ T6825] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1365.611977][ T6825] CPU: 1 PID: 6825 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1365.620234][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1365.630291][ T6825] Call Trace: [ 1365.633599][ T6825] dump_stack+0x18f/0x20d [ 1365.637962][ T6825] dump_header+0x10b/0x7e4 [ 1365.642382][ T6825] oom_kill_process.cold+0x10/0x15 [ 1365.647497][ T6825] out_of_memory+0x326/0x1340 [ 1365.652182][ T6825] ? oom_killer_disable+0x270/0x270 [ 1365.657385][ T6825] ? mutex_trylock+0x246/0x2c0 [ 1365.662149][ T6825] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1365.668827][ T6825] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1365.675440][ T6825] ? warn_alloc+0x120/0x120 [ 1365.679970][ T6825] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1365.685522][ T6825] ? lock_is_held_type+0xb0/0xe0 [ 1365.690489][ T6825] __alloc_pages_nodemask+0x68f/0x930 [ 1365.695864][ T6825] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1365.702606][ T6825] ? page_cache_readahead_unbounded+0x572/0x850 [ 1365.708862][ T6825] ? __lock_page_or_retry+0x650/0x650 [ 1365.714243][ T6825] alloc_pages_current+0x187/0x280 [ 1365.719345][ T6825] __page_cache_alloc+0x31e/0x450 [ 1365.724466][ T6825] pagecache_get_page+0x27d/0xe10 [ 1365.729466][ T6825] ? __do_page_cache_readahead+0xc2/0xf0 [ 1365.735074][ T6825] filemap_fault+0x1a99/0x2ad0 [ 1365.739816][ T6825] ext4_filemap_fault+0x87/0xb6 [ 1365.744660][ T6825] __do_fault+0x10d/0x4d0 [ 1365.748964][ T6825] handle_mm_fault+0x37a3/0x43f0 [ 1365.753900][ T6825] ? apply_to_existing_page_range+0x40/0x40 [ 1365.759777][ T6825] do_user_addr_fault+0x5a2/0xd00 [ 1365.764783][ T6825] exc_page_fault+0xab/0x170 [ 1365.769346][ T6825] ? asm_exc_page_fault+0x8/0x30 [ 1365.774257][ T6825] asm_exc_page_fault+0x1e/0x30 [ 1365.779081][ T6825] RIP: 0033:0x41311b [ 1365.782946][ T6825] Code: Bad RIP value. [ 1365.786983][ T6825] RSP: 002b:000000c0002ada50 EFLAGS: 00010246 [ 1365.793038][ T6825] RAX: 00000000008a60e0 RBX: 0000000000000004 RCX: 00000000008edb60 [ 1365.800985][ T6825] RDX: 000000c0002ada60 RSI: 000000c0002adac8 RDI: 0000000000000001 [ 1365.808949][ T6825] RBP: 000000c0002adaa8 R08: 00000000009500cf R09: 0000000000203001 [ 1365.816983][ T6825] R10: 0000000000000004 R11: 0000000000000032 R12: 00000000000000f2 [ 1365.824945][ T6825] R13: 0000000000000000 R14: 0000000000adc68f R15: 0000000000000000 [ 1365.835547][ T6825] Mem-Info: [ 1365.838694][ T6825] active_anon:214440 inactive_anon:4157 isolated_anon:0 [ 1365.838694][ T6825] active_file:4 inactive_file:30 isolated_file:0 [ 1365.838694][ T6825] unevictable:1 dirty:0 writeback:0 [ 1365.838694][ T6825] slab_reclaimable:15629 slab_unreclaimable:115172 [ 1365.838694][ T6825] mapped:53693 shmem:4417 pagetables:8543 bounce:0 [ 1365.838694][ T6825] free:17803 free_pcp:145 free_cma:0 [ 1365.844648][T20296] syz-executor.5: vmalloc: allocation failure, allocated 4072067072 of 4294975488 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1365.913644][T20296] CPU: 0 PID: 20296 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1365.922346][T20296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1365.932399][T20296] Call Trace: [ 1365.935693][T20296] dump_stack+0x18f/0x20d [ 1365.940028][T20296] warn_alloc.cold+0x87/0x17a [ 1365.944730][T20296] ? zone_watermark_ok_safe+0x260/0x260 [ 1365.950310][T20296] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1365.956490][T20296] __vmalloc_area_node+0x49e/0x7a0 [ 1365.961607][T20296] ? ip_set_alloc+0x48/0x60 [ 1365.966106][T20296] ? ip_set_alloc+0x48/0x60 [ 1365.970613][T20296] vzalloc+0x116/0x1a0 [ 1365.974710][T20296] ip_set_alloc+0x48/0x60 [ 1365.979042][T20296] hash_netnet_create+0x401/0xd70 [ 1365.984089][T20296] ? hash_netnet6_head+0xcd0/0xcd0 [ 1365.989203][T20296] ip_set_create+0x6a2/0x13c0 [ 1365.993045][ T6825] Node 0 active_anon:857712kB inactive_anon:16628kB active_file:16kB inactive_file:116kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214772kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 643072kB writeback_tmp:0kB all_unreclaimable? yes [ 1365.993883][T20296] ? ip_set_sockfn_get+0xe00/0xe00 [ 1366.026536][T20296] ? lock_is_held_type+0xb0/0xe0 [ 1366.026693][ T6825] Node 1 active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1366.031482][T20296] ? ip_set_sockfn_get+0xe00/0xe00 [ 1366.061936][T20296] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1366.066892][T20296] ? nfnetlink_rcv+0x420/0x420 [ 1366.071658][T20296] ? is_bpf_text_address+0xcb/0x160 [ 1366.076866][T20296] ? __lock_acquire+0xc1e/0x56e0 [ 1366.081813][T20296] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1366.087069][ T6825] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1366.087795][T20296] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1366.122661][T20296] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1366.128560][T20296] netlink_rcv_skb+0x15a/0x430 [ 1366.133325][T20296] ? nfnetlink_rcv+0x420/0x420 [ 1366.138092][T20296] ? netlink_ack+0xa10/0xa10 [ 1366.142689][T20296] ? ns_capable+0xde/0x100 [ 1366.146969][ T6825] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1366.147103][T20296] nfnetlink_rcv+0x1ac/0x420 [ 1366.152887][ T6825] Node 0 DMA32 free:33248kB min:37964kB low:46940kB high:55916kB reserved_highatomic:0KB active_anon:857712kB inactive_anon:16628kB active_file:16kB inactive_file:116kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18480kB pagetables:34080kB bounce:0kB free_pcp:256kB local_pcp:248kB free_cma:0kB [ 1366.157399][T20296] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1366.194841][T20296] netlink_unicast+0x533/0x7d0 [ 1366.199610][T20296] ? netlink_attachskb+0x810/0x810 [ 1366.204718][T20296] ? _copy_from_iter_full+0x247/0x890 [ 1366.210108][T20296] ? __phys_addr+0x9a/0x110 [ 1366.214609][T20296] ? __phys_addr_symbol+0x2c/0x70 [ 1366.219632][T20296] ? __check_object_size+0x171/0x3e4 [ 1366.221081][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1366.224915][T20296] netlink_sendmsg+0x856/0xd90 [ 1366.224935][T20296] ? netlink_unicast+0x7d0/0x7d0 [ 1366.224956][T20296] ? netlink_unicast+0x7d0/0x7d0 [ 1366.224973][T20296] sock_sendmsg+0xcf/0x120 [ 1366.224990][T20296] ____sys_sendmsg+0x6e8/0x810 [ 1366.225010][T20296] ? kernel_sendmsg+0x50/0x50 [ 1366.229666][ T6825] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1366.234407][T20296] ? do_recvmmsg+0x6d0/0x6d0 [ 1366.234427][T20296] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1366.234445][T20296] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1366.234462][T20296] ___sys_sendmsg+0xf3/0x170 [ 1366.234479][T20296] ? sendmsg_copy_msghdr+0x160/0x160 [ 1366.266288][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1366.286144][T20296] ? __fget_files+0x272/0x400 [ 1366.286163][T20296] ? lock_downgrade+0x820/0x820 [ 1366.286174][T20296] ? find_held_lock+0x2d/0x110 [ 1366.286188][T20296] ? __might_fault+0x11f/0x1d0 [ 1366.286206][T20296] ? __fget_files+0x294/0x400 [ 1366.286223][T20296] ? __fget_light+0xea/0x280 [ 1366.286243][T20296] __sys_sendmsg+0xe5/0x1b0 [ 1366.286258][T20296] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1366.286273][T20296] ? __x64_sys_futex+0x382/0x4e0 [ 1366.286298][T20296] ? do_syscall_64+0x1c/0xe0 [ 1366.311610][ T6825] Node 1 Normal free:26784kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:324kB local_pcp:76kB free_cma:0kB [ 1366.312633][T20296] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1366.312655][T20296] do_syscall_64+0x60/0xe0 [ 1366.312672][T20296] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1366.312685][T20296] RIP: 0033:0x45cb29 [ 1366.312691][T20296] Code: Bad RIP value. [ 1366.312698][T20296] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1366.341002][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1366.345557][T20296] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1366.345566][T20296] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1366.345574][T20296] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1366.345582][T20296] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1366.345590][T20296] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1366.367652][T20296] Mem-Info: [ 1366.429329][ T6825] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10172kB [ 1366.457943][T20296] active_anon:214440 inactive_anon:4157 isolated_anon:0 [ 1366.457943][T20296] active_file:4 inactive_file:30 isolated_file:0 [ 1366.457943][T20296] unevictable:1 dirty:0 writeback:0 [ 1366.457943][T20296] slab_reclaimable:15629 slab_unreclaimable:115822 [ 1366.457943][T20296] mapped:53693 shmem:4417 pagetables:8543 bounce:0 [ 1366.457943][T20296] free:17169 free_pcp:145 free_cma:0 [ 1366.499158][ T6825] Node 0 DMA32: 3420*4kB (UME) 1546*8kB (UME) 175*16kB (ME) 69*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 31056kB [ 1366.547669][T20296] Node 0 active_anon:857696kB inactive_anon:16628kB active_file:20kB inactive_file:16kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214772kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 641024kB writeback_tmp:0kB all_unreclaimable? yes [ 1366.576222][T20296] Node 1 active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1366.601697][T20296] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1366.602136][ T6825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1366.641114][T20296] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1366.662658][ T6825] Node 1 Normal: 127*4kB (ME) 67*8kB (ME) 47*16kB (ME) 20*32kB (UME) 5*64kB (UM) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26820kB [ 1366.676872][T20296] Node 0 DMA32 free:30432kB min:50252kB low:59228kB high:68204kB reserved_highatomic:0KB active_anon:857696kB inactive_anon:16628kB active_file:20kB inactive_file:16kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18480kB pagetables:34076kB bounce:0kB free_pcp:284kB local_pcp:36kB free_cma:0kB [ 1366.702100][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1366.737255][T20296] lowmem_reserve[]: 0 0 0 0 0 [ 1366.747724][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1366.748122][T20296] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1366.757155][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1366.757167][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1366.757173][ T6825] 4427 total pagecache pages [ 1366.757181][ T6825] 0 pages in swap cache [ 1366.757189][ T6825] Swap cache stats: add 0, delete 0, find 0/0 [ 1366.757195][ T6825] Free swap = 0kB [ 1366.757200][ T6825] Total swap = 0kB [ 1366.757208][ T6825] 1965979 pages RAM [ 1366.757221][ T6825] 0 pages HighMem/MovableOnly [ 1366.801492][T20296] lowmem_reserve[]: 0 0 0 0 0 [ 1366.865890][T20296] Node 1 Normal free:26820kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:324kB local_pcp:76kB free_cma:0kB [ 1366.866340][ T6825] 349903 pages reserved [ 1366.916783][ T6825] 0 pages cma reserved [ 1366.920869][ T6825] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=8599,uid=0 [ 1366.921523][T20296] lowmem_reserve[]: 0 0 0 0 0 [ 1366.946558][T20296] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10172kB [ 1366.949918][ T6825] Out of memory: Killed process 8599 (syz-executor.3) total-vm:75244kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1366.989113][ T1151] oom_reaper: reaped process 8599 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1367.050818][T20296] Node 0 DMA32: 3420*4kB (UME) 1400*8kB (UME) 136*16kB (ME) 53*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 30800kB [ 1367.059802][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1367.075033][T20296] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1367.111631][T20296] Node 1 Normal: 127*4kB (ME) 67*8kB (ME) 47*16kB (ME) 20*32kB (UME) 5*64kB (UM) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26820kB [ 1367.124907][ T3859] CPU: 1 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1367.137267][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1367.137762][T20296] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1367.147318][ T3859] Call Trace: [ 1367.147343][ T3859] dump_stack+0x18f/0x20d [ 1367.147362][ T3859] dump_header+0x10b/0x7e4 [ 1367.147380][ T3859] oom_kill_process.cold+0x10/0x15 [ 1367.156941][T20296] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1367.160202][ T3859] out_of_memory+0x326/0x1340 [ 1367.164536][T20296] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1367.168912][ T3859] ? oom_killer_disable+0x270/0x270 [ 1367.174024][T20296] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1367.183254][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1367.183271][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1367.183292][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1367.187946][T20296] 4427 total pagecache pages [ 1367.197520][ T3859] ? warn_alloc+0x120/0x120 [ 1367.197537][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1367.197561][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1367.202774][T20296] 0 pages in swap cache [ 1367.212007][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1367.212036][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1367.212056][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1367.216797][T20296] Swap cache stats: add 0, delete 0, find 0/0 [ 1367.223456][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1367.223473][ T3859] alloc_pages_current+0x187/0x280 [ 1367.223495][ T3859] __page_cache_alloc+0x31e/0x450 [ 1367.230058][T20296] Free swap = 0kB [ 1367.234723][ T3859] pagecache_get_page+0x27d/0xe10 [ 1367.234740][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1367.234758][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1367.239233][T20296] Total swap = 0kB [ 1367.244776][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1367.244791][ T3859] __do_fault+0x10d/0x4d0 [ 1367.244809][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1367.249719][T20296] 1965979 pages RAM [ 1367.253869][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1367.253902][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1367.259248][T20296] 0 pages HighMem/MovableOnly [ 1367.266017][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1367.266036][ T3859] exc_page_fault+0xab/0x170 [ 1367.266057][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1367.272312][T20296] 349903 pages reserved [ 1367.278353][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1367.283724][T20296] 0 pages cma reserved [ 1367.288786][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1367.382260][ T3859] Code: Bad RIP value. [ 1367.386316][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1367.392377][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1367.400342][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1367.408309][ T3859] RBP: 00007ffd902c6780 R08: 0000000000000008 R09: 00007ffd90355080 [ 1367.416300][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1367.424268][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc14aaeab4 [ 1367.641610][ T3859] Mem-Info: [ 1367.685918][ T3859] active_anon:213884 inactive_anon:4157 isolated_anon:0 [ 1367.685918][ T3859] active_file:5 inactive_file:5 isolated_file:0 [ 1367.685918][ T3859] unevictable:1 dirty:0 writeback:0 [ 1367.685918][ T3859] slab_reclaimable:15626 slab_unreclaimable:115686 [ 1367.685918][ T3859] mapped:53693 shmem:4417 pagetables:8515 bounce:0 [ 1367.685918][ T3859] free:17810 free_pcp:235 free_cma:0 [ 1367.825317][ T3859] Node 0 active_anon:855492kB inactive_anon:16628kB active_file:120kB inactive_file:0kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214772kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 638976kB writeback_tmp:0kB all_unreclaimable? yes [ 1367.858821][ T3859] Node 1 active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1367.912005][ T3859] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1367.981937][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1367.987700][ T3859] Node 0 DMA32 free:34144kB min:58444kB low:67420kB high:76396kB reserved_highatomic:0KB active_anon:855492kB inactive_anon:16628kB active_file:120kB inactive_file:0kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18448kB pagetables:33968kB bounce:0kB free_pcp:616kB local_pcp:36kB free_cma:0kB [ 1368.080151][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1368.094890][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1368.190233][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1368.208213][ T3859] Node 1 Normal free:26820kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:324kB local_pcp:248kB free_cma:0kB [ 1368.250584][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1368.255351][ T3859] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10172kB [ 1368.301938][ T3859] Node 0 DMA32: 3420*4kB (UME) 1400*8kB (UME) 137*16kB (UME) 51*32kB (M) 1*64kB (U) 7*128kB (U) 4*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 32224kB [ 1368.323758][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1368.361936][ T3859] Node 1 Normal: 127*4kB (ME) 67*8kB (ME) 47*16kB (ME) 20*32kB (UME) 5*64kB (UM) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26820kB [ 1368.435361][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1368.449630][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1368.500147][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1368.533074][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1368.565032][ T3859] 4427 total pagecache pages [ 1368.569618][ T3859] 0 pages in swap cache [ 1368.573870][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1368.579947][ T3859] Free swap = 0kB [ 1368.608205][ T3859] Total swap = 0kB [ 1368.625540][ T3859] 1965979 pages RAM [ 1368.629366][ T3859] 0 pages HighMem/MovableOnly [ 1368.665665][ T3859] 349903 pages reserved [ 1368.669847][ T3859] 0 pages cma reserved [ 1368.681836][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=20258,uid=0 [ 1368.751387][ T3859] Out of memory: Killed process 20258 (syz-executor.1) total-vm:75112kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1368.813938][ T6824] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1368.862000][ T6824] CPU: 1 PID: 6824 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1368.870261][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1368.880302][ T6824] Call Trace: [ 1368.883574][ T6824] dump_stack+0x18f/0x20d [ 1368.887881][ T6824] dump_header+0x10b/0x7e4 [ 1368.892275][ T6824] oom_kill_process.cold+0x10/0x15 [ 1368.897363][ T6824] out_of_memory+0x326/0x1340 [ 1368.902020][ T6824] ? oom_killer_disable+0x270/0x270 [ 1368.907225][ T6824] ? mutex_trylock+0x246/0x2c0 [ 1368.911967][ T6824] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1368.918619][ T6824] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1368.925224][ T6824] ? warn_alloc+0x120/0x120 [ 1368.929724][ T6824] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1368.935250][ T6824] ? lock_is_held_type+0xb0/0xe0 [ 1368.940165][ T6824] __alloc_pages_nodemask+0x68f/0x930 [ 1368.945558][ T6824] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1368.952326][ T6824] ? page_cache_readahead_unbounded+0x572/0x850 [ 1368.958556][ T6824] ? __lock_page_or_retry+0x650/0x650 [ 1368.963919][ T6824] alloc_pages_current+0x187/0x280 [ 1368.969004][ T6824] __page_cache_alloc+0x31e/0x450 [ 1368.974031][ T6824] pagecache_get_page+0x27d/0xe10 [ 1368.979044][ T6824] ? __do_page_cache_readahead+0xc2/0xf0 [ 1368.984664][ T6824] filemap_fault+0x1a99/0x2ad0 [ 1368.989408][ T6824] ext4_filemap_fault+0x87/0xb6 [ 1368.994235][ T6824] __do_fault+0x10d/0x4d0 [ 1368.998541][ T6824] handle_mm_fault+0x37a3/0x43f0 [ 1369.003469][ T6824] ? apply_to_existing_page_range+0x40/0x40 [ 1369.009345][ T6824] do_user_addr_fault+0x5a2/0xd00 [ 1369.014362][ T6824] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1369.019888][ T6824] exc_page_fault+0xab/0x170 [ 1369.024455][ T6824] ? asm_exc_page_fault+0x8/0x30 [ 1369.029365][ T6824] asm_exc_page_fault+0x1e/0x30 [ 1369.034188][ T6824] RIP: 0033:0x40ad5e [ 1369.038064][ T6824] Code: Bad RIP value. [ 1369.042103][ T6824] RSP: 002b:000000c00003bef8 EFLAGS: 00010216 [ 1369.048140][ T6824] RAX: ffffffffffffff92 RBX: 000000003b986722 RCX: 0000000000460c23 [ 1369.056100][ T6824] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703ac0 [ 1369.064060][ T6824] RBP: 000000c00003bef0 R08: 0000000000000000 R09: 0000000000000000 [ 1369.072006][ T6824] R10: 000000c00003bed8 R11: 0000000000000206 R12: 0000014a70c52d08 [ 1369.079963][ T6824] R13: 0000000000000001 R14: 0000014a70c52d08 R15: 0000000000000000 [ 1369.123420][ T6824] Mem-Info: [ 1369.126577][ T6824] active_anon:213343 inactive_anon:4157 isolated_anon:0 [ 1369.126577][ T6824] active_file:12 inactive_file:0 isolated_file:0 [ 1369.126577][ T6824] unevictable:1 dirty:0 writeback:0 [ 1369.126577][ T6824] slab_reclaimable:15626 slab_unreclaimable:117030 [ 1369.126577][ T6824] mapped:53693 shmem:4417 pagetables:8515 bounce:0 [ 1369.126577][ T6824] free:16918 free_pcp:322 free_cma:0 [ 1369.177316][ T6824] Node 0 active_anon:853328kB inactive_anon:16628kB active_file:52kB inactive_file:0kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214772kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 638976kB writeback_tmp:0kB all_unreclaimable? yes [ 1369.248225][ T6824] Node 1 active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1369.318374][ T6824] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1369.422881][ T6824] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1369.428643][ T6824] Node 0 DMA32 free:29432kB min:58444kB low:67420kB high:76396kB reserved_highatomic:0KB active_anon:853328kB inactive_anon:16628kB active_file:52kB inactive_file:0kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18448kB pagetables:33968kB bounce:0kB free_pcp:964kB local_pcp:724kB free_cma:0kB [ 1369.542135][ T6824] lowmem_reserve[]: 0 0 0 0 0 [ 1369.546857][ T6824] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1369.608055][ T6824] lowmem_reserve[]: 0 0 0 0 0 [ 1369.620949][ T6824] Node 1 Normal free:26820kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:328kB local_pcp:248kB free_cma:0kB [ 1369.688762][ T6824] lowmem_reserve[]: 0 0 0 0 0 [ 1369.701984][ T6824] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10172kB [ 1369.738263][ T6824] Node 0 DMA32: 3420*4kB (UME) 1399*8kB (ME) 137*16kB (UME) 51*32kB (M) 1*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29144kB [ 1369.781952][ T6824] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1369.804478][ T6824] Node 1 Normal: 127*4kB (ME) 67*8kB (ME) 47*16kB (ME) 21*32kB (UME) 5*64kB (UM) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26852kB [ 1369.891478][ T6824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1369.914006][ T6824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1369.929617][ T6824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1369.971948][ T6824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1369.981241][ T6824] 4427 total pagecache pages [ 1370.010725][ T6824] 0 pages in swap cache [ 1370.041001][ T6824] Swap cache stats: add 0, delete 0, find 0/0 [ 1370.056618][ T6824] Free swap = 0kB [ 1370.060333][ T6824] Total swap = 0kB [ 1370.068453][ T6824] 1965979 pages RAM [ 1370.090785][ T6824] 0 pages HighMem/MovableOnly [ 1370.106194][ T6824] 349903 pages reserved [ 1370.110353][ T6824] 0 pages cma reserved [ 1370.119352][ T6824] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=19709,uid=0 [ 1370.172061][ T6824] Out of memory: Killed process 19709 (syz-executor.2) total-vm:74980kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1370.243860][ T6824] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1370.285748][ T6824] CPU: 0 PID: 6824 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1370.294012][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1370.304063][ T6824] Call Trace: [ 1370.307360][ T6824] dump_stack+0x18f/0x20d [ 1370.311688][ T6824] dump_header+0x10b/0x7e4 [ 1370.316106][ T6824] oom_kill_process.cold+0x10/0x15 [ 1370.321219][ T6824] out_of_memory+0x326/0x1340 [ 1370.325901][ T6824] ? oom_killer_disable+0x270/0x270 [ 1370.331102][ T6824] ? mutex_trylock+0x246/0x2c0 [ 1370.335867][ T6824] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1370.342547][ T6824] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1370.349151][ T6824] ? warn_alloc+0x120/0x120 [ 1370.353651][ T6824] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1370.359207][ T6824] ? lock_is_held_type+0xb0/0xe0 [ 1370.364155][ T6824] __alloc_pages_nodemask+0x68f/0x930 [ 1370.369534][ T6824] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1370.376296][ T6824] ? page_cache_readahead_unbounded+0x572/0x850 [ 1370.382538][ T6824] ? __lock_page_or_retry+0x650/0x650 [ 1370.387911][ T6824] alloc_pages_current+0x187/0x280 [ 1370.393024][ T6824] __page_cache_alloc+0x31e/0x450 [ 1370.398073][ T6824] pagecache_get_page+0x27d/0xe10 [ 1370.403101][ T6824] ? __do_page_cache_readahead+0xc2/0xf0 [ 1370.408752][ T6824] filemap_fault+0x1a99/0x2ad0 [ 1370.413530][ T6824] ext4_filemap_fault+0x87/0xb6 [ 1370.418412][ T6824] __do_fault+0x10d/0x4d0 [ 1370.422743][ T6824] handle_mm_fault+0x37a3/0x43f0 [ 1370.427685][ T6824] ? apply_to_existing_page_range+0x40/0x40 [ 1370.433590][ T6824] do_user_addr_fault+0x5a2/0xd00 [ 1370.438619][ T6824] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1370.444175][ T6824] exc_page_fault+0xab/0x170 [ 1370.448765][ T6824] ? asm_exc_page_fault+0x8/0x30 [ 1370.453698][ T6824] asm_exc_page_fault+0x1e/0x30 [ 1370.458543][ T6824] RIP: 0033:0x40ad5e [ 1370.462424][ T6824] Code: Bad RIP value. [ 1370.466482][ T6824] RSP: 002b:000000c00003bef8 EFLAGS: 00010216 [ 1370.472541][ T6824] RAX: ffffffffffffff92 RBX: 000000003b986722 RCX: 0000000000460c23 [ 1370.480514][ T6824] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703ac0 [ 1370.488486][ T6824] RBP: 000000c00003bef0 R08: 0000000000000000 R09: 0000000000000000 [ 1370.496456][ T6824] R10: 000000c00003bed8 R11: 0000000000000206 R12: 0000014a70c52d08 [ 1370.504425][ T6824] R13: 0000000000000001 R14: 0000014a70c52d08 R15: 0000000000000000 [ 1370.636096][ T6824] Mem-Info: [ 1370.639415][ T6824] active_anon:212790 inactive_anon:4157 isolated_anon:0 [ 1370.639415][ T6824] active_file:3 inactive_file:7 isolated_file:0 [ 1370.639415][ T6824] unevictable:1 dirty:0 writeback:0 [ 1370.639415][ T6824] slab_reclaimable:15616 slab_unreclaimable:117983 [ 1370.639415][ T6824] mapped:53693 shmem:4417 pagetables:8460 bounce:0 [ 1370.639415][ T6824] free:16556 free_pcp:390 free_cma:0 [ 1370.706737][ T6824] Node 0 active_anon:851116kB inactive_anon:16628kB active_file:16kB inactive_file:20kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214772kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 634880kB writeback_tmp:0kB all_unreclaimable? yes [ 1370.763891][ T6824] Node 1 active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1370.816989][ T6824] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1370.851305][ T6824] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1370.857733][ T6824] Node 0 DMA32 free:39800kB min:58444kB low:67420kB high:76396kB reserved_highatomic:0KB active_anon:851116kB inactive_anon:16628kB active_file:16kB inactive_file:20kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18352kB pagetables:33748kB bounce:0kB free_pcp:1772kB local_pcp:428kB free_cma:0kB [ 1370.894277][ T6824] lowmem_reserve[]: 0 0 0 0 0 [ 1370.899011][ T6824] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1370.937069][ T6824] lowmem_reserve[]: 0 0 0 0 0 [ 1370.942549][ T6824] Node 1 Normal free:26852kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:328kB local_pcp:80kB free_cma:0kB [ 1370.983730][ T6824] lowmem_reserve[]: 0 0 0 0 0 [ 1370.988443][ T6824] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10172kB [ 1371.011042][ T6824] Node 0 DMA32: 8964*4kB (UME) 6547*8kB (UME) 5450*16kB (UME) 459*32kB (UME) 32*64kB (UE) 15*128kB (UM) 7*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 196392kB [ 1371.049338][ T6824] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1371.069708][ T6824] Node 1 Normal: 127*4kB (ME) 76*8kB (UME) 54*16kB (UME) 25*32kB (UME) 7*64kB (UM) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 27292kB [ 1371.095191][ T6824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1371.110800][ T6824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1371.135169][ T6824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1371.173860][ T6824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1371.198207][ T6824] 5927 total pagecache pages [ 1371.210778][ T6824] 0 pages in swap cache [ 1371.216677][ T6824] Swap cache stats: add 0, delete 0, find 0/0 [ 1371.233664][ T6824] Free swap = 0kB [ 1371.239928][ T6824] Total swap = 0kB [ 1371.260280][ T6824] 1965979 pages RAM [ 1371.268662][ T6824] 0 pages HighMem/MovableOnly [ 1371.290868][ T6824] 349903 pages reserved [ 1371.306147][ T6824] 0 pages cma reserved [ 1371.322090][ T6824] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=15007,uid=0 [ 1371.358962][ T6824] Out of memory: Killed process 15007 (syz-executor.5) total-vm:75112kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 01:49:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:49:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:49:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x16000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:49:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xa4}}, 0x0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000000)={0x8000, 0x80000000}) 01:49:22 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x119, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:49:22 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x7cffff, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1373.721123][T20344] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 01:49:22 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xf0ffff, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1373.799598][T20351] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 01:49:23 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x1000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:49:23 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x1000020, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:49:23 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x2000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:49:23 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x2020000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:49:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000080), &(0x7f0000000100)=0xc) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000000000000000000000a28000000140a010202000000000000000000000008000340000000000c0006400000000000000000140000001100020000000000000000"], 0x50}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_snmp6\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r2, &(0x7f0000007f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0907000001000c40000001"], 0x14}}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video0\x00', 0x2, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x10100, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) [ 1374.572199][ T336] tipc: TX() has been purged, node left! [ 1374.732249][ T336] tipc: TX() has been purged, node left! [ 1380.043776][ T1151] oom_reaper: reaped process 20340 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 1380.134230][ T6833] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1380.173832][ T6833] CPU: 1 PID: 6833 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1380.182114][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1380.192162][ T6833] Call Trace: [ 1380.195456][ T6833] dump_stack+0x18f/0x20d [ 1380.199785][ T6833] dump_header+0x10b/0x7e4 [ 1380.204199][ T6833] oom_kill_process.cold+0x10/0x15 [ 1380.209307][ T6833] out_of_memory+0x326/0x1340 [ 1380.213991][ T6833] ? oom_killer_disable+0x270/0x270 [ 1380.219215][ T6833] ? mutex_trylock+0x246/0x2c0 [ 1380.223979][ T6833] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1380.230645][ T6833] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1380.238524][ T6833] ? warn_alloc+0x120/0x120 [ 1380.243025][ T6833] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1380.248567][ T6833] ? lock_is_held_type+0xb0/0xe0 [ 1380.253507][ T6833] __alloc_pages_nodemask+0x68f/0x930 [ 1380.258880][ T6833] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1380.265622][ T6833] ? page_cache_readahead_unbounded+0x572/0x850 [ 1380.271839][ T6833] ? __lock_page_or_retry+0x650/0x650 [ 1380.277208][ T6833] alloc_pages_current+0x187/0x280 [ 1380.282315][ T6833] __page_cache_alloc+0x31e/0x450 [ 1380.287316][ T6833] pagecache_get_page+0x27d/0xe10 [ 1380.292373][ T6833] ? __do_page_cache_readahead+0xc2/0xf0 [ 1380.297983][ T6833] filemap_fault+0x1a99/0x2ad0 [ 1380.302729][ T6833] ext4_filemap_fault+0x87/0xb6 [ 1380.307574][ T6833] __do_fault+0x10d/0x4d0 [ 1380.311880][ T6833] handle_mm_fault+0x37a3/0x43f0 [ 1380.316799][ T6833] ? apply_to_existing_page_range+0x40/0x40 [ 1380.322678][ T6833] do_user_addr_fault+0x5a2/0xd00 [ 1380.327682][ T6833] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1380.333205][ T6833] exc_page_fault+0xab/0x170 [ 1380.337771][ T6833] ? asm_exc_page_fault+0x8/0x30 [ 1380.342682][ T6833] asm_exc_page_fault+0x1e/0x30 [ 1380.347506][ T6833] RIP: 0033:0x460c23 [ 1380.351371][ T6833] Code: Bad RIP value. [ 1380.355428][ T6833] RSP: 002b:000000c00003f6a0 EFLAGS: 00010202 [ 1380.361482][ T6833] RAX: ffffffffffffff92 RBX: 000000003b98185d RCX: 0000000000460c23 [ 1380.369429][ T6833] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703a40 [ 1380.377375][ T6833] RBP: 000000c00003f6e8 R08: 0000000000000000 R09: 0000000000000000 [ 1380.385322][ T6833] R10: 000000c00003f6d8 R11: 0000000000000202 R12: 0000014dccff9f1a [ 1380.393269][ T6833] R13: 0000000000000001 R14: 0000014dccff9f1a R15: ffffffffffffffff [ 1380.415053][ T6833] Mem-Info: [ 1380.418219][ T6833] active_anon:212249 inactive_anon:4157 isolated_anon:0 [ 1380.418219][ T6833] active_file:37 inactive_file:0 isolated_file:0 [ 1380.418219][ T6833] unevictable:1 dirty:7 writeback:0 [ 1380.418219][ T6833] slab_reclaimable:15612 slab_unreclaimable:115054 [ 1380.418219][ T6833] mapped:53753 shmem:4417 pagetables:8434 bounce:0 [ 1380.418219][ T6833] free:14003 free_pcp:152 free_cma:0 [ 1380.422820][T20340] syz-executor.5: vmalloc: allocation failure, allocated 4098748416 of 4294975488 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1380.462070][ T6833] Node 0 active_anon:848932kB inactive_anon:16628kB active_file:104kB inactive_file:24kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215012kB dirty:20kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 632832kB writeback_tmp:0kB all_unreclaimable? yes [ 1380.493993][T20340] CPU: 0 PID: 20340 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1380.501520][ T6833] Node 1 active_anon:44kB inactive_anon:0kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1380.507568][T20340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1380.507574][T20340] Call Trace: [ 1380.507601][T20340] dump_stack+0x18f/0x20d [ 1380.507622][T20340] warn_alloc.cold+0x87/0x17a [ 1380.507645][T20340] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1380.543531][ T6833] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1380.546385][T20340] ? zone_watermark_ok_safe+0x260/0x260 [ 1380.550674][ T6833] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1380.555339][T20340] ? arch_local_irq_restore+0x2e/0x50 [ 1380.555370][T20340] __vmalloc_area_node+0x49e/0x7a0 [ 1380.555390][T20340] ? ip_set_alloc+0x48/0x60 [ 1380.555403][T20340] ? ip_set_alloc+0x48/0x60 [ 1380.555421][T20340] vzalloc+0x116/0x1a0 [ 1380.562420][ T6833] Node 0 DMA32 free:18876kB min:40012kB low:48988kB high:57964kB reserved_highatomic:0KB active_anon:848932kB inactive_anon:16628kB active_file:104kB inactive_file:24kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18256kB pagetables:33640kB bounce:0kB free_pcp:356kB local_pcp:108kB free_cma:0kB [ 1380.590456][T20340] ip_set_alloc+0x48/0x60 [ 1380.590472][T20340] hash_netnet_create+0x401/0xd70 [ 1380.590488][T20340] ? hash_netnet6_head+0xcd0/0xcd0 [ 1380.590503][T20340] ip_set_create+0x6a2/0x13c0 [ 1380.590522][T20340] ? ip_set_sockfn_get+0xe00/0xe00 [ 1380.590561][T20340] ? lock_is_held_type+0xb0/0xe0 [ 1380.590575][T20340] ? ip_set_sockfn_get+0xe00/0xe00 [ 1380.590591][T20340] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1380.590615][T20340] ? nfnetlink_rcv+0x420/0x420 [ 1380.605862][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1380.607198][T20340] ? is_bpf_text_address+0xcb/0x160 [ 1380.612327][ T6833] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1380.616774][T20340] ? __lock_acquire+0xc1e/0x56e0 [ 1380.621245][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1380.625315][T20340] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1380.625331][T20340] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1380.625349][T20340] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1380.625367][T20340] netlink_rcv_skb+0x15a/0x430 [ 1380.625384][T20340] ? nfnetlink_rcv+0x420/0x420 [ 1380.625398][T20340] ? netlink_ack+0xa10/0xa10 [ 1380.625425][T20340] ? ns_capable+0xde/0x100 [ 1380.669171][ T6833] Node 1 Normal free:26832kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 1380.671867][T20340] nfnetlink_rcv+0x1ac/0x420 [ 1380.676581][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1380.681608][T20340] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1380.694545][ T6833] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10168kB [ 1380.696530][T20340] netlink_unicast+0x533/0x7d0 [ 1380.701263][ T6833] Node 0 DMA32: 2323*4kB (UME) 1046*8kB (UME) 62*16kB (UME) 7*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18876kB [ 1380.705926][T20340] ? netlink_attachskb+0x810/0x810 [ 1380.705941][T20340] ? _copy_from_iter_full+0x247/0x890 [ 1380.705956][T20340] ? __phys_addr+0x9a/0x110 [ 1380.705976][T20340] ? __phys_addr_symbol+0x2c/0x70 [ 1380.705996][T20340] ? __check_object_size+0x171/0x3e4 [ 1380.713090][ T6833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1380.739197][T20340] netlink_sendmsg+0x856/0xd90 [ 1380.739218][T20340] ? netlink_unicast+0x7d0/0x7d0 [ 1380.739237][T20340] ? netlink_unicast+0x7d0/0x7d0 [ 1380.739252][T20340] sock_sendmsg+0xcf/0x120 [ 1380.739268][T20340] ____sys_sendmsg+0x6e8/0x810 [ 1380.739285][T20340] ? kernel_sendmsg+0x50/0x50 [ 1380.739295][T20340] ? do_recvmmsg+0x6d0/0x6d0 [ 1380.739314][T20340] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1380.739330][T20340] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1380.739350][T20340] ? __lock_acquire+0xc1e/0x56e0 [ 1380.754088][ T6833] Node 1 Normal: 120*4kB (ME) 66*8kB (ME) 46*16kB (ME) 20*32kB (ME) 4*64kB (M) 5*128kB (UME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26832kB [ 1380.754955][T20340] ___sys_sendmsg+0xf3/0x170 [ 1380.760911][ T6833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1380.766780][T20340] ? sendmsg_copy_msghdr+0x160/0x160 [ 1380.766794][T20340] ? __fget_files+0x272/0x400 [ 1380.766812][T20340] ? lock_downgrade+0x820/0x820 [ 1380.766824][T20340] ? find_held_lock+0x2d/0x110 [ 1380.766838][T20340] ? __might_fault+0x11f/0x1d0 [ 1380.766858][T20340] ? __fget_files+0x294/0x400 [ 1380.771600][ T6833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1380.776346][T20340] ? __fget_light+0xea/0x280 [ 1380.776366][T20340] __sys_sendmsg+0xe5/0x1b0 [ 1380.776379][T20340] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1380.776393][T20340] ? __x64_sys_futex+0x382/0x4e0 [ 1380.776417][T20340] ? do_syscall_64+0x1c/0xe0 [ 1380.776433][T20340] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1380.776450][T20340] do_syscall_64+0x60/0xe0 [ 1380.776466][T20340] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1380.776478][T20340] RIP: 0033:0x45cb29 [ 1380.776484][T20340] Code: Bad RIP value. [ 1380.776492][T20340] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1380.776504][T20340] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1380.776511][T20340] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1380.776519][T20340] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1380.776526][T20340] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1380.776535][T20340] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1380.805126][T20340] Mem-Info: [ 1380.833312][ T6833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1380.888409][T20340] active_anon:212244 inactive_anon:4157 isolated_anon:0 [ 1380.888409][T20340] active_file:10 inactive_file:10 isolated_file:0 [ 1380.888409][T20340] unevictable:1 dirty:0 writeback:0 [ 1380.888409][T20340] slab_reclaimable:15612 slab_unreclaimable:114953 [ 1380.888409][T20340] mapped:53738 shmem:4417 pagetables:8433 bounce:0 [ 1380.888409][T20340] free:14031 free_pcp:201 free_cma:0 [ 1380.890527][ T6833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1380.902092][T20340] Node 0 active_anon:848932kB inactive_anon:16628kB active_file:36kB inactive_file:36kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214952kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 632832kB writeback_tmp:0kB all_unreclaimable? yes [ 1380.912391][ T6833] 4437 total pagecache pages [ 1380.943379][T20340] Node 1 active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1380.954388][ T6833] 0 pages in swap cache [ 1380.999312][T20340] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1381.006610][ T6833] Swap cache stats: add 0, delete 0, find 0/0 [ 1381.011996][T20340] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1381.013342][ T6833] Free swap = 0kB [ 1381.043693][T20340] Node 0 DMA32 free:19124kB min:40012kB low:48988kB high:57964kB reserved_highatomic:0KB active_anon:848932kB inactive_anon:16628kB active_file:36kB inactive_file:36kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18256kB pagetables:33640kB bounce:0kB free_pcp:552kB local_pcp:444kB free_cma:0kB [ 1381.052501][ T6833] Total swap = 0kB [ 1381.065512][T20340] lowmem_reserve[]: 0 0 0 0 0 [ 1381.068093][ T6833] 1965979 pages RAM [ 1381.070629][T20340] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1381.094870][ T6833] 0 pages HighMem/MovableOnly [ 1381.121741][T20340] lowmem_reserve[]: 0 0 0 0 0 [ 1381.130584][ T6833] 349903 pages reserved [ 1381.150984][T20340] Node 1 Normal free:26832kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 1381.199748][ T6833] 0 pages cma reserved [ 1381.214961][T20340] lowmem_reserve[]: 0 0 0 0 0 [ 1381.261122][ T6833] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=11706,uid=0 [ 1381.278776][T20340] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10168kB [ 1381.309531][ T6833] Out of memory: Killed process 11706 (syz-executor.5) total-vm:75112kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1381.473554][T20340] Node 0 DMA32: 2323*4kB (UME) 1056*8kB (UME) 64*16kB (UME) 9*32kB (UM) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19180kB [ 1381.489997][ T1151] oom_reaper: reaped process 11706 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1381.515127][T20340] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1381.520297][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1381.533192][T20340] Node 1 Normal: 120*4kB (ME) 66*8kB (ME) 46*16kB (ME) 20*32kB (ME) 4*64kB (M) 5*128kB (UME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26832kB [ 1381.555134][ T3859] CPU: 1 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1381.562577][T20340] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1381.563844][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1381.575251][T20340] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1381.583439][ T3859] Call Trace: [ 1381.583469][ T3859] dump_stack+0x18f/0x20d [ 1381.583488][ T3859] dump_header+0x10b/0x7e4 [ 1381.583509][ T3859] oom_kill_process.cold+0x10/0x15 [ 1381.592824][T20340] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1381.596072][ T3859] out_of_memory+0x326/0x1340 [ 1381.600374][T20340] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1381.604784][ T3859] ? oom_killer_disable+0x270/0x270 [ 1381.604802][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1381.604816][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1381.604843][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1381.609943][T20340] 4437 total pagecache pages [ 1381.619509][ T3859] ? warn_alloc+0x120/0x120 [ 1381.619526][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1381.619549][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1381.624224][T20340] 0 pages in swap cache [ 1381.633474][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1381.633503][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1381.638679][T20340] Swap cache stats: add 0, delete 0, find 0/0 [ 1381.643423][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1381.643441][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1381.643459][ T3859] alloc_pages_current+0x187/0x280 [ 1381.669597][T20340] Free swap = 0kB [ 1381.671279][ T3859] __page_cache_alloc+0x31e/0x450 [ 1381.681554][T20340] Total swap = 0kB [ 1381.685692][ T3859] pagecache_get_page+0x27d/0xe10 [ 1381.685710][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1381.685729][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1381.698534][T20340] 1965979 pages RAM [ 1381.704746][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1381.704762][ T3859] __do_fault+0x10d/0x4d0 [ 1381.704781][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1381.710130][T20340] 0 pages HighMem/MovableOnly [ 1381.715237][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1381.715269][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1381.718957][T20340] 349903 pages reserved [ 1381.723967][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1381.723995][ T3859] exc_page_fault+0xab/0x170 [ 1381.727683][T20340] 0 pages cma reserved [ 1381.732691][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1381.732703][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1381.732724][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1381.808828][ T3859] Code: Bad RIP value. [ 1381.812884][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1381.818939][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1381.826901][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1381.834871][ T3859] RBP: 00007ffd902c6780 R08: 0000000000000000 R09: 00007ffd90355080 [ 1381.842839][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1381.850804][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc158bfbfd [ 1382.005439][ T3859] Mem-Info: [ 1382.008605][ T3859] active_anon:211702 inactive_anon:4157 isolated_anon:0 [ 1382.008605][ T3859] active_file:5 inactive_file:15 isolated_file:0 [ 1382.008605][ T3859] unevictable:1 dirty:0 writeback:0 [ 1382.008605][ T3859] slab_reclaimable:15612 slab_unreclaimable:115238 [ 1382.008605][ T3859] mapped:53738 shmem:4417 pagetables:8396 bounce:0 [ 1382.008605][ T3859] free:14245 free_pcp:284 free_cma:0 [ 1382.078782][ T3859] Node 0 active_anon:846764kB inactive_anon:16628kB active_file:20kB inactive_file:52kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214952kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 632832kB writeback_tmp:0kB all_unreclaimable? yes [ 1382.162051][ T3859] Node 1 active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1382.201964][ T3859] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1382.293830][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1382.299592][ T3859] Node 0 DMA32 free:19728kB min:40012kB low:48988kB high:57964kB reserved_highatomic:0KB active_anon:846764kB inactive_anon:16628kB active_file:40kB inactive_file:32kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18228kB pagetables:33492kB bounce:0kB free_pcp:1104kB local_pcp:760kB free_cma:0kB [ 1382.342316][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1382.347021][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1382.408383][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1382.415187][ T3859] Node 1 Normal free:26832kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:256kB local_pcp:248kB free_cma:0kB [ 1382.473280][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1382.477999][ T3859] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10168kB [ 1382.504789][ T3859] Node 0 DMA32: 2260*4kB (UME) 1022*8kB (ME) 53*16kB (ME) 7*32kB (UM) 1*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 19760kB [ 1382.536220][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1382.553955][ T3859] Node 1 Normal: 120*4kB (ME) 66*8kB (ME) 46*16kB (ME) 20*32kB (ME) 4*64kB (M) 5*128kB (UME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26832kB [ 1382.600487][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1382.635675][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1382.650723][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1382.660316][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1382.694726][ T3859] 4437 total pagecache pages [ 1382.699334][ T3859] 0 pages in swap cache [ 1382.709369][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1382.715470][ T3859] Free swap = 0kB [ 1382.719176][ T3859] Total swap = 0kB [ 1382.748807][ T3859] 1965979 pages RAM [ 1382.758063][ T3859] 0 pages HighMem/MovableOnly [ 1382.762783][ T3859] 349903 pages reserved [ 1382.766929][ T3859] 0 pages cma reserved [ 1382.770989][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=18061,uid=0 [ 1382.810342][ T3859] Out of memory: Killed process 18061 (syz-executor.4) total-vm:75112kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1382.849198][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1382.891107][ T3859] CPU: 0 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1382.899828][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1382.909884][ T3859] Call Trace: [ 1382.913186][ T3859] dump_stack+0x18f/0x20d [ 1382.917521][ T3859] dump_header+0x10b/0x7e4 [ 1382.921934][ T3859] oom_kill_process.cold+0x10/0x15 [ 1382.927069][ T3859] out_of_memory+0x326/0x1340 [ 1382.931750][ T3859] ? oom_killer_disable+0x270/0x270 [ 1382.936987][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1382.941751][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1382.948427][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1382.955033][ T3859] ? warn_alloc+0x120/0x120 [ 1382.959536][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1382.965089][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1382.970031][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1382.975406][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1382.982168][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1382.988408][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1382.993782][ T3859] alloc_pages_current+0x187/0x280 [ 1382.998899][ T3859] __page_cache_alloc+0x31e/0x450 [ 1383.003926][ T3859] pagecache_get_page+0x27d/0xe10 [ 1383.008952][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1383.014583][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1383.019366][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1383.024240][ T3859] __do_fault+0x10d/0x4d0 [ 1383.028573][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1383.033515][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1383.039420][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1383.044446][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1383.049994][ T3859] exc_page_fault+0xab/0x170 [ 1383.054578][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1383.059508][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1383.064350][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1383.068756][ T3859] Code: Bad RIP value. [ 1383.072812][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1383.078872][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1383.086863][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1383.094828][ T3859] RBP: 00007ffd902c6780 R08: 0000000000000000 R09: 00007ffd90355080 [ 1383.102793][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1383.110763][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc158bfbfd [ 1383.151365][ T3859] Mem-Info: [ 1383.156553][ T3859] active_anon:211157 inactive_anon:4157 isolated_anon:0 [ 1383.156553][ T3859] active_file:10 inactive_file:7 isolated_file:0 [ 1383.156553][ T3859] unevictable:1 dirty:0 writeback:0 [ 1383.156553][ T3859] slab_reclaimable:15605 slab_unreclaimable:115767 [ 1383.156553][ T3859] mapped:53738 shmem:4417 pagetables:8406 bounce:0 [ 1383.156553][ T3859] free:14234 free_pcp:312 free_cma:0 [ 1383.233588][ T3859] Node 0 active_anon:844584kB inactive_anon:16628kB active_file:24kB inactive_file:36kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214952kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 630784kB writeback_tmp:0kB all_unreclaimable? yes [ 1383.280050][ T3859] Node 1 active_anon:44kB inactive_anon:0kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1383.330016][ T3859] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1383.390091][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1383.395910][ T3859] Node 0 DMA32 free:19684kB min:40012kB low:48988kB high:57964kB reserved_highatomic:0KB active_anon:844584kB inactive_anon:16628kB active_file:24kB inactive_file:36kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18224kB pagetables:33532kB bounce:0kB free_pcp:1180kB local_pcp:860kB free_cma:0kB [ 1383.451742][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1383.456560][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1383.501530][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1383.512294][ T3859] Node 1 Normal free:26832kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:256kB local_pcp:248kB free_cma:0kB [ 1383.572854][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1383.577562][ T3859] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10168kB [ 1383.626271][ T3859] Node 0 DMA32: 2237*4kB (ME) 1025*8kB (UME) 54*16kB (UME) 5*32kB (M) 0*64kB 0*128kB 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 19708kB [ 1383.664219][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1383.683618][ T3859] Node 1 Normal: 120*4kB (ME) 66*8kB (ME) 46*16kB (ME) 20*32kB (ME) 4*64kB (M) 5*128kB (UME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26832kB [ 1383.706813][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1383.731958][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1383.741268][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1383.762151][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1383.771440][ T3859] 4437 total pagecache pages [ 1383.799307][ T3859] 0 pages in swap cache [ 1383.813775][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1383.819861][ T3859] Free swap = 0kB [ 1383.829629][ T3859] Total swap = 0kB [ 1383.858704][ T3859] 1965979 pages RAM [ 1383.862592][ T3859] 0 pages HighMem/MovableOnly [ 1383.867265][ T3859] 349903 pages reserved [ 1383.871413][ T3859] 0 pages cma reserved [ 1383.900830][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=15642,uid=0 [ 1383.941893][ T3859] Out of memory: Killed process 15642 (syz-executor.4) total-vm:75112kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1384.027499][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1384.055006][ T3859] CPU: 0 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1384.063719][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1384.073767][ T3859] Call Trace: [ 1384.077059][ T3859] dump_stack+0x18f/0x20d [ 1384.081393][ T3859] dump_header+0x10b/0x7e4 [ 1384.085819][ T3859] oom_kill_process.cold+0x10/0x15 [ 1384.090928][ T3859] out_of_memory+0x326/0x1340 [ 1384.095609][ T3859] ? oom_killer_disable+0x270/0x270 [ 1384.100807][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1384.105569][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1384.112268][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1384.118875][ T3859] ? warn_alloc+0x120/0x120 [ 1384.123389][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1384.128942][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1384.133887][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1384.139264][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1384.146138][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1384.152389][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1384.157763][ T3859] alloc_pages_current+0x187/0x280 [ 1384.162877][ T3859] __page_cache_alloc+0x31e/0x450 [ 1384.167901][ T3859] pagecache_get_page+0x27d/0xe10 [ 1384.172926][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1384.178561][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1384.183333][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1384.188179][ T3859] __do_fault+0x10d/0x4d0 [ 1384.192513][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1384.197458][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1384.203367][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1384.208406][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1384.213960][ T3859] exc_page_fault+0xab/0x170 [ 1384.218571][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1384.223524][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1384.228395][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1384.233265][ T3859] Code: Bad RIP value. [ 1384.237328][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1384.243401][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1384.251374][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1384.259401][ T3859] RBP: 00007ffd902c6780 R08: 0000000000000000 R09: 00007ffd90355080 [ 1384.267391][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1384.275363][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc158bfbfd [ 1384.299843][ T3859] Mem-Info: [ 1384.321271][ T3859] active_anon:210609 inactive_anon:4157 isolated_anon:0 [ 1384.321271][ T3859] active_file:11 inactive_file:8 isolated_file:0 [ 1384.321271][ T3859] unevictable:1 dirty:0 writeback:0 [ 1384.321271][ T3859] slab_reclaimable:15603 slab_unreclaimable:116270 [ 1384.321271][ T3859] mapped:53738 shmem:4417 pagetables:8368 bounce:0 [ 1384.321271][ T3859] free:14247 free_pcp:369 free_cma:0 [ 1384.421237][ T3859] Node 0 active_anon:842392kB inactive_anon:16628kB active_file:36kB inactive_file:32kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:214952kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 628736kB writeback_tmp:0kB all_unreclaimable? yes [ 1384.482003][ T3859] Node 1 active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1384.507634][ T3859] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1384.536830][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1384.543489][ T3859] Node 0 DMA32 free:47388kB min:40012kB low:48988kB high:57964kB reserved_highatomic:0KB active_anon:842368kB inactive_anon:16628kB active_file:32kB inactive_file:36kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18160kB pagetables:33324kB bounce:0kB free_pcp:2340kB local_pcp:960kB free_cma:0kB [ 1384.579290][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1384.584828][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1384.632275][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1384.638490][ T3859] Node 1 Normal free:26832kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:256kB local_pcp:248kB free_cma:0kB [ 1384.676346][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1384.681045][ T3859] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10168kB [ 1384.712805][ T3859] Node 0 DMA32: 8531*4kB (UME) 6795*8kB (UME) 5474*16kB (UME) 1021*32kB (UM) 16*64kB (U) 6*128kB (U) 8*256kB (U) 2*512kB (U) 4*1024kB (U) 0*2048kB 0*4096kB = 217700kB [ 1384.737014][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1384.758225][ T3859] Node 1 Normal: 120*4kB (ME) 66*8kB (ME) 46*16kB (ME) 20*32kB (ME) 4*64kB (M) 5*128kB (UME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26832kB [ 1384.781335][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1384.790987][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1384.807254][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1384.827692][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1384.838096][ T3859] 4537 total pagecache pages [ 1384.847851][ T3859] 0 pages in swap cache [ 1384.853143][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1384.859202][ T3859] Free swap = 0kB [ 1384.868042][ T3859] Total swap = 0kB [ 1384.871762][ T3859] 1965979 pages RAM [ 1384.876653][ T3859] 0 pages HighMem/MovableOnly [ 1384.881322][ T3859] 349903 pages reserved [ 1384.890597][ T3859] 0 pages cma reserved [ 1384.895810][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=13826,uid=0 [ 1384.915667][ T3859] Out of memory: Killed process 13826 (syz-executor.2) total-vm:75112kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 01:49:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r2, &(0x7f00000021c0)={@void, @val={0x9}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0xf98, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "6595c3", 0x0, 0x0, 0x0, @mcast2, @loopback, [@dstopts={0x11, 0x13, [], [@padn={0x1, 0x1, [0x0]}, @enc_lim, @ra, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @hao={0xc9, 0x10, @mcast2}, @jumbo, @pad1]}, @srh={0x6c, 0xc, 0x4, 0x6, 0x0, 0x0, 0x0, [@loopback, @loopback, @remote, @mcast2, @local, @mcast2]}, @hopopts={0x0, 0x1b8, [], [@ra, @generic={0x0, 0xdbb, "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"}]}], "4011c6ed3ec831c0a859df4fd6a1cf59a90c42b433580b288a28728fb104cc462f4e92a1a4d50c2d9d75ce8b5ae9b1d6e9a4a79cae905957835e850585441d5cb5c76b06ad60a5a9003ebacf0d40fb6c636fd81af39f9d170ef5af99cd3e3e7ff54f71ca5d83d2b122ebbbc1333a2c811bc4095b572ebbcb83561044b2794ae54b33e99f48eac0eb"}}}}}}, 0xfca) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10040, 0x54) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x22) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x21) fcntl$setownex(r4, 0xf, &(0x7f00000000c0)={0x1, r5}) 01:49:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:49:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x17000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:49:36 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x11a, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:49:36 executing program 3 (fault-call:1 fault-nth:0): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:49:36 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x3000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1387.444729][T20385] FAULT_INJECTION: forcing a failure. [ 1387.444729][T20385] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.476528][T20385] CPU: 0 PID: 20385 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0 [ 1387.485258][T20385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1387.495346][T20385] Call Trace: [ 1387.498654][T20385] dump_stack+0x18f/0x20d [ 1387.502993][T20385] should_fail.cold+0x5/0x14 [ 1387.507597][T20385] should_failslab+0x5/0xf [ 1387.512020][T20385] kmem_cache_alloc_node+0x257/0x3c0 [ 1387.517322][T20385] __alloc_skb+0x71/0x550 [ 1387.521696][T20385] netlink_sendmsg+0x94f/0xd90 [ 1387.526472][T20385] ? netlink_unicast+0x7d0/0x7d0 [ 1387.531426][T20385] ? netlink_unicast+0x7d0/0x7d0 [ 1387.536375][T20385] sock_sendmsg+0xcf/0x120 [ 1387.540804][T20385] ____sys_sendmsg+0x6e8/0x810 [ 1387.545577][T20385] ? kernel_sendmsg+0x50/0x50 [ 1387.550263][T20385] ? do_recvmmsg+0x6d0/0x6d0 [ 1387.554867][T20385] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1387.560861][T20385] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1387.566866][T20385] ? _kstrtoull+0x186/0x420 [ 1387.571385][T20385] ___sys_sendmsg+0xf3/0x170 [ 1387.575982][T20385] ? sendmsg_copy_msghdr+0x160/0x160 [ 1387.581272][T20385] ? __fget_files+0x272/0x400 [ 1387.585963][T20385] ? lock_downgrade+0x820/0x820 [ 1387.590835][T20385] ? lock_downgrade+0x820/0x820 [ 1387.595696][T20385] ? find_held_lock+0x2d/0x110 [ 1387.600465][T20385] ? ksys_write+0x212/0x250 [ 1387.604977][T20385] ? __fget_files+0x294/0x400 [ 1387.609664][T20385] ? __fget_light+0xea/0x280 [ 1387.614266][T20385] __sys_sendmsg+0xe5/0x1b0 [ 1387.618778][T20385] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1387.623819][T20385] ? vfs_write+0x161/0x5d0 [ 1387.628254][T20385] ? do_syscall_64+0x1c/0xe0 [ 1387.632850][T20385] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1387.639276][T20385] do_syscall_64+0x60/0xe0 [ 1387.643698][T20385] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1387.649591][T20385] RIP: 0033:0x45cb29 [ 1387.653476][T20385] Code: Bad RIP value. [ 1387.657537][T20385] RSP: 002b:00007f5658c1fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1387.665947][T20385] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1387.673918][T20385] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1387.681916][T20385] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1387.689889][T20385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1387.697860][T20385] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f5658c206d4 01:49:36 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x4000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:49:36 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x5000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:49:37 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x6000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:49:37 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x7000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:49:37 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x8000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:49:37 executing program 3 (fault-call:1 fault-nth:1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:49:37 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) r0 = open(0x0, 0x0, 0x0) open_by_handle_at(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xe0802, 0x0) write$sndseq(r1, &(0x7f0000000080)=[{0x10081, 0x0, 0x0, 0x0, @time={0x0, 0x94}, {}, {}, @queue}], 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000140000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b0002000000050017000000", @ANYRES32=0x0, @ANYBLOB="6bd8754eaa965dd34e0a0326260868d565a088b933d4dc16e3b988755c811321eca6283bfc51b299b9626f75d983809d9cd9463b1d5442ff2bca155645e961a419e9cd458992ac363b903af529382df87cd217b3b7aa135af634457e23e62666ad94840a92cc06ce385f72a7dd0000000099d66901f93597b4ceae4f6d5f9d91"], 0x70}}, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x9) read$eventfd(r3, 0x0, 0x0) readv(r3, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000400)=""/132, 0x84}, {0x0}, {&(0x7f00000004c0)=""/172, 0xac}], 0x4) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) [ 1388.275211][T20417] FAULT_INJECTION: forcing a failure. [ 1388.275211][T20417] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.298256][T20417] CPU: 1 PID: 20417 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0 [ 1388.306946][T20417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1388.316999][T20417] Call Trace: [ 1388.320294][T20417] dump_stack+0x18f/0x20d [ 1388.324635][T20417] should_fail.cold+0x5/0x14 [ 1388.329232][T20417] should_failslab+0x5/0xf [ 1388.333653][T20417] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1388.339471][T20417] __kmalloc_node_track_caller+0x38/0x60 [ 1388.345118][T20417] __alloc_skb+0xae/0x550 [ 1388.349454][T20417] netlink_sendmsg+0x94f/0xd90 [ 1388.354227][T20417] ? netlink_unicast+0x7d0/0x7d0 [ 1388.359222][T20417] ? netlink_unicast+0x7d0/0x7d0 [ 1388.364168][T20417] sock_sendmsg+0xcf/0x120 [ 1388.368591][T20417] ____sys_sendmsg+0x6e8/0x810 [ 1388.373365][T20417] ? kernel_sendmsg+0x50/0x50 [ 1388.378047][T20417] ? do_recvmmsg+0x6d0/0x6d0 [ 1388.382651][T20417] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1388.384664][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1388.388638][T20417] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1388.388658][T20417] ? _kstrtoull+0x186/0x420 [ 1388.388679][T20417] ___sys_sendmsg+0xf3/0x170 [ 1388.412884][T20417] ? sendmsg_copy_msghdr+0x160/0x160 [ 1388.418168][T20417] ? __fget_files+0x272/0x400 [ 1388.422849][T20417] ? lock_downgrade+0x820/0x820 [ 1388.425699][T20420] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1388.427693][T20417] ? lock_downgrade+0x820/0x820 [ 1388.427708][T20417] ? find_held_lock+0x2d/0x110 [ 1388.427726][T20417] ? ksys_write+0x212/0x250 [ 1388.451113][T20417] ? __fget_files+0x294/0x400 [ 1388.455800][T20417] ? __fget_light+0xea/0x280 [ 1388.460396][T20417] __sys_sendmsg+0xe5/0x1b0 [ 1388.464993][T20417] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1388.470016][T20417] ? vfs_write+0x161/0x5d0 [ 1388.474441][T20417] ? do_syscall_64+0x1c/0xe0 [ 1388.479027][T20417] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1388.485527][T20417] do_syscall_64+0x60/0xe0 [ 1388.489963][T20417] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1388.495847][T20417] RIP: 0033:0x45cb29 [ 1388.499744][T20417] Code: Bad RIP value. [ 1388.504162][T20417] RSP: 002b:00007f5658c1fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1388.512561][T20417] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1388.520540][T20417] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1388.528499][T20417] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1388.536475][T20417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1388.544434][T20417] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f5658c206d4 [ 1388.812730][ T336] tipc: TX() has been purged, node left! [ 1388.992033][ T336] tipc: TX() has been purged, node left! [ 1393.679725][ T1151] oom_reaper: reaped process 20380 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 1393.739120][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1393.750371][ T3859] CPU: 0 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1393.759045][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1393.769096][ T3859] Call Trace: [ 1393.772394][ T3859] dump_stack+0x18f/0x20d [ 1393.776730][ T3859] dump_header+0x10b/0x7e4 [ 1393.781146][ T3859] oom_kill_process.cold+0x10/0x15 [ 1393.786287][ T3859] out_of_memory+0x326/0x1340 [ 1393.790969][ T3859] ? oom_killer_disable+0x270/0x270 [ 1393.796173][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1393.800938][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1393.807616][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1393.814223][ T3859] ? warn_alloc+0x120/0x120 [ 1393.818732][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1393.824312][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1393.829256][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1393.834634][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1393.841401][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1393.847644][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1393.853210][ T3859] alloc_pages_current+0x187/0x280 [ 1393.858331][ T3859] __page_cache_alloc+0x31e/0x450 [ 1393.863362][ T3859] pagecache_get_page+0x27d/0xe10 [ 1393.868389][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1393.874022][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1393.878798][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1393.883652][ T3859] __do_fault+0x10d/0x4d0 [ 1393.887983][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1393.892928][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1393.898842][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1393.903878][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1393.909452][ T3859] exc_page_fault+0xab/0x170 [ 1393.914074][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1393.919016][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1393.923863][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1393.928267][ T3859] Code: Bad RIP value. [ 1393.932326][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1393.938388][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1393.946354][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1393.954320][ T3859] RBP: 00007ffd902c6780 R08: 0000000000000000 R09: 00007ffd90355080 [ 1393.962288][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1393.970256][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc16694064 [ 1394.003538][ T3859] Mem-Info: [ 1394.006692][ T3859] active_anon:209529 inactive_anon:4157 isolated_anon:0 [ 1394.006692][ T3859] active_file:15 inactive_file:17 isolated_file:0 [ 1394.006692][ T3859] unevictable:1 dirty:1 writeback:0 [ 1394.006692][ T3859] slab_reclaimable:15582 slab_unreclaimable:115541 [ 1394.006692][ T3859] mapped:53787 shmem:4417 pagetables:8303 bounce:0 [ 1394.006692][ T3859] free:16636 free_pcp:466 free_cma:0 [ 1394.049503][ T3859] Node 0 active_anon:838076kB inactive_anon:16628kB active_file:56kB inactive_file:60kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215148kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 624640kB writeback_tmp:0kB all_unreclaimable? yes [ 1394.083347][ T3859] Node 1 active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1394.108920][ T3859] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1394.114520][T20380] syz-executor.5: vmalloc: allocation failure, allocated 4096335872 of 4294975488 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1394.138740][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1394.160303][ T3859] Node 0 DMA32 free:29820kB min:60492kB low:69468kB high:78444kB reserved_highatomic:0KB active_anon:838076kB inactive_anon:16628kB active_file:56kB inactive_file:60kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18128kB pagetables:33120kB bounce:0kB free_pcp:1604kB local_pcp:1340kB free_cma:0kB [ 1394.170445][T20380] CPU: 1 PID: 20380 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1394.192500][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1394.201111][T20380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1394.205826][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1394.215811][T20380] Call Trace: [ 1394.215839][T20380] dump_stack+0x18f/0x20d [ 1394.215860][T20380] warn_alloc.cold+0x87/0x17a [ 1394.215881][T20380] ? zone_watermark_ok_safe+0x260/0x260 [ 1394.243941][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1394.247184][T20380] ? policy_node+0xe1/0x140 [ 1394.251477][ T3859] Node 1 Normal free:26556kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:4kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:260kB local_pcp:4kB free_cma:0kB [ 1394.256149][T20380] ? kcov_common_handle+0x20/0x20 [ 1394.256171][T20380] __vmalloc_area_node+0x49e/0x7a0 [ 1394.256193][T20380] ? ip_set_alloc+0x48/0x60 [ 1394.256210][T20380] ? ip_set_alloc+0x48/0x60 [ 1394.261729][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1394.266389][T20380] vzalloc+0x116/0x1a0 [ 1394.266405][T20380] ip_set_alloc+0x48/0x60 [ 1394.266419][T20380] hash_netnet_create+0x401/0xd70 [ 1394.266440][T20380] ? hash_netnet6_head+0xcd0/0xcd0 [ 1394.270931][ T3859] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10168kB [ 1394.301382][T20380] ip_set_create+0x6a2/0x13c0 [ 1394.301404][T20380] ? ip_set_sockfn_get+0xe00/0xe00 [ 1394.301443][T20380] ? lock_is_held_type+0xb0/0xe0 [ 1394.306474][ T3859] Node 0 DMA32: 3057*4kB (ME) 1461*8kB (UME) 158*16kB (UME) 99*32kB (UM) 7*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30188kB [ 1394.311537][T20380] ? ip_set_sockfn_get+0xe00/0xe00 [ 1394.316043][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1394.320495][T20380] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1394.325175][ T3859] Node 1 Normal: 127*4kB (ME) 70*8kB (UME) 47*16kB (UME) 21*32kB (UME) 4*64kB (M) 4*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26556kB [ 1394.329199][T20380] ? nfnetlink_rcv+0x420/0x420 [ 1394.333533][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1394.338511][T20380] ? is_bpf_text_address+0xcb/0x160 [ 1394.343623][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1394.358238][T20380] ? __lock_acquire+0xc1e/0x56e0 [ 1394.358264][T20380] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1394.362963][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1394.368036][T20380] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1394.372975][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1394.388047][T20380] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1394.388067][T20380] netlink_rcv_skb+0x15a/0x430 [ 1394.388091][T20380] ? nfnetlink_rcv+0x420/0x420 [ 1394.393209][ T3859] 4449 total pagecache pages [ 1394.404546][T20380] ? netlink_ack+0xa10/0xa10 [ 1394.404568][T20380] ? ns_capable+0xde/0x100 [ 1394.404595][T20380] nfnetlink_rcv+0x1ac/0x420 [ 1394.409514][ T3859] 0 pages in swap cache [ 1394.426361][T20380] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1394.426382][T20380] netlink_unicast+0x533/0x7d0 [ 1394.426399][T20380] ? netlink_attachskb+0x810/0x810 [ 1394.426420][T20380] ? _copy_from_iter_full+0x247/0x890 [ 1394.431200][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1394.441786][T20380] ? __phys_addr+0x9a/0x110 [ 1394.441799][T20380] ? __phys_addr_symbol+0x2c/0x70 [ 1394.441813][T20380] ? __check_object_size+0x171/0x3e4 [ 1394.441830][T20380] netlink_sendmsg+0x856/0xd90 [ 1394.441849][T20380] ? netlink_unicast+0x7d0/0x7d0 [ 1394.455197][ T3859] Free swap = 0kB [ 1394.456316][T20380] ? netlink_unicast+0x7d0/0x7d0 [ 1394.461236][ T3859] Total swap = 0kB [ 1394.467209][T20380] sock_sendmsg+0xcf/0x120 [ 1394.467227][T20380] ____sys_sendmsg+0x6e8/0x810 [ 1394.467243][T20380] ? kernel_sendmsg+0x50/0x50 [ 1394.467254][T20380] ? do_recvmmsg+0x6d0/0x6d0 [ 1394.467277][T20380] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1394.483846][ T3859] 1965979 pages RAM [ 1394.492030][T20380] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1394.492044][T20380] ? __lock_acquire+0xc1e/0x56e0 [ 1394.492062][T20380] ___sys_sendmsg+0xf3/0x170 [ 1394.492081][T20380] ? sendmsg_copy_msghdr+0x160/0x160 [ 1394.497968][ T3859] 0 pages HighMem/MovableOnly [ 1394.502718][T20380] ? __fget_files+0x272/0x400 [ 1394.502739][T20380] ? lock_downgrade+0x820/0x820 [ 1394.502752][T20380] ? find_held_lock+0x2d/0x110 [ 1394.502771][T20380] ? __might_fault+0x11f/0x1d0 [ 1394.507525][ T3859] 349903 pages reserved [ 1394.512123][T20380] ? __fget_files+0x294/0x400 [ 1394.512143][T20380] ? __fget_light+0xea/0x280 [ 1394.512164][T20380] __sys_sendmsg+0xe5/0x1b0 [ 1394.516747][ T3859] 0 pages cma reserved [ 1394.521152][T20380] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1394.525772][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=6321,uid=0 [ 1394.529973][T20380] ? __x64_sys_futex+0x382/0x4e0 [ 1394.535519][ T3859] Out of memory: Killed process 6321 (syz-executor.3) total-vm:74980kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1394.540176][T20380] ? do_syscall_64+0x1c/0xe0 [ 1394.585486][ T3883] systemd-udevd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-1000 [ 1394.589703][T20380] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1394.749981][T20380] do_syscall_64+0x60/0xe0 [ 1394.754407][T20380] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1394.760294][T20380] RIP: 0033:0x45cb29 [ 1394.764195][T20380] Code: Bad RIP value. [ 1394.768254][T20380] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1394.776660][T20380] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1394.784647][T20380] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1394.792616][T20380] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1394.800602][T20380] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1394.808576][T20380] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1394.816572][ T3883] CPU: 0 PID: 3883 Comm: systemd-udevd Not tainted 5.8.0-rc3-syzkaller #0 [ 1394.825084][ T3883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1394.835137][ T3883] Call Trace: [ 1394.838435][ T3883] dump_stack+0x18f/0x20d [ 1394.841014][T20380] Mem-Info: [ 1394.842769][ T3883] dump_header+0x10b/0x7e4 [ 1394.842786][ T3883] oom_kill_process.cold+0x10/0x15 [ 1394.842804][ T3883] out_of_memory+0x326/0x1340 [ 1394.842825][ T3883] ? oom_killer_disable+0x270/0x270 [ 1394.842844][ T3883] ? mutex_trylock+0x246/0x2c0 [ 1394.842867][ T3883] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1394.846089][T20380] active_anon:208985 inactive_anon:4157 isolated_anon:0 [ 1394.846089][T20380] active_file:5 inactive_file:25 isolated_file:0 [ 1394.846089][T20380] unevictable:1 dirty:1 writeback:0 [ 1394.846089][T20380] slab_reclaimable:15582 slab_unreclaimable:115232 [ 1394.846089][T20380] mapped:53787 shmem:4417 pagetables:8266 bounce:0 [ 1394.846089][T20380] free:17561 free_pcp:533 free_cma:0 [ 1394.850372][ T3883] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1394.870201][T20380] Node 0 active_anon:835900kB inactive_anon:16628kB active_file:20kB inactive_file:96kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215148kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 624640kB writeback_tmp:0kB all_unreclaimable? yes [ 1394.876704][ T3883] ? warn_alloc+0x120/0x120 [ 1394.876721][ T3883] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1394.876744][ T3883] ? lock_is_held_type+0xb0/0xe0 [ 1394.876774][ T3883] __alloc_pages_nodemask+0x68f/0x930 [ 1394.919075][T20380] Node 1 active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1394.919723][ T3883] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1394.959181][T20380] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1394.962056][ T3883] ? page_cache_readahead_unbounded+0x572/0x850 [ 1394.962075][ T3883] ? __lock_page_or_retry+0x650/0x650 [ 1394.962093][ T3883] alloc_pages_current+0x187/0x280 [ 1394.962111][ T3883] __page_cache_alloc+0x31e/0x450 [ 1394.962128][ T3883] pagecache_get_page+0x27d/0xe10 [ 1394.962150][ T3883] ? __do_page_cache_readahead+0xc2/0xf0 [ 1394.972152][T20380] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1394.992866][ T3883] filemap_fault+0x1a99/0x2ad0 [ 1394.992899][ T3883] ext4_filemap_fault+0x87/0xb6 [ 1394.992914][ T3883] __do_fault+0x10d/0x4d0 [ 1394.992931][ T3883] handle_mm_fault+0x37a3/0x43f0 [ 1394.992951][ T3883] ? apply_to_existing_page_range+0x40/0x40 [ 1394.992980][ T3883] do_user_addr_fault+0x5a2/0xd00 [ 1395.002375][T20380] Node 0 DMA32 free:33000kB min:60492kB low:69468kB high:78444kB reserved_highatomic:0KB active_anon:835900kB inactive_anon:16628kB active_file:20kB inactive_file:96kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18096kB pagetables:32972kB bounce:0kB free_pcp:1872kB local_pcp:520kB free_cma:0kB [ 1395.028624][ T3883] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1395.028643][ T3883] exc_page_fault+0xab/0x170 [ 1395.028657][ T3883] ? asm_exc_page_fault+0x8/0x30 [ 1395.028669][ T3883] asm_exc_page_fault+0x1e/0x30 [ 1395.028681][ T3883] RIP: 0033:0x7fc9fa7142e3 [ 1395.028686][ T3883] Code: Bad RIP value. [ 1395.028694][ T3883] RSP: 002b:00007fffc1b68a48 EFLAGS: 00010246 [ 1395.028706][ T3883] RAX: 0000000000000001 RBX: 000055bf492229c0 RCX: 00007fc9fa7142e3 [ 1395.028714][ T3883] RDX: 0000000000000009 RSI: 00007fffc1b68a50 RDI: 000000000000000a [ 1395.028721][ T3883] RBP: 00007fffc1b68bc0 R08: 000055bf49223610 R09: 000055bf492233f0 [ 1395.028728][ T3883] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc1b68a50 [ 1395.028736][ T3883] R13: 0000000000000001 R14: ffffffffffffffff R15: 0000000000000000 [ 1395.079829][ T3883] Mem-Info: [ 1395.214958][T20380] lowmem_reserve[]: 0 0 0 0 0 [ 1395.219676][T20380] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1395.247914][T20380] lowmem_reserve[]: 0 0 0 0 0 [ 1395.252862][T20380] Node 1 Normal free:26556kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:260kB local_pcp:4kB free_cma:0kB [ 1395.284618][T20380] lowmem_reserve[]: 0 0 0 0 0 [ 1395.289321][T20380] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10168kB [ 1395.310387][ T3883] active_anon:208980 inactive_anon:4157 isolated_anon:0 [ 1395.310387][ T3883] active_file:15 inactive_file:15 isolated_file:0 [ 1395.310387][ T3883] unevictable:1 dirty:0 writeback:0 [ 1395.310387][ T3883] slab_reclaimable:15582 slab_unreclaimable:115832 [ 1395.310387][ T3883] mapped:53787 shmem:4417 pagetables:8275 bounce:0 [ 1395.310387][ T3883] free:16965 free_pcp:562 free_cma:0 [ 1395.356144][T20380] Node 0 DMA32: 3120*4kB (UME) 1461*8kB (UME) 158*16kB (UME) 75*32kB (UM) 7*64kB (UM) 0*128kB 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 31080kB [ 1395.372573][T20380] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1395.384135][T20380] Node 1 Normal: 127*4kB (ME) 70*8kB (UME) 47*16kB (UME) 22*32kB (UME) 4*64kB (M) 4*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26588kB [ 1395.409578][ T3883] Node 0 active_anon:835884kB inactive_anon:16628kB active_file:56kB inactive_file:60kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215148kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 620544kB writeback_tmp:0kB all_unreclaimable? yes [ 1395.438253][T20380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1395.447871][T20380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1395.465750][ T3883] Node 1 active_anon:36kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1395.494016][T20380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1395.503659][T20380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1395.518189][ T3883] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1395.550555][T20380] 4447 total pagecache pages [ 1395.561085][T20380] 0 pages in swap cache [ 1395.565349][T20380] Swap cache stats: add 0, delete 0, find 0/0 [ 1395.571412][T20380] Free swap = 0kB [ 1395.582026][T20380] Total swap = 0kB [ 1395.585760][T20380] 1965979 pages RAM [ 1395.589583][T20380] 0 pages HighMem/MovableOnly [ 1395.597752][ T3883] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1395.603553][ T3883] Node 0 DMA32 free:30200kB min:60492kB low:69468kB high:78444kB reserved_highatomic:0KB active_anon:835884kB inactive_anon:16628kB active_file:56kB inactive_file:60kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18068kB pagetables:33008kB bounce:0kB free_pcp:1988kB local_pcp:1464kB free_cma:0kB [ 1395.625044][T20380] 349903 pages reserved [ 1395.653323][ T3883] lowmem_reserve[]: 0 0 0 0 0 [ 1395.658038][ T3883] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1395.658700][T20380] 0 pages cma reserved [ 1395.709260][ T3883] lowmem_reserve[]: 0 0 0 0 0 [ 1395.717040][ T3883] Node 1 Normal free:26556kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:260kB local_pcp:4kB free_cma:0kB [ 1395.778329][ T3883] lowmem_reserve[]: 0 0 0 0 0 [ 1395.788306][ T3883] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10168kB [ 1395.831984][ T3883] Node 0 DMA32: 3120*4kB (UME) 1461*8kB (UME) 157*16kB (ME) 74*32kB (M) 6*64kB (M) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 30200kB [ 1395.857793][ T3883] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1395.892145][ T3883] Node 1 Normal: 127*4kB (ME) 70*8kB (UME) 47*16kB (UME) 22*32kB (UME) 4*64kB (M) 4*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26588kB [ 1395.919747][ T3883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1395.930582][ T3883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1395.958224][ T3883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1395.988463][ T3883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1396.004444][ T3883] 4447 total pagecache pages [ 1396.009848][ T3883] 0 pages in swap cache [ 1396.037511][ T3883] Swap cache stats: add 0, delete 0, find 0/0 [ 1396.070997][ T3883] Free swap = 0kB [ 1396.074804][ T3883] Total swap = 0kB [ 1396.078517][ T3883] 1965979 pages RAM [ 1396.105375][ T3883] 0 pages HighMem/MovableOnly [ 1396.110058][ T3883] 349903 pages reserved [ 1396.122452][ T3883] 0 pages cma reserved [ 1396.126540][ T3883] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=19462,uid=0 [ 1396.180025][ T3883] Out of memory: Killed process 19462 (syz-executor.3) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1396.227414][ T6833] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1396.252004][ T6833] CPU: 1 PID: 6833 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1396.260282][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1396.270356][ T6833] Call Trace: [ 1396.273659][ T6833] dump_stack+0x18f/0x20d [ 1396.277998][ T6833] dump_header+0x10b/0x7e4 [ 1396.282409][ T6833] oom_kill_process.cold+0x10/0x15 [ 1396.287504][ T6833] out_of_memory+0x326/0x1340 [ 1396.292189][ T6833] ? oom_killer_disable+0x270/0x270 [ 1396.297371][ T6833] ? mutex_trylock+0x246/0x2c0 [ 1396.302117][ T6833] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1396.308791][ T6833] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1396.315373][ T6833] ? warn_alloc+0x120/0x120 [ 1396.319859][ T6833] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1396.325395][ T6833] ? lock_is_held_type+0xb0/0xe0 [ 1396.330330][ T6833] __alloc_pages_nodemask+0x68f/0x930 [ 1396.335695][ T6833] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1396.342445][ T6833] ? page_cache_readahead_unbounded+0x572/0x850 [ 1396.348677][ T6833] ? __lock_page_or_retry+0x650/0x650 [ 1396.354034][ T6833] alloc_pages_current+0x187/0x280 [ 1396.359129][ T6833] __page_cache_alloc+0x31e/0x450 [ 1396.364144][ T6833] pagecache_get_page+0x27d/0xe10 [ 1396.369149][ T6833] ? __do_page_cache_readahead+0xc2/0xf0 [ 1396.374763][ T6833] filemap_fault+0x1a99/0x2ad0 [ 1396.379511][ T6833] ext4_filemap_fault+0x87/0xb6 [ 1396.384369][ T6833] __do_fault+0x10d/0x4d0 [ 1396.388693][ T6833] handle_mm_fault+0x37a3/0x43f0 [ 1396.393612][ T6833] ? apply_to_existing_page_range+0x40/0x40 [ 1396.399603][ T6833] do_user_addr_fault+0x5a2/0xd00 [ 1396.404623][ T6833] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1396.410162][ T6833] exc_page_fault+0xab/0x170 [ 1396.414732][ T6833] ? asm_exc_page_fault+0x8/0x30 [ 1396.419658][ T6833] asm_exc_page_fault+0x1e/0x30 [ 1396.424486][ T6833] RIP: 0033:0x460c23 [ 1396.428351][ T6833] Code: Bad RIP value. [ 1396.432390][ T6833] RSP: 002b:000000c00003f6a0 EFLAGS: 00010206 [ 1396.438445][ T6833] RAX: ffffffffffffff92 RBX: 000000003b97edf0 RCX: 0000000000460c23 [ 1396.446398][ T6833] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703a40 [ 1396.454349][ T6833] RBP: 000000c00003f6e8 R08: 0000000000000000 R09: 0000000000000000 [ 1396.462306][ T6833] R10: 000000c00003f6d8 R11: 0000000000000206 R12: 00000150fdafd64c [ 1396.470282][ T6833] R13: 0000000000000001 R14: 00000150fdafd64c R15: ffffffffffffffff [ 1396.482981][ T6833] Mem-Info: [ 1396.486131][ T6833] active_anon:208440 inactive_anon:4157 isolated_anon:0 [ 1396.486131][ T6833] active_file:16 inactive_file:10 isolated_file:0 [ 1396.486131][ T6833] unevictable:1 dirty:0 writeback:0 [ 1396.486131][ T6833] slab_reclaimable:15573 slab_unreclaimable:116384 [ 1396.486131][ T6833] mapped:53787 shmem:4417 pagetables:8238 bounce:0 [ 1396.486131][ T6833] free:16986 free_pcp:573 free_cma:0 [ 1396.522743][ T6833] Node 0 active_anon:833724kB inactive_anon:16628kB active_file:56kB inactive_file:44kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215148kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 620544kB writeback_tmp:0kB all_unreclaimable? yes [ 1396.550299][ T6833] Node 1 active_anon:36kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1396.575758][ T6833] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1396.608700][ T6833] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1396.614527][ T6833] Node 0 DMA32 free:30596kB min:60492kB low:69468kB high:78444kB reserved_highatomic:0KB active_anon:833700kB inactive_anon:16628kB active_file:60kB inactive_file:28kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18032kB pagetables:32900kB bounce:0kB free_pcp:2032kB local_pcp:524kB free_cma:0kB [ 1396.646738][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1396.651435][ T6833] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1396.679651][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1396.685105][ T6833] Node 1 Normal free:26588kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:260kB local_pcp:256kB free_cma:0kB [ 1396.719769][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1396.725140][ T6833] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10168kB [ 1396.740099][ T6833] Node 0 DMA32: 3179*4kB (UME) 1461*8kB (ME) 157*16kB (ME) 74*32kB (M) 6*64kB (M) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 30180kB [ 1396.755118][ T6833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1396.766590][ T6833] Node 1 Normal: 127*4kB (ME) 70*8kB (UME) 47*16kB (UME) 22*32kB (UME) 4*64kB (M) 4*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26588kB [ 1396.783669][ T6833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1396.793281][ T6833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1396.802650][ T6833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1396.812274][ T6833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1396.821550][ T6833] 4447 total pagecache pages [ 1396.827848][ T6833] 0 pages in swap cache [ 1396.832111][ T6833] Swap cache stats: add 0, delete 0, find 0/0 [ 1396.838169][ T6833] Free swap = 0kB [ 1396.841875][ T6833] Total swap = 0kB [ 1396.845690][ T6833] 1965979 pages RAM [ 1396.849490][ T6833] 0 pages HighMem/MovableOnly [ 1396.854245][ T6833] 349903 pages reserved [ 1396.858394][ T6833] 0 pages cma reserved [ 1396.862540][ T6833] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=18797,uid=0 [ 1396.876986][ T6833] Out of memory: Killed process 18797 (syz-executor.5) total-vm:74980kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1397.074547][ T6821] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1397.091562][ T6821] CPU: 1 PID: 6821 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1397.099800][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1397.109858][ T6821] Call Trace: [ 1397.113154][ T6821] dump_stack+0x18f/0x20d [ 1397.117481][ T6821] dump_header+0x10b/0x7e4 [ 1397.121892][ T6821] oom_kill_process.cold+0x10/0x15 [ 1397.127003][ T6821] out_of_memory+0x326/0x1340 [ 1397.131684][ T6821] ? oom_killer_disable+0x270/0x270 [ 1397.136903][ T6821] ? mutex_trylock+0x246/0x2c0 [ 1397.141692][ T6821] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1397.148381][ T6821] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1397.154988][ T6821] ? warn_alloc+0x120/0x120 [ 1397.159490][ T6821] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1397.165039][ T6821] ? lock_is_held_type+0xb0/0xe0 [ 1397.169980][ T6821] __alloc_pages_nodemask+0x68f/0x930 [ 1397.175354][ T6821] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1397.182118][ T6821] ? page_cache_readahead_unbounded+0x572/0x850 [ 1397.188381][ T6821] ? __lock_page_or_retry+0x650/0x650 [ 1397.193751][ T6821] alloc_pages_current+0x187/0x280 [ 1397.198884][ T6821] __page_cache_alloc+0x31e/0x450 [ 1397.203907][ T6821] pagecache_get_page+0x27d/0xe10 [ 1397.208950][ T6821] ? __do_page_cache_readahead+0xc2/0xf0 [ 1397.214582][ T6821] filemap_fault+0x1a99/0x2ad0 [ 1397.219361][ T6821] ext4_filemap_fault+0x87/0xb6 [ 1397.224207][ T6821] __do_fault+0x10d/0x4d0 [ 1397.228534][ T6821] handle_mm_fault+0x37a3/0x43f0 [ 1397.233504][ T6821] ? apply_to_existing_page_range+0x40/0x40 [ 1397.239408][ T6821] do_user_addr_fault+0x5a2/0xd00 [ 1397.244431][ T6821] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1397.249978][ T6821] exc_page_fault+0xab/0x170 [ 1397.254562][ T6821] ? asm_exc_page_fault+0x8/0x30 [ 1397.259495][ T6821] asm_exc_page_fault+0x1e/0x30 [ 1397.264337][ T6821] RIP: 0033:0x460c23 [ 1397.268215][ T6821] Code: Bad RIP value. [ 1397.272271][ T6821] RSP: 002b:000000c00003bea0 EFLAGS: 00010202 [ 1397.278326][ T6821] RAX: ffffffffffffff92 RBX: 000000003a38b520 RCX: 0000000000460c23 [ 1397.286290][ T6821] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703ac0 [ 1397.294953][ T6821] RBP: 000000c00003bee8 R08: 0000000000000000 R09: 0000000000000000 [ 1397.302918][ T6821] R10: 000000c00003bed8 R11: 0000000000000202 R12: 00000000000000f1 [ 1397.310886][ T6821] R13: 0000000000000000 R14: 0000000000adc67a R15: 0000000000000000 [ 1397.332342][ T6821] Mem-Info: [ 1397.335505][ T6821] active_anon:207897 inactive_anon:4157 isolated_anon:0 [ 1397.335505][ T6821] active_file:15 inactive_file:8 isolated_file:7 [ 1397.335505][ T6821] unevictable:1 dirty:0 writeback:0 [ 1397.335505][ T6821] slab_reclaimable:15572 slab_unreclaimable:117111 [ 1397.335505][ T6821] mapped:53787 shmem:4417 pagetables:8211 bounce:0 [ 1397.335505][ T6821] free:16828 free_pcp:589 free_cma:0 [ 1397.398348][ T6821] Node 0 active_anon:831552kB inactive_anon:16628kB active_file:60kB inactive_file:28kB unevictable:4kB isolated(anon):0kB isolated(file):28kB mapped:215148kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 618496kB writeback_tmp:0kB all_unreclaimable? yes [ 1397.436219][ T6821] Node 1 active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1397.463821][ T6821] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1397.492959][ T6821] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1397.498702][ T6821] Node 0 DMA32 free:30296kB min:60492kB low:69468kB high:78444kB reserved_highatomic:0KB active_anon:831536kB inactive_anon:16628kB active_file:12kB inactive_file:104kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18000kB pagetables:32796kB bounce:0kB free_pcp:2156kB local_pcp:844kB free_cma:0kB [ 1397.535753][ T6821] lowmem_reserve[]: 0 0 0 0 0 [ 1397.540957][ T6821] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1397.576155][ T6821] lowmem_reserve[]: 0 0 0 0 0 [ 1397.580910][ T6821] Node 1 Normal free:26588kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:260kB local_pcp:256kB free_cma:0kB [ 1397.620719][ T6821] lowmem_reserve[]: 0 0 0 0 0 [ 1397.625506][ T6821] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10168kB [ 1397.698390][ T6821] Node 0 DMA32: 5849*4kB (UME) 1484*8kB (UME) 158*16kB (UME) 79*32kB (UM) 6*64kB (M) 3*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41604kB [ 1397.765167][ T6821] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1397.791099][ T6821] Node 1 Normal: 127*4kB (ME) 70*8kB (UME) 47*16kB (UME) 22*32kB (UME) 4*64kB (M) 4*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26588kB [ 1397.819823][ T6821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1397.841496][ T6821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1398.038824][ T6821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1398.078140][ T6821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1398.100925][ T6821] 6647 total pagecache pages [ 1398.120897][ T6821] 0 pages in swap cache [ 1398.149503][ T6821] Swap cache stats: add 0, delete 0, find 0/0 [ 1398.172055][ T6821] Free swap = 0kB [ 1398.175801][ T6821] Total swap = 0kB [ 1398.179512][ T6821] 1965979 pages RAM [ 1398.212071][ T6821] 0 pages HighMem/MovableOnly [ 1398.216806][ T6821] 349903 pages reserved [ 1398.250884][ T6821] 0 pages cma reserved [ 1398.282106][ T6821] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=18415,uid=0 [ 1398.320393][ T6821] Out of memory: Killed process 18415 (syz-executor.5) total-vm:74980kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1398.346166][ T1151] oom_reaper: reaped process 18415 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 01:49:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:49:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x18000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:49:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000040)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket(0x0, 0x800000003, 0x0) bind(r2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x384, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60104a02400a000200053582c12d153e37090001803025642500bd", 0x2e}], 0x1}, 0x0) 01:49:49 executing program 3 (fault-call:1 fault-nth:2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:49:49 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x11b, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:49:49 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x9000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:49:49 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xa000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1400.630597][T20441] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 01:49:49 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xb000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:49:49 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xc000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1400.839089][T20441] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 01:49:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000100)="0f23c366ba4000ed0f32f30f1efeb9280800000f320f814ba30000c4e219a63866b8a5008ec82e0f01cfc4e34d496be110", 0x31}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:49:50 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xe000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:49:50 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xf000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1401.512189][ T336] tipc: TX() has been purged, node left! [ 1406.552166][ T1151] oom_reaper: reaped process 20428 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 1406.632112][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1406.651722][ T3859] CPU: 1 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1406.660425][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1406.670482][ T3859] Call Trace: [ 1406.673783][ T3859] dump_stack+0x18f/0x20d [ 1406.678147][ T3859] dump_header+0x10b/0x7e4 [ 1406.682565][ T3859] oom_kill_process.cold+0x10/0x15 [ 1406.687681][ T3859] out_of_memory+0x326/0x1340 [ 1406.692367][ T3859] ? oom_killer_disable+0x270/0x270 [ 1406.697590][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1406.702360][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1406.709048][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1406.715646][ T3859] ? warn_alloc+0x120/0x120 [ 1406.720128][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1406.725707][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1406.730627][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1406.735980][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1406.742735][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1406.748957][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1406.754307][ T3859] alloc_pages_current+0x187/0x280 [ 1406.759406][ T3859] __page_cache_alloc+0x31e/0x450 [ 1406.764423][ T3859] pagecache_get_page+0x27d/0xe10 [ 1406.769425][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1406.775039][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1406.779801][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1406.784638][ T3859] __do_fault+0x10d/0x4d0 [ 1406.788944][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1406.793861][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1406.799738][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1406.804747][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1406.810271][ T3859] exc_page_fault+0xab/0x170 [ 1406.814840][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1406.819751][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1406.824606][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1406.828994][ T3859] Code: Bad RIP value. [ 1406.833036][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1406.839611][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1406.847558][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1406.855507][ T3859] RBP: 00007ffd902c6780 R08: 0000000000000000 R09: 00007ffd90355080 [ 1406.863470][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1406.871427][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc1727f8d5 [ 1406.894229][T20428] syz-executor.5: vmalloc: allocation failure, allocated 4113756160 of 4294975488 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1406.912919][ T3859] Mem-Info: [ 1406.916077][ T3859] active_anon:207892 inactive_anon:4157 isolated_anon:0 [ 1406.916077][ T3859] active_file:36 inactive_file:0 isolated_file:0 [ 1406.916077][ T3859] unevictable:1 dirty:5 writeback:0 [ 1406.916077][ T3859] slab_reclaimable:15568 slab_unreclaimable:114973 [ 1406.916077][ T3859] mapped:53825 shmem:4417 pagetables:8223 bounce:0 [ 1406.916077][ T3859] free:15294 free_pcp:170 free_cma:0 [ 1406.952572][T20428] CPU: 0 PID: 20428 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1406.961250][T20428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1406.971302][T20428] Call Trace: [ 1406.974589][T20428] dump_stack+0x18f/0x20d [ 1406.978929][T20428] warn_alloc.cold+0x87/0x17a [ 1406.983637][T20428] ? zone_watermark_ok_safe+0x260/0x260 [ 1406.989184][T20428] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1406.995345][T20428] ? alloc_pages_current+0x9a/0x280 [ 1407.000551][T20428] __vmalloc_area_node+0x49e/0x7a0 [ 1407.005659][T20428] ? ip_set_alloc+0x48/0x60 [ 1407.010139][T20428] ? ip_set_alloc+0x48/0x60 [ 1407.014632][T20428] vzalloc+0x116/0x1a0 [ 1407.018703][T20428] ip_set_alloc+0x48/0x60 [ 1407.023057][T20428] hash_netnet_create+0x401/0xd70 [ 1407.028085][T20428] ? hash_netnet6_head+0xcd0/0xcd0 [ 1407.033198][T20428] ip_set_create+0x6a2/0x13c0 [ 1407.037880][T20428] ? ip_set_sockfn_get+0xe00/0xe00 [ 1407.043024][T20428] ? lock_is_held_type+0xb0/0xe0 [ 1407.047959][T20428] ? ip_set_sockfn_get+0xe00/0xe00 [ 1407.053064][T20428] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1407.058012][T20428] ? nfnetlink_rcv+0x420/0x420 [ 1407.062779][T20428] ? is_bpf_text_address+0xcb/0x160 [ 1407.067993][T20428] ? __lock_acquire+0xc1e/0x56e0 [ 1407.072943][T20428] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1407.078923][T20428] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1407.084935][T20428] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1407.090846][T20428] netlink_rcv_skb+0x15a/0x430 [ 1407.095603][T20428] ? nfnetlink_rcv+0x420/0x420 [ 1407.098193][ T3859] Node 0 active_anon:831520kB inactive_anon:16628kB active_file:144kB inactive_file:0kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215300kB dirty:16kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 618496kB writeback_tmp:0kB all_unreclaimable? yes [ 1407.100367][T20428] ? netlink_ack+0xa10/0xa10 [ 1407.132495][T20428] ? ns_capable+0xde/0x100 [ 1407.136923][T20428] nfnetlink_rcv+0x1ac/0x420 [ 1407.141520][T20428] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1407.146987][T20428] netlink_unicast+0x533/0x7d0 [ 1407.151321][ T3859] Node 1 active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1407.151750][T20428] ? netlink_attachskb+0x810/0x810 [ 1407.182216][T20428] ? _copy_from_iter_full+0x247/0x890 [ 1407.187588][T20428] ? __phys_addr+0x9a/0x110 [ 1407.192100][T20428] ? __phys_addr_symbol+0x2c/0x70 [ 1407.197132][T20428] ? __check_object_size+0x171/0x3e4 [ 1407.202422][T20428] netlink_sendmsg+0x856/0xd90 [ 1407.202682][ T3859] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1407.207192][T20428] ? netlink_unicast+0x7d0/0x7d0 [ 1407.241037][T20428] ? netlink_unicast+0x7d0/0x7d0 [ 1407.245982][T20428] sock_sendmsg+0xcf/0x120 [ 1407.247322][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1407.250518][T20428] ____sys_sendmsg+0x6e8/0x810 [ 1407.260978][T20428] ? kernel_sendmsg+0x50/0x50 [ 1407.265651][T20428] ? do_recvmmsg+0x6d0/0x6d0 [ 1407.270248][T20428] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1407.276231][T20428] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1407.277869][ T3859] Node 0 DMA32 free:24212kB min:50252kB low:59228kB high:68204kB reserved_highatomic:0KB active_anon:831520kB inactive_anon:16628kB active_file:144kB inactive_file:0kB unevictable:4kB writepending:16kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18000kB pagetables:32800kB bounce:0kB free_pcp:412kB local_pcp:164kB free_cma:0kB [ 1407.282206][T20428] ? __lock_acquire+0xc1e/0x56e0 [ 1407.282231][T20428] ___sys_sendmsg+0xf3/0x170 [ 1407.282248][T20428] ? sendmsg_copy_msghdr+0x160/0x160 [ 1407.282262][T20428] ? __fget_files+0x272/0x400 [ 1407.282285][T20428] ? lock_downgrade+0x820/0x820 [ 1407.282298][T20428] ? find_held_lock+0x2d/0x110 [ 1407.282313][T20428] ? __might_fault+0x11f/0x1d0 [ 1407.282333][T20428] ? __fget_files+0x294/0x400 [ 1407.282354][T20428] ? __fget_light+0xea/0x280 [ 1407.323921][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1407.329147][T20428] __sys_sendmsg+0xe5/0x1b0 [ 1407.366520][T20428] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1407.367342][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1407.371554][T20428] ? __x64_sys_futex+0x382/0x4e0 [ 1407.404530][T20428] ? do_syscall_64+0x1c/0xe0 [ 1407.409125][T20428] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1407.415108][T20428] do_syscall_64+0x60/0xe0 [ 1407.419528][T20428] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1407.425443][T20428] RIP: 0033:0x45cb29 [ 1407.429324][T20428] Code: Bad RIP value. [ 1407.432638][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1407.433381][T20428] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1407.438084][ T3859] Node 1 Normal free:26804kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:260kB local_pcp:12kB free_cma:0kB [ 1407.446471][T20428] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1407.446485][T20428] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1407.446492][T20428] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1407.446499][T20428] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1407.446507][T20428] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1407.463342][T20428] Mem-Info: [ 1407.511340][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1407.517819][T20428] active_anon:207887 inactive_anon:4157 isolated_anon:0 [ 1407.517819][T20428] active_file:11 inactive_file:12 isolated_file:0 [ 1407.517819][T20428] unevictable:1 dirty:0 writeback:0 [ 1407.517819][T20428] slab_reclaimable:15566 slab_unreclaimable:114729 [ 1407.517819][T20428] mapped:53825 shmem:4417 pagetables:8222 bounce:0 [ 1407.517819][T20428] free:15362 free_pcp:226 free_cma:0 [ 1407.547115][ T3859] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10160kB [ 1407.571300][T20428] Node 0 active_anon:831504kB inactive_anon:16628kB active_file:44kB inactive_file:44kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215300kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 616448kB writeback_tmp:0kB all_unreclaimable? yes [ 1407.586289][ T3859] Node 0 DMA32: 2473*4kB (UME) 1296*8kB (UME) 127*16kB (UME) 51*32kB (UM) 2*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 24564kB [ 1407.609620][T20428] Node 1 active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1407.639006][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1407.659178][T20428] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1407.667259][ T3859] Node 1 Normal: 125*4kB (ME) 70*8kB (ME) 47*16kB (ME) 22*32kB (UME) 4*64kB (M) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26836kB [ 1407.703904][T20428] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1407.710764][T20428] Node 0 DMA32 free:24556kB min:50252kB low:59228kB high:68204kB reserved_highatomic:0KB active_anon:831504kB inactive_anon:16628kB active_file:44kB inactive_file:44kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:18000kB pagetables:32796kB bounce:0kB free_pcp:628kB local_pcp:256kB free_cma:0kB [ 1407.720451][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1407.747254][T20428] lowmem_reserve[]: 0 0 0 0 0 [ 1407.757243][T20428] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1407.764590][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1407.801407][T20428] lowmem_reserve[]: 0 0 0 0 0 [ 1407.809968][T20428] Node 1 Normal free:26836kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:276kB local_pcp:248kB free_cma:0kB [ 1407.811123][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1407.856944][T20428] lowmem_reserve[]: 0 0 0 0 0 [ 1407.861652][T20428] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10160kB [ 1407.867020][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1407.880489][T20428] Node 0 DMA32: 2473*4kB (UME) 1296*8kB (UME) 127*16kB (UME) 51*32kB (UM) 2*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 24564kB [ 1407.898520][ T3859] 4440 total pagecache pages [ 1407.911574][ T3859] 0 pages in swap cache [ 1407.921715][T20428] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1407.927684][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1407.939292][ T3859] Free swap = 0kB [ 1407.951235][T20428] Node 1 Normal: 125*4kB (ME) 70*8kB (ME) 47*16kB (ME) 22*32kB (UME) 4*64kB (M) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26836kB [ 1407.953055][ T3859] Total swap = 0kB [ 1407.974627][T20428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1407.984254][T20428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1408.006243][ T3859] 1965979 pages RAM [ 1408.007700][T20428] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1408.010066][ T3859] 0 pages HighMem/MovableOnly [ 1408.021545][T20428] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1408.041604][ T3859] 349903 pages reserved [ 1408.053812][T20428] 4440 total pagecache pages [ 1408.054159][ T3859] 0 pages cma reserved [ 1408.058445][T20428] 0 pages in swap cache [ 1408.066732][T20428] Swap cache stats: add 0, delete 0, find 0/0 [ 1408.070052][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=17800,uid=0 [ 1408.085346][T20428] Free swap = 0kB [ 1408.090781][T20428] Total swap = 0kB [ 1408.101297][ T3859] Out of memory: Killed process 17800 (syz-executor.3) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1408.101473][T20428] 1965979 pages RAM [ 1408.137509][T20428] 0 pages HighMem/MovableOnly [ 1408.160314][T20428] 349903 pages reserved [ 1408.170018][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1408.174337][T20428] 0 pages cma reserved [ 1408.192739][ T3859] CPU: 1 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1408.201411][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1408.211473][ T3859] Call Trace: [ 1408.214769][ T3859] dump_stack+0x18f/0x20d [ 1408.219098][ T3859] dump_header+0x10b/0x7e4 [ 1408.223529][ T3859] oom_kill_process.cold+0x10/0x15 [ 1408.228639][ T3859] out_of_memory+0x326/0x1340 [ 1408.233321][ T3859] ? oom_killer_disable+0x270/0x270 [ 1408.238517][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1408.243279][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1408.249951][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1408.257336][ T3859] ? warn_alloc+0x120/0x120 [ 1408.261856][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1408.267423][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1408.272365][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1408.277761][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1408.284519][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1408.290754][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1408.296129][ T3859] alloc_pages_current+0x187/0x280 [ 1408.301240][ T3859] __page_cache_alloc+0x31e/0x450 [ 1408.306264][ T3859] pagecache_get_page+0x27d/0xe10 [ 1408.311288][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1408.316921][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1408.321689][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1408.326536][ T3859] __do_fault+0x10d/0x4d0 [ 1408.330870][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1408.335808][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1408.341710][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1408.346738][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1408.352283][ T3859] exc_page_fault+0xab/0x170 [ 1408.356881][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1408.361809][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1408.366652][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1408.371050][ T3859] Code: Bad RIP value. [ 1408.375104][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1408.381176][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1408.389140][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1408.397101][ T3859] RBP: 00007ffd902c6780 R08: 0000000000000000 R09: 00007ffd90355080 [ 1408.405065][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1408.413030][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc1727f8d5 [ 1408.438272][ T3859] Mem-Info: [ 1408.441421][ T3859] active_anon:207346 inactive_anon:4157 isolated_anon:0 [ 1408.441421][ T3859] active_file:11 inactive_file:12 isolated_file:0 [ 1408.441421][ T3859] unevictable:1 dirty:0 writeback:0 [ 1408.441421][ T3859] slab_reclaimable:15566 slab_unreclaimable:115056 [ 1408.441421][ T3859] mapped:53825 shmem:4417 pagetables:8185 bounce:0 [ 1408.441421][ T3859] free:15590 free_pcp:285 free_cma:0 [ 1408.485112][ T3859] Node 0 active_anon:829316kB inactive_anon:16628kB active_file:60kB inactive_file:28kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215300kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 614400kB writeback_tmp:0kB all_unreclaimable? yes [ 1408.519688][ T3859] Node 1 active_anon:44kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1408.555452][ T3859] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1408.595742][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1408.601520][ T3859] Node 0 DMA32 free:25092kB min:50252kB low:59228kB high:68204kB reserved_highatomic:0KB active_anon:829316kB inactive_anon:16628kB active_file:44kB inactive_file:44kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17968kB pagetables:32688kB bounce:0kB free_pcp:832kB local_pcp:576kB free_cma:0kB [ 1408.646477][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1408.651181][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1408.699630][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1408.708390][ T3859] Node 1 Normal free:26868kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:276kB local_pcp:28kB free_cma:0kB [ 1408.753699][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1408.758427][ T3859] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10160kB [ 1408.780891][ T3859] Node 0 DMA32: 2473*4kB (UME) 1238*8kB (ME) 109*16kB (ME) 49*32kB (UM) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 25092kB [ 1408.819115][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1408.845060][ T3859] Node 1 Normal: 125*4kB (ME) 70*8kB (ME) 47*16kB (ME) 23*32kB (UME) 4*64kB (M) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26868kB [ 1408.870581][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1408.880206][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1408.907276][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1408.937419][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1408.971304][ T3859] 4440 total pagecache pages [ 1408.992006][ T3859] 0 pages in swap cache [ 1408.996176][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1409.019683][ T3859] Free swap = 0kB [ 1409.023464][ T3859] Total swap = 0kB [ 1409.027209][ T3859] 1965979 pages RAM [ 1409.031004][ T3859] 0 pages HighMem/MovableOnly [ 1409.038616][ T3859] 349903 pages reserved [ 1409.042865][ T3859] 0 pages cma reserved [ 1409.046935][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=16609,uid=0 [ 1409.078071][ T3859] Out of memory: Killed process 16609 (syz-executor.3) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1409.100081][ T1151] oom_reaper: reaped process 16609 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1409.148931][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1409.208454][ T3859] CPU: 0 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1409.217165][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.227215][ T3859] Call Trace: [ 1409.230510][ T3859] dump_stack+0x18f/0x20d [ 1409.234846][ T3859] dump_header+0x10b/0x7e4 [ 1409.239263][ T3859] oom_kill_process.cold+0x10/0x15 [ 1409.244377][ T3859] out_of_memory+0x326/0x1340 [ 1409.249062][ T3859] ? oom_killer_disable+0x270/0x270 [ 1409.254263][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1409.259031][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1409.265708][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1409.272311][ T3859] ? warn_alloc+0x120/0x120 [ 1409.276815][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1409.282374][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1409.287312][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1409.292686][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1409.299450][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1409.305691][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1409.311066][ T3859] alloc_pages_current+0x187/0x280 [ 1409.316180][ T3859] __page_cache_alloc+0x31e/0x450 [ 1409.321208][ T3859] pagecache_get_page+0x27d/0xe10 [ 1409.326233][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1409.331866][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1409.336635][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1409.341481][ T3859] __do_fault+0x10d/0x4d0 [ 1409.345818][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1409.350766][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1409.356674][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1409.361700][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1409.367253][ T3859] exc_page_fault+0xab/0x170 [ 1409.371844][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1409.376777][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1409.381623][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1409.386027][ T3859] Code: Bad RIP value. [ 1409.390083][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1409.396139][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1409.404104][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1409.412070][ T3859] RBP: 00007ffd902c6780 R08: 0000000000000000 R09: 00007ffd90355080 [ 1409.420036][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1409.428002][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc1727f8d5 [ 1409.441103][ T3859] Mem-Info: [ 1409.444297][ T3859] active_anon:206799 inactive_anon:4157 isolated_anon:0 [ 1409.444297][ T3859] active_file:9 inactive_file:12 isolated_file:0 [ 1409.444297][ T3859] unevictable:1 dirty:0 writeback:0 [ 1409.444297][ T3859] slab_reclaimable:15553 slab_unreclaimable:115636 [ 1409.444297][ T3859] mapped:53825 shmem:4417 pagetables:8158 bounce:0 [ 1409.444297][ T3859] free:15574 free_pcp:309 free_cma:0 [ 1409.501806][ T3859] Node 0 active_anon:827128kB inactive_anon:16628kB active_file:44kB inactive_file:44kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215300kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 612352kB writeback_tmp:0kB all_unreclaimable? yes [ 1409.546032][ T3859] Node 1 active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1409.577351][ T3859] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1409.631134][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1409.642529][ T3859] Node 0 DMA32 free:25060kB min:50252kB low:59228kB high:68204kB reserved_highatomic:0KB active_anon:827128kB inactive_anon:16628kB active_file:44kB inactive_file:44kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17936kB pagetables:32580kB bounce:0kB free_pcp:912kB local_pcp:264kB free_cma:0kB [ 1409.692395][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1409.697112][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1409.733055][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1409.737761][ T3859] Node 1 Normal free:26868kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:276kB local_pcp:248kB free_cma:0kB [ 1409.785411][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1409.790111][ T3859] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10160kB [ 1409.814396][ T3859] Node 0 DMA32: 2473*4kB (UME) 1238*8kB (ME) 109*16kB (ME) 48*32kB (M) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 25060kB [ 1409.857855][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1409.875507][ T3859] Node 1 Normal: 125*4kB (ME) 70*8kB (ME) 47*16kB (ME) 23*32kB (UME) 4*64kB (M) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26868kB [ 1409.909017][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1409.922384][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1409.931690][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1409.958032][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1409.971027][ T3859] 4440 total pagecache pages [ 1410.002903][ T3859] 0 pages in swap cache [ 1410.007765][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1410.022235][ T3859] Free swap = 0kB [ 1410.025989][ T3859] Total swap = 0kB [ 1410.029702][ T3859] 1965979 pages RAM [ 1410.046594][ T3859] 0 pages HighMem/MovableOnly [ 1410.051282][ T3859] 349903 pages reserved [ 1410.055599][ T3859] 0 pages cma reserved [ 1410.059667][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=14546,uid=0 [ 1410.097864][ T3859] Out of memory: Killed process 14546 (syz-executor.3) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1410.121388][ T1151] oom_reaper: reaped process 14546 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1410.179923][ T6833] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1410.202578][ T6833] CPU: 0 PID: 6833 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1410.210837][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1410.220896][ T6833] Call Trace: [ 1410.224199][ T6833] dump_stack+0x18f/0x20d [ 1410.228535][ T6833] dump_header+0x10b/0x7e4 [ 1410.233041][ T6833] oom_kill_process.cold+0x10/0x15 [ 1410.238158][ T6833] out_of_memory+0x326/0x1340 [ 1410.242842][ T6833] ? oom_killer_disable+0x270/0x270 [ 1410.248072][ T6833] ? mutex_trylock+0x246/0x2c0 [ 1410.252838][ T6833] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1410.259518][ T6833] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1410.266123][ T6833] ? warn_alloc+0x120/0x120 [ 1410.270624][ T6833] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1410.276174][ T6833] ? lock_is_held_type+0xb0/0xe0 [ 1410.281114][ T6833] __alloc_pages_nodemask+0x68f/0x930 [ 1410.286490][ T6833] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1410.293255][ T6833] ? page_cache_readahead_unbounded+0x572/0x850 [ 1410.299495][ T6833] ? __lock_page_or_retry+0x650/0x650 [ 1410.304870][ T6833] alloc_pages_current+0x187/0x280 [ 1410.309984][ T6833] __page_cache_alloc+0x31e/0x450 [ 1410.315013][ T6833] pagecache_get_page+0x27d/0xe10 [ 1410.320037][ T6833] ? __do_page_cache_readahead+0xc2/0xf0 [ 1410.325668][ T6833] filemap_fault+0x1a99/0x2ad0 [ 1410.330440][ T6833] ext4_filemap_fault+0x87/0xb6 [ 1410.335291][ T6833] __do_fault+0x10d/0x4d0 [ 1410.339619][ T6833] handle_mm_fault+0x37a3/0x43f0 [ 1410.344558][ T6833] ? apply_to_existing_page_range+0x40/0x40 [ 1410.350464][ T6833] do_user_addr_fault+0x5a2/0xd00 [ 1410.355494][ T6833] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1410.361142][ T6833] exc_page_fault+0xab/0x170 [ 1410.365733][ T6833] ? asm_exc_page_fault+0x8/0x30 [ 1410.370665][ T6833] asm_exc_page_fault+0x1e/0x30 [ 1410.375522][ T6833] RIP: 0033:0x460c23 [ 1410.379403][ T6833] Code: Bad RIP value. [ 1410.383459][ T6833] RSP: 002b:000000c00003f6a0 EFLAGS: 00010206 [ 1410.389538][ T6833] RAX: ffffffffffffff92 RBX: 000000003b981e6c RCX: 0000000000460c23 [ 1410.397503][ T6833] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703a40 [ 1410.405468][ T6833] RBP: 000000c00003f6e8 R08: 0000000000000000 R09: 0000000000000000 [ 1410.413434][ T6833] R10: 000000c00003f6d8 R11: 0000000000000206 R12: 000001540676d245 [ 1410.421399][ T6833] R13: 0000000000000001 R14: 000001540676d245 R15: ffffffffffffffff [ 1410.462159][ T6833] Mem-Info: [ 1410.465574][ T6833] active_anon:206244 inactive_anon:4157 isolated_anon:0 [ 1410.465574][ T6833] active_file:22 inactive_file:21 isolated_file:0 [ 1410.465574][ T6833] unevictable:1 dirty:0 writeback:0 [ 1410.465574][ T6833] slab_reclaimable:15553 slab_unreclaimable:116261 [ 1410.465574][ T6833] mapped:53825 shmem:4417 pagetables:8141 bounce:0 [ 1410.465574][ T6833] free:15520 free_pcp:323 free_cma:0 [ 1410.557113][ T6833] Node 0 active_anon:824932kB inactive_anon:16628kB active_file:128kB inactive_file:0kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215300kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 610304kB writeback_tmp:0kB all_unreclaimable? yes [ 1410.590478][ T6833] Node 1 active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1410.621116][ T6833] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1410.696873][ T6833] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1410.702682][ T6833] Node 0 DMA32 free:25052kB min:50252kB low:59228kB high:68204kB reserved_highatomic:0KB active_anon:824932kB inactive_anon:16628kB active_file:8kB inactive_file:60kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17904kB pagetables:32472kB bounce:0kB free_pcp:960kB local_pcp:264kB free_cma:0kB [ 1410.793284][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1410.797976][ T6833] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1410.845369][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1410.850118][ T6833] Node 1 Normal free:26868kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:276kB local_pcp:248kB free_cma:0kB [ 1410.909398][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1410.914246][ T6833] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10160kB [ 1410.939348][ T6833] Node 0 DMA32: 2473*4kB (UME) 1239*8kB (UME) 110*16kB (UME) 49*32kB (UM) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 25052kB [ 1410.975392][ T6833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1410.990682][ T6833] Node 1 Normal: 125*4kB (ME) 70*8kB (ME) 47*16kB (ME) 23*32kB (UME) 4*64kB (M) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26868kB [ 1411.033259][ T6833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1411.050660][ T6833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1411.072172][ T6833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1411.081725][ T6833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1411.106203][ T6833] 4440 total pagecache pages [ 1411.110790][ T6833] 0 pages in swap cache [ 1411.123267][ T6833] Swap cache stats: add 0, delete 0, find 0/0 [ 1411.129336][ T6833] Free swap = 0kB [ 1411.144649][ T6833] Total swap = 0kB [ 1411.148381][ T6833] 1965979 pages RAM [ 1411.155155][ T6833] 0 pages HighMem/MovableOnly [ 1411.160573][ T6833] 349903 pages reserved [ 1411.169320][ T6833] 0 pages cma reserved [ 1411.174320][ T6833] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=13472,uid=0 [ 1411.192242][ T6833] Out of memory: Killed process 13472 (syz-executor.3) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1413.654693][T20430] FAULT_INJECTION: forcing a failure. [ 1413.654693][T20430] name failslab, interval 1, probability 0, space 0, times 0 [ 1413.674153][T20430] CPU: 1 PID: 20430 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0 [ 1413.682833][T20430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1413.692878][T20430] Call Trace: [ 1413.696186][T20430] dump_stack+0x18f/0x20d [ 1413.700497][T20430] should_fail.cold+0x5/0x14 [ 1413.705070][T20430] should_failslab+0x5/0xf [ 1413.709465][T20430] kmem_cache_alloc_trace+0x240/0x2d0 [ 1413.714817][T20430] ip_set_create+0x453/0x13c0 [ 1413.719476][T20430] ? do_raw_spin_unlock+0x1f1/0x230 [ 1413.724650][T20430] ? ip_set_sockfn_get+0xe00/0xe00 [ 1413.729788][T20430] ? lock_is_held_type+0xb0/0xe0 [ 1413.734713][T20430] ? ip_set_sockfn_get+0xe00/0xe00 [ 1413.739803][T20430] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1413.744757][T20430] ? nfnetlink_rcv+0x420/0x420 [ 1413.749503][T20430] ? is_bpf_text_address+0xcb/0x160 [ 1413.754694][T20430] ? __lock_acquire+0xc1e/0x56e0 [ 1413.759619][T20430] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1413.765593][T20430] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1413.771554][T20430] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1413.777431][T20430] netlink_rcv_skb+0x15a/0x430 [ 1413.782175][T20430] ? nfnetlink_rcv+0x420/0x420 [ 1413.786917][T20430] ? netlink_ack+0xa10/0xa10 [ 1413.791492][T20430] ? ns_capable+0xde/0x100 [ 1413.795891][T20430] nfnetlink_rcv+0x1ac/0x420 [ 1413.800460][T20430] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1413.805900][T20430] netlink_unicast+0x533/0x7d0 [ 1413.810647][T20430] ? netlink_attachskb+0x810/0x810 [ 1413.815737][T20430] ? _copy_from_iter_full+0x247/0x890 [ 1413.821091][T20430] ? __phys_addr+0x9a/0x110 [ 1413.825570][T20430] ? __phys_addr_symbol+0x2c/0x70 [ 1413.830582][T20430] ? __check_object_size+0x171/0x3e4 [ 1413.835854][T20430] netlink_sendmsg+0x856/0xd90 [ 1413.840598][T20430] ? netlink_unicast+0x7d0/0x7d0 [ 1413.845524][T20430] ? netlink_unicast+0x7d0/0x7d0 [ 1413.850440][T20430] sock_sendmsg+0xcf/0x120 [ 1413.854847][T20430] ____sys_sendmsg+0x6e8/0x810 [ 1413.859677][T20430] ? kernel_sendmsg+0x50/0x50 [ 1413.864330][T20430] ? do_recvmmsg+0x6d0/0x6d0 [ 1413.868901][T20430] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1413.874859][T20430] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1413.880814][T20430] ? _kstrtoull+0x186/0x420 [ 1413.885294][T20430] ___sys_sendmsg+0xf3/0x170 [ 1413.889864][T20430] ? sendmsg_copy_msghdr+0x160/0x160 [ 1413.895138][T20430] ? __fget_files+0x272/0x400 [ 1413.899809][T20430] ? lock_downgrade+0x820/0x820 [ 1413.904634][T20430] ? lock_downgrade+0x820/0x820 [ 1413.909461][T20430] ? find_held_lock+0x2d/0x110 [ 1413.914202][T20430] ? ksys_write+0x212/0x250 [ 1413.918681][T20430] ? __fget_files+0x294/0x400 [ 1413.923338][T20430] ? __fget_light+0xea/0x280 [ 1413.927904][T20430] __sys_sendmsg+0xe5/0x1b0 [ 1413.932385][T20430] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1413.937383][T20430] ? vfs_write+0x161/0x5d0 [ 1413.941782][T20430] ? do_syscall_64+0x1c/0xe0 [ 1413.946358][T20430] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1413.952327][T20430] do_syscall_64+0x60/0xe0 [ 1413.956723][T20430] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1413.962604][T20430] RIP: 0033:0x45cb29 [ 1413.966467][T20430] Code: Bad RIP value. [ 1413.970536][T20430] RSP: 002b:00007f5658c1fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1413.978921][T20430] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1413.986873][T20430] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1413.994822][T20430] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1414.002783][T20430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1414.010744][T20430] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f5658c206d4 01:50:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x19000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:03 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x10000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:50:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:03 executing program 1: r0 = socket(0x2, 0x80805, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) sendmmsg$inet(r0, &(0x7f0000002e40)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) 01:50:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:50:03 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x11c, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:50:03 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) open(&(0x7f0000000040)='./bus\x00', 0x8001145042, 0x0) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 01:50:03 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x11000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:50:03 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x12000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:50:03 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x12020000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:50:03 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x12060000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:50:03 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x13000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:50:04 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x14000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1416.933556][ T0] NOHZ: local_softirq_pending 08 [ 1419.800656][ T1151] oom_reaper: reaped process 20477 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 1419.872362][ T6821] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1419.903780][ T6821] CPU: 0 PID: 6821 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1419.912046][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1419.922094][ T6821] Call Trace: [ 1419.925384][ T6821] dump_stack+0x18f/0x20d [ 1419.929715][ T6821] dump_header+0x10b/0x7e4 [ 1419.934134][ T6821] oom_kill_process.cold+0x10/0x15 [ 1419.939247][ T6821] out_of_memory+0x326/0x1340 [ 1419.943937][ T6821] ? oom_killer_disable+0x270/0x270 [ 1419.950094][ T6821] ? mutex_trylock+0x246/0x2c0 [ 1419.954860][ T6821] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1419.961540][ T6821] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1419.968147][ T6821] ? warn_alloc+0x120/0x120 [ 1419.972651][ T6821] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1419.978203][ T6821] ? lock_is_held_type+0xb0/0xe0 [ 1419.983147][ T6821] __alloc_pages_nodemask+0x68f/0x930 [ 1419.988525][ T6821] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1419.995291][ T6821] ? page_cache_readahead_unbounded+0x572/0x850 [ 1420.001532][ T6821] ? __lock_page_or_retry+0x650/0x650 [ 1420.006905][ T6821] alloc_pages_current+0x187/0x280 [ 1420.012024][ T6821] __page_cache_alloc+0x31e/0x450 [ 1420.017050][ T6821] pagecache_get_page+0x27d/0xe10 [ 1420.022075][ T6821] ? __do_page_cache_readahead+0xc2/0xf0 [ 1420.027704][ T6821] filemap_fault+0x1a99/0x2ad0 [ 1420.032473][ T6821] ext4_filemap_fault+0x87/0xb6 [ 1420.037322][ T6821] __do_fault+0x10d/0x4d0 [ 1420.041651][ T6821] handle_mm_fault+0x37a3/0x43f0 [ 1420.046598][ T6821] ? apply_to_existing_page_range+0x40/0x40 [ 1420.052490][ T6821] do_user_addr_fault+0x5a2/0xd00 [ 1420.057494][ T6821] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1420.063050][ T6821] exc_page_fault+0xab/0x170 [ 1420.067618][ T6821] ? asm_exc_page_fault+0x8/0x30 [ 1420.072530][ T6821] asm_exc_page_fault+0x1e/0x30 [ 1420.077354][ T6821] RIP: 0033:0x447a60 [ 1420.081242][ T6821] Code: Bad RIP value. [ 1420.085281][ T6821] RSP: 002b:000000c000053fd0 EFLAGS: 00010206 [ 1420.091318][ T6821] RAX: 000000c00003bf58 RBX: 000000c000000900 RCX: 000000c000066480 [ 1420.099263][ T6821] RDX: 0000000000000000 RSI: 000000c000066480 RDI: 00000000016ff801 [ 1420.107220][ T6821] RBP: 000000c00003bf58 R08: 0000000000000000 R09: 0000000000000000 [ 1420.115164][ T6821] R10: 0000000000000000 R11: 0000000000000202 R12: 000001573ce90837 [ 1420.123110][ T6821] R13: 0000000000000001 R14: 000001573ce90837 R15: 0000000000000000 [ 1420.142176][T20477] syz-executor.5: vmalloc: allocation failure, allocated 4129366016 of 4294975488 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1420.167373][T20477] CPU: 1 PID: 20477 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1420.176051][T20477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1420.186095][T20477] Call Trace: [ 1420.189386][T20477] dump_stack+0x18f/0x20d [ 1420.193720][T20477] warn_alloc.cold+0x87/0x17a [ 1420.198389][T20477] ? zone_watermark_ok_safe+0x260/0x260 [ 1420.203926][T20477] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1420.210084][T20477] ? alloc_pages_current+0x39/0x280 [ 1420.215288][T20477] __vmalloc_area_node+0x49e/0x7a0 [ 1420.220404][T20477] ? ip_set_alloc+0x48/0x60 [ 1420.224906][T20477] ? ip_set_alloc+0x48/0x60 [ 1420.229409][T20477] vzalloc+0x116/0x1a0 [ 1420.233484][T20477] ip_set_alloc+0x48/0x60 [ 1420.237811][T20477] hash_netnet_create+0x401/0xd70 [ 1420.242834][T20477] ? hash_netnet6_head+0xcd0/0xcd0 [ 1420.247975][T20477] ip_set_create+0x6a2/0x13c0 [ 1420.252646][T20477] ? ip_set_sockfn_get+0xe00/0xe00 [ 1420.257780][T20477] ? lock_is_held_type+0xb0/0xe0 [ 1420.262712][T20477] ? ip_set_sockfn_get+0xe00/0xe00 [ 1420.267822][T20477] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1420.272790][T20477] ? nfnetlink_rcv+0x420/0x420 [ 1420.277554][T20477] ? is_bpf_text_address+0xcb/0x160 [ 1420.282760][T20477] ? __lock_acquire+0xc1e/0x56e0 [ 1420.287730][T20477] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1420.293699][T20477] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1420.299676][T20477] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1420.305588][T20477] netlink_rcv_skb+0x15a/0x430 [ 1420.310350][T20477] ? nfnetlink_rcv+0x420/0x420 [ 1420.315114][T20477] ? netlink_ack+0xa10/0xa10 [ 1420.319709][T20477] ? ns_capable+0xde/0x100 [ 1420.324124][T20477] nfnetlink_rcv+0x1ac/0x420 [ 1420.328712][T20477] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1420.334176][T20477] netlink_unicast+0x533/0x7d0 [ 1420.338940][T20477] ? netlink_attachskb+0x810/0x810 [ 1420.344040][T20477] ? _copy_from_iter_full+0x247/0x890 [ 1420.349400][T20477] ? __phys_addr+0x9a/0x110 [ 1420.353893][T20477] ? __phys_addr_symbol+0x2c/0x70 [ 1420.358914][T20477] ? __check_object_size+0x171/0x3e4 [ 1420.364201][T20477] netlink_sendmsg+0x856/0xd90 [ 1420.368969][T20477] ? netlink_unicast+0x7d0/0x7d0 [ 1420.373908][T20477] ? netlink_unicast+0x7d0/0x7d0 [ 1420.378842][T20477] sock_sendmsg+0xcf/0x120 [ 1420.383258][T20477] ____sys_sendmsg+0x6e8/0x810 [ 1420.388022][T20477] ? kernel_sendmsg+0x50/0x50 [ 1420.392696][T20477] ? do_recvmmsg+0x6d0/0x6d0 [ 1420.397287][T20477] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1420.403268][T20477] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1420.409235][T20477] ? __lock_acquire+0xc1e/0x56e0 [ 1420.414163][T20477] ___sys_sendmsg+0xf3/0x170 [ 1420.418751][T20477] ? sendmsg_copy_msghdr+0x160/0x160 [ 1420.424031][T20477] ? __fget_files+0x272/0x400 [ 1420.428706][T20477] ? lock_downgrade+0x820/0x820 [ 1420.433551][T20477] ? find_held_lock+0x2d/0x110 [ 1420.438311][T20477] ? __might_fault+0x11f/0x1d0 [ 1420.443082][T20477] ? __fget_files+0x294/0x400 [ 1420.447763][T20477] ? __fget_light+0xea/0x280 [ 1420.452378][T20477] __sys_sendmsg+0xe5/0x1b0 [ 1420.456897][T20477] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1420.461912][T20477] ? __x64_sys_futex+0x382/0x4e0 [ 1420.466869][T20477] ? do_syscall_64+0x1c/0xe0 [ 1420.471458][T20477] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1420.477446][T20477] do_syscall_64+0x60/0xe0 [ 1420.481863][T20477] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1420.487751][T20477] RIP: 0033:0x45cb29 [ 1420.491650][T20477] Code: Bad RIP value. [ 1420.495701][T20477] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1420.504102][T20477] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1420.512070][T20477] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1420.520038][T20477] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1420.528006][T20477] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1420.535975][T20477] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1420.546616][ T6821] Mem-Info: [ 1420.549764][ T6821] active_anon:205691 inactive_anon:4157 isolated_anon:0 [ 1420.549764][ T6821] active_file:14 inactive_file:14 isolated_file:0 [ 1420.549764][ T6821] unevictable:1 dirty:0 writeback:0 [ 1420.549764][ T6821] slab_reclaimable:15553 slab_unreclaimable:114359 [ 1420.549764][ T6821] mapped:53872 shmem:4417 pagetables:8114 bounce:0 [ 1420.549764][ T6821] free:14418 free_pcp:124 free_cma:0 [ 1420.586333][ T6821] Node 0 active_anon:822720kB inactive_anon:16628kB active_file:52kB inactive_file:56kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215488kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 608256kB writeback_tmp:0kB all_unreclaimable? yes [ 1420.615125][ T6821] Node 1 active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1420.640614][ T6821] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1420.671332][ T6821] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1420.677107][ T6821] Node 0 DMA32 free:20628kB min:42060kB low:51036kB high:60012kB reserved_highatomic:0KB active_anon:822720kB inactive_anon:16628kB active_file:52kB inactive_file:56kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17872kB pagetables:32364kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1420.709171][ T6821] lowmem_reserve[]: 0 0 0 0 0 [ 1420.713932][ T6821] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1420.742105][T20477] Mem-Info: [ 1420.745250][T20477] active_anon:205691 inactive_anon:4157 isolated_anon:0 [ 1420.745250][T20477] active_file:14 inactive_file:14 isolated_file:0 [ 1420.745250][T20477] unevictable:1 dirty:0 writeback:0 [ 1420.745250][T20477] slab_reclaimable:15553 slab_unreclaimable:114359 [ 1420.745250][T20477] mapped:53872 shmem:4417 pagetables:8114 bounce:0 [ 1420.745250][T20477] free:14418 free_pcp:124 free_cma:0 [ 1420.784466][ T6821] lowmem_reserve[]: 0 0 0 0 0 [ 1420.789170][ T6821] Node 1 Normal free:26888kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1420.826342][ T6821] lowmem_reserve[]: 0 0 0 0 0 [ 1420.831046][ T6821] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10156kB [ 1420.835511][T20477] Node 0 active_anon:822720kB inactive_anon:16628kB active_file:52kB inactive_file:56kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215488kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 608256kB writeback_tmp:0kB all_unreclaimable? yes [ 1420.852292][ T6821] Node 0 DMA32: 2237*4kB (UME) 1162*8kB (UME) 85*16kB (UME) 30*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20628kB [ 1420.886222][T20477] Node 1 active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1420.905075][ T6821] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1420.925916][T20477] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1420.937046][ T6821] Node 1 Normal: 130*4kB (UME) 70*8kB (UME) 49*16kB (UME) 22*32kB (UME) 4*64kB (M) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26888kB [ 1420.982183][T20477] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1420.983316][ T6821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1420.987954][T20477] Node 0 DMA32 free:20628kB min:42060kB low:51036kB high:60012kB reserved_highatomic:0KB active_anon:822720kB inactive_anon:16628kB active_file:52kB inactive_file:56kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17872kB pagetables:32364kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1420.997656][ T6821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1421.033824][T20477] lowmem_reserve[]: 0 0 0 0 0 [ 1421.044374][T20477] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1421.050794][ T6821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1421.088950][T20477] lowmem_reserve[]: 0 0 0 0 0 [ 1421.097527][T20477] Node 1 Normal free:26888kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1421.098775][ T6821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1421.140954][T20477] lowmem_reserve[]: 0 0 0 0 0 [ 1421.145716][T20477] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10156kB [ 1421.154730][ T6821] 4445 total pagecache pages [ 1421.167359][T20477] Node 0 DMA32: 2237*4kB (UME) 1162*8kB (UME) 85*16kB (UME) 30*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20628kB [ 1421.176244][ T6821] 0 pages in swap cache [ 1421.195831][ T6821] Swap cache stats: add 0, delete 0, find 0/0 [ 1421.199039][T20477] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1421.201906][ T6821] Free swap = 0kB [ 1421.217015][T20477] Node 1 Normal: 130*4kB (UME) 70*8kB (UME) 49*16kB (UME) 22*32kB (UME) 4*64kB (M) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26888kB [ 1421.229509][ T6821] Total swap = 0kB [ 1421.247314][T20477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1421.250102][ T6821] 1965979 pages RAM [ 1421.258704][T20477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1421.269112][ T6821] 0 pages HighMem/MovableOnly [ 1421.286667][T20477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1421.288367][ T6821] 349903 pages reserved [ 1421.299493][T20477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1421.303193][ T6821] 0 pages cma reserved [ 1421.309763][T20477] 4445 total pagecache pages [ 1421.324608][ T6821] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=13345,uid=0 [ 1421.332123][T20477] 0 pages in swap cache [ 1421.345485][ T6821] Out of memory: Killed process 13345 (syz-executor.2) total-vm:75244kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1421.364622][T20477] Swap cache stats: add 0, delete 0, find 0/0 [ 1421.370696][T20477] Free swap = 0kB [ 1421.403275][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1421.403833][T20477] Total swap = 0kB [ 1421.428536][ T3859] CPU: 0 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1421.432876][T20477] 1965979 pages RAM [ 1421.437220][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1421.441008][T20477] 0 pages HighMem/MovableOnly [ 1421.451039][ T3859] Call Trace: [ 1421.451065][ T3859] dump_stack+0x18f/0x20d [ 1421.451081][ T3859] dump_header+0x10b/0x7e4 [ 1421.451097][ T3859] oom_kill_process.cold+0x10/0x15 [ 1421.451117][ T3859] out_of_memory+0x326/0x1340 [ 1421.455788][T20477] 349903 pages reserved [ 1421.459038][ T3859] ? oom_killer_disable+0x270/0x270 [ 1421.463357][T20477] 0 pages cma reserved [ 1421.467736][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1421.495626][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1421.502310][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1421.508921][ T3859] ? warn_alloc+0x120/0x120 [ 1421.513421][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1421.518973][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1421.523917][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1421.529293][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1421.536060][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1421.542300][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1421.547671][ T3859] alloc_pages_current+0x187/0x280 [ 1421.552785][ T3859] __page_cache_alloc+0x31e/0x450 [ 1421.557814][ T3859] pagecache_get_page+0x27d/0xe10 [ 1421.562837][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1421.568468][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1421.573238][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1421.578088][ T3859] __do_fault+0x10d/0x4d0 [ 1421.582425][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1421.587368][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1421.593276][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1421.598315][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1421.603868][ T3859] exc_page_fault+0xab/0x170 [ 1421.608467][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1421.613421][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1421.618268][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1421.622669][ T3859] Code: Bad RIP value. [ 1421.626726][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1421.632782][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1421.640748][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1421.648712][ T3859] RBP: 00007ffd902c6780 R08: 0000000000000000 R09: 00007ffd90355080 [ 1421.656680][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1421.664647][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc18147b86 [ 1421.683984][ T3859] Mem-Info: [ 1421.687135][ T3859] active_anon:205143 inactive_anon:4157 isolated_anon:0 [ 1421.687135][ T3859] active_file:18 inactive_file:10 isolated_file:0 [ 1421.687135][ T3859] unevictable:1 dirty:0 writeback:0 [ 1421.687135][ T3859] slab_reclaimable:15553 slab_unreclaimable:114179 [ 1421.687135][ T3859] mapped:53872 shmem:4417 pagetables:8088 bounce:0 [ 1421.687135][ T3859] free:14983 free_pcp:307 free_cma:0 [ 1421.724812][ T3859] Node 0 active_anon:820528kB inactive_anon:16628kB active_file:56kB inactive_file:52kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215488kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 606208kB writeback_tmp:0kB all_unreclaimable? yes [ 1421.760168][ T3859] Node 1 active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1421.787560][ T3859] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1421.825522][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1421.831274][ T3859] Node 0 DMA32 free:21704kB min:42060kB low:51036kB high:60012kB reserved_highatomic:0KB active_anon:820528kB inactive_anon:16628kB active_file:56kB inactive_file:52kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17840kB pagetables:32260kB bounce:0kB free_pcp:984kB local_pcp:732kB free_cma:0kB [ 1421.865248][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1421.869946][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1421.903363][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1421.908067][ T3859] Node 1 Normal free:26888kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:260kB local_pcp:0kB free_cma:0kB [ 1421.992055][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1421.996771][ T3859] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10156kB [ 1422.022008][ T3859] Node 0 DMA32: 2232*4kB (ME) 1133*8kB (ME) 77*16kB (UME) 25*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 21048kB [ 1422.063879][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1422.105337][ T3859] Node 1 Normal: 130*4kB (UME) 70*8kB (UME) 49*16kB (UME) 22*32kB (UME) 4*64kB (M) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26888kB [ 1422.132024][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1422.141573][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1422.172019][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1422.181577][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1422.212197][ T3859] 4445 total pagecache pages [ 1422.216832][ T3859] 0 pages in swap cache [ 1422.220977][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1422.242020][ T3859] Free swap = 0kB [ 1422.245772][ T3859] Total swap = 0kB [ 1422.249499][ T3859] 1965979 pages RAM [ 1422.262053][ T3859] 0 pages HighMem/MovableOnly [ 1422.266761][ T3859] 349903 pages reserved [ 1422.270924][ T3859] 0 pages cma reserved [ 1422.292045][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=13308,uid=0 [ 1422.312206][ T3859] Out of memory: Killed process 13308 (syz-executor.2) total-vm:75244kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1422.376221][ T6821] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1422.414004][ T6821] CPU: 0 PID: 6821 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1422.422248][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1422.432289][ T6821] Call Trace: [ 1422.435556][ T6821] dump_stack+0x18f/0x20d [ 1422.439872][ T6821] dump_header+0x10b/0x7e4 [ 1422.444264][ T6821] oom_kill_process.cold+0x10/0x15 [ 1422.449354][ T6821] out_of_memory+0x326/0x1340 [ 1422.454011][ T6821] ? oom_killer_disable+0x270/0x270 [ 1422.459197][ T6821] ? mutex_trylock+0x246/0x2c0 [ 1422.463947][ T6821] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1422.470608][ T6821] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1422.477184][ T6821] ? warn_alloc+0x120/0x120 [ 1422.481663][ T6821] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1422.487190][ T6821] ? lock_is_held_type+0xb0/0xe0 [ 1422.492108][ T6821] __alloc_pages_nodemask+0x68f/0x930 [ 1422.497486][ T6821] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1422.504223][ T6821] ? page_cache_readahead_unbounded+0x572/0x850 [ 1422.510467][ T6821] ? __lock_page_or_retry+0x650/0x650 [ 1422.515814][ T6821] alloc_pages_current+0x187/0x280 [ 1422.520902][ T6821] __page_cache_alloc+0x31e/0x450 [ 1422.525918][ T6821] pagecache_get_page+0x27d/0xe10 [ 1422.530919][ T6821] ? __do_page_cache_readahead+0xc2/0xf0 [ 1422.536529][ T6821] filemap_fault+0x1a99/0x2ad0 [ 1422.541274][ T6821] ext4_filemap_fault+0x87/0xb6 [ 1422.546102][ T6821] __do_fault+0x10d/0x4d0 [ 1422.550416][ T6821] handle_mm_fault+0x37a3/0x43f0 [ 1422.555337][ T6821] ? apply_to_existing_page_range+0x40/0x40 [ 1422.561221][ T6821] do_user_addr_fault+0x5a2/0xd00 [ 1422.566235][ T6821] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1422.571763][ T6821] exc_page_fault+0xab/0x170 [ 1422.576333][ T6821] ? asm_exc_page_fault+0x8/0x30 [ 1422.581248][ T6821] asm_exc_page_fault+0x1e/0x30 [ 1422.586078][ T6821] RIP: 0033:0x447a60 [ 1422.589942][ T6821] Code: Bad RIP value. [ 1422.594000][ T6821] RSP: 002b:000000c000053fd0 EFLAGS: 00010206 [ 1422.600040][ T6821] RAX: 000000c00003bf58 RBX: 000000c000000900 RCX: 000000c000066480 [ 1422.607990][ T6821] RDX: 0000000000000000 RSI: 000000c000066480 RDI: 00000000016ff801 [ 1422.615947][ T6821] RBP: 000000c00003bf58 R08: 0000000000000000 R09: 0000000000000000 [ 1422.623943][ T6821] R10: 0000000000000000 R11: 0000000000000202 R12: 000001573ce90837 [ 1422.631906][ T6821] R13: 0000000000000001 R14: 000001573ce90837 R15: 0000000000000000 [ 1422.658563][ T6821] Mem-Info: [ 1422.661728][ T6821] active_anon:204595 inactive_anon:4157 isolated_anon:0 [ 1422.661728][ T6821] active_file:22 inactive_file:6 isolated_file:0 [ 1422.661728][ T6821] unevictable:1 dirty:0 writeback:0 [ 1422.661728][ T6821] slab_reclaimable:15552 slab_unreclaimable:115020 [ 1422.661728][ T6821] mapped:53872 shmem:4417 pagetables:8050 bounce:0 [ 1422.661728][ T6821] free:14705 free_pcp:343 free_cma:0 [ 1422.710886][ T6821] Node 0 active_anon:818336kB inactive_anon:16628kB active_file:80kB inactive_file:28kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215488kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 604160kB writeback_tmp:0kB all_unreclaimable? yes [ 1422.752082][ T6821] Node 1 active_anon:44kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1422.802067][ T6821] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1422.862014][ T6821] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1422.867777][ T6821] Node 0 DMA32 free:21152kB min:42060kB low:51036kB high:60012kB reserved_highatomic:0KB active_anon:818336kB inactive_anon:16628kB active_file:80kB inactive_file:28kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17812kB pagetables:32108kB bounce:0kB free_pcp:1056kB local_pcp:808kB free_cma:0kB [ 1422.932025][ T6821] lowmem_reserve[]: 0 0 0 0 0 [ 1422.936745][ T6821] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1423.006992][ T6821] lowmem_reserve[]: 0 0 0 0 0 [ 1423.011708][ T6821] Node 1 Normal free:26888kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:260kB local_pcp:0kB free_cma:0kB [ 1423.107688][ T6821] lowmem_reserve[]: 0 0 0 0 0 [ 1423.151023][ T6821] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10156kB [ 1423.181202][ T6821] Node 0 DMA32: 2232*4kB (ME) 1134*8kB (UME) 76*16kB (ME) 26*32kB (UM) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 20944kB [ 1423.222029][ T6821] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1423.235433][ T6821] Node 1 Normal: 130*4kB (UME) 70*8kB (UME) 49*16kB (UME) 23*32kB (UME) 4*64kB (M) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26920kB [ 1423.272059][ T6821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1423.281640][ T6821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1423.322044][ T6821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1423.331605][ T6821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1423.372050][ T6821] 4445 total pagecache pages [ 1423.376662][ T6821] 0 pages in swap cache [ 1423.380808][ T6821] Swap cache stats: add 0, delete 0, find 0/0 [ 1423.402055][ T6821] Free swap = 0kB [ 1423.405790][ T6821] Total swap = 0kB [ 1423.409497][ T6821] 1965979 pages RAM [ 1423.413865][ T6821] 0 pages HighMem/MovableOnly [ 1423.418531][ T6821] 349903 pages reserved [ 1423.432861][ T6821] 0 pages cma reserved [ 1423.436935][ T6821] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=11662,uid=0 [ 1423.472250][ T6821] Out of memory: Killed process 11662 (syz-executor.4) total-vm:75112kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1423.557498][ T6820] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1423.588541][ T6820] CPU: 1 PID: 6820 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1423.596796][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1423.606846][ T6820] Call Trace: [ 1423.610142][ T6820] dump_stack+0x18f/0x20d [ 1423.614472][ T6820] dump_header+0x10b/0x7e4 [ 1423.618886][ T6820] oom_kill_process.cold+0x10/0x15 [ 1423.624019][ T6820] out_of_memory+0x326/0x1340 [ 1423.628704][ T6820] ? oom_killer_disable+0x270/0x270 [ 1423.633938][ T6820] ? mutex_trylock+0x246/0x2c0 [ 1423.638701][ T6820] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1423.645377][ T6820] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1423.651979][ T6820] ? warn_alloc+0x120/0x120 [ 1423.656480][ T6820] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1423.662030][ T6820] ? lock_is_held_type+0xb0/0xe0 [ 1423.666971][ T6820] __alloc_pages_nodemask+0x68f/0x930 [ 1423.672350][ T6820] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1423.679113][ T6820] ? page_cache_readahead_unbounded+0x572/0x850 [ 1423.685351][ T6820] ? __lock_page_or_retry+0x650/0x650 [ 1423.690717][ T6820] alloc_pages_current+0x187/0x280 [ 1423.695828][ T6820] __page_cache_alloc+0x31e/0x450 [ 1423.700855][ T6820] pagecache_get_page+0x27d/0xe10 [ 1423.705882][ T6820] ? __do_page_cache_readahead+0xc2/0xf0 [ 1423.711511][ T6820] filemap_fault+0x1a99/0x2ad0 [ 1423.716281][ T6820] ext4_filemap_fault+0x87/0xb6 [ 1423.721126][ T6820] __do_fault+0x10d/0x4d0 [ 1423.725459][ T6820] handle_mm_fault+0x37a3/0x43f0 [ 1423.730400][ T6820] ? apply_to_existing_page_range+0x40/0x40 [ 1423.736328][ T6820] do_user_addr_fault+0x5a2/0xd00 [ 1423.741404][ T6820] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1423.746988][ T6820] exc_page_fault+0xab/0x170 [ 1423.751579][ T6820] ? asm_exc_page_fault+0x8/0x30 [ 1423.756511][ T6820] asm_exc_page_fault+0x1e/0x30 [ 1423.761372][ T6820] RIP: 0033:0x43b2bd [ 1423.765284][ T6820] Code: Bad RIP value. [ 1423.769378][ T6820] RSP: 002b:000000c000051f50 EFLAGS: 00010206 [ 1423.775465][ T6820] RAX: 0000000000000000 RBX: 0000000000000014 RCX: 000000000046068d [ 1423.783433][ T6820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c000051f30 [ 1423.791425][ T6820] RBP: 000000c000051f48 R08: 000000c000066480 R09: 00007ffcbafd8090 [ 1423.799453][ T6820] R10: 0000000000043ba8 R11: 0000000000000202 R12: 00000000004338c0 [ 1423.807475][ T6820] R13: 0000000000000000 R14: 0000000000adca10 R15: 0000000000000000 [ 1423.851404][ T6820] Mem-Info: [ 1423.875297][ T6820] active_anon:204046 inactive_anon:4157 isolated_anon:0 [ 1423.875297][ T6820] active_file:10 inactive_file:18 isolated_file:0 [ 1423.875297][ T6820] unevictable:1 dirty:0 writeback:0 [ 1423.875297][ T6820] slab_reclaimable:15549 slab_unreclaimable:115610 [ 1423.875297][ T6820] mapped:53872 shmem:4417 pagetables:8061 bounce:0 [ 1423.875297][ T6820] free:14705 free_pcp:309 free_cma:0 [ 1424.278245][ T6820] Node 0 active_anon:816140kB inactive_anon:16628kB active_file:40kB inactive_file:4168kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:218588kB dirty:100kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 602112kB writeback_tmp:0kB all_unreclaimable? yes [ 1424.322037][ T6820] Node 1 active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1424.386199][ T6820] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1424.448459][ T6820] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1424.454307][ T6820] Node 0 DMA32 free:537532kB min:42060kB low:51036kB high:60012kB reserved_highatomic:0KB active_anon:816140kB inactive_anon:16628kB active_file:40kB inactive_file:4168kB unevictable:4kB writepending:148kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17780kB pagetables:32004kB bounce:0kB free_pcp:2700kB local_pcp:1420kB free_cma:0kB [ 1424.486999][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 1424.491713][ T6820] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1424.521483][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 1424.527700][ T6820] Node 1 Normal free:26920kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:260kB local_pcp:0kB free_cma:0kB [ 1424.564028][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 1424.568734][ T6820] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10156kB [ 1424.585237][ T6820] Node 0 DMA32: 8008*4kB (UME) 2712*8kB (UME) 6341*16kB (UME) 3406*32kB (UM) 1862*64kB (U) 1026*128kB (U) 150*256kB (U) 8*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 559216kB [ 1424.603006][ T6820] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1424.615035][ T6820] Node 1 Normal: 130*4kB (UME) 70*8kB (UME) 49*16kB (UME) 23*32kB (UME) 4*64kB (M) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26920kB [ 1424.637156][ T6820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.647236][ T6820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1424.656914][ T6820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.666802][ T6820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1424.676501][ T6820] 5501 total pagecache pages [ 1424.681089][ T6820] 0 pages in swap cache [ 1424.685704][ T6820] Swap cache stats: add 0, delete 0, find 0/0 [ 1424.691769][ T6820] Free swap = 0kB [ 1424.695913][ T6820] Total swap = 0kB [ 1424.699636][ T6820] 1965979 pages RAM [ 1424.703773][ T6820] 0 pages HighMem/MovableOnly [ 1424.708452][ T6820] 349903 pages reserved [ 1424.712960][ T6820] 0 pages cma reserved [ 1424.717024][ T6820] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=10203,uid=0 [ 1424.731561][T20481] tipc: TX() has been purged, node left! [ 1424.737805][ T6820] Out of memory: Killed process 10203 (syz-executor.3) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 01:50:16 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x11d, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:50:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1a000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0xf, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:16 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0xd8c00200, 0x0, 0x0, 0x2}}, &(0x7f0000000040)=""/219, 0x1a, 0xdb, 0x8}, 0x20) 01:50:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:16 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x20000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:50:16 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1) 01:50:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0xc0, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:16 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x20000001, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:50:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0xec0, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:16 executing program 1: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @dev, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x2b, 0x0, @local, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 01:50:16 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x2c030000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:50:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x33fe0, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:17 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x11e, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:50:17 executing program 1: unshare(0x40600) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) [ 1432.887719][ T1151] oom_reaper: reaped process 20520 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 1432.930178][ T6498] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1432.948180][ T6498] CPU: 0 PID: 6498 Comm: in:imklog Not tainted 5.8.0-rc3-syzkaller #0 [ 1432.956343][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1432.966393][ T6498] Call Trace: [ 1432.969687][ T6498] dump_stack+0x18f/0x20d [ 1432.974020][ T6498] dump_header+0x10b/0x7e4 [ 1432.978436][ T6498] oom_kill_process.cold+0x10/0x15 [ 1432.983552][ T6498] out_of_memory+0x326/0x1340 [ 1432.988236][ T6498] ? oom_killer_disable+0x270/0x270 [ 1432.993439][ T6498] ? mutex_trylock+0x246/0x2c0 [ 1432.998201][ T6498] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1433.004885][ T6498] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1433.011494][ T6498] ? warn_alloc+0x120/0x120 [ 1433.016006][ T6498] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1433.021566][ T6498] ? lock_is_held_type+0xb0/0xe0 [ 1433.026513][ T6498] __alloc_pages_nodemask+0x68f/0x930 [ 1433.031893][ T6498] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1433.038677][ T6498] ? page_cache_readahead_unbounded+0x572/0x850 [ 1433.044920][ T6498] ? __lock_page_or_retry+0x650/0x650 [ 1433.050296][ T6498] alloc_pages_current+0x187/0x280 [ 1433.055411][ T6498] __page_cache_alloc+0x31e/0x450 [ 1433.060437][ T6498] pagecache_get_page+0x27d/0xe10 [ 1433.065465][ T6498] ? __do_page_cache_readahead+0xc2/0xf0 [ 1433.071097][ T6498] filemap_fault+0x1a99/0x2ad0 [ 1433.075875][ T6498] ext4_filemap_fault+0x87/0xb6 [ 1433.080724][ T6498] __do_fault+0x10d/0x4d0 [ 1433.085054][ T6498] handle_mm_fault+0x37a3/0x43f0 [ 1433.090000][ T6498] ? apply_to_existing_page_range+0x40/0x40 [ 1433.095905][ T6498] ? vmacache_update+0xce/0x140 [ 1433.100760][ T6498] do_user_addr_fault+0x5a2/0xd00 [ 1433.105789][ T6498] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1433.111341][ T6498] exc_page_fault+0xab/0x170 [ 1433.115934][ T6498] ? asm_exc_page_fault+0x8/0x30 [ 1433.120875][ T6498] asm_exc_page_fault+0x1e/0x30 [ 1433.125723][ T6498] RIP: 0033:0x7febe7d1122d [ 1433.130126][ T6498] Code: Bad RIP value. [ 1433.134184][ T6498] RSP: 002b:00007febe56ad580 EFLAGS: 00010293 [ 1433.140247][ T6498] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007febe7d1122d [ 1433.148213][ T6498] RDX: 0000000000001fa0 RSI: 00007febe56adda0 RDI: 0000000000000004 [ 1433.156181][ T6498] RBP: 00005614bf3629d0 R08: 0000000000000000 R09: 0000000000000000 [ 1433.164150][ T6498] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007febe56adda0 [ 1433.172117][ T6498] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007febe56ade9c [ 1433.205842][ T6498] Mem-Info: [ 1433.209018][ T6498] active_anon:202978 inactive_anon:4157 isolated_anon:0 [ 1433.209018][ T6498] active_file:15 inactive_file:15 isolated_file:0 [ 1433.209018][ T6498] unevictable:1 dirty:2 writeback:0 [ 1433.209018][ T6498] slab_reclaimable:15506 slab_unreclaimable:113781 [ 1433.209018][ T6498] mapped:53913 shmem:4417 pagetables:7984 bounce:0 [ 1433.209018][ T6498] free:16818 free_pcp:535 free_cma:0 [ 1433.245640][ T6498] Node 0 active_anon:811868kB inactive_anon:16628kB active_file:56kB inactive_file:56kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215652kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 600064kB writeback_tmp:0kB all_unreclaimable? yes [ 1433.270804][T20520] syz-executor.5: vmalloc: allocation failure, allocated 4132028416 of 4294975488 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1433.273245][ T6498] Node 1 active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1433.297231][T20520] CPU: 1 PID: 20520 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1433.323718][T20520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1433.333768][T20520] Call Trace: [ 1433.337067][T20520] dump_stack+0x18f/0x20d [ 1433.340408][ T6498] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1433.341400][T20520] warn_alloc.cold+0x87/0x17a [ 1433.370332][ T6498] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1433.374955][T20520] ? mark_held_locks+0x9f/0xe0 [ 1433.374973][T20520] ? zone_watermark_ok_safe+0x260/0x260 [ 1433.374998][T20520] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1433.380685][ T6498] Node 0 DMA32 free:30236kB min:60492kB low:69468kB high:78444kB reserved_highatomic:0KB active_anon:811868kB inactive_anon:16628kB active_file:56kB inactive_file:56kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17712kB pagetables:31844kB bounce:0kB free_pcp:1860kB local_pcp:1368kB free_cma:0kB [ 1433.385445][T20520] __vmalloc_area_node+0x49e/0x7a0 [ 1433.385471][T20520] ? ip_set_alloc+0x48/0x60 [ 1433.385488][T20520] ? ip_set_alloc+0x48/0x60 [ 1433.391008][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1433.397195][T20520] vzalloc+0x116/0x1a0 [ 1433.397211][T20520] ip_set_alloc+0x48/0x60 [ 1433.397227][T20520] hash_netnet_create+0x401/0xd70 [ 1433.397246][T20520] ? hash_netnet6_head+0xcd0/0xcd0 [ 1433.429383][ T6498] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1433.434479][T20520] ip_set_create+0x6a2/0x13c0 [ 1433.434502][T20520] ? ip_set_sockfn_get+0xe00/0xe00 [ 1433.438976][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1433.443492][T20520] ? lock_is_held_type+0xb0/0xe0 [ 1433.443513][T20520] ? ip_set_sockfn_get+0xe00/0xe00 [ 1433.448162][ T6498] Node 1 Normal free:26868kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:280kB local_pcp:4kB free_cma:0kB [ 1433.452218][T20520] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1433.452252][T20520] ? nfnetlink_rcv+0x420/0x420 [ 1433.456554][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1433.461583][T20520] ? is_bpf_text_address+0xcb/0x160 [ 1433.466706][ T6498] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10168kB [ 1433.494702][T20520] ? __lock_acquire+0xc1e/0x56e0 [ 1433.494727][T20520] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1433.494742][T20520] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1433.494765][T20520] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1433.499427][ T6498] Node 0 DMA32: 2691*4kB (UME) 1560*8kB (UME) 243*16kB (UME) 94*32kB (UME) 7*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30588kB [ 1433.504523][T20520] netlink_rcv_skb+0x15a/0x430 [ 1433.504540][T20520] ? nfnetlink_rcv+0x420/0x420 [ 1433.504553][T20520] ? netlink_ack+0xa10/0xa10 [ 1433.504576][T20520] ? ns_capable+0xde/0x100 [ 1433.504599][T20520] nfnetlink_rcv+0x1ac/0x420 [ 1433.509265][ T6498] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1433.514196][T20520] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1433.514218][T20520] netlink_unicast+0x533/0x7d0 [ 1433.514235][T20520] ? netlink_attachskb+0x810/0x810 [ 1433.514260][T20520] ? _copy_from_iter_full+0x247/0x890 [ 1433.519367][ T6498] Node 1 Normal: 141*4kB (UME) 72*8kB (ME) 50*16kB (UME) 21*32kB (UME) 5*64kB (UM) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26868kB [ 1433.549831][T20520] ? __phys_addr+0x9a/0x110 [ 1433.549847][T20520] ? __phys_addr_symbol+0x2c/0x70 [ 1433.549862][T20520] ? __check_object_size+0x171/0x3e4 [ 1433.549878][T20520] netlink_sendmsg+0x856/0xd90 [ 1433.549896][T20520] ? netlink_unicast+0x7d0/0x7d0 [ 1433.549915][T20520] ? netlink_unicast+0x7d0/0x7d0 [ 1433.549946][T20520] sock_sendmsg+0xcf/0x120 [ 1433.554905][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1433.559645][T20520] ____sys_sendmsg+0x6e8/0x810 [ 1433.564356][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1433.569493][T20520] ? kernel_sendmsg+0x50/0x50 [ 1433.584202][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1433.589097][T20520] ? do_recvmmsg+0x6d0/0x6d0 [ 1433.595111][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1433.601036][T20520] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1433.606940][ T6498] 4447 total pagecache pages [ 1433.621829][T20520] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1433.621848][T20520] ___sys_sendmsg+0xf3/0x170 [ 1433.621865][T20520] ? sendmsg_copy_msghdr+0x160/0x160 [ 1433.621886][T20520] ? __fget_files+0x272/0x400 [ 1433.626661][ T6498] 0 pages in swap cache [ 1433.631397][T20520] ? lock_downgrade+0x820/0x820 [ 1433.636241][ T6498] Swap cache stats: add 0, delete 0, find 0/0 [ 1433.640600][T20520] ? find_held_lock+0x2d/0x110 [ 1433.640619][T20520] ? __might_fault+0x11f/0x1d0 [ 1433.645227][ T6498] Free swap = 0kB [ 1433.656549][T20520] ? __fget_files+0x294/0x400 [ 1433.656570][T20520] ? __fget_light+0xea/0x280 [ 1433.656590][T20520] __sys_sendmsg+0xe5/0x1b0 [ 1433.662045][ T6498] Total swap = 0kB [ 1433.666775][T20520] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1433.671853][ T6498] 1965979 pages RAM [ 1433.677210][T20520] ? __x64_sys_futex+0x382/0x4e0 [ 1433.677234][T20520] ? do_syscall_64+0x1c/0xe0 [ 1433.677250][T20520] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1433.677269][T20520] do_syscall_64+0x60/0xe0 [ 1433.694298][ T6498] 0 pages HighMem/MovableOnly [ 1433.698769][T20520] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1433.703788][ T6498] 349903 pages reserved [ 1433.709035][T20520] RIP: 0033:0x45cb29 [ 1433.713803][ T6498] 0 pages cma reserved [ 1433.718682][T20520] Code: Bad RIP value. [ 1433.723635][ T6498] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=20022,uid=0 [ 1433.727987][T20520] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1433.737640][ T6498] Out of memory: Killed process 20022 (syz-executor.1) total-vm:74980kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1433.742286][T20520] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1433.742295][T20520] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1433.742303][T20520] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1433.742312][T20520] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1433.742327][T20520] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1433.773099][ T6498] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1433.811086][T20520] Mem-Info: [ 1433.839598][ T6498] CPU: 0 PID: 6498 Comm: in:imklog Not tainted 5.8.0-rc3-syzkaller #0 [ 1433.839977][T20520] active_anon:202426 inactive_anon:4157 isolated_anon:0 [ 1433.839977][T20520] active_file:15 inactive_file:15 isolated_file:0 [ 1433.839977][T20520] unevictable:1 dirty:0 writeback:0 [ 1433.839977][T20520] slab_reclaimable:15506 slab_unreclaimable:113941 [ 1433.839977][T20520] mapped:53913 shmem:4417 pagetables:7945 bounce:0 [ 1433.839977][T20520] free:17341 free_pcp:546 free_cma:0 [ 1433.844595][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1433.844600][ T6498] Call Trace: [ 1433.844622][ T6498] dump_stack+0x18f/0x20d [ 1433.844640][ T6498] dump_header+0x10b/0x7e4 [ 1433.844656][ T6498] oom_kill_process.cold+0x10/0x15 [ 1433.844676][ T6498] out_of_memory+0x326/0x1340 [ 1433.849258][T20520] Node 0 active_anon:809664kB inactive_anon:16628kB active_file:56kB inactive_file:56kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215652kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB all_unreclaimable? yes [ 1433.853729][ T6498] ? oom_killer_disable+0x270/0x270 [ 1433.853748][ T6498] ? mutex_trylock+0x246/0x2c0 [ 1433.853764][ T6498] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1433.853782][ T6498] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1433.853818][ T6498] ? warn_alloc+0x120/0x120 [ 1433.857531][T20520] Node 1 active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1433.862519][ T6498] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1433.862542][ T6498] ? lock_is_held_type+0xb0/0xe0 [ 1433.862562][ T6498] __alloc_pages_nodemask+0x68f/0x930 [ 1433.862589][ T6498] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1433.866372][T20520] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1433.871296][ T6498] ? page_cache_readahead_unbounded+0x572/0x850 [ 1433.875976][T20520] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1433.881835][ T6498] ? __lock_page_or_retry+0x650/0x650 [ 1433.886363][T20520] Node 0 DMA32 free:32296kB min:60492kB low:69468kB high:78444kB reserved_highatomic:0KB active_anon:809664kB inactive_anon:16628kB active_file:56kB inactive_file:56kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17712kB pagetables:31688kB bounce:0kB free_pcp:1904kB local_pcp:492kB free_cma:0kB [ 1433.890908][ T6498] alloc_pages_current+0x187/0x280 [ 1433.896845][T20520] lowmem_reserve[]: 0 0 0 0 0 [ 1433.900906][ T6498] __page_cache_alloc+0x31e/0x450 [ 1433.908685][T20520] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1433.908828][ T6498] pagecache_get_page+0x27d/0xe10 [ 1433.912940][T20520] lowmem_reserve[]: 0 0 0 0 0 [ 1433.927120][ T6498] ? __do_page_cache_readahead+0xc2/0xf0 [ 1433.927138][ T6498] filemap_fault+0x1a99/0x2ad0 [ 1433.927161][ T6498] ext4_filemap_fault+0x87/0xb6 [ 1433.927175][ T6498] __do_fault+0x10d/0x4d0 [ 1433.927194][ T6498] handle_mm_fault+0x37a3/0x43f0 [ 1433.935676][T20520] Node 1 Normal free:26900kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:280kB local_pcp:276kB free_cma:0kB [ 1433.951814][ T6498] ? apply_to_existing_page_range+0x40/0x40 [ 1433.951838][ T6498] ? vmacache_update+0xce/0x140 [ 1433.951856][ T6498] do_user_addr_fault+0x5a2/0xd00 [ 1433.951875][ T6498] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1433.951892][ T6498] exc_page_fault+0xab/0x170 [ 1433.951905][ T6498] ? asm_exc_page_fault+0x8/0x30 [ 1433.951916][ T6498] asm_exc_page_fault+0x1e/0x30 [ 1433.951945][ T6498] RIP: 0033:0x7febe7d1122d [ 1433.960043][T20520] lowmem_reserve[]: 0 0 0 0 0 [ 1433.967872][ T6498] Code: Bad RIP value. [ 1433.967882][ T6498] RSP: 002b:00007febe56ad580 EFLAGS: 00010293 [ 1433.967892][ T6498] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007febe7d1122d [ 1433.967899][ T6498] RDX: 0000000000001fa0 RSI: 00007febe56adda0 RDI: 0000000000000004 [ 1433.967907][ T6498] RBP: 00005614bf3629d0 R08: 0000000000000000 R09: 0000000000000000 [ 1433.967914][ T6498] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007febe56adda0 [ 1433.967927][ T6498] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007febe56ade9c [ 1434.007378][ T6498] Mem-Info: [ 1434.039344][T20520] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10168kB [ 1434.069801][ T6498] active_anon:202426 inactive_anon:4157 isolated_anon:0 [ 1434.069801][ T6498] active_file:15 inactive_file:15 isolated_file:0 [ 1434.069801][ T6498] unevictable:1 dirty:0 writeback:0 [ 1434.069801][ T6498] slab_reclaimable:15506 slab_unreclaimable:114253 [ 1434.069801][ T6498] mapped:53913 shmem:4417 pagetables:7945 bounce:0 [ 1434.069801][ T6498] free:17029 free_pcp:554 free_cma:0 [ 1434.088272][T20520] Node 0 DMA32: 2750*4kB (UME) 1547*8kB (ME) 195*16kB (ME) 90*32kB (ME) 6*64kB (UM) 0*128kB 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 31040kB [ 1434.130825][ T6498] Node 0 active_anon:809664kB inactive_anon:16628kB active_file:56kB inactive_file:56kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215652kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB all_unreclaimable? yes [ 1434.158175][T20520] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1434.182601][ T6498] Node 1 active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1434.201650][T20520] Node 1 Normal: 141*4kB (UME) 72*8kB (ME) 50*16kB (UME) 22*32kB (UME) 5*64kB (UM) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26900kB [ 1434.237561][ T6498] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1434.293276][T20520] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1434.322377][ T6498] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1434.348134][T20520] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1434.382484][ T6498] Node 0 DMA32 free:30216kB min:60492kB low:69468kB high:78444kB reserved_highatomic:0KB active_anon:809664kB inactive_anon:16628kB active_file:56kB inactive_file:56kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17684kB pagetables:31688kB bounce:0kB free_pcp:1936kB local_pcp:1444kB free_cma:0kB [ 1434.438057][T20520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1434.455879][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1434.468823][T20520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1434.471694][ T6498] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1434.500176][T20520] 4447 total pagecache pages [ 1434.541394][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1434.578096][T20520] 0 pages in swap cache [ 1434.622309][ T6498] Node 1 Normal free:26900kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:292kB local_pcp:4kB free_cma:0kB [ 1434.666476][T20520] Swap cache stats: add 0, delete 0, find 0/0 [ 1434.692228][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1434.728087][T20520] Free swap = 0kB [ 1434.748549][ T6498] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10168kB [ 1434.771230][T20520] Total swap = 0kB [ 1434.784202][ T6498] Node 0 DMA32: 2750*4kB (UME) 1547*8kB (ME) 195*16kB (ME) 91*32kB (UME) 6*64kB (UM) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30176kB [ 1434.809755][T20520] 1965979 pages RAM [ 1434.828509][ T6498] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1434.847993][T20520] 0 pages HighMem/MovableOnly [ 1434.869707][ T6498] Node 1 Normal: 141*4kB (UME) 72*8kB (ME) 50*16kB (UME) 22*32kB (UME) 5*64kB (UM) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26900kB [ 1434.896699][T20520] 349903 pages reserved [ 1434.900865][T20520] 0 pages cma reserved [ 1434.905962][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1434.925586][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1434.946677][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1434.956299][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1434.981282][ T6498] 4447 total pagecache pages [ 1434.989768][ T6498] 0 pages in swap cache [ 1434.993989][ T6498] Swap cache stats: add 0, delete 0, find 0/0 [ 1435.000044][ T6498] Free swap = 0kB [ 1435.019863][ T6498] Total swap = 0kB [ 1435.028365][ T6498] 1965979 pages RAM [ 1435.032261][ T6498] 0 pages HighMem/MovableOnly [ 1435.036928][ T6498] 349903 pages reserved [ 1435.041068][ T6498] 0 pages cma reserved [ 1435.060930][ T6498] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=19363,uid=0 [ 1435.079166][ T6498] Out of memory: Killed process 19363 (syz-executor.3) total-vm:74848kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1435.112488][ T1151] oom_reaper: reaped process 19363 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1435.154871][ T6498] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1435.172715][ T6498] CPU: 0 PID: 6498 Comm: in:imklog Not tainted 5.8.0-rc3-syzkaller #0 [ 1435.180872][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1435.190920][ T6498] Call Trace: [ 1435.194214][ T6498] dump_stack+0x18f/0x20d [ 1435.198544][ T6498] dump_header+0x10b/0x7e4 [ 1435.202958][ T6498] oom_kill_process.cold+0x10/0x15 [ 1435.208068][ T6498] out_of_memory+0x326/0x1340 [ 1435.212751][ T6498] ? oom_killer_disable+0x270/0x270 [ 1435.217950][ T6498] ? mutex_trylock+0x246/0x2c0 [ 1435.222711][ T6498] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1435.229388][ T6498] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1435.235992][ T6498] ? warn_alloc+0x120/0x120 [ 1435.240489][ T6498] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1435.246055][ T6498] ? lock_is_held_type+0xb0/0xe0 [ 1435.250998][ T6498] __alloc_pages_nodemask+0x68f/0x930 [ 1435.256401][ T6498] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1435.263171][ T6498] ? page_cache_readahead_unbounded+0x572/0x850 [ 1435.269411][ T6498] ? __lock_page_or_retry+0x650/0x650 [ 1435.274783][ T6498] alloc_pages_current+0x187/0x280 [ 1435.279891][ T6498] __page_cache_alloc+0x31e/0x450 [ 1435.284916][ T6498] pagecache_get_page+0x27d/0xe10 [ 1435.289937][ T6498] ? __do_page_cache_readahead+0xc2/0xf0 [ 1435.295565][ T6498] filemap_fault+0x1a99/0x2ad0 [ 1435.300341][ T6498] ext4_filemap_fault+0x87/0xb6 [ 1435.305194][ T6498] __do_fault+0x10d/0x4d0 [ 1435.309523][ T6498] handle_mm_fault+0x37a3/0x43f0 [ 1435.314464][ T6498] ? apply_to_existing_page_range+0x40/0x40 [ 1435.320388][ T6498] ? vmacache_update+0xce/0x140 [ 1435.325240][ T6498] do_user_addr_fault+0x5a2/0xd00 [ 1435.330266][ T6498] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1435.335815][ T6498] exc_page_fault+0xab/0x170 [ 1435.340401][ T6498] ? asm_exc_page_fault+0x8/0x30 [ 1435.345331][ T6498] asm_exc_page_fault+0x1e/0x30 [ 1435.350180][ T6498] RIP: 0033:0x7febe7d1122d [ 1435.354581][ T6498] Code: Bad RIP value. [ 1435.358637][ T6498] RSP: 002b:00007febe56ad580 EFLAGS: 00010293 [ 1435.364693][ T6498] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007febe7d1122d [ 1435.372661][ T6498] RDX: 0000000000001fa0 RSI: 00007febe56adda0 RDI: 0000000000000004 [ 1435.380627][ T6498] RBP: 00005614bf3629d0 R08: 0000000000000000 R09: 0000000000000000 [ 1435.388590][ T6498] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007febe56adda0 [ 1435.396556][ T6498] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007febe56ade9c [ 1435.431507][ T6498] Mem-Info: [ 1435.449438][ T6498] active_anon:201887 inactive_anon:4157 isolated_anon:0 [ 1435.449438][ T6498] active_file:15 inactive_file:15 isolated_file:0 [ 1435.449438][ T6498] unevictable:1 dirty:0 writeback:0 [ 1435.449438][ T6498] slab_reclaimable:15506 slab_unreclaimable:114912 [ 1435.449438][ T6498] mapped:53913 shmem:4417 pagetables:7908 bounce:0 [ 1435.449438][ T6498] free:16918 free_pcp:596 free_cma:0 [ 1435.490327][ T6498] Node 0 active_anon:807508kB inactive_anon:16628kB active_file:56kB inactive_file:56kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215652kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB all_unreclaimable? yes [ 1435.535203][ T6498] Node 1 active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1435.573185][ T6498] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1435.626894][ T6498] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1435.637651][ T6498] Node 0 DMA32 free:30212kB min:60492kB low:69468kB high:78444kB reserved_highatomic:0KB active_anon:807492kB inactive_anon:16628kB active_file:0kB inactive_file:112kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17648kB pagetables:31632kB bounce:0kB free_pcp:2064kB local_pcp:1320kB free_cma:0kB [ 1435.687864][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1435.702070][ T6498] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1435.745718][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1435.750438][ T6498] Node 1 Normal free:26900kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:292kB local_pcp:4kB free_cma:0kB [ 1435.785835][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1435.790536][ T6498] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10168kB [ 1435.822213][ T6498] Node 0 DMA32: 2785*4kB (UME) 1548*8kB (UME) 196*16kB (UME) 91*32kB (UME) 6*64kB (UM) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30212kB [ 1435.841787][ T6498] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1435.871566][ T6498] Node 1 Normal: 141*4kB (UME) 72*8kB (ME) 50*16kB (UME) 22*32kB (UME) 5*64kB (UM) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26900kB [ 1435.899935][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1435.925287][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1435.938358][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1435.948817][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1435.972918][ T6498] 4447 total pagecache pages [ 1435.977531][ T6498] 0 pages in swap cache [ 1435.981680][ T6498] Swap cache stats: add 0, delete 0, find 0/0 [ 1435.993244][ T6498] Free swap = 0kB [ 1435.996969][ T6498] Total swap = 0kB [ 1436.000678][ T6498] 1965979 pages RAM [ 1436.004531][ T6498] 0 pages HighMem/MovableOnly [ 1436.009199][ T6498] 349903 pages reserved [ 1436.029179][ T6498] 0 pages cma reserved [ 1436.037343][ T6498] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=19237,uid=0 [ 1436.051746][ T6498] Out of memory: Killed process 19237 (syz-executor.1) total-vm:74980kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1436.089991][ T1151] oom_reaper: reaped process 19237 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1436.116848][ T6825] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1436.144866][ T6825] CPU: 0 PID: 6825 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1436.153127][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1436.163185][ T6825] Call Trace: [ 1436.166479][ T6825] dump_stack+0x18f/0x20d [ 1436.170809][ T6825] dump_header+0x10b/0x7e4 [ 1436.175228][ T6825] oom_kill_process.cold+0x10/0x15 [ 1436.180339][ T6825] out_of_memory+0x326/0x1340 [ 1436.185021][ T6825] ? oom_killer_disable+0x270/0x270 [ 1436.190225][ T6825] ? mutex_trylock+0x246/0x2c0 [ 1436.194991][ T6825] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1436.201685][ T6825] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1436.208309][ T6825] ? warn_alloc+0x120/0x120 [ 1436.212811][ T6825] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1436.218363][ T6825] ? lock_is_held_type+0xb0/0xe0 [ 1436.223310][ T6825] __alloc_pages_nodemask+0x68f/0x930 [ 1436.228685][ T6825] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1436.235446][ T6825] ? page_cache_readahead_unbounded+0x572/0x850 [ 1436.241682][ T6825] ? __lock_page_or_retry+0x650/0x650 [ 1436.247055][ T6825] alloc_pages_current+0x187/0x280 [ 1436.252170][ T6825] __page_cache_alloc+0x31e/0x450 [ 1436.257193][ T6825] pagecache_get_page+0x27d/0xe10 [ 1436.262220][ T6825] ? __do_page_cache_readahead+0xc2/0xf0 [ 1436.267852][ T6825] filemap_fault+0x1a99/0x2ad0 [ 1436.272646][ T6825] ext4_filemap_fault+0x87/0xb6 [ 1436.277493][ T6825] __do_fault+0x10d/0x4d0 [ 1436.281818][ T6825] handle_mm_fault+0x37a3/0x43f0 [ 1436.286756][ T6825] ? apply_to_existing_page_range+0x40/0x40 [ 1436.292665][ T6825] do_user_addr_fault+0x5a2/0xd00 [ 1436.297688][ T6825] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1436.303233][ T6825] exc_page_fault+0xab/0x170 [ 1436.307818][ T6825] ? asm_exc_page_fault+0x8/0x30 [ 1436.312754][ T6825] asm_exc_page_fault+0x1e/0x30 [ 1436.317598][ T6825] RIP: 0033:0x460c23 [ 1436.321476][ T6825] Code: Bad RIP value. [ 1436.325531][ T6825] RSP: 002b:000000c00003bea0 EFLAGS: 00010202 [ 1436.331587][ T6825] RAX: ffffffffffffff92 RBX: 000000003b9767ce RCX: 0000000000460c23 [ 1436.339550][ T6825] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703ac0 [ 1436.347526][ T6825] RBP: 000000c00003bee8 R08: 0000000000000000 R09: 0000000000000000 [ 1436.355492][ T6825] R10: 000000c00003bed8 R11: 0000000000000202 R12: 0000015a58cd12d0 [ 1436.363458][ T6825] R13: 0000000000000001 R14: 0000015a58cd12d0 R15: 0000000000000036 [ 1436.401335][ T6825] Mem-Info: [ 1436.404541][ T6825] active_anon:201342 inactive_anon:4157 isolated_anon:0 [ 1436.404541][ T6825] active_file:22 inactive_file:0 isolated_file:0 [ 1436.404541][ T6825] unevictable:1 dirty:0 writeback:0 [ 1436.404541][ T6825] slab_reclaimable:15497 slab_unreclaimable:115356 [ 1436.404541][ T6825] mapped:53913 shmem:4417 pagetables:7894 bounce:0 [ 1436.404541][ T6825] free:17020 free_pcp:631 free_cma:0 [ 1436.511677][ T6825] Node 0 active_anon:805328kB inactive_anon:16628kB active_file:40kB inactive_file:56kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215652kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 593920kB writeback_tmp:0kB all_unreclaimable? yes [ 1436.599979][ T6825] Node 1 active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1436.649257][ T6825] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1436.684407][ T6825] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1436.690152][ T6825] Node 0 DMA32 free:30164kB min:60492kB low:69468kB high:78444kB reserved_highatomic:0KB active_anon:805312kB inactive_anon:16628kB active_file:56kB inactive_file:56kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17616kB pagetables:31528kB bounce:0kB free_pcp:2204kB local_pcp:1472kB free_cma:0kB [ 1436.752040][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1436.756771][ T6825] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1436.842045][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1436.846769][ T6825] Node 1 Normal free:26900kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:292kB local_pcp:288kB free_cma:0kB [ 1436.927970][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1436.940865][ T6825] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10168kB [ 1436.992076][ T6825] Node 0 DMA32: 2785*4kB (UME) 1551*8kB (UME) 196*16kB (UME) 90*32kB (ME) 6*64kB (UM) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30204kB [ 1436.992149][ T6825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1437.042050][ T6825] Node 1 Normal: 141*4kB (UME) 72*8kB (ME) 50*16kB (UME) 22*32kB (UME) 5*64kB (UM) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26900kB [ 1437.082052][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1437.091723][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1437.112095][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1437.121660][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1437.152118][ T6825] 4447 total pagecache pages [ 1437.156739][ T6825] 0 pages in swap cache [ 1437.160894][ T6825] Swap cache stats: add 0, delete 0, find 0/0 [ 1437.182045][ T6825] Free swap = 0kB [ 1437.185789][ T6825] Total swap = 0kB [ 1437.189500][ T6825] 1965979 pages RAM [ 1437.203733][ T6825] 0 pages HighMem/MovableOnly [ 1437.208431][ T6825] 349903 pages reserved [ 1437.222022][ T6825] 0 pages cma reserved [ 1437.226092][ T6825] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=27157,uid=0 [ 1437.288920][ T6825] Out of memory: Killed process 27157 (syz-executor.3) total-vm:74848kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 01:50:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x20000358, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:29 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x32000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:50:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1b000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:29 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x11f, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:50:29 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 01:50:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x7ffff000, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:29 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x37030000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:50:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0xb, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:29 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x3a020000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:50:29 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 01:50:29 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x3b9f0200, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:50:30 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x120, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1445.498196][ T6825] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1445.508987][ T6825] CPU: 0 PID: 6825 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1445.517214][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1445.527251][ T6825] Call Trace: [ 1445.530548][ T6825] dump_stack+0x18f/0x20d [ 1445.534885][ T6825] dump_header+0x10b/0x7e4 [ 1445.539294][ T6825] oom_kill_process.cold+0x10/0x15 [ 1445.544397][ T6825] out_of_memory+0x326/0x1340 [ 1445.549064][ T6825] ? oom_killer_disable+0x270/0x270 [ 1445.554255][ T6825] ? mutex_trylock+0x246/0x2c0 [ 1445.559019][ T6825] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1445.565714][ T6825] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1445.572324][ T6825] ? warn_alloc+0x120/0x120 [ 1445.576825][ T6825] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1445.582374][ T6825] ? lock_is_held_type+0xb0/0xe0 [ 1445.587318][ T6825] __alloc_pages_nodemask+0x68f/0x930 [ 1445.592701][ T6825] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1445.599454][ T6825] ? page_cache_readahead_unbounded+0x572/0x850 [ 1445.605672][ T6825] ? __lock_page_or_retry+0x650/0x650 [ 1445.611022][ T6825] alloc_pages_current+0x187/0x280 [ 1445.616128][ T6825] __page_cache_alloc+0x31e/0x450 [ 1445.621157][ T6825] pagecache_get_page+0x27d/0xe10 [ 1445.626191][ T6825] ? __do_page_cache_readahead+0xc2/0xf0 [ 1445.631819][ T6825] filemap_fault+0x1a99/0x2ad0 [ 1445.636568][ T6825] ext4_filemap_fault+0x87/0xb6 [ 1445.641396][ T6825] __do_fault+0x10d/0x4d0 [ 1445.645721][ T6825] handle_mm_fault+0x37a3/0x43f0 [ 1445.650666][ T6825] ? apply_to_existing_page_range+0x40/0x40 [ 1445.656575][ T6825] do_user_addr_fault+0x5a2/0xd00 [ 1445.661594][ T6825] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1445.667131][ T6825] exc_page_fault+0xab/0x170 [ 1445.671716][ T6825] ? asm_exc_page_fault+0x8/0x30 [ 1445.676648][ T6825] asm_exc_page_fault+0x1e/0x30 [ 1445.681493][ T6825] RIP: 0033:0x42c854 [ 1445.685378][ T6825] Code: Bad RIP value. [ 1445.689430][ T6825] RSP: 002b:000000c00003bea8 EFLAGS: 00010202 [ 1445.695487][ T6825] RAX: ffffffffffffff92 RBX: 000000003b988031 RCX: 0000000000460c23 [ 1445.703445][ T6825] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703ac0 [ 1445.711411][ T6825] RBP: 000000c00003bee8 R08: 0000000000000000 R09: 0000000000000000 [ 1445.719391][ T6825] R10: 000000c00003bed8 R11: 0000000000000202 R12: 0000015d41b09961 [ 1445.727342][ T6825] R13: 0000000000000001 R14: 0000015d41b09961 R15: 0000000000000036 [ 1445.753107][ T6825] Mem-Info: [ 1445.756288][ T6825] active_anon:201880 inactive_anon:4157 isolated_anon:0 [ 1445.756288][ T6825] active_file:14 inactive_file:12 isolated_file:0 [ 1445.756288][ T6825] unevictable:1 dirty:0 writeback:0 [ 1445.756288][ T6825] slab_reclaimable:15500 slab_unreclaimable:113546 [ 1445.756288][ T6825] mapped:53956 shmem:4417 pagetables:7906 bounce:0 [ 1445.756288][ T6825] free:31135 free_pcp:62 free_cma:0 [ 1445.798888][ T6825] Node 0 active_anon:807472kB inactive_anon:16628kB active_file:48kB inactive_file:48kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215824kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 593920kB writeback_tmp:0kB all_unreclaimable? no [ 1445.838516][ T6825] Node 1 active_anon:48kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1445.888742][ T6825] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1445.932454][ T6825] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1445.938209][ T6825] Node 0 DMA32 free:59388kB min:60492kB low:69468kB high:78444kB reserved_highatomic:0KB active_anon:805424kB inactive_anon:16628kB active_file:48kB inactive_file:48kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17616kB pagetables:31532kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1446.009522][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1446.019542][ T6825] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1446.054222][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1446.058939][ T6825] Node 1 Normal free:53840kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1446.096148][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1446.100869][ T6825] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 2*1024kB (U) 2*2048kB (M) 1*4096kB (U) = 10272kB [ 1446.124235][ T6825] Node 0 DMA32: 3885*4kB (UME) 1921*8kB (UME) 318*16kB (ME) 144*32kB (ME) 33*64kB (ME) 6*128kB (ME) 1*256kB (M) 0*512kB 10*1024kB (U) 2*2048kB (M) 0*4096kB = 58076kB [ 1446.141008][ T6825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1446.157567][ T6825] Node 1 Normal: 136*4kB (UME) 74*8kB (UME) 50*16kB (ME) 20*32kB (ME) 5*64kB (UM) 4*128kB (ME) 1*256kB (E) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (M) 11*4096kB (UM) = 53840kB [ 1446.176749][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1446.186369][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1446.203937][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1446.215384][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1446.226545][ T6825] 4443 total pagecache pages [ 1446.231142][ T6825] 0 pages in swap cache [ 1446.244484][ T6825] Swap cache stats: add 0, delete 0, find 0/0 [ 1446.250559][ T6825] Free swap = 0kB [ 1446.257538][ T6825] Total swap = 0kB [ 1446.261262][ T6825] 1965979 pages RAM [ 1446.265125][ T6825] 0 pages HighMem/MovableOnly [ 1446.269795][ T6825] 349903 pages reserved [ 1446.280295][ T6825] 0 pages cma reserved [ 1446.284427][ T6825] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=25419,uid=0 [ 1446.308231][ T6825] Out of memory: Killed process 25419 (syz-executor.3) total-vm:74848kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1446.340547][ T6825] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1446.373556][ T6825] CPU: 1 PID: 6825 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1446.381816][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1446.391874][ T6825] Call Trace: [ 1446.395163][ T6825] dump_stack+0x18f/0x20d [ 1446.399472][ T6825] dump_header+0x10b/0x7e4 [ 1446.403876][ T6825] oom_kill_process.cold+0x10/0x15 [ 1446.408968][ T6825] out_of_memory+0x326/0x1340 [ 1446.413625][ T6825] ? oom_killer_disable+0x270/0x270 [ 1446.418803][ T6825] ? mutex_trylock+0x246/0x2c0 [ 1446.423544][ T6825] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1446.430195][ T6825] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1446.436769][ T6825] ? warn_alloc+0x120/0x120 [ 1446.441258][ T6825] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1446.446801][ T6825] ? lock_is_held_type+0xb0/0xe0 [ 1446.451729][ T6825] __alloc_pages_nodemask+0x68f/0x930 [ 1446.457082][ T6825] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1446.463820][ T6825] ? page_cache_readahead_unbounded+0x572/0x850 [ 1446.470079][ T6825] ? __lock_page_or_retry+0x650/0x650 [ 1446.475434][ T6825] alloc_pages_current+0x187/0x280 [ 1446.480552][ T6825] __page_cache_alloc+0x31e/0x450 [ 1446.485557][ T6825] pagecache_get_page+0x27d/0xe10 [ 1446.490619][ T6825] ? __do_page_cache_readahead+0xc2/0xf0 [ 1446.496246][ T6825] filemap_fault+0x1a99/0x2ad0 [ 1446.501006][ T6825] ext4_filemap_fault+0x87/0xb6 [ 1446.505840][ T6825] __do_fault+0x10d/0x4d0 [ 1446.510160][ T6825] handle_mm_fault+0x37a3/0x43f0 [ 1446.515090][ T6825] ? apply_to_existing_page_range+0x40/0x40 [ 1446.520968][ T6825] do_user_addr_fault+0x5a2/0xd00 [ 1446.525973][ T6825] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1446.531497][ T6825] exc_page_fault+0xab/0x170 [ 1446.536075][ T6825] ? asm_exc_page_fault+0x8/0x30 [ 1446.540986][ T6825] asm_exc_page_fault+0x1e/0x30 [ 1446.545812][ T6825] RIP: 0033:0x42c854 [ 1446.549678][ T6825] Code: Bad RIP value. [ 1446.553715][ T6825] RSP: 002b:000000c00003bea8 EFLAGS: 00010202 [ 1446.559754][ T6825] RAX: ffffffffffffff92 RBX: 000000003b988031 RCX: 0000000000460c23 [ 1446.567701][ T6825] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703ac0 [ 1446.575647][ T6825] RBP: 000000c00003bee8 R08: 0000000000000000 R09: 0000000000000000 [ 1446.583597][ T6825] R10: 000000c00003bed8 R11: 0000000000000202 R12: 0000015d41b09961 [ 1446.591545][ T6825] R13: 0000000000000001 R14: 0000015d41b09961 R15: 0000000000000036 [ 1446.644934][ T6825] Mem-Info: [ 1446.648104][ T6825] active_anon:201341 inactive_anon:4157 isolated_anon:0 [ 1446.648104][ T6825] active_file:13 inactive_file:13 isolated_file:0 [ 1446.648104][ T6825] unevictable:1 dirty:0 writeback:0 [ 1446.648104][ T6825] slab_reclaimable:15500 slab_unreclaimable:114557 [ 1446.648104][ T6825] mapped:53956 shmem:4417 pagetables:7879 bounce:0 [ 1446.648104][ T6825] free:30552 free_pcp:251 free_cma:0 [ 1446.703048][ T6825] Node 0 active_anon:805316kB inactive_anon:16628kB active_file:48kB inactive_file:48kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215824kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB all_unreclaimable? no [ 1446.733169][ T6825] Node 1 active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1446.766483][ T6825] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1446.804969][ T6825] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1446.810718][ T6825] Node 0 DMA32 free:57544kB min:60492kB low:69468kB high:78444kB reserved_highatomic:0KB active_anon:803268kB inactive_anon:16628kB active_file:148kB inactive_file:0kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17584kB pagetables:31424kB bounce:0kB free_pcp:748kB local_pcp:564kB free_cma:0kB [ 1446.872740][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1446.877457][ T6825] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1446.928794][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1446.933569][ T6825] Node 1 Normal free:53872kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:256kB local_pcp:0kB free_cma:0kB [ 1446.978331][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1446.983105][ T6825] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 2*1024kB (U) 2*2048kB (M) 1*4096kB (U) = 10272kB [ 1447.004242][ T6825] Node 0 DMA32: 3884*4kB (ME) 1920*8kB (ME) 319*16kB (UME) 145*32kB (UME) 33*64kB (ME) 7*128kB (UME) 1*256kB (M) 0*512kB 6*1024kB (U) 3*2048kB (M) 0*4096kB = 56192kB [ 1447.031900][ T6825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1447.053003][ T6825] Node 1 Normal: 136*4kB (UME) 74*8kB (UME) 50*16kB (ME) 21*32kB (UME) 5*64kB (UM) 4*128kB (ME) 1*256kB (E) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (M) 11*4096kB (UM) = 53872kB [ 1447.071284][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1447.080908][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1447.095956][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1447.107621][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1447.121136][ T6825] 4443 total pagecache pages [ 1447.127856][ T6825] 0 pages in swap cache [ 1447.136134][ T6825] Swap cache stats: add 0, delete 0, find 0/0 [ 1447.156170][ T6825] Free swap = 0kB [ 1447.159916][ T6825] Total swap = 0kB [ 1447.168123][ T6825] 1965979 pages RAM [ 1447.171928][ T6825] 0 pages HighMem/MovableOnly [ 1447.180802][ T6825] 349903 pages reserved [ 1447.187959][ T6825] 0 pages cma reserved [ 1447.196304][ T6825] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=15086,uid=0 [ 1447.216991][ T6825] Out of memory: Killed process 15086 (syz-executor.1) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1447.242668][ T1151] oom_reaper: reaped process 15086 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1447.303246][ T7167] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1447.341184][ T7167] CPU: 1 PID: 7167 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0 [ 1447.349794][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1447.359866][ T7167] Call Trace: [ 1447.363142][ T7167] dump_stack+0x18f/0x20d [ 1447.367447][ T7167] dump_header+0x10b/0x7e4 [ 1447.371838][ T7167] oom_kill_process.cold+0x10/0x15 [ 1447.376962][ T7167] out_of_memory+0x326/0x1340 [ 1447.381618][ T7167] ? oom_killer_disable+0x270/0x270 [ 1447.386824][ T7167] ? mutex_trylock+0x246/0x2c0 [ 1447.391570][ T7167] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1447.398240][ T7167] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1447.404813][ T7167] ? warn_alloc+0x120/0x120 [ 1447.409291][ T7167] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1447.414819][ T7167] ? lock_is_held_type+0xb0/0xe0 [ 1447.419767][ T7167] __alloc_pages_nodemask+0x68f/0x930 [ 1447.425118][ T7167] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1447.431860][ T7167] ? page_cache_readahead_unbounded+0x572/0x850 [ 1447.438078][ T7167] ? __lock_page_or_retry+0x650/0x650 [ 1447.443425][ T7167] alloc_pages_current+0x187/0x280 [ 1447.448510][ T7167] __page_cache_alloc+0x31e/0x450 [ 1447.453510][ T7167] pagecache_get_page+0x27d/0xe10 [ 1447.458532][ T7167] ? __do_page_cache_readahead+0xc2/0xf0 [ 1447.464152][ T7167] filemap_fault+0x1a99/0x2ad0 [ 1447.468908][ T7167] ext4_filemap_fault+0x87/0xb6 [ 1447.473749][ T7167] __do_fault+0x10d/0x4d0 [ 1447.478054][ T7167] handle_mm_fault+0x37a3/0x43f0 [ 1447.482972][ T7167] ? apply_to_existing_page_range+0x40/0x40 [ 1447.488850][ T7167] do_user_addr_fault+0x5a2/0xd00 [ 1447.493870][ T7167] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1447.499393][ T7167] exc_page_fault+0xab/0x170 [ 1447.503958][ T7167] ? asm_exc_page_fault+0x8/0x30 [ 1447.508881][ T7167] asm_exc_page_fault+0x1e/0x30 [ 1447.513706][ T7167] RIP: 0033:0x4169ca [ 1447.517568][ T7167] Code: Bad RIP value. [ 1447.521615][ T7167] RSP: 002b:0000000000c9fda8 EFLAGS: 00010246 [ 1447.527653][ T7167] RAX: 0000000000000440 RBX: 0000000002318940 RCX: 00000000004169ca [ 1447.535610][ T7167] RDX: 0000000040000000 RSI: 0000000000c9fde0 RDI: ffffffffffffffff [ 1447.543555][ T7167] RBP: 0000000000000fc1 R08: 0000000000000001 R09: 0000000000000001 [ 1447.551499][ T7167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1447.559452][ T7167] R13: 0000000000c9fde0 R14: 000000000231899b R15: 0000000000c9fdf0 [ 1447.590392][ T7167] Mem-Info: [ 1447.594015][ T7167] active_anon:200794 inactive_anon:4157 isolated_anon:0 [ 1447.594015][ T7167] active_file:13 inactive_file:13 isolated_file:0 [ 1447.594015][ T7167] unevictable:1 dirty:0 writeback:0 [ 1447.594015][ T7167] slab_reclaimable:15497 slab_unreclaimable:115646 [ 1447.594015][ T7167] mapped:53956 shmem:4417 pagetables:7853 bounce:0 [ 1447.594015][ T7167] free:29956 free_pcp:338 free_cma:0 [ 1447.635922][ T7167] Node 0 active_anon:803128kB inactive_anon:16628kB active_file:48kB inactive_file:48kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215824kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 589824kB writeback_tmp:0kB all_unreclaimable? no [ 1447.671818][ T7167] Node 1 active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1447.700912][ T7167] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1447.750452][ T7167] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1447.761276][ T7167] Node 0 DMA32 free:55056kB min:60492kB low:69468kB high:78444kB reserved_highatomic:0KB active_anon:801080kB inactive_anon:16628kB active_file:148kB inactive_file:0kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17552kB pagetables:31320kB bounce:0kB free_pcp:1056kB local_pcp:708kB free_cma:0kB [ 1447.815357][ T7167] lowmem_reserve[]: 0 0 0 0 0 [ 1447.820063][ T7167] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1447.862944][ T7167] lowmem_reserve[]: 0 0 0 0 0 [ 1447.867653][ T7167] Node 1 Normal free:53872kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:256kB local_pcp:0kB free_cma:0kB [ 1447.911302][ T7167] lowmem_reserve[]: 0 0 0 0 0 [ 1447.916187][ T7167] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 2*1024kB (U) 2*2048kB (M) 1*4096kB (U) = 10272kB [ 1447.935454][ T7167] Node 0 DMA32: 3884*4kB (ME) 1920*8kB (ME) 319*16kB (UME) 145*32kB (UME) 33*64kB (ME) 6*128kB (ME) 2*256kB (UM) 1*512kB (U) 1*1024kB (U) 4*2048kB (M) 0*4096kB = 53760kB [ 1447.958666][ T7167] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1447.970124][ T7167] Node 1 Normal: 136*4kB (UME) 74*8kB (UME) 50*16kB (ME) 21*32kB (UME) 5*64kB (UM) 4*128kB (ME) 1*256kB (E) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (M) 11*4096kB (UM) = 53872kB [ 1447.993650][ T7167] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1448.009389][ T7167] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1448.020800][ T7167] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1448.041522][ T7167] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1448.050835][ T7167] 4443 total pagecache pages [ 1448.079337][ T7167] 0 pages in swap cache [ 1448.083571][ T7167] Swap cache stats: add 0, delete 0, find 0/0 [ 1448.089623][ T7167] Free swap = 0kB [ 1448.109428][ T7167] Total swap = 0kB [ 1448.118381][ T7167] 1965979 pages RAM [ 1448.131346][ T7167] 0 pages HighMem/MovableOnly [ 1448.136286][ T7167] 349903 pages reserved [ 1448.140434][ T7167] 0 pages cma reserved [ 1448.146474][ T7167] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=12150,uid=0 [ 1448.161083][ T7167] Out of memory: Killed process 12150 (syz-executor.2) total-vm:75152kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1448.207968][ T6824] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1448.233225][ T6824] CPU: 1 PID: 6824 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1448.241462][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1448.251494][ T6824] Call Trace: [ 1448.254797][ T6824] dump_stack+0x18f/0x20d [ 1448.259104][ T6824] dump_header+0x10b/0x7e4 [ 1448.263498][ T6824] oom_kill_process.cold+0x10/0x15 [ 1448.268613][ T6824] out_of_memory+0x326/0x1340 [ 1448.273271][ T6824] ? oom_killer_disable+0x270/0x270 [ 1448.278445][ T6824] ? mutex_trylock+0x246/0x2c0 [ 1448.283200][ T6824] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1448.289882][ T6824] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1448.296453][ T6824] ? warn_alloc+0x120/0x120 [ 1448.300941][ T6824] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1448.306464][ T6824] ? lock_is_held_type+0xb0/0xe0 [ 1448.311379][ T6824] __alloc_pages_nodemask+0x68f/0x930 [ 1448.316740][ T6824] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1448.323478][ T6824] ? page_cache_readahead_unbounded+0x572/0x850 [ 1448.329705][ T6824] ? __lock_page_or_retry+0x650/0x650 [ 1448.335060][ T6824] alloc_pages_current+0x187/0x280 [ 1448.340150][ T6824] __page_cache_alloc+0x31e/0x450 [ 1448.345154][ T6824] pagecache_get_page+0x27d/0xe10 [ 1448.350156][ T6824] ? __do_page_cache_readahead+0xc2/0xf0 [ 1448.355765][ T6824] filemap_fault+0x1a99/0x2ad0 [ 1448.360513][ T6824] ext4_filemap_fault+0x87/0xb6 [ 1448.365340][ T6824] __do_fault+0x10d/0x4d0 [ 1448.369674][ T6824] handle_mm_fault+0x37a3/0x43f0 [ 1448.374591][ T6824] ? apply_to_existing_page_range+0x40/0x40 [ 1448.380497][ T6824] do_user_addr_fault+0x5a2/0xd00 [ 1448.385501][ T6824] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1448.391048][ T6824] exc_page_fault+0xab/0x170 [ 1448.395651][ T6824] ? asm_exc_page_fault+0x8/0x30 [ 1448.400575][ T6824] asm_exc_page_fault+0x1e/0x30 [ 1448.405401][ T6824] RIP: 0033:0x460c23 [ 1448.409276][ T6824] Code: Bad RIP value. [ 1448.413314][ T6824] RSP: 002b:000000c00003f6a0 EFLAGS: 00010202 [ 1448.419355][ T6824] RAX: ffffffffffffff92 RBX: 000000003b985b4c RCX: 0000000000460c23 [ 1448.427303][ T6824] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703a40 [ 1448.435252][ T6824] RBP: 000000c00003f6e8 R08: 0000000000000000 R09: 0000000000000000 [ 1448.443201][ T6824] R10: 000000c00003f6d8 R11: 0000000000000202 R12: 0000000000000000 [ 1448.451152][ T6824] R13: 0000000000000000 R14: 000000c016acedf8 R15: 0000000000000244 [ 1448.466210][ T6824] Mem-Info: [ 1448.469369][ T6824] active_anon:200793 inactive_anon:4157 isolated_anon:0 [ 1448.469369][ T6824] active_file:16 inactive_file:10 isolated_file:0 [ 1448.469369][ T6824] unevictable:1 dirty:0 writeback:0 [ 1448.469369][ T6824] slab_reclaimable:15497 slab_unreclaimable:116651 [ 1448.469369][ T6824] mapped:53931 shmem:4417 pagetables:7816 bounce:0 [ 1448.469369][ T6824] free:29028 free_pcp:351 free_cma:0 [ 1448.505903][ T6824] Node 0 active_anon:803124kB inactive_anon:16628kB active_file:64kB inactive_file:32kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215724kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 589824kB writeback_tmp:0kB all_unreclaimable? no [ 1448.533416][ T6824] Node 1 active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1448.558928][ T6824] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1448.590453][ T6824] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1448.596229][ T6824] Node 0 DMA32 free:51480kB min:60492kB low:69468kB high:78444kB reserved_highatomic:0KB active_anon:800980kB inactive_anon:16628kB active_file:48kB inactive_file:48kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17520kB pagetables:31212kB bounce:0kB free_pcp:1196kB local_pcp:200kB free_cma:0kB [ 1448.628519][ T6824] lowmem_reserve[]: 0 0 0 0 0 [ 1448.647086][ T6824] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1448.675431][ T6824] lowmem_reserve[]: 0 0 0 0 0 [ 1448.680121][ T6824] Node 1 Normal free:53872kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:256kB local_pcp:256kB free_cma:0kB [ 1448.722075][ T6824] lowmem_reserve[]: 0 0 0 0 0 [ 1448.726782][ T6824] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 2*1024kB (U) 2*2048kB (M) 1*4096kB (U) = 10272kB [ 1448.752430][ T6824] Node 0 DMA32: 3884*4kB (ME) 1921*8kB (UME) 318*16kB (ME) 145*32kB (UME) 34*64kB (UME) 6*128kB (ME) 2*256kB (UM) 1*512kB (U) 0*1024kB 3*2048kB (M) 0*4096kB = 50744kB [ 1448.769243][ T6824] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1448.789111][ T6824] Node 1 Normal: 136*4kB (UME) 74*8kB (UME) 50*16kB (ME) 21*32kB (UME) 5*64kB (UM) 4*128kB (ME) 1*256kB (E) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (M) 11*4096kB (UM) = 53872kB [ 1448.808383][ T6824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1448.818880][ T6824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1448.831533][ T6824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1448.841168][ T6824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1448.850553][ T6824] 4443 total pagecache pages [ 1448.855193][ T6824] 0 pages in swap cache [ 1448.859344][ T6824] Swap cache stats: add 0, delete 0, find 0/0 [ 1448.865490][ T6824] Free swap = 0kB [ 1448.869202][ T6824] Total swap = 0kB [ 1448.872969][ T6824] 1965979 pages RAM [ 1448.876775][ T6824] 0 pages HighMem/MovableOnly [ 1448.881436][ T6824] 349903 pages reserved [ 1448.885649][ T6824] 0 pages cma reserved [ 1448.889726][ T6824] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=14871,uid=0 [ 1448.904091][ T6824] Out of memory: Killed process 14871 (syz-executor.4) total-vm:74980kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1448.957195][ T1151] oom_reaper: reaped process 14871 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1448.992309][ T6824] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1449.010809][ T6824] CPU: 1 PID: 6824 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1449.019060][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1449.029104][ T6824] Call Trace: [ 1449.032381][ T6824] dump_stack+0x18f/0x20d [ 1449.036685][ T6824] dump_header+0x10b/0x7e4 [ 1449.041086][ T6824] oom_kill_process.cold+0x10/0x15 [ 1449.046177][ T6824] out_of_memory+0x326/0x1340 [ 1449.050854][ T6824] ? oom_killer_disable+0x270/0x270 [ 1449.056032][ T6824] ? mutex_trylock+0x246/0x2c0 [ 1449.060770][ T6824] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1449.067421][ T6824] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1449.073996][ T6824] ? warn_alloc+0x120/0x120 [ 1449.078472][ T6824] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1449.083996][ T6824] ? lock_is_held_type+0xb0/0xe0 [ 1449.088925][ T6824] __alloc_pages_nodemask+0x68f/0x930 [ 1449.094278][ T6824] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1449.101027][ T6824] ? page_cache_readahead_unbounded+0x572/0x850 [ 1449.107255][ T6824] ? __lock_page_or_retry+0x650/0x650 [ 1449.112606][ T6824] alloc_pages_current+0x187/0x280 [ 1449.117708][ T6824] __page_cache_alloc+0x31e/0x450 [ 1449.122725][ T6824] pagecache_get_page+0x27d/0xe10 [ 1449.127726][ T6824] ? __do_page_cache_readahead+0xc2/0xf0 [ 1449.133693][ T6824] filemap_fault+0x1a99/0x2ad0 [ 1449.138449][ T6824] ext4_filemap_fault+0x87/0xb6 [ 1449.143286][ T6824] __do_fault+0x10d/0x4d0 [ 1449.147604][ T6824] handle_mm_fault+0x37a3/0x43f0 [ 1449.152521][ T6824] ? apply_to_existing_page_range+0x40/0x40 [ 1449.158401][ T6824] do_user_addr_fault+0x5a2/0xd00 [ 1449.163406][ T6824] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1449.168928][ T6824] exc_page_fault+0xab/0x170 [ 1449.173504][ T6824] ? asm_exc_page_fault+0x8/0x30 [ 1449.178416][ T6824] asm_exc_page_fault+0x1e/0x30 [ 1449.183241][ T6824] RIP: 0033:0x460c23 [ 1449.187102][ T6824] Code: Bad RIP value. [ 1449.191142][ T6824] RSP: 002b:000000c00003f6a0 EFLAGS: 00010202 [ 1449.197181][ T6824] RAX: ffffffffffffff92 RBX: 000000003b985b4c RCX: 0000000000460c23 [ 1449.205128][ T6824] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703a40 [ 1449.213077][ T6824] RBP: 000000c00003f6e8 R08: 0000000000000000 R09: 0000000000000000 [ 1449.221023][ T6824] R10: 000000c00003f6d8 R11: 0000000000000202 R12: 0000000000000000 [ 1449.228971][ T6824] R13: 0000000000000000 R14: 000000c016acedf8 R15: 0000000000000244 [ 1449.249982][ T6824] Mem-Info: [ 1449.253217][ T6824] active_anon:200229 inactive_anon:4157 isolated_anon:0 [ 1449.253217][ T6824] active_file:14 inactive_file:12 isolated_file:0 [ 1449.253217][ T6824] unevictable:1 dirty:0 writeback:0 [ 1449.253217][ T6824] slab_reclaimable:15497 slab_unreclaimable:117459 [ 1449.253217][ T6824] mapped:53908 shmem:4417 pagetables:7789 bounce:0 [ 1449.253217][ T6824] free:28766 free_pcp:399 free_cma:0 [ 1449.291786][ T6824] Node 0 active_anon:800868kB inactive_anon:16628kB active_file:48kB inactive_file:48kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215632kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 587776kB writeback_tmp:0kB all_unreclaimable? no [ 1449.327592][ T6824] Node 1 active_anon:48kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1449.355579][ T6824] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1449.420648][ T6824] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1449.447801][ T6824] Node 0 DMA32 free:50296kB min:60492kB low:69468kB high:78444kB reserved_highatomic:0KB active_anon:798820kB inactive_anon:16628kB active_file:148kB inactive_file:0kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17492kB pagetables:31064kB bounce:0kB free_pcp:1344kB local_pcp:1288kB free_cma:0kB [ 1449.501617][ T6824] lowmem_reserve[]: 0 0 0 0 0 [ 1449.506490][ T6824] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1449.546639][ T6824] lowmem_reserve[]: 0 0 0 0 0 [ 1449.551353][ T6824] Node 1 Normal free:53872kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:256kB local_pcp:256kB free_cma:0kB [ 1449.616177][ T6824] lowmem_reserve[]: 0 0 0 0 0 [ 1449.620900][ T6824] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 2*1024kB (U) 2*2048kB (M) 1*4096kB (U) = 10272kB [ 1449.656611][ T6824] Node 0 DMA32: 3885*4kB (UME) 1921*8kB (UME) 318*16kB (ME) 145*32kB (UME) 33*64kB (ME) 7*128kB (UME) 2*256kB (UM) 1*512kB (U) 0*1024kB 2*2048kB (M) 0*4096kB = 48764kB [ 1449.689290][ T6824] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1449.704408][ T6824] Node 1 Normal: 136*4kB (UME) 74*8kB (UME) 50*16kB (ME) 21*32kB (UME) 5*64kB (UM) 4*128kB (ME) 1*256kB (E) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (M) 11*4096kB (UM) = 53872kB [ 1449.721678][ T6824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1449.755640][ T6824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1449.782622][ T6824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1449.794888][ T6824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1449.820304][ T6824] 4443 total pagecache pages [ 1449.830125][ T6824] 0 pages in swap cache [ 1449.834402][ T6824] Swap cache stats: add 0, delete 0, find 0/0 [ 1449.840462][ T6824] Free swap = 0kB [ 1449.867847][ T6824] Total swap = 0kB [ 1449.871577][ T6824] 1965979 pages RAM [ 1449.878612][ T6824] 0 pages HighMem/MovableOnly [ 1449.908262][ T6824] 349903 pages reserved [ 1449.920170][ T6824] 0 pages cma reserved [ 1449.946719][ T6824] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14411,uid=0 [ 1449.965484][ T6824] Out of memory: Killed process 14411 (syz-executor.2) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1450.060582][ T6824] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1450.095741][ T6824] CPU: 1 PID: 6824 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1450.103998][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1450.114048][ T6824] Call Trace: [ 1450.117334][ T6824] dump_stack+0x18f/0x20d [ 1450.121640][ T6824] dump_header+0x10b/0x7e4 [ 1450.126050][ T6824] oom_kill_process.cold+0x10/0x15 [ 1450.131141][ T6824] out_of_memory+0x326/0x1340 [ 1450.135797][ T6824] ? oom_killer_disable+0x270/0x270 [ 1450.140994][ T6824] ? mutex_trylock+0x246/0x2c0 [ 1450.145740][ T6824] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1450.152421][ T6824] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1450.159006][ T6824] ? warn_alloc+0x120/0x120 [ 1450.163490][ T6824] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1450.169224][ T6824] ? lock_is_held_type+0xb0/0xe0 [ 1450.174142][ T6824] __alloc_pages_nodemask+0x68f/0x930 [ 1450.179491][ T6824] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1450.186230][ T6824] ? page_cache_readahead_unbounded+0x572/0x850 [ 1450.192447][ T6824] ? __lock_page_or_retry+0x650/0x650 [ 1450.197794][ T6824] alloc_pages_current+0x187/0x280 [ 1450.202886][ T6824] __page_cache_alloc+0x31e/0x450 [ 1450.207905][ T6824] pagecache_get_page+0x27d/0xe10 [ 1450.212908][ T6824] ? __do_page_cache_readahead+0xc2/0xf0 [ 1450.218516][ T6824] filemap_fault+0x1a99/0x2ad0 [ 1450.223277][ T6824] ext4_filemap_fault+0x87/0xb6 [ 1450.228132][ T6824] __do_fault+0x10d/0x4d0 [ 1450.232447][ T6824] handle_mm_fault+0x37a3/0x43f0 [ 1450.237467][ T6824] ? apply_to_existing_page_range+0x40/0x40 [ 1450.243370][ T6824] do_user_addr_fault+0x5a2/0xd00 [ 1450.248377][ T6824] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1450.253903][ T6824] exc_page_fault+0xab/0x170 [ 1450.258473][ T6824] ? asm_exc_page_fault+0x8/0x30 [ 1450.263388][ T6824] asm_exc_page_fault+0x1e/0x30 [ 1450.268214][ T6824] RIP: 0033:0x460c23 [ 1450.272080][ T6824] Code: Bad RIP value. [ 1450.276118][ T6824] RSP: 002b:000000c00003f6a0 EFLAGS: 00010202 [ 1450.282161][ T6824] RAX: ffffffffffffff92 RBX: 000000003b985b4c RCX: 0000000000460c23 [ 1450.290131][ T6824] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703a40 [ 1450.298081][ T6824] RBP: 000000c00003f6e8 R08: 0000000000000000 R09: 0000000000000000 [ 1450.306030][ T6824] R10: 000000c00003f6d8 R11: 0000000000000202 R12: 0000000000000000 [ 1450.313980][ T6824] R13: 0000000000000000 R14: 000000c016acedf8 R15: 0000000000000244 [ 1450.326766][ T6824] Mem-Info: [ 1450.330278][ T6824] active_anon:199685 inactive_anon:4157 isolated_anon:0 [ 1450.330278][ T6824] active_file:37 inactive_file:0 isolated_file:0 [ 1450.330278][ T6824] unevictable:1 dirty:0 writeback:0 [ 1450.330278][ T6824] slab_reclaimable:15493 slab_unreclaimable:118625 [ 1450.330278][ T6824] mapped:53908 shmem:4417 pagetables:7763 bounce:0 [ 1450.330278][ T6824] free:28107 free_pcp:492 free_cma:0 [ 1450.366810][ T6824] Node 0 active_anon:798692kB inactive_anon:16628kB active_file:144kB inactive_file:0kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215632kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 585728kB writeback_tmp:0kB all_unreclaimable? no [ 1450.394306][ T6824] Node 1 active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1450.419744][ T6824] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1450.459940][ T6824] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1450.465755][ T6824] Node 0 DMA32 free:47612kB min:60492kB low:69468kB high:78444kB reserved_highatomic:0KB active_anon:796616kB inactive_anon:16628kB active_file:60kB inactive_file:24kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17456kB pagetables:31004kB bounce:0kB free_pcp:1692kB local_pcp:420kB free_cma:0kB [ 1450.497978][ T6824] lowmem_reserve[]: 0 0 0 0 0 [ 1450.502753][ T6824] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1450.545628][ T6824] lowmem_reserve[]: 0 0 0 0 0 [ 1450.550339][ T6824] Node 1 Normal free:53872kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:256kB local_pcp:256kB free_cma:0kB [ 1450.585497][ T6824] lowmem_reserve[]: 0 0 0 0 0 [ 1450.590202][ T6824] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 2*1024kB (U) 2*2048kB (M) 1*4096kB (U) = 10272kB [ 1450.623853][ T6824] Node 0 DMA32: 4101*4kB (UME) 2184*8kB (UME) 332*16kB (UME) 148*32kB (UME) 36*64kB (UME) 8*128kB (UME) 1*256kB (M) 0*512kB 1*1024kB (U) 1*2048kB (M) 0*4096kB = 50580kB [ 1450.648259][ T6824] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1450.659763][ T6824] Node 1 Normal: 131*4kB (UE) 69*8kB (ME) 44*16kB (E) 20*32kB (UME) 4*64kB (M) 4*128kB (ME) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (M) 11*4096kB (UM) = 53876kB [ 1450.702105][ T6824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1450.711671][ T6824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1450.764987][ T6824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1450.787429][ T6824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1450.796806][ T6824] 4443 total pagecache pages [ 1450.801402][ T6824] 0 pages in swap cache [ 1450.829295][ T6824] Swap cache stats: add 0, delete 0, find 0/0 [ 1450.850188][ T6824] Free swap = 0kB [ 1450.860816][ T6824] Total swap = 0kB [ 1450.864626][ T6824] 1965979 pages RAM [ 1450.868408][ T6824] 0 pages HighMem/MovableOnly [ 1450.895761][ T6824] 349903 pages reserved [ 1450.899932][ T6824] 0 pages cma reserved [ 1450.911499][ T6824] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14236,uid=0 [ 1450.968435][ T6824] Out of memory: Killed process 14236 (syz-executor.2) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1451.043038][ T1151] oom_reaper: reaped process 20560 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 1451.086752][ T6825] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1451.110447][ T6825] CPU: 1 PID: 6825 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1451.118695][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1451.128744][ T6825] Call Trace: [ 1451.132037][ T6825] dump_stack+0x18f/0x20d [ 1451.136372][ T6825] dump_header+0x10b/0x7e4 [ 1451.140786][ T6825] oom_kill_process.cold+0x10/0x15 [ 1451.145908][ T6825] out_of_memory+0x326/0x1340 [ 1451.150591][ T6825] ? oom_killer_disable+0x270/0x270 [ 1451.155804][ T6825] ? mutex_trylock+0x246/0x2c0 [ 1451.160565][ T6825] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1451.167239][ T6825] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1451.173846][ T6825] ? warn_alloc+0x120/0x120 [ 1451.178356][ T6825] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1451.183911][ T6825] ? lock_is_held_type+0xb0/0xe0 [ 1451.188857][ T6825] __alloc_pages_nodemask+0x68f/0x930 [ 1451.194244][ T6825] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1451.200998][ T6825] ? page_cache_readahead_unbounded+0x572/0x850 [ 1451.207214][ T6825] ? __lock_page_or_retry+0x650/0x650 [ 1451.212565][ T6825] alloc_pages_current+0x187/0x280 [ 1451.217650][ T6825] __page_cache_alloc+0x31e/0x450 [ 1451.222650][ T6825] pagecache_get_page+0x27d/0xe10 [ 1451.227650][ T6825] ? __do_page_cache_readahead+0xc2/0xf0 [ 1451.233259][ T6825] filemap_fault+0x1a99/0x2ad0 [ 1451.238019][ T6825] ext4_filemap_fault+0x87/0xb6 [ 1451.242859][ T6825] __do_fault+0x10d/0x4d0 [ 1451.247166][ T6825] handle_mm_fault+0x37a3/0x43f0 [ 1451.252079][ T6825] ? apply_to_existing_page_range+0x40/0x40 [ 1451.257953][ T6825] do_user_addr_fault+0x5a2/0xd00 [ 1451.262955][ T6825] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1451.268482][ T6825] exc_page_fault+0xab/0x170 [ 1451.273049][ T6825] ? asm_exc_page_fault+0x8/0x30 [ 1451.277960][ T6825] asm_exc_page_fault+0x1e/0x30 [ 1451.282789][ T6825] RIP: 0033:0x42c854 [ 1451.286653][ T6825] Code: Bad RIP value. [ 1451.290700][ T6825] RSP: 002b:000000c00003bea8 EFLAGS: 00010202 [ 1451.296739][ T6825] RAX: ffffffffffffff92 RBX: 000000003b988031 RCX: 0000000000460c23 [ 1451.304696][ T6825] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703ac0 [ 1451.312643][ T6825] RBP: 000000c00003bee8 R08: 0000000000000000 R09: 0000000000000000 [ 1451.320604][ T6825] R10: 000000c00003bed8 R11: 0000000000000202 R12: 0000015d41b09961 [ 1451.328560][ T6825] R13: 0000000000000001 R14: 0000015d41b09961 R15: 0000000000000036 [ 1451.338859][ T6825] Mem-Info: [ 1451.350733][ T6825] active_anon:198607 inactive_anon:4157 isolated_anon:0 [ 1451.350733][ T6825] active_file:7 inactive_file:5 isolated_file:0 [ 1451.350733][ T6825] unevictable:1 dirty:0 writeback:0 [ 1451.350733][ T6825] slab_reclaimable:15489 slab_unreclaimable:119108 [ 1451.350733][ T6825] mapped:53908 shmem:4417 pagetables:7737 bounce:0 [ 1451.350733][ T6825] free:18887 free_pcp:286 free_cma:0 [ 1451.350766][ T6825] Node 0 active_anon:794380kB inactive_anon:16628kB active_file:20kB inactive_file:20kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215632kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB all_unreclaimable? no [ 1451.412079][T20560] syz-executor.5: vmalloc: allocation failure, allocated 4123070464 of 4294975488 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1451.420257][ T6825] Node 1 active_anon:48kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1451.462913][T20560] CPU: 1 PID: 20560 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1451.471613][T20560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1451.481676][T20560] Call Trace: [ 1451.484974][T20560] dump_stack+0x18f/0x20d [ 1451.489312][T20560] warn_alloc.cold+0x87/0x17a [ 1451.494022][T20560] ? zone_watermark_ok_safe+0x260/0x260 [ 1451.499566][T20560] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1451.505217][T20560] __vmalloc_area_node+0x49e/0x7a0 [ 1451.510339][T20560] ? ip_set_alloc+0x48/0x60 [ 1451.511922][ T6825] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1451.514836][T20560] ? ip_set_alloc+0x48/0x60 [ 1451.514852][T20560] vzalloc+0x116/0x1a0 [ 1451.514881][T20560] ip_set_alloc+0x48/0x60 [ 1451.514901][T20560] hash_netnet_create+0x401/0xd70 [ 1451.544087][ T6825] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1451.548560][T20560] ? hash_netnet6_head+0xcd0/0xcd0 [ 1451.552616][ T6825] Node 0 DMA32 free:46192kB min:35916kB low:44892kB high:53868kB reserved_highatomic:0KB active_anon:792316kB inactive_anon:16628kB active_file:228kB inactive_file:4kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17424kB pagetables:30900kB bounce:0kB free_pcp:680kB local_pcp:452kB free_cma:0kB [ 1451.556903][T20560] ip_set_create+0x6a2/0x13c0 [ 1451.561899][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1451.567607][T20560] ? ip_set_sockfn_get+0xe00/0xe00 [ 1451.567649][T20560] ? lock_is_held_type+0xb0/0xe0 [ 1451.572738][ T6825] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1451.604646][T20560] ? ip_set_sockfn_get+0xe00/0xe00 [ 1451.604663][T20560] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1451.604694][T20560] ? nfnetlink_rcv+0x420/0x420 [ 1451.609347][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1451.614011][T20560] ? is_bpf_text_address+0xcb/0x160 [ 1451.614048][T20560] ? __lock_acquire+0xc1e/0x56e0 [ 1451.619136][ T6825] Node 1 Normal free:26912kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:516kB local_pcp:268kB free_cma:0kB [ 1451.624084][T20560] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1451.624101][T20560] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1451.624120][T20560] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1451.624141][T20560] netlink_rcv_skb+0x15a/0x430 [ 1451.652202][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1451.657271][T20560] ? nfnetlink_rcv+0x420/0x420 [ 1451.662222][ T6825] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (M) 1*4096kB (U) = 10172kB [ 1451.666925][T20560] ? netlink_ack+0xa10/0xa10 [ 1451.671574][ T6825] Node 0 DMA32: 3452*4kB (ME) 2335*8kB (UME) 402*16kB (UME) 183*32kB (UME) 25*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46376kB [ 1451.676761][T20560] ? ns_capable+0xde/0x100 [ 1451.676778][T20560] nfnetlink_rcv+0x1ac/0x420 [ 1451.676794][T20560] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1451.676815][T20560] netlink_unicast+0x533/0x7d0 [ 1451.681736][ T6825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1451.712465][T20560] ? netlink_attachskb+0x810/0x810 [ 1451.712481][T20560] ? _copy_from_iter_full+0x247/0x890 [ 1451.712495][T20560] ? __phys_addr+0x9a/0x110 [ 1451.712508][T20560] ? __phys_addr_symbol+0x2c/0x70 [ 1451.712531][T20560] ? __check_object_size+0x171/0x3e4 [ 1451.718486][ T6825] Node 1 Normal: 134*4kB (UME) 75*8kB (ME) 51*16kB (UME) 20*32kB (ME) 4*64kB (M) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26912kB [ 1451.724457][T20560] netlink_sendmsg+0x856/0xd90 [ 1451.724476][T20560] ? netlink_unicast+0x7d0/0x7d0 [ 1451.724496][T20560] ? netlink_unicast+0x7d0/0x7d0 [ 1451.724519][T20560] sock_sendmsg+0xcf/0x120 [ 1451.730874][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1451.735624][T20560] ____sys_sendmsg+0x6e8/0x810 [ 1451.735640][T20560] ? kernel_sendmsg+0x50/0x50 [ 1451.735651][T20560] ? do_recvmmsg+0x6d0/0x6d0 [ 1451.735674][T20560] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1451.740329][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1451.745075][T20560] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1451.745088][T20560] ? __lock_acquire+0xc1e/0x56e0 [ 1451.745105][T20560] ___sys_sendmsg+0xf3/0x170 [ 1451.745123][T20560] ? sendmsg_copy_msghdr+0x160/0x160 [ 1451.760071][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1451.764713][T20560] ? __fget_files+0x272/0x400 [ 1451.764741][T20560] ? lock_downgrade+0x820/0x820 [ 1451.764754][T20560] ? find_held_lock+0x2d/0x110 [ 1451.764775][T20560] ? __might_fault+0x11f/0x1d0 [ 1451.779818][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1451.784189][T20560] ? __fget_files+0x294/0x400 [ 1451.784215][T20560] ? __fget_light+0xea/0x280 [ 1451.788779][ T6825] 4556 total pagecache pages [ 1451.794226][T20560] __sys_sendmsg+0xe5/0x1b0 [ 1451.794242][T20560] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1451.794258][T20560] ? __x64_sys_futex+0x382/0x4e0 [ 1451.794283][T20560] ? do_syscall_64+0x1c/0xe0 [ 1451.799018][ T6825] 0 pages in swap cache [ 1451.810369][T20560] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1451.810394][T20560] do_syscall_64+0x60/0xe0 [ 1451.810415][T20560] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1451.815529][ T6825] Swap cache stats: add 0, delete 0, find 0/0 [ 1451.820889][T20560] RIP: 0033:0x45cb29 [ 1451.825397][ T6825] Free swap = 0kB [ 1451.830371][T20560] Code: Bad RIP value. [ 1451.835662][ T6825] Total swap = 0kB [ 1451.852441][T20560] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1451.852455][T20560] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1451.852462][T20560] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1451.852469][T20560] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1451.852477][T20560] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1451.852484][T20560] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1451.861920][T20560] Mem-Info: [ 1451.879068][ T6825] 1965979 pages RAM [ 1451.884877][T20560] active_anon:198596 inactive_anon:4157 isolated_anon:0 [ 1451.884877][T20560] active_file:51 inactive_file:165 isolated_file:0 [ 1451.884877][T20560] unevictable:1 dirty:0 writeback:0 [ 1451.884877][T20560] slab_reclaimable:15485 slab_unreclaimable:115249 [ 1451.884877][T20560] mapped:53959 shmem:4417 pagetables:7747 bounce:0 [ 1451.884877][T20560] free:22409 free_pcp:302 free_cma:0 [ 1451.892458][ T6825] 0 pages HighMem/MovableOnly [ 1451.895482][T20560] Node 0 active_anon:794340kB inactive_anon:16628kB active_file:200kB inactive_file:756kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215936kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 579584kB writeback_tmp:0kB all_unreclaimable? yes [ 1451.901491][ T6825] 349903 pages reserved [ 1451.912510][T20560] Node 1 active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1451.926604][ T6825] 0 pages cma reserved [ 1451.938928][T20560] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1451.946118][ T6825] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=13518,uid=0 [ 1451.951572][T20560] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1451.960420][ T6825] Out of memory: Killed process 13518 (syz-executor.2) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1452.289509][T20560] Node 0 DMA32 free:53992kB min:35916kB low:44892kB high:53868kB reserved_highatomic:0KB active_anon:790132kB inactive_anon:16628kB active_file:200kB inactive_file:3280kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17396kB pagetables:30748kB bounce:0kB free_pcp:828kB local_pcp:396kB free_cma:0kB [ 1452.323566][T20560] lowmem_reserve[]: 0 0 0 0 0 [ 1452.330700][T20560] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1452.359951][T20560] lowmem_reserve[]: 0 0 0 0 0 [ 1452.370430][T20560] Node 1 Normal free:26912kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:524kB local_pcp:248kB free_cma:0kB [ 1452.406163][T20560] lowmem_reserve[]: 0 0 0 0 0 [ 1452.412982][T20560] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (M) 1*4096kB (U) = 10172kB [ 1452.428652][T20560] Node 0 DMA32: 1940*4kB (ME) 3269*8kB (UME) 414*16kB (UME) 187*32kB (UME) 27*64kB (UM) 0*128kB 1*256kB (U) 0*512kB 6*1024kB (U) 1*2048kB (M) 0*4096kB = 56696kB [ 1452.445240][T20560] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1452.458062][T20560] Node 1 Normal: 134*4kB (UME) 75*8kB (ME) 51*16kB (UME) 20*32kB (ME) 4*64kB (M) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26912kB [ 1452.476998][T20560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1452.487642][T20560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1452.497972][T20560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1452.508773][T20560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1452.521436][T20560] 6660 total pagecache pages [ 1452.526248][T20560] 0 pages in swap cache [ 1452.531358][T20560] Swap cache stats: add 0, delete 0, find 0/0 [ 1452.540085][T20560] Free swap = 0kB [ 1452.546710][T20560] Total swap = 0kB [ 1452.550556][T20560] 1965979 pages RAM [ 1452.554661][T20560] 0 pages HighMem/MovableOnly [ 1452.559538][T20560] 349903 pages reserved [ 1452.563958][T20560] 0 pages cma reserved 01:50:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:45 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x121, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:50:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1c000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x10, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:45 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x3c9f0200, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:50:45 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 01:50:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0xb, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:45 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x3d9f0200, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:50:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x105, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:50:46 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 01:50:46 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x3e9f0200, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:50:46 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x3f000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:50:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) [ 1463.033826][ T6825] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1463.048668][ T6825] CPU: 0 PID: 6825 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1463.056915][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1463.066966][ T6825] Call Trace: [ 1463.070261][ T6825] dump_stack+0x18f/0x20d [ 1463.074616][ T6825] dump_header+0x10b/0x7e4 [ 1463.079041][ T6825] oom_kill_process.cold+0x10/0x15 [ 1463.084305][ T6825] out_of_memory+0x326/0x1340 [ 1463.088961][ T6825] ? oom_killer_disable+0x270/0x270 [ 1463.094170][ T6825] ? mutex_trylock+0x246/0x2c0 [ 1463.098912][ T6825] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1463.105592][ T6825] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1463.112165][ T6825] ? warn_alloc+0x120/0x120 [ 1463.116659][ T6825] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1463.122185][ T6825] ? lock_is_held_type+0xb0/0xe0 [ 1463.127101][ T6825] __alloc_pages_nodemask+0x68f/0x930 [ 1463.132463][ T6825] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1463.139202][ T6825] ? page_cache_readahead_unbounded+0x572/0x850 [ 1463.145417][ T6825] ? __lock_page_or_retry+0x650/0x650 [ 1463.150763][ T6825] alloc_pages_current+0x187/0x280 [ 1463.155867][ T6825] __page_cache_alloc+0x31e/0x450 [ 1463.160867][ T6825] pagecache_get_page+0x27d/0xe10 [ 1463.165867][ T6825] ? __do_page_cache_readahead+0xc2/0xf0 [ 1463.171489][ T6825] filemap_fault+0x1a99/0x2ad0 [ 1463.176249][ T6825] ext4_filemap_fault+0x87/0xb6 [ 1463.181075][ T6825] __do_fault+0x10d/0x4d0 [ 1463.185380][ T6825] handle_mm_fault+0x37a3/0x43f0 [ 1463.190294][ T6825] ? apply_to_existing_page_range+0x40/0x40 [ 1463.196169][ T6825] do_user_addr_fault+0x5a2/0xd00 [ 1463.201186][ T6825] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1463.206708][ T6825] exc_page_fault+0xab/0x170 [ 1463.211271][ T6825] ? asm_exc_page_fault+0x8/0x30 [ 1463.216187][ T6825] asm_exc_page_fault+0x1e/0x30 [ 1463.221014][ T6825] RIP: 0033:0x417290 [ 1463.224879][ T6825] Code: Bad RIP value. [ 1463.228914][ T6825] RSP: 002b:000000c00004ff60 EFLAGS: 00010206 [ 1463.234963][ T6825] RAX: 00007f1e12096008 RBX: 000000c00002c000 RCX: 000000c000042a80 [ 1463.242916][ T6825] RDX: 000000c00002c000 RSI: 000000000045cda0 RDI: 000000000045bf40 [ 1463.250863][ T6825] RBP: 000000c00004ff70 R08: 0000000000000000 R09: 0000000000000000 [ 1463.258809][ T6825] R10: 000000c00003bed8 R11: 0000000000000202 R12: 0000016120fd4cab [ 1463.266754][ T6825] R13: 0000000000000001 R14: 0000016120fd4cab R15: 0000000000000200 [ 1463.294347][ T6825] Mem-Info: [ 1463.297508][ T6825] active_anon:189111 inactive_anon:4157 isolated_anon:0 [ 1463.297508][ T6825] active_file:30 inactive_file:23 isolated_file:0 [ 1463.297508][ T6825] unevictable:1 dirty:0 writeback:0 [ 1463.297508][ T6825] slab_reclaimable:15431 slab_unreclaimable:114290 [ 1463.297508][ T6825] mapped:53971 shmem:4417 pagetables:7722 bounce:0 [ 1463.297508][ T6825] free:24578 free_pcp:0 free_cma:0 [ 1463.347310][ T6825] Node 0 active_anon:756396kB inactive_anon:16628kB active_file:112kB inactive_file:92kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215884kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 579584kB writeback_tmp:0kB all_unreclaimable? yes [ 1463.389310][ T6825] Node 1 active_anon:48kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1463.425214][ T6825] Node 0 DMA free:10280kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1463.463964][ T6825] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1463.469721][ T6825] Node 0 DMA32 free:34304kB min:40012kB low:48988kB high:57964kB reserved_highatomic:0KB active_anon:756492kB inactive_anon:16628kB active_file:44kB inactive_file:44kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17392kB pagetables:30796kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1463.508343][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1463.513130][ T6825] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1463.551930][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1463.556722][ T6825] Node 1 Normal free:53624kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1463.595684][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1463.600408][ T6825] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10280kB [ 1463.627717][ T6825] Node 0 DMA32: 3546*4kB (UME) 1526*8kB (UME) 238*16kB (UME) 105*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33624kB [ 1463.644830][ T6825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1463.660471][ T6825] Node 1 Normal: 148*4kB (ME) 79*8kB (ME) 51*16kB (UME) 20*32kB (ME) 4*64kB (M) 4*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (M) 11*4096kB (UM) = 53624kB [ 1463.687515][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1463.697162][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1463.724241][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1463.746304][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1463.762060][ T6825] 4445 total pagecache pages [ 1463.766669][ T6825] 0 pages in swap cache [ 1463.770832][ T6825] Swap cache stats: add 0, delete 0, find 0/0 [ 1463.793905][ T6825] Free swap = 0kB [ 1463.797636][ T6825] Total swap = 0kB [ 1463.801341][ T6825] 1965979 pages RAM [ 1463.805184][ T6825] 0 pages HighMem/MovableOnly [ 1463.809849][ T6825] 349903 pages reserved [ 1463.830581][ T6825] 0 pages cma reserved [ 1463.837483][ T6825] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=13138,uid=0 [ 1463.851882][ T6825] Out of memory: Killed process 13138 (syz-executor.2) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1463.889084][ T1151] oom_reaper: reaped process 20610 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 1463.933151][ T6825] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1463.949637][ T6825] CPU: 1 PID: 6825 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1463.957883][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1463.967936][ T6825] Call Trace: [ 1463.971230][ T6825] dump_stack+0x18f/0x20d [ 1463.975559][ T6825] dump_header+0x10b/0x7e4 [ 1463.979970][ T6825] oom_kill_process.cold+0x10/0x15 [ 1463.985086][ T6825] out_of_memory+0x326/0x1340 [ 1463.989772][ T6825] ? oom_killer_disable+0x270/0x270 [ 1463.994988][ T6825] ? mutex_trylock+0x246/0x2c0 [ 1463.999752][ T6825] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1464.006433][ T6825] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1464.013040][ T6825] ? warn_alloc+0x120/0x120 [ 1464.017542][ T6825] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1464.023097][ T6825] ? lock_is_held_type+0xb0/0xe0 [ 1464.028038][ T6825] __alloc_pages_nodemask+0x68f/0x930 [ 1464.033420][ T6825] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1464.040182][ T6825] ? page_cache_readahead_unbounded+0x572/0x850 [ 1464.046424][ T6825] ? __lock_page_or_retry+0x650/0x650 [ 1464.051795][ T6825] alloc_pages_current+0x187/0x280 [ 1464.056908][ T6825] __page_cache_alloc+0x31e/0x450 [ 1464.061944][ T6825] pagecache_get_page+0x27d/0xe10 [ 1464.066972][ T6825] ? __do_page_cache_readahead+0xc2/0xf0 [ 1464.072602][ T6825] filemap_fault+0x1a99/0x2ad0 [ 1464.077373][ T6825] ext4_filemap_fault+0x87/0xb6 [ 1464.082222][ T6825] __do_fault+0x10d/0x4d0 [ 1464.086551][ T6825] handle_mm_fault+0x37a3/0x43f0 [ 1464.091491][ T6825] ? apply_to_existing_page_range+0x40/0x40 [ 1464.097400][ T6825] do_user_addr_fault+0x5a2/0xd00 [ 1464.102425][ T6825] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1464.107976][ T6825] exc_page_fault+0xab/0x170 [ 1464.112152][T20610] syz-executor.5: vmalloc: allocation failure, allocated 4193329152 of 4294975488 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1464.112566][ T6825] ? asm_exc_page_fault+0x8/0x30 [ 1464.133966][ T6825] asm_exc_page_fault+0x1e/0x30 [ 1464.138809][ T6825] RIP: 0033:0x417290 [ 1464.142687][ T6825] Code: Bad RIP value. [ 1464.146742][ T6825] RSP: 002b:000000c00004ff60 EFLAGS: 00010206 [ 1464.152804][ T6825] RAX: 00007f1e12096008 RBX: 000000c00002c000 RCX: 000000c000042a80 [ 1464.160769][ T6825] RDX: 000000c00002c000 RSI: 000000000045cda0 RDI: 000000000045bf40 [ 1464.168755][ T6825] RBP: 000000c00004ff70 R08: 0000000000000000 R09: 0000000000000000 [ 1464.176723][ T6825] R10: 000000c00003bed8 R11: 0000000000000202 R12: 0000016120fd4cab [ 1464.184689][ T6825] R13: 0000000000000001 R14: 0000016120fd4cab R15: 0000000000000200 [ 1464.195554][T20610] CPU: 0 PID: 20610 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1464.204229][T20610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1464.214274][T20610] Call Trace: [ 1464.216900][ T6825] Mem-Info: [ 1464.217565][T20610] dump_stack+0x18f/0x20d [ 1464.220669][ T6825] active_anon:188009 inactive_anon:4157 isolated_anon:0 [ 1464.220669][ T6825] active_file:14 inactive_file:14 isolated_file:0 [ 1464.220669][ T6825] unevictable:1 dirty:0 writeback:0 [ 1464.220669][ T6825] slab_reclaimable:15430 slab_unreclaimable:115066 [ 1464.220669][ T6825] mapped:53971 shmem:4417 pagetables:7685 bounce:0 [ 1464.220669][ T6825] free:16521 free_pcp:281 free_cma:0 [ 1464.224964][T20610] warn_alloc.cold+0x87/0x17a [ 1464.224981][T20610] ? mark_held_locks+0x9f/0xe0 [ 1464.224996][T20610] ? zone_watermark_ok_safe+0x260/0x260 [ 1464.225020][T20610] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1464.263266][ T6825] Node 0 active_anon:751988kB inactive_anon:16628kB active_file:52kB inactive_file:52kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215884kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 579584kB writeback_tmp:0kB all_unreclaimable? yes [ 1464.266134][T20610] __vmalloc_area_node+0x49e/0x7a0 [ 1464.270872][ T6825] Node 1 active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1464.276407][T20610] ? ip_set_alloc+0x48/0x60 [ 1464.276419][T20610] ? ip_set_alloc+0x48/0x60 [ 1464.276440][T20610] vzalloc+0x116/0x1a0 [ 1464.276458][T20610] ip_set_alloc+0x48/0x60 [ 1464.282611][ T6825] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.310010][T20610] hash_netnet_create+0x401/0xd70 [ 1464.310027][T20610] ? hash_netnet6_head+0xcd0/0xcd0 [ 1464.310043][T20610] ip_set_create+0x6a2/0x13c0 [ 1464.310063][T20610] ? ip_set_sockfn_get+0xe00/0xe00 [ 1464.315167][ T6825] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1464.340508][T20610] ? lock_is_held_type+0xb0/0xe0 [ 1464.340525][T20610] ? ip_set_sockfn_get+0xe00/0xe00 [ 1464.340546][T20610] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1464.345067][ T6825] Node 0 DMA32 free:29012kB min:60492kB low:69468kB high:78444kB reserved_highatomic:0KB active_anon:751988kB inactive_anon:16628kB active_file:52kB inactive_file:52kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17364kB pagetables:30648kB bounce:0kB free_pcp:872kB local_pcp:420kB free_cma:0kB [ 1464.349545][T20610] ? nfnetlink_rcv+0x420/0x420 [ 1464.353627][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1464.357924][T20610] ? is_bpf_text_address+0xcb/0x160 [ 1464.386873][ T6825] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.391849][T20610] ? __lock_acquire+0xc1e/0x56e0 [ 1464.396961][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1464.401591][T20610] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1464.406695][ T6825] Node 1 Normal free:26912kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 1464.412367][T20610] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1464.412385][T20610] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1464.412405][T20610] netlink_rcv_skb+0x15a/0x430 [ 1464.417312][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1464.422407][T20610] ? nfnetlink_rcv+0x420/0x420 [ 1464.422422][T20610] ? netlink_ack+0xa10/0xa10 [ 1464.422451][T20610] ? ns_capable+0xde/0x100 [ 1464.427353][ T6825] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10160kB [ 1464.459284][T20610] nfnetlink_rcv+0x1ac/0x420 [ 1464.459300][T20610] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1464.459321][T20610] netlink_unicast+0x533/0x7d0 [ 1464.459340][T20610] ? netlink_attachskb+0x810/0x810 [ 1464.464099][ T6825] Node 0 DMA32: 3067*4kB (UME) 1403*8kB (UME) 194*16kB (UME) 75*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28996kB [ 1464.468745][T20610] ? _copy_from_iter_full+0x247/0x890 [ 1464.473959][ T6825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1464.501967][T20610] ? __phys_addr+0x9a/0x110 [ 1464.501981][T20610] ? __phys_addr_symbol+0x2c/0x70 [ 1464.501994][T20610] ? __check_object_size+0x171/0x3e4 [ 1464.502012][T20610] netlink_sendmsg+0x856/0xd90 [ 1464.502034][T20610] ? netlink_unicast+0x7d0/0x7d0 [ 1464.502054][T20610] ? netlink_unicast+0x7d0/0x7d0 [ 1464.506979][ T6825] Node 1 Normal: 148*4kB (ME) 80*8kB (UME) 51*16kB (UME) 21*32kB (UME) 4*64kB (M) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26912kB [ 1464.511652][T20610] sock_sendmsg+0xcf/0x120 [ 1464.517646][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1464.548068][T20610] ____sys_sendmsg+0x6e8/0x810 [ 1464.548086][T20610] ? kernel_sendmsg+0x50/0x50 [ 1464.548097][T20610] ? do_recvmmsg+0x6d0/0x6d0 [ 1464.548119][T20610] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1464.554101][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1464.559962][T20610] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1464.564724][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1464.569345][T20610] ? __lock_acquire+0xc1e/0x56e0 [ 1464.569364][T20610] ___sys_sendmsg+0xf3/0x170 [ 1464.574124][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1464.578668][T20610] ? sendmsg_copy_msghdr+0x160/0x160 [ 1464.583099][ T6825] 4445 total pagecache pages [ 1464.597371][T20610] ? __fget_files+0x272/0x400 [ 1464.597392][T20610] ? lock_downgrade+0x820/0x820 [ 1464.597411][T20610] ? find_held_lock+0x2d/0x110 [ 1464.601976][ T6825] 0 pages in swap cache [ 1464.607417][T20610] ? __might_fault+0x11f/0x1d0 [ 1464.607440][T20610] ? __fget_files+0x294/0x400 [ 1464.607459][T20610] ? __fget_light+0xea/0x280 [ 1464.612216][ T6825] Swap cache stats: add 0, delete 0, find 0/0 [ 1464.617309][T20610] __sys_sendmsg+0xe5/0x1b0 [ 1464.631749][ T6825] Free swap = 0kB [ 1464.637063][T20610] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1464.637087][T20610] ? __x64_sys_futex+0x382/0x4e0 [ 1464.648463][ T6825] Total swap = 0kB [ 1464.652941][T20610] ? do_syscall_64+0x1c/0xe0 [ 1464.652964][T20610] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1464.657980][ T6825] 1965979 pages RAM [ 1464.663255][T20610] do_syscall_64+0x60/0xe0 [ 1464.663273][T20610] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1464.663291][T20610] RIP: 0033:0x45cb29 [ 1464.668029][ T6825] 0 pages HighMem/MovableOnly [ 1464.672936][T20610] Code: Bad RIP value. [ 1464.672945][T20610] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1464.672959][T20610] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1464.672967][T20610] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1464.672981][T20610] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1464.677906][ T6825] 349903 pages reserved [ 1464.694801][T20610] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1464.694809][T20610] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1464.704885][T20610] Mem-Info: [ 1464.792129][ T6825] 0 pages cma reserved [ 1464.809910][T20610] active_anon:188004 inactive_anon:4157 isolated_anon:0 [ 1464.809910][T20610] active_file:14 inactive_file:14 isolated_file:0 [ 1464.809910][T20610] unevictable:1 dirty:0 writeback:0 [ 1464.809910][T20610] slab_reclaimable:15430 slab_unreclaimable:115005 [ 1464.809910][T20610] mapped:53971 shmem:4417 pagetables:7695 bounce:0 [ 1464.809910][T20610] free:16557 free_pcp:338 free_cma:0 [ 1464.844796][ T6825] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=13038,uid=0 [ 1464.865438][T20610] Node 0 active_anon:751972kB inactive_anon:16628kB active_file:52kB inactive_file:52kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215884kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB all_unreclaimable? no [ 1464.912929][ T6825] Out of memory: Killed process 13038 (syz-executor.2) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1465.057792][T20610] Node 1 active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1465.084349][ T1151] oom_reaper: reaped process 13038 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1465.137819][ T6825] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1465.157643][T20610] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1465.174465][ T6825] CPU: 1 PID: 6825 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1465.194833][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1465.204887][ T6825] Call Trace: [ 1465.208183][ T6825] dump_stack+0x18f/0x20d [ 1465.212514][ T6825] dump_header+0x10b/0x7e4 [ 1465.213230][T20610] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1465.216929][ T6825] oom_kill_process.cold+0x10/0x15 [ 1465.227746][ T6825] out_of_memory+0x326/0x1340 [ 1465.232448][ T6825] ? oom_killer_disable+0x270/0x270 [ 1465.237650][ T6825] ? mutex_trylock+0x246/0x2c0 [ 1465.239662][T20610] Node 0 DMA32 free:31456kB min:35916kB low:44892kB high:53868kB reserved_highatomic:0KB active_anon:749812kB inactive_anon:16628kB active_file:52kB inactive_file:52kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17360kB pagetables:30688kB bounce:0kB free_pcp:388kB local_pcp:140kB free_cma:0kB [ 1465.242405][ T6825] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1465.242424][ T6825] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1465.242455][ T6825] ? warn_alloc+0x120/0x120 [ 1465.242470][ T6825] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1465.242497][ T6825] ? lock_is_held_type+0xb0/0xe0 [ 1465.287537][T20610] lowmem_reserve[]: 0 0 0 0 0 [ 1465.287658][ T6825] __alloc_pages_nodemask+0x68f/0x930 [ 1465.292170][T20610] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1465.297659][ T6825] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1465.325414][T20610] lowmem_reserve[]: 0 0 0 0 0 [ 1465.340594][ T6825] ? page_cache_readahead_unbounded+0x572/0x850 [ 1465.340611][ T6825] ? __lock_page_or_retry+0x650/0x650 [ 1465.340628][ T6825] alloc_pages_current+0x187/0x280 [ 1465.340646][ T6825] __page_cache_alloc+0x31e/0x450 [ 1465.340662][ T6825] pagecache_get_page+0x27d/0xe10 [ 1465.340678][ T6825] ? __do_page_cache_readahead+0xc2/0xf0 [ 1465.340698][ T6825] filemap_fault+0x1a99/0x2ad0 [ 1465.353703][T20610] Node 1 Normal free:26904kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1465.358328][ T6825] ext4_filemap_fault+0x87/0xb6 [ 1465.363694][T20610] lowmem_reserve[]: 0 0 0 0 0 [ 1465.368754][ T6825] __do_fault+0x10d/0x4d0 [ 1465.395463][T20610] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10160kB [ 1465.419399][ T6825] handle_mm_fault+0x37a3/0x43f0 [ 1465.419421][ T6825] ? apply_to_existing_page_range+0x40/0x40 [ 1465.419449][ T6825] do_user_addr_fault+0x5a2/0xd00 [ 1465.419470][ T6825] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1465.419491][ T6825] exc_page_fault+0xab/0x170 [ 1465.430911][T20610] Node 0 DMA32: 3194*4kB (UME) 1406*8kB (ME) 188*16kB (UME) 72*32kB (M) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 31320kB [ 1465.433299][ T6825] ? asm_exc_page_fault+0x8/0x30 [ 1465.433313][ T6825] asm_exc_page_fault+0x1e/0x30 [ 1465.433326][ T6825] RIP: 0033:0x417290 [ 1465.433337][ T6825] Code: Bad RIP value. [ 1465.433352][ T6825] RSP: 002b:000000c00004ff60 EFLAGS: 00010206 [ 1465.470363][T20610] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1465.473501][ T6825] RAX: 00007f1e12096008 RBX: 000000c00002c000 RCX: 000000c000042a80 [ 1465.473510][ T6825] RDX: 000000c00002c000 RSI: 000000000045cda0 RDI: 000000000045bf40 [ 1465.473518][ T6825] RBP: 000000c00004ff70 R08: 0000000000000000 R09: 0000000000000000 [ 1465.473541][ T6825] R10: 000000c00003bed8 R11: 0000000000000202 R12: 0000016120fd4cab [ 1465.473549][ T6825] R13: 0000000000000001 R14: 0000016120fd4cab R15: 0000000000000200 [ 1465.513251][ T6825] Mem-Info: [ 1465.518142][T20610] Node 1 Normal: 150*4kB (ME) 80*8kB (ME) 50*16kB (ME) 21*32kB (UME) 5*64kB (UM) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26968kB [ 1465.549729][ T6825] active_anon:187464 inactive_anon:4157 isolated_anon:0 [ 1465.549729][ T6825] active_file:14 inactive_file:14 isolated_file:0 [ 1465.549729][ T6825] unevictable:1 dirty:0 writeback:0 [ 1465.549729][ T6825] slab_reclaimable:15430 slab_unreclaimable:115394 [ 1465.549729][ T6825] mapped:53971 shmem:4417 pagetables:7658 bounce:0 [ 1465.549729][ T6825] free:17004 free_pcp:136 free_cma:0 [ 1465.566378][T20610] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1465.648240][ T6825] Node 0 active_anon:749812kB inactive_anon:16628kB active_file:52kB inactive_file:52kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215884kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB all_unreclaimable? yes [ 1465.684137][ T6825] Node 1 active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1465.710336][T20610] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1465.711446][ T6825] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1465.738967][T20610] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1465.757857][ T6825] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1465.780211][T20610] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1465.791495][T20610] 4445 total pagecache pages [ 1465.796049][ T6825] Node 0 DMA32 free:29424kB min:35916kB low:44892kB high:53868kB reserved_highatomic:0KB active_anon:749812kB inactive_anon:16628kB active_file:52kB inactive_file:52kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17332kB pagetables:30540kB bounce:0kB free_pcp:544kB local_pcp:140kB free_cma:0kB [ 1465.796086][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1465.796108][ T6825] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1465.796139][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1465.850730][T20610] 0 pages in swap cache [ 1465.888824][ T6825] Node 1 Normal free:26904kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1465.892855][T20610] Swap cache stats: add 0, delete 0, find 0/0 [ 1465.935354][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1465.939202][T20610] Free swap = 0kB [ 1465.940064][ T6825] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10160kB [ 1465.955867][T20610] Total swap = 0kB [ 1465.961857][T20610] 1965979 pages RAM [ 1465.965838][ T6825] Node 0 DMA32: 3194*4kB (UME) 1318*8kB (ME) 166*16kB (UME) 67*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28120kB [ 1465.985356][T20610] 0 pages HighMem/MovableOnly [ 1465.990038][T20610] 349903 pages reserved [ 1465.996705][ T6825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1466.001945][T20610] 0 pages cma reserved [ 1466.016087][ T6825] Node 1 Normal: 150*4kB (ME) 80*8kB (ME) 50*16kB (ME) 22*32kB (UME) 5*64kB (UM) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 27000kB [ 1466.047013][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1466.066248][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1466.080559][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1466.107084][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1466.130164][ T6825] 4445 total pagecache pages [ 1466.137757][ T6825] 0 pages in swap cache [ 1466.141909][ T6825] Swap cache stats: add 0, delete 0, find 0/0 [ 1466.171749][ T6825] Free swap = 0kB [ 1466.178501][ T6825] Total swap = 0kB [ 1466.195845][ T6825] 1965979 pages RAM [ 1466.199675][ T6825] 0 pages HighMem/MovableOnly [ 1466.210765][ T6825] 349903 pages reserved [ 1466.218110][ T6825] 0 pages cma reserved [ 1466.238026][ T6825] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=12874,uid=0 [ 1466.260289][ T6825] Out of memory: Killed process 12874 (syz-executor.2) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1466.345221][ T6820] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1466.377881][ T6820] CPU: 0 PID: 6820 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1466.386132][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1466.396184][ T6820] Call Trace: [ 1466.399477][ T6820] dump_stack+0x18f/0x20d [ 1466.403807][ T6820] dump_header+0x10b/0x7e4 [ 1466.408222][ T6820] oom_kill_process.cold+0x10/0x15 [ 1466.413332][ T6820] out_of_memory+0x326/0x1340 [ 1466.418010][ T6820] ? oom_killer_disable+0x270/0x270 [ 1466.423208][ T6820] ? mutex_trylock+0x246/0x2c0 [ 1466.427972][ T6820] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1466.434650][ T6820] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1466.441279][ T6820] ? warn_alloc+0x120/0x120 [ 1466.445783][ T6820] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1466.451354][ T6820] ? lock_is_held_type+0xb0/0xe0 [ 1466.456298][ T6820] __alloc_pages_nodemask+0x68f/0x930 [ 1466.461669][ T6820] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1466.468430][ T6820] ? page_cache_readahead_unbounded+0x572/0x850 [ 1466.474678][ T6820] ? __lock_page_or_retry+0x650/0x650 [ 1466.480050][ T6820] alloc_pages_current+0x187/0x280 [ 1466.485165][ T6820] __page_cache_alloc+0x31e/0x450 [ 1466.490189][ T6820] pagecache_get_page+0x27d/0xe10 [ 1466.495216][ T6820] ? __do_page_cache_readahead+0xc2/0xf0 [ 1466.500855][ T6820] filemap_fault+0x1a99/0x2ad0 [ 1466.505657][ T6820] ext4_filemap_fault+0x87/0xb6 [ 1466.510524][ T6820] __do_fault+0x10d/0x4d0 [ 1466.514854][ T6820] handle_mm_fault+0x37a3/0x43f0 [ 1466.519795][ T6820] ? apply_to_existing_page_range+0x40/0x40 [ 1466.525708][ T6820] do_user_addr_fault+0x5a2/0xd00 [ 1466.530743][ T6820] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1466.536298][ T6820] exc_page_fault+0xab/0x170 [ 1466.540912][ T6820] ? asm_exc_page_fault+0x8/0x30 [ 1466.545849][ T6820] asm_exc_page_fault+0x1e/0x30 [ 1466.550708][ T6820] RIP: 0033:0x46068d [ 1466.554594][ T6820] Code: Bad RIP value. [ 1466.558647][ T6820] RSP: 002b:000000c000051f30 EFLAGS: 00010202 [ 1466.564707][ T6820] RAX: 0000000000000000 RBX: 0000000000004e20 RCX: 000000000046068d [ 1466.572672][ T6820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c000051f30 [ 1466.580643][ T6820] RBP: 000000c000051f40 R08: 000000c000066480 R09: 00007ffcbafd8090 [ 1466.588616][ T6820] R10: 0000000000045a3c R11: 0000000000000202 R12: 00000000004338c0 [ 1466.596585][ T6820] R13: 0000000000000000 R14: 0000000000adca10 R15: 0000000000000000 [ 1466.623043][ T6820] Mem-Info: [ 1466.626192][ T6820] active_anon:186915 inactive_anon:4157 isolated_anon:0 [ 1466.626192][ T6820] active_file:14 inactive_file:14 isolated_file:0 [ 1466.626192][ T6820] unevictable:1 dirty:0 writeback:0 [ 1466.626192][ T6820] slab_reclaimable:15417 slab_unreclaimable:116503 [ 1466.626192][ T6820] mapped:53971 shmem:4417 pagetables:7631 bounce:0 [ 1466.626192][ T6820] free:16352 free_pcp:208 free_cma:0 [ 1466.678840][ T6820] Node 0 active_anon:747616kB inactive_anon:16628kB active_file:52kB inactive_file:52kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215884kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 571392kB writeback_tmp:0kB all_unreclaimable? yes [ 1466.714560][ T6820] Node 1 active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1466.802075][ T6820] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1466.872074][ T6820] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1466.877842][ T6820] Node 0 DMA32 free:26360kB min:52300kB low:61276kB high:70252kB reserved_highatomic:0KB active_anon:747616kB inactive_anon:16628kB active_file:52kB inactive_file:52kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17296kB pagetables:30480kB bounce:0kB free_pcp:832kB local_pcp:428kB free_cma:0kB [ 1466.962065][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 1466.966788][ T6820] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1467.061620][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 1467.088381][ T6820] Node 1 Normal free:26896kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1467.162880][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 1467.167605][ T6820] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10160kB [ 1467.202093][ T6820] Node 0 DMA32: 3194*4kB (UME) 1231*8kB (UME) 136*16kB (UME) 46*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26272kB [ 1467.232073][ T6820] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1467.252150][ T6820] Node 1 Normal: 150*4kB (ME) 81*8kB (UME) 51*16kB (UME) 20*32kB (ME) 4*64kB (M) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26896kB [ 1467.307297][ T6820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1467.332122][ T6820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1467.341429][ T6820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1467.362077][ T6820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1467.371367][ T6820] 4445 total pagecache pages [ 1467.392081][ T6820] 0 pages in swap cache [ 1467.396252][ T6820] Swap cache stats: add 0, delete 0, find 0/0 [ 1467.412091][ T6820] Free swap = 0kB [ 1467.415855][ T6820] Total swap = 0kB [ 1467.419568][ T6820] 1965979 pages RAM [ 1467.432068][ T6820] 0 pages HighMem/MovableOnly [ 1467.436778][ T6820] 349903 pages reserved [ 1467.440918][ T6820] 0 pages cma reserved [ 1467.452244][ T6820] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=12472,uid=0 [ 1467.482153][ T6820] Out of memory: Killed process 12472 (syz-executor.2) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1467.518929][ T0] NOHZ: local_softirq_pending 08 [ 1467.523216][ T1151] oom_reaper: reaped process 12472 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1467.556231][ T6820] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1467.592142][ T6820] CPU: 0 PID: 6820 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1467.600420][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.610473][ T6820] Call Trace: [ 1467.613774][ T6820] dump_stack+0x18f/0x20d [ 1467.618112][ T6820] dump_header+0x10b/0x7e4 [ 1467.622535][ T6820] oom_kill_process.cold+0x10/0x15 [ 1467.627648][ T6820] out_of_memory+0x326/0x1340 [ 1467.632335][ T6820] ? oom_killer_disable+0x270/0x270 [ 1467.637530][ T6820] ? mutex_trylock+0x246/0x2c0 [ 1467.642274][ T6820] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1467.648930][ T6820] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1467.655510][ T6820] ? warn_alloc+0x120/0x120 [ 1467.659992][ T6820] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1467.665517][ T6820] ? lock_is_held_type+0xb0/0xe0 [ 1467.670434][ T6820] __alloc_pages_nodemask+0x68f/0x930 [ 1467.675784][ T6820] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1467.682523][ T6820] ? page_cache_readahead_unbounded+0x572/0x850 [ 1467.688841][ T6820] ? __lock_page_or_retry+0x650/0x650 [ 1467.694202][ T6820] alloc_pages_current+0x187/0x280 [ 1467.699296][ T6820] __page_cache_alloc+0x31e/0x450 [ 1467.704311][ T6820] pagecache_get_page+0x27d/0xe10 [ 1467.709318][ T6820] ? __do_page_cache_readahead+0xc2/0xf0 [ 1467.714934][ T6820] filemap_fault+0x1a99/0x2ad0 [ 1467.719682][ T6820] ext4_filemap_fault+0x87/0xb6 [ 1467.724512][ T6820] __do_fault+0x10d/0x4d0 [ 1467.728821][ T6820] handle_mm_fault+0x37a3/0x43f0 [ 1467.733741][ T6820] ? apply_to_existing_page_range+0x40/0x40 [ 1467.739624][ T6820] do_user_addr_fault+0x5a2/0xd00 [ 1467.744638][ T6820] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1467.750166][ T6820] exc_page_fault+0xab/0x170 [ 1467.754752][ T6820] ? asm_exc_page_fault+0x8/0x30 [ 1467.759679][ T6820] asm_exc_page_fault+0x1e/0x30 [ 1467.764521][ T6820] RIP: 0033:0x46068d [ 1467.768398][ T6820] Code: Bad RIP value. [ 1467.772448][ T6820] RSP: 002b:000000c000051f30 EFLAGS: 00010202 [ 1467.778497][ T6820] RAX: 0000000000000000 RBX: 0000000000004e20 RCX: 000000000046068d [ 1467.786443][ T6820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c000051f30 [ 1467.794390][ T6820] RBP: 000000c000051f40 R08: 000000c000066480 R09: 00007ffcbafd8090 [ 1467.802340][ T6820] R10: 0000000000045a3c R11: 0000000000000202 R12: 00000000004338c0 [ 1467.810286][ T6820] R13: 0000000000000000 R14: 0000000000adca10 R15: 0000000000000000 [ 1467.819459][ T6820] Mem-Info: [ 1467.822726][ T6820] active_anon:186375 inactive_anon:4157 isolated_anon:0 [ 1467.822726][ T6820] active_file:15 inactive_file:13 isolated_file:0 [ 1467.822726][ T6820] unevictable:1 dirty:0 writeback:0 [ 1467.822726][ T6820] slab_reclaimable:15417 slab_unreclaimable:117159 [ 1467.822726][ T6820] mapped:53971 shmem:4417 pagetables:7606 bounce:0 [ 1467.822726][ T6820] free:16218 free_pcp:314 free_cma:0 [ 1467.859297][ T6820] Node 0 active_anon:745456kB inactive_anon:16628kB active_file:52kB inactive_file:52kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215884kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 571392kB writeback_tmp:0kB all_unreclaimable? yes [ 1467.886841][ T6820] Node 1 active_anon:44kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1467.915470][ T6820] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1467.961212][ T6820] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1467.992082][ T6820] Node 0 DMA32 free:27088kB min:54348kB low:63324kB high:72300kB reserved_highatomic:0KB active_anon:745456kB inactive_anon:16628kB active_file:52kB inactive_file:52kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17240kB pagetables:30332kB bounce:0kB free_pcp:1256kB local_pcp:700kB free_cma:0kB [ 1468.103509][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 1468.108228][ T6820] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.147299][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 1468.160181][ T6820] Node 1 Normal free:26896kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.202600][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 1468.207309][ T6820] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10160kB [ 1468.242148][ T6820] Node 0 DMA32: 3194*4kB (UME) 1211*8kB (UME) 127*16kB (ME) 45*32kB (UM) 0*64kB 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 27088kB [ 1468.279833][ T6820] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1468.311715][ T6820] Node 1 Normal: 150*4kB (ME) 81*8kB (UME) 51*16kB (UME) 20*32kB (ME) 4*64kB (M) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26896kB [ 1468.343144][ T6820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1468.362345][ T6820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1468.371643][ T6820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1468.388366][ T6820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1468.408811][ T6820] 4445 total pagecache pages [ 1468.419806][ T6820] 0 pages in swap cache [ 1468.439873][ T6820] Swap cache stats: add 0, delete 0, find 0/0 [ 1468.456661][ T6820] Free swap = 0kB [ 1468.460391][ T6820] Total swap = 0kB [ 1468.470375][ T6820] 1965979 pages RAM [ 1468.498580][ T6820] 0 pages HighMem/MovableOnly [ 1468.511297][ T6820] 349903 pages reserved [ 1468.532261][ T6820] 0 pages cma reserved [ 1468.536471][ T6820] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=12112,uid=0 [ 1468.561932][ T6820] Out of memory: Killed process 12112 (syz-executor.3) total-vm:74980kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1468.607884][ T1151] oom_reaper: reaped process 12112 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1468.640139][ T6820] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1468.695911][ T6820] CPU: 0 PID: 6820 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1468.704177][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1468.714229][ T6820] Call Trace: [ 1468.717505][ T6820] dump_stack+0x18f/0x20d [ 1468.721817][ T6820] dump_header+0x10b/0x7e4 [ 1468.726214][ T6820] oom_kill_process.cold+0x10/0x15 [ 1468.731307][ T6820] out_of_memory+0x326/0x1340 [ 1468.735970][ T6820] ? oom_killer_disable+0x270/0x270 [ 1468.741145][ T6820] ? mutex_trylock+0x246/0x2c0 [ 1468.745886][ T6820] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1468.752555][ T6820] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1468.759130][ T6820] ? warn_alloc+0x120/0x120 [ 1468.763610][ T6820] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1468.769135][ T6820] ? lock_is_held_type+0xb0/0xe0 [ 1468.774056][ T6820] __alloc_pages_nodemask+0x68f/0x930 [ 1468.779405][ T6820] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1468.786145][ T6820] ? page_cache_readahead_unbounded+0x572/0x850 [ 1468.792362][ T6820] ? __lock_page_or_retry+0x650/0x650 [ 1468.797706][ T6820] alloc_pages_current+0x187/0x280 [ 1468.802796][ T6820] __page_cache_alloc+0x31e/0x450 [ 1468.807799][ T6820] pagecache_get_page+0x27d/0xe10 [ 1468.812800][ T6820] ? __do_page_cache_readahead+0xc2/0xf0 [ 1468.818406][ T6820] filemap_fault+0x1a99/0x2ad0 [ 1468.823152][ T6820] ext4_filemap_fault+0x87/0xb6 [ 1468.827976][ T6820] __do_fault+0x10d/0x4d0 [ 1468.832282][ T6820] handle_mm_fault+0x37a3/0x43f0 [ 1468.837209][ T6820] ? apply_to_existing_page_range+0x40/0x40 [ 1468.843088][ T6820] do_user_addr_fault+0x5a2/0xd00 [ 1468.848092][ T6820] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1468.853616][ T6820] exc_page_fault+0xab/0x170 [ 1468.858180][ T6820] ? asm_exc_page_fault+0x8/0x30 [ 1468.863092][ T6820] asm_exc_page_fault+0x1e/0x30 [ 1468.867914][ T6820] RIP: 0033:0x46068d [ 1468.871775][ T6820] Code: Bad RIP value. [ 1468.875813][ T6820] RSP: 002b:000000c000051f30 EFLAGS: 00010202 [ 1468.881855][ T6820] RAX: 0000000000000000 RBX: 0000000000004e20 RCX: 000000000046068d [ 1468.889800][ T6820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c000051f30 [ 1468.897755][ T6820] RBP: 000000c000051f40 R08: 000000c000066480 R09: 00007ffcbafd8090 [ 1468.905703][ T6820] R10: 0000000000045a3c R11: 0000000000000202 R12: 00000000004338c0 [ 1468.913662][ T6820] R13: 0000000000000000 R14: 0000000000adca10 R15: 0000000000000000 [ 1468.932855][ T6820] Mem-Info: [ 1468.935997][ T6820] active_anon:185826 inactive_anon:4157 isolated_anon:0 [ 1468.935997][ T6820] active_file:21 inactive_file:7 isolated_file:0 [ 1468.935997][ T6820] unevictable:1 dirty:0 writeback:0 [ 1468.935997][ T6820] slab_reclaimable:15413 slab_unreclaimable:117575 [ 1468.935997][ T6820] mapped:53971 shmem:4417 pagetables:7580 bounce:0 [ 1468.935997][ T6820] free:16340 free_pcp:359 free_cma:0 [ 1468.979761][ T6820] Node 0 active_anon:743260kB inactive_anon:16628kB active_file:80kB inactive_file:24kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:215884kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 569344kB writeback_tmp:0kB all_unreclaimable? yes [ 1469.009455][ T6820] Node 1 active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1469.051666][ T6820] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1469.093349][ T6820] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1469.099107][ T6820] Node 0 DMA32 free:27680kB min:54348kB low:63324kB high:72300kB reserved_highatomic:0KB active_anon:743260kB inactive_anon:16628kB active_file:80kB inactive_file:24kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17204kB pagetables:30228kB bounce:0kB free_pcp:1396kB local_pcp:1012kB free_cma:0kB [ 1469.151814][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 1469.156587][ T6820] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1469.205365][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 1469.210088][ T6820] Node 1 Normal free:26896kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1469.256019][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 1469.260734][ T6820] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10160kB [ 1469.280223][ T6820] Node 0 DMA32: 3194*4kB (UME) 1210*8kB (ME) 128*16kB (UME) 45*32kB (M) 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 27160kB [ 1469.321360][ T6820] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1469.412199][ T6820] Node 1 Normal: 150*4kB (ME) 81*8kB (UME) 51*16kB (UME) 20*32kB (ME) 4*64kB (M) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26896kB [ 1469.432638][ T6820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1469.462109][ T6820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1469.482566][ T6820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1469.504117][ T6820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1469.513943][ T6820] 5056 total pagecache pages [ 1469.518748][ T6820] 0 pages in swap cache [ 1469.523142][ T6820] Swap cache stats: add 0, delete 0, find 0/0 [ 1469.529415][ T6820] Free swap = 0kB [ 1469.533413][ T6820] Total swap = 0kB [ 1469.537330][ T6820] 1965979 pages RAM [ 1469.541318][ T6820] 0 pages HighMem/MovableOnly [ 1469.546396][ T6820] 349903 pages reserved [ 1469.550741][ T6820] 0 pages cma reserved [ 1469.555069][ T6820] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=11711,uid=0 [ 1469.569836][ T6820] Out of memory: Killed process 11711 (syz-executor.2) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 01:51:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1d000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:51:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x106, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:51:01 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 01:51:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:51:01 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x3f9f0200, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:51:01 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x122, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:51:01 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x40000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:51:01 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 01:51:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x108, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:51:01 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x409f0200, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:51:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x109, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:51:01 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1478.875766][ T6825] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1478.886572][ T6825] CPU: 0 PID: 6825 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1478.894798][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.904837][ T6825] Call Trace: [ 1478.908133][ T6825] dump_stack+0x18f/0x20d [ 1478.912466][ T6825] dump_header+0x10b/0x7e4 [ 1478.916883][ T6825] oom_kill_process.cold+0x10/0x15 [ 1478.921987][ T6825] out_of_memory+0x326/0x1340 [ 1478.926659][ T6825] ? oom_killer_disable+0x270/0x270 [ 1478.931867][ T6825] ? mutex_trylock+0x246/0x2c0 [ 1478.936620][ T6825] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1478.943297][ T6825] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1478.949893][ T6825] ? warn_alloc+0x120/0x120 [ 1478.954413][ T6825] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1478.959969][ T6825] ? lock_is_held_type+0xb0/0xe0 [ 1478.964901][ T6825] __alloc_pages_nodemask+0x68f/0x930 [ 1478.970275][ T6825] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1478.977041][ T6825] ? page_cache_readahead_unbounded+0x572/0x850 [ 1478.983282][ T6825] ? __lock_page_or_retry+0x650/0x650 [ 1478.988654][ T6825] alloc_pages_current+0x187/0x280 [ 1478.993766][ T6825] __page_cache_alloc+0x31e/0x450 [ 1478.998792][ T6825] pagecache_get_page+0x27d/0xe10 [ 1479.003818][ T6825] ? __do_page_cache_readahead+0xc2/0xf0 [ 1479.009440][ T6825] filemap_fault+0x1a99/0x2ad0 [ 1479.014190][ T6825] ext4_filemap_fault+0x87/0xb6 [ 1479.019033][ T6825] __do_fault+0x10d/0x4d0 [ 1479.023351][ T6825] handle_mm_fault+0x37a3/0x43f0 [ 1479.028289][ T6825] ? apply_to_existing_page_range+0x40/0x40 [ 1479.034190][ T6825] ? vmacache_update+0xce/0x140 [ 1479.039034][ T6825] do_user_addr_fault+0x5a2/0xd00 [ 1479.044049][ T6825] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1479.049593][ T6825] exc_page_fault+0xab/0x170 [ 1479.054176][ T6825] ? asm_exc_page_fault+0x8/0x30 [ 1479.059109][ T6825] asm_exc_page_fault+0x1e/0x30 [ 1479.063952][ T6825] RIP: 0033:0x460c23 [ 1479.067847][ T6825] Code: Bad RIP value. [ 1479.071897][ T6825] RSP: 002b:000000c00003f6a0 EFLAGS: 00010206 [ 1479.077948][ T6825] RAX: ffffffffffffff92 RBX: 0000000037042e59 RCX: 0000000000460c23 [ 1479.085904][ T6825] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703a40 [ 1479.093874][ T6825] RBP: 000000c00003f6e8 R08: 0000000000000000 R09: 0000000000000000 [ 1479.101860][ T6825] R10: 000000c00003f6d8 R11: 0000000000000206 R12: 00000164c67c3a9b [ 1479.109826][ T6825] R13: 0000000000000002 R14: 00000164c67c3a9b R15: 0000000000000000 [ 1479.119011][ T6825] Mem-Info: [ 1479.122245][ T6825] active_anon:170769 inactive_anon:4157 isolated_anon:0 [ 1479.122245][ T6825] active_file:14 inactive_file:15 isolated_file:0 [ 1479.122245][ T6825] unevictable:1 dirty:2 writeback:3 [ 1479.122245][ T6825] slab_reclaimable:15399 slab_unreclaimable:115749 [ 1479.122245][ T6825] mapped:54032 shmem:4417 pagetables:7565 bounce:0 [ 1479.122245][ T6825] free:25460 free_pcp:523 free_cma:0 [ 1479.158764][ T6825] Node 0 active_anon:683028kB inactive_anon:16628kB active_file:52kB inactive_file:56kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216128kB dirty:0kB writeback:12kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 548864kB writeback_tmp:0kB all_unreclaimable? yes [ 1479.186356][ T6825] Node 1 active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1479.211787][ T6825] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1479.240904][ T6825] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1479.250302][ T6825] Node 0 DMA32 free:37352kB min:42060kB low:51036kB high:60012kB reserved_highatomic:0KB active_anon:683028kB inactive_anon:16628kB active_file:140kB inactive_file:0kB unevictable:4kB writepending:12kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17168kB pagetables:30168kB bounce:0kB free_pcp:1844kB local_pcp:1368kB free_cma:0kB [ 1479.288896][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1479.293619][ T6825] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1479.358207][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1479.367074][ T6825] Node 1 Normal free:53800kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1479.404756][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1479.409454][ T6825] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10272kB [ 1479.437959][ T6825] Node 0 DMA32: 3202*4kB (UME) 1466*8kB (UME) 473*16kB (UME) 109*32kB (M) 7*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36040kB [ 1479.459327][ T6825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1479.470826][ T6825] Node 1 Normal: 150*4kB (ME) 82*8kB (ME) 50*16kB (ME) 21*32kB (UME) 4*64kB (M) 5*128kB (UME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (M) 11*4096kB (UM) = 53800kB [ 1479.493008][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1479.513259][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1479.535341][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1479.546057][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1479.563510][ T6825] 4449 total pagecache pages [ 1479.568111][ T6825] 0 pages in swap cache [ 1479.575314][ T6825] Swap cache stats: add 0, delete 0, find 0/0 [ 1479.581380][ T6825] Free swap = 0kB [ 1479.585136][ T6825] Total swap = 0kB [ 1479.588860][ T6825] 1965979 pages RAM [ 1479.600740][ T6825] 0 pages HighMem/MovableOnly [ 1479.605460][ T6825] 349903 pages reserved [ 1479.609605][ T6825] 0 pages cma reserved [ 1479.615674][ T6825] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=11592,uid=0 [ 1479.630060][ T6825] Out of memory: Killed process 11592 (syz-executor.2) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1479.666322][ T1151] oom_reaper: reaped process 11592 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1479.679849][ T6833] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1479.705141][ T6833] CPU: 1 PID: 6833 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1479.713396][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1479.723459][ T6833] Call Trace: [ 1479.726752][ T6833] dump_stack+0x18f/0x20d [ 1479.731083][ T6833] dump_header+0x10b/0x7e4 [ 1479.735499][ T6833] oom_kill_process.cold+0x10/0x15 [ 1479.740608][ T6833] out_of_memory+0x326/0x1340 [ 1479.745290][ T6833] ? oom_killer_disable+0x270/0x270 [ 1479.750487][ T6833] ? mutex_trylock+0x246/0x2c0 [ 1479.755249][ T6833] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1479.761944][ T6833] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1479.768545][ T6833] ? warn_alloc+0x120/0x120 [ 1479.773046][ T6833] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1479.778595][ T6833] ? lock_is_held_type+0xb0/0xe0 [ 1479.783536][ T6833] __alloc_pages_nodemask+0x68f/0x930 [ 1479.788911][ T6833] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1479.795663][ T6833] ? page_cache_readahead_unbounded+0x572/0x850 [ 1479.801916][ T6833] ? __lock_page_or_retry+0x650/0x650 [ 1479.807295][ T6833] alloc_pages_current+0x187/0x280 [ 1479.812383][ T6833] __page_cache_alloc+0x31e/0x450 [ 1479.817385][ T6833] pagecache_get_page+0x27d/0xe10 [ 1479.822387][ T6833] ? __do_page_cache_readahead+0xc2/0xf0 [ 1479.827993][ T6833] filemap_fault+0x1a99/0x2ad0 [ 1479.832774][ T6833] ext4_filemap_fault+0x87/0xb6 [ 1479.837597][ T6833] __do_fault+0x10d/0x4d0 [ 1479.841900][ T6833] handle_mm_fault+0x37a3/0x43f0 [ 1479.846815][ T6833] ? apply_to_existing_page_range+0x40/0x40 [ 1479.852689][ T6833] ? vmacache_update+0xce/0x140 [ 1479.857529][ T6833] do_user_addr_fault+0x5a2/0xd00 [ 1479.862533][ T6833] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1479.868056][ T6833] exc_page_fault+0xab/0x170 [ 1479.872621][ T6833] ? asm_exc_page_fault+0x8/0x30 [ 1479.877533][ T6833] asm_exc_page_fault+0x1e/0x30 [ 1479.882364][ T6833] RIP: 0033:0x460c23 [ 1479.886242][ T6833] Code: Bad RIP value. [ 1479.890290][ T6833] RSP: 002b:000000c00003bea0 EFLAGS: 00010206 [ 1479.896339][ T6833] RAX: ffffffffffffff92 RBX: 000000003b984363 RCX: 0000000000460c23 [ 1479.904291][ T6833] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703ac0 [ 1479.912241][ T6833] RBP: 000000c00003bee8 R08: 0000000000000000 R09: 0000000000000000 [ 1479.920193][ T6833] R10: 000000c00003bed8 R11: 0000000000000206 R12: 00000164dd45eb2d [ 1479.928140][ T6833] R13: 0000000000000001 R14: 00000164dd45eb2d R15: 0000000000000000 [ 1479.940470][ T6833] Mem-Info: [ 1479.943666][ T6833] active_anon:170226 inactive_anon:4157 isolated_anon:0 [ 1479.943666][ T6833] active_file:25 inactive_file:7 isolated_file:0 [ 1479.943666][ T6833] unevictable:1 dirty:0 writeback:0 [ 1479.943666][ T6833] slab_reclaimable:15396 slab_unreclaimable:116649 [ 1479.943666][ T6833] mapped:54026 shmem:4417 pagetables:7527 bounce:0 [ 1479.943666][ T6833] free:25072 free_pcp:597 free_cma:0 [ 1479.980180][ T6833] Node 0 active_anon:680856kB inactive_anon:16628kB active_file:88kB inactive_file:32kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216104kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 546816kB writeback_tmp:0kB all_unreclaimable? yes [ 1480.007749][ T6833] Node 1 active_anon:48kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1480.033350][ T6833] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1480.064844][ T6833] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1480.070556][ T6833] Node 0 DMA32 free:35624kB min:46156kB low:55132kB high:64108kB reserved_highatomic:0KB active_anon:680856kB inactive_anon:16628kB active_file:88kB inactive_file:32kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17140kB pagetables:30016kB bounce:0kB free_pcp:2140kB local_pcp:632kB free_cma:0kB [ 1480.102777][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1480.107470][ T6833] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1480.135653][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1480.140321][ T6833] Node 1 Normal free:53800kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1480.171156][ T6833] lowmem_reserve[]: 0 0 0 0 0 [ 1480.181206][ T6833] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10272kB [ 1480.193964][ T6833] Node 0 DMA32: 3202*4kB (UME) 1390*8kB (ME) 422*16kB (ME) 88*32kB (M) 6*64kB (UM) 0*128kB 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 34904kB [ 1480.209026][ T6833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1480.220533][ T6833] Node 1 Normal: 150*4kB (ME) 82*8kB (ME) 50*16kB (ME) 21*32kB (UME) 4*64kB (M) 5*128kB (UME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (M) 11*4096kB (UM) = 53800kB [ 1480.238045][ T6833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1480.247742][ T6833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1480.257096][ T6833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1480.266692][ T6833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1480.276040][ T6833] 4449 total pagecache pages [ 1480.280622][ T6833] 0 pages in swap cache [ 1480.288917][ T6833] Swap cache stats: add 0, delete 0, find 0/0 [ 1480.295122][ T6833] Free swap = 0kB [ 1480.298892][ T6833] Total swap = 0kB [ 1480.302728][ T6833] 1965979 pages RAM [ 1480.306530][ T6833] 0 pages HighMem/MovableOnly [ 1480.311213][ T6833] 349903 pages reserved [ 1480.315510][ T6833] 0 pages cma reserved [ 1480.319575][ T6833] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=11520,uid=0 [ 1480.333921][ T6833] Out of memory: Killed process 11520 (syz-executor.2) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1480.352021][ T1151] oom_reaper: reaped process 11520 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1480.402686][ T6825] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1480.419687][ T6825] CPU: 0 PID: 6825 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1480.427930][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1480.437980][ T6825] Call Trace: [ 1480.441273][ T6825] dump_stack+0x18f/0x20d [ 1480.445605][ T6825] dump_header+0x10b/0x7e4 [ 1480.450020][ T6825] oom_kill_process.cold+0x10/0x15 [ 1480.455135][ T6825] out_of_memory+0x326/0x1340 [ 1480.459820][ T6825] ? oom_killer_disable+0x270/0x270 [ 1480.465025][ T6825] ? mutex_trylock+0x246/0x2c0 [ 1480.469791][ T6825] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1480.476470][ T6825] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1480.483079][ T6825] ? warn_alloc+0x120/0x120 [ 1480.487584][ T6825] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1480.493166][ T6825] ? lock_is_held_type+0xb0/0xe0 [ 1480.498119][ T6825] __alloc_pages_nodemask+0x68f/0x930 [ 1480.503498][ T6825] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1480.510267][ T6825] ? page_cache_readahead_unbounded+0x572/0x850 [ 1480.516511][ T6825] ? __lock_page_or_retry+0x650/0x650 [ 1480.521891][ T6825] alloc_pages_current+0x187/0x280 [ 1480.526996][ T6825] __page_cache_alloc+0x31e/0x450 [ 1480.531996][ T6825] pagecache_get_page+0x27d/0xe10 [ 1480.537011][ T6825] ? __do_page_cache_readahead+0xc2/0xf0 [ 1480.542652][ T6825] filemap_fault+0x1a99/0x2ad0 [ 1480.547424][ T6825] ext4_filemap_fault+0x87/0xb6 [ 1480.552276][ T6825] __do_fault+0x10d/0x4d0 [ 1480.556611][ T6825] handle_mm_fault+0x37a3/0x43f0 [ 1480.561555][ T6825] ? apply_to_existing_page_range+0x40/0x40 [ 1480.567456][ T6825] ? vmacache_update+0xce/0x140 [ 1480.572418][ T6825] do_user_addr_fault+0x5a2/0xd00 [ 1480.577452][ T6825] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1480.583005][ T6825] exc_page_fault+0xab/0x170 [ 1480.587596][ T6825] ? asm_exc_page_fault+0x8/0x30 [ 1480.592533][ T6825] asm_exc_page_fault+0x1e/0x30 [ 1480.597382][ T6825] RIP: 0033:0x460c23 [ 1480.601264][ T6825] Code: Bad RIP value. [ 1480.605322][ T6825] RSP: 002b:000000c00003f6a0 EFLAGS: 00010206 [ 1480.611387][ T6825] RAX: ffffffffffffff92 RBX: 0000000037042e59 RCX: 0000000000460c23 [ 1480.619363][ T6825] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703a40 [ 1480.627352][ T6825] RBP: 000000c00003f6e8 R08: 0000000000000000 R09: 0000000000000000 [ 1480.635327][ T6825] R10: 000000c00003f6d8 R11: 0000000000000206 R12: 00000164c67c3a9b [ 1480.643299][ T6825] R13: 0000000000000002 R14: 00000164c67c3a9b R15: 0000000000000000 [ 1480.674178][ T6825] Mem-Info: [ 1480.677352][ T6825] active_anon:169683 inactive_anon:4157 isolated_anon:0 [ 1480.677352][ T6825] active_file:16 inactive_file:16 isolated_file:0 [ 1480.677352][ T6825] unevictable:1 dirty:0 writeback:0 [ 1480.677352][ T6825] slab_reclaimable:15396 slab_unreclaimable:117609 [ 1480.677352][ T6825] mapped:54026 shmem:4417 pagetables:7513 bounce:0 [ 1480.677352][ T6825] free:24695 free_pcp:624 free_cma:0 [ 1480.720635][ T6825] Node 0 active_anon:678684kB inactive_anon:16628kB active_file:60kB inactive_file:60kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216104kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 544768kB writeback_tmp:0kB all_unreclaimable? yes [ 1480.751376][ T6825] Node 1 active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1480.784006][ T6825] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1480.819250][ T6825] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1480.825030][ T6825] Node 0 DMA32 free:34052kB min:48204kB low:57180kB high:66156kB reserved_highatomic:0KB active_anon:678684kB inactive_anon:16628kB active_file:60kB inactive_file:60kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17104kB pagetables:29960kB bounce:0kB free_pcp:2244kB local_pcp:1384kB free_cma:0kB [ 1480.863765][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1480.868468][ T6825] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1480.903437][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1480.908169][ T6825] Node 1 Normal free:53832kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 1480.956585][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1480.961296][ T6825] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10272kB [ 1480.988267][ T6825] Node 0 DMA32: 3211*4kB (UME) 1359*8kB (UME) 393*16kB (UME) 83*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32724kB [ 1481.005273][ T6825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1481.016863][ T6825] Node 1 Normal: 150*4kB (ME) 82*8kB (ME) 50*16kB (ME) 22*32kB (UME) 4*64kB (M) 5*128kB (UME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (M) 11*4096kB (UM) = 53832kB [ 1481.042024][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1481.051623][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1481.062133][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1481.071680][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1481.081983][ T6825] 4449 total pagecache pages [ 1481.094761][ T6825] 0 pages in swap cache [ 1481.098919][ T6825] Swap cache stats: add 0, delete 0, find 0/0 [ 1481.106124][ T6825] Free swap = 0kB [ 1481.109835][ T6825] Total swap = 0kB [ 1481.113637][ T6825] 1965979 pages RAM [ 1481.117438][ T6825] 0 pages HighMem/MovableOnly [ 1481.131711][ T6825] 349903 pages reserved [ 1481.135909][ T6825] 0 pages cma reserved [ 1481.139972][ T6825] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=11207,uid=0 [ 1481.162497][ T6825] Out of memory: Killed process 11207 (syz-executor.2) total-vm:75112kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1481.206901][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1481.225283][ T3859] CPU: 1 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1481.233964][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1481.244010][ T3859] Call Trace: [ 1481.247308][ T3859] dump_stack+0x18f/0x20d [ 1481.251654][ T3859] dump_header+0x10b/0x7e4 [ 1481.256066][ T3859] oom_kill_process.cold+0x10/0x15 [ 1481.261158][ T3859] out_of_memory+0x326/0x1340 [ 1481.265852][ T3859] ? oom_killer_disable+0x270/0x270 [ 1481.271029][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1481.275809][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1481.282498][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1481.289106][ T3859] ? warn_alloc+0x120/0x120 [ 1481.293587][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1481.299115][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1481.304036][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1481.309410][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1481.316155][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1481.322385][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1481.327739][ T3859] alloc_pages_current+0x187/0x280 [ 1481.332868][ T3859] __page_cache_alloc+0x31e/0x450 [ 1481.337911][ T3859] pagecache_get_page+0x27d/0xe10 [ 1481.342917][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1481.348552][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1481.353301][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1481.358154][ T3859] __do_fault+0x10d/0x4d0 [ 1481.362490][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1481.367437][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1481.373319][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1481.378335][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1481.383865][ T3859] exc_page_fault+0xab/0x170 [ 1481.388434][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1481.393366][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1481.398208][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1481.402593][ T3859] Code: Bad RIP value. [ 1481.406633][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1481.412674][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1481.420619][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1481.428577][ T3859] RBP: 00007ffd902c6780 R08: 0000000000000000 R09: 00007ffd90355080 [ 1481.436536][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1481.444493][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc1b3c6bca [ 1481.457632][ T3859] Mem-Info: [ 1481.460784][ T3859] active_anon:169146 inactive_anon:4157 isolated_anon:0 [ 1481.460784][ T3859] active_file:16 inactive_file:16 isolated_file:0 [ 1481.460784][ T3859] unevictable:1 dirty:0 writeback:0 [ 1481.460784][ T3859] slab_reclaimable:15396 slab_unreclaimable:118571 [ 1481.460784][ T3859] mapped:54026 shmem:4417 pagetables:7476 bounce:0 [ 1481.460784][ T3859] free:24295 free_pcp:632 free_cma:0 [ 1481.497588][ T3859] Node 0 active_anon:676536kB inactive_anon:16628kB active_file:92kB inactive_file:28kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216104kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 544768kB writeback_tmp:0kB all_unreclaimable? yes [ 1481.525225][ T3859] Node 1 active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1481.550692][ T3859] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1481.587284][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1481.599346][ T3859] Node 0 DMA32 free:32552kB min:54348kB low:63324kB high:72300kB reserved_highatomic:0KB active_anon:676512kB inactive_anon:16628kB active_file:60kB inactive_file:60kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17072kB pagetables:29856kB bounce:0kB free_pcp:2368kB local_pcp:860kB free_cma:0kB [ 1481.637864][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1481.642692][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1481.671329][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1481.676077][ T3859] Node 1 Normal free:53832kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 1481.711373][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1481.724432][ T3859] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10272kB [ 1481.737850][ T3859] Node 0 DMA32: 3220*4kB (UME) 1251*8kB (ME) 362*16kB (ME) 77*32kB (M) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 31912kB [ 1481.759865][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1481.771344][ T3859] Node 1 Normal: 150*4kB (ME) 82*8kB (ME) 50*16kB (ME) 22*32kB (UME) 4*64kB (M) 5*128kB (UME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (M) 11*4096kB (UM) = 53832kB [ 1481.798603][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1481.809301][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1481.822630][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1481.832243][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1481.841513][ T3859] 4449 total pagecache pages [ 1481.846194][ T3859] 0 pages in swap cache [ 1481.850345][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1481.856502][ T3859] Free swap = 0kB [ 1481.860216][ T3859] Total swap = 0kB [ 1481.868497][ T3859] 1965979 pages RAM [ 1481.872353][ T3859] 0 pages HighMem/MovableOnly [ 1481.877021][ T3859] 349903 pages reserved [ 1481.881162][ T3859] 0 pages cma reserved [ 1481.890904][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=10081,uid=0 [ 1481.906021][ T3859] Out of memory: Killed process 10081 (syz-executor.4) total-vm:74980kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1481.960809][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1481.988542][ T3859] CPU: 1 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1481.997256][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1482.007303][ T3859] Call Trace: [ 1482.010578][ T3859] dump_stack+0x18f/0x20d [ 1482.014889][ T3859] dump_header+0x10b/0x7e4 [ 1482.019281][ T3859] oom_kill_process.cold+0x10/0x15 [ 1482.024372][ T3859] out_of_memory+0x326/0x1340 [ 1482.029027][ T3859] ? oom_killer_disable+0x270/0x270 [ 1482.034205][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1482.038943][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1482.045596][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1482.052172][ T3859] ? warn_alloc+0x120/0x120 [ 1482.056664][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1482.062190][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1482.067104][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1482.072479][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1482.079218][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1482.085447][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1482.090801][ T3859] alloc_pages_current+0x187/0x280 [ 1482.095888][ T3859] __page_cache_alloc+0x31e/0x450 [ 1482.100890][ T3859] pagecache_get_page+0x27d/0xe10 [ 1482.105908][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1482.111513][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1482.116261][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1482.121085][ T3859] __do_fault+0x10d/0x4d0 [ 1482.125406][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1482.130333][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1482.136208][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1482.141224][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1482.146748][ T3859] exc_page_fault+0xab/0x170 [ 1482.151314][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1482.156226][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1482.161050][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1482.165449][ T3859] Code: Bad RIP value. [ 1482.169494][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1482.175532][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1482.183480][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1482.191424][ T3859] RBP: 00007ffd902c6780 R08: 0000000000000000 R09: 00007ffd90355080 [ 1482.199377][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1482.207327][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc1b3c6bca [ 1482.222563][ T3859] Mem-Info: [ 1482.225709][ T3859] active_anon:168600 inactive_anon:4157 isolated_anon:0 [ 1482.225709][ T3859] active_file:25 inactive_file:0 isolated_file:0 [ 1482.225709][ T3859] unevictable:1 dirty:0 writeback:0 [ 1482.225709][ T3859] slab_reclaimable:15395 slab_unreclaimable:119345 [ 1482.225709][ T3859] mapped:54026 shmem:4417 pagetables:7450 bounce:0 [ 1482.225709][ T3859] free:24094 free_pcp:658 free_cma:0 [ 1482.270393][ T3859] Node 0 active_anon:674352kB inactive_anon:16628kB active_file:120kB inactive_file:0kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216104kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB all_unreclaimable? yes [ 1482.299837][ T3859] Node 1 active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1482.336116][ T3859] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1482.367755][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1482.373557][ T3859] Node 0 DMA32 free:31700kB min:54348kB low:63324kB high:72300kB reserved_highatomic:0KB active_anon:674352kB inactive_anon:16628kB active_file:120kB inactive_file:0kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17040kB pagetables:29756kB bounce:0kB free_pcp:2352kB local_pcp:880kB free_cma:0kB [ 1482.412361][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1482.417072][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1482.448020][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1482.453212][ T3859] Node 1 Normal free:53832kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 1482.492246][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1482.496952][ T3859] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10272kB [ 1482.511647][ T3859] Node 0 DMA32: 3277*4kB (UME) 1206*8kB (UME) 362*16kB (UME) 77*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 31012kB [ 1482.532582][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1482.548181][ T3859] Node 1 Normal: 150*4kB (ME) 82*8kB (ME) 50*16kB (ME) 22*32kB (UME) 4*64kB (M) 5*128kB (UME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (M) 11*4096kB (UM) = 53832kB [ 1482.579384][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1482.589070][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1482.609119][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1482.618746][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1482.634381][ T3859] 4449 total pagecache pages [ 1482.639015][ T3859] 0 pages in swap cache [ 1482.645083][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1482.651158][ T3859] Free swap = 0kB [ 1482.655031][ T3859] Total swap = 0kB [ 1482.658749][ T3859] 1965979 pages RAM [ 1482.671385][ T3859] 0 pages HighMem/MovableOnly [ 1482.680215][ T3859] 349903 pages reserved [ 1482.695614][ T3859] 0 pages cma reserved [ 1482.699708][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=9994,uid=0 [ 1482.716637][ T3859] Out of memory: Killed process 9994 (syz-executor.3) total-vm:74980kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1482.742538][ T1151] oom_reaper: reaped process 9994 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1482.793094][ T1151] oom_reaper: reaped process 20647 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 1482.846263][ T6825] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1482.870905][ T6825] CPU: 1 PID: 6825 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1482.879153][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1482.889202][ T6825] Call Trace: [ 1482.892497][ T6825] dump_stack+0x18f/0x20d [ 1482.896828][ T6825] dump_header+0x10b/0x7e4 [ 1482.901242][ T6825] oom_kill_process.cold+0x10/0x15 [ 1482.906355][ T6825] out_of_memory+0x326/0x1340 [ 1482.911037][ T6825] ? oom_killer_disable+0x270/0x270 [ 1482.916251][ T6825] ? mutex_trylock+0x246/0x2c0 [ 1482.921014][ T6825] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1482.927694][ T6825] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1482.934301][ T6825] ? warn_alloc+0x120/0x120 [ 1482.938801][ T6825] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1482.944356][ T6825] ? lock_is_held_type+0xb0/0xe0 [ 1482.949299][ T6825] __alloc_pages_nodemask+0x68f/0x930 [ 1482.954676][ T6825] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1482.961449][ T6825] ? page_cache_readahead_unbounded+0x572/0x850 [ 1482.967691][ T6825] ? __lock_page_or_retry+0x650/0x650 [ 1482.973067][ T6825] alloc_pages_current+0x187/0x280 [ 1482.978178][ T6825] __page_cache_alloc+0x31e/0x450 [ 1482.983201][ T6825] pagecache_get_page+0x27d/0xe10 [ 1482.988227][ T6825] ? __do_page_cache_readahead+0xc2/0xf0 [ 1482.993860][ T6825] filemap_fault+0x1a99/0x2ad0 [ 1482.998631][ T6825] ext4_filemap_fault+0x87/0xb6 [ 1483.003477][ T6825] __do_fault+0x10d/0x4d0 [ 1483.007810][ T6825] handle_mm_fault+0x37a3/0x43f0 [ 1483.012752][ T6825] ? apply_to_existing_page_range+0x40/0x40 [ 1483.018652][ T6825] ? vmacache_update+0xce/0x140 [ 1483.023508][ T6825] do_user_addr_fault+0x5a2/0xd00 [ 1483.028533][ T6825] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1483.034079][ T6825] exc_page_fault+0xab/0x170 [ 1483.038664][ T6825] ? asm_exc_page_fault+0x8/0x30 [ 1483.043599][ T6825] asm_exc_page_fault+0x1e/0x30 [ 1483.048447][ T6825] RIP: 0033:0x460c23 [ 1483.052332][ T6825] Code: Bad RIP value. [ 1483.056389][ T6825] RSP: 002b:000000c00003f6a0 EFLAGS: 00010206 [ 1483.062452][ T6825] RAX: ffffffffffffff92 RBX: 0000000037042e59 RCX: 0000000000460c23 [ 1483.070417][ T6825] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703a40 [ 1483.078390][ T6825] RBP: 000000c00003f6e8 R08: 0000000000000000 R09: 0000000000000000 [ 1483.086359][ T6825] R10: 000000c00003f6d8 R11: 0000000000000206 R12: 00000164c67c3a9b [ 1483.088063][T20647] syz-executor.5: vmalloc: allocation failure, allocated 4256358400 of 4294975488 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1483.094338][ T6825] R13: 0000000000000002 R14: 00000164c67c3a9b R15: 0000000000000000 [ 1483.120254][T20647] CPU: 0 PID: 20647 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1483.128919][T20647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1483.138974][T20647] Call Trace: [ 1483.141747][ T6825] Mem-Info: [ 1483.142261][T20647] dump_stack+0x18f/0x20d [ 1483.142284][T20647] warn_alloc.cold+0x87/0x17a [ 1483.142301][T20647] ? mark_held_locks+0x9f/0xe0 [ 1483.142321][T20647] ? zone_watermark_ok_safe+0x260/0x260 [ 1483.145439][ T6825] active_anon:167517 inactive_anon:4157 isolated_anon:0 [ 1483.145439][ T6825] active_file:8 inactive_file:24 isolated_file:0 [ 1483.145439][ T6825] unevictable:1 dirty:0 writeback:0 [ 1483.145439][ T6825] slab_reclaimable:15392 slab_unreclaimable:120172 [ 1483.145439][ T6825] mapped:54026 shmem:4417 pagetables:7423 bounce:0 [ 1483.145439][ T6825] free:16558 free_pcp:755 free_cma:0 [ 1483.149731][T20647] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1483.205059][ T6825] Node 0 active_anon:670024kB inactive_anon:16628kB active_file:44kB inactive_file:76kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216104kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 538624kB writeback_tmp:0kB all_unreclaimable? yes [ 1483.207140][T20647] __vmalloc_area_node+0x49e/0x7a0 [ 1483.239641][T20647] ? ip_set_alloc+0x48/0x60 [ 1483.244138][T20647] ? ip_set_alloc+0x48/0x60 [ 1483.248640][T20647] vzalloc+0x116/0x1a0 [ 1483.252708][T20647] ip_set_alloc+0x48/0x60 [ 1483.257036][T20647] hash_netnet_create+0x401/0xd70 [ 1483.262059][T20647] ? hash_netnet6_head+0xcd0/0xcd0 [ 1483.267169][T20647] ip_set_create+0x6a2/0x13c0 [ 1483.271849][T20647] ? ip_set_sockfn_get+0xe00/0xe00 [ 1483.276991][T20647] ? lock_is_held_type+0xb0/0xe0 [ 1483.281931][T20647] ? ip_set_sockfn_get+0xe00/0xe00 [ 1483.284897][ T6825] Node 1 active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1483.287043][T20647] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1483.317403][T20647] ? nfnetlink_rcv+0x420/0x420 [ 1483.322168][T20647] ? is_bpf_text_address+0xcb/0x160 [ 1483.327374][T20647] ? __lock_acquire+0xc1e/0x56e0 [ 1483.332318][T20647] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1483.338297][T20647] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1483.344278][T20647] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1483.350173][T20647] netlink_rcv_skb+0x15a/0x430 [ 1483.354946][T20647] ? nfnetlink_rcv+0x420/0x420 [ 1483.359708][T20647] ? netlink_ack+0xa10/0xa10 [ 1483.364303][T20647] ? ns_capable+0xde/0x100 [ 1483.364416][ T6825] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1483.368719][T20647] nfnetlink_rcv+0x1ac/0x420 [ 1483.402278][T20647] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1483.407740][T20647] netlink_unicast+0x533/0x7d0 [ 1483.412504][T20647] ? netlink_attachskb+0x810/0x810 [ 1483.417613][T20647] ? _copy_from_iter_full+0x247/0x890 [ 1483.422985][T20647] ? __phys_addr+0x9a/0x110 [ 1483.427484][T20647] ? __phys_addr_symbol+0x2c/0x70 [ 1483.432508][T20647] ? __check_object_size+0x171/0x3e4 [ 1483.437794][T20647] netlink_sendmsg+0x856/0xd90 [ 1483.438757][ T6825] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1483.442556][T20647] ? netlink_unicast+0x7d0/0x7d0 [ 1483.442578][T20647] ? netlink_unicast+0x7d0/0x7d0 [ 1483.442595][T20647] sock_sendmsg+0xcf/0x120 [ 1483.442612][T20647] ____sys_sendmsg+0x6e8/0x810 [ 1483.442630][T20647] ? kernel_sendmsg+0x50/0x50 [ 1483.442647][T20647] ? do_recvmmsg+0x6d0/0x6d0 [ 1483.462191][ T6825] Node 0 DMA32 free:29204kB min:58444kB low:67420kB high:76396kB reserved_highatomic:0KB active_anon:670024kB inactive_anon:16628kB active_file:44kB inactive_file:76kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:17012kB pagetables:29600kB bounce:0kB free_pcp:2432kB local_pcp:980kB free_cma:0kB [ 1483.462579][T20647] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1483.467308][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1483.472023][T20647] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1483.521217][ T6825] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1483.525176][T20647] ? __lock_acquire+0xc1e/0x56e0 [ 1483.525198][T20647] ___sys_sendmsg+0xf3/0x170 [ 1483.525214][T20647] ? sendmsg_copy_msghdr+0x160/0x160 [ 1483.525228][T20647] ? __fget_files+0x272/0x400 [ 1483.525246][T20647] ? lock_downgrade+0x820/0x820 [ 1483.525259][T20647] ? find_held_lock+0x2d/0x110 [ 1483.525274][T20647] ? __might_fault+0x11f/0x1d0 [ 1483.525294][T20647] ? __fget_files+0x294/0x400 [ 1483.525313][T20647] ? __fget_light+0xea/0x280 [ 1483.525337][T20647] __sys_sendmsg+0xe5/0x1b0 [ 1483.600790][T20647] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1483.605814][T20647] ? __x64_sys_futex+0x382/0x4e0 [ 1483.610758][T20647] ? do_syscall_64+0x1c/0xe0 [ 1483.615349][T20647] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1483.621336][T20647] do_syscall_64+0x60/0xe0 [ 1483.625753][T20647] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1483.631644][T20647] RIP: 0033:0x45cb29 [ 1483.635528][T20647] Code: Bad RIP value. [ 1483.639605][T20647] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1483.648012][T20647] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1483.651493][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1483.655974][T20647] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1483.655984][T20647] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1483.655991][T20647] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1483.656000][T20647] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1483.716477][ T6825] Node 1 Normal free:26868kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:508kB local_pcp:256kB free_cma:0kB [ 1483.762188][ T6825] lowmem_reserve[]: 0 0 0 0 0 [ 1483.766901][ T6825] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10144kB [ 1483.789187][ T6825] Node 0 DMA32: 2665*4kB (UME) 1126*8kB (ME) 328*16kB (UME) 76*32kB (UM) 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 29204kB [ 1483.824131][ T6825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1483.846468][ T6825] Node 1 Normal: 151*4kB (UME) 83*8kB (UME) 50*16kB (ME) 21*32kB (UME) 5*64kB (UM) 4*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26868kB [ 1483.869755][T20647] Mem-Info: [ 1483.871676][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1483.884324][ T6825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1483.893659][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1483.912172][ T6825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1483.921452][ T6825] 4449 total pagecache pages [ 1483.926144][T20647] active_anon:167511 inactive_anon:4157 isolated_anon:0 [ 1483.926144][T20647] active_file:12 inactive_file:10 isolated_file:0 [ 1483.926144][T20647] unevictable:1 dirty:0 writeback:0 [ 1483.926144][T20647] slab_reclaimable:15392 slab_unreclaimable:120196 [ 1483.926144][T20647] mapped:54026 shmem:4417 pagetables:7433 bounce:0 [ 1483.926144][T20647] free:16554 free_pcp:709 free_cma:0 [ 1483.964232][ T6825] 0 pages in swap cache [ 1483.968376][ T6825] Swap cache stats: add 0, delete 0, find 0/0 [ 1483.974557][ T6825] Free swap = 0kB [ 1483.978270][ T6825] Total swap = 0kB [ 1483.981977][ T6825] 1965979 pages RAM [ 1483.998785][T20647] Node 0 active_anon:670004kB inactive_anon:16628kB active_file:40kB inactive_file:40kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216104kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB all_unreclaimable? yes [ 1484.008023][ T6825] 0 pages HighMem/MovableOnly [ 1484.031070][ T6825] 349903 pages reserved [ 1484.035269][ T6825] 0 pages cma reserved [ 1484.039333][ T6825] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=9566,uid=0 [ 1484.039735][T20647] Node 1 active_anon:40kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1484.053616][ T6825] Out of memory: Killed process 9566 (syz-executor.4) total-vm:74980kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1484.095394][T20647] Node 0 DMA free:10144kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.124970][T20647] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1484.130694][T20647] Node 0 DMA32 free:30660kB min:58444kB low:67420kB high:76396kB reserved_highatomic:0KB active_anon:667832kB inactive_anon:16628kB active_file:40kB inactive_file:40kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:16980kB pagetables:29492kB bounce:0kB free_pcp:2580kB local_pcp:1444kB free_cma:0kB [ 1484.165234][T20647] lowmem_reserve[]: 0 0 0 0 0 [ 1484.169931][T20647] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.198113][T20647] lowmem_reserve[]: 0 0 0 0 0 [ 1484.202858][T20647] Node 1 Normal free:26868kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:508kB local_pcp:252kB free_cma:0kB [ 1484.234092][T20647] lowmem_reserve[]: 0 0 0 0 0 [ 1484.238777][T20647] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10144kB [ 1484.253754][T20647] Node 0 DMA32: 2665*4kB (UME) 1126*8kB (ME) 328*16kB (UME) 75*32kB (M) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 30004kB [ 1484.269175][T20647] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1484.280640][T20647] Node 1 Normal: 151*4kB (UME) 83*8kB (UME) 50*16kB (ME) 21*32kB (UME) 5*64kB (UM) 4*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26868kB [ 1484.297673][T20647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1484.307349][T20647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1484.316644][T20647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1484.326198][T20647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1484.335519][T20647] 4449 total pagecache pages [ 1484.340108][T20647] 0 pages in swap cache [ 1484.344262][T20647] Swap cache stats: add 0, delete 0, find 0/0 [ 1484.350299][T20647] Free swap = 0kB [ 1484.354578][T20647] Total swap = 0kB [ 1484.358289][T20647] 1965979 pages RAM [ 1484.362138][T20647] 0 pages HighMem/MovableOnly [ 1484.366821][T20647] 349903 pages reserved [ 1484.370942][T20647] 0 pages cma reserved [ 1484.504091][ T6498] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1484.523388][ T6498] CPU: 1 PID: 6498 Comm: in:imklog Not tainted 5.8.0-rc3-syzkaller #0 [ 1484.531541][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1484.541586][ T6498] Call Trace: [ 1484.544887][ T6498] dump_stack+0x18f/0x20d [ 1484.549222][ T6498] dump_header+0x10b/0x7e4 [ 1484.553632][ T6498] oom_kill_process.cold+0x10/0x15 [ 1484.558739][ T6498] out_of_memory+0x326/0x1340 [ 1484.563419][ T6498] ? oom_killer_disable+0x270/0x270 [ 1484.568615][ T6498] ? mutex_trylock+0x246/0x2c0 [ 1484.573372][ T6498] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1484.580057][ T6498] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1484.586674][ T6498] ? warn_alloc+0x120/0x120 [ 1484.591178][ T6498] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1484.596727][ T6498] ? lock_is_held_type+0xb0/0xe0 [ 1484.601675][ T6498] __alloc_pages_nodemask+0x68f/0x930 [ 1484.607051][ T6498] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1484.613820][ T6498] ? page_cache_readahead_unbounded+0x572/0x850 [ 1484.620058][ T6498] ? __lock_page_or_retry+0x650/0x650 [ 1484.625436][ T6498] alloc_pages_current+0x187/0x280 [ 1484.630546][ T6498] __page_cache_alloc+0x31e/0x450 [ 1484.635574][ T6498] pagecache_get_page+0x27d/0xe10 [ 1484.640595][ T6498] ? __do_page_cache_readahead+0xc2/0xf0 [ 1484.646245][ T6498] filemap_fault+0x1a99/0x2ad0 [ 1484.651018][ T6498] ext4_filemap_fault+0x87/0xb6 [ 1484.655865][ T6498] __do_fault+0x10d/0x4d0 [ 1484.660191][ T6498] handle_mm_fault+0x37a3/0x43f0 [ 1484.665129][ T6498] ? apply_to_existing_page_range+0x40/0x40 [ 1484.671024][ T6498] ? vmacache_update+0xce/0x140 [ 1484.675873][ T6498] do_user_addr_fault+0x5a2/0xd00 [ 1484.680894][ T6498] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1484.686440][ T6498] exc_page_fault+0xab/0x170 [ 1484.691023][ T6498] ? asm_exc_page_fault+0x8/0x30 [ 1484.695951][ T6498] asm_exc_page_fault+0x1e/0x30 [ 1484.700792][ T6498] RIP: 0033:0x7febe7d1122d [ 1484.705209][ T6498] Code: Bad RIP value. [ 1484.709263][ T6498] RSP: 002b:00007febe56ad580 EFLAGS: 00010293 [ 1484.715319][ T6498] RAX: 0000000000000b0d RBX: 0000000000000000 RCX: 00007febe7d1122d [ 1484.723281][ T6498] RDX: 0000000000001fa0 RSI: 00007febe56adda0 RDI: 0000000000000004 [ 1484.731261][ T6498] RBP: 00005614bf3629d0 R08: 0000000000000000 R09: 0000000000000000 [ 1484.739227][ T6498] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007febe56adda0 [ 1484.747191][ T6498] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007febe56ae819 [ 1484.782114][ T6498] Mem-Info: [ 1484.785278][ T6498] active_anon:166964 inactive_anon:4157 isolated_anon:0 [ 1484.785278][ T6498] active_file:21 inactive_file:0 isolated_file:0 [ 1484.785278][ T6498] unevictable:1 dirty:0 writeback:0 [ 1484.785278][ T6498] slab_reclaimable:15392 slab_unreclaimable:120780 [ 1484.785278][ T6498] mapped:54026 shmem:4417 pagetables:7407 bounce:0 [ 1484.785278][ T6498] free:16554 free_pcp:731 free_cma:0 [ 1484.844152][ T6498] Node 0 active_anon:667816kB inactive_anon:16628kB active_file:80kB inactive_file:0kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216104kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 534528kB writeback_tmp:0kB all_unreclaimable? yes [ 1484.898404][ T6498] Node 1 active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1484.932038][ T6498] Node 0 DMA free:10144kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.979934][ T6498] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1484.991161][ T6498] Node 0 DMA32 free:29204kB min:58444kB low:67420kB high:76396kB reserved_highatomic:0KB active_anon:667816kB inactive_anon:16628kB active_file:80kB inactive_file:80kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:16976kB pagetables:29536kB bounce:0kB free_pcp:2384kB local_pcp:960kB free_cma:0kB [ 1485.041034][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1485.045861][ T6498] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1485.098251][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1485.106137][ T6498] Node 1 Normal free:26868kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:508kB local_pcp:256kB free_cma:0kB [ 1485.153022][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1485.157735][ T6498] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10144kB [ 1485.181389][ T6498] Node 0 DMA32: 2665*4kB (UME) 1126*8kB (ME) 328*16kB (UME) 76*32kB (UM) 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 29204kB [ 1485.211857][ T6498] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1485.231281][ T6498] Node 1 Normal: 151*4kB (UME) 83*8kB (UME) 50*16kB (ME) 21*32kB (UME) 5*64kB (UM) 4*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26868kB [ 1485.266168][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1485.281779][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1485.306064][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1485.323663][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1485.339010][ T6498] 4449 total pagecache pages [ 1485.359000][ T6498] 0 pages in swap cache [ 1485.366861][ T6498] Swap cache stats: add 0, delete 0, find 0/0 [ 1485.378991][ T6498] Free swap = 0kB [ 1485.390768][ T6498] Total swap = 0kB [ 1485.402948][ T6498] 1965979 pages RAM [ 1485.406757][ T6498] 0 pages HighMem/MovableOnly [ 1485.411419][ T6498] 349903 pages reserved [ 1485.422017][ T6498] 0 pages cma reserved [ 1485.440942][ T6498] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=8616,uid=0 [ 1485.463507][ T6498] Out of memory: Killed process 8616 (syz-executor.4) total-vm:74980kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1485.496913][ T6498] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1485.515681][ T6498] CPU: 1 PID: 6498 Comm: in:imklog Not tainted 5.8.0-rc3-syzkaller #0 [ 1485.523841][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1485.533888][ T6498] Call Trace: [ 1485.537180][ T6498] dump_stack+0x18f/0x20d [ 1485.541507][ T6498] dump_header+0x10b/0x7e4 [ 1485.545930][ T6498] oom_kill_process.cold+0x10/0x15 [ 1485.551048][ T6498] out_of_memory+0x326/0x1340 [ 1485.555730][ T6498] ? oom_killer_disable+0x270/0x270 [ 1485.560926][ T6498] ? mutex_trylock+0x246/0x2c0 [ 1485.565684][ T6498] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1485.572356][ T6498] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1485.578969][ T6498] ? warn_alloc+0x120/0x120 [ 1485.583478][ T6498] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1485.589024][ T6498] ? lock_is_held_type+0xb0/0xe0 [ 1485.593965][ T6498] __alloc_pages_nodemask+0x68f/0x930 [ 1485.599349][ T6498] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1485.606123][ T6498] ? page_cache_readahead_unbounded+0x572/0x850 [ 1485.612373][ T6498] ? __lock_page_or_retry+0x650/0x650 [ 1485.617770][ T6498] alloc_pages_current+0x187/0x280 [ 1485.622881][ T6498] __page_cache_alloc+0x31e/0x450 [ 1485.627903][ T6498] pagecache_get_page+0x27d/0xe10 [ 1485.632924][ T6498] ? __do_page_cache_readahead+0xc2/0xf0 [ 1485.638581][ T6498] filemap_fault+0x1a99/0x2ad0 [ 1485.643358][ T6498] ext4_filemap_fault+0x87/0xb6 [ 1485.648206][ T6498] __do_fault+0x10d/0x4d0 [ 1485.652536][ T6498] handle_mm_fault+0x37a3/0x43f0 [ 1485.657473][ T6498] ? apply_to_existing_page_range+0x40/0x40 [ 1485.663372][ T6498] ? vmacache_update+0xce/0x140 [ 1485.668223][ T6498] do_user_addr_fault+0x5a2/0xd00 [ 1485.673247][ T6498] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1485.678792][ T6498] exc_page_fault+0xab/0x170 [ 1485.683383][ T6498] ? asm_exc_page_fault+0x8/0x30 [ 1485.688314][ T6498] asm_exc_page_fault+0x1e/0x30 [ 1485.693155][ T6498] RIP: 0033:0x7febe7d1122d [ 1485.697553][ T6498] Code: Bad RIP value. [ 1485.701608][ T6498] RSP: 002b:00007febe56ad580 EFLAGS: 00010293 [ 1485.707666][ T6498] RAX: 0000000000000b0d RBX: 0000000000000000 RCX: 00007febe7d1122d [ 1485.715630][ T6498] RDX: 0000000000001fa0 RSI: 00007febe56adda0 RDI: 0000000000000004 [ 1485.723591][ T6498] RBP: 00005614bf3629d0 R08: 0000000000000000 R09: 0000000000000000 [ 1485.731554][ T6498] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007febe56adda0 [ 1485.739518][ T6498] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007febe56ae819 [ 1485.752423][ T6498] Mem-Info: [ 1485.755570][ T6498] active_anon:166421 inactive_anon:4157 isolated_anon:0 [ 1485.755570][ T6498] active_file:39 inactive_file:8 isolated_file:0 [ 1485.755570][ T6498] unevictable:1 dirty:0 writeback:0 [ 1485.755570][ T6498] slab_reclaimable:15392 slab_unreclaimable:121122 [ 1485.755570][ T6498] mapped:54026 shmem:4417 pagetables:7407 bounce:0 [ 1485.755570][ T6498] free:16839 free_pcp:658 free_cma:0 [ 1485.792029][ T6498] Node 0 active_anon:665644kB inactive_anon:16628kB active_file:144kB inactive_file:36kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216104kB dirty:0kB writeback:0kB shmem:17668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 534528kB writeback_tmp:0kB all_unreclaimable? yes [ 1485.832153][ T6498] Node 1 active_anon:40kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1485.867143][ T6498] Node 0 DMA free:10144kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1485.911068][ T6498] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1485.916917][ T6498] Node 0 DMA32 free:29720kB min:58444kB low:67420kB high:76396kB reserved_highatomic:0KB active_anon:665644kB inactive_anon:16628kB active_file:144kB inactive_file:36kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:16976kB pagetables:29536kB bounce:0kB free_pcp:2080kB local_pcp:748kB free_cma:0kB [ 1486.004187][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1486.008901][ T6498] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1486.129701][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1486.179173][ T6498] Node 1 Normal free:26868kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:508kB local_pcp:252kB free_cma:0kB [ 1486.227136][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1486.231845][ T6498] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10144kB [ 1486.255525][ T6498] Node 0 DMA32: 11828*4kB (UME) 5410*8kB (UME) 2597*16kB (UME) 92*32kB (UM) 8*64kB (U) 5*128kB (U) 2*256kB (U) 3*512kB (U) 5*1024kB (U) 0*2048kB 0*4096kB = 143408kB [ 1486.278859][ T6498] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1486.300583][ T6498] Node 1 Normal: 151*4kB (UME) 83*8kB (UME) 50*16kB (ME) 21*32kB (UME) 5*64kB (UM) 4*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26868kB [ 1486.329399][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1486.344357][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1486.360723][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1486.370371][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1486.386877][ T6498] 4824 total pagecache pages [ 1486.391673][ T6498] 0 pages in swap cache [ 1486.397136][ T6498] Swap cache stats: add 0, delete 0, find 0/0 [ 1486.409796][ T6498] Free swap = 0kB [ 1486.415616][ T6498] Total swap = 0kB [ 1486.419396][ T6498] 1965979 pages RAM [ 1486.428722][ T6498] 0 pages HighMem/MovableOnly [ 1486.434799][ T6498] 349903 pages reserved [ 1486.439117][ T6498] 0 pages cma reserved [ 1486.448562][ T6498] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=27978,uid=0 [ 1486.478156][ T6498] Out of memory: Killed process 27978 (syz-executor.3) total-vm:74848kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1487.991037][ T0] NOHZ: local_softirq_pending 08 01:51:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1e000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:51:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 01:51:18 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x123, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:51:18 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x419f0200, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:51:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x10a, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:51:18 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 01:51:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:51:18 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x429f0200, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:51:18 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 01:51:18 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x439f0200, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:51:18 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 01:51:18 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x44020000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1494.545324][ T6821] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1494.556135][ T6821] CPU: 0 PID: 6821 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1494.564369][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1494.574417][ T6821] Call Trace: [ 1494.577709][ T6821] dump_stack+0x18f/0x20d [ 1494.582030][ T6821] dump_header+0x10b/0x7e4 [ 1494.586432][ T6821] oom_kill_process.cold+0x10/0x15 [ 1494.591522][ T6821] out_of_memory+0x326/0x1340 [ 1494.596194][ T6821] ? oom_killer_disable+0x270/0x270 [ 1494.601398][ T6821] ? mutex_trylock+0x246/0x2c0 [ 1494.606151][ T6821] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1494.612819][ T6821] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1494.619421][ T6821] ? warn_alloc+0x120/0x120 [ 1494.623912][ T6821] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1494.629479][ T6821] ? lock_is_held_type+0xb0/0xe0 [ 1494.634430][ T6821] __alloc_pages_nodemask+0x68f/0x930 [ 1494.639795][ T6821] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1494.646551][ T6821] ? page_cache_readahead_unbounded+0x572/0x850 [ 1494.652795][ T6821] ? __lock_page_or_retry+0x650/0x650 [ 1494.658156][ T6821] alloc_pages_current+0x187/0x280 [ 1494.663261][ T6821] __page_cache_alloc+0x31e/0x450 [ 1494.668288][ T6821] pagecache_get_page+0x27d/0xe10 [ 1494.673313][ T6821] ? __do_page_cache_readahead+0xc2/0xf0 [ 1494.678936][ T6821] filemap_fault+0x1a99/0x2ad0 [ 1494.683684][ T6821] ext4_filemap_fault+0x87/0xb6 [ 1494.688509][ T6821] __do_fault+0x10d/0x4d0 [ 1494.692831][ T6821] handle_mm_fault+0x37a3/0x43f0 [ 1494.697776][ T6821] ? apply_to_existing_page_range+0x40/0x40 [ 1494.703678][ T6821] ? vmacache_update+0xce/0x140 [ 1494.708519][ T6821] do_user_addr_fault+0x5a2/0xd00 [ 1494.713535][ T6821] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1494.719069][ T6821] exc_page_fault+0xab/0x170 [ 1494.723655][ T6821] ? asm_exc_page_fault+0x8/0x30 [ 1494.728587][ T6821] asm_exc_page_fault+0x1e/0x30 [ 1494.733431][ T6821] RIP: 0033:0x460c23 [ 1494.737303][ T6821] Code: Bad RIP value. [ 1494.741338][ T6821] RSP: 002b:000000c00003bea0 EFLAGS: 00010202 [ 1494.747386][ T6821] RAX: ffffffffffffff92 RBX: 000000003b987298 RCX: 0000000000460c23 [ 1494.755345][ T6821] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703ac0 [ 1494.763300][ T6821] RBP: 000000c00003bee8 R08: 0000000000000000 R09: 0000000000000000 [ 1494.771270][ T6821] R10: 000000c00003bed8 R11: 0000000000000202 R12: 00000168adb4647c [ 1494.779230][ T6821] R13: 0000000000000002 R14: 00000168adb4647c R15: 0000000000000000 [ 1494.798855][ T6821] Mem-Info: [ 1494.802008][ T6821] active_anon:166422 inactive_anon:6205 isolated_anon:0 [ 1494.802008][ T6821] active_file:17 inactive_file:14 isolated_file:0 [ 1494.802008][ T6821] unevictable:1 dirty:0 writeback:0 [ 1494.802008][ T6821] slab_reclaimable:15396 slab_unreclaimable:115690 [ 1494.802008][ T6821] mapped:54096 shmem:6465 pagetables:7360 bounce:0 [ 1494.802008][ T6821] free:30608 free_pcp:124 free_cma:0 [ 1494.849588][ T6821] Node 0 active_anon:665648kB inactive_anon:24820kB active_file:60kB inactive_file:56kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216384kB dirty:0kB writeback:0kB shmem:25860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 532480kB writeback_tmp:0kB all_unreclaimable? no [ 1494.885236][ T6821] Node 1 active_anon:40kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1494.911710][ T6821] Node 0 DMA free:10276kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1494.949376][ T6821] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1494.955140][ T6821] Node 0 DMA32 free:57780kB min:58444kB low:67420kB high:76396kB reserved_highatomic:0KB active_anon:665648kB inactive_anon:24820kB active_file:60kB inactive_file:56kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:16912kB pagetables:29348kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1494.986989][ T6821] lowmem_reserve[]: 0 0 0 0 0 [ 1494.991681][ T6821] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1495.019978][ T6821] lowmem_reserve[]: 0 0 0 0 0 [ 1495.024782][ T6821] Node 1 Normal free:53856kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1495.055311][ T6821] lowmem_reserve[]: 0 0 0 0 0 [ 1495.060002][ T6821] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10276kB [ 1495.074267][ T6821] Node 0 DMA32: 2673*4kB (ME) 803*8kB (UME) 418*16kB (ME) 100*32kB (ME) 22*64kB (ME) 6*128kB (UME) 3*256kB (UM) 1*512kB (U) 0*1024kB 13*2048kB (UM) 0*4096kB = 57084kB [ 1495.091020][ T6821] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1495.108641][ T6821] Node 1 Normal: 154*4kB (ME) 83*8kB (UME) 52*16kB (UME) 21*32kB (UME) 4*64kB (M) 5*128kB (UME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (M) 11*4096kB (UM) = 53856kB [ 1495.132573][ T6821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1495.147303][ T6821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1495.157705][ T6821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1495.171722][ T6821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1495.181427][ T6821] 6496 total pagecache pages [ 1495.186117][ T6821] 0 pages in swap cache [ 1495.190264][ T6821] Swap cache stats: add 0, delete 0, find 0/0 [ 1495.196354][ T6821] Free swap = 0kB [ 1495.200076][ T6821] Total swap = 0kB [ 1495.204685][ T6821] 1965979 pages RAM [ 1495.208488][ T6821] 0 pages HighMem/MovableOnly [ 1495.213230][ T6821] 349903 pages reserved [ 1495.217374][ T6821] 0 pages cma reserved [ 1495.221430][ T6821] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=16352,uid=0 [ 1495.235990][ T6821] Out of memory: Killed process 16352 (syz-executor.1) total-vm:74980kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1495.280662][ T6821] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1495.293356][ T6821] CPU: 0 PID: 6821 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0 [ 1495.301596][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1495.311642][ T6821] Call Trace: [ 1495.314932][ T6821] dump_stack+0x18f/0x20d [ 1495.319268][ T6821] dump_header+0x10b/0x7e4 [ 1495.323686][ T6821] oom_kill_process.cold+0x10/0x15 [ 1495.328798][ T6821] out_of_memory+0x326/0x1340 [ 1495.333482][ T6821] ? oom_killer_disable+0x270/0x270 [ 1495.338687][ T6821] ? mutex_trylock+0x246/0x2c0 [ 1495.343451][ T6821] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1495.350129][ T6821] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1495.356738][ T6821] ? warn_alloc+0x120/0x120 [ 1495.361245][ T6821] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1495.366803][ T6821] ? lock_is_held_type+0xb0/0xe0 [ 1495.371753][ T6821] __alloc_pages_nodemask+0x68f/0x930 [ 1495.377122][ T6821] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1495.383878][ T6821] ? page_cache_readahead_unbounded+0x572/0x850 [ 1495.390120][ T6821] ? __lock_page_or_retry+0x650/0x650 [ 1495.395492][ T6821] alloc_pages_current+0x187/0x280 [ 1495.400606][ T6821] __page_cache_alloc+0x31e/0x450 [ 1495.405633][ T6821] pagecache_get_page+0x27d/0xe10 [ 1495.410678][ T6821] ? __do_page_cache_readahead+0xc2/0xf0 [ 1495.416329][ T6821] filemap_fault+0x1a99/0x2ad0 [ 1495.421079][ T6821] ext4_filemap_fault+0x87/0xb6 [ 1495.425921][ T6821] __do_fault+0x10d/0x4d0 [ 1495.430251][ T6821] handle_mm_fault+0x37a3/0x43f0 [ 1495.435211][ T6821] ? apply_to_existing_page_range+0x40/0x40 [ 1495.441116][ T6821] ? vmacache_update+0xce/0x140 [ 1495.445978][ T6821] do_user_addr_fault+0x5a2/0xd00 [ 1495.451009][ T6821] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1495.456558][ T6821] exc_page_fault+0xab/0x170 [ 1495.461145][ T6821] ? asm_exc_page_fault+0x8/0x30 [ 1495.466065][ T6821] asm_exc_page_fault+0x1e/0x30 [ 1495.470907][ T6821] RIP: 0033:0x460c23 [ 1495.474781][ T6821] Code: Bad RIP value. [ 1495.478843][ T6821] RSP: 002b:000000c00003bea0 EFLAGS: 00010202 [ 1495.484912][ T6821] RAX: ffffffffffffff92 RBX: 000000003b987298 RCX: 0000000000460c23 [ 1495.492881][ T6821] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001703ac0 [ 1495.500887][ T6821] RBP: 000000c00003bee8 R08: 0000000000000000 R09: 0000000000000000 [ 1495.508845][ T6821] R10: 000000c00003bed8 R11: 0000000000000202 R12: 00000168adb4647c [ 1495.516826][ T6821] R13: 0000000000000002 R14: 00000168adb4647c R15: 0000000000000000 [ 1495.533513][ T6821] Mem-Info: [ 1495.536662][ T6821] active_anon:165875 inactive_anon:6205 isolated_anon:0 [ 1495.536662][ T6821] active_file:20 inactive_file:11 isolated_file:0 [ 1495.536662][ T6821] unevictable:1 dirty:0 writeback:0 [ 1495.536662][ T6821] slab_reclaimable:15396 slab_unreclaimable:116634 [ 1495.536662][ T6821] mapped:54096 shmem:6465 pagetables:7334 bounce:0 [ 1495.536662][ T6821] free:30184 free_pcp:204 free_cma:0 [ 1495.576291][ T6821] Node 0 active_anon:663460kB inactive_anon:24820kB active_file:68kB inactive_file:48kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216384kB dirty:0kB writeback:0kB shmem:25860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 530432kB writeback_tmp:0kB all_unreclaimable? no [ 1495.610275][ T6821] Node 1 active_anon:40kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1495.637700][ T6821] Node 0 DMA free:10276kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1495.676655][ T6821] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1495.682451][ T6821] Node 0 DMA32 free:55324kB min:58444kB low:67420kB high:76396kB reserved_highatomic:0KB active_anon:663460kB inactive_anon:24820kB active_file:68kB inactive_file:48kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:16884kB pagetables:29244kB bounce:0kB free_pcp:568kB local_pcp:16kB free_cma:0kB [ 1495.716360][ T6821] lowmem_reserve[]: 0 0 0 0 0 [ 1495.721089][ T6821] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1495.758351][ T6821] lowmem_reserve[]: 0 0 0 0 0 [ 1495.763095][ T6821] Node 1 Normal free:53888kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1495.802947][ T6821] lowmem_reserve[]: 0 0 0 0 0 [ 1495.807646][ T6821] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10276kB [ 1495.821833][ T6821] Node 0 DMA32: 2673*4kB (ME) 803*8kB (UME) 419*16kB (UME) 100*32kB (ME) 22*64kB (ME) 5*128kB (ME) 2*256kB (M) 1*512kB (U) 0*1024kB 12*2048kB (UM) 0*4096kB = 54668kB [ 1495.846506][ T6821] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1495.859009][ T6821] Node 1 Normal: 154*4kB (ME) 83*8kB (UME) 52*16kB (UME) 22*32kB (UME) 4*64kB (M) 5*128kB (UME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (M) 11*4096kB (UM) = 53888kB [ 1495.884294][ T6821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1495.896268][ T6821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1495.905592][ T6821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1495.922144][ T6821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1495.931426][ T6821] 6496 total pagecache pages [ 1495.939986][ T6821] 0 pages in swap cache [ 1495.944220][ T6821] Swap cache stats: add 0, delete 0, find 0/0 [ 1495.950286][ T6821] Free swap = 0kB [ 1495.961497][ T6821] Total swap = 0kB [ 1495.965251][ T6821] 1965979 pages RAM [ 1495.969049][ T6821] 0 pages HighMem/MovableOnly [ 1495.981867][ T6821] 349903 pages reserved [ 1495.986071][ T6821] 0 pages cma reserved [ 1495.990133][ T6821] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=12796,uid=0 [ 1496.006339][ T6821] Out of memory: Killed process 12796 (syz-executor.1) total-vm:74980kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1496.032460][ T1151] oom_reaper: reaped process 12796 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1496.073188][ T1151] oom_reaper: reaped process 20682 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 1496.114075][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1496.131278][ T3859] CPU: 1 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1496.139961][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1496.150011][ T3859] Call Trace: [ 1496.153305][ T3859] dump_stack+0x18f/0x20d [ 1496.157635][ T3859] dump_header+0x10b/0x7e4 [ 1496.162054][ T3859] oom_kill_process.cold+0x10/0x15 [ 1496.167167][ T3859] out_of_memory+0x326/0x1340 [ 1496.171848][ T3859] ? oom_killer_disable+0x270/0x270 [ 1496.177046][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1496.181806][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1496.188483][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1496.195089][ T3859] ? warn_alloc+0x120/0x120 [ 1496.199583][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1496.205109][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1496.210025][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1496.215378][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1496.222123][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1496.228341][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1496.233694][ T3859] alloc_pages_current+0x187/0x280 [ 1496.238795][ T3859] __page_cache_alloc+0x31e/0x450 [ 1496.243794][ T3859] pagecache_get_page+0x27d/0xe10 [ 1496.248793][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1496.254401][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1496.259143][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1496.263984][ T3859] __do_fault+0x10d/0x4d0 [ 1496.268289][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1496.273205][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1496.279091][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1496.284109][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1496.289632][ T3859] exc_page_fault+0xab/0x170 [ 1496.294202][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1496.299111][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1496.303946][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1496.308329][ T3859] Code: Bad RIP value. [ 1496.312369][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1496.318418][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1496.326378][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1496.334322][ T3859] RBP: 00007ffd902c6780 R08: 431bde82d7b634db R09: 00007ffd90355080 [ 1496.342267][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1496.350254][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc1c4fe090 [ 1496.362167][ T3859] Mem-Info: [ 1496.365601][ T3859] active_anon:164800 inactive_anon:6205 isolated_anon:0 [ 1496.365601][ T3859] active_file:20 inactive_file:11 isolated_file:0 [ 1496.365601][ T3859] unevictable:1 dirty:0 writeback:0 [ 1496.365601][ T3859] slab_reclaimable:15396 slab_unreclaimable:117414 [ 1496.365601][ T3859] mapped:54096 shmem:6465 pagetables:7297 bounce:0 [ 1496.365601][ T3859] free:16648 free_pcp:407 free_cma:0 [ 1496.402338][ T3859] Node 0 active_anon:659160kB inactive_anon:24820kB active_file:68kB inactive_file:48kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216384kB dirty:0kB writeback:0kB shmem:25860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 530432kB writeback_tmp:0kB all_unreclaimable? no [ 1496.405545][T20682] syz-executor.5: vmalloc: allocation failure, allocated 4272300032 of 4294975488 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1496.429873][ T3859] Node 1 active_anon:40kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1496.489138][T20682] CPU: 1 PID: 20682 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1496.497808][T20682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1496.507838][T20682] Call Trace: [ 1496.511110][T20682] dump_stack+0x18f/0x20d [ 1496.515437][T20682] warn_alloc.cold+0x87/0x17a [ 1496.520091][T20682] ? zone_watermark_ok_safe+0x260/0x260 [ 1496.525613][T20682] ? policy_node+0xe1/0x140 [ 1496.530126][T20682] ? kcov_common_handle+0x20/0x20 [ 1496.535134][T20682] __vmalloc_area_node+0x49e/0x7a0 [ 1496.540225][T20682] ? ip_set_alloc+0x48/0x60 [ 1496.544703][T20682] ? ip_set_alloc+0x48/0x60 [ 1496.549180][T20682] vzalloc+0x116/0x1a0 [ 1496.553226][T20682] ip_set_alloc+0x48/0x60 [ 1496.557530][T20682] hash_netnet_create+0x401/0xd70 [ 1496.562532][T20682] ? hash_netnet6_head+0xcd0/0xcd0 [ 1496.567619][T20682] ip_set_create+0x6a2/0x13c0 [ 1496.572274][T20682] ? ip_set_sockfn_get+0xe00/0xe00 [ 1496.577377][T20682] ? lock_is_held_type+0xb0/0xe0 [ 1496.582289][T20682] ? ip_set_sockfn_get+0xe00/0xe00 [ 1496.587392][T20682] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1496.592312][T20682] ? nfnetlink_rcv+0x420/0x420 [ 1496.597052][T20682] ? is_bpf_text_address+0xcb/0x160 [ 1496.602247][T20682] ? __lock_acquire+0xc1e/0x56e0 [ 1496.607178][T20682] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1496.613132][T20682] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1496.619128][T20682] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1496.625005][T20682] netlink_rcv_skb+0x15a/0x430 [ 1496.629746][T20682] ? nfnetlink_rcv+0x420/0x420 [ 1496.634486][T20682] ? netlink_ack+0xa10/0xa10 [ 1496.639058][T20682] ? ns_capable+0xde/0x100 [ 1496.643460][T20682] nfnetlink_rcv+0x1ac/0x420 [ 1496.648032][T20682] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1496.653471][T20682] netlink_unicast+0x533/0x7d0 [ 1496.658211][T20682] ? netlink_attachskb+0x810/0x810 [ 1496.663299][T20682] ? _copy_from_iter_full+0x247/0x890 [ 1496.668657][T20682] ? __phys_addr+0x9a/0x110 [ 1496.673135][T20682] ? __phys_addr_symbol+0x2c/0x70 [ 1496.678134][T20682] ? __check_object_size+0x171/0x3e4 [ 1496.683408][T20682] netlink_sendmsg+0x856/0xd90 [ 1496.688149][T20682] ? netlink_unicast+0x7d0/0x7d0 [ 1496.693065][T20682] ? netlink_unicast+0x7d0/0x7d0 [ 1496.697980][T20682] sock_sendmsg+0xcf/0x120 [ 1496.702373][T20682] ____sys_sendmsg+0x6e8/0x810 [ 1496.707115][T20682] ? kernel_sendmsg+0x50/0x50 [ 1496.711763][T20682] ? do_recvmmsg+0x6d0/0x6d0 [ 1496.716345][T20682] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1496.722300][T20682] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1496.728251][T20682] ? __lock_acquire+0xc1e/0x56e0 [ 1496.733167][T20682] ___sys_sendmsg+0xf3/0x170 [ 1496.737744][T20682] ? sendmsg_copy_msghdr+0x160/0x160 [ 1496.743004][T20682] ? __fget_files+0x272/0x400 [ 1496.747658][T20682] ? lock_downgrade+0x820/0x820 [ 1496.752483][T20682] ? find_held_lock+0x2d/0x110 [ 1496.757222][T20682] ? __might_fault+0x11f/0x1d0 [ 1496.761962][T20682] ? __fget_files+0x294/0x400 [ 1496.766626][T20682] ? __fget_light+0xea/0x280 [ 1496.771190][T20682] __sys_sendmsg+0xe5/0x1b0 [ 1496.775668][T20682] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1496.780664][T20682] ? __x64_sys_futex+0x382/0x4e0 [ 1496.785584][T20682] ? do_syscall_64+0x1c/0xe0 [ 1496.790147][T20682] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1496.796206][T20682] do_syscall_64+0x60/0xe0 [ 1496.800613][T20682] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1496.806482][T20682] RIP: 0033:0x45cb29 [ 1496.810362][T20682] Code: Bad RIP value. [ 1496.814413][T20682] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1496.822809][T20682] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1496.830763][T20682] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1496.838708][T20682] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1496.846653][T20682] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1496.854609][T20682] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1496.867053][ T3859] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1496.896092][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1496.901847][ T3859] Node 0 DMA32 free:28336kB min:35916kB low:44892kB high:53868kB reserved_highatomic:0KB active_anon:659128kB inactive_anon:24820kB active_file:56kB inactive_file:60kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:16848kB pagetables:29136kB bounce:0kB free_pcp:1132kB local_pcp:824kB free_cma:0kB [ 1496.911926][T20682] Mem-Info: [ 1496.933993][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1496.937081][T20682] active_anon:164791 inactive_anon:6205 isolated_anon:0 [ 1496.937081][T20682] active_file:15 inactive_file:15 isolated_file:1 [ 1496.937081][T20682] unevictable:1 dirty:0 writeback:0 [ 1496.937081][T20682] slab_reclaimable:15396 slab_unreclaimable:117742 [ 1496.937081][T20682] mapped:54096 shmem:6465 pagetables:7307 bounce:0 [ 1496.937081][T20682] free:16354 free_pcp:408 free_cma:0 [ 1496.941718][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1496.990461][T20682] Node 0 active_anon:659128kB inactive_anon:24820kB active_file:56kB inactive_file:60kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216384kB dirty:0kB writeback:0kB shmem:25860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 526336kB writeback_tmp:0kB all_unreclaimable? yes [ 1497.010317][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1497.038777][ T3859] Node 1 Normal free:26924kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:500kB local_pcp:252kB free_cma:0kB [ 1497.041771][T20682] Node 1 active_anon:36kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1497.075668][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1497.095935][T20682] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1497.102215][ T3859] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10156kB [ 1497.128989][T20682] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1497.149298][T20682] Node 0 DMA32 free:26944kB min:40012kB low:48988kB high:57964kB reserved_highatomic:0KB active_anon:659128kB inactive_anon:24820kB active_file:56kB inactive_file:60kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:16848kB pagetables:29136kB bounce:0kB free_pcp:1132kB local_pcp:308kB free_cma:0kB [ 1497.153054][ T3859] Node 0 DMA32: 2672*4kB (UME) 751*8kB (ME) 391*16kB (UME) 94*32kB (UME) 11*64kB (UME) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26920kB [ 1497.182747][T20682] lowmem_reserve[]: 0 0 0 0 0 [ 1497.201640][T20682] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1497.202779][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1497.241352][ T3859] Node 1 Normal: 155*4kB (UME) 82*8kB (ME) 51*16kB (ME) 20*32kB (ME) 4*64kB (M) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26924kB [ 1497.243810][T20682] lowmem_reserve[]: 0 0 0 0 0 [ 1497.266538][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1497.269073][T20682] Node 1 Normal free:26924kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:500kB local_pcp:248kB free_cma:0kB [ 1497.276167][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1497.313888][T20682] lowmem_reserve[]: 0 0 0 0 0 [ 1497.316328][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1497.320945][T20682] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10156kB [ 1497.330518][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1497.330531][ T3859] 6496 total pagecache pages [ 1497.352238][T20682] Node 0 DMA32: 2672*4kB (UME) 749*8kB (UME) 378*16kB (ME) 89*32kB (UME) 9*64kB (UME) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26280kB [ 1497.354598][ T3859] 0 pages in swap cache [ 1497.359118][T20682] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1497.378266][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1497.382112][T20682] Node 1 Normal: 155*4kB (UME) 82*8kB (ME) 51*16kB (ME) 20*32kB (ME) 4*64kB (M) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26924kB [ 1497.390725][ T3859] Free swap = 0kB [ 1497.417426][T20682] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1497.427046][ T3859] Total swap = 0kB [ 1497.430791][ T3859] 1965979 pages RAM [ 1497.434718][T20682] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1497.444099][ T3859] 0 pages HighMem/MovableOnly [ 1497.444122][T20682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1497.448792][ T3859] 349903 pages reserved [ 1497.462591][ T3859] 0 pages cma reserved [ 1497.464219][T20682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1497.466657][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=9012,uid=0 [ 1497.480281][T20682] 6496 total pagecache pages [ 1497.494249][ T3859] Out of memory: Killed process 9012 (syz-executor.5) total-vm:74980kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1497.537084][T20682] 0 pages in swap cache [ 1497.541252][T20682] Swap cache stats: add 0, delete 0, find 0/0 [ 1497.547357][T20682] Free swap = 0kB [ 1497.551051][T20682] Total swap = 0kB [ 1497.554815][T20682] 1965979 pages RAM [ 1497.558609][T20682] 0 pages HighMem/MovableOnly [ 1497.563311][T20682] 349903 pages reserved [ 1497.567437][T20682] 0 pages cma reserved [ 1497.757219][ T6498] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1497.775806][ T6498] CPU: 0 PID: 6498 Comm: in:imklog Not tainted 5.8.0-rc3-syzkaller #0 [ 1497.783968][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1497.794020][ T6498] Call Trace: [ 1497.797317][ T6498] dump_stack+0x18f/0x20d [ 1497.801649][ T6498] dump_header+0x10b/0x7e4 [ 1497.806063][ T6498] oom_kill_process.cold+0x10/0x15 [ 1497.811172][ T6498] out_of_memory+0x326/0x1340 [ 1497.815862][ T6498] ? oom_killer_disable+0x270/0x270 [ 1497.821092][ T6498] ? mutex_trylock+0x246/0x2c0 [ 1497.825854][ T6498] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1497.832530][ T6498] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1497.839152][ T6498] ? warn_alloc+0x120/0x120 [ 1497.843667][ T6498] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1497.849219][ T6498] ? lock_is_held_type+0xb0/0xe0 [ 1497.854158][ T6498] __alloc_pages_nodemask+0x68f/0x930 [ 1497.859530][ T6498] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1497.866290][ T6498] ? page_cache_readahead_unbounded+0x572/0x850 [ 1497.872532][ T6498] ? __lock_page_or_retry+0x650/0x650 [ 1497.877903][ T6498] alloc_pages_current+0x187/0x280 [ 1497.883010][ T6498] __page_cache_alloc+0x31e/0x450 [ 1497.888031][ T6498] pagecache_get_page+0x27d/0xe10 [ 1497.893063][ T6498] ? __do_page_cache_readahead+0xc2/0xf0 [ 1497.898690][ T6498] filemap_fault+0x1a99/0x2ad0 [ 1497.903465][ T6498] ext4_filemap_fault+0x87/0xb6 [ 1497.908311][ T6498] __do_fault+0x10d/0x4d0 [ 1497.912643][ T6498] handle_mm_fault+0x37a3/0x43f0 [ 1497.917581][ T6498] ? apply_to_existing_page_range+0x40/0x40 [ 1497.923483][ T6498] ? vmacache_update+0xce/0x140 [ 1497.928336][ T6498] do_user_addr_fault+0x5a2/0xd00 [ 1497.933373][ T6498] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1497.938923][ T6498] exc_page_fault+0xab/0x170 [ 1497.943506][ T6498] ? asm_exc_page_fault+0x8/0x30 [ 1497.948434][ T6498] asm_exc_page_fault+0x1e/0x30 [ 1497.953278][ T6498] RIP: 0033:0x7febe7d1122d [ 1497.957677][ T6498] Code: Bad RIP value. [ 1497.961731][ T6498] RSP: 002b:00007febe56ad580 EFLAGS: 00010293 [ 1497.967787][ T6498] RAX: 0000000000000ae9 RBX: 0000000000000000 RCX: 00007febe7d1122d [ 1497.975751][ T6498] RDX: 0000000000001fa0 RSI: 00007febe56adda0 RDI: 0000000000000004 [ 1497.983717][ T6498] RBP: 00005614bf3629d0 R08: 0000000000000000 R09: 0000000004000001 [ 1497.991679][ T6498] R10: 0000000000000001 R11: 0000000000000293 R12: 00007febe56adda0 [ 1497.999654][ T6498] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007febe56addd9 [ 1498.032101][ T6498] Mem-Info: [ 1498.035253][ T6498] active_anon:164249 inactive_anon:6205 isolated_anon:0 [ 1498.035253][ T6498] active_file:40 inactive_file:0 isolated_file:1 [ 1498.035253][ T6498] unevictable:1 dirty:0 writeback:0 [ 1498.035253][ T6498] slab_reclaimable:15395 slab_unreclaimable:119213 [ 1498.035253][ T6498] mapped:54096 shmem:6465 pagetables:7270 bounce:0 [ 1498.035253][ T6498] free:15384 free_pcp:490 free_cma:0 [ 1498.077083][ T6498] Node 0 active_anon:656960kB inactive_anon:24820kB active_file:156kB inactive_file:0kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216384kB dirty:0kB writeback:0kB shmem:25860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 526336kB writeback_tmp:0kB all_unreclaimable? yes [ 1498.110898][ T6498] Node 1 active_anon:36kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1498.145152][ T6498] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1498.184692][ T6498] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1498.190457][ T6498] Node 0 DMA32 free:24248kB min:50252kB low:59228kB high:68204kB reserved_highatomic:0KB active_anon:656960kB inactive_anon:24820kB active_file:156kB inactive_file:0kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:16792kB pagetables:28988kB bounce:0kB free_pcp:1416kB local_pcp:384kB free_cma:0kB [ 1498.233072][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1498.237770][ T6498] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1498.273782][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1498.278507][ T6498] Node 1 Normal free:26924kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:500kB local_pcp:248kB free_cma:0kB [ 1498.326475][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1498.331208][ T6498] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10156kB [ 1498.352234][ T6498] Node 0 DMA32: 2672*4kB (UME) 646*8kB (UME) 343*16kB (UME) 82*32kB (UM) 4*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24224kB [ 1498.372270][ T6498] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1498.389490][ T6498] Node 1 Normal: 155*4kB (UME) 82*8kB (ME) 51*16kB (ME) 20*32kB (ME) 4*64kB (M) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26924kB [ 1498.413450][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1498.428129][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1498.438949][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1498.455144][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1498.486362][ T6498] 6496 total pagecache pages [ 1498.490969][ T6498] 0 pages in swap cache [ 1498.500486][ T6498] Swap cache stats: add 0, delete 0, find 0/0 [ 1498.506595][ T6498] Free swap = 0kB [ 1498.510304][ T6498] Total swap = 0kB [ 1498.520228][ T6498] 1965979 pages RAM [ 1498.524081][ T6498] 0 pages HighMem/MovableOnly [ 1498.528747][ T6498] 349903 pages reserved [ 1498.542924][ T6498] 0 pages cma reserved [ 1498.547031][ T6498] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=8500,uid=0 [ 1498.566790][ T6498] Out of memory: Killed process 8500 (syz-executor.1) total-vm:75112kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1498.590366][ T1151] oom_reaper: reaped process 8500 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1498.635378][ T7333] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1498.692834][ T7333] CPU: 0 PID: 7333 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1498.701472][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1498.711554][ T7333] Call Trace: [ 1498.714865][ T7333] dump_stack+0x18f/0x20d [ 1498.719211][ T7333] dump_header+0x10b/0x7e4 [ 1498.723657][ T7333] oom_kill_process.cold+0x10/0x15 [ 1498.728805][ T7333] out_of_memory+0x326/0x1340 [ 1498.733510][ T7333] ? oom_killer_disable+0x270/0x270 [ 1498.738712][ T7333] ? mutex_trylock+0x246/0x2c0 [ 1498.743474][ T7333] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1498.750170][ T7333] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1498.756772][ T7333] ? warn_alloc+0x120/0x120 [ 1498.761277][ T7333] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1498.766832][ T7333] ? lock_is_held_type+0xb0/0xe0 [ 1498.771780][ T7333] __alloc_pages_nodemask+0x68f/0x930 [ 1498.777152][ T7333] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1498.783907][ T7333] ? page_cache_readahead_unbounded+0x572/0x850 [ 1498.790139][ T7333] ? __lock_page_or_retry+0x650/0x650 [ 1498.795506][ T7333] alloc_pages_current+0x187/0x280 [ 1498.800613][ T7333] __page_cache_alloc+0x31e/0x450 [ 1498.805636][ T7333] pagecache_get_page+0x27d/0xe10 [ 1498.810655][ T7333] ? __do_page_cache_readahead+0xc2/0xf0 [ 1498.816282][ T7333] filemap_fault+0x1a99/0x2ad0 [ 1498.821050][ T7333] ext4_filemap_fault+0x87/0xb6 [ 1498.825893][ T7333] __do_fault+0x10d/0x4d0 [ 1498.830218][ T7333] handle_mm_fault+0x37a3/0x43f0 [ 1498.835159][ T7333] ? apply_to_existing_page_range+0x40/0x40 [ 1498.841054][ T7333] ? vmacache_update+0xce/0x140 [ 1498.845905][ T7333] do_user_addr_fault+0x5a2/0xd00 [ 1498.850929][ T7333] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1498.856474][ T7333] exc_page_fault+0xab/0x170 [ 1498.861061][ T7333] ? asm_exc_page_fault+0x8/0x30 [ 1498.865995][ T7333] asm_exc_page_fault+0x1e/0x30 [ 1498.870834][ T7333] RIP: 0033:0x4169ca [ 1498.874710][ T7333] Code: Bad RIP value. [ 1498.878762][ T7333] RSP: 002b:0000000000c9fda8 EFLAGS: 00010246 [ 1498.884820][ T7333] RAX: 0000000000000064 RBX: 000000000181d940 RCX: 00000000004169ca [ 1498.892786][ T7333] RDX: 0000000040000000 RSI: 0000000000c9fde0 RDI: ffffffffffffffff [ 1498.900747][ T7333] RBP: 0000000000000faf R08: 0000000000000001 R09: 0000000000000001 [ 1498.908710][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1498.916676][ T7333] R13: 0000000000c9fde0 R14: 000000000181d99b R15: 0000000000c9fdf0 [ 1498.966859][ T7333] Mem-Info: [ 1498.970024][ T7333] active_anon:163705 inactive_anon:6205 isolated_anon:0 [ 1498.970024][ T7333] active_file:14 inactive_file:17 isolated_file:0 [ 1498.970024][ T7333] unevictable:1 dirty:0 writeback:0 [ 1498.970024][ T7333] slab_reclaimable:15395 slab_unreclaimable:118759 [ 1498.970024][ T7333] mapped:54096 shmem:6465 pagetables:7244 bounce:0 [ 1498.970024][ T7333] free:26485 free_pcp:468 free_cma:0 [ 1499.017305][ T7333] Node 0 active_anon:654784kB inactive_anon:24820kB active_file:56kB inactive_file:360kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216484kB dirty:0kB writeback:0kB shmem:25860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 524288kB writeback_tmp:0kB all_unreclaimable? yes [ 1499.054023][ T7333] Node 1 active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1499.086806][ T7333] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.124838][ T7333] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1499.138980][ T7333] Node 0 DMA32 free:234832kB min:50252kB low:59228kB high:68204kB reserved_highatomic:0KB active_anon:654784kB inactive_anon:24820kB active_file:56kB inactive_file:860kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:16756kB pagetables:28884kB bounce:0kB free_pcp:1752kB local_pcp:492kB free_cma:0kB [ 1499.183079][ T7333] lowmem_reserve[]: 0 0 0 0 0 [ 1499.187797][ T7333] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.222977][ T7333] lowmem_reserve[]: 0 0 0 0 0 [ 1499.227764][ T7333] Node 1 Normal free:26920kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1499.268302][ T7333] lowmem_reserve[]: 0 0 0 0 0 [ 1499.273130][ T7333] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10156kB [ 1499.296707][ T7333] Node 0 DMA32: 11683*4kB (UME) 4716*8kB (UME) 6605*16kB (UME) 3538*32kB (UME) 1230*64kB (UM) 22*128kB (UM) 3*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 387196kB [ 1499.322642][ T7333] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1499.341924][ T7333] Node 1 Normal: 156*4kB (UME) 84*8kB (UME) 55*16kB (UME) 22*32kB (UME) 6*64kB (UM) 4*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 27072kB [ 1499.366355][ T7333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1499.377237][ T7333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1499.394339][ T7333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1499.411108][ T7333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1499.440567][ T7333] 7546 total pagecache pages [ 1499.451919][ T7333] 0 pages in swap cache [ 1499.456186][ T7333] Swap cache stats: add 0, delete 0, find 0/0 [ 1499.468458][ T7333] Free swap = 0kB [ 1499.472253][ T7333] Total swap = 0kB [ 1499.475988][ T7333] 1965979 pages RAM [ 1499.484382][ T7333] 0 pages HighMem/MovableOnly [ 1499.489073][ T7333] 349903 pages reserved [ 1499.511894][ T7333] 0 pages cma reserved [ 1499.517429][ T7333] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=18752,uid=0 [ 1499.557205][ T7333] Out of memory: Killed process 18752 (syz-executor.2) total-vm:74980kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 01:51:30 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 01:51:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) 01:51:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1f000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:51:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x110, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:51:31 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x449f0200, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:51:31 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x124, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:51:31 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x459f0200, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:51:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x111, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:51:31 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x469f0200, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:51:31 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 01:51:31 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x479f0200, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:51:31 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x48000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:51:31 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x125, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:51:31 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1507.526771][ T1151] oom_reaper: reaped process 20721 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 1507.604370][ T6498] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1507.628083][ T6498] CPU: 0 PID: 6498 Comm: in:imklog Not tainted 5.8.0-rc3-syzkaller #0 [ 1507.636278][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1507.646356][ T6498] Call Trace: [ 1507.649656][ T6498] dump_stack+0x18f/0x20d [ 1507.653993][ T6498] dump_header+0x10b/0x7e4 [ 1507.658428][ T6498] oom_kill_process.cold+0x10/0x15 [ 1507.663544][ T6498] out_of_memory+0x326/0x1340 [ 1507.668228][ T6498] ? oom_killer_disable+0x270/0x270 [ 1507.673420][ T6498] ? mutex_trylock+0x246/0x2c0 [ 1507.678161][ T6498] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1507.682199][T20721] syz-executor.5: vmalloc: allocation failure, allocated 4294443008 of 4294975488 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1507.684823][ T6498] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1507.707891][ T6498] ? warn_alloc+0x120/0x120 [ 1507.712401][ T6498] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1507.717957][ T6498] ? lock_is_held_type+0xb0/0xe0 [ 1507.722899][ T6498] __alloc_pages_nodemask+0x68f/0x930 [ 1507.728271][ T6498] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1507.735052][ T6498] ? page_cache_readahead_unbounded+0x572/0x850 [ 1507.741292][ T6498] ? __lock_page_or_retry+0x650/0x650 [ 1507.746675][ T6498] alloc_pages_current+0x187/0x280 [ 1507.751797][ T6498] __page_cache_alloc+0x31e/0x450 [ 1507.756821][ T6498] pagecache_get_page+0x27d/0xe10 [ 1507.761841][ T6498] ? __do_page_cache_readahead+0xc2/0xf0 [ 1507.767467][ T6498] filemap_fault+0x1a99/0x2ad0 [ 1507.772232][ T6498] ext4_filemap_fault+0x87/0xb6 [ 1507.777079][ T6498] __do_fault+0x10d/0x4d0 [ 1507.781402][ T6498] handle_mm_fault+0x37a3/0x43f0 [ 1507.786340][ T6498] ? apply_to_existing_page_range+0x40/0x40 [ 1507.792253][ T6498] ? vmacache_update+0xce/0x140 [ 1507.797101][ T6498] do_user_addr_fault+0x5a2/0xd00 [ 1507.802123][ T6498] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1507.807669][ T6498] exc_page_fault+0xab/0x170 [ 1507.812253][ T6498] ? asm_exc_page_fault+0x8/0x30 [ 1507.817191][ T6498] asm_exc_page_fault+0x1e/0x30 [ 1507.822041][ T6498] RIP: 0033:0x7febe7d1122d [ 1507.826440][ T6498] Code: Bad RIP value. [ 1507.830491][ T6498] RSP: 002b:00007febe56ad580 EFLAGS: 00010293 [ 1507.836545][ T6498] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007febe7d1122d [ 1507.844505][ T6498] RDX: 0000000000001fa0 RSI: 00007febe56adda0 RDI: 0000000000000004 [ 1507.852469][ T6498] RBP: 00005614bf3629d0 R08: 0000000000000000 R09: 0000000000000000 [ 1507.860434][ T6498] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007febe56adda0 [ 1507.868397][ T6498] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007febe56aeb71 [ 1507.876387][T20721] CPU: 1 PID: 20721 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1507.884164][ T6498] Mem-Info: [ 1507.885067][T20721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1507.888181][ T6498] active_anon:163161 inactive_anon:6205 isolated_anon:0 [ 1507.888181][ T6498] active_file:27 inactive_file:19 isolated_file:0 [ 1507.888181][ T6498] unevictable:1 dirty:5 writeback:0 [ 1507.888181][ T6498] slab_reclaimable:15392 slab_unreclaimable:114683 [ 1507.888181][ T6498] mapped:54168 shmem:6465 pagetables:7230 bounce:0 [ 1507.888181][ T6498] free:16074 free_pcp:124 free_cma:0 [ 1507.898190][T20721] Call Trace: [ 1507.898216][T20721] dump_stack+0x18f/0x20d [ 1507.898238][T20721] warn_alloc.cold+0x87/0x17a [ 1507.898260][T20721] ? mark_held_locks+0x9f/0xe0 [ 1507.934764][ T6498] Node 0 active_anon:652604kB inactive_anon:24820kB active_file:100kB inactive_file:72kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216668kB dirty:12kB writeback:0kB shmem:25860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 522240kB writeback_tmp:0kB all_unreclaimable? no [ 1507.937981][T20721] ? zone_watermark_ok_safe+0x260/0x260 [ 1507.942332][ T6498] Node 1 active_anon:40kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1507.946939][T20721] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1507.951667][ T6498] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1507.979198][T20721] __vmalloc_area_node+0x49e/0x7a0 [ 1507.979221][T20721] ? ip_set_alloc+0x48/0x60 [ 1507.979240][T20721] ? ip_set_alloc+0x48/0x60 [ 1507.984798][ T6498] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1508.010104][T20721] vzalloc+0x116/0x1a0 [ 1508.010124][T20721] ip_set_alloc+0x48/0x60 [ 1508.010139][T20721] hash_netnet_create+0x401/0xd70 [ 1508.010158][T20721] ? hash_netnet6_head+0xcd0/0xcd0 [ 1508.016322][ T6498] Node 0 DMA32 free:27328kB min:56396kB low:65372kB high:74348kB reserved_highatomic:0KB active_anon:652604kB inactive_anon:24820kB active_file:100kB inactive_file:72kB unevictable:4kB writepending:12kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:16720kB pagetables:28828kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1508.045183][T20721] ip_set_create+0x6a2/0x13c0 [ 1508.045205][T20721] ? ip_set_sockfn_get+0xe00/0xe00 [ 1508.045244][T20721] ? lock_is_held_type+0xb0/0xe0 [ 1508.050323][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1508.054808][T20721] ? ip_set_sockfn_get+0xe00/0xe00 [ 1508.054824][T20721] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1508.054849][T20721] ? nfnetlink_rcv+0x420/0x420 [ 1508.054869][T20721] ? is_bpf_text_address+0xcb/0x160 [ 1508.059343][ T6498] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.065052][T20721] ? __lock_acquire+0xc1e/0x56e0 [ 1508.065074][T20721] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1508.065094][T20721] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1508.069134][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1508.073451][T20721] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1508.073469][T20721] netlink_rcv_skb+0x15a/0x430 [ 1508.073486][T20721] ? nfnetlink_rcv+0x420/0x420 [ 1508.073502][T20721] ? netlink_ack+0xa10/0xa10 [ 1508.078500][ T6498] Node 1 Normal free:26812kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1508.083629][T20721] ? ns_capable+0xde/0x100 [ 1508.083647][T20721] nfnetlink_rcv+0x1ac/0x420 [ 1508.083668][T20721] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1508.115620][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1508.120262][T20721] netlink_unicast+0x533/0x7d0 [ 1508.125380][ T6498] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10156kB [ 1508.130263][T20721] ? netlink_attachskb+0x810/0x810 [ 1508.134948][ T6498] Node 0 DMA32: 2330*4kB (ME) 902*8kB (UME) 399*16kB (UME) 114*32kB (UME) 12*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27336kB [ 1508.140006][T20721] ? _copy_from_iter_full+0x247/0x890 [ 1508.144937][ T6498] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1508.149654][T20721] ? __phys_addr+0x9a/0x110 [ 1508.154842][ T6498] Node 1 Normal: 150*4kB (ME) 85*8kB (UME) 52*16kB (UME) 21*32kB (UME) 4*64kB (M) 4*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26848kB [ 1508.182838][T20721] ? __phys_addr_symbol+0x2c/0x70 [ 1508.182853][T20721] ? __check_object_size+0x171/0x3e4 [ 1508.182877][T20721] netlink_sendmsg+0x856/0xd90 [ 1508.182896][T20721] ? netlink_unicast+0x7d0/0x7d0 [ 1508.187821][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1508.193786][T20721] ? netlink_unicast+0x7d0/0x7d0 [ 1508.193801][T20721] sock_sendmsg+0xcf/0x120 [ 1508.193819][T20721] ____sys_sendmsg+0x6e8/0x810 [ 1508.193838][T20721] ? kernel_sendmsg+0x50/0x50 [ 1508.199798][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1508.204446][T20721] ? do_recvmmsg+0x6d0/0x6d0 [ 1508.204466][T20721] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1508.204489][T20721] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1508.210359][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1508.215097][T20721] ? __lock_acquire+0xc1e/0x56e0 [ 1508.215116][T20721] ___sys_sendmsg+0xf3/0x170 [ 1508.215135][T20721] ? sendmsg_copy_msghdr+0x160/0x160 [ 1508.219875][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1508.224439][T20721] ? __fget_files+0x272/0x400 [ 1508.224457][T20721] ? lock_downgrade+0x820/0x820 [ 1508.224477][T20721] ? find_held_lock+0x2d/0x110 [ 1508.254959][ T6498] 6504 total pagecache pages [ 1508.259330][T20721] ? __might_fault+0x11f/0x1d0 [ 1508.263928][ T6498] 0 pages in swap cache [ 1508.269347][T20721] ? __fget_files+0x294/0x400 [ 1508.274036][ T6498] Swap cache stats: add 0, delete 0, find 0/0 [ 1508.278735][T20721] ? __fget_light+0xea/0x280 [ 1508.293405][ T6498] Free swap = 0kB [ 1508.298465][T20721] __sys_sendmsg+0xe5/0x1b0 [ 1508.313397][ T6498] Total swap = 0kB [ 1508.318714][T20721] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1508.330091][ T6498] 1965979 pages RAM [ 1508.334534][T20721] ? __x64_sys_futex+0x382/0x4e0 [ 1508.334566][T20721] ? do_syscall_64+0x1c/0xe0 [ 1508.351405][ T6498] 0 pages HighMem/MovableOnly [ 1508.356385][T20721] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1508.356406][T20721] do_syscall_64+0x60/0xe0 [ 1508.356435][T20721] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1508.361680][ T6498] 349903 pages reserved [ 1508.366420][T20721] RIP: 0033:0x45cb29 [ 1508.366425][T20721] Code: Bad RIP value. [ 1508.366433][T20721] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1508.366447][T20721] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1508.366461][T20721] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1508.371374][ T6498] 0 pages cma reserved [ 1508.380903][T20721] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1508.380911][T20721] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1508.380919][T20721] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1508.489580][T20721] Mem-Info: [ 1508.502537][ T6498] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=18601,uid=0 [ 1508.518146][T20721] active_anon:163157 inactive_anon:6205 isolated_anon:0 [ 1508.518146][T20721] active_file:15 inactive_file:16 isolated_file:0 [ 1508.518146][T20721] unevictable:1 dirty:5 writeback:0 [ 1508.518146][T20721] slab_reclaimable:15392 slab_unreclaimable:114845 [ 1508.518146][T20721] mapped:54145 shmem:6465 pagetables:7229 bounce:0 [ 1508.518146][T20721] free:15922 free_pcp:124 free_cma:0 [ 1508.535168][ T6498] Out of memory: Killed process 18601 (syz-executor.2) total-vm:74980kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1508.551183][T20721] Node 0 active_anon:652588kB inactive_anon:24820kB active_file:56kB inactive_file:56kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216576kB dirty:12kB writeback:0kB shmem:25860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 520192kB writeback_tmp:0kB all_unreclaimable? yes [ 1508.601545][ T6498] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1508.613088][T20721] Node 1 active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1508.635945][ T6498] CPU: 0 PID: 6498 Comm: in:imklog Not tainted 5.8.0-rc3-syzkaller #0 [ 1508.650199][T20721] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.673138][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1508.673144][ T6498] Call Trace: [ 1508.673168][ T6498] dump_stack+0x18f/0x20d [ 1508.673186][ T6498] dump_header+0x10b/0x7e4 [ 1508.673201][ T6498] oom_kill_process.cold+0x10/0x15 [ 1508.673219][ T6498] out_of_memory+0x326/0x1340 [ 1508.673241][ T6498] ? oom_killer_disable+0x270/0x270 [ 1508.673260][ T6498] ? mutex_trylock+0x246/0x2c0 [ 1508.673275][ T6498] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1508.673297][ T6498] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1508.699100][T20721] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1508.717037][ T6498] ? warn_alloc+0x120/0x120 [ 1508.717053][ T6498] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1508.717077][ T6498] ? lock_is_held_type+0xb0/0xe0 [ 1508.717097][ T6498] __alloc_pages_nodemask+0x68f/0x930 [ 1508.717118][ T6498] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1508.717137][ T6498] ? page_cache_readahead_unbounded+0x572/0x850 [ 1508.717154][ T6498] ? __lock_page_or_retry+0x650/0x650 [ 1508.717170][ T6498] alloc_pages_current+0x187/0x280 [ 1508.717187][ T6498] __page_cache_alloc+0x31e/0x450 [ 1508.717207][ T6498] pagecache_get_page+0x27d/0xe10 [ 1508.737356][T20721] Node 0 DMA32 free:27236kB min:37964kB low:46940kB high:55916kB reserved_highatomic:0KB active_anon:650400kB inactive_anon:24820kB active_file:56kB inactive_file:56kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:16720kB pagetables:28820kB bounce:0kB free_pcp:800kB local_pcp:248kB free_cma:0kB [ 1508.753117][ T6498] ? __do_page_cache_readahead+0xc2/0xf0 [ 1508.753136][ T6498] filemap_fault+0x1a99/0x2ad0 [ 1508.753160][ T6498] ext4_filemap_fault+0x87/0xb6 [ 1508.753174][ T6498] __do_fault+0x10d/0x4d0 [ 1508.753192][ T6498] handle_mm_fault+0x37a3/0x43f0 [ 1508.753212][ T6498] ? apply_to_existing_page_range+0x40/0x40 [ 1508.753237][ T6498] ? vmacache_update+0xce/0x140 [ 1508.753258][ T6498] do_user_addr_fault+0x5a2/0xd00 [ 1508.753282][ T6498] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1508.775227][T20721] lowmem_reserve[]: 0 0 0 0 0 [ 1508.790305][ T6498] exc_page_fault+0xab/0x170 [ 1508.790321][ T6498] ? asm_exc_page_fault+0x8/0x30 [ 1508.790340][ T6498] asm_exc_page_fault+0x1e/0x30 [ 1508.790353][ T6498] RIP: 0033:0x7febe7d1122d [ 1508.790358][ T6498] Code: Bad RIP value. [ 1508.790365][ T6498] RSP: 002b:00007febe56ad580 EFLAGS: 00010293 [ 1508.790377][ T6498] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007febe7d1122d [ 1508.790385][ T6498] RDX: 0000000000001fa0 RSI: 00007febe56adda0 RDI: 0000000000000004 [ 1508.790401][ T6498] RBP: 00005614bf3629d0 R08: 0000000000000000 R09: 0000000000000000 [ 1508.810068][T20721] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.812414][ T6498] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007febe56adda0 [ 1508.812423][ T6498] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007febe56aeb71 [ 1508.829308][ T6498] Mem-Info: [ 1508.841838][T20721] lowmem_reserve[]: 0 0 0 0 0 [ 1508.851733][ T6498] active_anon:162610 inactive_anon:6205 isolated_anon:0 [ 1508.851733][ T6498] active_file:15 inactive_file:15 isolated_file:0 [ 1508.851733][ T6498] unevictable:1 dirty:0 writeback:0 [ 1508.851733][ T6498] slab_reclaimable:15390 slab_unreclaimable:115289 [ 1508.851733][ T6498] mapped:54144 shmem:6465 pagetables:7228 bounce:0 [ 1508.851733][ T6498] free:15904 free_pcp:262 free_cma:0 [ 1508.879093][T20721] Node 1 Normal free:26848kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1508.903489][ T6498] Node 0 active_anon:650400kB inactive_anon:24820kB active_file:56kB inactive_file:56kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216576kB dirty:0kB writeback:0kB shmem:25860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 518144kB writeback_tmp:0kB all_unreclaimable? yes [ 1508.924977][T20721] lowmem_reserve[]: 0 0 0 0 0 [ 1508.959648][ T6498] Node 1 active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1508.981274][T20721] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10156kB [ 1508.999775][ T6498] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1509.025682][T20721] Node 0 DMA32: 2267*4kB (UME) 840*8kB (ME) 373*16kB (ME) 99*32kB (UME) 4*64kB (M) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 25308kB [ 1509.050995][ T6498] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1509.088971][T20721] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1509.106393][ T6498] Node 0 DMA32 free:25364kB min:37964kB low:46940kB high:55916kB reserved_highatomic:0KB active_anon:650400kB inactive_anon:24820kB active_file:56kB inactive_file:56kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:16720kB pagetables:28820kB bounce:0kB free_pcp:800kB local_pcp:552kB free_cma:0kB [ 1509.161894][T20721] Node 1 Normal: 150*4kB (ME) 85*8kB (UME) 52*16kB (UME) 21*32kB (UME) 4*64kB (M) 4*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26848kB [ 1509.195105][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1509.247219][T20721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1509.268565][ T6498] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1509.387149][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1509.391853][ T6498] Node 1 Normal free:26848kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1509.400680][T20721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1509.430215][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1509.436533][ T6498] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10156kB [ 1509.447408][T20721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1509.457229][ T6498] Node 0 DMA32: 2267*4kB (UME) 769*8kB (UME) 345*16kB (UME) 87*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23524kB [ 1509.473967][T20721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1509.481344][ T6498] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1509.511832][T20721] 6495 total pagecache pages [ 1509.512125][ T6498] Node 1 Normal: 150*4kB (ME) 85*8kB (UME) 52*16kB (UME) 21*32kB (UME) 4*64kB (M) 4*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26848kB [ 1509.523250][T20721] 0 pages in swap cache [ 1509.540006][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1509.549610][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1509.561509][T20721] Swap cache stats: add 0, delete 0, find 0/0 [ 1509.564945][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1509.569484][T20721] Free swap = 0kB [ 1509.592167][T20721] Total swap = 0kB [ 1509.592703][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1509.595918][T20721] 1965979 pages RAM [ 1509.611937][ T6498] 6495 total pagecache pages [ 1509.617692][ T6498] 0 pages in swap cache [ 1509.619626][T20721] 0 pages HighMem/MovableOnly [ 1509.621854][ T6498] Swap cache stats: add 0, delete 0, find 0/0 [ 1509.626577][T20721] 349903 pages reserved [ 1509.646779][ T6498] Free swap = 0kB [ 1509.647975][T20721] 0 pages cma reserved [ 1509.650514][ T6498] Total swap = 0kB [ 1509.669082][ T6498] 1965979 pages RAM [ 1509.674059][ T6498] 0 pages HighMem/MovableOnly [ 1509.678732][ T6498] 349903 pages reserved [ 1509.697163][ T6498] 0 pages cma reserved [ 1509.701252][ T6498] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=16462,uid=0 [ 1509.723748][ T6498] Out of memory: Killed process 16462 (syz-executor.5) total-vm:74848kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1509.784267][ T3859] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1509.804020][ T3859] CPU: 1 PID: 3859 Comm: systemd-journal Not tainted 5.8.0-rc3-syzkaller #0 [ 1509.812693][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1509.822738][ T3859] Call Trace: [ 1509.826031][ T3859] dump_stack+0x18f/0x20d [ 1509.830359][ T3859] dump_header+0x10b/0x7e4 [ 1509.834777][ T3859] oom_kill_process.cold+0x10/0x15 [ 1509.839887][ T3859] out_of_memory+0x326/0x1340 [ 1509.844567][ T3859] ? oom_killer_disable+0x270/0x270 [ 1509.849762][ T3859] ? mutex_trylock+0x246/0x2c0 [ 1509.854522][ T3859] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1509.861200][ T3859] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1509.867805][ T3859] ? warn_alloc+0x120/0x120 [ 1509.872306][ T3859] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1509.877875][ T3859] ? lock_is_held_type+0xb0/0xe0 [ 1509.882816][ T3859] __alloc_pages_nodemask+0x68f/0x930 [ 1509.888186][ T3859] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1509.894950][ T3859] ? page_cache_readahead_unbounded+0x572/0x850 [ 1509.901188][ T3859] ? __lock_page_or_retry+0x650/0x650 [ 1509.906557][ T3859] alloc_pages_current+0x187/0x280 [ 1509.911689][ T3859] __page_cache_alloc+0x31e/0x450 [ 1509.916715][ T3859] pagecache_get_page+0x27d/0xe10 [ 1509.921738][ T3859] ? __do_page_cache_readahead+0xc2/0xf0 [ 1509.927368][ T3859] filemap_fault+0x1a99/0x2ad0 [ 1509.932140][ T3859] ext4_filemap_fault+0x87/0xb6 [ 1509.936987][ T3859] __do_fault+0x10d/0x4d0 [ 1509.941314][ T3859] handle_mm_fault+0x37a3/0x43f0 [ 1509.946251][ T3859] ? apply_to_existing_page_range+0x40/0x40 [ 1509.952158][ T3859] do_user_addr_fault+0x5a2/0xd00 [ 1509.957183][ T3859] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1509.962731][ T3859] exc_page_fault+0xab/0x170 [ 1509.967336][ T3859] ? asm_exc_page_fault+0x8/0x30 [ 1509.972268][ T3859] asm_exc_page_fault+0x1e/0x30 [ 1509.977109][ T3859] RIP: 0033:0x7f4b4d7362e3 [ 1509.981506][ T3859] Code: Bad RIP value. [ 1509.985559][ T3859] RSP: 002b:00007ffd902c6588 EFLAGS: 00010246 [ 1509.991613][ T3859] RAX: 0000000000000001 RBX: 0000558d091261e0 RCX: 00007f4b4d7362e3 [ 1509.999576][ T3859] RDX: 0000000000000013 RSI: 00007ffd902c6590 RDI: 0000000000000008 [ 1510.007539][ T3859] RBP: 00007ffd902c6780 R08: 431bde82d7b634db R09: 00007ffd90355080 [ 1510.015503][ T3859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd902c6590 [ 1510.023470][ T3859] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a9bc1cff0789 [ 1510.046422][ T3859] Mem-Info: [ 1510.049591][ T3859] active_anon:162068 inactive_anon:6205 isolated_anon:0 [ 1510.049591][ T3859] active_file:40 inactive_file:0 isolated_file:0 [ 1510.049591][ T3859] unevictable:1 dirty:0 writeback:0 [ 1510.049591][ T3859] slab_reclaimable:15390 slab_unreclaimable:116219 [ 1510.049591][ T3859] mapped:54144 shmem:6465 pagetables:7166 bounce:0 [ 1510.049591][ T3859] free:15492 free_pcp:338 free_cma:0 [ 1510.096132][ T3859] Node 0 active_anon:648232kB inactive_anon:24820kB active_file:156kB inactive_file:0kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216576kB dirty:0kB writeback:0kB shmem:25860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 518144kB writeback_tmp:0kB all_unreclaimable? yes [ 1510.135064][ T3859] Node 1 active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1510.184078][ T3859] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1510.233200][ T3859] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1510.238955][ T3859] Node 0 DMA32 free:24340kB min:48204kB low:57180kB high:66156kB reserved_highatomic:0KB active_anon:648232kB inactive_anon:24820kB active_file:52kB inactive_file:52kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:16660kB pagetables:28572kB bounce:0kB free_pcp:1104kB local_pcp:248kB free_cma:0kB [ 1510.287421][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1510.301001][ T3859] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1510.347238][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1510.351955][ T3859] Node 1 Normal free:26848kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1510.404477][ T3859] lowmem_reserve[]: 0 0 0 0 0 [ 1510.409225][ T3859] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10156kB [ 1510.448212][ T3859] Node 0 DMA32: 2267*4kB (UME) 764*8kB (ME) 345*16kB (UME) 85*32kB (M) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 23996kB [ 1510.481777][ T3859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1510.509925][ T3859] Node 1 Normal: 150*4kB (ME) 85*8kB (UME) 52*16kB (UME) 21*32kB (UME) 4*64kB (M) 4*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26848kB [ 1510.552136][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1510.561698][ T3859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1510.579713][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1510.589345][ T3859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1510.612172][ T3859] 6495 total pagecache pages [ 1510.616798][ T3859] 0 pages in swap cache [ 1510.620946][ T3859] Swap cache stats: add 0, delete 0, find 0/0 [ 1510.637526][ T3859] Free swap = 0kB [ 1510.641258][ T3859] Total swap = 0kB [ 1510.649877][ T3859] 1965979 pages RAM [ 1510.667853][ T3859] 0 pages HighMem/MovableOnly [ 1510.677521][ T3859] 349903 pages reserved [ 1510.681671][ T3859] 0 pages cma reserved [ 1510.688944][ T3859] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14289,uid=0 [ 1510.720917][ T3859] Out of memory: Killed process 14289 (syz-executor.2) total-vm:74980kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1510.752799][ T1151] oom_reaper: reaped process 14289 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1510.783949][ T7333] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1510.849773][ T7333] CPU: 1 PID: 7333 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1510.858392][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1510.868446][ T7333] Call Trace: [ 1510.871745][ T7333] dump_stack+0x18f/0x20d [ 1510.876072][ T7333] dump_header+0x10b/0x7e4 [ 1510.880484][ T7333] oom_kill_process.cold+0x10/0x15 [ 1510.885596][ T7333] out_of_memory+0x326/0x1340 [ 1510.890293][ T7333] ? oom_killer_disable+0x270/0x270 [ 1510.895505][ T7333] ? mutex_trylock+0x246/0x2c0 [ 1510.900265][ T7333] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1510.906938][ T7333] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1510.913553][ T7333] ? warn_alloc+0x120/0x120 [ 1510.918053][ T7333] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1510.923600][ T7333] ? lock_is_held_type+0xb0/0xe0 [ 1510.928536][ T7333] __alloc_pages_nodemask+0x68f/0x930 [ 1510.933907][ T7333] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1510.940666][ T7333] ? page_cache_readahead_unbounded+0x572/0x850 [ 1510.946904][ T7333] ? __lock_page_or_retry+0x650/0x650 [ 1510.952280][ T7333] alloc_pages_current+0x187/0x280 [ 1510.957388][ T7333] __page_cache_alloc+0x31e/0x450 [ 1510.962411][ T7333] pagecache_get_page+0x27d/0xe10 [ 1510.967441][ T7333] ? __do_page_cache_readahead+0xc2/0xf0 [ 1510.973091][ T7333] filemap_fault+0x1a99/0x2ad0 [ 1510.977857][ T7333] ext4_filemap_fault+0x87/0xb6 [ 1510.982701][ T7333] __do_fault+0x10d/0x4d0 [ 1510.987024][ T7333] handle_mm_fault+0x37a3/0x43f0 [ 1510.991962][ T7333] ? apply_to_existing_page_range+0x40/0x40 [ 1510.997857][ T7333] ? vmacache_update+0xce/0x140 [ 1511.002706][ T7333] do_user_addr_fault+0x5a2/0xd00 [ 1511.007729][ T7333] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1511.013271][ T7333] exc_page_fault+0xab/0x170 [ 1511.017854][ T7333] ? asm_exc_page_fault+0x8/0x30 [ 1511.022786][ T7333] asm_exc_page_fault+0x1e/0x30 [ 1511.027625][ T7333] RIP: 0033:0x4169ca [ 1511.031501][ T7333] Code: Bad RIP value. [ 1511.035554][ T7333] RSP: 002b:0000000000c9fda8 EFLAGS: 00010246 [ 1511.041611][ T7333] RAX: 00000000000002d4 RBX: 000000000181d940 RCX: 00000000004169ca [ 1511.049574][ T7333] RDX: 0000000040000000 RSI: 0000000000c9fde0 RDI: ffffffffffffffff [ 1511.057537][ T7333] RBP: 0000000000000fb2 R08: 0000000000000001 R09: 0000000000000001 [ 1511.065520][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1511.073484][ T7333] R13: 0000000000c9fde0 R14: 000000000181d99b R15: 0000000000c9fdf0 [ 1511.088611][ T7333] Mem-Info: [ 1511.091758][ T7333] active_anon:161526 inactive_anon:6205 isolated_anon:0 [ 1511.091758][ T7333] active_file:15 inactive_file:12 isolated_file:0 [ 1511.091758][ T7333] unevictable:1 dirty:0 writeback:0 [ 1511.091758][ T7333] slab_reclaimable:15390 slab_unreclaimable:116706 [ 1511.091758][ T7333] mapped:54144 shmem:6465 pagetables:7177 bounce:0 [ 1511.091758][ T7333] free:15502 free_pcp:361 free_cma:0 [ 1511.139346][ T7333] Node 0 active_anon:646064kB inactive_anon:24820kB active_file:56kB inactive_file:44kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216576kB dirty:0kB writeback:0kB shmem:25860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 516096kB writeback_tmp:0kB all_unreclaimable? yes [ 1511.177090][ T7333] Node 1 active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1511.217891][ T7333] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1511.267105][ T7333] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1511.272960][ T7333] Node 0 DMA32 free:24380kB min:48204kB low:57180kB high:66156kB reserved_highatomic:0KB active_anon:646064kB inactive_anon:24820kB active_file:56kB inactive_file:44kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:16628kB pagetables:28468kB bounce:0kB free_pcp:1404kB local_pcp:208kB free_cma:0kB [ 1511.321280][ T7333] lowmem_reserve[]: 0 0 0 0 0 [ 1511.332355][ T7333] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1511.386524][ T7333] lowmem_reserve[]: 0 0 0 0 0 [ 1511.391260][ T7333] Node 1 Normal free:26848kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1511.446803][ T7333] lowmem_reserve[]: 0 0 0 0 0 [ 1511.451540][ T7333] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10156kB [ 1511.474897][ T7333] Node 0 DMA32: 2267*4kB (UME) 765*8kB (UME) 345*16kB (UME) 86*32kB (UM) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 24100kB [ 1511.503615][ T7333] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1511.520291][ T7333] Node 1 Normal: 150*4kB (ME) 85*8kB (UME) 52*16kB (UME) 21*32kB (UME) 4*64kB (M) 4*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 4*4096kB (M) = 26848kB [ 1511.542035][ T7333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1511.558064][ T7333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1511.567566][ T7333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1511.591019][ T7333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1511.600526][ T7333] 6495 total pagecache pages [ 1511.609697][ T7333] 0 pages in swap cache [ 1511.613983][ T7333] Swap cache stats: add 0, delete 0, find 0/0 [ 1511.620079][ T7333] Free swap = 0kB [ 1511.630909][ T7333] Total swap = 0kB [ 1511.634713][ T7333] 1965979 pages RAM [ 1511.638511][ T7333] 0 pages HighMem/MovableOnly [ 1511.649314][ T7333] 349903 pages reserved [ 1511.656248][ T7333] 0 pages cma reserved [ 1511.660318][ T7333] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14197,uid=0 [ 1511.685138][ T7333] Out of memory: Killed process 14197 (syz-executor.2) total-vm:74980kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 01:51:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x112, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:51:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x489f0200, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:51:43 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 01:51:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) 01:51:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x20000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:51:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2785, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x113, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 01:51:43 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000580)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/46) r1 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x126, &(0x7f0000000140)}}], 0x40007aa, 0x0) 01:51:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x499f0200, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:51:43 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 01:51:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x4a000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:51:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x4a010000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:51:43 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1519.938640][ T1151] oom_reaper: reaped process 20763 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 1520.045330][ T6498] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1520.062141][ T6498] CPU: 0 PID: 6498 Comm: in:imklog Not tainted 5.8.0-rc3-syzkaller #0 [ 1520.070292][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1520.080340][ T6498] Call Trace: [ 1520.083638][ T6498] dump_stack+0x18f/0x20d [ 1520.087967][ T6498] dump_header+0x10b/0x7e4 [ 1520.092375][ T6498] oom_kill_process.cold+0x10/0x15 [ 1520.097464][ T6498] out_of_memory+0x326/0x1340 [ 1520.102132][ T6498] ? oom_killer_disable+0x270/0x270 [ 1520.107333][ T6498] ? mutex_trylock+0x246/0x2c0 [ 1520.112097][ T6498] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1520.118801][ T6498] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1520.125399][ T6498] ? warn_alloc+0x120/0x120 [ 1520.129891][ T6498] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1520.135479][ T6498] ? lock_is_held_type+0xb0/0xe0 [ 1520.140421][ T6498] __alloc_pages_nodemask+0x68f/0x930 [ 1520.145794][ T6498] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1520.152561][ T6498] ? page_cache_readahead_unbounded+0x572/0x850 [ 1520.158806][ T6498] ? __lock_page_or_retry+0x650/0x650 [ 1520.164181][ T6498] alloc_pages_current+0x187/0x280 [ 1520.169292][ T6498] __page_cache_alloc+0x31e/0x450 [ 1520.174320][ T6498] pagecache_get_page+0x27d/0xe10 [ 1520.179346][ T6498] ? __do_page_cache_readahead+0xc2/0xf0 [ 1520.184976][ T6498] filemap_fault+0x1a99/0x2ad0 [ 1520.189746][ T6498] ext4_filemap_fault+0x87/0xb6 [ 1520.194592][ T6498] __do_fault+0x10d/0x4d0 [ 1520.198921][ T6498] handle_mm_fault+0x37a3/0x43f0 [ 1520.203868][ T6498] ? apply_to_existing_page_range+0x40/0x40 [ 1520.209820][ T6498] ? vmacache_update+0xce/0x140 [ 1520.214677][ T6498] do_user_addr_fault+0x5a2/0xd00 [ 1520.219702][ T6498] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1520.225249][ T6498] exc_page_fault+0xab/0x170 [ 1520.229849][ T6498] ? asm_exc_page_fault+0x8/0x30 [ 1520.234809][ T6498] asm_exc_page_fault+0x1e/0x30 [ 1520.239659][ T6498] RIP: 0033:0x7febe7d1122d [ 1520.244061][ T6498] Code: Bad RIP value. [ 1520.248117][ T6498] RSP: 002b:00007febe56ad580 EFLAGS: 00010293 [ 1520.254175][ T6498] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007febe7d1122d [ 1520.262143][ T6498] RDX: 0000000000001fa0 RSI: 00007febe56adda0 RDI: 0000000000000004 [ 1520.270111][ T6498] RBP: 00005614bf3629d0 R08: 0000000000000000 R09: 0000000000000000 [ 1520.278081][ T6498] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007febe56adda0 [ 1520.286050][ T6498] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007febe56af598 [ 1520.295186][ T6498] Mem-Info: [ 1520.298318][ T6498] active_anon:160985 inactive_anon:6205 isolated_anon:0 [ 1520.298318][ T6498] active_file:41 inactive_file:0 isolated_file:0 [ 1520.298318][ T6498] unevictable:1 dirty:5 writeback:0 [ 1520.298318][ T6498] slab_reclaimable:15374 slab_unreclaimable:112975 [ 1520.298318][ T6498] mapped:54195 shmem:6465 pagetables:7126 bounce:0 [ 1520.298318][ T6498] free:17424 free_pcp:195 free_cma:0 [ 1520.334751][ T6498] Node 0 active_anon:643896kB inactive_anon:24820kB active_file:156kB inactive_file:0kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216776kB dirty:12kB writeback:0kB shmem:25860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 514048kB writeback_tmp:0kB all_unreclaimable? yes [ 1520.362387][ T6498] Node 1 active_anon:44kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1520.387812][ T6498] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1520.416869][ T6498] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1520.423509][ T6498] Node 0 DMA32 free:20816kB min:42060kB low:51036kB high:60012kB reserved_highatomic:0KB active_anon:643896kB inactive_anon:24820kB active_file:56kB inactive_file:92kB unevictable:4kB writepending:12kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:16528kB pagetables:28412kB bounce:0kB free_pcp:600kB local_pcp:248kB free_cma:0kB [ 1520.455722][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1520.460419][ T6498] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1520.488537][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1520.493277][ T6498] Node 1 Normal free:26780kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:312kB local_pcp:60kB free_cma:0kB [ 1520.515294][T20763] syz-executor.5: vmalloc: allocation failure, allocated 12992512 of 41947136 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1520.524014][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1520.553032][ T6498] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10160kB [ 1520.567495][ T6498] Node 0 DMA32: 1877*4kB (UME) 671*8kB (UME) 318*16kB (UME) 68*32kB (UM) 1*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20588kB [ 1520.582993][T20763] CPU: 0 PID: 20763 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1520.591664][T20763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1520.601710][T20763] Call Trace: [ 1520.605009][T20763] dump_stack+0x18f/0x20d [ 1520.609345][T20763] warn_alloc.cold+0x87/0x17a [ 1520.614046][T20763] ? trace_hardirqs_on+0x5f/0x220 [ 1520.619078][T20763] ? zone_watermark_ok_safe+0x260/0x260 [ 1520.624645][T20763] __vmalloc_area_node+0x49e/0x7a0 [ 1520.629761][T20763] ? ip_set_alloc+0x48/0x60 [ 1520.634262][T20763] ? ip_set_alloc+0x48/0x60 [ 1520.638770][T20763] vzalloc+0x116/0x1a0 [ 1520.642832][T20763] ip_set_alloc+0x48/0x60 [ 1520.647142][T20763] hash_netnet_create+0x44f/0xd70 [ 1520.652155][T20763] ? hash_netnet6_head+0xcd0/0xcd0 [ 1520.657271][T20763] ip_set_create+0x6a2/0x13c0 [ 1520.661951][T20763] ? ip_set_sockfn_get+0xe00/0xe00 [ 1520.667087][T20763] ? lock_is_held_type+0xb0/0xe0 [ 1520.672020][T20763] ? ip_set_sockfn_get+0xe00/0xe00 [ 1520.677122][T20763] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1520.682061][T20763] ? nfnetlink_rcv+0x420/0x420 [ 1520.686814][T20763] ? is_bpf_text_address+0xcb/0x160 [ 1520.692027][T20763] ? __lock_acquire+0xc1e/0x56e0 [ 1520.696964][T20763] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1520.702943][T20763] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1520.708925][T20763] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1520.708985][ T6498] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1520.714814][T20763] netlink_rcv_skb+0x15a/0x430 [ 1520.714829][T20763] ? nfnetlink_rcv+0x420/0x420 [ 1520.714843][T20763] ? netlink_ack+0xa10/0xa10 [ 1520.714868][T20763] ? ns_capable+0xde/0x100 [ 1520.714885][T20763] nfnetlink_rcv+0x1ac/0x420 [ 1520.714900][T20763] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1520.714922][T20763] netlink_unicast+0x533/0x7d0 [ 1520.714941][T20763] ? netlink_attachskb+0x810/0x810 [ 1520.748387][ T6498] Node 1 Normal: 156*4kB (ME) 86*8kB (ME) 50*16kB (ME) 21*32kB (UME) 5*64kB (UM) 5*128kB (UME) 1*256kB (E) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UM) 4*4096kB (M) = 26528kB [ 1520.749311][T20763] ? _copy_from_iter_full+0x247/0x890 [ 1520.777494][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1520.781382][T20763] ? __phys_addr+0x9a/0x110 [ 1520.796097][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1520.796246][T20763] ? __phys_addr_symbol+0x2c/0x70 [ 1520.800738][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1520.809990][T20763] ? __check_object_size+0x171/0x3e4 [ 1520.810009][T20763] netlink_sendmsg+0x856/0xd90 [ 1520.810029][T20763] ? netlink_unicast+0x7d0/0x7d0 [ 1520.810050][T20763] ? netlink_unicast+0x7d0/0x7d0 [ 1520.810067][T20763] sock_sendmsg+0xcf/0x120 [ 1520.810083][T20763] ____sys_sendmsg+0x6e8/0x810 [ 1520.810101][T20763] ? kernel_sendmsg+0x50/0x50 [ 1520.810112][T20763] ? do_recvmmsg+0x6d0/0x6d0 [ 1520.810137][T20763] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1520.846404][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1520.848915][T20763] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1520.860966][ T6498] 6493 total pagecache pages [ 1520.862890][T20763] ? __lock_acquire+0xc1e/0x56e0 [ 1520.862910][T20763] ___sys_sendmsg+0xf3/0x170 [ 1520.862926][T20763] ? sendmsg_copy_msghdr+0x160/0x160 [ 1520.862940][T20763] ? __fget_files+0x272/0x400 [ 1520.862958][T20763] ? lock_downgrade+0x820/0x820 [ 1520.862971][T20763] ? find_held_lock+0x2d/0x110 [ 1520.862986][T20763] ? __might_fault+0x11f/0x1d0 [ 1520.863005][T20763] ? __fget_files+0x294/0x400 [ 1520.863023][T20763] ? __fget_light+0xea/0x280 [ 1520.885236][ T6498] 0 pages in swap cache [ 1520.888801][T20763] __sys_sendmsg+0xe5/0x1b0 [ 1520.907462][ T6498] Swap cache stats: add 0, delete 0, find 0/0 [ 1520.908261][T20763] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1520.943407][ T6498] Free swap = 0kB [ 1520.946471][T20763] ? __x64_sys_futex+0x382/0x4e0 [ 1520.951465][ T6498] Total swap = 0kB [ 1520.955176][T20763] ? do_syscall_64+0x1c/0xe0 [ 1520.955191][T20763] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1520.955209][T20763] do_syscall_64+0x60/0xe0 [ 1520.955225][T20763] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1520.955238][T20763] RIP: 0033:0x45cb29 [ 1520.955243][T20763] Code: Bad RIP value. [ 1520.955252][T20763] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1520.993222][ T6498] 1965979 pages RAM [ 1521.000946][T20763] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1521.000962][T20763] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1521.020657][T20763] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1521.027645][ T6498] 0 pages HighMem/MovableOnly [ 1521.028621][T20763] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1521.028637][T20763] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1521.042936][ T6498] 349903 pages reserved [ 1521.060929][ T6498] 0 pages cma reserved [ 1521.063250][T20763] Mem-Info: [ 1521.068126][T20763] active_anon:160980 inactive_anon:6205 isolated_anon:0 [ 1521.068126][T20763] active_file:14 inactive_file:14 isolated_file:0 [ 1521.068126][T20763] unevictable:1 dirty:0 writeback:0 [ 1521.068126][T20763] slab_reclaimable:15370 slab_unreclaimable:113113 [ 1521.068126][T20763] mapped:54186 shmem:6465 pagetables:7125 bounce:0 [ 1521.068126][T20763] free:14313 free_pcp:210 free_cma:0 [ 1521.087051][ T6498] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=13460,uid=0 [ 1521.110375][T20763] Node 0 active_anon:643880kB inactive_anon:24820kB active_file:52kB inactive_file:52kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216744kB dirty:0kB writeback:0kB shmem:25860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 512000kB writeback_tmp:0kB all_unreclaimable? yes [ 1521.127778][ T6498] Out of memory: Killed process 13460 (syz-executor.2) total-vm:74980kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1521.161722][T20763] Node 1 active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1521.192886][T20763] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1521.220553][ T6498] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1521.237454][T20763] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1521.246453][ T6498] CPU: 1 PID: 6498 Comm: in:imklog Not tainted 5.8.0-rc3-syzkaller #0 [ 1521.246973][T20763] Node 0 DMA32 free:22012kB min:42060kB low:51036kB high:60012kB reserved_highatomic:0KB active_anon:641732kB inactive_anon:24820kB active_file:52kB inactive_file:52kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:16500kB pagetables:28260kB bounce:0kB free_pcp:776kB local_pcp:248kB free_cma:0kB [ 1521.254601][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1521.254607][ T6498] Call Trace: [ 1521.254632][ T6498] dump_stack+0x18f/0x20d [ 1521.254651][ T6498] dump_header+0x10b/0x7e4 [ 1521.286585][T20763] lowmem_reserve[]: 0 0 0 0 0 [ 1521.296611][ T6498] oom_kill_process.cold+0x10/0x15 [ 1521.296631][ T6498] out_of_memory+0x326/0x1340 [ 1521.296652][ T6498] ? oom_killer_disable+0x270/0x270 [ 1521.299906][T20763] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1521.304217][ T6498] ? mutex_trylock+0x246/0x2c0 [ 1521.304234][ T6498] ? __alloc_pages_slowpath.constprop.0+0xc79/0x2780 [ 1521.304255][ T6498] __alloc_pages_slowpath.constprop.0+0x2097/0x2780 [ 1521.308637][T20763] lowmem_reserve[]: 0 0 0 0 0 [ 1521.313314][ T6498] ? warn_alloc+0x120/0x120 [ 1521.313333][ T6498] ? __alloc_pages_nodemask+0x3e5/0x930 [ 1521.318430][T20763] Node 1 Normal free:26528kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:312kB local_pcp:60kB free_cma:0kB [ 1521.323099][ T6498] ? lock_is_held_type+0xb0/0xe0 [ 1521.323125][ T6498] __alloc_pages_nodemask+0x68f/0x930 [ 1521.328290][T20763] lowmem_reserve[]: 0 0 0 0 0 [ 1521.356341][ T6498] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1521.356360][ T6498] ? page_cache_readahead_unbounded+0x572/0x850 [ 1521.356387][ T6498] ? __lock_page_or_retry+0x650/0x650 [ 1521.361122][T20763] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10160kB [ 1521.367782][ T6498] alloc_pages_current+0x187/0x280 [ 1521.367800][ T6498] __page_cache_alloc+0x31e/0x450 [ 1521.367818][ T6498] pagecache_get_page+0x27d/0xe10 [ 1521.374395][T20763] Node 0 DMA32: 1877*4kB (UME) 667*8kB (ME) 318*16kB (UME) 67*32kB (M) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 21996kB [ 1521.379042][ T6498] ? __do_page_cache_readahead+0xc2/0xf0 [ 1521.383581][T20763] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1521.389091][ T6498] filemap_fault+0x1a99/0x2ad0 [ 1521.419675][T20763] Node 1 Normal: 156*4kB (ME) 86*8kB (ME) 50*16kB (ME) 21*32kB (UME) 5*64kB (UM) 5*128kB (UME) 1*256kB (E) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UM) 4*4096kB (M) = 26528kB [ 1521.424568][ T6498] ext4_filemap_fault+0x87/0xb6 [ 1521.424585][ T6498] __do_fault+0x10d/0x4d0 [ 1521.429939][T20763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1521.434593][ T6498] handle_mm_fault+0x37a3/0x43f0 [ 1521.434614][ T6498] ? apply_to_existing_page_range+0x40/0x40 [ 1521.434639][ T6498] ? vmacache_update+0xce/0x140 [ 1521.441376][T20763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1521.447596][ T6498] do_user_addr_fault+0x5a2/0xd00 [ 1521.447618][ T6498] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1521.447637][ T6498] exc_page_fault+0xab/0x170 [ 1521.453016][T20763] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1521.467295][ T6498] ? asm_exc_page_fault+0x8/0x30 [ 1521.467309][ T6498] asm_exc_page_fault+0x1e/0x30 [ 1521.467329][ T6498] RIP: 0033:0x7febe7d1122d [ 1521.472438][T20763] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1521.477413][ T6498] Code: Bad RIP value. [ 1521.482451][T20763] 6493 total pagecache pages [ 1521.497933][ T6498] RSP: 002b:00007febe56ad580 EFLAGS: 00010293 [ 1521.497946][ T6498] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007febe7d1122d [ 1521.497953][ T6498] RDX: 0000000000001fa0 RSI: 00007febe56adda0 RDI: 0000000000000004 [ 1521.497961][ T6498] RBP: 00005614bf3629d0 R08: 0000000000000000 R09: 0000000000000000 [ 1521.497970][ T6498] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007febe56adda0 [ 1521.497985][ T6498] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007febe56af598 [ 1521.503634][T20763] 0 pages in swap cache [ 1521.534925][ T6498] Mem-Info: [ 1521.556949][T20763] Swap cache stats: add 0, delete 0, find 0/0 [ 1521.576757][ T6498] active_anon:160439 inactive_anon:6205 isolated_anon:0 [ 1521.576757][ T6498] active_file:14 inactive_file:14 isolated_file:0 [ 1521.576757][ T6498] unevictable:1 dirty:0 writeback:0 [ 1521.576757][ T6498] slab_reclaimable:15370 slab_unreclaimable:113456 [ 1521.576757][ T6498] mapped:54186 shmem:6465 pagetables:7099 bounce:0 [ 1521.576757][ T6498] free:14503 free_pcp:266 free_cma:0 [ 1521.605303][T20763] Free swap = 0kB [ 1521.620582][ T6498] Node 0 active_anon:641716kB inactive_anon:24820kB active_file:52kB inactive_file:52kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:216744kB dirty:0kB writeback:0kB shmem:25860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 509952kB writeback_tmp:0kB all_unreclaimable? yes [ 1521.648096][T20763] Total swap = 0kB [ 1521.681142][ T6498] Node 1 active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 1521.704253][T20763] 1965979 pages RAM [ 1521.740698][ T6498] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1521.793302][T20763] 0 pages HighMem/MovableOnly [ 1521.802361][ T6498] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1521.845422][T20763] 349903 pages reserved [ 1521.849585][T20763] 0 pages cma reserved [ 1521.857084][ T6498] Node 0 DMA32 free:21012kB min:42060kB low:51036kB high:60012kB reserved_highatomic:0KB active_anon:641716kB inactive_anon:24820kB active_file:52kB inactive_file:52kB unevictable:4kB writepending:0kB present:3129332kB managed:2578196kB mlocked:4kB kernel_stack:16496kB pagetables:28304kB bounce:0kB free_pcp:696kB local_pcp:436kB free_cma:0kB [ 1521.885680][T20763] ------------[ cut here ]------------ [ 1521.894509][T20763] kernel BUG at arch/x86/mm/physaddr.c:28! [ 1521.900318][T20763] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1521.906262][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1521.906387][T20763] CPU: 0 PID: 20763 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1521.911036][ T6498] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1521.919680][T20763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1521.919701][T20763] RIP: 0010:__phys_addr+0xa7/0x110 [ 1521.919713][T20763] Code: e8 79 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 70 5b 3f 00 48 85 db 75 0d e8 c6 5e 3f 00 4c 89 e0 5b 5d 41 5c c3 e8 b9 5e 3f 00 <0f> 0b e8 b2 5e 3f 00 48 c7 c0 10 10 a8 89 48 ba 00 00 00 00 00 fc [ 1521.919719][T20763] RSP: 0000:ffffc900017572c0 EFLAGS: 00010046 [ 1521.919729][T20763] RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc90013ceb000 [ 1521.919736][T20763] RDX: 0000000000040000 RSI: ffffffff813458a7 RDI: 0000000000000007 [ 1521.919743][T20763] RBP: ffffc90098c59000 R08: 0000000000000001 R09: 0000000000000000 [ 1521.919749][T20763] R10: 0000000000000000 R11: 0000000000000000 R12: 0000408018c59000 [ 1521.919757][T20763] R13: 0000000000080000 R14: 000000000000001d R15: ffffc900017573d8 [ 1521.919766][T20763] FS: 00007f04d0c2a700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1521.919774][T20763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1521.919781][T20763] CR2: 0000000000460c23 CR3: 0000000092d71000 CR4: 00000000001426f0 [ 1521.919797][T20763] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1521.954776][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1521.957874][T20763] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1521.964754][ T6498] Node 1 Normal free:37308kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:48kB pagetables:92kB bounce:0kB free_pcp:1740kB local_pcp:252kB free_cma:0kB [ 1521.982542][T20763] Call Trace: [ 1521.982569][T20763] ? hash_netnet_create+0xbb2/0xd70 [ 1521.982582][T20763] kfree+0x77/0x2c0 [ 1521.982594][T20763] hash_netnet_create+0xbb2/0xd70 [ 1521.982606][T20763] ? hash_netnet6_head+0xcd0/0xcd0 [ 1521.982619][T20763] ip_set_create+0x6a2/0x13c0 [ 1521.982634][T20763] ? ip_set_sockfn_get+0xe00/0xe00 [ 1521.982660][T20763] ? lock_is_held_type+0xb0/0xe0 [ 1521.982672][T20763] ? ip_set_sockfn_get+0xe00/0xe00 [ 1521.982685][T20763] nfnetlink_rcv_msg+0xbe8/0xea0 [ 1521.982703][T20763] ? nfnetlink_rcv+0x420/0x420 [ 1521.982723][T20763] ? is_bpf_text_address+0xcb/0x160 [ 1521.995827][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 1521.996766][T20763] ? __lock_acquire+0xc1e/0x56e0 [ 1522.006581][ T6498] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10160kB [ 1522.012668][T20763] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1522.012682][T20763] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1522.012697][T20763] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1522.012712][T20763] netlink_rcv_skb+0x15a/0x430 [ 1522.012734][T20763] ? nfnetlink_rcv+0x420/0x420 [ 1522.026766][ T6498] Node 0 DMA32: 1877*4kB (UME) 668*8kB (UME) 318*16kB (UME) 67*32kB (M) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 21044kB [ 1522.028646][T20763] ? netlink_ack+0xa10/0xa10 [ 1522.040295][ T6498] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1522.044110][T20763] ? ns_capable+0xde/0x100 [ 1522.044125][T20763] nfnetlink_rcv+0x1ac/0x420 [ 1522.044140][T20763] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 1522.044155][T20763] netlink_unicast+0x533/0x7d0 [ 1522.044175][T20763] ? netlink_attachskb+0x810/0x810 [ 1522.060491][ T6498] Node 1 Normal: 157*4kB (UME) 87*8kB (UME) 51*16kB (UME) 21*32kB (UME) 4*64kB (M) 4*128kB (ME) 1*256kB (E) 4*512kB (UM) 4*1024kB (UE) 5*2048kB (UM) 4*4096kB (M) = 36604kB [ 1522.064733][T20763] ? _copy_from_iter_full+0x247/0x890 [ 1522.064748][T20763] ? __phys_addr+0x9a/0x110 [ 1522.064768][T20763] ? __phys_addr_symbol+0x2c/0x70 [ 1522.064788][T20763] ? __check_object_size+0x171/0x3e4 [ 1522.078509][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1522.103449][T20763] netlink_sendmsg+0x856/0xd90 [ 1522.103465][T20763] ? netlink_unicast+0x7d0/0x7d0 [ 1522.103479][T20763] ? netlink_unicast+0x7d0/0x7d0 [ 1522.103494][T20763] sock_sendmsg+0xcf/0x120 [ 1522.103507][T20763] ____sys_sendmsg+0x6e8/0x810 [ 1522.103520][T20763] ? kernel_sendmsg+0x50/0x50 [ 1522.103530][T20763] ? do_recvmmsg+0x6d0/0x6d0 [ 1522.103546][T20763] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1522.103560][T20763] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1522.103570][T20763] ? __lock_acquire+0xc1e/0x56e0 [ 1522.103588][T20763] ___sys_sendmsg+0xf3/0x170 [ 1522.112689][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1522.115822][T20763] ? sendmsg_copy_msghdr+0x160/0x160 [ 1522.120814][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1522.125896][T20763] ? __fget_files+0x272/0x400 [ 1522.125910][T20763] ? lock_downgrade+0x820/0x820 [ 1522.125920][T20763] ? find_held_lock+0x2d/0x110 [ 1522.125932][T20763] ? __might_fault+0x11f/0x1d0 [ 1522.125945][T20763] ? __fget_files+0x294/0x400 [ 1522.125958][T20763] ? __fget_light+0xea/0x280 [ 1522.125972][T20763] __sys_sendmsg+0xe5/0x1b0 [ 1522.125984][T20763] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1522.126004][T20763] ? __x64_sys_futex+0x382/0x4e0 [ 1522.138403][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1522.140674][T20763] ? do_syscall_64+0x1c/0xe0 [ 1522.148398][ T6498] 6493 total pagecache pages [ 1522.150675][T20763] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1522.159153][ T6498] 0 pages in swap cache [ 1522.160586][T20763] do_syscall_64+0x60/0xe0 [ 1522.168243][ T6498] Swap cache stats: add 0, delete 0, find 0/0 [ 1522.170148][T20763] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1522.190556][ T6498] Free swap = 0kB [ 1522.196346][T20763] RIP: 0033:0x45cb29 [ 1522.196351][T20763] Code: Bad RIP value. [ 1522.196358][T20763] RSP: 002b:00007f04d0c29c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1522.196370][T20763] RAX: ffffffffffffffda RBX: 00000000004feee0 RCX: 000000000045cb29 [ 1522.196377][T20763] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1522.196391][T20763] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1522.208098][ T6498] Total swap = 0kB [ 1522.211739][T20763] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1522.233330][ T6498] 1965979 pages RAM [ 1522.243310][T20763] R13: 0000000000000961 R14: 00000000004cc2c0 R15: 00007f04d0c2a6d4 [ 1522.243322][T20763] Modules linked in: [ 1522.243348][T20763] ---[ end trace 160f8ee14296ab49 ]--- [ 1522.243369][T20763] RIP: 0010:__phys_addr+0xa7/0x110 [ 1522.243383][T20763] Code: e8 79 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 70 5b 3f 00 48 85 db 75 0d e8 c6 5e 3f 00 4c 89 e0 5b 5d 41 5c c3 e8 b9 5e 3f 00 <0f> 0b e8 b2 5e 3f 00 48 c7 c0 10 10 a8 89 48 ba 00 00 00 00 00 fc [ 1522.243396][T20763] RSP: 0000:ffffc900017572c0 EFLAGS: 00010046 [ 1522.256450][ T6498] 0 pages HighMem/MovableOnly [ 1522.257797][T20763] RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc90013ceb000 [ 1522.263288][ T6498] 349903 pages reserved [ 1522.267616][T20763] RDX: 0000000000040000 RSI: ffffffff813458a7 RDI: 0000000000000007 [ 1522.291210][ T6498] 0 pages cma reserved [ 1522.294415][T20763] RBP: ffffc90098c59000 R08: 0000000000000001 R09: 0000000000000000 [ 1522.294423][T20763] R10: 0000000000000000 R11: 0000000000000000 R12: 0000408018c59000 [ 1522.294430][T20763] R13: 0000000000080000 R14: 000000000000001d R15: ffffc900017573d8 [ 1522.294440][T20763] FS: 00007f04d0c2a700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1522.294448][T20763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1522.294455][T20763] CR2: 0000000000460c23 CR3: 0000000092d71000 CR4: 00000000001426f0 [ 1522.294474][T20763] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1522.299479][ T6498] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=13405,uid=0 [ 1522.304728][T20763] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1522.304736][T20763] Kernel panic - not syncing: Fatal exception [ 1522.305780][T20763] Kernel Offset: disabled [ 1522.704103][T20763] Rebooting in 86400 seconds..