0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000340)={0x0, 0x8ad, 0x3}) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) 09:42:49 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x62, 0x0) [ 1809.474132] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1809.960327] syz-executor.2 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1810.044468] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1810.070501] CPU: 0 PID: 23718 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 1810.078420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.087783] Call Trace: [ 1810.090410] dump_stack+0x13e/0x194 [ 1810.094056] dump_header+0x178/0x6d4 [ 1810.097776] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1810.102806] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1810.107916] ? ___ratelimit+0x50/0x519 [ 1810.111816] oom_kill_process.cold+0x10/0xae3 [ 1810.116347] ? lock_downgrade+0x6e0/0x6e0 [ 1810.120503] out_of_memory+0x2d5/0x1110 [ 1810.124491] ? oom_killer_disable+0x1c0/0x1c0 [ 1810.129023] ? mutex_trylock+0x152/0x1a0 [ 1810.133098] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1810.137951] ? warn_alloc+0xf0/0xf0 [ 1810.141576] __alloc_pages_nodemask+0x5d3/0x700 [ 1810.146250] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1810.151270] ? find_held_lock+0x2d/0x110 [ 1810.155329] alloc_pages_vma+0xc2/0x4a0 [ 1810.159303] __handle_mm_fault+0x17b6/0x3280 [ 1810.163788] ? copy_page_range+0x1d70/0x1d70 [ 1810.168195] ? find_held_lock+0x2d/0x110 [ 1810.172260] handle_mm_fault+0x288/0x7a0 [ 1810.176309] __get_user_pages+0x44d/0x11e0 [ 1810.180549] ? follow_page_mask+0x1580/0x1580 [ 1810.185293] ? lock_acquire+0x170/0x3f0 [ 1810.189261] ? __mm_populate+0x1e3/0x2c0 [ 1810.193320] populate_vma_page_range+0x17b/0x210 [ 1810.198094] __mm_populate+0x195/0x2c0 [ 1810.201977] ? populate_vma_page_range+0x210/0x210 [ 1810.206890] ? security_capable+0x88/0xb0 [ 1810.211026] SyS_mlockall+0x3f5/0x520 [ 1810.214806] ? SyS_munlock+0xf0/0xf0 [ 1810.218507] do_syscall_64+0x1d5/0x640 [ 1810.222398] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1810.227578] RIP: 0033:0x45c829 [ 1810.230780] RSP: 002b:00007ffba12edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1810.238472] RAX: ffffffffffffffda RBX: 00000000004f5900 RCX: 000000000045c829 [ 1810.245723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1810.252984] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1810.260253] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1810.267510] R13: 0000000000000737 R14: 00000000004c9f77 R15: 00007ffba12ee6d4 [ 1810.278842] Mem-Info: [ 1810.282537] active_anon:233059 inactive_anon:1090548 isolated_anon:0 [ 1810.282537] active_file:712 inactive_file:2074 isolated_file:0 [ 1810.282537] unevictable:21322 dirty:6 writeback:3 unstable:0 [ 1810.282537] slab_reclaimable:16247 slab_unreclaimable:119983 [ 1810.282537] mapped:59398 shmem:15557 pagetables:10539 bounce:0 [ 1810.282537] free:31523 free_pcp:455 free_cma:0 [ 1810.328092] Node 0 active_anon:903980kB inactive_anon:740812kB active_file:3132kB inactive_file:10364kB unevictable:84208kB isolated(anon):0kB isolated(file):0kB mapped:229148kB dirty:36kB writeback:12kB shmem:38928kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1810.362099] Node 1 active_anon:28256kB inactive_anon:3621380kB active_file:12kB inactive_file:0kB unevictable:1080kB isolated(anon):0kB isolated(file):0kB mapped:10008kB dirty:0kB writeback:0kB shmem:23300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1810.395410] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:220kB inactive_anon:1816kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1810.424958] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1810.436782] Node 0 DMA32 free:53068kB min:36272kB low:45340kB high:54408kB active_anon:903768kB inactive_anon:738996kB active_file:3200kB inactive_file:11404kB unevictable:84208kB writepending:64kB present:3129332kB managed:2621260kB mlocked:84208kB kernel_stack:9088kB pagetables:13168kB bounce:0kB free_pcp:460kB local_pcp:60kB free_cma:0kB [ 1810.468032] lowmem_reserve[]: 0 0 0 0 0 [ 1810.472876] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1810.499429] lowmem_reserve[]: 0 0 0 0 0 [ 1810.503678] Node 1 Normal free:59056kB min:53612kB low:67012kB high:80412kB active_anon:28252kB inactive_anon:3621380kB active_file:16kB inactive_file:0kB unevictable:1080kB writepending:0kB present:3932160kB managed:3870192kB mlocked:1080kB kernel_stack:7872kB pagetables:28944kB bounce:0kB free_pcp:1400kB local_pcp:684kB free_cma:0kB [ 1810.534250] lowmem_reserve[]: 0 0 0 0 0 [ 1810.538564] Node 0 DMA: 16*4kB (UME) 17*8kB (UM) 14*16kB (ME) 9*32kB (UME) 8*64kB (ME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10440kB [ 1810.554509] Node 0 DMA32: 1131*4kB (UMH) 735*8kB (UMEH) 423*16kB (UMEH) 268*32kB (UMEH) 38*64kB (UM) 7*128kB (UME) 3*256kB (UM) 15*512kB (ME) 10*1024kB (ME) 2*2048kB (M) 0*4096kB = 51860kB [ 1810.571802] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1810.582782] Node 1 Normal: 196*4kB (UME) 250*8kB (UME) 260*16kB (UME) 501*32kB (UME) 277*64kB (UME) 100*128kB (UME) 17*256kB (UME) 3*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 59392kB [ 1810.599894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1810.608989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1810.617842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 09:42:50 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:42:50 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x62, 0x0) 09:42:50 executing program 4: mlockall(0x1) clone(0x200c2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) [ 1810.626921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1810.635624] 21437 total pagecache pages [ 1810.639869] 0 pages in swap cache [ 1810.643448] Swap cache stats: add 0, delete 0, find 0/0 [ 1810.649013] Free swap = 0kB [ 1810.652204] Total swap = 0kB [ 1810.655347] 1965979 pages RAM [ 1810.660000] 0 pages HighMem/MovableOnly [ 1810.669317] 339053 pages reserved [ 1810.672949] 0 pages cma reserved 09:42:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000100)=0x28) [ 1810.680135] Out of memory: Kill process 10990 (syz-executor.4) score 1007 or sacrifice child [ 1810.704993] Killed process 10990 (syz-executor.4) total-vm:74968kB, anon-rss:18256kB, file-rss:34624kB, shmem-rss:0kB [ 1810.720011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:42:51 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x0, 0x0) 09:42:51 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1810.846470] oom_reaper: reaped process 10990 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1810.918928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:42:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x3) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xc, @raw_data="4abfcec75dfafe52de02460130e0006770935322115b95a24f8d1152487352f9efda541d8b90167b8cfcd7b64dd0c46fe770ca64bd9e62536399b064eb32c160c992ddf7add2913ad93899ca951393671c1cbdf6d964b533d42da7146bfb4a48dc05c42cd319c9b26611e00ccea7644ee270e76bd07c83f98bbd1b2e58c6c46d960fa6572b8efcc0f9ff059387085f6f79050d8d6a305a2bd39f6e9777c24a3b03e6df49f6bbf77aca5b2c09ea093725e35bfa5863ede8cdfdd2ded8f0bbc0ad81e7b46f224e8aa4"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:42:51 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1811.161074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1811.591078] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1811.614655] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1811.620698] CPU: 0 PID: 23730 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 1811.628587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1811.637938] Call Trace: [ 1811.640556] dump_stack+0x13e/0x194 [ 1811.644201] dump_header+0x178/0x6d4 [ 1811.647920] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1811.652946] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1811.658056] ? ___ratelimit+0x50/0x519 [ 1811.661954] oom_kill_process.cold+0x10/0xae3 [ 1811.666457] ? lock_downgrade+0x6e0/0x6e0 [ 1811.670616] out_of_memory+0x2d5/0x1110 [ 1811.674605] ? oom_killer_disable+0x1c0/0x1c0 [ 1811.679107] ? mutex_trylock+0x152/0x1a0 [ 1811.683179] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1811.688045] ? warn_alloc+0xf0/0xf0 [ 1811.691686] __alloc_pages_nodemask+0x5d3/0x700 [ 1811.696362] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1811.701379] ? lock_downgrade+0x6e0/0x6e0 [ 1811.705537] alloc_pages_current+0xe7/0x1e0 [ 1811.709864] __page_cache_alloc+0x245/0x3d0 [ 1811.714197] filemap_fault+0xc18/0x1c50 [ 1811.718187] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1811.722856] ? lock_acquire+0x170/0x3f0 [ 1811.726830] ? ext4_filemap_fault+0x7c/0xb0 [ 1811.731195] ext4_filemap_fault+0x84/0xb0 [ 1811.735329] __do_fault+0xfa/0x380 [ 1811.738899] __handle_mm_fault+0x22e9/0x3280 [ 1811.743304] ? copy_page_range+0x1d70/0x1d70 [ 1811.747699] ? find_held_lock+0x2d/0x110 [ 1811.751771] handle_mm_fault+0x288/0x7a0 [ 1811.755871] __get_user_pages+0x44d/0x11e0 [ 1811.760101] ? follow_page_mask+0x1580/0x1580 [ 1811.764591] ? lock_acquire+0x170/0x3f0 [ 1811.768588] ? __mm_populate+0x1e3/0x2c0 [ 1811.773010] populate_vma_page_range+0x17b/0x210 [ 1811.777778] __mm_populate+0x195/0x2c0 [ 1811.781664] ? populate_vma_page_range+0x210/0x210 [ 1811.786608] ? security_capable+0x88/0xb0 [ 1811.790773] SyS_mlockall+0x3f5/0x520 [ 1811.794575] ? SyS_munlock+0xf0/0xf0 [ 1811.798299] do_syscall_64+0x1d5/0x640 [ 1811.802293] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1811.807467] RIP: 0033:0x45c829 [ 1811.810652] RSP: 002b:00007f65489b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1811.818350] RAX: ffffffffffffffda RBX: 00000000004f5900 RCX: 000000000045c829 [ 1811.825621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1811.832913] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1811.840280] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1811.847570] R13: 0000000000000737 R14: 00000000004c9f77 R15: 00007f65489b46d4 [ 1811.864400] Mem-Info: [ 1811.882810] active_anon:233136 inactive_anon:1090484 isolated_anon:0 [ 1811.882810] active_file:771 inactive_file:2622 isolated_file:32 [ 1811.882810] unevictable:26045 dirty:5 writeback:6 unstable:0 [ 1811.882810] slab_reclaimable:16271 slab_unreclaimable:119295 [ 1811.882810] mapped:62022 shmem:15557 pagetables:10603 bounce:0 [ 1811.882810] free:26902 free_pcp:240 free_cma:0 [ 1811.937384] Node 0 active_anon:904064kB inactive_anon:753180kB active_file:3020kB inactive_file:3736kB unevictable:95780kB isolated(anon):0kB isolated(file):128kB mapped:234540kB dirty:116kB writeback:24kB shmem:38920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 491520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1811.970711] Node 1 active_anon:28480kB inactive_anon:3608756kB active_file:84kB inactive_file:36kB unevictable:8400kB isolated(anon):0kB isolated(file):0kB mapped:14148kB dirty:4kB writeback:0kB shmem:23308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1812.001467] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:220kB inactive_anon:1816kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1812.030287] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1812.035452] Node 0 DMA32 free:46968kB min:36272kB low:45340kB high:54408kB active_anon:903772kB inactive_anon:751364kB active_file:932kB inactive_file:800kB unevictable:95396kB writepending:148kB present:3129332kB managed:2621260kB mlocked:95396kB kernel_stack:9152kB pagetables:13300kB bounce:0kB free_pcp:744kB local_pcp:304kB free_cma:0kB [ 1812.068616] lowmem_reserve[]: 0 0 0 0 0 [ 1812.072734] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1812.100938] lowmem_reserve[]: 0 0 0 0 0 [ 1812.105033] Node 1 Normal free:62036kB min:53612kB low:67012kB high:80412kB active_anon:28388kB inactive_anon:3608756kB active_file:0kB inactive_file:4kB unevictable:8432kB writepending:4kB present:3932160kB managed:3870192kB mlocked:8432kB kernel_stack:7936kB pagetables:28880kB bounce:0kB free_pcp:860kB local_pcp:172kB free_cma:0kB [ 1812.135275] lowmem_reserve[]: 0 0 0 0 0 [ 1812.139385] Node 0 DMA: 16*4kB (UME) 17*8kB (UM) 14*16kB (ME) 9*32kB (UME) 8*64kB (ME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10440kB [ 1812.156049] Node 0 DMA32: 2173*4kB (UMH) 834*8kB (UMEH) 262*16kB (UMEH) 317*32kB (UMH) 38*64kB (UM) 6*128kB (UE) 2*256kB (UM) 5*512kB (ME) 10*1024kB (ME) 0*2048kB 0*4096kB = 46212kB [ 1812.173932] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1812.185397] Node 1 Normal: 115*4kB (UME) 105*8kB (UME) 120*16kB (UME) 504*32kB (UME) 277*64kB (UME) 109*128kB (UME) 29*256kB (UME) 3*512kB (ME) 2*1024kB (M) 0*2048kB 0*4096kB = 62036kB [ 1812.202919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1812.211947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1812.221553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1812.231697] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1812.240928] 20115 total pagecache pages [ 1812.244912] 0 pages in swap cache [ 1812.248500] Swap cache stats: add 0, delete 0, find 0/0 [ 1812.253888] Free swap = 0kB [ 1812.256994] Total swap = 0kB [ 1812.260025] 1965979 pages RAM [ 1812.263134] 0 pages HighMem/MovableOnly [ 1812.267238] 339053 pages reserved [ 1812.270701] 0 pages cma reserved [ 1812.274048] Out of memory: Kill process 23717 (syz-executor.2) score 1010 or sacrifice child 09:42:53 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x0, 0x0) 09:42:53 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) 09:42:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xb) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2) ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200202, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, 0x1, 0x2, 0x5, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_NAT={0x2c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffffffff}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000484}, 0x20000000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000100)={0x0, 0x351d, 0x2021}) 09:42:53 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) gettid() ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r0, 0xc) 09:42:54 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) 09:42:54 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x0, 0x0) 09:42:55 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000100)) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r2, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r2, 0xc) fremovexattr(r3, &(0x7f0000000140)=@random={'system.', '#vmnet1#%eth1\x00'}) 09:42:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x101083, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) write(0xffffffffffffffff, &(0x7f00000001c0)="686f094781a4299e10b5a2514b1ea4ae1205f8fb55a713408fa0d1c1be9e187edb191d", 0x23) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x9, 0x6, 0x1, 0x200, 0x16, "9ee8961e1c4368a4ab5c3f81baa2f504da91f2"}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000), 0x0, 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000140)={0x9e0000, 0x165c2ed1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x9909dc, 0xfffffffe, [], @value64}}) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000180)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) preadv(r3, &(0x7f0000000500)=[{&(0x7f0000000580)=""/185, 0xb9}, {&(0x7f00000001c0)}, {&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000000400)=""/218, 0xda}], 0x4, 0xba3a) socket$inet6_tcp(0xa, 0x1, 0x0) 09:42:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000080)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xc) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) bind$vsock_dgram(r3, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) 09:42:56 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) 09:42:56 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r1 = semget$private(0x0, 0x4, 0x6) semctl$SEM_STAT_ANY(r1, 0x0, 0x14, &(0x7f0000000100)=""/131) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r2, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r2, 0xc) 09:42:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0xfffffff8, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}}, 0x108) 09:42:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r0, &(0x7f0000002680)=[{0x0, 0x2d, 0x0, 0x0, &(0x7f0000001540)=[@rights={{0x18, 0x1, 0x1, [r0]}}], 0x18}], 0x4924924924922a7, 0x0) 09:42:57 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:42:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@shortname_mixed='shortname=mixed'}, {@shortname_winnt='shortname=winnt'}], [{@appraise_type='appraise_type=imasig'}]}) 09:42:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x408600, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x9, 0xe7, 0x9, 0x90}, {0xfff, 0x81, 0x20, 0x80000001}]}, 0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x2) 09:42:58 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x9}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20004085) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r3 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r3, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r3, 0xc) [ 1817.674363] FAT-fs (loop5): Unrecognized mount option "appraise_type=imasig" or missing value 09:42:58 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r3}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r3, 0xd3f}, 0xc) write(0xffffffffffffffff, &(0x7f0000000340)="6e75dfb0642db87393653ad25bef4dbbcf10a5da3fb29d6adb687756b0675724a398eefb2525f5136501cfaf9f", 0x2d) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r4 = gettid() write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f00000003c0)={0x3, 0x8}) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) [ 1817.744981] FAT-fs (loop5): Unrecognized mount option "appraise_type=imasig" or missing value 09:42:58 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:42:58 executing program 5: r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307a60a055627a688fb5e0400000002c48b41f6057b513c2705007600363900000000000000000004", 0x2a}], 0x4, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pause() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) creat(0x0, 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) 09:42:58 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:42:58 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0xa8e82, 0x0) r3 = getpid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000180)={0x40, 0x6, 0x0, 0x401, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000001c0)={r7}) fcntl$lock(r2, 0x5, &(0x7f0000000080)={0x2, 0x5, 0x3, 0x1, r3}) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000100)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xbd, @null, @rose={'rose', 0x0}, 0x7, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 09:42:58 executing program 1: r0 = socket(0x0, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:42:58 executing program 1: r0 = socket(0x0, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1818.138730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:42:58 executing program 1: r0 = socket(0x0, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1818.708458] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 1819.160211] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1819.213924] CPU: 1 PID: 23890 Comm: systemd-udevd Not tainted 4.14.177-syzkaller #0 [ 1819.221748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1819.231107] Call Trace: [ 1819.233714] dump_stack+0x13e/0x194 [ 1819.237614] dump_header+0x178/0x6d4 [ 1819.241341] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1819.246357] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1819.251489] ? ___ratelimit+0x50/0x519 [ 1819.255386] oom_kill_process.cold+0x10/0xae3 [ 1819.259983] ? lock_downgrade+0x6e0/0x6e0 [ 1819.264236] out_of_memory+0x2d5/0x1110 [ 1819.268268] ? oom_killer_disable+0x1c0/0x1c0 [ 1819.273490] ? mutex_trylock+0x152/0x1a0 [ 1819.277560] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1819.282422] ? warn_alloc+0xf0/0xf0 [ 1819.286053] ? find_held_lock+0x2d/0x110 [ 1819.290117] ? fs_reclaim_acquire+0x10/0x10 [ 1819.294549] __alloc_pages_nodemask+0x5d3/0x700 [ 1819.299397] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1819.304239] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1819.309257] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1819.314288] ? cache_grow_begin+0x32d/0x410 [ 1819.318612] cache_grow_begin+0x7b/0x410 [ 1819.322707] fallback_alloc+0x205/0x2b0 [ 1819.326690] kmem_cache_alloc+0x1ea/0x770 [ 1819.330849] getname_flags+0xc8/0x560 [ 1819.334658] do_sys_open+0x1c4/0x3f0 [ 1819.338377] ? filp_open+0x60/0x60 [ 1819.341923] ? do_syscall_64+0x4c/0x640 [ 1819.345908] ? do_sys_open+0x3f0/0x3f0 [ 1819.349799] do_syscall_64+0x1d5/0x640 [ 1819.353712] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1819.358912] RIP: 0033:0x7f42eb84e840 [ 1819.362618] RSP: 002b:00007ffcc0b70738 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1819.370353] RAX: ffffffffffffffda RBX: 0000557c74fcc3e8 RCX: 00007f42eb84e840 [ 1819.377632] RDX: 0000000000000000 RSI: 0000000000080101 RDI: 0000557c74fcc3e8 [ 1819.384910] RBP: 0000557c75ceda78 R08: 0000000000000020 R09: 0000000000000018 [ 1819.392205] R10: 00007f42eb5882aa R11: 0000000000000246 R12: 0000557c74fcc3e6 [ 1819.399475] R13: 0000000000000000 R14: 0000000000000003 R15: 000000000000000e [ 1820.991067] Mem-Info: [ 1820.993528] active_anon:233589 inactive_anon:1090484 isolated_anon:0 [ 1820.993528] active_file:36 inactive_file:15 isolated_file:0 [ 1820.993528] unevictable:31373 dirty:0 writeback:0 unstable:0 [ 1820.993528] slab_reclaimable:16269 slab_unreclaimable:118872 [ 1820.993528] mapped:62210 shmem:15557 pagetables:10635 bounce:0 [ 1820.993528] free:25039 free_pcp:11 free_cma:0 [ 1821.247035] Node 0 active_anon:903752kB inactive_anon:773196kB active_file:7968kB inactive_file:6888kB unevictable:75140kB isolated(anon):0kB isolated(file):128kB mapped:232628kB dirty:8kB writeback:0kB shmem:38924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 489472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 09:43:01 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$setregs(0xd, r0, 0x0, 0x0) [ 1821.367578] Node 1 active_anon:28356kB inactive_anon:3615884kB active_file:4kB inactive_file:28kB unevictable:64kB isolated(anon):0kB isolated(file):0kB mapped:10040kB dirty:0kB writeback:0kB shmem:23304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1821.414191] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:220kB inactive_anon:1832kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1821.442491] lowmem_reserve[]: 0 2557 2557 2557 2557 09:43:01 executing program 1: r0 = socket(0x10, 0x0, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:43:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x612e02, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:43:01 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000100)={0x2, 0x0, 0x7, 0xb2, r1}) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r2, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) gettid() shmctl$SHM_UNLOCK(r2, 0xc) 09:43:01 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000340)=0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) 09:43:01 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 1821.448326] Node 0 DMA32 free:57044kB min:36272kB low:45340kB high:54408kB active_anon:903532kB inactive_anon:751424kB active_file:17792kB inactive_file:7584kB unevictable:70164kB writepending:8kB present:3129332kB managed:2621260kB mlocked:69896kB kernel_stack:9056kB pagetables:13420kB bounce:0kB free_pcp:788kB local_pcp:148kB free_cma:0kB 09:43:01 executing program 1: r0 = socket(0x10, 0x0, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1821.558827] lowmem_reserve[]: 0 0 0 0 0 09:43:01 executing program 1: r0 = socket(0x10, 0x0, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1821.579410] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1821.614705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.692543] lowmem_reserve[]: 0 0 0 0 0 09:43:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1821.712743] Node 1 Normal free:66692kB min:53612kB low:67012kB high:80412kB active_anon:28352kB inactive_anon:3608656kB active_file:8kB inactive_file:0kB unevictable:96kB writepending:0kB present:3932160kB managed:3870192kB mlocked:484kB kernel_stack:7936kB pagetables:28868kB bounce:0kB free_pcp:1424kB local_pcp:700kB free_cma:0kB [ 1821.824631] lowmem_reserve[]: 0 0 0 0 0 [ 1821.840309] Node 0 DMA: 8*4kB (UM) 15*8kB (UM) 14*16kB (ME) 8*32kB (ME) 9*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10424kB [ 1821.898827] Node 0 DMA32: 835*4kB (UM) 143*8kB (UM) 221*16kB (UME) 457*32kB (UME) 74*64kB (U) 22*128kB (UME) 3*256kB (UM) 2*512kB (ME) 4*1024kB (ME) 0*2048kB 0*4096kB = 36084kB 09:43:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1821.972428] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1822.026786] Node 1 Normal: 4*4kB (M) 26*8kB (UME) 10*16kB (M) 277*32kB (UM) 291*64kB (UME) 119*128kB (UME) 29*256kB (UME) 3*512kB (ME) 2*1024kB (M) 0*2048kB 0*4096kB = 54112kB [ 1822.047773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1822.060619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1822.072519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1822.083511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1822.097323] 20186 total pagecache pages [ 1822.103339] 0 pages in swap cache [ 1822.109107] Swap cache stats: add 0, delete 0, find 0/0 [ 1822.115759] Free swap = 0kB [ 1822.120301] Total swap = 0kB [ 1822.124206] 1965979 pages RAM [ 1822.134692] 0 pages HighMem/MovableOnly [ 1822.144143] 339053 pages reserved [ 1822.157694] 0 pages cma reserved [ 1822.188130] Out of memory: Kill process 23863 (syz-executor.2) score 1008 or sacrifice child [ 1822.935252] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1823.070910] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1823.117481] CPU: 0 PID: 6345 Comm: syz-fuzzer Not tainted 4.14.177-syzkaller #0 [ 1823.124968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1823.134454] Call Trace: [ 1823.137231] dump_stack+0x13e/0x194 [ 1823.140866] dump_header+0x178/0x6d4 [ 1823.144581] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1823.149610] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1823.154716] ? ___ratelimit+0x50/0x519 [ 1823.158628] oom_kill_process.cold+0x10/0xae3 [ 1823.163132] ? lock_downgrade+0x6e0/0x6e0 [ 1823.167283] out_of_memory+0x2d5/0x1110 [ 1823.171267] ? oom_killer_disable+0x1c0/0x1c0 [ 1823.175759] ? mutex_trylock+0x152/0x1a0 [ 1823.179836] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1823.184691] ? warn_alloc+0xf0/0xf0 [ 1823.188334] __alloc_pages_nodemask+0x5d3/0x700 [ 1823.193011] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1823.198026] ? lock_downgrade+0x6e0/0x6e0 [ 1823.202180] alloc_pages_current+0xe7/0x1e0 [ 1823.206508] __page_cache_alloc+0x245/0x3d0 [ 1823.210864] filemap_fault+0xc18/0x1c50 [ 1823.214846] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1823.219513] ? lock_acquire+0x170/0x3f0 [ 1823.223482] ? ext4_filemap_fault+0x7c/0xb0 [ 1823.227809] ext4_filemap_fault+0x84/0xb0 [ 1823.231963] __do_fault+0xfa/0x380 [ 1823.235502] __handle_mm_fault+0x22e9/0x3280 [ 1823.239928] ? copy_page_range+0x1d70/0x1d70 [ 1823.244339] ? find_held_lock+0x2d/0x110 [ 1823.248411] handle_mm_fault+0x288/0x7a0 [ 1823.252820] __do_page_fault+0x4bc/0xb40 [ 1823.256882] ? vmalloc_fault+0xdf0/0xdf0 [ 1823.260943] ? do_page_fault+0x60/0x4f2 [ 1823.264912] ? page_fault+0x2f/0x50 [ 1823.268542] page_fault+0x45/0x50 [ 1823.272166] RIP: 0005:0x200 [ 1823.275088] RSP: 376f48e3:000000c420039750 EFLAGS: 1b612dc0e09 [ 1824.252959] Mem-Info: [ 1824.301957] active_anon:233224 inactive_anon:1090500 isolated_anon:0 [ 1824.301957] active_file:60 inactive_file:0 isolated_file:0 [ 1824.301957] unevictable:32541 dirty:0 writeback:0 unstable:0 [ 1824.301957] slab_reclaimable:16278 slab_unreclaimable:118146 [ 1824.301957] mapped:63336 shmem:15557 pagetables:10681 bounce:0 [ 1824.301957] free:25051 free_pcp:55 free_cma:0 [ 1824.432557] Node 0 active_anon:904308kB inactive_anon:753244kB active_file:116kB inactive_file:4kB unevictable:118284kB isolated(anon):0kB isolated(file):0kB mapped:237212kB dirty:0kB writeback:0kB shmem:38920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 489472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1824.525171] Node 1 active_anon:28588kB inactive_anon:3608756kB active_file:8kB inactive_file:24kB unevictable:11880kB isolated(anon):0kB isolated(file):0kB mapped:16132kB dirty:0kB writeback:0kB shmem:23308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1824.753466] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:220kB inactive_anon:1816kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1824.990808] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1824.995897] Node 0 DMA32 free:36204kB min:36272kB low:45340kB high:54408kB active_anon:904088kB inactive_anon:751428kB active_file:92kB inactive_file:4kB unevictable:118256kB writepending:0kB present:3129332kB managed:2621260kB mlocked:118256kB kernel_stack:9216kB pagetables:13652kB bounce:0kB free_pcp:360kB local_pcp:124kB free_cma:0kB [ 1825.045979] lowmem_reserve[]: 0 0 0 0 0 [ 1825.046003] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1825.046022] lowmem_reserve[]: 0 0 0 0 0 [ 1825.046043] Node 1 Normal free:53556kB min:53612kB low:67012kB high:80412kB active_anon:28588kB inactive_anon:3608756kB active_file:108kB inactive_file:24kB unevictable:11880kB writepending:0kB present:3932160kB managed:3870192kB mlocked:11880kB kernel_stack:7936kB pagetables:29028kB bounce:0kB free_pcp:212kB local_pcp:48kB free_cma:0kB [ 1825.046063] lowmem_reserve[]: 0 0 0 0 0 [ 1825.046084] Node 0 DMA: 8*4kB (UM) 18*8kB (UM) 14*16kB (ME) 8*32kB (ME) 9*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10448kB [ 1825.046166] Node 0 DMA32: 875*4kB (UE) 198*8kB (UME) 287*16kB (UM) 484*32kB (UME) 87*64kB (UM) 15*128kB (UME) 2*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 0*2048kB 0*4096kB = 36236kB [ 1825.046245] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1825.046296] Node 1 Normal: 31*4kB (UM) 7*8kB (UM) 14*16kB (UME) 271*32kB (UME) 286*64kB (UME) 119*128kB (UME) 29*256kB (UME) 3*512kB (ME) 2*1024kB (M) 0*2048kB 0*4096kB = 53620kB [ 1825.046379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1825.046386] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1825.046392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1825.046398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1825.046402] 21728 total pagecache pages [ 1825.046414] 0 pages in swap cache [ 1825.046419] Swap cache stats: add 0, delete 0, find 0/0 [ 1825.046423] Free swap = 0kB [ 1825.046426] Total swap = 0kB [ 1825.046433] 1965979 pages RAM [ 1825.046436] 0 pages HighMem/MovableOnly [ 1825.046440] 339053 pages reserved [ 1825.046444] 0 pages cma reserved [ 1825.046451] Out of memory: Kill process 23898 (syz-executor.2) score 1009 or sacrifice child [ 1825.046478] Killed process 23904 (syz-executor.2) total-vm:74968kB, anon-rss:18024kB, file-rss:47720kB, shmem-rss:0kB [ 1825.085873] oom_reaper: reaped process 23904 (syz-executor.2), now anon-rss:18016kB, file-rss:13880kB, shmem-rss:0kB [ 1825.118836] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1825.118853] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1825.118875] CPU: 1 PID: 6357 Comm: syz-fuzzer Not tainted 4.14.177-syzkaller #0 [ 1825.118880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1825.118883] Call Trace: [ 1825.118905] dump_stack+0x13e/0x194 [ 1825.118919] dump_header+0x178/0x6d4 [ 1825.118930] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1825.118940] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1825.118949] ? ___ratelimit+0x50/0x519 [ 1825.118961] oom_kill_process.cold+0x10/0xae3 [ 1825.118970] ? lock_acquire+0x170/0x3f0 [ 1825.118979] ? lock_downgrade+0x6e0/0x6e0 [ 1825.118993] out_of_memory+0x2d5/0x1110 [ 1825.119008] ? oom_killer_disable+0x1c0/0x1c0 [ 1825.119017] ? mutex_trylock+0x152/0x1a0 [ 1825.119029] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1825.119053] ? warn_alloc+0xf0/0xf0 [ 1825.119076] __alloc_pages_nodemask+0x5d3/0x700 [ 1825.119087] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1825.119095] ? lock_downgrade+0x6e0/0x6e0 [ 1825.119113] alloc_pages_current+0xe7/0x1e0 [ 1825.119124] __page_cache_alloc+0x245/0x3d0 [ 1825.119135] filemap_fault+0xc18/0x1c50 [ 1825.119154] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1825.119171] ? lock_acquire+0x170/0x3f0 [ 1825.119181] ? ext4_filemap_fault+0x7c/0xb0 [ 1825.119198] ext4_filemap_fault+0x84/0xb0 [ 1825.119206] __do_fault+0xfa/0x380 [ 1825.119216] __handle_mm_fault+0x22e9/0x3280 [ 1825.119228] ? copy_page_range+0x1d70/0x1d70 [ 1825.119238] ? find_held_lock+0x2d/0x110 [ 1825.119260] handle_mm_fault+0x288/0x7a0 [ 1825.119271] __do_page_fault+0x4bc/0xb40 [ 1825.119283] ? vmalloc_fault+0xdf0/0xdf0 [ 1825.119292] ? do_page_fault+0x60/0x4f2 [ 1825.119301] ? page_fault+0x2f/0x50 [ 1825.119309] page_fault+0x45/0x50 [ 1825.119317] RIP: 0020:0x13 [ 1825.119322] RSP: 0000:000000c420369e20 EFLAGS: c42717d6b8 [ 1825.119339] Mem-Info: [ 1825.119359] active_anon:233224 inactive_anon:1090500 isolated_anon:0 [ 1825.119359] active_file:16 inactive_file:1 isolated_file:0 [ 1825.119359] unevictable:32544 dirty:0 writeback:0 unstable:0 [ 1825.119359] slab_reclaimable:16278 slab_unreclaimable:118145 [ 1825.119359] mapped:63339 shmem:15557 pagetables:10681 bounce:0 [ 1825.119359] free:25052 free_pcp:144 free_cma:0 [ 1825.119375] Node 0 active_anon:904308kB inactive_anon:753244kB active_file:20kB inactive_file:20kB unevictable:118296kB isolated(anon):0kB isolated(file):0kB mapped:237224kB dirty:0kB writeback:0kB shmem:38920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 489472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1825.119391] Node 1 active_anon:28588kB inactive_anon:3608756kB active_file:44kB inactive_file:0kB unevictable:11880kB isolated(anon):0kB isolated(file):0kB mapped:16132kB dirty:0kB writeback:0kB shmem:23308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1825.119394] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:220kB inactive_anon:1816kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1825.119414] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1825.119436] Node 0 DMA32 free:36204kB min:36272kB low:45340kB high:54408kB active_anon:904088kB inactive_anon:751428kB active_file:20kB inactive_file:20kB unevictable:118268kB writepending:0kB present:3129332kB managed:2621260kB mlocked:118268kB kernel_stack:9216kB pagetables:13652kB bounce:0kB free_pcp:356kB local_pcp:236kB free_cma:0kB [ 1825.119456] lowmem_reserve[]: 0 0 0 0 0 [ 1825.119477] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1825.119495] lowmem_reserve[]: 0 0 0 0 0 [ 1825.119516] Node 1 Normal free:53556kB min:53612kB low:67012kB high:80412kB active_anon:28588kB inactive_anon:3608756kB active_file:44kB inactive_file:0kB unevictable:11880kB writepending:0kB present:3932160kB managed:3870192kB mlocked:11880kB kernel_stack:7936kB pagetables:29028kB bounce:0kB free_pcp:220kB local_pcp:164kB free_cma:0kB [ 1825.119536] lowmem_reserve[]: 0 0 0 0 0 [ 1825.119557] Node 0 DMA: 8*4kB (UM) 18*8kB (UM) 14*16kB (ME) 8*32kB (ME) 9*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10448kB [ 1825.119639] Node 0 DMA32: 875*4kB (UE) 198*8kB (UME) 287*16kB (UM) 484*32kB (UME) 87*64kB (UM) 15*128kB (UME) 2*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 0*2048kB 0*4096kB = 36236kB [ 1825.119717] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1825.119767] Node 1 Normal: 31*4kB (UM) 7*8kB (UM) 14*16kB (UME) 271*32kB (UME) 286*64kB (UME) 119*128kB (UME) 29*256kB (UME) 3*512kB (ME) 2*1024kB (M) 0*2048kB 0*4096kB = 53620kB [ 1825.119850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1825.119856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1825.119862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1825.119869] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1825.119872] 21731 total pagecache pages [ 1825.119884] 0 pages in swap cache [ 1825.119890] Swap cache stats: add 0, delete 0, find 0/0 [ 1825.119893] Free swap = 0kB [ 1825.119897] Total swap = 0kB [ 1825.119902] 1965979 pages RAM [ 1825.119906] 0 pages HighMem/MovableOnly [ 1825.119910] 339053 pages reserved [ 1825.119913] 0 pages cma reserved [ 1825.119920] Out of memory: Kill process 23899 (syz-executor.4) score 1008 or sacrifice child [ 1825.119942] Killed process 23901 (syz-executor.4) total-vm:75092kB, anon-rss:18028kB, file-rss:42860kB, shmem-rss:0kB 09:43:06 executing program 5: io_setup(0x4333, &(0x7f0000000180)) 09:43:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1825.207781] oom_reaper: reaped process 23901 (syz-executor.4), now anon-rss:18012kB, file-rss:11952kB, shmem-rss:0kB [ 1825.248021] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1826.055563] systemd-udevd cpuset=/ mems_allowed=0-1 09:43:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) 09:43:06 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1007, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) dup3(r3, r1, 0x0) socket$netlink(0x10, 0x3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0xe4cf95bb60253587}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc) r9 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r9, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc) 09:43:06 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340)="0bde3494db5752d8c4b532caab4055c98d70cb5f80e43946147c90fb896af2ec5563d08b9811d8c9942ff8313aec6d9abe2592fe8df0d57eba709ea0f12ec36831db1c7a9bfab2e13a22c02f615a255c718ea71c15e576bf1c3a185d000000000000000009a780a2e457bd90ce851c800d452ed1b235440dd9a2081f582f059da8", 0x81) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) fsetxattr$security_evm(r0, &(0x7f0000000400)='security.evm\x00', &(0x7f0000000440)=@sha1={0x1, "5749c6ab61920347f04f07dd6401795c58b9af3f"}, 0x15, 0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) mprotect(&(0x7f0000542000/0x4000)=nil, 0x4000, 0x0) [ 1826.074545] CPU: 1 PID: 23890 Comm: systemd-udevd Not tainted 4.14.177-syzkaller #0 [ 1826.082374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1826.091731] Call Trace: [ 1826.094328] dump_stack+0x13e/0x194 [ 1826.097972] dump_header+0x178/0x6d4 [ 1826.101696] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1826.106718] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1826.111847] ? ___ratelimit+0x50/0x519 [ 1826.115753] oom_kill_process.cold+0x10/0xae3 [ 1826.120253] ? lock_acquire+0x170/0x3f0 09:43:06 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/262, 0xf7}, {&(0x7f00000001c0)=""/41, 0xfffffff5}], 0x2, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000280)=""/74, 0x48}], 0x2, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x80, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) keyctl$setperm(0x5, 0x0, 0x202002) keyctl$chown(0x4, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setgroups(0x1, &(0x7f00000000c0)=[r4]) write$P9_RGETATTR(r2, &(0x7f0000000440)={0xa0, 0x19, 0x1, {0x10b0, {0x20, 0x2, 0x3}, 0x0, 0x0, r4, 0x6, 0x4, 0x100000001, 0x3, 0x6, 0x80000000, 0x4, 0x3, 0x10000000000000, 0x3ba4, 0x100000001, 0x7fffffff, 0x101, 0xff, 0xac1}}, 0xa0) shmctl$SHM_UNLOCK(r1, 0xc) [ 1826.124234] ? lock_downgrade+0x6e0/0x6e0 [ 1826.128420] out_of_memory+0x2d5/0x1110 [ 1826.132429] ? oom_killer_disable+0x1c0/0x1c0 [ 1826.136955] ? mutex_trylock+0x152/0x1a0 [ 1826.141033] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1826.146330] ? warn_alloc+0xf0/0xf0 [ 1826.149975] __alloc_pages_nodemask+0x5d3/0x700 [ 1826.154644] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1826.159656] ? lock_downgrade+0x6e0/0x6e0 [ 1826.163902] alloc_pages_current+0xe7/0x1e0 [ 1826.168224] __page_cache_alloc+0x245/0x3d0 [ 1826.172542] filemap_fault+0xc18/0x1c50 [ 1826.176529] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1826.181196] ? lock_acquire+0x170/0x3f0 [ 1826.185169] ? ext4_filemap_fault+0x7c/0xb0 [ 1826.189502] ext4_filemap_fault+0x84/0xb0 [ 1826.193652] __do_fault+0xfa/0x380 [ 1826.197349] __handle_mm_fault+0x22e9/0x3280 [ 1826.201767] ? copy_page_range+0x1d70/0x1d70 [ 1826.206181] ? find_held_lock+0x2d/0x110 [ 1826.210250] handle_mm_fault+0x288/0x7a0 [ 1826.214328] __do_page_fault+0x4bc/0xb40 [ 1826.218388] ? vmalloc_fault+0xdf0/0xdf0 [ 1826.222444] ? do_page_fault+0x60/0x4f2 [ 1826.226412] ? page_fault+0x2f/0x50 [ 1826.230033] page_fault+0x45/0x50 [ 1826.233478] RIP: 0000:0x7 [ 1826.236220] RSP: 74fcc3e8:0000557c75ceda78 EFLAGS: 557c74fcc3e6 [ 1826.277539] Mem-Info: [ 1826.295416] audit: type=1400 audit(1588412586.606:47): avc: denied { audit_read } for pid=23940 comm="syz-executor.0" capability=37 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 1826.320777] active_anon:233432 inactive_anon:1090484 isolated_anon:0 09:43:06 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$nbd(r0, &(0x7f0000000040)=ANY=[], 0xbb) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syncfs(r3) [ 1826.320777] active_file:2914 inactive_file:3765 isolated_file:32 [ 1826.320777] unevictable:18908 dirty:28 writeback:0 unstable:0 [ 1826.320777] slab_reclaimable:16267 slab_unreclaimable:119261 [ 1826.320777] mapped:61405 shmem:15557 pagetables:10739 bounce:0 [ 1826.320777] free:30238 free_pcp:328 free_cma:0 09:43:06 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1826.443863] audit: type=1804 audit(1588412586.756:48): pid=23964 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir464077142/syzkaller.3cWHO0/596/bus" dev="sda1" ino=16067 res=1 [ 1826.467216] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:43:06 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0xee00, r3, 0x0) setresgid(0x0, 0x0, 0x0) [ 1826.551728] Node 0 active_anon:905068kB inactive_anon:753180kB active_file:7776kB inactive_file:6664kB unevictable:98332kB isolated(anon):0kB isolated(file):128kB mapped:237732kB dirty:112kB writeback:0kB shmem:38920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 489472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 09:43:06 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1826.562766] audit: type=1804 audit(1588412586.816:49): pid=23964 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir464077142/syzkaller.3cWHO0/596/bus" dev="sda1" ino=16067 res=1 [ 1826.632580] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:43:07 executing program 5: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 09:43:07 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1826.760353] Node 1 active_anon:28660kB inactive_anon:3608756kB active_file:108kB inactive_file:108kB unevictable:9700kB isolated(anon):0kB isolated(file):0kB mapped:10388kB dirty:0kB writeback:0kB shmem:23308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1826.794218] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1826.964543] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:220kB inactive_anon:1816kB active_file:0kB inactive_file:0kB unevictable:384kB writepending:0kB present:15992kB managed:15908kB mlocked:384kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1827.058927] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1827.072706] Node 0 DMA32 free:36644kB min:36272kB low:45340kB high:54408kB active_anon:904976kB inactive_anon:751364kB active_file:348kB inactive_file:324kB unevictable:113704kB writepending:472kB present:3129332kB managed:2621260kB mlocked:113704kB kernel_stack:9408kB pagetables:13892kB bounce:0kB free_pcp:864kB local_pcp:696kB free_cma:0kB [ 1827.109934] lowmem_reserve[]: 0 0 0 0 0 [ 1827.113962] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1827.139805] lowmem_reserve[]: 0 0 0 0 0 [ 1827.143823] Node 1 Normal free:53268kB min:53612kB low:67012kB high:80412kB active_anon:28568kB inactive_anon:3608756kB active_file:8kB inactive_file:12kB unevictable:10544kB writepending:0kB present:3932160kB managed:3870192kB mlocked:10544kB kernel_stack:7936kB pagetables:28928kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 1827.173821] lowmem_reserve[]: 0 0 0 0 0 [ 1827.178532] Node 0 DMA: 6*4kB (UM) 11*8kB (U) 8*16kB (UE) 11*32kB (UME) 10*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10448kB [ 1827.197140] Node 0 DMA32: 874*4kB (UE) 279*8kB (UME) 75*16kB (UM) 501*32kB (UME) 103*64kB (UM) 24*128kB (UME) 4*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 0*2048kB 0*4096kB = 36720kB [ 1827.213480] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1827.224293] Node 1 Normal: 68*4kB (UM) 5*8kB (UM) 8*16kB (UME) 205*32kB (UME) 301*64kB (UME) 125*128kB (UME) 29*256kB (UME) 3*512kB (ME) 2*1024kB (M) 0*2048kB 0*4096kB = 53272kB [ 1827.241325] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1827.250247] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1827.258969] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1827.267918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1827.276802] 20459 total pagecache pages [ 1827.280784] 0 pages in swap cache [ 1827.284263] Swap cache stats: add 0, delete 0, find 0/0 [ 1827.289686] Free swap = 0kB [ 1827.292711] Total swap = 0kB [ 1827.295717] 1965979 pages RAM [ 1827.298893] 0 pages HighMem/MovableOnly [ 1827.302872] 339053 pages reserved [ 1827.306716] 0 pages cma reserved [ 1827.310088] Out of memory: Kill process 11031 (syz-executor.4) score 1007 or sacrifice child [ 1827.318950] Killed process 11031 (syz-executor.4) total-vm:74968kB, anon-rss:18256kB, file-rss:34624kB, shmem-rss:0kB [ 1827.395621] oom_reaper: reaped process 11031 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 09:43:07 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:43:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:43:07 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x8, &(0x7f0000ffe000/0x1000)=nil, 0x3}) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40800) 09:43:07 executing program 5: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) [ 1827.592924] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1827.617788] Unknown ioctl 1076388891 [ 1827.658941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1827.747429] Unknown ioctl 1076388891 09:43:09 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:43:09 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x8}], 0x1) open(0x0, 0x0, 0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 09:43:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000080)) 09:43:09 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:43:09 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000001380)) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r2 = gettid() write$UHID_INPUT(r0, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) 09:43:09 executing program 4: mlockall(0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmget(0x1, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f00000001c0)=0x1) fsetxattr(r3, &(0x7f0000000140)=@known='system.posix_acl_default\x00', &(0x7f0000000180)='ppp0vboxnet1\'proc\x00', 0x12, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) [ 1829.217723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:43:09 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x50000, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000002300), 0x0, 0x0) 09:43:09 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100), 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1829.271588] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1829.379992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:43:09 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100), 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1829.518191] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1830.161455] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1830.258025] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1830.272507] CPU: 1 PID: 24028 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 1830.280445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1830.289800] Call Trace: [ 1830.292514] dump_stack+0x13e/0x194 [ 1830.296269] dump_header+0x178/0x6d4 [ 1830.299987] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1830.305135] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1830.310264] ? ___ratelimit+0x50/0x519 [ 1830.314172] oom_kill_process.cold+0x10/0xae3 [ 1830.318685] ? lock_downgrade+0x6e0/0x6e0 [ 1830.322847] out_of_memory+0x2d5/0x1110 [ 1830.326841] ? oom_killer_disable+0x1c0/0x1c0 [ 1830.331343] ? mutex_trylock+0x152/0x1a0 [ 1830.335413] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1830.340275] ? warn_alloc+0xf0/0xf0 [ 1830.343932] __alloc_pages_nodemask+0x5d3/0x700 [ 1830.348660] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1830.353687] ? find_held_lock+0x2d/0x110 [ 1830.357774] alloc_pages_vma+0xc2/0x4a0 [ 1830.361764] __handle_mm_fault+0x17b6/0x3280 [ 1830.366192] ? copy_page_range+0x1d70/0x1d70 [ 1830.370605] ? find_held_lock+0x2d/0x110 [ 1830.374743] handle_mm_fault+0x288/0x7a0 [ 1830.378920] __get_user_pages+0x44d/0x11e0 [ 1830.383168] ? follow_page_mask+0x1580/0x1580 [ 1830.387675] ? lock_acquire+0x170/0x3f0 [ 1830.391655] ? __mm_populate+0x1e3/0x2c0 [ 1830.395738] populate_vma_page_range+0x17b/0x210 [ 1830.400506] __mm_populate+0x195/0x2c0 [ 1830.404401] ? populate_vma_page_range+0x210/0x210 [ 1830.409334] ? security_capable+0x88/0xb0 [ 1830.413490] SyS_mlockall+0x3f5/0x520 [ 1830.417288] ? SyS_munlock+0xf0/0xf0 [ 1830.421007] do_syscall_64+0x1d5/0x640 [ 1830.424906] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1830.430095] RIP: 0033:0x45c829 [ 1830.433285] RSP: 002b:00007f65489b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1830.440997] RAX: ffffffffffffffda RBX: 00000000004f5900 RCX: 000000000045c829 [ 1830.448271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1830.455557] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1830.462833] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1830.470103] R13: 0000000000000737 R14: 00000000004c9f77 R15: 00007f65489b46d4 [ 1830.550313] Mem-Info: [ 1830.552833] active_anon:233573 inactive_anon:1093371 isolated_anon:0 [ 1830.552833] active_file:23 inactive_file:31 isolated_file:9 [ 1830.552833] unevictable:28105 dirty:2 writeback:0 unstable:0 [ 1830.552833] slab_reclaimable:16246 slab_unreclaimable:119295 [ 1830.552833] mapped:63101 shmem:18428 pagetables:10764 bounce:0 [ 1830.552833] free:25043 free_pcp:0 free_cma:0 [ 1830.586772] Node 0 active_anon:905140kB inactive_anon:772212kB active_file:88kB inactive_file:140kB unevictable:97904kB isolated(anon):0kB isolated(file):36kB mapped:237580kB dirty:8kB writeback:0kB shmem:46344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1830.615764] Node 1 active_anon:29152kB inactive_anon:3601272kB active_file:4kB inactive_file:0kB unevictable:14516kB isolated(anon):0kB isolated(file):0kB mapped:14824kB dirty:0kB writeback:0kB shmem:27368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1830.644243] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:220kB inactive_anon:1908kB active_file:0kB inactive_file:0kB unevictable:856kB writepending:0kB present:15992kB managed:15908kB mlocked:856kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1830.671880] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1830.676997] Node 0 DMA32 free:36192kB min:36272kB low:45340kB high:54408kB active_anon:904920kB inactive_anon:770304kB active_file:104kB inactive_file:56kB unevictable:97048kB writepending:0kB present:3129332kB managed:2621260kB mlocked:97048kB kernel_stack:9312kB pagetables:13856kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1830.706822] lowmem_reserve[]: 0 0 0 0 0 [ 1830.710796] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1830.736388] lowmem_reserve[]: 0 0 0 0 0 [ 1830.740384] Node 1 Normal free:53536kB min:53612kB low:67012kB high:80412kB active_anon:29152kB inactive_anon:3601272kB active_file:4kB inactive_file:0kB unevictable:14516kB writepending:0kB present:3932160kB managed:3870192kB mlocked:14516kB kernel_stack:8160kB pagetables:29156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1830.770396] lowmem_reserve[]: 0 0 0 0 0 [ 1830.774539] Node 0 DMA: 7*4kB (UM) 14*8kB (U) 16*16kB (UME) 10*32kB (UE) 6*64kB (UME) 7*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10444kB [ 1830.790095] Node 0 DMA32: 949*4kB (UME) 29*8kB (UE) 70*16kB (UM) 510*32kB (UME) 142*64kB (UM) 27*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 36316kB [ 1830.805515] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1830.816295] Node 1 Normal: 32*4kB (UM) 64*8kB (UM) 4*16kB (ME) 113*32kB (UME) 239*64kB (UME) 138*128kB (UME) 40*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 53664kB [ 1830.836189] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1830.845014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1830.853636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1830.862547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1830.871146] 21503 total pagecache pages [ 1830.875136] 0 pages in swap cache [ 1830.878696] Swap cache stats: add 0, delete 0, find 0/0 [ 1830.884073] Free swap = 0kB [ 1830.887314] Total swap = 0kB [ 1830.890849] 1965979 pages RAM [ 1830.894048] 0 pages HighMem/MovableOnly [ 1830.898395] 339053 pages reserved [ 1830.901833] 0 pages cma reserved [ 1830.905181] Out of memory: Kill process 24022 (syz-executor.2) score 1007 or sacrifice child [ 1830.913818] Killed process 24041 (syz-executor.2) total-vm:74968kB, anon-rss:18024kB, file-rss:34816kB, shmem-rss:0kB [ 1830.943814] oom_reaper: reaped process 24041 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1831.047790] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1831.062766] in:imklog cpuset=/ mems_allowed=0-1 [ 1831.067498] CPU: 1 PID: 6031 Comm: in:imklog Not tainted 4.14.177-syzkaller #0 [ 1831.074859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1831.084217] Call Trace: [ 1831.086850] dump_stack+0x13e/0x194 [ 1831.090471] dump_header+0x178/0x6d4 [ 1831.094170] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1831.099197] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1831.104295] ? ___ratelimit+0x50/0x519 [ 1831.108188] oom_kill_process.cold+0x10/0xae3 [ 1831.112670] ? lock_acquire+0x170/0x3f0 [ 1831.116639] ? lock_downgrade+0x6e0/0x6e0 [ 1831.120781] out_of_memory+0x2d5/0x1110 [ 1831.124742] ? oom_killer_disable+0x1c0/0x1c0 [ 1831.129224] ? mutex_trylock+0x152/0x1a0 [ 1831.133284] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1831.138227] ? warn_alloc+0xf0/0xf0 [ 1831.141858] __alloc_pages_nodemask+0x5d3/0x700 [ 1831.146513] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1831.151524] ? lock_downgrade+0x6e0/0x6e0 [ 1831.155709] alloc_pages_current+0xe7/0x1e0 [ 1831.160040] __page_cache_alloc+0x245/0x3d0 [ 1831.164364] filemap_fault+0xc18/0x1c50 [ 1831.168328] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1831.172982] ? lock_acquire+0x170/0x3f0 [ 1831.176948] ? ext4_filemap_fault+0x7c/0xb0 [ 1831.181267] ext4_filemap_fault+0x84/0xb0 [ 1831.185411] __do_fault+0xfa/0x380 [ 1831.188935] __handle_mm_fault+0x22e9/0x3280 [ 1831.193415] ? copy_page_range+0x1d70/0x1d70 [ 1831.197818] ? find_held_lock+0x2d/0x110 [ 1831.201877] handle_mm_fault+0x288/0x7a0 [ 1831.205933] __do_page_fault+0x4bc/0xb40 [ 1831.210012] ? vmalloc_fault+0xdf0/0xdf0 [ 1831.214064] ? do_page_fault+0x60/0x4f2 [ 1831.218034] ? page_fault+0x2f/0x50 [ 1831.221672] page_fault+0x45/0x50 [ 1831.225124] RIP: 1fa0:0x1f9f [ 1831.228172] RSP: 0000:000055b4964d09d0 EFLAGS: 7fe0266afda0 [ 1832.160675] Mem-Info: [ 1832.201149] active_anon:233570 inactive_anon:1093355 isolated_anon:0 [ 1832.201149] active_file:31 inactive_file:3 isolated_file:0 [ 1832.201149] unevictable:28162 dirty:0 writeback:0 unstable:0 [ 1832.201149] slab_reclaimable:16246 slab_unreclaimable:119289 [ 1832.201149] mapped:63155 shmem:18428 pagetables:10732 bounce:0 [ 1832.201149] free:25017 free_pcp:6 free_cma:0 [ 1832.515537] Node 0 active_anon:905136kB inactive_anon:772204kB active_file:128kB inactive_file:0kB unevictable:98132kB isolated(anon):0kB isolated(file):0kB mapped:237792kB dirty:0kB writeback:0kB shmem:46344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1832.775599] Node 1 active_anon:29144kB inactive_anon:3601216kB active_file:4kB inactive_file:4kB unevictable:14616kB isolated(anon):0kB isolated(file):0kB mapped:14828kB dirty:0kB writeback:0kB shmem:27368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1833.034594] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:220kB inactive_anon:1908kB active_file:0kB inactive_file:0kB unevictable:856kB writepending:0kB present:15992kB managed:15908kB mlocked:856kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1833.144618] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1833.155545] Node 0 DMA32 free:35956kB min:36272kB low:45340kB high:54408kB active_anon:904920kB inactive_anon:774428kB active_file:636kB inactive_file:2904kB unevictable:89908kB writepending:0kB present:3129332kB managed:2621260kB mlocked:89748kB kernel_stack:9216kB pagetables:13728kB bounce:0kB free_pcp:176kB local_pcp:0kB free_cma:0kB 09:43:13 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100), 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1833.307347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1833.328897] lowmem_reserve[]: 0 0 0 0 0 [ 1833.335304] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 09:43:13 executing program 5: 09:43:13 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{0x0}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:43:13 executing program 5: 09:43:13 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400)="be6a66bbe474ba61c23d965eafc39042dff747757ffeb935af25c3166bc586715a53f64a2efaebbf125783acfd541896e6a0ce91f0327c8fc7f089304d375e70cc720f70020db464bb5b2ca86c2a1abed3", 0x51}, 0x68) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000100000000000000010000000500070000000000"], 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000380)={0x0, 0xfffffffffffffe25, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0x14}}, 0x4048804) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468000000b31800027f1400010000000000", @ANYRES32=0x0, @ANYBLOB="00f8b200080800001028e6c467144d2fa813"], 0x48}}, 0x48010) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{}, {{}, {0xf0ffff}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}]}]}}]}, 0x58}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1481965cd0c40000", @ANYRES16=r4, @ANYBLOB="080027bd7000fedbdf2501000000"], 0x14}}, 0x40000) [ 1833.486494] lowmem_reserve[]: 0 0 0 0 0 [ 1833.490529] Node 1 Normal free:64348kB min:53612kB low:67012kB high:80412kB active_anon:29144kB inactive_anon:3605832kB active_file:196kB inactive_file:188kB unevictable:352kB writepending:0kB present:3932160kB managed:3870192kB mlocked:896kB kernel_stack:8064kB pagetables:29156kB bounce:0kB free_pcp:1380kB local_pcp:740kB free_cma:0kB 09:43:13 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0xffffffff}, 0x0, 0x0, 0x0, 0x9, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000100)={0x1f, 0x7, 0x6, 0x200008, 0x5, 0x5, 0x22d0}) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) io_setup(0x1000, &(0x7f0000000240)=0x0) io_submit(r4, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) io_destroy(r4) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:43:13 executing program 5: [ 1833.554020] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1833.566193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:43:13 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$setregs(0xf, r1, 0x401, &(0x7f0000000340)="d5be084ffa4c0cb915f74aba21eba4906106f3a7b4ad21d17aaad2b6548a097c3c6976de92f9f7593138cfebe7b3ce117f63b9cdb87ea4e1aae14f5aae7c60") pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) 09:43:13 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{0x0}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:43:14 executing program 5: [ 1833.679220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1833.690870] lowmem_reserve[]: 0 0 0 0 0 [ 1833.693294] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1833.711562] Node 0 DMA: 6*4kB (UM) 1*8kB (U) 14*16kB (UME) 12*32kB (UME) 8*64kB (UME) 7*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10496kB 09:43:14 executing program 5: 09:43:14 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{0x0}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1833.799664] Node 0 DMA32: 1013*4kB (UME) 786*8kB (UME) 324*16kB (UM) 425*32kB (UME) 153*64kB (UM) 27*128kB (UM) 6*256kB (UM) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 44932kB 09:43:14 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x24, 0x1800) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) 09:43:14 executing program 5: [ 1833.878643] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1833.896154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1833.906302] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:43:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)) [ 1833.942407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1833.950789] Node 1 Normal: 1*4kB (M) 449*8kB (U) 16*16kB (UE) 118*32kB (UME) 281*64kB (UME) 143*128kB (UME) 40*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 60300kB 09:43:14 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1834.003771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.040594] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 09:43:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) [ 1834.062222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.098058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1834.115513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.131869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.145043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1834.155744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1834.165435] 19749 total pagecache pages [ 1834.171025] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1834.174653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.180747] 0 pages in swap cache [ 1834.192022] Swap cache stats: add 0, delete 0, find 0/0 [ 1834.198289] Free swap = 0kB [ 1834.203188] Total swap = 0kB [ 1834.217922] 1965979 pages RAM [ 1834.221578] bridge2: port 1(syz_tun) entered blocking state [ 1834.221940] 0 pages HighMem/MovableOnly [ 1834.233587] 339053 pages reserved [ 1834.237950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.247289] bridge2: port 1(syz_tun) entered disabled state [ 1834.253348] 0 pages cma reserved [ 1834.254290] device syz_tun entered promiscuous mode [ 1834.290901] Out of memory: Kill process 24022 (syz-executor.2) score 1007 or sacrifice child [ 1834.326041] device bridge_slave_0 left promiscuous mode [ 1834.331675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1834.808082] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1834.905252] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1834.973083] CPU: 0 PID: 24015 Comm: systemd-udevd Not tainted 4.14.177-syzkaller #0 [ 1834.980917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1834.990280] Call Trace: [ 1834.992915] dump_stack+0x13e/0x194 [ 1834.996564] dump_header+0x178/0x6d4 [ 1835.000293] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1835.005320] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1835.010445] ? ___ratelimit+0x50/0x519 [ 1835.014346] oom_kill_process.cold+0x10/0xae3 [ 1835.018876] ? lock_downgrade+0x6e0/0x6e0 [ 1835.023038] out_of_memory+0x2d5/0x1110 [ 1835.027022] ? oom_killer_disable+0x1c0/0x1c0 [ 1835.031527] ? mutex_trylock+0x152/0x1a0 [ 1835.035600] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1835.040468] ? warn_alloc+0xf0/0xf0 [ 1835.044120] __alloc_pages_nodemask+0x5d3/0x700 [ 1835.048798] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1835.054436] ? lock_downgrade+0x6e0/0x6e0 [ 1835.058603] alloc_pages_current+0xe7/0x1e0 [ 1835.062933] __page_cache_alloc+0x245/0x3d0 [ 1835.067290] filemap_fault+0xc18/0x1c50 [ 1835.071285] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1835.076066] ? lock_acquire+0x170/0x3f0 [ 1835.080064] ? ext4_filemap_fault+0x7c/0xb0 [ 1835.084423] ext4_filemap_fault+0x84/0xb0 [ 1835.088582] __do_fault+0xfa/0x380 [ 1835.092148] __handle_mm_fault+0x22e9/0x3280 [ 1835.096573] ? copy_page_range+0x1d70/0x1d70 [ 1835.100991] ? find_held_lock+0x2d/0x110 [ 1835.105067] handle_mm_fault+0x288/0x7a0 [ 1835.109141] __do_page_fault+0x4bc/0xb40 [ 1835.113321] ? vmalloc_fault+0xdf0/0xdf0 [ 1835.117385] ? do_page_fault+0x60/0x4f2 [ 1835.121368] ? page_fault+0x2f/0x50 [ 1835.125002] page_fault+0x45/0x50 [ 1835.128577] RIP: ec5f12cf: (null) [ 1835.132809] RSP: c0b70130:0000000000000000 EFLAGS: 7ffcc0b70f10 [ 1836.355381] Mem-Info: [ 1836.415979] active_anon:233513 inactive_anon:1090484 isolated_anon:0 [ 1836.415979] active_file:25 inactive_file:0 isolated_file:0 [ 1836.415979] unevictable:31390 dirty:0 writeback:0 unstable:0 [ 1836.415979] slab_reclaimable:16237 slab_unreclaimable:119078 [ 1836.415979] mapped:62227 shmem:15558 pagetables:10737 bounce:0 [ 1836.415979] free:24985 free_pcp:32 free_cma:0 [ 1836.748535] Node 0 active_anon:905312kB inactive_anon:764768kB active_file:64kB inactive_file:0kB unevictable:100832kB isolated(anon):0kB isolated(file):0kB mapped:232708kB dirty:0kB writeback:0kB shmem:38912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1837.033691] Node 1 active_anon:28740kB inactive_anon:3597168kB active_file:0kB inactive_file:8kB unevictable:24728kB isolated(anon):0kB isolated(file):0kB mapped:16200kB dirty:0kB writeback:0kB shmem:23320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1837.259761] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:224kB inactive_anon:1816kB active_file:12kB inactive_file:12kB unevictable:852kB writepending:0kB present:15992kB managed:15908kB mlocked:852kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1837.526967] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1837.532061] Node 0 DMA32 free:36172kB min:36272kB low:45340kB high:54408kB active_anon:905088kB inactive_anon:762952kB active_file:48kB inactive_file:20kB unevictable:99980kB writepending:0kB present:3129332kB managed:2621260kB mlocked:99980kB kernel_stack:9344kB pagetables:14072kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1837.629539] lowmem_reserve[]: 0 0 0 0 0 [ 1837.633584] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1837.870604] lowmem_reserve[]: 0 0 0 0 0 [ 1837.874652] Node 1 Normal free:53600kB min:53612kB low:67012kB high:80412kB active_anon:28740kB inactive_anon:3597168kB active_file:4kB inactive_file:4kB unevictable:24728kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24728kB kernel_stack:8000kB pagetables:28828kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1838.183188] lowmem_reserve[]: 0 0 0 0 0 [ 1838.211288] bridge2: port 2(bridge_slave_0) entered blocking state [ 1838.221847] bridge2: port 2(bridge_slave_0) entered disabled state [ 1838.235037] Node 0 DMA: 5*4kB (M) 1*8kB (U) 17*16kB (UME) 13*32kB (UME) 7*64kB (UME) 7*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10508kB [ 1838.243943] device bridge_slave_0 entered promiscuous mode [ 1838.265608] Node 0 DMA32: 826*4kB (UE) 125*8kB (UME) 179*16kB (UM) 404*32kB (UME) 156*64kB (UM) 27*128kB (UM) 6*256kB (UM) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 36096kB [ 1838.283094] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1838.376602] Node 1 Normal: 140*4kB (UM) 727*8kB (UM) 307*16kB (UME) 173*32kB (UME) 241*64kB (UME) 91*128kB (UME) 40*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 60280kB [ 1838.457097] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1838.537419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1838.537427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 09:43:18 executing program 4: mlockall(0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)=0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r2, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r2, 0xc) 09:43:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0) 09:43:18 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:43:18 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8, 0x58283) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x7}, 0x16, 0x1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r3, 0xffff8001}, 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={r3, 0xea, "d5d7f37e4263b6ac72231ea89f66bed6517cd89370f9136356ddf09ec03fc7ccbca6b534f57421e4c899a8802ceb41345b51aa25cd03d46cce1b6348b3787efafbd6eb62e0529276a8a0cf5c7484bf6c3f511651213bb748cd3b58ec96d24ec9fbf6f7add0e7ac40135a3fe325e8a3bd57d6749feb1d518b8b0e5f6ccf6c96f53f63c518e001c5ab710aa91bc8f26100fcef41436654a18b3df74e20df705e4b9fc639b7121c60419ae4dc64c8b537eac2175630b842ef2e96b3df7bff550013d00735000e744644f60c2b42a9c29cb95dad8563aa7188317b22214fc262fc57a2432e910b4d0c7229f3"}, &(0x7f0000000200)=0xf2) 09:43:18 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000340)) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) [ 1838.537432] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1838.537436] 20715 total pagecache pages [ 1838.537444] 0 pages in swap cache [ 1838.537448] Swap cache stats: add 0, delete 0, find 0/0 09:43:19 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x54}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000002) 09:43:19 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 1838.537451] Free swap = 0kB [ 1838.537454] Total swap = 0kB [ 1838.537460] 1965979 pages RAM [ 1838.537463] 0 pages HighMem/MovableOnly [ 1838.537465] 339053 pages reserved [ 1838.537468] 0 pages cma reserved [ 1838.537474] Out of memory: Kill process 24052 (syz-executor.4) score 1008 or sacrifice child 09:43:19 executing program 5: request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0) [ 1838.671034] net_ratelimit: 187 callbacks suppressed [ 1838.671039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1838.681317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:43:19 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000001c0)={0x28}, 0x28) 09:43:19 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)={0xcefa, 0xc, 0x4, 0x4000, 0x6, {r2, r3/1000+60000}, {0x1, 0xc, 0x1, 0x9, 0xfc, 0x4, "4ad3af68"}, 0x101, 0x1, @planes=&(0x7f0000000080)={0x4, 0xffffffff, @fd=r4, 0xe1}, 0x6, 0x0, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x34}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x60000}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1f}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000}, 0x4004080) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x8, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x40001) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 1839.467897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1840.168602] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1840.273763] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1840.318020] CPU: 1 PID: 24106 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 1840.325954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1840.335324] Call Trace: [ 1840.337928] dump_stack+0x13e/0x194 [ 1840.341565] dump_header+0x178/0x6d4 [ 1840.345371] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1840.350400] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1840.355522] ? ___ratelimit+0x50/0x519 [ 1840.359881] oom_kill_process.cold+0x10/0xae3 [ 1840.364392] ? lock_acquire+0x170/0x3f0 [ 1840.368487] ? lock_downgrade+0x6e0/0x6e0 [ 1840.372651] out_of_memory+0x2d5/0x1110 [ 1840.376638] ? oom_killer_disable+0x1c0/0x1c0 [ 1840.381159] ? mutex_trylock+0x152/0x1a0 [ 1840.385232] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1840.390105] ? warn_alloc+0xf0/0xf0 [ 1840.393754] __alloc_pages_nodemask+0x5d3/0x700 [ 1840.398448] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1840.403500] ? lock_downgrade+0x6e0/0x6e0 [ 1840.407694] alloc_pages_current+0xe7/0x1e0 [ 1840.412023] __page_cache_alloc+0x245/0x3d0 [ 1840.416614] filemap_fault+0xc18/0x1c50 [ 1840.420610] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1840.425284] ? lock_acquire+0x170/0x3f0 [ 1840.429264] ? ext4_filemap_fault+0x7c/0xb0 [ 1840.433607] ext4_filemap_fault+0x84/0xb0 [ 1840.438006] __do_fault+0xfa/0x380 [ 1840.441558] __handle_mm_fault+0x22e9/0x3280 [ 1840.445983] ? copy_page_range+0x1d70/0x1d70 [ 1840.450442] ? find_held_lock+0x2d/0x110 [ 1840.454532] handle_mm_fault+0x288/0x7a0 [ 1840.458627] __get_user_pages+0x44d/0x11e0 [ 1840.462890] ? follow_page_mask+0x1580/0x1580 [ 1840.467410] ? lock_acquire+0x170/0x3f0 [ 1840.471394] ? __mm_populate+0x1e3/0x2c0 [ 1840.475471] populate_vma_page_range+0x17b/0x210 [ 1840.480263] __mm_populate+0x195/0x2c0 [ 1840.484177] ? populate_vma_page_range+0x210/0x210 [ 1840.489202] ? security_capable+0x88/0xb0 [ 1840.493370] SyS_mlockall+0x3f5/0x520 [ 1840.497174] ? SyS_munlock+0xf0/0xf0 [ 1840.500894] do_syscall_64+0x1d5/0x640 [ 1840.504795] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1840.509991] RIP: 0033:0x45c829 [ 1840.513182] RSP: 002b:00007ffba12edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1840.520895] RAX: ffffffffffffffda RBX: 00000000004f5900 RCX: 000000000045c829 [ 1840.528222] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1840.535496] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1840.542767] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1840.550684] R13: 0000000000000737 R14: 00000000004c9f77 R15: 00007ffba12ee6d4 [ 1841.116343] Mem-Info: [ 1841.124526] active_anon:233525 inactive_anon:1090504 isolated_anon:0 [ 1841.124526] active_file:25 inactive_file:63 isolated_file:32 [ 1841.124526] unevictable:31412 dirty:0 writeback:0 unstable:0 [ 1841.124526] slab_reclaimable:16222 slab_unreclaimable:118899 [ 1841.124526] mapped:62331 shmem:15557 pagetables:10773 bounce:0 [ 1841.124526] free:24864 free_pcp:42 free_cma:0 [ 1841.161125] Node 0 active_anon:905204kB inactive_anon:764772kB active_file:12kB inactive_file:104kB unevictable:99732kB isolated(anon):0kB isolated(file):128kB mapped:230264kB dirty:0kB writeback:0kB shmem:38908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1841.189908] Node 1 active_anon:28896kB inactive_anon:3597244kB active_file:0kB inactive_file:32kB unevictable:25916kB isolated(anon):0kB isolated(file):0kB mapped:18960kB dirty:0kB writeback:0kB shmem:23320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1841.285989] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:220kB inactive_anon:1816kB active_file:0kB inactive_file:4kB unevictable:756kB writepending:0kB present:15992kB managed:15908kB mlocked:756kB kernel_stack:0kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1841.474367] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1841.513855] Node 0 DMA32 free:36236kB min:36272kB low:45340kB high:54408kB active_anon:904984kB inactive_anon:762956kB active_file:84kB inactive_file:60kB unevictable:98976kB writepending:0kB present:3129332kB managed:2621260kB mlocked:98976kB kernel_stack:9472kB pagetables:13908kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1841.575017] lowmem_reserve[]: 0 0 0 0 0 [ 1841.632189] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1841.669358] lowmem_reserve[]: 0 0 0 0 0 [ 1841.675081] Node 1 Normal free:53180kB min:53612kB low:67012kB high:80412kB active_anon:28896kB inactive_anon:3597244kB active_file:0kB inactive_file:32kB unevictable:25916kB writepending:0kB present:3932160kB managed:3870192kB mlocked:25916kB kernel_stack:8096kB pagetables:29132kB bounce:0kB free_pcp:76kB local_pcp:0kB free_cma:0kB [ 1841.715462] lowmem_reserve[]: 0 0 0 0 0 [ 1841.732586] Node 0 DMA: 11*4kB (UM) 12*8kB (UM) 3*16kB (ME) 11*32kB (UME) 9*64kB (UME) 7*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10460kB [ 1841.750777] Node 0 DMA32: 1318*4kB (UME) 441*8kB (UME) 156*16kB (M) 328*32kB (UME) 159*64kB (UM) 27*128kB (UM) 6*256kB (UM) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 37984kB [ 1841.767277] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1841.778305] Node 1 Normal: 204*4kB (UM) 634*8kB (UM) 455*16kB (UME) 190*32kB (UME) 251*64kB (UME) 85*128kB (UE) 40*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 62576kB [ 1841.868754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1841.896199] audit: type=1800 audit(1588412602.206:50): pid=24122 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.5" name="file0" dev="sda1" ino=15892 res=0 [ 1841.902412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 09:43:22 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:43:22 executing program 5: [ 1841.953701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1841.962877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1841.973056] 20145 total pagecache pages [ 1841.977799] 0 pages in swap cache [ 1841.981262] Swap cache stats: add 0, delete 0, find 0/0 [ 1841.988384] Free swap = 0kB [ 1841.991416] Total swap = 0kB [ 1841.994435] 1965979 pages RAM 09:43:22 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0xfffffffffffffdf0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000000c7, 0x0) [ 1842.002665] 0 pages HighMem/MovableOnly [ 1842.007965] 339053 pages reserved [ 1842.014909] 0 pages cma reserved [ 1842.024466] Out of memory: Kill process 24094 (syz-executor.4) score 1008 or sacrifice child 09:43:22 executing program 5: 09:43:22 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYBLOB="090000800009000005000000000100000000005de465e0f67e689800000000"]) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) socket$isdn(0x22, 0x3, 0x10) shmctl$SHM_UNLOCK(r1, 0xc) 09:43:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0xd0, r2, 0x703, 0x0, 0x2, {0x4}, [@ETHTOOL_A_STRSET_STRINGSETS={0xbc, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0xd0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468000000b31800027f1400010000000000", @ANYRES32=0x0, @ANYBLOB="00f8b200080800001028e6c467144d2fa813"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{}, {{}, {0xf0ffff}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}]}]}}]}, 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x101000, 0x0) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000100)={0x7fffffff, 0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1842.384577] Unknown ioctl 1074835116 09:43:23 executing program 5: 09:43:23 executing program 0: socket$l2tp(0x2, 0x2, 0x73) 09:43:23 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, 0x0, 0x0) 09:43:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:43:23 executing program 5: 09:43:23 executing program 5: 09:43:23 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x13) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:43:23 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000114010025bd7000fedbdf250800013089f464000800010002000000080001000000000008000d000100000008000100010000000800010000000000080001000200000008000100000000000800010002000000df486b9cbe10c0fb0d80a7b4ac32ee0672e10d041ab34b3b312a81b970c7ac2d22c42fed0b062e60eeecce69e15f65a167649e1fbdb693049b9d1bbad9174b2ac28a7c5298eaca2503cd5786da70980d706a8aba2783cb0bf4cd44f4cc156aa006c9358f40dcda4786581c41d49437a424fea9ad3369bfb63416d56738a299037f9031a5b5c0"], 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x800) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000240)={0x1e, 0x37, 0x1, {0x0, 0x10000, 0x100000000, r2}}, 0x1e) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) 09:43:23 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) sendto$inet(r2, &(0x7f0000000100)="0c268a927f1f65885848955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0x3d, 0x20c49e, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) ptrace$peek(0x2, r3, &(0x7f0000000080)) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 09:43:23 executing program 5: [ 1843.591808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.610460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:43:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1843.636448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.664361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.691378] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) [ 1843.705845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.720195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.743390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.775164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.801787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.814863] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) 09:43:24 executing program 5: [ 1843.861569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.898086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.930885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.613325] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1844.733720] systemd-journal cpuset=/ mems_allowed=0-1 [ 1844.769942] CPU: 1 PID: 3632 Comm: systemd-journal Not tainted 4.14.177-syzkaller #0 [ 1844.777866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1844.787325] Call Trace: [ 1844.789926] dump_stack+0x13e/0x194 [ 1844.793560] dump_header+0x178/0x6d4 [ 1844.797275] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1844.802290] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1844.807390] ? ___ratelimit+0x50/0x519 [ 1844.811280] oom_kill_process.cold+0x10/0xae3 [ 1844.815785] ? lock_acquire+0x170/0x3f0 [ 1844.819765] ? lock_downgrade+0x6e0/0x6e0 [ 1844.823916] out_of_memory+0x2d5/0x1110 [ 1844.827898] ? oom_killer_disable+0x1c0/0x1c0 [ 1844.832395] ? mutex_trylock+0x152/0x1a0 [ 1844.836983] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1844.841844] ? warn_alloc+0xf0/0xf0 [ 1844.845491] __alloc_pages_nodemask+0x5d3/0x700 [ 1844.850165] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1844.855195] ? lock_downgrade+0x6e0/0x6e0 [ 1844.859443] alloc_pages_current+0xe7/0x1e0 [ 1844.863769] __page_cache_alloc+0x245/0x3d0 [ 1844.868092] filemap_fault+0xc18/0x1c50 [ 1844.872084] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1844.877365] ? lock_acquire+0x170/0x3f0 [ 1844.881338] ? ext4_filemap_fault+0x7c/0xb0 [ 1844.885665] ext4_filemap_fault+0x84/0xb0 [ 1844.889815] __do_fault+0xfa/0x380 [ 1844.893359] __handle_mm_fault+0x22e9/0x3280 [ 1844.897773] ? copy_page_range+0x1d70/0x1d70 [ 1844.902193] ? find_held_lock+0x2d/0x110 [ 1844.906269] handle_mm_fault+0x288/0x7a0 [ 1844.910336] __do_page_fault+0x4bc/0xb40 [ 1844.914406] ? vmalloc_fault+0xdf0/0xdf0 [ 1844.918468] ? do_page_fault+0x60/0x4f2 [ 1844.922447] ? page_fault+0x2f/0x50 [ 1844.926087] page_fault+0x45/0x50 [ 1844.929537] RIP: 0001:0x1 [ 1844.932288] RSP: 7417c200:00007ffda0b7b040 EFLAGS: 7ffda0b7ae50 [ 1845.209281] Mem-Info: [ 1845.246015] active_anon:233122 inactive_anon:1090500 isolated_anon:0 [ 1845.246015] active_file:36 inactive_file:0 isolated_file:0 [ 1845.246015] unevictable:31238 dirty:0 writeback:0 unstable:0 [ 1845.246015] slab_reclaimable:16196 slab_unreclaimable:119845 [ 1845.246015] mapped:62117 shmem:15557 pagetables:10612 bounce:0 [ 1845.246015] free:24932 free_pcp:0 free_cma:0 [ 1845.312807] Node 0 active_anon:903544kB inactive_anon:764764kB active_file:4kB inactive_file:0kB unevictable:98840kB isolated(anon):0kB isolated(file):0kB mapped:231232kB dirty:0kB writeback:0kB shmem:38904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1845.490345] Node 1 active_anon:28944kB inactive_anon:3597236kB active_file:88kB inactive_file:60kB unevictable:26112kB isolated(anon):0kB isolated(file):0kB mapped:17236kB dirty:0kB writeback:0kB shmem:23324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1845.668109] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:228kB inactive_anon:1816kB active_file:0kB inactive_file:0kB unevictable:472kB writepending:0kB present:15992kB managed:15908kB mlocked:472kB kernel_stack:0kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1845.809964] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1845.815049] Node 0 DMA32 free:36164kB min:36272kB low:45340kB high:54408kB active_anon:903316kB inactive_anon:762948kB active_file:4kB inactive_file:24kB unevictable:98368kB writepending:0kB present:3129332kB managed:2621260kB mlocked:98368kB kernel_stack:9184kB pagetables:13256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1845.995606] lowmem_reserve[]: 0 0 0 0 0 [ 1846.016388] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1846.107653] lowmem_reserve[]: 0 0 0 0 0 [ 1846.111703] Node 1 Normal free:53436kB min:53612kB low:67012kB high:80412kB active_anon:28944kB inactive_anon:3597236kB active_file:40kB inactive_file:72kB unevictable:26164kB writepending:0kB present:3932160kB managed:3870192kB mlocked:26164kB kernel_stack:8032kB pagetables:29144kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1846.286881] lowmem_reserve[]: 0 0 0 0 0 [ 1846.290937] Node 0 DMA: 3*4kB (UM) 16*8kB (UM) 14*16kB (ME) 5*32kB (UME) 9*64kB (UME) 7*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10444kB [ 1846.369785] Node 0 DMA32: 1174*4kB (UME) 232*8kB (UME) 277*16kB (UM) 252*32kB (UME) 171*64kB (UM) 29*128kB (UM) 5*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36520kB [ 1846.466138] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1846.542800] Node 1 Normal: 130*4kB (UM) 29*8kB (UM) 377*16kB (UME) 160*32kB (UME) 238*64kB (UME) 85*128kB (UE) 37*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 53632kB [ 1846.612181] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1846.648084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1846.701698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 09:43:27 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x9, 0x1f, 0x1cf, &(0x7f0000000040)="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"}) 09:43:27 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, 0x0, 0x0) 09:43:27 executing program 5: [ 1846.743212] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1846.803091] 21048 total pagecache pages [ 1846.826916] 0 pages in swap cache [ 1846.830822] Swap cache stats: add 0, delete 0, find 0/0 [ 1846.837430] Free swap = 0kB [ 1846.840889] Total swap = 0kB [ 1846.853455] 1965979 pages RAM [ 1846.860107] 0 pages HighMem/MovableOnly [ 1846.870891] 339053 pages reserved 09:43:27 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000340)='syz1\x00') fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000380)=0x7) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) [ 1846.874860] 0 pages cma reserved [ 1846.882670] Out of memory: Kill process 24173 (syz-executor.2) score 1008 or sacrifice child 09:43:27 executing program 4: mlockall(0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044890}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3f, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:43:27 executing program 5: [ 1846.924658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:43:27 executing program 5: 09:43:27 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x600, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000100)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000127bd7000fedb1922f5f56cab3ab8df254b000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4044890}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newtfilter={0x25c, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x22c, 0x2, [@TCA_BASIC_EMATCHES={0x228, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x21c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x9c, 0x2, 0x0, 0x0, {{0x3a3, 0x0, 0x1}, "dab4d6877fc0ee4ecc2377885c473f9397c8ff31fb57214648c2bbd8c857df3d7380de598bf21c6531205ff194f987247df3ba0311e02db2695b5e0a4438ac979f330c62526301ffb4b9e3e3aaa6c463407b57e1a8542d3aee5d0121a197dfeb7d061574597b15e252f7b4cc3434038b95947ccd057966a28b5496380eab1f1466dd40d89ec06d5006500ec10a7266"}}, @TCF_EM_IPT={0x17c, 0x2, 0x0, 0x0, {{0x1f, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_DATA={0xc3, 0x5, "884b37a87ca91513edd13fdbb7ad4bc6d5f1bdee648ed493d3d8206a6ff02c1fb9fcfe4d4d3f9c89764758f4f61a090f0f9b5bf5e9ee12046323e5bc5bceaf00da1457baf329c2ee9685884a6eb36e8a13821a46a9c1896704d6946b021046bea59b458aec0fcd4cca045c0985adaf44bc7f308682bfad12f4901f7314e7be39ff9842dbdc29992599379ae4e284525a850f8e5c2645526624edb0eb0771a6efffef9773834ca463fe6f593e70c9f18a2a5f63e8dde55cff5b595c44b0f79d"}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_DATA={0x8f, 0x5, "95898b45dd5d039e6b00e59afa45f1d88dc62ec4ea6fd57b32ecb2ed87605ca9d8015443c8e4857204a01b7b6ca268441abd1c4025e985b2c63abcfd8633e74abe81774bb26be77451ef9569ec64dcada5f6915111542f7c7d770256713ee1ae6ae14283ef93348e86f6d324d0ee27ce9a614fff4a2b2020e60b7ba0ac87919d795caab01ff2e594250c2a"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x403}}]}]}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x329, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10000, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008080}, 0x85) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000400)=""/109) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 09:43:27 executing program 5: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r1 = semget$private(0x0, 0x4, 0x6) semctl$SEM_STAT_ANY(r1, 0x0, 0x14, &(0x7f0000000100)=""/131) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r2, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r2, 0xc) [ 1847.107422] selinux_nlmsg_perm: 5 callbacks suppressed [ 1847.107431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24222 comm=syz-executor.3 [ 1847.253660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24222 comm=syz-executor.3 [ 1847.762966] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1847.810219] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1847.815393] CPU: 0 PID: 24213 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 1847.823275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1847.832636] Call Trace: [ 1847.835239] dump_stack+0x13e/0x194 [ 1847.838882] dump_header+0x178/0x6d4 [ 1847.842614] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1847.847639] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1847.852747] ? ___ratelimit+0x50/0x519 [ 1847.856655] oom_kill_process.cold+0x10/0xae3 [ 1847.861186] ? lock_downgrade+0x6e0/0x6e0 [ 1847.865346] out_of_memory+0x2d5/0x1110 [ 1847.869332] ? oom_killer_disable+0x1c0/0x1c0 [ 1847.874030] ? mutex_trylock+0x152/0x1a0 [ 1847.878120] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1847.883017] ? warn_alloc+0xf0/0xf0 [ 1847.886716] __alloc_pages_nodemask+0x5d3/0x700 [ 1847.891410] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1847.896443] ? lock_downgrade+0x6e0/0x6e0 [ 1847.900607] alloc_pages_current+0xe7/0x1e0 [ 1847.904956] __page_cache_alloc+0x245/0x3d0 [ 1847.909316] filemap_fault+0xc18/0x1c50 [ 1847.913331] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1847.918007] ? lock_acquire+0x170/0x3f0 [ 1847.921989] ? ext4_filemap_fault+0x7c/0xb0 [ 1847.926324] ext4_filemap_fault+0x84/0xb0 [ 1847.930515] __do_fault+0xfa/0x380 [ 1847.934052] __handle_mm_fault+0x22e9/0x3280 [ 1847.938470] ? copy_page_range+0x1d70/0x1d70 [ 1847.942910] ? find_held_lock+0x2d/0x110 [ 1847.947108] handle_mm_fault+0x288/0x7a0 [ 1847.951198] __get_user_pages+0x44d/0x11e0 [ 1847.955451] ? follow_page_mask+0x1580/0x1580 [ 1847.959962] ? lock_acquire+0x170/0x3f0 [ 1847.963961] ? __mm_populate+0x1e3/0x2c0 [ 1847.968037] populate_vma_page_range+0x17b/0x210 [ 1847.972820] __mm_populate+0x195/0x2c0 [ 1847.976735] ? populate_vma_page_range+0x210/0x210 [ 1847.981676] ? security_capable+0x88/0xb0 [ 1847.985824] SyS_mlockall+0x3f5/0x520 [ 1847.989746] ? SyS_munlock+0xf0/0xf0 [ 1847.993575] do_syscall_64+0x1d5/0x640 [ 1847.997506] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1848.002681] RIP: 0033:0x45c829 [ 1848.005868] RSP: 002b:00007ffba12edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1848.013577] RAX: ffffffffffffffda RBX: 00000000004f5900 RCX: 000000000045c829 [ 1848.020850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1848.028100] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1848.035362] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1848.042615] R13: 0000000000000737 R14: 00000000004c9f77 R15: 00007ffba12ee6d4 [ 1848.065965] Mem-Info: [ 1848.068431] active_anon:233277 inactive_anon:1090484 isolated_anon:0 [ 1848.068431] active_file:17 inactive_file:18 isolated_file:0 [ 1848.068431] unevictable:30666 dirty:2 writeback:0 unstable:0 [ 1848.068431] slab_reclaimable:16176 slab_unreclaimable:120082 [ 1848.068431] mapped:60863 shmem:15557 pagetables:10708 bounce:0 [ 1848.068431] free:25030 free_pcp:60 free_cma:0 [ 1848.131080] Node 0 active_anon:904144kB inactive_anon:764760kB active_file:60kB inactive_file:64kB unevictable:97584kB isolated(anon):0kB isolated(file):0kB mapped:223500kB dirty:8kB writeback:0kB shmem:38904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1848.182706] Node 1 active_anon:28964kB inactive_anon:3597176kB active_file:8kB inactive_file:8kB unevictable:25084kB isolated(anon):0kB isolated(file):0kB mapped:19952kB dirty:0kB writeback:0kB shmem:23324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1848.393574] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:236kB inactive_anon:1816kB active_file:0kB inactive_file:0kB unevictable:332kB writepending:0kB present:15992kB managed:15908kB mlocked:332kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1848.620165] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1848.625269] Node 0 DMA32 free:36268kB min:36272kB low:45340kB high:54408kB active_anon:903908kB inactive_anon:762944kB active_file:192kB inactive_file:60kB unevictable:97276kB writepending:8kB present:3129332kB managed:2621260kB mlocked:97276kB kernel_stack:9376kB pagetables:13568kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1848.893428] lowmem_reserve[]: 0 0 0 0 0 [ 1848.909519] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1848.957681] lowmem_reserve[]: 0 0 0 0 0 [ 1848.961748] Node 1 Normal free:53608kB min:53612kB low:67012kB high:80412kB active_anon:28964kB inactive_anon:3597176kB active_file:8kB inactive_file:8kB unevictable:25084kB writepending:0kB present:3932160kB managed:3870192kB mlocked:25084kB kernel_stack:8160kB pagetables:29216kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1848.992448] lowmem_reserve[]: 0 0 0 0 0 [ 1849.001917] Node 0 DMA: 7*4kB (U) 6*8kB (UM) 16*16kB (ME) 8*32kB (ME) 8*64kB (UME) 7*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10444kB [ 1849.018318] Node 0 DMA32: 1166*4kB (UME) 123*8kB (UME) 343*16kB (UM) 241*32kB (UME) 169*64kB (UM) 32*128kB (UM) 6*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36832kB [ 1849.034809] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1849.045774] Node 1 Normal: 30*4kB (UM) 21*8kB (U) 356*16kB (UE) 150*32kB (UE) 234*64kB (UME) 96*128kB (UME) 38*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 53920kB [ 1849.062204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1849.071349] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1849.095974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1849.105887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1849.114508] 19278 total pagecache pages [ 1849.118784] 0 pages in swap cache [ 1849.122250] Swap cache stats: add 0, delete 0, find 0/0 [ 1849.127843] Free swap = 0kB [ 1849.130951] Total swap = 0kB [ 1849.133970] 1965979 pages RAM [ 1849.137116] 0 pages HighMem/MovableOnly [ 1849.141086] 339053 pages reserved [ 1849.144648] 0 pages cma reserved [ 1849.148054] Out of memory: Kill process 24210 (syz-executor.2) score 1007 or sacrifice child [ 1849.156754] Killed process 24220 (syz-executor.2) total-vm:74968kB, anon-rss:132kB, file-rss:34816kB, shmem-rss:0kB [ 1849.193700] oom_reaper: reaped process 24220 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1849.623376] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1849.713498] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1849.760723] CPU: 0 PID: 24207 Comm: syz-executor.0 Not tainted 4.14.177-syzkaller #0 [ 1849.768638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1849.778082] Call Trace: [ 1849.781115] dump_stack+0x13e/0x194 [ 1849.784749] dump_header+0x178/0x6d4 [ 1849.788463] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1849.793479] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1849.798588] ? ___ratelimit+0x50/0x519 [ 1849.802482] oom_kill_process.cold+0x10/0xae3 [ 1849.807015] ? lock_downgrade+0x6e0/0x6e0 [ 1849.811168] out_of_memory+0x2d5/0x1110 [ 1849.815161] ? oom_killer_disable+0x1c0/0x1c0 [ 1849.819664] ? mutex_trylock+0x152/0x1a0 [ 1849.823727] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1849.828582] ? warn_alloc+0xf0/0xf0 [ 1849.832225] __alloc_pages_nodemask+0x5d3/0x700 [ 1849.836898] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1849.842005] ? lock_downgrade+0x6e0/0x6e0 [ 1849.846162] alloc_pages_current+0xe7/0x1e0 [ 1849.850492] __page_cache_alloc+0x245/0x3d0 [ 1849.854814] filemap_fault+0xc18/0x1c50 [ 1849.858804] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1849.863475] ? lock_acquire+0x170/0x3f0 [ 1849.867799] ? ext4_filemap_fault+0x7c/0xb0 [ 1849.872133] ext4_filemap_fault+0x84/0xb0 [ 1849.876299] __do_fault+0xfa/0x380 [ 1849.879842] ? pte_offset_kernel+0x98/0xe0 [ 1849.884121] __handle_mm_fault+0x217b/0x3280 [ 1849.888538] ? copy_page_range+0x1d70/0x1d70 [ 1849.892961] ? find_held_lock+0x2d/0x110 [ 1849.897035] handle_mm_fault+0x288/0x7a0 [ 1849.901103] __do_page_fault+0x4bc/0xb40 [ 1849.905166] ? vmalloc_fault+0xdf0/0xdf0 [ 1849.909228] ? do_page_fault+0x60/0x4f2 [ 1849.913201] ? page_fault+0x2f/0x50 [ 1849.916834] page_fault+0x45/0x50 [ 1849.920290] RIP: 78c900:0x78bf00 09:43:30 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, 0x0, 0x0) 09:43:30 executing program 5: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r1 = semget$private(0x0, 0x4, 0x6) semctl$SEM_STAT_ANY(r1, 0x0, 0x14, &(0x7f0000000100)=""/131) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r2, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r2, 0xc) 09:43:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) open(&(0x7f0000000080)='./file0\x00', 0x10800, 0x10) [ 1849.923654] RSP: 31422670:0000001b31422674 EFLAGS: 1b31422678 [ 1850.670125] Mem-Info: [ 1850.686717] active_anon:233412 inactive_anon:1090483 isolated_anon:0 [ 1850.686717] active_file:557 inactive_file:646 isolated_file:42 [ 1850.686717] unevictable:23247 dirty:25 writeback:0 unstable:0 [ 1850.686717] slab_reclaimable:16151 slab_unreclaimable:119693 [ 1850.686717] mapped:59687 shmem:15557 pagetables:10659 bounce:0 [ 1850.686717] free:31199 free_pcp:432 free_cma:0 [ 1850.798839] Node 0 active_anon:904716kB inactive_anon:764760kB active_file:2656kB inactive_file:2328kB unevictable:89608kB isolated(anon):0kB isolated(file):128kB mapped:236608kB dirty:100kB writeback:0kB shmem:38904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1850.886801] Node 1 active_anon:28432kB inactive_anon:3597172kB active_file:228kB inactive_file:236kB unevictable:14780kB isolated(anon):0kB isolated(file):40kB mapped:13740kB dirty:0kB writeback:0kB shmem:23324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1850.918339] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:236kB inactive_anon:1816kB active_file:0kB inactive_file:24kB unevictable:80kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:32kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1850.947633] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1850.953375] Node 0 DMA32 free:37692kB min:36272kB low:45340kB high:54408kB active_anon:903780kB inactive_anon:762944kB active_file:68kB inactive_file:728kB unevictable:94044kB writepending:0kB present:3129332kB managed:2621260kB mlocked:93760kB kernel_stack:9376kB pagetables:13468kB bounce:0kB free_pcp:564kB local_pcp:324kB free_cma:0kB [ 1850.985337] lowmem_reserve[]: 0 0 0 0 0 [ 1850.991021] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1851.017631] lowmem_reserve[]: 0 0 0 0 0 [ 1851.022187] Node 1 Normal free:65348kB min:53612kB low:67012kB high:80412kB active_anon:28548kB inactive_anon:3597160kB active_file:0kB inactive_file:0kB unevictable:14616kB writepending:20kB present:3932160kB managed:3870192kB mlocked:14236kB kernel_stack:7840kB pagetables:28832kB bounce:0kB free_pcp:960kB local_pcp:280kB free_cma:0kB [ 1851.052714] lowmem_reserve[]: 0 0 0 0 0 [ 1851.057493] Node 0 DMA: 8*4kB (UM) 10*8kB (M) 17*16kB (UME) 9*32kB (UME) 7*64kB (ME) 7*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10464kB [ 1851.073434] Node 0 DMA32: 1577*4kB (UME) 228*8kB (UME) 245*16kB (UME) 265*32kB (UME) 171*64kB (UM) 36*128kB (UM) 8*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 39668kB [ 1851.090057] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1851.101206] Node 1 Normal: 93*4kB (UM) 40*8kB (UM) 366*16kB (UME) 210*32kB (UME) 338*64kB (UME) 108*128kB (UME) 39*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 64852kB [ 1851.117997] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1851.127490] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1851.136373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1851.145472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1851.154545] 21802 total pagecache pages [ 1851.158917] 0 pages in swap cache [ 1851.162588] Swap cache stats: add 0, delete 0, find 0/0 [ 1851.168097] Free swap = 0kB [ 1851.171204] Total swap = 0kB [ 1851.174298] 1965979 pages RAM [ 1851.177553] 0 pages HighMem/MovableOnly [ 1851.181529] 339053 pages reserved [ 1851.184999] 0 pages cma reserved [ 1851.188453] Out of memory: Kill process 24210 (syz-executor.2) score 1007 or sacrifice child 09:43:31 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180), 0x0) 09:43:31 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r2, &(0x7f0000000100)="91da19c9d91dad0d82e677f7b509a7ad22add23c5ec29a10295ace4757b77900080000d57f0000d4472112a21987bfe4000000001d350477465c6e81fd3d0600000000171450bb79672820382575a778e1d5f441795a8e62491893a2c5b4c1c231b67fce6dd6ae5151180d3002b0bcef9d6b1f04b162a5d7fe02351cbdc095d8906282b4961b24706b839cb8d50e3945a5eb759c1179f61e4ee9293274013ce42b72ec609c3b3445be0cc7a12af2e3b89d1f835344aeca2f10de7cec65dd4e8976282dfbae0a6aa12d9bd33689048a8af27f957152981cd80f8ebc302b3c3e804e8714", 0xe3) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:43:31 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x139b00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) dup2(r1, r2) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 09:43:31 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000340)={0x9, 0x8, 0x9e9}) 09:43:31 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x60c242, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000001c0)) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, &(0x7f0000000200)}, 0x20) sendmmsg$inet(r2, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 09:43:31 executing program 5: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0xaf3e, @mcast2, 0xfff}], 0x2c) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:43:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8000000000006, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xfffffd2d) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$KDADDIO(r2, 0x400455c8, 0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1851.487003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1852.059858] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1852.073268] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1852.083887] CPU: 0 PID: 24272 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 [ 1852.091798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1852.101149] Call Trace: [ 1852.103730] dump_stack+0x13e/0x194 [ 1852.107370] dump_header+0x178/0x6d4 [ 1852.111092] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1852.116116] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1852.121223] ? ___ratelimit+0x50/0x519 [ 1852.125124] oom_kill_process.cold+0x10/0xae3 [ 1852.129636] ? lock_downgrade+0x6e0/0x6e0 [ 1852.133791] out_of_memory+0x2d5/0x1110 [ 1852.137766] ? oom_killer_disable+0x1c0/0x1c0 [ 1852.142365] ? mutex_trylock+0x152/0x1a0 [ 1852.146433] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1852.151309] ? warn_alloc+0xf0/0xf0 [ 1852.154938] __alloc_pages_nodemask+0x5d3/0x700 [ 1852.159609] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1852.164616] ? find_held_lock+0x2d/0x110 [ 1852.168708] alloc_pages_vma+0xc2/0x4a0 [ 1852.172676] __handle_mm_fault+0x17b6/0x3280 [ 1852.177075] ? copy_page_range+0x1d70/0x1d70 [ 1852.181469] ? find_held_lock+0x2d/0x110 [ 1852.185524] handle_mm_fault+0x288/0x7a0 [ 1852.189576] __get_user_pages+0x44d/0x11e0 [ 1852.193798] ? follow_page_mask+0x1580/0x1580 [ 1852.198280] ? lock_acquire+0x170/0x3f0 [ 1852.202247] ? __mm_populate+0x1e3/0x2c0 [ 1852.206306] populate_vma_page_range+0x17b/0x210 [ 1852.211190] __mm_populate+0x195/0x2c0 [ 1852.215230] ? populate_vma_page_range+0x210/0x210 [ 1852.220146] ? security_capable+0x88/0xb0 [ 1852.224284] SyS_mlockall+0x3f5/0x520 [ 1852.228242] ? SyS_munlock+0xf0/0xf0 [ 1852.232985] do_syscall_64+0x1d5/0x640 [ 1852.236889] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1852.242064] RIP: 0033:0x45c829 [ 1852.245241] RSP: 002b:00007f589c963c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1852.252948] RAX: ffffffffffffffda RBX: 00000000004f5900 RCX: 000000000045c829 [ 1852.260225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1852.267574] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1852.274927] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1852.282180] R13: 0000000000000737 R14: 00000000004c9f77 R15: 00007f589c9646d4 [ 1852.297748] Mem-Info: [ 1852.300201] active_anon:233205 inactive_anon:1090485 isolated_anon:0 [ 1852.300201] active_file:27 inactive_file:7 isolated_file:0 [ 1852.300201] unevictable:31028 dirty:0 writeback:0 unstable:0 [ 1852.300201] slab_reclaimable:16134 slab_unreclaimable:119989 [ 1852.300201] mapped:60704 shmem:15557 pagetables:10683 bounce:0 [ 1852.300201] free:24929 free_pcp:6 free_cma:0 [ 1852.340690] Node 0 active_anon:904140kB inactive_anon:764772kB active_file:20kB inactive_file:56kB unevictable:100024kB isolated(anon):0kB isolated(file):0kB mapped:231312kB dirty:0kB writeback:0kB shmem:38908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1852.371995] Node 1 active_anon:28680kB inactive_anon:3597168kB active_file:88kB inactive_file:0kB unevictable:24088kB isolated(anon):0kB isolated(file):0kB mapped:11504kB dirty:0kB writeback:0kB shmem:23320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1852.402529] Node 0 DMA free:10428kB min:220kB low:272kB high:324kB active_anon:224kB inactive_anon:1816kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1852.431979] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1852.437097] Node 0 DMA32 free:36176kB min:36272kB low:45340kB high:54408kB active_anon:903916kB inactive_anon:762956kB active_file:20kB inactive_file:172kB unevictable:99668kB writepending:0kB present:3129332kB managed:2621260kB mlocked:99668kB kernel_stack:9344kB pagetables:13472kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1852.469323] lowmem_reserve[]: 0 0 0 0 0 [ 1852.473333] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1852.504909] lowmem_reserve[]: 0 0 0 0 0 [ 1852.532139] Node 1 Normal free:53484kB min:53612kB low:67012kB high:80412kB active_anon:28680kB inactive_anon:3597168kB active_file:32kB inactive_file:32kB unevictable:24088kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24088kB kernel_stack:8160kB pagetables:29216kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1852.581454] lowmem_reserve[]: 0 0 0 0 0 [ 1852.585568] Node 0 DMA: 11*4kB (UM) 14*8kB (UM) 16*16kB (ME) 9*32kB (UME) 8*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10428kB [ 1852.623611] Node 0 DMA32: 1139*4kB (UME) 149*8kB (UMEH) 132*16kB (UMEH) 270*32kB (UMEH) 176*64kB (UMH) 36*128kB (UMH) 8*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 35956kB [ 1852.648562] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1852.664518] Node 1 Normal: 67*4kB (UM) 2*8kB (UM) 237*16kB (UME) 162*32kB (UME) 233*64kB (UE) 103*128kB (UME) 39*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 53484kB [ 1852.684105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1852.711311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1852.734418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1852.754438] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1852.778878] 18977 total pagecache pages [ 1852.783034] 0 pages in swap cache [ 1852.794064] Swap cache stats: add 0, delete 0, find 0/0 [ 1852.803751] Free swap = 0kB [ 1852.825331] Total swap = 0kB [ 1852.852862] 1965979 pages RAM [ 1852.871497] 0 pages HighMem/MovableOnly [ 1852.875573] 339053 pages reserved [ 1852.894600] 0 pages cma reserved [ 1852.903251] Out of memory: Kill process 24264 (syz-executor.2) score 1007 or sacrifice child [ 1852.929931] Killed process 24264 (syz-executor.2) total-vm:74968kB, anon-rss:17964kB, file-rss:39276kB, shmem-rss:0kB [ 1853.053144] oom_reaper: reaped process 24264 (syz-executor.2), now anon-rss:18016kB, file-rss:5364kB, shmem-rss:0kB [ 1853.105690] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1853.132165] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1853.141833] CPU: 1 PID: 24253 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 1853.149745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1853.160842] Call Trace: [ 1853.163439] dump_stack+0x13e/0x194 [ 1853.167071] dump_header+0x178/0x6d4 [ 1853.171236] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1853.176280] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1853.181387] ? ___ratelimit+0x50/0x519 [ 1853.185278] oom_kill_process.cold+0x10/0xae3 [ 1853.189786] ? lock_acquire+0x170/0x3f0 [ 1853.193758] ? lock_downgrade+0x6e0/0x6e0 [ 1853.197913] out_of_memory+0x2d5/0x1110 [ 1853.201891] ? oom_killer_disable+0x1c0/0x1c0 [ 1853.206408] ? mutex_trylock+0x152/0x1a0 [ 1853.210484] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1853.215385] ? warn_alloc+0xf0/0xf0 [ 1853.219047] __alloc_pages_nodemask+0x5d3/0x700 [ 1853.223721] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1853.229528] ? lock_downgrade+0x6e0/0x6e0 [ 1853.233694] alloc_pages_current+0xe7/0x1e0 [ 1853.238031] __page_cache_alloc+0x245/0x3d0 [ 1853.242365] filemap_fault+0xc18/0x1c50 [ 1853.246348] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1853.251024] ? lock_acquire+0x170/0x3f0 [ 1853.254998] ? ext4_filemap_fault+0x7c/0xb0 [ 1853.259341] ext4_filemap_fault+0x84/0xb0 [ 1853.263490] __do_fault+0xfa/0x380 [ 1853.267040] ? pte_offset_kernel+0x98/0xe0 [ 1853.271280] __handle_mm_fault+0x217b/0x3280 [ 1853.275695] ? copy_page_range+0x1d70/0x1d70 [ 1853.280114] ? find_held_lock+0x2d/0x110 [ 1853.284189] handle_mm_fault+0x288/0x7a0 [ 1853.288257] __do_page_fault+0x4bc/0xb40 [ 1853.292322] ? vmalloc_fault+0xdf0/0xdf0 [ 1853.296388] ? do_page_fault+0x60/0x4f2 [ 1853.300366] ? page_fault+0x2f/0x50 [ 1853.304009] page_fault+0x45/0x50 [ 1853.307460] RIP: 78c900:0x78bf00 [ 1853.310844] RSP: 0005:00000000000003e7 EFLAGS: 0078c900 [ 1853.353139] Mem-Info: [ 1853.362727] active_anon:233180 inactive_anon:1090485 isolated_anon:0 [ 1853.362727] active_file:422 inactive_file:319 isolated_file:60 [ 1853.362727] unevictable:26210 dirty:0 writeback:0 unstable:0 [ 1853.362727] slab_reclaimable:16134 slab_unreclaimable:119781 [ 1853.362727] mapped:60304 shmem:15557 pagetables:10646 bounce:0 [ 1853.362727] free:29090 free_pcp:359 free_cma:0 [ 1853.401757] Node 0 active_anon:904040kB inactive_anon:764772kB active_file:1344kB inactive_file:3404kB unevictable:89952kB isolated(anon):0kB isolated(file):112kB mapped:230936kB dirty:0kB writeback:0kB shmem:38908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1853.539437] Node 1 active_anon:28580kB inactive_anon:3597168kB active_file:164kB inactive_file:1176kB unevictable:20988kB isolated(anon):0kB isolated(file):0kB mapped:13380kB dirty:0kB writeback:0kB shmem:23320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1853.654901] Node 0 DMA free:10428kB min:220kB low:272kB high:324kB active_anon:224kB inactive_anon:1816kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1853.716735] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1853.728344] Node 0 DMA32 free:36656kB min:36272kB low:45340kB high:54408kB active_anon:903916kB inactive_anon:763416kB active_file:588kB inactive_file:588kB unevictable:98860kB writepending:0kB present:3129332kB managed:2621260kB mlocked:98800kB kernel_stack:9344kB pagetables:13472kB bounce:0kB free_pcp:828kB local_pcp:724kB free_cma:0kB [ 1853.803209] lowmem_reserve[]: 0 0 0 0 0 [ 1853.811826] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1853.839967] lowmem_reserve[]: 0 0 0 0 0 [ 1853.844156] Node 1 Normal free:53620kB min:53612kB low:67012kB high:80412kB active_anon:28680kB inactive_anon:3597336kB active_file:264kB inactive_file:456kB unevictable:21332kB writepending:0kB present:3932160kB managed:3870192kB mlocked:21316kB kernel_stack:7968kB pagetables:29068kB bounce:0kB free_pcp:848kB local_pcp:112kB free_cma:0kB [ 1853.875216] lowmem_reserve[]: 0 0 0 0 0 [ 1853.879366] Node 0 DMA: 11*4kB (UM) 14*8kB (UM) 16*16kB (ME) 9*32kB (UME) 8*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10428kB [ 1854.047903] Node 0 DMA32: 1195*4kB (UME) 184*8kB (UMEH) 179*16kB (UMEH) 231*32kB (UMEH) 174*64kB (UMH) 35*128kB (UMH) 11*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36476kB [ 1854.072143] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1854.103456] Node 1 Normal: 74*4kB (U) 6*8kB (UM) 135*16kB (UME) 153*32kB (UE) 257*64kB (UME) 103*128kB (UME) 39*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 53160kB [ 1854.119741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1854.128845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1854.137687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1854.146901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1854.155576] 20237 total pagecache pages [ 1854.173475] 0 pages in swap cache [ 1854.184871] Swap cache stats: add 0, delete 0, find 0/0 [ 1854.255057] Free swap = 0kB [ 1854.276497] Total swap = 0kB [ 1854.299003] 1965979 pages RAM [ 1854.315282] 0 pages HighMem/MovableOnly [ 1854.341953] 339053 pages reserved [ 1854.365198] 0 pages cma reserved [ 1854.387794] Out of memory: Kill process 24007 (syz-executor.2) score 1007 or sacrifice child [ 1854.444276] Killed process 24007 (syz-executor.2) total-vm:74968kB, anon-rss:18376kB, file-rss:34636kB, shmem-rss:0kB 09:43:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x9, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1854.616225] oom_reaper: reaped process 24007 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 09:43:35 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180), 0x0) 09:43:35 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) 09:43:35 executing program 5: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0xaf3e, @mcast2, 0xfff}], 0x2c) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:43:35 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x8000, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000340)={0xa992, 0x7344, 0x1, 0x0, 0x0, [{{r2}, 0x1000}]}) getsockname(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000000c0)=0x80) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd4b4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc6}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000084) r5 = dup(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) 09:43:35 executing program 4: mlockall(0x1) clone(0x940d4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000100)={0x6c}) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r2, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r2, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f5, 0x110, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x41}, 0x408c0) [ 1855.149194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.171511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.194289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.219969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.244320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.258809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.290142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.318441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.341811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.792540] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1855.883424] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1855.911243] CPU: 0 PID: 6356 Comm: syz-fuzzer Not tainted 4.14.177-syzkaller #0 [ 1855.918727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1855.928080] Call Trace: [ 1855.930700] dump_stack+0x13e/0x194 [ 1855.934334] dump_header+0x178/0x6d4 [ 1855.938048] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1855.943066] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1855.948174] ? ___ratelimit+0x50/0x519 [ 1855.952072] oom_kill_process.cold+0x10/0xae3 [ 1855.956571] ? lock_acquire+0x170/0x3f0 [ 1855.960571] ? lock_downgrade+0x6e0/0x6e0 [ 1855.964726] out_of_memory+0x2d5/0x1110 [ 1855.968731] ? oom_killer_disable+0x1c0/0x1c0 [ 1855.973242] ? mutex_trylock+0x152/0x1a0 [ 1855.977310] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1855.982172] ? warn_alloc+0xf0/0xf0 [ 1855.985814] __alloc_pages_nodemask+0x5d3/0x700 [ 1855.990485] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1855.995510] ? lock_downgrade+0x6e0/0x6e0 [ 1855.999678] alloc_pages_current+0xe7/0x1e0 [ 1856.004011] __page_cache_alloc+0x245/0x3d0 [ 1856.008339] filemap_fault+0xc18/0x1c50 [ 1856.012332] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1856.017010] ? lock_acquire+0x170/0x3f0 [ 1856.021006] ? ext4_filemap_fault+0x7c/0xb0 [ 1856.025342] ext4_filemap_fault+0x84/0xb0 [ 1856.029532] __do_fault+0xfa/0x380 [ 1856.033081] __handle_mm_fault+0x22e9/0x3280 [ 1856.037495] ? copy_page_range+0x1d70/0x1d70 [ 1856.041906] ? find_held_lock+0x2d/0x110 [ 1856.045984] handle_mm_fault+0x288/0x7a0 [ 1856.050078] __do_page_fault+0x4bc/0xb40 [ 1856.054151] ? vmalloc_fault+0xdf0/0xdf0 [ 1856.058220] ? do_page_fault+0x60/0x4f2 [ 1856.062204] ? page_fault+0x2f/0x50 [ 1856.065843] page_fault+0x45/0x50 [ 1856.069296] RIP: 0001:0xc437b1be60 [ 1856.072828] RSP: 0002:000000c44bef76a0 EFLAGS: c43c976f50 [ 1856.124469] Mem-Info: [ 1856.132702] active_anon:233010 inactive_anon:1085924 isolated_anon:0 [ 1856.132702] active_file:16 inactive_file:15 isolated_file:3 [ 1856.132702] unevictable:35964 dirty:0 writeback:0 unstable:0 [ 1856.132702] slab_reclaimable:16119 slab_unreclaimable:119887 [ 1856.132702] mapped:64197 shmem:15557 pagetables:10591 bounce:0 [ 1856.132702] free:24946 free_pcp:29 free_cma:0 [ 1856.167136] Node 0 active_anon:903744kB inactive_anon:751056kB active_file:56kB inactive_file:60kB unevictable:115944kB isolated(anon):0kB isolated(file):0kB mapped:239256kB dirty:0kB writeback:0kB shmem:38924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1856.195982] Node 1 active_anon:28196kB inactive_anon:3592640kB active_file:8kB inactive_file:0kB unevictable:27912kB isolated(anon):0kB isolated(file):12kB mapped:17532kB dirty:0kB writeback:0kB shmem:23304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1856.224831] Node 0 DMA free:10428kB min:220kB low:272kB high:324kB active_anon:224kB inactive_anon:1816kB active_file:0kB inactive_file:0kB unevictable:164kB writepending:0kB present:15992kB managed:15908kB mlocked:164kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1856.428317] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1856.463653] Node 0 DMA32 free:35796kB min:36272kB low:45340kB high:54408kB active_anon:903516kB inactive_anon:749240kB active_file:72kB inactive_file:24kB unevictable:116788kB writepending:32kB present:3129332kB managed:2621260kB mlocked:116788kB kernel_stack:9216kB pagetables:13344kB bounce:0kB free_pcp:420kB local_pcp:0kB free_cma:0kB [ 1856.677349] lowmem_reserve[]: 0 0 0 0 0 [ 1856.704225] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1856.878106] lowmem_reserve[]: 0 0 0 0 0 [ 1856.904296] Node 1 Normal free:53284kB min:53612kB low:67012kB high:80412kB active_anon:28172kB inactive_anon:3592640kB active_file:68kB inactive_file:0kB unevictable:27680kB writepending:28kB present:3932160kB managed:3870192kB mlocked:27680kB kernel_stack:8000kB pagetables:28892kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1857.104518] lowmem_reserve[]: 0 0 0 0 0 [ 1857.118948] Node 0 DMA: 7*4kB (UME) 12*8kB (UM) 18*16kB (UME) 9*32kB (UME) 8*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10428kB [ 1857.163448] Node 0 DMA32: 1228*4kB (UME) 315*8kB (UME) 189*16kB (UME) 184*32kB (UME) 170*64kB (UM) 38*128kB (UM) 11*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36952kB [ 1857.199074] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1857.210830] Node 1 Normal: 80*4kB (UM) 47*8kB (UM) 148*16kB (UME) 159*32kB (UME) 234*64kB (UME) 107*128kB (UME) 41*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 53464kB [ 1857.265780] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1857.321839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1857.392007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1857.464230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1857.536984] 22848 total pagecache pages [ 1857.541009] 0 pages in swap cache [ 1857.544455] Swap cache stats: add 0, delete 0, find 0/0 [ 1857.611965] Free swap = 0kB [ 1857.615022] Total swap = 0kB [ 1857.658881] 1965979 pages RAM [ 1857.662022] 0 pages HighMem/MovableOnly [ 1857.710872] 339053 pages reserved [ 1857.714348] 0 pages cma reserved [ 1857.763374] Out of memory: Kill process 24294 (syz-executor.5) score 1009 or sacrifice child [ 1857.826001] Killed process 24294 (syz-executor.5) total-vm:75100kB, anon-rss:18008kB, file-rss:53928kB, shmem-rss:0kB [ 1857.919498] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1857.983780] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1858.007872] CPU: 1 PID: 6356 Comm: syz-fuzzer Not tainted 4.14.177-syzkaller #0 [ 1858.015351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1858.024706] Call Trace: [ 1858.027302] dump_stack+0x13e/0x194 [ 1858.030933] dump_header+0x178/0x6d4 [ 1858.034653] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1858.039689] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1858.044801] ? ___ratelimit+0x50/0x519 [ 1858.048700] oom_kill_process.cold+0x10/0xae3 [ 1858.053205] ? lock_acquire+0x170/0x3f0 [ 1858.057182] ? lock_downgrade+0x6e0/0x6e0 [ 1858.061337] out_of_memory+0x2d5/0x1110 [ 1858.065320] ? oom_killer_disable+0x1c0/0x1c0 [ 1858.069815] ? mutex_trylock+0x152/0x1a0 [ 1858.073882] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1858.078742] ? warn_alloc+0xf0/0xf0 [ 1858.082386] __alloc_pages_nodemask+0x5d3/0x700 [ 1858.087157] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1858.092179] ? lock_downgrade+0x6e0/0x6e0 [ 1858.096345] alloc_pages_current+0xe7/0x1e0 [ 1858.100680] __page_cache_alloc+0x245/0x3d0 [ 1858.105015] filemap_fault+0xc18/0x1c50 [ 1858.109002] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1858.113679] ? lock_acquire+0x170/0x3f0 [ 1858.117675] ? ext4_filemap_fault+0x7c/0xb0 [ 1858.121999] ext4_filemap_fault+0x84/0xb0 [ 1858.126139] __do_fault+0xfa/0x380 [ 1858.129683] __handle_mm_fault+0x22e9/0x3280 [ 1858.134100] ? copy_page_range+0x1d70/0x1d70 [ 1858.138520] ? find_held_lock+0x2d/0x110 [ 1858.142602] handle_mm_fault+0x288/0x7a0 [ 1858.146671] __do_page_fault+0x4bc/0xb40 [ 1858.150808] ? vmalloc_fault+0xdf0/0xdf0 [ 1858.154885] ? do_page_fault+0x60/0x4f2 [ 1858.158859] ? page_fault+0x2f/0x50 [ 1858.162478] page_fault+0x45/0x50 [ 1858.165923] RIP: 0001:0xc437b1be60 [ 1858.169453] RSP: 0002:000000c44bef76a0 EFLAGS: c43c976f50 [ 1858.180873] Mem-Info: [ 1858.189064] active_anon:232977 inactive_anon:1090422 isolated_anon:0 [ 1858.189064] active_file:1408 inactive_file:1581 isolated_file:64 [ 1858.189064] unevictable:28077 dirty:0 writeback:0 unstable:0 [ 1858.189064] slab_reclaimable:16114 slab_unreclaimable:119287 [ 1858.189064] mapped:59935 shmem:15557 pagetables:10542 bounce:0 [ 1858.189064] free:26007 free_pcp:267 free_cma:0 [ 1858.224345] Node 0 active_anon:903744kB inactive_anon:759236kB active_file:5548kB inactive_file:6068kB unevictable:97916kB isolated(anon):0kB isolated(file):384kB mapped:226104kB dirty:0kB writeback:0kB shmem:38924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1858.352876] Node 1 active_anon:28164kB inactive_anon:3592952kB active_file:476kB inactive_file:2732kB unevictable:10904kB isolated(anon):0kB isolated(file):0kB mapped:13772kB dirty:0kB writeback:0kB shmem:23304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 09:43:38 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180), 0x0) [ 1858.433429] Node 0 DMA free:10484kB min:220kB low:272kB high:324kB active_anon:224kB inactive_anon:1896kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 09:43:38 executing program 5: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0xaf3e, @mcast2, 0xfff}], 0x2c) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) [ 1858.525776] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1858.533405] Node 0 DMA32 free:54584kB min:36272kB low:45340kB high:54408kB active_anon:903520kB inactive_anon:749780kB active_file:13108kB inactive_file:14636kB unevictable:70112kB writepending:0kB present:3129332kB managed:2621260kB mlocked:69996kB kernel_stack:9056kB pagetables:13228kB bounce:0kB free_pcp:324kB local_pcp:184kB free_cma:0kB [ 1858.570907] lowmem_reserve[]: 0 0 0 0 0 09:43:38 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xa842, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8800, 0x0, 0x0, 0x0, 0x2000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000114010025bd7000fedbdf25080001000000000008000100020000000800010000000000080001000100000008000100010000002800010000000000080001000200000008000100000000000800010002000000"], 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000440)={0x3, 0x1, 'client1\x00', 0xffffffff80000009, "183217be2b472399", "0ed4a1ba765a2121207339b7ce9b4fef7c26764918593f662ac297c0efc60103", 0x4, 0x53b}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SOUND_PCM_READ_BITS(r2, 0x80045005, &(0x7f0000000500)) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000000340)=""/234, 0xea}], 0x1, 0x0) [ 1858.577596] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 09:43:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x5) ioctl$KDADDIO(r0, 0x400455c8, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x1}) [ 1858.639653] lowmem_reserve[]: 0 0 0 0 0 [ 1858.649710] Node 1 Normal free:80964kB min:53612kB low:67012kB high:80412kB active_anon:28164kB inactive_anon:3592876kB active_file:488kB inactive_file:128kB unevictable:192kB writepending:0kB present:3932160kB managed:3870192kB mlocked:328kB kernel_stack:7904kB pagetables:28896kB bounce:0kB free_pcp:1312kB local_pcp:692kB free_cma:0kB [ 1858.735196] lowmem_reserve[]: 0 0 0 0 0 [ 1858.744156] Node 0 DMA: 3*4kB (UME) 17*8kB (UM) 20*16kB (UME) 9*32kB (UME) 8*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10484kB [ 1858.820487] Node 0 DMA32: 934*4kB (UE) 9*8kB (UE) 119*16kB (UME) 285*32kB (UME) 182*64kB (UM) 40*128kB (UM) 11*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36464kB [ 1858.909245] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1858.954341] Node 1 Normal: 2*4kB (UM) 94*8kB (UM) 193*16kB (UME) 160*32kB (UME) 233*64kB (UME) 129*128kB (UME) 41*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 57032kB [ 1859.032249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 09:43:39 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffc}, 0x0, 0xa, 0xffffffffffffffff, 0xa) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r2, &(0x7f0000db0000/0x1000)=nil, 0x5000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000180)=""/4096) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000100), 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) r4 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r4, &(0x7f0000db0000/0x1000)=nil, 0x5000) shmat(r4, &(0x7f0000c06000/0x3000)=nil, 0x0) [ 1859.093766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1859.120798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1859.159873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1859.214798] 24980 total pagecache pages [ 1859.235651] 0 pages in swap cache [ 1859.253829] Swap cache stats: add 0, delete 0, find 0/0 [ 1859.262362] Free swap = 0kB [ 1859.265875] Total swap = 0kB [ 1859.272664] 1965979 pages RAM [ 1859.277854] 0 pages HighMem/MovableOnly [ 1859.282028] 339053 pages reserved [ 1859.289039] 0 pages cma reserved [ 1859.292567] Out of memory: Kill process 24298 (syz-executor.2) score 1007 or sacrifice child [ 1860.150871] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1860.163720] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1860.175950] CPU: 0 PID: 6346 Comm: syz-fuzzer Not tainted 4.14.177-syzkaller #0 [ 1860.183425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1860.192788] Call Trace: [ 1860.195396] dump_stack+0x13e/0x194 [ 1860.199044] dump_header+0x178/0x6d4 [ 1860.202766] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1860.207800] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1860.213015] ? ___ratelimit+0x50/0x519 [ 1860.216926] oom_kill_process.cold+0x10/0xae3 [ 1860.221438] ? lock_acquire+0x170/0x3f0 [ 1860.225425] ? lock_downgrade+0x6e0/0x6e0 [ 1860.229675] out_of_memory+0x2d5/0x1110 [ 1860.233663] ? oom_killer_disable+0x1c0/0x1c0 [ 1860.238169] ? mutex_trylock+0x152/0x1a0 [ 1860.242250] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1860.247118] ? warn_alloc+0xf0/0xf0 [ 1860.250882] __alloc_pages_nodemask+0x5d3/0x700 [ 1860.255600] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1860.260932] ? lock_downgrade+0x6e0/0x6e0 [ 1860.265096] alloc_pages_current+0xe7/0x1e0 [ 1860.269435] __page_cache_alloc+0x245/0x3d0 [ 1860.273964] filemap_fault+0xc18/0x1c50 [ 1860.278041] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1860.282746] ? lock_acquire+0x170/0x3f0 [ 1860.286734] ? ext4_filemap_fault+0x7c/0xb0 [ 1860.291095] ext4_filemap_fault+0x84/0xb0 [ 1860.295263] __do_fault+0xfa/0x380 [ 1860.298810] __handle_mm_fault+0x22e9/0x3280 [ 1860.303228] ? copy_page_range+0x1d70/0x1d70 [ 1860.307642] ? find_held_lock+0x2d/0x110 [ 1860.311716] handle_mm_fault+0x288/0x7a0 [ 1860.315780] __do_page_fault+0x4bc/0xb40 [ 1860.319850] ? vmalloc_fault+0xdf0/0xdf0 [ 1860.323917] ? do_page_fault+0x60/0x4f2 [ 1860.327897] ? page_fault+0x2f/0x50 [ 1860.331529] page_fault+0x45/0x50 [ 1860.334984] RIP: 0001:0x13 [ 1860.337840] RSP: 0000:000000c420039758 EFLAGS: 1b169102e1d [ 1860.514685] Mem-Info: [ 1860.522810] active_anon:232989 inactive_anon:1087972 isolated_anon:0 [ 1860.522810] active_file:34 inactive_file:2 isolated_file:0 [ 1860.522810] unevictable:33924 dirty:0 writeback:0 unstable:0 [ 1860.522810] slab_reclaimable:16082 slab_unreclaimable:119975 [ 1860.522810] mapped:65046 shmem:17605 pagetables:10538 bounce:0 [ 1860.522810] free:25076 free_pcp:0 free_cma:0 [ 1860.556696] Node 0 active_anon:903664kB inactive_anon:756396kB active_file:140kB inactive_file:0kB unevictable:108328kB isolated(anon):0kB isolated(file):0kB mapped:244960kB dirty:0kB writeback:0kB shmem:44264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1860.696705] Node 1 active_anon:28292kB inactive_anon:3595492kB active_file:0kB inactive_file:8kB unevictable:27368kB isolated(anon):0kB isolated(file):0kB mapped:15224kB dirty:0kB writeback:0kB shmem:26156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1860.830840] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:224kB inactive_anon:1816kB active_file:0kB inactive_file:0kB unevictable:164kB writepending:0kB present:15992kB managed:15908kB mlocked:164kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1860.952460] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1860.968265] Node 0 DMA32 free:36272kB min:36272kB low:45340kB high:54408kB active_anon:903440kB inactive_anon:754580kB active_file:144kB inactive_file:48kB unevictable:108164kB writepending:0kB present:3129332kB managed:2621260kB mlocked:108164kB kernel_stack:9344kB pagetables:13316kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1861.160888] lowmem_reserve[]: 0 0 0 0 0 [ 1861.165014] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1861.312242] lowmem_reserve[]: 0 0 0 0 0 [ 1861.331267] Node 1 Normal free:53612kB min:53612kB low:67012kB high:80412kB active_anon:28292kB inactive_anon:3595492kB active_file:0kB inactive_file:32kB unevictable:27368kB writepending:0kB present:3932160kB managed:3870192kB mlocked:27368kB kernel_stack:7840kB pagetables:28792kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1861.474660] lowmem_reserve[]: 0 0 0 0 0 [ 1861.503963] Node 0 DMA: 9*4kB (UME) 8*8kB (UM) 20*16kB (UME) 9*32kB (UME) 8*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10436kB [ 1861.549447] Node 0 DMA32: 1225*4kB (UME) 12*8kB (UME) 25*16kB (UME) 289*32kB (UME) 182*64kB (UM) 40*128kB (UM) 11*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36276kB [ 1861.571843] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1861.582654] Node 1 Normal: 96*4kB (UM) 88*8kB (UM) 252*16kB (UME) 162*32kB (UE) 233*64kB (UME) 92*128kB (UME) 41*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 53632kB [ 1861.603138] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1861.612502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1861.625520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1861.644384] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1861.710836] 25215 total pagecache pages [ 1861.714844] 0 pages in swap cache [ 1861.756423] Swap cache stats: add 0, delete 0, find 0/0 [ 1861.761830] Free swap = 0kB [ 1861.764873] Total swap = 0kB [ 1861.813741] 1965979 pages RAM [ 1861.838219] 0 pages HighMem/MovableOnly [ 1861.842223] 339053 pages reserved [ 1861.845677] 0 pages cma reserved [ 1861.899320] Out of memory: Kill process 24320 (syz-executor.2) score 1009 or sacrifice child [ 1861.939702] Killed process 24321 (syz-executor.2) total-vm:74968kB, anon-rss:18024kB, file-rss:50860kB, shmem-rss:0kB [ 1862.033037] oom_reaper: reaped process 24321 (syz-executor.2), now anon-rss:18016kB, file-rss:17520kB, shmem-rss:0kB 09:43:42 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4", 0xb) 09:43:42 executing program 0: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) shmget(0x1, 0x4000, 0x1, &(0x7f0000cf6000/0x4000)=nil) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x22) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:43:42 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3be840f83424e78e713a570000000114010025bd700006000000000000000800000008000100020000000800010000010000000800002807f2a439c9e0d12900010002450000086a675bb851723185afa90abe6921aee4f287c18fcbe207b3929cdd83625df39ede66463a172f235be507f47cfc1d585bd09aa4b41c902753ae4c6cc09f00146c9097689f113f337ef0bd21bdcefea4f0dbb6e6d60700"/169], 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) 09:43:42 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:43:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/cpuinfo\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x3}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0x0], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e00", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000440)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x5, @loopback, 0x7}, r3}}, 0x30) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50e3c9066f9815e8fe629e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e4feffca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r7) r9 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r10 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000300)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r10, r8, r9}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'wp256\x00'}}) keyctl$clear(0x7, r10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) 09:43:42 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x24}, 0x10) write(r3, &(0x7f0000000180), 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:43:42 executing program 5: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000440)="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", 0x151) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) [ 1863.011453] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1863.099666] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1863.104848] CPU: 1 PID: 11844 Comm: syz-executor.3 Not tainted 4.14.177-syzkaller #0 [ 1863.112756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1863.122112] Call Trace: [ 1863.124716] dump_stack+0x13e/0x194 [ 1863.128356] dump_header+0x178/0x6d4 [ 1863.141295] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1863.146330] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1863.151437] ? ___ratelimit+0x50/0x519 [ 1863.155501] oom_kill_process.cold+0x10/0xae3 [ 1863.160012] ? lock_downgrade+0x6e0/0x6e0 [ 1863.164167] out_of_memory+0x2d5/0x1110 [ 1863.168182] ? oom_killer_disable+0x1c0/0x1c0 [ 1863.172689] ? mutex_trylock+0x152/0x1a0 [ 1863.176756] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1863.181614] ? warn_alloc+0xf0/0xf0 [ 1863.185256] __alloc_pages_nodemask+0x5d3/0x700 [ 1863.189927] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1863.194953] ? lock_downgrade+0x6e0/0x6e0 [ 1863.199293] alloc_pages_current+0xe7/0x1e0 [ 1863.203629] __page_cache_alloc+0x245/0x3d0 [ 1863.207978] filemap_fault+0xc18/0x1c50 [ 1863.211969] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1863.216642] ? lock_acquire+0x170/0x3f0 [ 1863.220649] ? ext4_filemap_fault+0x7c/0xb0 [ 1863.224987] ext4_filemap_fault+0x84/0xb0 [ 1863.229141] __do_fault+0xfa/0x380 [ 1863.232687] __handle_mm_fault+0x22e9/0x3280 [ 1863.237098] ? copy_page_range+0x1d70/0x1d70 [ 1863.241509] ? find_held_lock+0x2d/0x110 [ 1863.245586] handle_mm_fault+0x288/0x7a0 [ 1863.249669] __do_page_fault+0x4bc/0xb40 [ 1863.253732] ? vmalloc_fault+0xdf0/0xdf0 [ 1863.257792] ? do_page_fault+0x60/0x4f2 [ 1863.261772] ? page_fault+0x2f/0x50 [ 1863.265396] page_fault+0x45/0x50 [ 1863.268969] RIP: 69a73a00:0x1c6ad9 [ 1863.272494] RSP: 1c6b64:00000000000004e1 EFLAGS: 00000013 [ 1863.295327] Mem-Info: [ 1863.303353] active_anon:233156 inactive_anon:1087972 isolated_anon:0 [ 1863.303353] active_file:29 inactive_file:25 isolated_file:0 [ 1863.303353] unevictable:34200 dirty:3 writeback:0 unstable:0 [ 1863.303353] slab_reclaimable:16062 slab_unreclaimable:119551 [ 1863.303353] mapped:62506 shmem:17605 pagetables:10657 bounce:0 [ 1863.303353] free:24911 free_pcp:0 free_cma:0 [ 1863.337398] Node 0 active_anon:904240kB inactive_anon:756388kB active_file:116kB inactive_file:88kB unevictable:110076kB isolated(anon):0kB isolated(file):0kB mapped:234276kB dirty:12kB writeback:0kB shmem:44256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1863.366255] Node 1 active_anon:28384kB inactive_anon:3595500kB active_file:0kB inactive_file:60kB unevictable:26724kB isolated(anon):0kB isolated(file):0kB mapped:15748kB dirty:0kB writeback:0kB shmem:26164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1863.394392] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:224kB inactive_anon:1816kB active_file:0kB inactive_file:4kB unevictable:448kB writepending:0kB present:15992kB managed:15908kB mlocked:448kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1863.425013] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1863.430155] Node 0 DMA32 free:35664kB min:36272kB low:45340kB high:54408kB active_anon:904016kB inactive_anon:754572kB active_file:132kB inactive_file:0kB unevictable:109128kB writepending:12kB present:3129332kB managed:2621260kB mlocked:109128kB kernel_stack:9504kB pagetables:13640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1863.470131] lowmem_reserve[]: 0 0 0 0 0 [ 1863.474165] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1863.505466] lowmem_reserve[]: 0 0 0 0 0 [ 1863.509539] Node 1 Normal free:53556kB min:53612kB low:67012kB high:80412kB active_anon:28384kB inactive_anon:3595500kB active_file:0kB inactive_file:52kB unevictable:26724kB writepending:0kB present:3932160kB managed:3870192kB mlocked:26724kB kernel_stack:7904kB pagetables:28944kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1863.541750] lowmem_reserve[]: 0 0 0 0 0 [ 1863.545761] Node 0 DMA: 6*4kB (UE) 11*8kB (UM) 11*16kB (UE) 11*32kB (UME) 9*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10432kB [ 1863.564841] Node 0 DMA32: 1134*4kB (UME) 352*8kB (UE) 27*16kB (UME) 194*32kB (UME) 183*64kB (UM) 41*128kB (UM) 11*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 35816kB [ 1863.583598] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1863.594505] Node 1 Normal: 49*4kB (UM) 14*8kB (U) 252*16kB (UME) 160*32kB (UME) 233*64kB (UE) 98*128kB (UME) 41*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 53556kB [ 1863.610680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1863.619572] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1863.637111] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1863.646244] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1863.654976] 22535 total pagecache pages [ 1863.664439] 0 pages in swap cache [ 1863.667963] Swap cache stats: add 0, delete 0, find 0/0 [ 1863.673310] Free swap = 0kB [ 1863.681630] Total swap = 0kB [ 1863.684685] 1965979 pages RAM [ 1863.688507] 0 pages HighMem/MovableOnly [ 1863.692492] 339053 pages reserved [ 1863.703800] 0 pages cma reserved [ 1863.711773] Out of memory: Kill process 24338 (syz-executor.0) score 1007 or sacrifice child [ 1863.734037] Killed process 24338 (syz-executor.0) total-vm:74968kB, anon-rss:17980kB, file-rss:39276kB, shmem-rss:0kB [ 1863.805420] oom_reaper: reaped process 24338 (syz-executor.0), now anon-rss:18012kB, file-rss:7536kB, shmem-rss:0kB [ 1863.842031] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1863.886170] in:imklog cpuset=/ mems_allowed=0-1 [ 1863.905085] CPU: 1 PID: 6031 Comm: in:imklog Not tainted 4.14.177-syzkaller #0 [ 1863.912524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1863.921973] Call Trace: [ 1863.924571] dump_stack+0x13e/0x194 [ 1863.928219] dump_header+0x178/0x6d4 [ 1863.931945] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1863.937054] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1863.942165] ? ___ratelimit+0x50/0x519 [ 1863.946094] oom_kill_process.cold+0x10/0xae3 [ 1863.950604] ? lock_downgrade+0x6e0/0x6e0 [ 1863.954761] out_of_memory+0x2d5/0x1110 [ 1863.959528] ? oom_killer_disable+0x1c0/0x1c0 [ 1863.964036] ? mutex_trylock+0x152/0x1a0 [ 1863.968115] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1863.972977] ? warn_alloc+0xf0/0xf0 [ 1863.976628] __alloc_pages_nodemask+0x5d3/0x700 [ 1863.981396] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1863.986421] ? lock_downgrade+0x6e0/0x6e0 [ 1863.990848] alloc_pages_current+0xe7/0x1e0 [ 1863.995202] __page_cache_alloc+0x245/0x3d0 [ 1863.999532] filemap_fault+0xc18/0x1c50 [ 1864.003532] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1864.008216] ? lock_acquire+0x170/0x3f0 [ 1864.012459] ? ext4_filemap_fault+0x7c/0xb0 [ 1864.016813] ext4_filemap_fault+0x84/0xb0 [ 1864.020970] __do_fault+0xfa/0x380 [ 1864.024519] __handle_mm_fault+0x22e9/0x3280 [ 1864.028935] ? copy_page_range+0x1d70/0x1d70 [ 1864.033368] ? find_held_lock+0x2d/0x110 [ 1864.037447] handle_mm_fault+0x288/0x7a0 [ 1864.041544] __do_page_fault+0x4bc/0xb40 [ 1864.045620] ? vmalloc_fault+0xdf0/0xdf0 [ 1864.049696] ? do_page_fault+0x60/0x4f2 [ 1864.053678] ? page_fault+0x2f/0x50 [ 1864.057320] page_fault+0x45/0x50 [ 1864.060867] RIP: 1fa0:0x1f9f [ 1864.063892] RSP: 0000:000055b4964d09d0 EFLAGS: 7fe0266afda0 [ 1864.284824] Mem-Info: [ 1864.293762] active_anon:232996 inactive_anon:1087972 isolated_anon:0 [ 1864.293762] active_file:34 inactive_file:31 isolated_file:0 [ 1864.293762] unevictable:32822 dirty:7 writeback:0 unstable:0 [ 1864.293762] slab_reclaimable:16062 slab_unreclaimable:119883 [ 1864.293762] mapped:62209 shmem:17605 pagetables:10603 bounce:0 [ 1864.293762] free:25434 free_pcp:521 free_cma:0 [ 1864.328900] Node 0 active_anon:903796kB inactive_anon:756384kB active_file:188kB inactive_file:100kB unevictable:107980kB isolated(anon):0kB isolated(file):0kB mapped:231676kB dirty:28kB writeback:0kB shmem:44252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1864.366916] Node 1 active_anon:28188kB inactive_anon:3595504kB active_file:108kB inactive_file:48kB unevictable:23708kB isolated(anon):0kB isolated(file):0kB mapped:17260kB dirty:0kB writeback:0kB shmem:26168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1864.406219] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:224kB inactive_anon:1816kB active_file:0kB inactive_file:4kB unevictable:440kB writepending:0kB present:15992kB managed:15908kB mlocked:440kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1864.433856] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1864.439061] Node 0 DMA32 free:36260kB min:36272kB low:45340kB high:54408kB active_anon:903864kB inactive_anon:754628kB active_file:340kB inactive_file:48kB unevictable:109364kB writepending:48kB present:3129332kB managed:2621260kB mlocked:109364kB kernel_stack:9312kB pagetables:13472kB bounce:0kB free_pcp:880kB local_pcp:640kB free_cma:0kB [ 1864.469590] lowmem_reserve[]: 0 0 0 0 0 [ 1864.473704] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1864.500718] lowmem_reserve[]: 0 0 0 0 0 [ 1864.504816] Node 1 Normal free:53644kB min:53612kB low:67012kB high:80412kB active_anon:28280kB inactive_anon:3595508kB active_file:24kB inactive_file:0kB unevictable:23824kB writepending:28kB present:3932160kB managed:3870192kB mlocked:23824kB kernel_stack:8032kB pagetables:29016kB bounce:0kB free_pcp:920kB local_pcp:288kB free_cma:0kB [ 1864.536357] lowmem_reserve[]: 0 0 0 0 0 [ 1864.540671] Node 0 DMA: 14*4kB (UME) 4*8kB (U) 13*16kB (UME) 9*32kB (UME) 10*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10440kB [ 1864.557210] Node 0 DMA32: 1240*4kB (UE) 312*8kB (UME) 62*16kB (UME) 186*32kB (UME) 184*64kB (UM) 39*128kB (UM) 11*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 36544kB [ 1864.574363] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1864.585797] Node 1 Normal: 17*4kB (U) 0*8kB 149*16kB (UME) 170*32kB (UME) 249*64kB (UME) 101*128kB (UME) 41*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 53396kB [ 1864.602565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1864.613533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1864.623409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1864.632570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1864.641246] 22513 total pagecache pages [ 1864.645281] 0 pages in swap cache [ 1864.648911] Swap cache stats: add 0, delete 0, find 0/0 [ 1864.654325] Free swap = 0kB [ 1864.658000] Total swap = 0kB [ 1864.661062] 1965979 pages RAM [ 1864.664143] 0 pages HighMem/MovableOnly [ 1864.668149] 339053 pages reserved [ 1864.671594] 0 pages cma reserved [ 1864.674946] Out of memory: Kill process 24339 (syz-executor.2) score 1007 or sacrifice child [ 1864.683576] Killed process 24368 (syz-executor.2) total-vm:74968kB, anon-rss:18024kB, file-rss:34816kB, shmem-rss:0kB [ 1864.723088] oom_reaper: reaped process 24368 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1865.020381] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1865.078417] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1865.083567] CPU: 1 PID: 3638 Comm: systemd-udevd Not tainted 4.14.177-syzkaller #0 [ 1865.091327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1865.100674] Call Trace: [ 1865.103277] dump_stack+0x13e/0x194 [ 1865.106918] dump_header+0x178/0x6d4 [ 1865.110654] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1865.115679] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1865.120793] ? ___ratelimit+0x50/0x519 [ 1865.124684] oom_kill_process.cold+0x10/0xae3 [ 1865.129175] ? lock_downgrade+0x6e0/0x6e0 [ 1865.133401] out_of_memory+0x2d5/0x1110 [ 1865.137375] ? oom_killer_disable+0x1c0/0x1c0 [ 1865.141870] ? mutex_trylock+0x152/0x1a0 [ 1865.145922] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1865.150769] ? warn_alloc+0xf0/0xf0 [ 1865.154384] __alloc_pages_nodemask+0x5d3/0x700 [ 1865.159055] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1865.164069] ? lock_downgrade+0x6e0/0x6e0 [ 1865.168222] alloc_pages_current+0xe7/0x1e0 [ 1865.172533] __page_cache_alloc+0x245/0x3d0 [ 1865.176841] filemap_fault+0xc18/0x1c50 [ 1865.180811] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1865.185473] ? lock_acquire+0x170/0x3f0 [ 1865.189453] ? ext4_filemap_fault+0x7c/0xb0 [ 1865.193767] ext4_filemap_fault+0x84/0xb0 [ 1865.197909] __do_fault+0xfa/0x380 [ 1865.201432] __handle_mm_fault+0x22e9/0x3280 [ 1865.205823] ? copy_page_range+0x1d70/0x1d70 [ 1865.210215] ? find_held_lock+0x2d/0x110 [ 1865.215170] handle_mm_fault+0x288/0x7a0 [ 1865.219238] __do_page_fault+0x4bc/0xb40 [ 1865.223326] ? vmalloc_fault+0xdf0/0xdf0 [ 1865.227375] ? do_page_fault+0x60/0x4f2 [ 1865.231336] ? page_fault+0x2f/0x50 [ 1865.234949] page_fault+0x45/0x50 [ 1865.241074] RIP: 0001:0x7ffcc0b71338 [ 1865.244782] RSP: 75db16f0:00007ffcc0b714b0 EFLAGS: 557c75db1e20 [ 1865.247003] Mem-Info: [ 1865.255499] active_anon:233005 inactive_anon:1087972 isolated_anon:0 [ 1865.255499] active_file:12 inactive_file:19 isolated_file:0 [ 1865.255499] unevictable:34022 dirty:0 writeback:0 unstable:0 [ 1865.255499] slab_reclaimable:16051 slab_unreclaimable:119919 [ 1865.255499] mapped:62633 shmem:17605 pagetables:10558 bounce:0 [ 1865.255499] free:25005 free_pcp:0 free_cma:0 [ 1865.290200] Node 0 active_anon:903780kB inactive_anon:756384kB active_file:32kB inactive_file:56kB unevictable:111068kB isolated(anon):0kB isolated(file):0kB mapped:232128kB dirty:0kB writeback:0kB shmem:44252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1865.337528] Node 1 active_anon:28240kB inactive_anon:3595504kB active_file:8kB inactive_file:28kB unevictable:25020kB isolated(anon):0kB isolated(file):0kB mapped:18408kB dirty:0kB writeback:0kB shmem:26168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1865.365620] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:224kB inactive_anon:1816kB active_file:0kB inactive_file:0kB unevictable:440kB writepending:0kB present:15992kB managed:15908kB mlocked:440kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1865.393459] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1865.433240] Node 0 DMA32 free:36260kB min:36272kB low:45340kB high:54408kB active_anon:903556kB inactive_anon:754568kB active_file:32kB inactive_file:56kB unevictable:110628kB writepending:0kB present:3129332kB managed:2621260kB mlocked:110628kB kernel_stack:9184kB pagetables:13264kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1865.463557] lowmem_reserve[]: 0 0 0 0 0 [ 1865.467633] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1865.494402] lowmem_reserve[]: 0 0 0 0 0 [ 1865.498492] Node 1 Normal free:53696kB min:53612kB low:67012kB high:80412kB active_anon:28240kB inactive_anon:3595504kB active_file:0kB inactive_file:36kB unevictable:25020kB writepending:0kB present:3932160kB managed:3870192kB mlocked:25020kB kernel_stack:7936kB pagetables:28924kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1865.528491] lowmem_reserve[]: 0 0 0 0 0 [ 1865.532570] Node 0 DMA: 14*4kB (UME) 4*8kB (U) 13*16kB (UME) 9*32kB (UME) 10*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10440kB [ 1865.548737] Node 0 DMA32: 1294*4kB (UME) 271*8kB (UME) 61*16kB (UME) 185*32kB (UME) 184*64kB (UM) 39*128kB (UM) 11*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 36384kB [ 1865.565030] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1865.576492] Node 1 Normal: 59*4kB (UM) 27*8kB (UM) 152*16kB (UME) 166*32kB (UME) 248*64kB (UME) 101*128kB (UME) 41*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 53636kB [ 1865.592944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1865.625917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1865.634688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1865.657460] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 09:43:46 executing program 0: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) shmget(0x1, 0x4000, 0x1, &(0x7f0000cf6000/0x4000)=nil) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x22) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) [ 1865.675440] 22581 total pagecache pages [ 1865.680004] 0 pages in swap cache [ 1865.683952] Swap cache stats: add 0, delete 0, find 0/0 [ 1865.689479] Free swap = 0kB [ 1865.692549] Total swap = 0kB [ 1865.695602] 1965979 pages RAM [ 1865.698830] 0 pages HighMem/MovableOnly [ 1865.702889] 339053 pages reserved [ 1865.706408] 0 pages cma reserved [ 1865.709777] Out of memory: Kill process 24339 (syz-executor.2) score 1008 or sacrifice child 09:43:46 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4", 0xb) 09:43:46 executing program 5: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000440)="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", 0x151) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) 09:43:46 executing program 2: mlockall(0x1) clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) fallocate(0xffffffffffffffff, 0x4, 0xfffffffffffffffd, 0x6) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) 09:43:46 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) connect$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3, 0x2}, 0x20) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r2, &(0x7f0000db0000/0x1000)=nil, 0x5000) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000440)={'nat\x00', 0x0, 0x4, 0xaa, [], 0x6, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/170}, &(0x7f00000004c0)=0x78) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000140)) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r2, 0xc) 09:43:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000500)={0x3, 0x0, [{0xa58, 0x0, 0xd38d}, {0x205, 0x0, 0x7}, {0x24f, 0x0, 0x24c}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x80800) mknodat(r4, &(0x7f0000000480)='./file0\x00', 0x8004, 0x91) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000400)) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x24}, 0xc3d1}, 0x1c) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x2a0a41, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x4103}, {0x20, 0x17, {0x0, 0x0, @l2={'ib', 0xa, 'veth1_virt_wifi\x00'}}}}}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1f4, 0x434402) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, &(0x7f0000000100)="0be3a78360d696b8b9703b21123915366a3b6762f35d477b08b7e5cd216baa269faa8aa6e52106d995", &(0x7f0000000140)=""/160}, 0x20) [ 1866.400524] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1866.451331] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1866.466172] CPU: 0 PID: 24380 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 [ 1866.474899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1866.484263] Call Trace: [ 1866.486869] dump_stack+0x13e/0x194 [ 1866.491121] dump_header+0x178/0x6d4 [ 1866.494846] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1866.499873] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1866.505003] ? ___ratelimit+0x50/0x519 [ 1866.509024] oom_kill_process.cold+0x10/0xae3 [ 1866.513556] ? lock_downgrade+0x6e0/0x6e0 [ 1866.517714] out_of_memory+0x2d5/0x1110 [ 1866.521701] ? oom_killer_disable+0x1c0/0x1c0 [ 1866.526203] ? mutex_trylock+0x152/0x1a0 [ 1866.530970] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1866.535831] ? warn_alloc+0xf0/0xf0 [ 1866.539482] __alloc_pages_nodemask+0x5d3/0x700 [ 1866.544156] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1866.549263] ? find_held_lock+0x2d/0x110 [ 1866.553329] alloc_pages_vma+0xc2/0x4a0 [ 1866.557302] __handle_mm_fault+0x17b6/0x3280 [ 1866.561721] ? copy_page_range+0x1d70/0x1d70 [ 1866.566137] ? find_held_lock+0x2d/0x110 [ 1866.570215] handle_mm_fault+0x288/0x7a0 [ 1866.575159] __get_user_pages+0x44d/0x11e0 [ 1866.579403] ? follow_page_mask+0x1580/0x1580 [ 1866.583912] ? lock_acquire+0x170/0x3f0 [ 1866.587889] ? __mm_populate+0x1e3/0x2c0 [ 1866.591955] populate_vma_page_range+0x17b/0x210 [ 1866.596721] __mm_populate+0x195/0x2c0 [ 1866.600612] ? populate_vma_page_range+0x210/0x210 [ 1866.605543] ? security_capable+0x88/0xb0 [ 1866.609827] SyS_mlockall+0x3f5/0x520 [ 1866.613636] ? SyS_munlock+0xf0/0xf0 [ 1866.617365] do_syscall_64+0x1d5/0x640 [ 1866.621267] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1866.626463] RIP: 0033:0x45c829 [ 1866.629654] RSP: 002b:00007f589c963c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1866.637370] RAX: ffffffffffffffda RBX: 00000000004f5900 RCX: 000000000045c829 [ 1866.644649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1866.651919] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1866.659219] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1866.666527] R13: 0000000000000737 R14: 00000000004c9f77 R15: 00007f589c9646d4 [ 1866.684967] Mem-Info: [ 1866.687622] active_anon:233186 inactive_anon:1087972 isolated_anon:0 [ 1866.687622] active_file:35 inactive_file:13 isolated_file:0 [ 1866.687622] unevictable:33449 dirty:15 writeback:3 unstable:0 [ 1866.687622] slab_reclaimable:16048 slab_unreclaimable:120156 [ 1866.687622] mapped:62058 shmem:17605 pagetables:10674 bounce:0 [ 1866.687622] free:24935 free_pcp:0 free_cma:0 [ 1866.732530] Node 0 active_anon:904372kB inactive_anon:756384kB active_file:120kB inactive_file:20kB unevictable:110600kB isolated(anon):0kB isolated(file):0kB mapped:233272kB dirty:48kB writeback:8kB shmem:44252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1866.774868] Node 1 active_anon:28372kB inactive_anon:3595504kB active_file:20kB inactive_file:32kB unevictable:23196kB isolated(anon):0kB isolated(file):0kB mapped:14960kB dirty:12kB writeback:4kB shmem:26168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1866.813883] Node 0 DMA free:10428kB min:220kB low:272kB high:324kB active_anon:228kB inactive_anon:1816kB active_file:0kB inactive_file:12kB unevictable:304kB writepending:4kB present:15992kB managed:15908kB mlocked:304kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1866.852335] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1866.860347] Node 0 DMA32 free:35868kB min:36272kB low:45340kB high:54408kB active_anon:904144kB inactive_anon:754568kB active_file:60kB inactive_file:0kB unevictable:110268kB writepending:252kB present:3129332kB managed:2621260kB mlocked:110268kB kernel_stack:9440kB pagetables:13652kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1866.901324] lowmem_reserve[]: 0 0 0 0 0 [ 1866.905521] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1866.942357] lowmem_reserve[]: 0 0 0 0 0 [ 1866.949305] Node 1 Normal free:53444kB min:53612kB low:67012kB high:80412kB active_anon:28372kB inactive_anon:3595504kB active_file:0kB inactive_file:32kB unevictable:23176kB writepending:16kB present:3932160kB managed:3870192kB mlocked:23176kB kernel_stack:7936kB pagetables:28996kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1866.987114] lowmem_reserve[]: 0 0 0 0 0 [ 1866.991154] Node 0 DMA: 8*4kB (UME) 2*8kB (UM) 9*16kB (UME) 10*32kB (UME) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10432kB [ 1867.020028] Node 0 DMA32: 1156*4kB (UMEH) 363*8kB (UEH) 36*16kB (UEH) 165*32kB (UME) 190*64kB (UM) 41*128kB (UM) 11*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 36168kB [ 1867.050015] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1867.066026] Node 1 Normal: 37*4kB (U) 3*8kB (UM) 43*16kB (UME) 161*32kB (UME) 241*64kB (UME) 121*128kB (UME) 41*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 53564kB [ 1867.092784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1867.104483] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1867.124892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1867.133775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1867.150120] 22047 total pagecache pages [ 1867.154124] 0 pages in swap cache [ 1867.163638] Swap cache stats: add 0, delete 0, find 0/0 [ 1867.175281] Free swap = 0kB [ 1867.183455] Total swap = 0kB [ 1867.194374] 1965979 pages RAM [ 1867.202644] 0 pages HighMem/MovableOnly [ 1867.214537] 339053 pages reserved [ 1867.223208] 0 pages cma reserved [ 1867.233963] Out of memory: Kill process 24372 (syz-executor.0) score 1007 or sacrifice child [ 1867.260133] Killed process 24372 (syz-executor.0) total-vm:74836kB, anon-rss:17716kB, file-rss:39276kB, shmem-rss:0kB [ 1867.315319] oom_reaper: reaped process 24372 (syz-executor.0), now anon-rss:17876kB, file-rss:5360kB, shmem-rss:0kB 09:43:47 executing program 0: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) shmget(0x1, 0x4000, 0x1, &(0x7f0000cf6000/0x4000)=nil) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x22) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) [ 1868.070580] syz-executor.2 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1868.111399] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1868.116669] CPU: 1 PID: 24379 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 1868.124677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1868.134034] Call Trace: [ 1868.136624] dump_stack+0x13e/0x194 [ 1868.140272] dump_header+0x178/0x6d4 [ 1868.143979] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1868.149050] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1868.154562] ? ___ratelimit+0x50/0x519 [ 1868.158455] oom_kill_process.cold+0x10/0xae3 [ 1868.162969] ? lock_downgrade+0x6e0/0x6e0 [ 1868.167132] out_of_memory+0x2d5/0x1110 [ 1868.171117] ? oom_killer_disable+0x1c0/0x1c0 [ 1868.175625] ? mutex_trylock+0x152/0x1a0 [ 1868.179687] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1868.184534] ? warn_alloc+0xf0/0xf0 [ 1868.188157] __alloc_pages_nodemask+0x5d3/0x700 [ 1868.193278] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1868.198305] ? find_held_lock+0x2d/0x110 [ 1868.202371] alloc_pages_vma+0xc2/0x4a0 [ 1868.206336] __handle_mm_fault+0x17b6/0x3280 [ 1868.210740] ? copy_page_range+0x1d70/0x1d70 [ 1868.215148] ? find_held_lock+0x2d/0x110 [ 1868.219225] handle_mm_fault+0x288/0x7a0 [ 1868.223276] __get_user_pages+0x44d/0x11e0 [ 1868.227503] ? follow_page_mask+0x1580/0x1580 [ 1868.231991] ? lock_acquire+0x170/0x3f0 [ 1868.235965] ? __mm_populate+0x1e3/0x2c0 [ 1868.240026] populate_vma_page_range+0x17b/0x210 [ 1868.244785] __mm_populate+0x195/0x2c0 [ 1868.248666] ? populate_vma_page_range+0x210/0x210 [ 1868.253616] ? security_capable+0x88/0xb0 [ 1868.257770] SyS_mlockall+0x3f5/0x520 [ 1868.261561] ? SyS_munlock+0xf0/0xf0 [ 1868.265278] do_syscall_64+0x1d5/0x640 [ 1868.269160] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1868.274333] RIP: 0033:0x45c829 [ 1868.277522] RSP: 002b:00007ffba12edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1868.285567] RAX: ffffffffffffffda RBX: 00000000004f5900 RCX: 000000000045c829 [ 1868.292821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1868.300110] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1868.307379] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1868.314636] R13: 0000000000000737 R14: 00000000004c9f77 R15: 00007ffba12ee6d4 [ 1868.339339] Mem-Info: [ 1868.341795] active_anon:233173 inactive_anon:1087972 isolated_anon:0 [ 1868.341795] active_file:31 inactive_file:14 isolated_file:0 [ 1868.341795] unevictable:34070 dirty:3 writeback:0 unstable:0 [ 1868.341795] slab_reclaimable:16044 slab_unreclaimable:119756 [ 1868.341795] mapped:61798 shmem:17605 pagetables:10627 bounce:0 [ 1868.341795] free:24872 free_pcp:0 free_cma:0 [ 1868.378430] Node 0 active_anon:904312kB inactive_anon:756384kB active_file:116kB inactive_file:40kB unevictable:112356kB isolated(anon):0kB isolated(file):0kB mapped:231028kB dirty:12kB writeback:0kB shmem:44252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1868.409672] Node 1 active_anon:28380kB inactive_anon:3595504kB active_file:8kB inactive_file:16kB unevictable:23924kB isolated(anon):0kB isolated(file):0kB mapped:16164kB dirty:0kB writeback:0kB shmem:26168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1868.440292] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:228kB inactive_anon:1816kB active_file:0kB inactive_file:0kB unevictable:268kB writepending:0kB present:15992kB managed:15908kB mlocked:268kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1868.478095] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1868.483150] Node 0 DMA32 free:36028kB min:36272kB low:45340kB high:54408kB active_anon:904084kB inactive_anon:754568kB active_file:136kB inactive_file:0kB unevictable:111588kB writepending:0kB present:3129332kB managed:2621260kB mlocked:111588kB kernel_stack:9376kB pagetables:13484kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1868.512902] lowmem_reserve[]: 0 0 0 0 0 [ 1868.516964] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1868.542878] lowmem_reserve[]: 0 0 0 0 0 [ 1868.546968] Node 1 Normal free:53040kB min:53612kB low:67012kB high:80412kB active_anon:28380kB inactive_anon:3595504kB active_file:4kB inactive_file:0kB unevictable:23632kB writepending:0kB present:3932160kB managed:3870192kB mlocked:23632kB kernel_stack:7968kB pagetables:28976kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1868.576591] lowmem_reserve[]: 0 0 0 0 0 [ 1868.580593] Node 0 DMA: 15*4kB (UME) 3*8kB (UM) 7*16kB (UME) 10*32kB (UME) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10436kB [ 1868.596724] Node 0 DMA32: 1242*4kB (UMEH) 424*8kB (UMEH) 95*16kB (UMEH) 152*32kB (UME) 167*64kB (UM) 41*128kB (UM) 11*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 36056kB [ 1868.619678] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1868.630578] Node 1 Normal: 38*4kB (UM) 59*8kB (UM) 27*16kB (UME) 174*32kB (UME) 235*64kB (UME) 117*128kB (UME) 41*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 53280kB [ 1868.649958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1868.658917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1868.670189] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1868.680759] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1868.692020] 21808 total pagecache pages [ 1868.698535] 0 pages in swap cache [ 1868.701997] Swap cache stats: add 0, delete 0, find 0/0 [ 1868.710021] Free swap = 0kB [ 1868.713048] Total swap = 0kB [ 1868.718633] 1965979 pages RAM [ 1868.721748] 0 pages HighMem/MovableOnly [ 1868.725718] 339053 pages reserved [ 1868.731831] 0 pages cma reserved [ 1868.735215] Out of memory: Kill process 24377 (syz-executor.5) score 1008 or sacrifice child [ 1868.745047] Killed process 24377 (syz-executor.5) total-vm:74968kB, anon-rss:18008kB, file-rss:40936kB, shmem-rss:0kB [ 1868.815121] syz-executor.2 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1868.844866] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1868.863951] CPU: 0 PID: 24379 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 1868.871984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1868.881338] Call Trace: [ 1868.883934] dump_stack+0x13e/0x194 [ 1868.887580] dump_header+0x178/0x6d4 [ 1868.891388] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1868.896526] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1868.901620] ? ___ratelimit+0x50/0x519 [ 1868.905500] oom_kill_process.cold+0x10/0xae3 [ 1868.909987] ? lock_downgrade+0x6e0/0x6e0 [ 1868.914122] out_of_memory+0x2d5/0x1110 [ 1868.918084] ? oom_killer_disable+0x1c0/0x1c0 [ 1868.922572] ? mutex_trylock+0x152/0x1a0 [ 1868.926631] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1868.931498] ? warn_alloc+0xf0/0xf0 [ 1868.935124] __alloc_pages_nodemask+0x5d3/0x700 [ 1868.939787] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1868.945715] ? find_held_lock+0x2d/0x110 [ 1868.949771] alloc_pages_vma+0xc2/0x4a0 [ 1868.953741] __handle_mm_fault+0x17b6/0x3280 [ 1868.958167] ? copy_page_range+0x1d70/0x1d70 [ 1868.962655] ? find_held_lock+0x2d/0x110 [ 1868.966726] handle_mm_fault+0x288/0x7a0 [ 1868.970893] __get_user_pages+0x44d/0x11e0 [ 1868.975117] ? follow_page_mask+0x1580/0x1580 [ 1868.979619] ? lock_acquire+0x170/0x3f0 [ 1868.983587] ? __mm_populate+0x1e3/0x2c0 [ 1868.987634] populate_vma_page_range+0x17b/0x210 [ 1868.992395] __mm_populate+0x195/0x2c0 [ 1868.996293] ? populate_vma_page_range+0x210/0x210 [ 1869.001299] ? security_capable+0x88/0xb0 [ 1869.005433] SyS_mlockall+0x3f5/0x520 [ 1869.009240] ? SyS_munlock+0xf0/0xf0 [ 1869.012953] do_syscall_64+0x1d5/0x640 [ 1869.016832] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1869.022014] RIP: 0033:0x45c829 [ 1869.025200] RSP: 002b:00007ffba12edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1869.032894] RAX: ffffffffffffffda RBX: 00000000004f5900 RCX: 000000000045c829 [ 1869.040153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1869.047419] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1869.054670] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1869.061975] R13: 0000000000000737 R14: 00000000004c9f77 R15: 00007ffba12ee6d4 [ 1869.073958] Mem-Info: [ 1869.102058] active_anon:233167 inactive_anon:1088797 isolated_anon:0 [ 1869.102058] active_file:544 inactive_file:2253 isolated_file:0 [ 1869.102058] unevictable:25908 dirty:1 writeback:0 unstable:0 [ 1869.102058] slab_reclaimable:16044 slab_unreclaimable:119784 [ 1869.102058] mapped:60436 shmem:17605 pagetables:10592 bounce:0 [ 1869.102058] free:28957 free_pcp:373 free_cma:0 09:43:49 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4", 0xb) 09:43:49 executing program 5: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000440)="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", 0x151) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) 09:43:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000507) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:43:49 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000100)=0x9, 0x4) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) [ 1869.279634] Node 0 active_anon:904592kB inactive_anon:756384kB active_file:5240kB inactive_file:7376kB unevictable:84836kB isolated(anon):0kB isolated(file):128kB mapped:234440kB dirty:104kB writeback:0kB shmem:44252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 09:43:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x101042, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000080)) getsockopt$inet_dccp_int(r2, 0x21, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x2, 0x2, 0x4b, &(0x7f0000ffc000/0x1000)=nil, 0x5a}) [ 1869.450638] Node 1 active_anon:28376kB inactive_anon:3595504kB active_file:40kB inactive_file:108kB unevictable:11496kB isolated(anon):0kB isolated(file):0kB mapped:15504kB dirty:0kB writeback:0kB shmem:26168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1869.481560] Unknown ioctl 16708 [ 1869.578868] Node 0 DMA free:10452kB min:220kB low:272kB high:324kB active_anon:228kB inactive_anon:1816kB active_file:28kB inactive_file:0kB unevictable:88kB writepending:0kB present:15992kB managed:15908kB mlocked:88kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1869.652155] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1869.658450] Node 0 DMA32 free:35708kB min:36272kB low:45340kB high:54408kB active_anon:904164kB inactive_anon:754568kB active_file:1012kB inactive_file:780kB unevictable:108788kB writepending:4kB present:3129332kB managed:2621260kB mlocked:108960kB kernel_stack:9472kB pagetables:14112kB bounce:0kB free_pcp:488kB local_pcp:0kB free_cma:0kB [ 1869.695217] lowmem_reserve[]: 0 0 0 0 0 [ 1869.700405] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1869.726362] lowmem_reserve[]: 0 0 0 0 0 [ 1869.730366] Node 1 Normal free:53044kB min:53612kB low:67012kB high:80412kB active_anon:28352kB inactive_anon:3595504kB active_file:4kB inactive_file:0kB unevictable:21768kB writepending:0kB present:3932160kB managed:3870192kB mlocked:21768kB kernel_stack:8000kB pagetables:28888kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1869.760631] lowmem_reserve[]: 0 0 0 0 0 [ 1869.764817] Node 0 DMA: 6*4kB (UME) 7*8kB (UM) 13*16kB (UME) 7*32kB (ME) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10432kB [ 1869.795959] Node 0 DMA32: 1170*4kB (UMEH) 491*8kB (UMEH) 37*16kB (UMEH) 168*32kB (UME) 170*64kB (UM) 41*128kB (UM) 11*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 36080kB [ 1869.821177] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1869.834441] Node 1 Normal: 65*4kB (UM) 2*8kB (M) 4*16kB (ME) 113*32kB (UME) 265*64kB (UME) 121*128kB (UME) 41*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 53044kB [ 1869.858200] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1869.872425] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1869.883586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1869.900571] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1869.911720] 22050 total pagecache pages [ 1869.915715] 0 pages in swap cache [ 1869.924184] Swap cache stats: add 0, delete 0, find 0/0 [ 1869.932132] Free swap = 0kB [ 1869.935161] Total swap = 0kB [ 1869.943268] 1965979 pages RAM [ 1869.948893] 0 pages HighMem/MovableOnly [ 1869.952874] 339053 pages reserved [ 1869.961296] 0 pages cma reserved [ 1869.964698] Out of memory: Kill process 24381 (syz-executor.4) score 1007 or sacrifice child [ 1869.993883] oom_reaper: reaped process 24379 (syz-executor.2), now anon-rss:14828kB, file-rss:5360kB, shmem-rss:0kB [ 1870.040293] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1870.089281] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1870.094985] CPU: 1 PID: 11844 Comm: syz-executor.3 Not tainted 4.14.177-syzkaller #0 [ 1870.102891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1870.112335] Call Trace: [ 1870.114928] dump_stack+0x13e/0x194 [ 1870.118566] dump_header+0x178/0x6d4 [ 1870.122308] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1870.127332] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1870.132443] ? ___ratelimit+0x50/0x519 [ 1870.136431] oom_kill_process.cold+0x10/0xae3 [ 1870.140938] ? lock_downgrade+0x6e0/0x6e0 [ 1870.145105] out_of_memory+0x2d5/0x1110 [ 1870.149086] ? oom_killer_disable+0x1c0/0x1c0 [ 1870.153591] ? mutex_trylock+0x152/0x1a0 [ 1870.157658] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1870.162514] ? warn_alloc+0xf0/0xf0 [ 1870.166157] __alloc_pages_nodemask+0x5d3/0x700 [ 1870.170916] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1870.175940] ? lock_downgrade+0x6e0/0x6e0 [ 1870.180109] alloc_pages_current+0xe7/0x1e0 [ 1870.184438] __page_cache_alloc+0x245/0x3d0 [ 1870.188774] filemap_fault+0xc18/0x1c50 [ 1870.192764] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1870.197442] ? lock_acquire+0x170/0x3f0 [ 1870.201428] ? ext4_filemap_fault+0x7c/0xb0 [ 1870.205760] ext4_filemap_fault+0x84/0xb0 [ 1870.209938] __do_fault+0xfa/0x380 [ 1870.213484] __handle_mm_fault+0x22e9/0x3280 [ 1870.217896] ? copy_page_range+0x1d70/0x1d70 [ 1870.222318] ? find_held_lock+0x2d/0x110 [ 1870.226396] handle_mm_fault+0x288/0x7a0 [ 1870.230475] __do_page_fault+0x4bc/0xb40 [ 1870.234555] ? vmalloc_fault+0xdf0/0xdf0 [ 1870.238630] ? do_page_fault+0x60/0x4f2 [ 1870.242616] ? page_fault+0x2f/0x50 [ 1870.246254] page_fault+0x45/0x50 [ 1870.249709] RIP: 69a73a00:0x1c868e [ 1870.253247] RSP: 1c8712:00000000000004ee EFLAGS: 00000008 [ 1870.276062] Unknown ioctl 1076388891 [ 1871.113696] Mem-Info: [ 1871.124108] active_anon:233232 inactive_anon:1087971 isolated_anon:0 [ 1871.124108] active_file:17 inactive_file:3 isolated_file:0 [ 1871.124108] unevictable:33466 dirty:0 writeback:0 unstable:0 [ 1871.124108] slab_reclaimable:16032 slab_unreclaimable:120233 [ 1871.124108] mapped:61045 shmem:17605 pagetables:10647 bounce:0 [ 1871.124108] free:24864 free_pcp:0 free_cma:0 [ 1871.167377] Node 0 active_anon:904572kB inactive_anon:756384kB active_file:24kB inactive_file:56kB unevictable:112936kB isolated(anon):0kB isolated(file):0kB mapped:229976kB dirty:0kB writeback:0kB shmem:44252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1871.203501] Node 1 active_anon:28356kB inactive_anon:3595500kB active_file:12kB inactive_file:36kB unevictable:20980kB isolated(anon):0kB isolated(file):0kB mapped:14168kB dirty:0kB writeback:0kB shmem:26168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1871.240051] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:232kB inactive_anon:1816kB active_file:0kB inactive_file:0kB unevictable:124kB writepending:0kB present:15992kB managed:15908kB mlocked:124kB kernel_stack:0kB pagetables:68kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1871.269767] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1871.274955] Node 0 DMA32 free:35984kB min:36272kB low:45340kB high:54408kB active_anon:904340kB inactive_anon:754568kB active_file:72kB inactive_file:8kB unevictable:112812kB writepending:0kB present:3129332kB managed:2621260kB mlocked:112812kB kernel_stack:9280kB pagetables:13640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1871.324950] lowmem_reserve[]: 0 0 0 0 0 [ 1871.333054] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1871.375741] lowmem_reserve[]: 0 0 0 0 0 [ 1871.384954] Node 1 Normal free:53528kB min:53612kB low:67012kB high:80412kB active_anon:28356kB inactive_anon:3595500kB active_file:4kB inactive_file:8kB unevictable:20984kB writepending:0kB present:3932160kB managed:3870192kB mlocked:20984kB kernel_stack:8032kB pagetables:28884kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1871.423866] lowmem_reserve[]: 0 0 0 0 0 [ 1871.444863] Node 0 DMA: 6*4kB (UME) 13*8kB (UM) 11*16kB (ME) 7*32kB (ME) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10448kB [ 1871.473372] Node 0 DMA32: 1214*4kB (UE) 573*8kB (UME) 45*16kB (UME) 153*32kB (UE) 161*64kB (UM) 41*128kB (UM) 11*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 35984kB [ 1871.494748] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1871.505561] Node 1 Normal: 74*4kB (UM) 4*8kB (UM) 7*16kB (UME) 101*32kB (UE) 277*64kB (UME) 121*128kB (UME) 41*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 53528kB [ 1871.526726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1871.535568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1871.549183] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1871.558095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1871.571662] 21021 total pagecache pages [ 1871.575787] 0 pages in swap cache [ 1871.602200] Swap cache stats: add 0, delete 0, find 0/0 [ 1871.618079] Free swap = 0kB [ 1871.621114] Total swap = 0kB [ 1871.624133] 1965979 pages RAM [ 1871.642546] 0 pages HighMem/MovableOnly [ 1871.654103] 339053 pages reserved [ 1871.663587] 0 pages cma reserved [ 1871.670386] Out of memory: Kill process 11078 (syz-executor.4) score 1007 or sacrifice child [ 1871.695824] Killed process 11078 (syz-executor.4) total-vm:74968kB, anon-rss:18256kB, file-rss:34624kB, shmem-rss:0kB [ 1871.828908] Unknown ioctl 16708 09:43:52 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a", 0x11) [ 1871.876517] Unknown ioctl 1076388891 [ 1872.409363] syz-executor.3 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1872.587330] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1872.592516] CPU: 0 PID: 11844 Comm: syz-executor.3 Not tainted 4.14.177-syzkaller #0 [ 1872.600399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1872.610361] Call Trace: [ 1872.612958] dump_stack+0x13e/0x194 [ 1872.616592] dump_header+0x178/0x6d4 [ 1872.620305] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1872.625330] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1872.630453] ? ___ratelimit+0x50/0x519 [ 1872.634355] oom_kill_process.cold+0x10/0xae3 [ 1872.638856] ? lock_acquire+0x170/0x3f0 [ 1872.642840] ? lock_downgrade+0x6e0/0x6e0 [ 1872.647000] out_of_memory+0x2d5/0x1110 [ 1872.650977] ? oom_killer_disable+0x1c0/0x1c0 [ 1872.655477] ? mutex_trylock+0x152/0x1a0 [ 1872.659539] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1872.664429] ? warn_alloc+0xf0/0xf0 [ 1872.668067] ? find_held_lock+0x2d/0x110 [ 1872.672135] ? fs_reclaim_acquire+0x10/0x10 [ 1872.676476] __alloc_pages_nodemask+0x5d3/0x700 [ 1872.681153] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1872.686958] ? __kmalloc_node+0x38/0x70 [ 1872.690956] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1872.695975] ? kasan_unpoison_shadow+0x30/0x40 [ 1872.700563] alloc_pages_current+0xe7/0x1e0 [ 1872.705061] __vmalloc_node_range+0x3e7/0x6a0 [ 1872.709564] vzalloc+0x42/0x50 [ 1872.712870] ? xt_counters_alloc+0x30/0x50 [ 1872.717200] xt_counters_alloc+0x30/0x50 [ 1872.721355] __do_replace+0x79/0x570 [ 1872.725080] ? compat_do_ipt_get_ctl+0x750/0x750 [ 1872.729840] do_ipt_set_ctl+0x255/0x39d [ 1872.733822] ? compat_do_ipt_set_ctl+0x140/0x140 [ 1872.738589] ? nf_sockopt_find.constprop.0+0x1ad/0x220 [ 1872.743867] nf_setsockopt+0x5f/0xb0 [ 1872.748298] ip_setsockopt+0x94/0xb0 [ 1872.752034] tcp_setsockopt+0x7b/0xc0 [ 1872.755835] SyS_setsockopt+0x110/0x1e0 [ 1872.759810] ? SyS_recv+0x40/0x40 [ 1872.763268] ? up_read+0x17/0x30 [ 1872.766639] ? __do_page_fault+0x35b/0xb40 [ 1872.770889] ? do_syscall_64+0x4c/0x640 [ 1872.774885] ? SyS_recv+0x40/0x40 [ 1872.778340] do_syscall_64+0x1d5/0x640 [ 1872.782385] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1872.787580] RIP: 0033:0x45f35a [ 1872.791207] RSP: 002b:00007fff69a73238 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 1872.798925] RAX: ffffffffffffffda RBX: 00007fff69a73260 RCX: 000000000045f35a [ 1872.806199] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1872.813468] RBP: 0000000000740e60 R08: 00000000000002d8 R09: 0000000000004000 [ 1872.820736] R10: 0000000000740800 R11: 0000000000000202 R12: 0000000000000003 [ 1872.828005] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000007407a0 09:43:53 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000100)="ebe28af11d72e45a7a025d40394182cb712483db74c5b4049fbe7f968baf35383f71aed90894e495d9a6409fb1fe7bf9943c1066ff97a43bd5", 0x39) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:43:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'bond0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x4, &(0x7f0000000400)=[{&(0x7f0000000180)="365effa45cd5deb1d3678124754ad874c77f91c624b25d83b02e96412028b01814759d3b41914f1eaa42d2bd1a9808d40dbd63bdec105dbc312df54d06f62e53dd0b3952df585432cc975970825bb97bd622f681336e111686e86cb5e79eb5433594d96eff06", 0x66}, {&(0x7f0000000200)="9eca38cce2f31ff13e8ac052153d8b3716ec7d1ea18400b9657a68bf3d0959a5c4b4da2c9cd4eca460bd6843701b6de4329147a4958b42a9facdd6f01a713b23", 0x40, 0x8c9}, {&(0x7f00000002c0)="4d058967385ec88a2d209e100a8855f35482329acbe9781837a63065860dfe61a4a67168a1874a9a6f40a881473251875e425d905549412df2b5bbdc40bc30f2d4dae0ea2a6df965d6ef81", 0x4b, 0x9}, {&(0x7f0000000340)="2e8994a01844e19699dade98d63b0e2c28684b0b06e0cc6f98fc1a80b4aaca5c7a8700af764dc6ba07bfe80156fc3b8911615183fff7d2d9172eee2ed21e584c44c60db21fd72153ad1f7398d612870de1c559c1f52b97d0c4e3e8c05736121d40a78146c676f4809063f23023b5a16c6014583946eb19dfba89d5bd4923964791cfe711", 0x84, 0x2}], 0xc010, &(0x7f0000000480)={[{@umask={'umask', 0x3d, 0x400}}, {@part={'part', 0x3d, 0x8}}, {@umask={'umask', 0x3d, 0x7ff}}, {@creator={'creator', 0x3d, "b1cebf45"}}, {@file_umask={'file_umask', 0x3d, 0x8}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x0, r0, 0x3, 0x100000000, 0x1, 0xff}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 09:43:53 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a", 0x11) 09:43:53 executing program 0 (fault-call:5 fault-nth:0): recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:43:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x420000, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b07deeb", @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf250100000005000100000000001400020000000000000000000000000000000001050001000000000008000400ffffffff2900070073797374656d5f753a6f626a6563745f723a6c64636f6e6669675f657865635f743a733000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/60, 0x3c) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) keyctl$chown(0x4, r3, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x202002) keyctl$chown(0x4, r7, r5, r6) mount$9p_tcp(&(0x7f0000000340)='127.0.0.1\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000400)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@version_L='version=9p2000.L'}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', 0xee01}}, {@uid_gt={'uid>'}}, {@euid_lt={'euid<', r5}}]}}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8000000000006, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x18) write$binfmt_aout(r8, &(0x7f0000000240)=ANY=[], 0xfffffd2d) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfff8, 0x400, 0x100, 0x2f83, 0x1}}) 09:43:53 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x4) [ 1873.474421] FAULT_INJECTION: forcing a failure. [ 1873.474421] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1873.511731] CPU: 0 PID: 24429 Comm: syz-executor.0 Not tainted 4.14.177-syzkaller #0 [ 1873.519645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1873.528998] Call Trace: [ 1873.531592] dump_stack+0x13e/0x194 [ 1873.535226] should_fail.cold+0x10a/0x14b [ 1873.539372] __alloc_pages_nodemask+0x1bf/0x700 [ 1873.544037] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1873.549050] ? trace_hardirqs_on+0x10/0x10 [ 1873.553290] alloc_pages_vma+0xc2/0x4a0 [ 1873.557266] wp_page_copy+0xa22/0x1300 [ 1873.561154] ? follow_pfn+0x200/0x200 [ 1873.564967] do_wp_page+0x244/0x11d0 [ 1873.568676] ? lock_acquire+0x170/0x3f0 [ 1873.572672] ? finish_mkwrite_fault+0x640/0x640 [ 1873.577348] __handle_mm_fault+0x1c0e/0x3280 [ 1873.581752] ? copy_page_range+0x1d70/0x1d70 [ 1873.586155] ? find_held_lock+0x2d/0x110 [ 1873.590225] handle_mm_fault+0x288/0x7a0 [ 1873.594293] __do_page_fault+0x4bc/0xb40 [ 1873.598390] ? vmalloc_fault+0xdf0/0xdf0 [ 1873.602459] ? do_page_fault+0x60/0x4f2 [ 1873.607477] page_fault+0x25/0x50 [ 1873.610929] RIP: 0010:___sys_recvmsg+0x2d2/0x4d0 [ 1873.615673] RSP: 0018:ffff8880502b7ad0 EFLAGS: 00010246 [ 1873.621046] RAX: 0000000000000000 RBX: ffff8880502b7dd0 RCX: ffffc90005b40000 [ 1873.628311] RDX: 0000000000000170 RSI: ffffffff84f7eb80 RDI: 0000000000000286 [ 1873.636462] RBP: ffff8880502b7ce0 R08: ffff8880a5046040 R09: dffffc0000000000 [ 1873.643830] R10: ffffed100a056f42 R11: ffff8880502b7a17 R12: 0000000000000001 [ 1873.651099] R13: 0000000000000020 R14: 00000000200038c0 R15: 00000000200038f0 [ 1873.658501] ? ___sys_recvmsg+0x2d0/0x4d0 [ 1873.662679] ? ___sys_sendmsg+0x840/0x840 [ 1873.666835] ? find_held_lock+0x2d/0x110 [ 1873.671073] ? __fget+0x201/0x360 [ 1873.674532] ? lock_downgrade+0x6e0/0x6e0 [ 1873.678692] ? __fget+0x228/0x360 [ 1873.682148] ? __fget_light+0x199/0x1f0 [ 1873.686119] ? sockfd_lookup_light+0xb2/0x160 [ 1873.690615] __sys_recvmmsg+0x1f3/0x620 [ 1873.694594] ? SyS_recvmsg+0x40/0x40 [ 1873.698310] ? find_held_lock+0x2d/0x110 [ 1873.702370] ? lock_downgrade+0x6e0/0x6e0 [ 1873.706526] ? vfs_write+0xff/0x4e0 [ 1873.710155] SyS_recvmmsg+0x125/0x140 [ 1873.713956] ? __sys_recvmmsg+0x620/0x620 [ 1873.718107] ? SyS_clock_settime+0x1a0/0x1a0 [ 1873.722535] ? do_syscall_64+0x4c/0x640 [ 1873.726525] ? __sys_recvmmsg+0x620/0x620 [ 1873.730685] do_syscall_64+0x1d5/0x640 [ 1873.734593] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1873.739791] RIP: 0033:0x45c829 [ 1873.742978] RSP: 002b:00007f718c02ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1873.750688] RAX: ffffffffffffffda RBX: 00000000004fb240 RCX: 000000000045c829 [ 1873.757954] RDX: 03fffffffffffdf5 RSI: 00000000200038c0 RDI: 0000000000000004 [ 1873.765314] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1873.772593] R10: 0000000000000062 R11: 0000000000000246 R12: 0000000000000006 [ 1873.779992] R13: 000000000000089c R14: 00000000004cb4d3 R15: 00007f718c02f6d4 [ 1873.808010] Mem-Info: [ 1873.818646] active_anon:233406 inactive_anon:1083434 isolated_anon:0 [ 1873.818646] active_file:5115 inactive_file:5069 isolated_file:32 [ 1873.818646] unevictable:18049 dirty:25 writeback:0 unstable:0 [ 1873.818646] slab_reclaimable:16032 slab_unreclaimable:120949 [ 1873.818646] mapped:61140 shmem:17605 pagetables:10585 bounce:0 [ 1873.818646] free:33422 free_pcp:437 free_cma:0 09:43:54 executing program 5 (fault-call:9 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) [ 1873.953859] Node 0 active_anon:905160kB inactive_anon:756472kB active_file:9056kB inactive_file:12448kB unevictable:76692kB isolated(anon):0kB isolated(file):128kB mapped:237636kB dirty:200kB writeback:0kB shmem:44252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1873.994035] net_ratelimit: 133 callbacks suppressed [ 1873.994041] ip_tables: iptables: counters copy to user failed while replacing table [ 1874.048832] FAULT_INJECTION: forcing a failure. [ 1874.048832] name failslab, interval 1, probability 0, space 0, times 0 [ 1874.090535] CPU: 0 PID: 24442 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 [ 1874.098452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1874.107823] Call Trace: [ 1874.110545] dump_stack+0x13e/0x194 [ 1874.114202] should_fail.cold+0x10a/0x14b [ 1874.118373] should_failslab+0xd6/0x130 [ 1874.122360] kmem_cache_alloc_node+0x288/0x7a0 [ 1874.126956] __alloc_skb+0x9a/0x4c0 [ 1874.130591] ? skb_trim+0x160/0x160 [ 1874.134234] sk_stream_alloc_skb+0xaf/0x780 [ 1874.138574] ? tcp_send_mss+0x9f/0x2e0 [ 1874.142615] tcp_sendmsg_locked+0xef4/0x2fd0 [ 1874.147070] ? kstrtouint+0xe6/0x130 [ 1874.150807] ? find_held_lock+0x2d/0x110 [ 1874.154886] ? tcp_sendpage+0x60/0x60 [ 1874.158777] ? __local_bh_enable_ip+0x94/0x190 [ 1874.163380] tcp_sendmsg+0x2b/0x40 [ 1874.166939] inet_sendmsg+0x116/0x4d0 [ 1874.170837] ? inet_recvmsg+0x4c0/0x4c0 [ 1874.174816] sock_sendmsg+0xc5/0x100 [ 1874.178537] SYSC_sendto+0x1c4/0x2b0 [ 1874.182278] ? SYSC_connect+0x250/0x250 [ 1874.184401] Node 1 active_anon:28504kB inactive_anon:3577264kB active_file:56kB inactive_file:80kB unevictable:31528kB isolated(anon):0kB isolated(file):0kB mapped:14236kB dirty:96kB writeback:0kB shmem:26164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1874.186262] ? lock_downgrade+0x6e0/0x6e0 [ 1874.186327] ? wait_for_completion+0x390/0x390 [ 1874.186337] ? vfs_write+0xff/0x4e0 [ 1874.186346] ? fput+0xb/0x140 [ 1874.186354] ? SyS_write+0x14d/0x210 [ 1874.186363] ? SyS_read+0x210/0x210 [ 1874.186378] ? SyS_clock_settime+0x1a0/0x1a0 [ 1874.241601] ? do_syscall_64+0x4c/0x640 [ 1874.245572] ? SyS_sendto+0x21/0x50 [ 1874.249190] ? SyS_getpeername+0x30/0x30 [ 1874.253256] do_syscall_64+0x1d5/0x640 [ 1874.257150] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1874.262346] RIP: 0033:0x45c829 [ 1874.265530] RSP: 002b:00007f589c963c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1874.273256] RAX: ffffffffffffffda RBX: 0000000000500d40 RCX: 000000000045c829 [ 1874.280539] RDX: 000000000000002d RSI: 00000000200012c0 RDI: 0000000000000004 [ 1874.287805] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1874.295077] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000007 [ 1874.302347] R13: 0000000000000a08 R14: 00000000004ccbe1 R15: 00007f589c9646d4 [ 1874.311545] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:232kB inactive_anon:1816kB active_file:28kB inactive_file:28kB unevictable:136kB writepending:0kB present:15992kB managed:15908kB mlocked:136kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 09:43:54 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a", 0x11) 09:43:54 executing program 0 (fault-call:5 fault-nth:1): recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) [ 1874.342212] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1874.347570] Node 0 DMA32 free:39536kB min:36272kB low:45340kB high:54408kB active_anon:904896kB inactive_anon:754560kB active_file:7820kB inactive_file:6876kB unevictable:85192kB writepending:216kB present:3129332kB managed:2621260kB mlocked:84780kB kernel_stack:9632kB pagetables:13804kB bounce:0kB free_pcp:1020kB local_pcp:796kB free_cma:0kB [ 1874.461461] FAULT_INJECTION: forcing a failure. [ 1874.461461] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1874.488522] lowmem_reserve[]: 0 0 0 0 0 [ 1874.500764] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1874.527732] CPU: 1 PID: 24453 Comm: syz-executor.0 Not tainted 4.14.177-syzkaller #0 [ 1874.535659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1874.545043] Call Trace: [ 1874.547650] dump_stack+0x13e/0x194 [ 1874.551300] should_fail.cold+0x10a/0x14b [ 1874.555464] __alloc_pages_nodemask+0x1bf/0x700 [ 1874.560225] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1874.565251] ? trace_hardirqs_on+0x10/0x10 [ 1874.569489] alloc_pages_vma+0xc2/0x4a0 [ 1874.573463] wp_page_copy+0xa22/0x1300 [ 1874.577353] ? follow_pfn+0x200/0x200 [ 1874.581151] do_wp_page+0x244/0x11d0 [ 1874.584863] ? lock_acquire+0x170/0x3f0 [ 1874.588833] ? finish_mkwrite_fault+0x640/0x640 [ 1874.593500] __handle_mm_fault+0x1c0e/0x3280 [ 1874.597907] ? copy_page_range+0x1d70/0x1d70 [ 1874.602313] ? find_held_lock+0x2d/0x110 [ 1874.606400] handle_mm_fault+0x288/0x7a0 [ 1874.610484] __do_page_fault+0x4bc/0xb40 [ 1874.614718] ? vmalloc_fault+0xdf0/0xdf0 [ 1874.618956] ? do_page_fault+0x60/0x4f2 [ 1874.622992] page_fault+0x25/0x50 [ 1874.626460] RIP: 0010:___sys_recvmsg+0x2d2/0x4d0 [ 1874.631728] RSP: 0018:ffff88813be5fad0 EFLAGS: 00010246 [ 1874.637102] RAX: 0000000000000000 RBX: ffff88813be5fdd0 RCX: ffffc90005b40000 [ 1874.644370] RDX: 0000000000001901 RSI: ffffffff84f7eb80 RDI: 0000000000000286 [ 1874.651773] RBP: ffff88813be5fce0 R08: ffff88808eab0640 R09: dffffc0000000000 [ 1874.659038] R10: ffffed10277cbf48 R11: ffff88813be5fa47 R12: 0000000000000001 [ 1874.666300] R13: 0000000000000020 R14: 0000000020004000 R15: 0000000020004030 [ 1874.673584] ? ___sys_recvmsg+0x2d0/0x4d0 [ 1874.678102] ? ___sys_sendmsg+0x840/0x840 [ 1874.682277] ? find_held_lock+0x2d/0x110 [ 1874.686335] ? __fget+0x201/0x360 [ 1874.689785] ? save_trace+0x290/0x290 [ 1874.693590] ? find_held_lock+0x2d/0x110 [ 1874.697649] ? __might_fault+0x104/0x1b0 [ 1874.701740] __sys_recvmmsg+0x1f3/0x620 [ 1874.705730] ? SyS_recvmsg+0x40/0x40 [ 1874.709441] ? find_held_lock+0x2d/0x110 [ 1874.713497] ? lock_downgrade+0x6e0/0x6e0 [ 1874.717653] ? vfs_write+0xff/0x4e0 [ 1874.721304] SyS_recvmmsg+0x125/0x140 [ 1874.725125] ? __sys_recvmmsg+0x620/0x620 [ 1874.729798] ? SyS_clock_settime+0x1a0/0x1a0 [ 1874.734204] ? do_syscall_64+0x4c/0x640 [ 1874.738181] ? __sys_recvmmsg+0x620/0x620 [ 1874.742338] do_syscall_64+0x1d5/0x640 [ 1874.746229] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1874.751529] RIP: 0033:0x45c829 [ 1874.754718] RSP: 002b:00007f718c02ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1874.762424] RAX: ffffffffffffffda RBX: 00000000004fb240 RCX: 000000000045c829 [ 1874.769687] RDX: 03fffffffffffdf5 RSI: 00000000200038c0 RDI: 0000000000000004 [ 1874.776966] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1874.784332] R10: 0000000000000062 R11: 0000000000000246 R12: 0000000000000006 [ 1874.791637] R13: 000000000000089c R14: 00000000004cb4d3 R15: 00007f718c02f6d4 [ 1874.859833] lowmem_reserve[]: 0 0 0 0 0 [ 1874.874670] Node 1 Normal free:53812kB min:53612kB low:67012kB high:80412kB active_anon:28604kB inactive_anon:3577264kB active_file:32kB inactive_file:376kB unevictable:39896kB writepending:0kB present:3932160kB managed:3870192kB mlocked:39940kB kernel_stack:8000kB pagetables:28992kB bounce:0kB free_pcp:508kB local_pcp:180kB free_cma:0kB [ 1875.014126] lowmem_reserve[]: 0 0 0 0 0 [ 1875.038526] Node 0 DMA: 6*4kB (UE) 5*8kB (U) 14*16kB (UME) 7*32kB (ME) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10432kB [ 1875.090515] Node 0 DMA32: 1275*4kB (UE) 124*8kB (UME) 219*16kB (UME) 187*32kB (UME) 177*64kB (UM) 41*128kB (UM) 11*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 37532kB [ 1875.161708] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1875.201227] Node 1 Normal: 93*4kB (UM) 2*8kB (UM) 2*16kB (E) 166*32kB (UE) 236*64kB (UME) 107*128kB (UME) 48*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 52964kB [ 1875.293597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1875.336842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1875.369471] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1875.395267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1875.419909] 29257 total pagecache pages [ 1875.424052] 0 pages in swap cache [ 1875.427888] Swap cache stats: add 0, delete 0, find 0/0 [ 1875.434143] Free swap = 0kB [ 1875.438789] Total swap = 0kB [ 1875.442655] 1965979 pages RAM [ 1875.446564] 0 pages HighMem/MovableOnly [ 1875.453415] 339053 pages reserved [ 1875.457719] 0 pages cma reserved [ 1875.461694] Out of memory: Kill process 24395 (syz-executor.5) score 1009 or sacrifice child [ 1875.797795] Bluetooth: Invalid header checksum [ 1875.804286] Bluetooth: Invalid header checksum [ 1875.909206] Bluetooth: Invalid header checksum [ 1876.016325] Bluetooth: Invalid header checksum [ 1876.126200] Bluetooth: Invalid header checksum [ 1876.236361] Bluetooth: Invalid header checksum 09:43:56 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a000000", 0x14) 09:43:56 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:43:56 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x0, 0x10163, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) 09:43:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) fgetxattr(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="73797374652a710c98d59a1919dbb76f146d2e00859a0f90a6862c7c66362384389da1fd8c03844bad290183cf3553ac815e464ced2390a44fca939b936cdb7be1c99095050fb1b415db21b9f9f9c4b5e556e769fb8591be53abe819a4c61a21498c1200b36d485ea6ffe09f7788fd41b35c846ed792492e28ed1885e6caf4e1aedc9b8745d48db94247ca7ab1be89ad7444015d236b0c163126b10a7017570596da2c5b1ed7320b7ebec86e3f5b9aff44d75171d86cb2c9e4489050044cf8eb44866dcf85c297c4b1a14f8f5393dba34c5b641223a1296525d99d", @ANYRES64=r2, @ANYRES32=r4, @ANYBLOB="3e36480a9f8dcd0f95d377c77d394655f6f16f85d25bfaa93986af30c81e83e2d714360ec848cad85820b689044463535c0d14e44252440ed47ffaec35d97d62430245f890cdd87d3588ab8af748f82fef354fe24cec62f3c563498965c7dc5a8c63a7e447b50a1384eefb9475265d8d7231f78f6e2e16ebbeca506ea34e8e91273d9c4851cb769b632e488a741b0b5cf0e80472a384a31680613df432b365f5c1dc1474c192e60b7fdf0079c9d29307f34c5e6b0150a95e9fe2260688c3bb4abc20469b4a79fe3182d6517e"], &(0x7f00000000c0)=""/246, 0xf6) r5 = fcntl$dupfd(r3, 0x406, r3) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r1, 0x0, 0x0, 0x4044050, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000001c0)='veth0_to_team\x00', 0x10) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1a3800, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000040)={'lo\x00', 0xfffffffd}) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:43:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x16, 0x19, 0x139, &(0x7f0000000100)="2953b7fc59682f33d2f60a3ab3954a8d1e4b4ca945b97eba2095effc847ef6c957023dcf73812e62df6e69d211236b95d37771a9e3b8a27f543537c6a3e260dc025c3943ff48114449e31f56eebcbdb3884def0032ab38ade8c041d91ec8919ba394db0e651daee9ab3563e9d156d022c87ea9313ff6bff27a7c1b43dad3669eccf37b36995504225e13ccebeabc801db6a3dc547f160f25d5d458fe4290f98dc1ad4c074dc98b3c2c276c06b5add88491dcbfdc495fb5d062a96ff0bf7a7b9acb31eed766ef2d968632c7ca4f737948b534d668168a8107af10d3516893c2afb61f110705aaf5382aa424242aa6e2d130415b1cf231fe67bb9290f53dee0ff313c67003089c6a590056cdd270e583faa4baa649fbb9ae614dd236d3a9c449c6346181f552009dcf0b8b30c120c2a44a132af26609589d2666980c616ecc73f4e4989ea41843229f7d66ed25df839169feae7ad24526755cdd15605ff16b145617f8d0e3b60db8703b6f05922f6b6978d159781fd596599e8577619fb6b516ac484e0abb19e06813ac5bde732901f956ed2aa7e78e58ba984d6ec971a5ec600e80e4248f59c8dce2dfd67673d2d9d171d7b9e8f7a7077f6385578da05ca7cd7756753678b1f0a9970679358f8041a6e6f8307e44a0938f664290d05928f77df635d73c206125de3dd52568e303852b097d1cd7670a2499998d5ea01908b60ca7108e68c4797aa7efdb6a505ff8f0824fe5194be341eb2ab3e4890c62b91b3a2bbc1f0719dcbebdebf5b17e0e9f7c6819674ca1fddf908298205a8f5fc853929c18d1f97d424438b292dc9b87f724c524ea8eacf64d3c58241b12bd9a5f0c5fbbbcb5aad33b755a4752e84f14f53bf933a263a1169c35c8d9052a6b8a102534c07a0e28eca104f9390def4a72c2224be924b9f8ed73bc5fbd48e42281558addfbb3276ea72f9f9d047c6cc4b72e629fe85c70e4573a9275c4a220b0943b63747405b2c74d1455f02b98e8405ff62cca95f6ffa7766e70e2241421bc0f62e7df73da74661799a4b5ed790e7cba16a8153399122cbc36714ab4112d23aa74fd12edb7ca2424309561c6c1f96456c6e13b9d84cf6bb1242f4b09984b5b0fd9748b4e80d3f0b1d36e81b0e5ab535cd63264ef5f93881ea35dc66dfcc903e6a1612b1f397954a7a7d4c8ac3c457fba06ab25c2de73eeebaf40acf34523d2d8750617d9ea5b92b492b795587ae8e52d7fe307047563fea68de9d6a71988bbf9d93f012e942358f4163a04d36536ec8c4db57047ea6c7531443e2a5fd11950b83f35172f82c25e1031965bdd24350a0205e7f3dcaa2df9b4cda4fb7a19dcccb52242b9b6e02c539a64f302b134a8b3df00a4db45ce7ed29de46ef476a2fa88f7140cd913e401bac157d6848f7ff295e6115c3ecd9e815bf470543d035c428021a676b696"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1876.749348] ip_tables: iptables: counters copy to user failed while replacing table 09:43:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f0000000040)={0x80, "e7ba8516f3a4035b2c1a0b6e03fd232f5d37aa0ee2e7ef64093908efe5754fc4", 0x1}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e24, @multicast1}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfff, @private1={0xfc, 0x1, [], 0x1}, 0x7, 0x4}, 0x20) [ 1877.012089] ip_tables: iptables: counters copy to user failed while replacing table 09:43:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x97}], 0x1, 0x0, 0x0, 0x7301}, 0x0) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:43:58 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a000000", 0x14) 09:43:58 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x80000001, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000140)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:43:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000100)={0x5, 0x2, 0x0, 0x3, 0x8, 0x1, 0x40}) 09:43:58 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x408, &(0x7f0000000100)='!em1.\'\\,\x00') r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{&(0x7f0000000140)=@rc, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/117, 0x75}, {&(0x7f0000000240)=""/70, 0x46}, {&(0x7f0000002b80)=""/223, 0xdf}], 0x3, &(0x7f0000000400)=""/129, 0x81}, 0x2}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000500)=""/139, 0x8b}, {&(0x7f00000005c0)=""/24, 0x18}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000700)=""/84, 0x54}, {&(0x7f0000000780)=""/46, 0x2e}, {&(0x7f00000007c0)=""/90, 0x5a}], 0x7}, 0x8000006}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000002a40)=[{&(0x7f0000000940)=""/48, 0x30}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/180, 0xb4}, {&(0x7f0000001a40)=""/4091, 0xffb}], 0x4, &(0x7f0000002a80)=""/21, 0x15}}], 0x3, 0x22, 0x0) 09:43:58 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x4c4000) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000100)={0x6c, ""/108}) write$P9_RAUTH(r4, &(0x7f0000000000)={0x14, 0x67, 0x1, {0x0, 0x3, 0x7}}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8000000000006, 0x0) write$binfmt_aout(r6, &(0x7f0000000240)=ANY=[], 0xfffffd2d) ioctl$KDSKBMETA(r6, 0x4b63, &(0x7f0000000080)=0x3) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) [ 1878.294967] ip_tables: iptables: counters copy to user failed while replacing table 09:43:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x189601, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$l2tp6(r2, &(0x7f0000000200)={0xa, 0x0, 0x7, @empty, 0x1, 0x4}, 0x20) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) getsockname(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000080)=0x80) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r5, 0xffff8001}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0x8, 0x81, 0x8, 0x6, 0x81, 0x0, 0x3, 0x0, r5}, &(0x7f00000001c0)=0x20) [ 1879.163284] ip_tables: iptables: counters copy to user failed while replacing table 09:43:59 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a000000", 0x14) 09:43:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x0, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:43:59 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r3 = dup2(r1, r2) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:43:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000080)=""/19) fcntl$setpipe(r1, 0x407, 0x0) exit(0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$KDADDIO(r1, 0x400455c8, 0xfffffffffffff2a5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:43:59 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000a2f000/0x2000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCAX25DELFWD(r4, 0x89eb, &(0x7f0000000240)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x379, @loopback, 0x4}}, 0x0, 0x0, 0x35, 0x0, "4f533647847c3ead21fa98c155f5e5cb84c3cf616880f1e4a01be1c01498c429fde12c941b8e16b996c7a773eb3b2a282f1b96cda3e4861307da30c509e5706b5bf7cc2a066030986dacc5a0c9801c82"}, 0xd8) [ 1879.603132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1879.628114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1879.637265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1879.646645] ip_tables: iptables: counters copy to user failed while replacing table [ 1879.655011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1879.663649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1879.671570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1879.680119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1879.687950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:44:00 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000040)=0x2) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:44:00 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000000000)={0x2, 0x0, 0x2009, 0xf4b3, 0x7b1, {0x10001, 0xfffffffd}, 0x2}) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:44:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x244040, 0x6d) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @random="fd465691cda0"}, 0x42, {0x2, 0x4e21, @broadcast}, 'ip6tnl0\x00'}) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x423) mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:01 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a00000000", 0x15) 09:44:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:44:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) r6 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:01 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(0x0, &(0x7f0000db0000/0x1000)=nil, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r4, 0xffff8001}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={r4, 0xc4, "50b1fb021fee7df69f94b593fb5673aca56b94265bbd9b3ddd8c368f38ca91d434b21bae5bcec58b5e089c14cc61a43349130e9c706d1f71460dfd2789ceed53e5ae713c92c48cbfe898b5ebb64218a6958448ef5d272cb99202688649edd64647fc1b4b69e42c289dd403a1bc4a828466ebda4abba5e41eb5346408316c29e8beb28bfbd763212c795cbaffe52d992b260dedab6a8aeab7366f816f3758adf3a15b5abfb040c5ff71be9c790e2c57eecdf4f07740bed759c87cebf72ea6aebb304ef643"}, &(0x7f0000000240)=0xcc) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={r5, 0xfffffffe, 0x5, 0x7}, 0x10) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:44:01 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000580)=""/22}, {&(0x7f00000005c0)=""/195}, {&(0x7f0000001340)=""/4096}, {&(0x7f0000000740)=""/11}, {&(0x7f0000000940)=""/216}, {&(0x7f0000000c40)=""/251}, {&(0x7f0000000d40)=""/150}]}, 0x1000}], 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0x100, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000100)="192b33ee90f7ea6cd0b4798e4b7f9019e8a40a1b5b75bfd99732eb70ed02f15416cff8025b4a31a4b7ef28b421ec65c222bab864ba311f51e235c44ae9de6ca8e26c1967936b3c12014c95daa69857e150610a915f996b36931a64483b4d4cae75fbdd6b16bad49ad6dd7c3635391a4bb5039b414ea22919d902dc8fab17c368f08ec33ecb9503d9fd1fa6f47fc7d69076a9f9762d7db06c7d3ec5201c1f710b42e6f43a8649995af5d0839bdcf2710bb92808d962c804c93d21ace722d6004197f8d80ba673e08bbe23f7d8deb3045e3e56", 0xd2, 0x3}, {&(0x7f0000000080)="c2ba8c22f2e928f21e615bd2f0b40e1a3cebaa3bbb7ebf5a413de5b11238e8b71a0046fb1724ef", 0x27, 0x1000}, {&(0x7f0000000200)="f2a40aeb2b20a8fc3b40e96803d7f18ea4fa4ad5c441ef04bc90619e179ce154197f4b6a556bb2d83064ee54f55ac93e3fad86339dbfc57503fe497ada8ceb6c41266bdb916fae56a8dc910f84878596492463d8a2662a83563bbf4d4b6ca8c48fa30d6bbc7b61303455c9b91cbcda277a9119878909189cba058bdac56b1d48989f28ab2aa11e6c4ae1373be91b3d5038fca17c72d64a6d54e660dee3a0e36f4c8ec8828f66fa68d5ea890e9a326f23cba1aa2272d9", 0xb6, 0x7}], 0x221085, &(0x7f0000000340)='proc+vboxnet0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) ioprio_set$uid(0x3, 0x0, 0x5) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x202002) keyctl$chown(0x4, r7, r5, r6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4e22, 0xd823, 0x4e24, 0x1, 0x0, 0xa0, 0x10, 0x3b, 0x0, r5}, {0x1ff, 0x10000, 0x0, 0x7, 0x101, 0x3, 0x52, 0x10000000000000}, {0x3979, 0x4, 0x10001, 0x800}, 0x13, 0x6e6bb3, 0x0, 0x0, 0x2, 0x1cb8a0bbaa496189}, {{@in6=@dev={0xfe, 0x80, [], 0x24}, 0x4d2, 0xff}, 0xa, @in6=@loopback, 0x3502, 0x3, 0x3, 0x1, 0x7, 0x0, 0x1}}, 0xe8) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) recvmmsg(r3, &(0x7f0000000a40)=[{{&(0x7f0000000380)=@alg, 0x80, &(0x7f0000000680), 0x0, &(0x7f00000006c0)=""/97, 0x61}, 0xd}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/196, 0xc4}, {&(0x7f00000008c0)=""/19, 0x13}], 0x2, &(0x7f0000000b40)=""/213, 0xd5}, 0xfff}], 0x2, 0x0, 0x0) 09:44:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x190e00eb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:02 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a00000000", 0x15) 09:44:02 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000080)={0x9f0000, 0x1, 0xb7f0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9c0903, 0x400, [], @ptr=0x8}}) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) 09:44:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) getcwd(&(0x7f0000000000)=""/137, 0x89) syz_read_part_table(0x7, 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)="652946c7b3876fd74d84bf7ae9c0d3c0f07a86d8b9347e199f489ff893d3e36689097bb6c6122bbe621e83e6a33282879c617c3f234feb6312cd9f925c23d52d00a6f8982dbf9a91698e04459ede4735a9bc0e8a91ce19a14bb3150721a2b9321ad5cd787bbc91fc31b2d8d76b556e3029dbbc481170669ec96db0b4d5b8017d744b55cb846e2a448912a84859d420f0c1ca0803c2d04a334e276ece4298c69f6ae543f943c252d7ce7fbfbfb2f12cf8eba93c5d614fc0430ffef71c2b95e1351de1eaf8d6b907980a42ed26e9d751", 0xcf, 0x1ff}]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000000c0)) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_open_procfs$namespace(r4, &(0x7f0000000240)='ns/mnt\x00') r5 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x80f) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000180)="bfbff627dcab5f3e69b35bf59aaffda2dc9d5531fe52fcf2621c697ddd67cd4a95a7ca5f8545f8f0a0cd93a1ed1a7e1c8015652b9ff2f2c5500eeaf6730eda51d86e5fa451d7e7e3", 0x48}, {&(0x7f0000000240)="e29277fd37e35db3930e", 0xa}, {&(0x7f00000002c0)="4f94d64680850843dfafc2c17b7c99b9eac3e8eae975c12d6df4244dc07e3d6cb46eb2816970027e15b6689086a85cd52b69b0dece47324e06191dbc0ceba733a174d8c5f1226a43d9116bf50c366c60d87dccb2221d0ae6f5897f2034b24551b06f7ad62f97895903dc89cac74256705e25dcdabdabe6160ee26bb644db1ce7d521a3766b0d439cd2a50a360a664102151ae6ac8b47f260fefcbabf4e7b6e5b61cbc0ad604976acc63a7dc809cdb9d718607918be2cc6fc8d5c74053a00f9de62c2", 0xc2}, {&(0x7f0000001340)="fe86362c1fc55cf788a3319938c853ada890bd8904fcab41d48a3d275e4a553c6a135edd6508ef22b47269aa627be1922f5c8c1406958dd13217e09bd8794e2e9d0f50e013cfa6c77f6a576e9df8cc58187076c09579a14675ae7669410e0473a6efbfab014157d3a6c9af84c202ac4ed9ccad1313e4209d18753fc724c9b5d05fccb26c0d4edf7d3371aed3534ab5a167d1ba069a0c5255040b66a31a4b9d7cd63a06b1c84da4e8f3250fd01efbb579f005eda9b4906755f5a4445f388651f44690894d170e71c49f812dac2c4c0f0b2a36687232a0e04605a6c0428dcbf6361bcf5a60d2d7f3f7068b5abbd6036b8e493eeb6951ce707ca0d7ab681611bd90729039ef73b0c711496d0dcdfde4dbdd74cb04b409f46d2643ee7c2fabb961d0ba4a7ba5c122b685d257ff60717f0756add19d3d80215a842fd8e4c80b199a60da781c4c0a2d713830718093f7ce13fd2c3feced3644cdf9c372cc73d81ad5332663061e8bf5ffe63e654e44fde2fb1ef2c270d4102de14ac66b1abd6fb976ba292ba51c72b836f784fb7f29d1075c2dce96af101fa15ddf87f6c143a999ca3ba9aab06ac95b87cfefbdf6298c0535133d04a8fbd5160e23255fd97d82a065257c6e1ba31245160fb1cbd0ae10165499269596a36ad31a5d6bd222a184f13e31766d107ade28ad16b2657e3d0e40ee144001c5e4dff30ca53d573bc935ad330218a341c7f21c95b3d21135d145f1cf6976889f1c5a2af5a22d31432f71734fe820109daabf40ffd367460496165845a9c21a48785f807031f42eb9ca201fe051cc5997d8ba482a283d07f1444224d8c727d70578c1106872320ed442b9b91c1283626c0bb3923c569cf50c053b2bc87ec4e4ec0a1a3636d4717c8dad8e521f653250a0d6dd004f95bd30157c39514ba617b63fabb20089690f649758a31f36f93d1e76c3dfc669dd4ade655e3b76f2e3ab1f6b46e46aa2fc7d662737389079dc02fdafaa3d2de9b4ecd4e49b7f2fee3ef229822f8832e22e85f092f578c6e7b465d901a4f24a504ece1aa675ec3a93a5023073aa86317db22118089989acbdc54f47b28d3184dcffcb4c285ac5eb262308054df65859718b5717706e5797e515fa00d5b62accee94235add6f7b807f7a1f8983d04a9f860479278991620d8e60791d7a1b50537776bc4ee990cd8cae2a8fb7c2e9a72bc4cbffe970085600b44b5761c679298821b1e03fdcd127949790dd8717750020b880441925b7bf9dfb82c93f89ad2cd0bc092b70dcfe2c95a9cc36d08d21f737847f6ea1f92196d3b1261e34024ad92338bada90f88e26b71d6239290cad08adbf2d4f16513d7911a91847b13ef73ce351e162ccaa241a33af6b9e73d2c0d71e77b02007925454f5e918699746f5e7bf2a672a041964fcd4f4b54a15e921454f2ad845905d500fb7753d50b39b3c060e016d6f1842959ebfbffac9f74288a440a7015fa4caabfa2a10a29224a95f3c6e69225627c58185ac310cab91a340894529596746fc6261b9b2f5e72f0462f8f8b53869f86598d25021cf613e015a0e5df9b4cef8181f3d008fc6cdd17fb4063cde97dc35bab6fa26692ad4f67d21a31f2a4fe3236e4d45777db8a17b31d6b500f31fc748b03c0f0446be9d12b8e92e9d02b037e53bfd1d0de67525cea84869225fc28760e63b456e9ad8fe24adc35a41966ac8aed3b14842c9a0c5a535bf3f45035c225b1c8d6942906dfc33bc582d72b7c25df07938773999e2bb3f49afc127b434e03683cca5a09b01cea943f8f5712839ccc25cbd8433ce31d4c1d9c9e8af2c74b6abee99c6029b215dbcfa7fa7a80b7fd3974f7a26189bc2f779a180b68ef494d6434049dae96903cb145331911e9dee13e81c3d486c6097e6ad35958bda94f7740dbce89cf45fb5265bd98a9476aad7517291ef458f16701614cc33deea5dc401f652dd0a632498cc1ac8d80d77c835ae4da4124de03c632aaaaca8ee92b44eaac093eacec5f19c42254c7c753c046d4750da12499e65bfdc182d083ca614bfff2176098acb37762de7b84f732eed5fabf7693c3bf9baf239c59dd64c7cf376aaa580fa46e0d3a728dc1b36e0f8c548754812db2a64c559ad86e1e929e97be33339eea6ce2005cfb2496040e745a623d6d95719a056c7ba36d0f31c1c2e2b02c9c4518374a195075ae06ee177a7dc7b8b08e868ab701ae2d29bb33663f8896e4b7dbc69aed5833a35ca3a799e2d3e149b6997953fc401d29a120a3af0bb86c8f32d4d19123c22aaacd0ce7be4b5b2da87d25ecc9f1231b069c298e09995e319ef930730ae0589df67599d707386ecbc68cba14d071b05b6bc757a0446779a1f5d74ce2abe7fece7f4ceea36ee17ec1b95a723f4a381bbd9cc468844742a746e65ade9ac636a6dc6fede723c66355be2b81740b30a19920548ad9cbe8c52c5c99566ae6363a5248ee8b7e740f677cbd69919f3c571c498752359b2d136d3178c91258422e07023626c667010862c9ab3c96e370cb3b5962b9e5b91ca6247082d83bc159c883b2fc6dee3944d5db299f4b09c759ac53e415bad90a0ad267b03ffd6a79551aa3bdd17158ff3e1a91bbbe75ec5b633a247b83f797e7afba053621f4a1e363d36dbc6cf7cde0a00ac18f4528b50ead14ce06df66c8699b62a11296985766b24ce3a338e6d63423f89a515b6b13e0e2d4849c7815909d953fe681ac300a9157b37701ed1cb0fa70b23e465ae0779b217971e16d3942a637610830e6029528fbfe80336e134a6d11cbb1e02c5e0f79c2e3b79da84dbca125127c3f95cd90af44b162eb25e1f1085aa36558774173a78fc449f084f389560d5d3aac576972d03c18b6361db9a6fd6270d3b415fdd6b38cec14530ff7a996facb69bec9ad43f78c1d8ea2bc41357ab05f850a7b425edf95196422d698b7bbae1c9512843993197bc7a98e66a37c8c681a6ecc37947e983bfb670958b9ef7791ccb24feee204c6b8454a8176a88dabf6141477638f9a138d693fd95fca06ffa262ed71bbe16dcd35e72e2e7c8d7da67115e068cb4716ddf1794e91c0629209aa538121361336da8bc03cc83fd4c938278803d7db52d983e553f3843b9e3d64a97c7a9ac58db5593c453b9c9c3a363a6482bc35d9632871e2fd11ab39fa4cc866bb29e38f159e8284a33c55942dd783b85d7147f62287b58fc661ce56ed49a14cc21d174e5e9e664367b3186fd1d23cb4fecbfc65b1dba21a742463c2d2123b44a5281aaa60cc6189b382f0c2eddedd6d5e2117ea4b115f282db6bef7472af163758be1a3c1ad3505cf6bad0162173bcb1589527c25d8cf70980130d09c3ea99fd54be78549ecc0c6330d9d201f20e07004966d8c85d58591e39ead3b6c51aa422a94974f9f50e3ec011c3c474e035bc58d8c7cccc5b8c77989cb43d955877888e8c6206635c06bf8a53720132951d0243c1f3f97126e9a04b04bb0bfd7cc68f23cbe35cc7d463d574300508bf97eed6f6b0bcfb38a9c526dfa4c1af35493d19d059542ce20d9eabed6905a82003e60c0f10c855e93067157094fb47b24cb7cb3aeef1d8800b3df78f6d84eeb17e7ba537b087807c5e9bfdfb5592041a288199dcd2fb1fefadad7a0aaa792871d3f23f6f6854478b9ea9f5531413b3e7f9f03efe98dc6d57afa66009b18dc90f84f85a4d8ddf32317692cf95fbff0a08ab81488f5b1e0cbfef604e826ce1eea8799911a639951d56c0d69acda861d94d9b61bbbd9b3500ac07d519320965afe60d70209d7250fe9ae6ee5fd4023f2c4fef9b1686a9010b65fdf249f131821e745d1ff82e7a50db4d4cdfc675fae9fe9f290f39ce68bfe21abe916ef4f31b2693d83b28d06a411c55690c3a6972c602a92f911505cecc7a12147c2498c18c898610b14e78d7e6099e50ecb540d6860bd2419e8c452223298956d824193c18f89346cf304c776ba70518499236c8b13dd288c8136de05de05bd1f15f50b41e55a77dcecac4a02f925177ccdc4c255d19cc3e595df20ea146a073c6f428196d55916035761512183e95d207a2c72596fc9da998c47b1f01c51b17dbc94bc682fc272b77d0354e21792979110790c8a90f10cb2ee46428e33c2a1dd872d3fcb48fb73a72369dcf19d9b2c1fa58f59df9d9219623a8785b8c8d186e374a558ed3554dc2ac4c6e1cd1c369f2f4fbca053f8ce25ef71c4decf3a57a1a5843f74fcdeaf0ae310f83344088407218b0a8dfc7d1ebad7c5ed11adf3b1163a7cd4b2c363ae2deebe9eecd9a98d59e8b15c04dfe21e2fe9840dbdbdd4966a40f7709b2d8b9a1ef44e14d391b954f73f72328d548157459d6f2fb30d4337c69edbec33cd171d4c05ebfc429dc958921f7d1041163549fe4979e2319cd129ff023b94651cd7e1cb24a696eba638a7607893788236120a1492c6f6407ea984ad3c997104b14487a194fd075039f7d23b714d61fddca9c24a9c453a2306e1127d7f41cb20af01ae2030b9e4cb96f6edbd4122c86e6af9c89a77870cf7a3c7189582204098266085e19f07135588dbd04ab3dcc465598db01cf0b3ca78c2890b3c9407767abf4e7067c709d55e30a4a6551b526eb58281a865169eeabb835ec8f168c4ab90d8faede5cce1ad022197a22ffc37cd08b59862a7df47293efd80096c8e87d46436b727f02f7c7bb2bb72b96466b8571f2b077e3b02912490d1b3653e0e1ec1743fbdbedb081a75c3d4c299d89a35630893f7aa066d5638d90a4eeaa05459092919be964503310760a236b638ca66390cd5d9fbfbb3e908b91e4ece14f2ca274a11cf567707979e7d0aff0b09465005fc189e6d0432cbcb1d3e3fb4f1517648b3d32721af27389f4d2c3bf89f3b340410f23bc583c60feaceeff0fe1a1c83b46f43c41fdbe1d8e83e7b8d24390fbe92aa07f04b2f7de6c90371da9d5e0758893c851c007789f408bc906520ac5d1d13f11bb04b33460d5c6392035683ec38822a0e8e054f98806bdc492e7ae8a6e81e7b2e7b044020446755db031e8594a190aa3e0a649d7ca638e64b342f28ac3b28386d04ed1761f44b4afd13146ef8962d43fdda02514c0ac468a955ca96c9089ccdf15e6896a0e53c23c785d8d4456ef8367c421598c50c4302828798d361a06de91b37ee8fd900eeb5454890f7304af166886fe8e039c8cc9a727335fd8735477bcb6914e3d6374a9bc032c599e52293d30325ea62f03f0e68e696c1c46e71b76ee92d157b29197a2c1e563b0acadfa910f8d406fa3a5cfb8107976176bd9515fa715de8a292e81966d7f03a60d270b353ee8fa1e02c7536f30b44160e9b694665d65766acccc4271f9da2d29fee183db302b9d07bed2ad8e35a7fb097a6a4a6fd23d7287cd695781fa351b40d18e77044ebb45ca35743a9e031bb5dd2626906ea37ee175541371efb6f5660c33012b5e776ed6ca41147428bef93683fb1575bbfd5964f28f036b647b77257235b64a975b8df4435784df76dbb69a5c51c1267adcedef9f4efee3b30928bf4276b4614a4a043280dfc44c3aa280eacf7bf876a1c6df69afb815e699e5dd7b1441c58b987398a441d0e5c0b1f5e6a0b5fcf483b27cabd2c47c9291808a7d137162d779ad12d8f6228ac208a1c62c48ef56103dc7efae4dfbae3330619dfd5ac5430e4df27c9c7c4f03a31652465d30970b0e87cdbe24b93e4abf7927522b0456774d42d299cf7f69dd55c01435b96320dc3f2393ffed83d968bd7f9b8e45899dd1b6b03fab133b31a55cec3f3acd79ab3cbab81784526e3c", 0x1000}, {&(0x7f00000003c0)="62dffe6d", 0x4}, {&(0x7f0000000580)="b958c064855915959e3af609002cdd05413c197c210a2b17daae48f3617447843716a4ddae5d7a95c130f66326afe0b79dfc7e0cd1f7489dfa3d260d9ef4a66bcbc95a8237c669b18d48664b1b4a052837e71a98d5a9a02478fb0bd4c6f059decdb57e67057e6f645c702f4187e7a5ca916aae5a220e5024a7fc2a5374e50ceb78eb779e045e1540c3b9a9040a4a8c68b50a6090c0f4b399ad5cf64f3cbbf30526a54ded3d51973afcd76fd05c333928b3c36de7c863d2e2487bd2bc", 0xbc}, {&(0x7f00000004c0)="a90debbab2784cd355", 0x9}, {&(0x7f0000000700)="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", 0xff}], 0x8, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) setgroups(0x1, &(0x7f00000000c0)=[0x0]) setregid(0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)={0x5, 0x9, 0x4, 0x70000, 0xff, {0x77359400}, {0x5, 0x0, 0x20, 0xff, 0x1, 0x3, "60f33eda"}, 0x3ff, 0x3, @userptr=0x6, 0x8, 0x0, r2}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDADDIO(r3, 0x400455c8, 0x9) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000080)={0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:44:02 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000180)}], 0x1, 0x4) name_to_handle_at(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140), 0x1400) r3 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r3, &(0x7f0000db0000/0x1000)=nil, 0x5000) r4 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r4, &(0x7f0000c3a000/0x2000)=nil, 0x2000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) [ 1882.481288] Dev loop5: unable to read RDB block 1 [ 1882.501038] loop5: unable to read partition table [ 1882.520512] loop5: partition table beyond EOD, truncated [ 1882.538853] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 09:44:03 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x62, 0x1}]}, {0x0, [0x0, 0x30, 0x0, 0x61]}}, &(0x7f0000000380)=""/145, 0x2e, 0x91, 0x1}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={r2, 0x1}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000040)={r2, 0x28}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000480)={r2, 0x1}) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) [ 1882.667291] Dev loop5: unable to read RDB block 1 [ 1882.672403] loop5: unable to read partition table [ 1882.700294] loop5: partition table beyond EOD, truncated [ 1882.731283] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1882.754918] Dev loop5: unable to read RDB block 1 [ 1882.765549] loop5: unable to read partition table [ 1882.772150] loop5: partition table beyond EOD, truncated 09:44:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:03 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a00000000", 0x15) 09:44:04 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:44:04 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) mq_timedreceive(r0, &(0x7f0000000440)=""/105, 0x69, 0x922, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3f8, 0x400, 0x70bd28, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4011}, 0x24000040) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) 09:44:04 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000080)={0x0, @reserved}) recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x1f, @ipv4={[], [], @multicast2}, 0x10001}, 0x1c) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:44:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000100)=0xfffffff7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:44:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x8001) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f00000002c0)) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="f144298c", @ANYRES16=r6, @ANYBLOB="090028bd7000fcdbdf250800000008000c000000000008000200030000001400060000000000000000000000ffffe000000206000b001f00000014000500fe88000000000000000000000000000114000600fe88000000000000000000000000040108000800000000007b3f4ff7e6fab8821365530d25a0dd7603cc32653a8fe31804a3facf8acd8ef585b4e8289379ff3ee91d738b86330e34b373b4772c85f06db05380a09205f99b9ea22cdc5906692d9ebd5922be1d893e1e06b9e4e8727854d90fee0da72fdca95afd408c3f"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r7 = accept4(r0, 0x0, &(0x7f0000000180), 0x0) getsockopt$inet_buf(r7, 0x0, 0x25, &(0x7f00000001c0)=""/187, &(0x7f0000000280)=0xbb) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) getsockopt$rose(r7, 0x104, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 09:44:04 executing program 1: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) [ 1884.951235] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1885.079386] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1885.105741] CPU: 1 PID: 6364 Comm: syz-executor.0 Not tainted 4.14.177-syzkaller #0 [ 1885.113681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1885.123063] Call Trace: [ 1885.125662] dump_stack+0x13e/0x194 [ 1885.129297] dump_header+0x178/0x6d4 [ 1885.133028] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1885.138055] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1885.143167] ? ___ratelimit+0x50/0x519 [ 1885.147063] oom_kill_process.cold+0x10/0xae3 [ 1885.151577] ? lock_downgrade+0x6e0/0x6e0 [ 1885.155753] out_of_memory+0x2d5/0x1110 [ 1885.159742] ? oom_killer_disable+0x1c0/0x1c0 [ 1885.164269] ? mutex_trylock+0x152/0x1a0 [ 1885.168339] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1885.173207] ? warn_alloc+0xf0/0xf0 [ 1885.176851] __alloc_pages_nodemask+0x5d3/0x700 [ 1885.181525] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1885.186549] ? lock_downgrade+0x6e0/0x6e0 [ 1885.190711] alloc_pages_current+0xe7/0x1e0 [ 1885.195064] __page_cache_alloc+0x245/0x3d0 [ 1885.199396] filemap_fault+0xc18/0x1c50 [ 1885.203390] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1885.208080] ? lock_acquire+0x170/0x3f0 [ 1885.212055] ? ext4_filemap_fault+0x7c/0xb0 [ 1885.216385] ext4_filemap_fault+0x84/0xb0 [ 1885.220533] __do_fault+0xfa/0x380 [ 1885.224081] __handle_mm_fault+0x22e9/0x3280 [ 1885.228496] ? copy_page_range+0x1d70/0x1d70 [ 1885.233172] ? find_held_lock+0x2d/0x110 [ 1885.237338] handle_mm_fault+0x288/0x7a0 [ 1885.241417] __do_page_fault+0x4bc/0xb40 [ 1885.245483] ? vmalloc_fault+0xdf0/0xdf0 [ 1885.249544] ? do_page_fault+0x60/0x4f2 [ 1885.253519] ? page_fault+0x2f/0x50 [ 1885.257145] page_fault+0x45/0x50 [ 1885.260602] RIP: 19ceabd0:0x1cc159 [ 1885.264136] RSP: 1cc234:000000000000063d EFLAGS: 00000008 [ 1886.244506] Mem-Info: [ 1886.290139] active_anon:234569 inactive_anon:1092418 isolated_anon:0 [ 1886.290139] active_file:60 inactive_file:0 isolated_file:0 [ 1886.290139] unevictable:27863 dirty:0 writeback:0 unstable:0 [ 1886.290139] slab_reclaimable:15927 slab_unreclaimable:120082 [ 1886.290139] mapped:61864 shmem:19141 pagetables:10620 bounce:0 [ 1886.290139] free:25060 free_pcp:36 free_cma:0 [ 1886.536210] Node 0 active_anon:909632kB inactive_anon:768472kB active_file:20kB inactive_file:0kB unevictable:98472kB isolated(anon):0kB isolated(file):0kB mapped:231436kB dirty:0kB writeback:0kB shmem:49920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1886.758381] Node 1 active_anon:28644kB inactive_anon:3601200kB active_file:16kB inactive_file:20kB unevictable:12980kB isolated(anon):0kB isolated(file):0kB mapped:16020kB dirty:0kB writeback:0kB shmem:26644kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1886.968565] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:256kB inactive_anon:1972kB active_file:0kB inactive_file:0kB unevictable:80kB writepending:0kB present:15992kB managed:15908kB mlocked:80kB kernel_stack:32kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1887.144625] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1887.184613] Node 0 DMA32 free:36268kB min:36272kB low:45340kB high:54408kB active_anon:909384kB inactive_anon:766500kB active_file:52kB inactive_file:32kB unevictable:98836kB writepending:0kB present:3129332kB managed:2621260kB mlocked:98836kB kernel_stack:9184kB pagetables:13468kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1887.402320] lowmem_reserve[]: 0 0 0 0 0 [ 1887.425367] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1887.635213] lowmem_reserve[]: 0 0 0 0 0 [ 1887.665433] Node 1 Normal free:53160kB min:53612kB low:67012kB high:80412kB active_anon:28632kB inactive_anon:3601200kB active_file:0kB inactive_file:0kB unevictable:13100kB writepending:0kB present:3932160kB managed:3870192kB mlocked:13100kB kernel_stack:7936kB pagetables:28864kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 1887.873669] lowmem_reserve[]: 0 0 0 0 0 [ 1887.902259] Node 0 DMA: 5*4kB (UME) 15*8kB (UM) 4*16kB (UME) 10*32kB (UME) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10444kB [ 1888.005587] Node 0 DMA32: 1453*4kB (UME) 842*8kB (UME) 87*16kB (UME) 95*32kB (UME) 128*64kB (U) 47*128kB (UM) 11*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 36564kB [ 1888.102986] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1888.145581] Node 1 Normal: 67*4kB (UME) 20*8kB (UM) 22*16kB (UME) 134*32kB (UME) 266*64kB (UME) 102*128kB (UME) 48*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 53580kB [ 1888.205074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1888.224220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1888.262351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1888.284677] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1888.304102] 23465 total pagecache pages [ 1888.344594] 0 pages in swap cache [ 1888.361462] Swap cache stats: add 0, delete 0, find 0/0 09:44:08 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000240)="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", 0x110) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x800, 0x0) mkdirat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x1ff) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:44:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r3, 0xffff8001}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={r3, @in={{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x80000, 0xad, 0x7, 0x6, 0x5}, &(0x7f0000000080)=0x98) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:44:08 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x60, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc800}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) [ 1888.395718] Free swap = 0kB [ 1888.413221] Total swap = 0kB [ 1888.430450] 1965979 pages RAM [ 1888.444937] 0 pages HighMem/MovableOnly [ 1888.476493] 339053 pages reserved [ 1888.494985] 0 pages cma reserved [ 1888.514550] Out of memory: Kill process 24682 (syz-executor.2) score 1008 or sacrifice child 09:44:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xd8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x100000001) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x5, 0x200d}) bind$inet(r5, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x200012) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1889.228814] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1889.331704] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1889.347754] CPU: 0 PID: 24699 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 1889.355656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1889.365107] Call Trace: [ 1889.367715] dump_stack+0x13e/0x194 [ 1889.371362] dump_header+0x178/0x6d4 [ 1889.375075] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1889.380173] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1889.385267] ? ___ratelimit+0x50/0x519 [ 1889.389160] oom_kill_process.cold+0x10/0xae3 [ 1889.393730] ? lock_downgrade+0x6e0/0x6e0 [ 1889.397865] out_of_memory+0x2d5/0x1110 [ 1889.401835] ? oom_killer_disable+0x1c0/0x1c0 [ 1889.406341] ? mutex_trylock+0x152/0x1a0 [ 1889.410411] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1889.415324] ? warn_alloc+0xf0/0xf0 [ 1889.418949] __alloc_pages_nodemask+0x5d3/0x700 [ 1889.423605] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1889.428692] ? find_held_lock+0x2d/0x110 [ 1889.433115] alloc_pages_vma+0xc2/0x4a0 [ 1889.437248] __handle_mm_fault+0x17b6/0x3280 [ 1889.442119] ? copy_page_range+0x1d70/0x1d70 [ 1889.446563] ? find_held_lock+0x2d/0x110 [ 1889.450651] handle_mm_fault+0x288/0x7a0 [ 1889.454735] __get_user_pages+0x44d/0x11e0 [ 1889.458974] ? follow_page_mask+0x1580/0x1580 [ 1889.463488] ? lock_acquire+0x170/0x3f0 [ 1889.467465] ? __mm_populate+0x1e3/0x2c0 [ 1889.471542] populate_vma_page_range+0x17b/0x210 [ 1889.476299] __mm_populate+0x195/0x2c0 [ 1889.480176] ? populate_vma_page_range+0x210/0x210 [ 1889.485177] ? security_capable+0x88/0xb0 [ 1889.489320] SyS_mlockall+0x3f5/0x520 [ 1889.493111] ? SyS_munlock+0xf0/0xf0 [ 1889.496849] do_syscall_64+0x1d5/0x640 [ 1889.500743] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1889.505950] RIP: 0033:0x45c829 [ 1889.509125] RSP: 002b:00007fc8f238bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1889.516831] RAX: ffffffffffffffda RBX: 00000000004f5900 RCX: 000000000045c829 [ 1889.524099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1889.531369] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1889.538889] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1889.546262] R13: 0000000000000737 R14: 00000000004c9f77 R15: 00007fc8f238c6d4 [ 1889.554882] Mem-Info: [ 1889.557366] active_anon:235346 inactive_anon:1092402 isolated_anon:0 [ 1889.557366] active_file:24 inactive_file:0 isolated_file:13 [ 1889.557366] unevictable:27718 dirty:0 writeback:0 unstable:0 [ 1889.557366] slab_reclaimable:15919 slab_unreclaimable:119510 [ 1889.557366] mapped:61101 shmem:19141 pagetables:10652 bounce:0 [ 1889.557366] free:24933 free_pcp:60 free_cma:0 [ 1889.592078] Node 0 active_anon:911280kB inactive_anon:768456kB active_file:52kB inactive_file:24kB unevictable:99580kB isolated(anon):0kB isolated(file):52kB mapped:232292kB dirty:0kB writeback:0kB shmem:49920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1889.620545] Node 1 active_anon:30104kB inactive_anon:3601152kB active_file:40kB inactive_file:0kB unevictable:11292kB isolated(anon):0kB isolated(file):0kB mapped:12112kB dirty:0kB writeback:0kB shmem:26644kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1889.648648] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:260kB inactive_anon:1972kB active_file:0kB inactive_file:0kB unevictable:100kB writepending:0kB present:15992kB managed:15908kB mlocked:100kB kernel_stack:32kB pagetables:76kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1889.676200] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1889.681350] Node 0 DMA32 free:35888kB min:36272kB low:45340kB high:54408kB active_anon:911020kB inactive_anon:766484kB active_file:0kB inactive_file:228kB unevictable:99480kB writepending:0kB present:3129332kB managed:2621260kB mlocked:99480kB kernel_stack:9440kB pagetables:13624kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1889.710939] lowmem_reserve[]: 0 0 0 0 0 [ 1889.714931] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1889.740416] lowmem_reserve[]: 0 0 0 0 0 [ 1889.744425] Node 1 Normal free:53496kB min:53612kB low:67012kB high:80412kB active_anon:30104kB inactive_anon:3601152kB active_file:40kB inactive_file:0kB unevictable:11292kB writepending:0kB present:3932160kB managed:3870192kB mlocked:11292kB kernel_stack:7904kB pagetables:28908kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1889.774381] lowmem_reserve[]: 0 0 0 0 0 [ 1889.778500] Node 0 DMA: 4*4kB (UME) 8*8kB (UM) 7*16kB (UME) 10*32kB (UME) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10432kB [ 1889.794275] Node 0 DMA32: 1317*4kB (UME) 1042*8kB (UME) 122*16kB (UME) 106*32kB (UME) 128*64kB (U) 31*128kB (UM) 10*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 36228kB [ 1889.811657] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1889.822424] Node 1 Normal: 38*4kB (UE) 2*8kB (U) 11*16kB (UME) 137*32kB (UME) 270*64kB (UME) 102*128kB (UME) 48*256kB (UME) 4*512kB (ME) 4*1024kB (M) 0*2048kB 0*4096kB = 53496kB [ 1889.838551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1889.847430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1889.856048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1889.864894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1889.873512] 22573 total pagecache pages [ 1889.877796] 0 pages in swap cache [ 1889.881256] Swap cache stats: add 0, delete 0, find 0/0 [ 1889.886753] Free swap = 0kB [ 1889.889801] Total swap = 0kB [ 1889.892815] 1965979 pages RAM [ 1889.896062] 0 pages HighMem/MovableOnly [ 1889.900051] 339053 pages reserved [ 1889.903493] 0 pages cma reserved [ 1889.906904] Out of memory: Kill process 11112 (syz-executor.4) score 1007 or sacrifice child [ 1889.915517] Killed process 11112 (syz-executor.4) total-vm:74968kB, anon-rss:18256kB, file-rss:34624kB, shmem-rss:0kB [ 1890.096927] net_ratelimit: 180 callbacks suppressed [ 1890.096933] ip_tables: iptables: counters copy to user failed while replacing table [ 1890.140357] oom_reaper: reaped process 11112 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1891.295642] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1891.309098] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1891.314283] CPU: 1 PID: 24706 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 1891.322175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1891.331538] Call Trace: [ 1891.334149] dump_stack+0x13e/0x194 [ 1891.337801] dump_header+0x178/0x6d4 [ 1891.341529] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1891.346560] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1891.351680] ? ___ratelimit+0x50/0x519 [ 1891.355596] oom_kill_process.cold+0x10/0xae3 [ 1891.360223] ? lock_acquire+0x170/0x3f0 [ 1891.364214] ? lock_downgrade+0x6e0/0x6e0 [ 1891.368378] out_of_memory+0x2d5/0x1110 [ 1891.372369] ? oom_killer_disable+0x1c0/0x1c0 [ 1891.376884] ? mutex_trylock+0x152/0x1a0 [ 1891.380981] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1891.385850] ? warn_alloc+0xf0/0xf0 [ 1891.389502] __alloc_pages_nodemask+0x5d3/0x700 [ 1891.394183] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1891.399242] ? lock_downgrade+0x6e0/0x6e0 [ 1891.403501] alloc_pages_current+0xe7/0x1e0 [ 1891.407851] __page_cache_alloc+0x245/0x3d0 [ 1891.412192] filemap_fault+0xc18/0x1c50 [ 1891.416193] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1891.420874] ? lock_acquire+0x170/0x3f0 [ 1891.424854] ? ext4_filemap_fault+0x7c/0xb0 [ 1891.429222] ext4_filemap_fault+0x84/0xb0 [ 1891.433382] __do_fault+0xfa/0x380 [ 1891.437021] __handle_mm_fault+0x22e9/0x3280 [ 1891.441443] ? copy_page_range+0x1d70/0x1d70 [ 1891.445898] ? find_held_lock+0x2d/0x110 [ 1891.449987] handle_mm_fault+0x288/0x7a0 [ 1891.454153] __get_user_pages+0x44d/0x11e0 [ 1891.458407] ? follow_page_mask+0x1580/0x1580 [ 1891.462923] ? lock_acquire+0x170/0x3f0 [ 1891.466939] ? __mm_populate+0x1e3/0x2c0 [ 1891.471026] populate_vma_page_range+0x17b/0x210 [ 1891.475815] __mm_populate+0x195/0x2c0 [ 1891.479727] ? populate_vma_page_range+0x210/0x210 [ 1891.484683] ? security_capable+0x88/0xb0 [ 1891.488846] SyS_mlockall+0x3f5/0x520 [ 1891.492650] ? SyS_munlock+0xf0/0xf0 [ 1891.496369] do_syscall_64+0x1d5/0x640 [ 1891.500382] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1891.505572] RIP: 0033:0x45c829 [ 1891.508766] RSP: 002b:00007ffba12edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1891.516504] RAX: ffffffffffffffda RBX: 00000000004f5900 RCX: 000000000045c829 [ 1891.523868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1891.531144] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1891.538558] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1891.546240] R13: 0000000000000737 R14: 00000000004c9f77 R15: 00007ffba12ee6d4 [ 1891.658972] Mem-Info: [ 1891.662026] active_anon:235308 inactive_anon:1087859 isolated_anon:0 [ 1891.662026] active_file:644 inactive_file:1259 isolated_file:0 [ 1891.662026] unevictable:24219 dirty:5 writeback:0 unstable:0 [ 1891.662026] slab_reclaimable:15911 slab_unreclaimable:119421 [ 1891.662026] mapped:60557 shmem:19141 pagetables:10611 bounce:0 [ 1891.662026] free:30775 free_pcp:528 free_cma:0 [ 1891.710915] Node 0 active_anon:911084kB inactive_anon:768520kB active_file:1828kB inactive_file:2112kB unevictable:83516kB isolated(anon):0kB isolated(file):128kB mapped:227348kB dirty:12kB writeback:0kB shmem:49920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1891.759496] Node 1 active_anon:30148kB inactive_anon:3582916kB active_file:112kB inactive_file:0kB unevictable:13360kB isolated(anon):0kB isolated(file):0kB mapped:15580kB dirty:8kB writeback:0kB shmem:26644kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1891.802053] Node 0 DMA free:10484kB min:220kB low:272kB high:324kB active_anon:260kB inactive_anon:1972kB active_file:0kB inactive_file:24kB unevictable:96kB writepending:0kB present:15992kB managed:15908kB mlocked:112kB kernel_stack:32kB pagetables:76kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1891.838442] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1891.844206] Node 0 DMA32 free:47628kB min:36272kB low:45340kB high:54408kB active_anon:911328kB inactive_anon:766548kB active_file:2704kB inactive_file:3480kB unevictable:83768kB writepending:4kB present:3129332kB managed:2621260kB mlocked:83500kB kernel_stack:9248kB pagetables:13556kB bounce:0kB free_pcp:1040kB local_pcp:372kB free_cma:0kB [ 1891.883313] lowmem_reserve[]: 0 0 0 0 0 [ 1891.887575] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1891.920967] lowmem_reserve[]: 0 0 0 0 0 [ 1891.926123] Node 1 Normal free:66392kB min:53612kB low:67012kB high:80412kB active_anon:30148kB inactive_anon:3582916kB active_file:76kB inactive_file:40kB unevictable:13388kB writepending:8kB present:3932160kB managed:3870192kB mlocked:13644kB kernel_stack:7904kB pagetables:28812kB bounce:0kB free_pcp:1272kB local_pcp:624kB free_cma:0kB [ 1891.962951] lowmem_reserve[]: 0 0 0 0 0 [ 1891.967324] Node 0 DMA: 4*4kB (UME) 10*8kB (UM) 8*16kB (UME) 11*32kB (UME) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10496kB [ 1891.989308] Node 0 DMA32: 2586*4kB (UME) 1701*8kB (UME) 371*16kB (UME) 155*32kB (UME) 150*64kB (UM) 38*128kB (UM) 8*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 52384kB [ 1892.011160] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1892.022836] Node 1 Normal: 542*4kB (UME) 405*8kB (UM) 240*16kB (UME) 123*32kB (UME) 245*64kB (UME) 123*128kB (UME) 56*256kB (UME) 6*512kB (ME) 5*1024kB (M) 0*2048kB 0*4096kB = 67136kB [ 1892.045739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1892.055776] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1892.070601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1892.081259] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1892.093548] 21686 total pagecache pages [ 1892.098959] 0 pages in swap cache [ 1892.102442] Swap cache stats: add 0, delete 0, find 0/0 [ 1892.112332] Free swap = 0kB [ 1892.115476] Total swap = 0kB [ 1892.120793] 1965979 pages RAM [ 1892.123947] 0 pages HighMem/MovableOnly [ 1892.132599] 339053 pages reserved [ 1892.137861] 0 pages cma reserved [ 1892.141256] Out of memory: Kill process 24700 (syz-executor.4) score 1008 or sacrifice child 09:44:13 executing program 1 (fault-call:1 fault-nth:0): r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:44:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r1, 0x406, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) [ 1892.865259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1892.880917] FAULT_INJECTION: forcing a failure. [ 1892.880917] name failslab, interval 1, probability 0, space 0, times 0 [ 1892.893957] CPU: 1 PID: 24738 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 1892.901857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1892.911995] Call Trace: 09:44:13 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r4, 0xffff8001}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r4, @in6={{0xa, 0x4e22, 0x89e00000, @private1={0xfc, 0x1, [], 0x1}, 0xff}}, 0x1f, 0x2}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000240)={r5, 0x3, 0x28, "a4656becd9e3305a71b17bcb0515682f5a711ec01e1ffde09b5be48dbab7a166578338c0b8a57395"}, 0x30) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:44:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000140)={0xb}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)={0x3}) ioctl$KDADDIO(r0, 0x400455c8, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$isdn(r4, &(0x7f0000000100)={0x22, 0x2, 0xe0, 0x8, 0x98}, 0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1892.914615] dump_stack+0x13e/0x194 [ 1892.918286] should_fail.cold+0x10a/0x14b [ 1892.922449] should_failslab+0xd6/0x130 [ 1892.926435] kmem_cache_alloc_node+0x288/0x7a0 [ 1892.931026] ? mutex_trylock+0x1a0/0x1a0 [ 1892.935101] ? check_preemption_disabled+0x35/0x240 [ 1892.940240] __alloc_skb+0x9a/0x4c0 [ 1892.943875] ? skb_trim+0x160/0x160 [ 1892.947513] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1892.953072] netlink_dump+0x218/0xab0 [ 1892.956909] ? consume_skb+0xaf/0x330 [ 1892.960732] netlink_recvmsg+0xa53/0xda0 [ 1892.964799] ? netlink_dump+0xab0/0xab0 [ 1892.968814] ? security_socket_recvmsg+0x8b/0xc0 [ 1892.974453] ? netlink_dump+0xab0/0xab0 [ 1892.978435] sock_recvmsg+0xc0/0x100 [ 1892.982160] sock_read_iter+0x252/0x360 [ 1892.986149] ? sock_recvmsg+0x100/0x100 [ 1892.990141] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1892.996872] ? selinux_file_open+0x3c0/0x3c0 [ 1893.001310] do_iter_readv_writev+0x4a0/0x600 [ 1893.005823] ? vfs_dedupe_file_range+0x910/0x910 [ 1893.010623] ? rw_verify_area+0xe1/0x2a0 [ 1893.014695] do_iter_read+0x217/0x5a0 [ 1893.018534] ? dup_iter+0x240/0x240 [ 1893.022167] ? save_trace+0x290/0x290 [ 1893.025970] ? save_trace+0x290/0x290 [ 1893.029779] vfs_readv+0xd3/0x130 [ 1893.033247] ? compat_rw_copy_check_uvector+0x320/0x320 [ 1893.038629] ? __fget+0x201/0x360 [ 1893.042089] ? lock_downgrade+0x6e0/0x6e0 [ 1893.046251] ? __fget+0x228/0x360 [ 1893.049718] ? __fget_light+0x199/0x1f0 [ 1893.053700] do_readv+0xfc/0x2c0 [ 1893.057072] ? vfs_readv+0x130/0x130 [ 1893.060795] ? SyS_clock_settime+0x1a0/0x1a0 [ 1893.065407] ? do_syscall_64+0x4c/0x640 [ 1893.069405] ? do_preadv+0x200/0x200 [ 1893.073128] do_syscall_64+0x1d5/0x640 [ 1893.077032] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1893.082225] RIP: 0033:0x45c829 [ 1893.085411] RSP: 002b:00007fc8f238bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1893.093125] RAX: ffffffffffffffda RBX: 00000000004fae40 RCX: 000000000045c829 [ 1893.100403] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000003 [ 1893.107680] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 09:44:13 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0x2, 0x4706}, 0x0, 0x0, 0x1}, r0, 0x7, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000380)={0xf000, &(0x7f0000000340), 0x2, r2, 0xc}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) [ 1893.114956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1893.122233] R13: 000000000000088c R14: 00000000004cb1e3 R15: 00007fc8f238c6d4 [ 1893.171901] ip_tables: iptables: counters copy to user failed while replacing table 09:44:13 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000000)={0x2, "07db"}, 0x3) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x4103}, {0x20, 0x17, {0x0, 0x0, @l2={'ib', 0xa, 'veth1_virt_wifi\x00'}}}}}, 0x3c}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_G_STD(r8, 0x80085617, &(0x7f00000001c0)) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032abd7000fbdbdf25010000000000000008410000004c00180000000773797a3100"/98], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x1) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) [ 1893.247036] ip_tables: iptables: counters copy to user failed while replacing table 09:44:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0xc0605345, &(0x7f0000000040)={0x9, 0x2, {0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x40000000}) [ 1893.550653] ip_tables: iptables: counters copy to user failed while replacing table [ 1894.021862] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1894.091482] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1894.104577] CPU: 1 PID: 24740 Comm: syz-executor.3 Not tainted 4.14.177-syzkaller #0 [ 1894.112532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1894.121880] Call Trace: [ 1894.124533] dump_stack+0x13e/0x194 [ 1894.128156] dump_header+0x178/0x6d4 [ 1894.131862] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1894.136915] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1894.142008] ? ___ratelimit+0x50/0x519 [ 1894.145888] oom_kill_process.cold+0x10/0xae3 [ 1894.150832] ? lock_acquire+0x170/0x3f0 [ 1894.154813] ? lock_downgrade+0x6e0/0x6e0 [ 1894.158950] out_of_memory+0x2d5/0x1110 [ 1894.162927] ? oom_killer_disable+0x1c0/0x1c0 [ 1894.167428] ? mutex_trylock+0x152/0x1a0 [ 1894.171484] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1894.176321] ? warn_alloc+0xf0/0xf0 [ 1894.179955] __alloc_pages_nodemask+0x5d3/0x700 [ 1894.184626] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1894.189646] ? lock_downgrade+0x6e0/0x6e0 [ 1894.193799] alloc_pages_current+0xe7/0x1e0 [ 1894.198110] __page_cache_alloc+0x245/0x3d0 [ 1894.202434] filemap_fault+0xc18/0x1c50 [ 1894.206413] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1894.211080] ? lock_acquire+0x170/0x3f0 [ 1894.215044] ? ext4_filemap_fault+0x7c/0xb0 [ 1894.219367] ext4_filemap_fault+0x84/0xb0 [ 1894.223498] __do_fault+0xfa/0x380 [ 1894.227038] __handle_mm_fault+0x22e9/0x3280 [ 1894.232388] ? copy_page_range+0x1d70/0x1d70 [ 1894.236789] ? find_held_lock+0x2d/0x110 [ 1894.241368] handle_mm_fault+0x288/0x7a0 [ 1894.245415] __do_page_fault+0x4bc/0xb40 [ 1894.249472] ? vmalloc_fault+0xdf0/0xdf0 [ 1894.253530] ? do_page_fault+0x60/0x4f2 [ 1894.257495] ? page_fault+0x2f/0x50 [ 1894.261138] page_fault+0x45/0x50 [ 1894.264743] RIP: 1ce6a0:0x1ce673 [ 1894.268179] RSP: 78bf00:000000000078c900 EFLAGS: 000003e8 [ 1894.271971] Mem-Info: [ 1894.280105] active_anon:236384 inactive_anon:1087859 isolated_anon:0 [ 1894.280105] active_file:42 inactive_file:2 isolated_file:1 [ 1894.280105] unevictable:31077 dirty:1 writeback:0 unstable:0 [ 1894.280105] slab_reclaimable:15901 slab_unreclaimable:119619 [ 1894.280105] mapped:63016 shmem:20598 pagetables:10642 bounce:0 [ 1894.280105] free:24976 free_pcp:6 free_cma:0 [ 1894.314306] Node 0 active_anon:912860kB inactive_anon:768456kB active_file:152kB inactive_file:0kB unevictable:97480kB isolated(anon):0kB isolated(file):4kB mapped:231772kB dirty:4kB writeback:0kB shmem:51452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1894.342827] Node 1 active_anon:32676kB inactive_anon:3582980kB active_file:16kB inactive_file:20kB unevictable:26828kB isolated(anon):0kB isolated(file):0kB mapped:20292kB dirty:0kB writeback:0kB shmem:30940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1894.371126] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:264kB inactive_anon:1972kB active_file:0kB inactive_file:0kB unevictable:320kB writepending:0kB present:15992kB managed:15908kB mlocked:320kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1894.400322] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1894.405452] Node 0 DMA32 free:36212kB min:36272kB low:45340kB high:54408kB active_anon:912596kB inactive_anon:766484kB active_file:56kB inactive_file:240kB unevictable:97160kB writepending:0kB present:3129332kB managed:2621260kB mlocked:97160kB kernel_stack:9376kB pagetables:13396kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1894.435911] lowmem_reserve[]: 0 0 0 0 0 [ 1894.440014] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1894.466176] lowmem_reserve[]: 0 0 0 0 0 [ 1894.470161] Node 1 Normal free:53248kB min:53612kB low:67012kB high:80412kB active_anon:32676kB inactive_anon:3582980kB active_file:16kB inactive_file:20kB unevictable:26828kB writepending:0kB present:3932160kB managed:3870192kB mlocked:26828kB kernel_stack:8224kB pagetables:29128kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1894.500110] lowmem_reserve[]: 0 0 0 0 0 [ 1894.504097] Node 0 DMA: 5*4kB (UME) 7*8kB (U) 10*16kB (UE) 9*32kB (UME) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10444kB [ 1894.520002] Node 0 DMA32: 1469*4kB (UME) 482*8kB (UME) 245*16kB (UME) 143*32kB (UME) 137*64kB (UM) 46*128kB (UM) 10*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36468kB [ 1894.536744] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1894.547923] Node 1 Normal: 42*4kB (UME) 155*8kB (UM) 15*16kB (UME) 8*32kB (UME) 223*64kB (UME) 98*128kB (UME) 60*256kB (UME) 8*512kB (ME) 5*1024kB (M) 0*2048kB 0*4096kB = 53296kB [ 1894.564152] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1894.573232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1894.581901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1894.590838] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1894.599854] 24497 total pagecache pages [ 1894.603848] 0 pages in swap cache [ 1894.607393] Swap cache stats: add 0, delete 0, find 0/0 [ 1894.612761] Free swap = 0kB [ 1894.615914] Total swap = 0kB [ 1894.618940] 1965979 pages RAM [ 1894.622032] 0 pages HighMem/MovableOnly [ 1894.626079] 339053 pages reserved [ 1894.629522] 0 pages cma reserved [ 1894.632893] Out of memory: Kill process 24741 (syz-executor.4) score 1008 or sacrifice child [ 1894.641588] Killed process 24741 (syz-executor.4) total-vm:78864kB, anon-rss:15652kB, file-rss:40052kB, shmem-rss:5576kB [ 1894.673479] oom_reaper: reaped process 24741 (syz-executor.4), now anon-rss:15660kB, file-rss:5372kB, shmem-rss:5832kB 09:44:16 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) r5 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:44:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:44:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'ip6erspan0\x00', 0x1ff}) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept4$netrom(r4, &(0x7f0000000100)={{0x3, @netrom}, [@remote, @rose, @null, @bcast, @netrom, @rose, @netrom]}, &(0x7f0000000180)=0x48, 0x80000) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) r6 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:16 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r2, &(0x7f0000db0000/0x1000)=nil, 0x5000) ioctl$KVM_RUN(r0, 0xae80, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f0000000140)) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r2, 0xc) 09:44:16 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$setsig(0x4203, r5, 0xa7, &(0x7f0000000040)={0x34, 0x9, 0x8}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f0000000000)) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$TIOCL_GETSHIFTSTATE(r6, 0x541c, &(0x7f0000000100)={0x6, 0x4f}) 09:44:16 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000114010025bd7000fedbdf25080001000000a12a000008000100020000000800010000000000080001000100000008000100010000000800010000000000080001000200000008000100000000000800010002000000"], 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r3 = gettid() r4 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) write$P9_RREADLINK(r0, &(0x7f0000000400)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50e3c9066f9815e8fe629e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e4feffca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r4) r5 = request_key(&(0x7f0000000340)='rxrpc\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='-!em1\xe9\x00', r4) keyctl$clear(0x7, r5) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) [ 1896.428414] ip_tables: iptables: counters copy to user failed while replacing table [ 1896.561294] device lo entered promiscuous mode [ 1896.566436] device veth17 entered promiscuous mode [ 1896.575159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1896.602487] device veth17 left promiscuous mode [ 1896.637442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1897.007280] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1897.048449] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1897.053628] CPU: 0 PID: 6367 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 1897.061423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1897.070777] Call Trace: [ 1897.073407] dump_stack+0x13e/0x194 [ 1897.077048] dump_header+0x178/0x6d4 [ 1897.080764] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1897.085873] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1897.090988] ? ___ratelimit+0x50/0x519 [ 1897.094895] oom_kill_process.cold+0x10/0xae3 [ 1897.099498] ? lock_downgrade+0x6e0/0x6e0 [ 1897.103848] out_of_memory+0x2d5/0x1110 [ 1897.107841] ? oom_killer_disable+0x1c0/0x1c0 [ 1897.112345] ? mutex_trylock+0x152/0x1a0 [ 1897.116413] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1897.121271] ? warn_alloc+0xf0/0xf0 [ 1897.125034] __alloc_pages_nodemask+0x5d3/0x700 [ 1897.129713] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1897.135092] ? lock_downgrade+0x6e0/0x6e0 [ 1897.139256] alloc_pages_current+0xe7/0x1e0 [ 1897.143597] __page_cache_alloc+0x245/0x3d0 [ 1897.148023] filemap_fault+0xc18/0x1c50 [ 1897.152023] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1897.156789] ? lock_acquire+0x170/0x3f0 [ 1897.160774] ? ext4_filemap_fault+0x7c/0xb0 [ 1897.165107] ext4_filemap_fault+0x84/0xb0 [ 1897.169258] __do_fault+0xfa/0x380 [ 1897.172801] __handle_mm_fault+0x22e9/0x3280 [ 1897.178950] ? copy_page_range+0x1d70/0x1d70 [ 1897.183542] ? find_held_lock+0x2d/0x110 [ 1897.187638] handle_mm_fault+0x288/0x7a0 [ 1897.191717] __do_page_fault+0x4bc/0xb40 [ 1897.195781] ? vmalloc_fault+0xdf0/0xdf0 [ 1897.199859] ? do_page_fault+0x60/0x4f2 [ 1897.203948] ? page_fault+0x2f/0x50 [ 1897.207847] page_fault+0x45/0x50 [ 1897.211302] RIP: b7596ca0:0x1cef7f [ 1897.214860] RSP: 1cf110:000000000000089b EFLAGS: 0000000c [ 1897.222241] Mem-Info: [ 1897.230309] active_anon:238478 inactive_anon:1092338 isolated_anon:0 [ 1897.230309] active_file:12 inactive_file:12 isolated_file:0 [ 1897.230309] unevictable:24819 dirty:0 writeback:0 unstable:0 [ 1897.230309] slab_reclaimable:15863 slab_unreclaimable:119485 [ 1897.230309] mapped:60108 shmem:20599 pagetables:10635 bounce:0 [ 1897.230309] free:24975 free_pcp:0 free_cma:0 [ 1897.273106] Node 0 active_anon:917036kB inactive_anon:779004kB active_file:44kB inactive_file:36kB unevictable:86476kB isolated(anon):0kB isolated(file):0kB mapped:222460kB dirty:0kB writeback:0kB shmem:51464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1897.312853] Node 1 active_anon:36876kB inactive_anon:3590348kB active_file:8kB inactive_file:8kB unevictable:12800kB isolated(anon):0kB isolated(file):0kB mapped:17972kB dirty:0kB writeback:0kB shmem:30932kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1897.349090] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:300kB inactive_anon:2064kB active_file:0kB inactive_file:0kB unevictable:208kB writepending:0kB present:15992kB managed:15908kB mlocked:208kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1897.387078] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1897.392246] Node 0 DMA32 free:36124kB min:36272kB low:45340kB high:54408kB active_anon:916736kB inactive_anon:776940kB active_file:4kB inactive_file:76kB unevictable:86268kB writepending:0kB present:3129332kB managed:2621260kB mlocked:86268kB kernel_stack:9472kB pagetables:13760kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1897.440643] lowmem_reserve[]: 0 0 0 0 0 [ 1897.444697] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1897.477913] lowmem_reserve[]: 0 0 0 0 0 [ 1897.481934] Node 1 Normal free:53328kB min:53612kB low:67012kB high:80412kB active_anon:36876kB inactive_anon:3590348kB active_file:0kB inactive_file:16kB unevictable:12800kB writepending:0kB present:3932160kB managed:3870192kB mlocked:12800kB kernel_stack:8032kB pagetables:28736kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1897.514909] lowmem_reserve[]: 0 0 0 0 0 [ 1897.529409] Node 0 DMA: 4*4kB (ME) 6*8kB (UM) 9*16kB (UME) 8*32kB (UE) 12*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10448kB [ 1897.552531] Node 0 DMA32: 1313*4kB (UME) 417*8kB (UME) 465*16kB (UME) 146*32kB (UME) 131*64kB (UM) 33*128kB (UM) 7*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36124kB [ 1897.580926] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1897.596848] Node 1 Normal: 68*4kB (UME) 22*8kB (U) 3*16kB (ME) 3*32kB (UME) 232*64kB (UME) 104*128kB (UME) 60*256kB (UME) 8*512kB (ME) 5*1024kB (M) 0*2048kB 0*4096kB = 53328kB [ 1897.622957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1897.644332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1897.654721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1897.680377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1897.694357] 22988 total pagecache pages [ 1897.713603] 0 pages in swap cache [ 1897.723032] Swap cache stats: add 0, delete 0, find 0/0 [ 1897.738712] Free swap = 0kB [ 1897.741767] Total swap = 0kB [ 1897.744785] 1965979 pages RAM [ 1897.755310] 0 pages HighMem/MovableOnly [ 1897.761834] 339053 pages reserved [ 1897.765292] 0 pages cma reserved [ 1897.778662] Out of memory: Kill process 11137 (syz-executor.4) score 1007 or sacrifice child [ 1897.793109] Killed process 11137 (syz-executor.4) total-vm:74968kB, anon-rss:18256kB, file-rss:34624kB, shmem-rss:0kB [ 1897.893008] device lo left promiscuous mode [ 1897.977815] ip_tables: iptables: counters copy to user failed while replacing table [ 1898.054056] device lo entered promiscuous mode [ 1898.059726] device veth17 entered promiscuous mode [ 1898.296167] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1898.308162] device veth17 left promiscuous mode [ 1898.373120] device lo left promiscuous mode [ 1898.532223] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1898.579415] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1898.601621] CPU: 1 PID: 6344 Comm: syz-fuzzer Not tainted 4.14.177-syzkaller #0 [ 1898.609130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1898.618502] Call Trace: [ 1898.621100] dump_stack+0x13e/0x194 [ 1898.624745] dump_header+0x178/0x6d4 [ 1898.628462] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1898.633486] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1898.638594] ? ___ratelimit+0x50/0x519 [ 1898.642513] oom_kill_process.cold+0x10/0xae3 [ 1898.647013] ? lock_acquire+0x170/0x3f0 [ 1898.650998] ? lock_downgrade+0x6e0/0x6e0 [ 1898.655149] out_of_memory+0x2d5/0x1110 [ 1898.659131] ? oom_killer_disable+0x1c0/0x1c0 [ 1898.663630] ? mutex_trylock+0x152/0x1a0 [ 1898.667701] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1898.672570] ? warn_alloc+0xf0/0xf0 [ 1898.676206] __alloc_pages_nodemask+0x5d3/0x700 [ 1898.680876] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1898.685902] ? lock_downgrade+0x6e0/0x6e0 [ 1898.690508] alloc_pages_current+0xe7/0x1e0 [ 1898.694850] __page_cache_alloc+0x245/0x3d0 [ 1898.699176] filemap_fault+0xc18/0x1c50 [ 1898.703159] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1898.708095] ? lock_acquire+0x170/0x3f0 [ 1898.712075] ? ext4_filemap_fault+0x7c/0xb0 [ 1898.716403] ext4_filemap_fault+0x84/0xb0 [ 1898.720553] __do_fault+0xfa/0x380 [ 1898.724097] __handle_mm_fault+0x22e9/0x3280 [ 1898.728606] ? copy_page_range+0x1d70/0x1d70 [ 1898.733039] ? find_held_lock+0x2d/0x110 [ 1898.737125] handle_mm_fault+0x288/0x7a0 [ 1898.741222] __do_page_fault+0x4bc/0xb40 [ 1898.745285] ? vmalloc_fault+0xdf0/0xdf0 [ 1898.749349] ? do_page_fault+0x60/0x4f2 [ 1898.753324] ? page_fault+0x2f/0x50 [ 1898.756950] page_fault+0x45/0x50 [ 1898.760441] RIP: 00f1:0x11 [ 1898.763283] RSP: 000c:000000c42004ff18 EFLAGS: 0042f0a0 [ 1899.355272] Mem-Info: [ 1899.365238] active_anon:238351 inactive_anon:1087776 isolated_anon:0 [ 1899.365238] active_file:16 inactive_file:0 isolated_file:0 [ 1899.365238] unevictable:29845 dirty:0 writeback:0 unstable:0 [ 1899.365238] slab_reclaimable:15863 slab_unreclaimable:119212 [ 1899.365238] mapped:61987 shmem:20599 pagetables:10506 bounce:0 [ 1899.365238] free:24939 free_pcp:0 free_cma:0 [ 1899.435980] Node 0 active_anon:916648kB inactive_anon:779004kB active_file:60kB inactive_file:24kB unevictable:90052kB isolated(anon):0kB isolated(file):0kB mapped:224404kB dirty:0kB writeback:0kB shmem:51464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1899.609349] Node 1 active_anon:36756kB inactive_anon:3572100kB active_file:4kB inactive_file:0kB unevictable:29328kB isolated(anon):0kB isolated(file):0kB mapped:23544kB dirty:0kB writeback:0kB shmem:30932kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1899.749069] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:300kB inactive_anon:2064kB active_file:0kB inactive_file:0kB unevictable:208kB writepending:0kB present:15992kB managed:15908kB mlocked:208kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1899.912070] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1899.947037] Node 0 DMA32 free:36252kB min:36272kB low:45340kB high:54408kB active_anon:916348kB inactive_anon:776940kB active_file:140kB inactive_file:12kB unevictable:89844kB writepending:0kB present:3129332kB managed:2621260kB mlocked:89816kB kernel_stack:9152kB pagetables:13352kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1900.085765] lowmem_reserve[]: 0 0 0 0 0 [ 1900.089931] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1900.145982] lowmem_reserve[]: 0 0 0 0 0 [ 1900.150029] Node 1 Normal free:61676kB min:53612kB low:67012kB high:80412kB active_anon:36756kB inactive_anon:3572100kB active_file:376kB inactive_file:288kB unevictable:19776kB writepending:0kB present:3932160kB managed:3870192kB mlocked:19640kB kernel_stack:7840kB pagetables:28628kB bounce:0kB free_pcp:1456kB local_pcp:728kB free_cma:0kB [ 1900.184458] lowmem_reserve[]: 0 0 0 0 0 [ 1900.206962] Node 0 DMA: 12*4kB (UME) 11*8kB (M) 6*16kB (UME) 9*32kB (UME) 12*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10504kB [ 1900.245875] Node 0 DMA32: 1460*4kB (UME) 767*8kB (UME) 670*16kB (UME) 186*32kB (UME) 128*64kB (UM) 33*128kB (UM) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41576kB [ 1900.275921] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1900.305918] Node 1 Normal: 286*4kB (UME) 254*8kB (UM) 190*16kB (UME) 78*32kB (UME) 195*64kB (UME) 91*128kB (UME) 66*256kB (UME) 14*512kB (ME) 6*1024kB (M) 0*2048kB 0*4096kB = 63048kB [ 1900.347365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1900.379611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 09:44:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYBLOB="4c09087de9a7f98858f20a710f6a761d8ab10583768887ed1ead88d464047c59a4a5b4b1854380331f9fdb8eab3cc68ad92403d17f43810df968a38a24ca4feb7127b3ad07a4525b95bb60abff0d374ba11220cda229f9dcc946ff1b849f7e5798783a9316b2327c2a1b3f79b3e4a49b8ed8c440ed4abab569d2e02d1407fcdaa42ebd9db62041947f4a83db38a7a7b54b6522659a3f15"], 0x1}], 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) [ 1900.420088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1900.458624] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1900.484152] 24139 total pagecache pages 09:44:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400207) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f0000000000)=0x10001) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) [ 1900.521834] 0 pages in swap cache [ 1900.536621] Swap cache stats: add 0, delete 0, find 0/0 09:44:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000500f4872ac899f1b8d0f518a7e49902067f20e3711cef2d34bf807c21edf2bc92be04deab711bdbd936369388b59eb775f293516b1d075cb2f3e0b32c9fd7b1938ad34484a382d6a204a02132e8b87de3407ef969edc432d8b381a0e172ac7a5e22118115377fc63c42468f98c38647e82b1e2702f2bb0fe0b25f1083b0864911916b379211cc825bfdf37fb4bcd73418e62a2de9bab354e6d7672ae1e2c73fe995f2193690335e1830dafe26126ecec4aaed58cf44e903298e0361994bfb24193616e545d45aeb9b10e1baa979dfb01772a04ef14da7629bec4d3", @ANYRES16=r3, @ANYBLOB="6ffe000000000000000015000000140001800e0001006574683a766c616e30000000"], 0x28}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRES16=r3, @ANYRESOCT], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000500f4872ac899f1b8d0f518a7e49902067f20e3711cef2d34bf807c21edf2bc92be04deab711bdbd936369388b59eb775f293516b1d075cb2f3e0b32c9fd7b1938ad34484a382d6a204a02132e8b87de3407ef969edc432d8b381a0e172ac7a5e22118115377fc63c42468f98c38647e82b1e2702f2bb0fe0b25f1083b0864911916b379211cc825bfdf37fb4bcd73418e62a2de9bab354e6d7672ae1e2c73fe995f2193690335e1830dafe26126ecec4aaed58cf44e903298e0361994bfb24193616e545d45aeb9b10e1baa979dfb01772a04ef14da7629bec4d3", @ANYRES16=r6, @ANYBLOB="6ffe000000000000000015000000140001800e0001006574683a766c616e30000000"], 0x28}}, 0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRES16=r6, @ANYRESOCT], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000ec0)={0x220, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa626}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdb53}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xef}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc18}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x97}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x16}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4}]}, 0x220}, 0x1, 0x0, 0x0, 0x10}, 0x44005) 09:44:20 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x40000, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)={0x2000, 0x10000}) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) [ 1900.562674] Free swap = 0kB [ 1900.572637] Total swap = 0kB [ 1900.582732] 1965979 pages RAM [ 1900.593640] 0 pages HighMem/MovableOnly 09:44:20 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r2 = gettid() ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000340)=0x1) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) 09:44:20 executing program 1: r0 = socket(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) fadvise64(r1, 0x309, 0xff, 0x2) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x4}, 0x10) [ 1900.613927] 339053 pages reserved [ 1900.618514] 0 pages cma reserved [ 1900.621996] Out of memory: Kill process 24780 (syz-executor.4) score 1008 or sacrifice child [ 1900.702221] ip_tables: iptables: counters copy to user failed while replacing table [ 1900.733739] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1900.792750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1901.345212] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1901.359923] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1901.365704] CPU: 1 PID: 24829 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 1901.373616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1901.382979] Call Trace: [ 1901.385598] dump_stack+0x13e/0x194 [ 1901.389254] dump_header+0x178/0x6d4 [ 1901.392984] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1901.398096] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1901.403209] ? ___ratelimit+0x50/0x519 [ 1901.407112] oom_kill_process.cold+0x10/0xae3 [ 1901.411630] ? lock_downgrade+0x6e0/0x6e0 [ 1901.415788] out_of_memory+0x2d5/0x1110 [ 1901.419791] ? oom_killer_disable+0x1c0/0x1c0 [ 1901.424298] ? mutex_trylock+0x152/0x1a0 [ 1901.428367] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1901.433235] ? warn_alloc+0xf0/0xf0 [ 1901.436879] __alloc_pages_nodemask+0x5d3/0x700 [ 1901.441553] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1901.446569] ? find_held_lock+0x2d/0x110 [ 1901.450646] alloc_pages_vma+0xc2/0x4a0 [ 1901.455867] __handle_mm_fault+0x17b6/0x3280 [ 1901.460303] ? copy_page_range+0x1d70/0x1d70 [ 1901.464755] ? find_held_lock+0x2d/0x110 [ 1901.468840] handle_mm_fault+0x288/0x7a0 [ 1901.473013] __get_user_pages+0x44d/0x11e0 [ 1901.477493] ? follow_page_mask+0x1580/0x1580 [ 1901.482902] ? lock_acquire+0x170/0x3f0 [ 1901.487075] ? __mm_populate+0x1e3/0x2c0 [ 1901.491192] populate_vma_page_range+0x17b/0x210 [ 1901.495975] __mm_populate+0x195/0x2c0 [ 1901.499878] ? populate_vma_page_range+0x210/0x210 [ 1901.504820] ? security_capable+0x88/0xb0 [ 1901.508980] SyS_mlockall+0x3f5/0x520 [ 1901.512785] ? SyS_munlock+0xf0/0xf0 [ 1901.516533] do_syscall_64+0x1d5/0x640 [ 1901.520440] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1901.525643] RIP: 0033:0x45c829 [ 1901.528835] RSP: 002b:00007f65489b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1901.536564] RAX: ffffffffffffffda RBX: 00000000004f5900 RCX: 000000000045c829 [ 1901.543876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1901.551151] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1901.558598] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1901.565867] R13: 0000000000000737 R14: 00000000004c9f77 R15: 00007f65489b46d4 [ 1901.933600] Mem-Info: [ 1901.984598] active_anon:238636 inactive_anon:1087791 isolated_anon:0 [ 1901.984598] active_file:43 inactive_file:2 isolated_file:0 [ 1901.984598] unevictable:28914 dirty:4 writeback:0 unstable:0 [ 1901.984598] slab_reclaimable:15852 slab_unreclaimable:119574 [ 1901.984598] mapped:60321 shmem:20599 pagetables:10673 bounce:0 [ 1901.984598] free:25024 free_pcp:28 free_cma:0 [ 1902.129179] Node 0 active_anon:916988kB inactive_anon:779032kB active_file:40kB inactive_file:148kB unevictable:86324kB isolated(anon):0kB isolated(file):0kB mapped:224872kB dirty:12kB writeback:0kB shmem:51452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1902.157963] Node 1 active_anon:37456kB inactive_anon:3572132kB active_file:36kB inactive_file:60kB unevictable:29940kB isolated(anon):0kB isolated(file):0kB mapped:16936kB dirty:0kB writeback:16kB shmem:30944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1902.186317] Node 0 DMA free:10412kB min:220kB low:272kB high:324kB active_anon:312kB inactive_anon:2064kB active_file:12kB inactive_file:0kB unevictable:156kB writepending:0kB present:15992kB managed:15908kB mlocked:156kB kernel_stack:0kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1902.214770] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1902.220608] Node 0 DMA32 free:36320kB min:36272kB low:45340kB high:54408kB active_anon:916648kB inactive_anon:776968kB active_file:52kB inactive_file:132kB unevictable:86168kB writepending:12kB present:3129332kB managed:2621260kB mlocked:86168kB kernel_stack:9312kB pagetables:13544kB bounce:0kB free_pcp:228kB local_pcp:112kB free_cma:0kB [ 1902.315944] lowmem_reserve[]: 0 0 0 0 0 [ 1902.321791] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1902.511219] lowmem_reserve[]: 0 0 0 0 0 [ 1902.515278] Node 1 Normal free:53452kB min:53612kB low:67012kB high:80412kB active_anon:37456kB inactive_anon:3572132kB active_file:316kB inactive_file:436kB unevictable:30444kB writepending:16kB present:3932160kB managed:3870192kB mlocked:30444kB kernel_stack:8064kB pagetables:28972kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1902.620378] lowmem_reserve[]: 0 0 0 0 0 [ 1902.624432] Node 0 DMA: 3*4kB (UE) 2*8kB (UM) 3*16kB (UME) 11*32kB (UME) 12*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10412kB [ 1902.703798] Node 0 DMA32: 1463*4kB (UME) 46*8kB (UME) 643*16kB (UME) 185*32kB (UME) 139*64kB (UM) 35*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36572kB [ 1902.815707] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1902.901939] Node 1 Normal: 113*4kB (UME) 40*8kB (UM) 169*16kB (UME) 8*32kB (UME) 175*64kB (UME) 87*128kB (UME) 57*256kB (UME) 14*512kB (ME) 6*1024kB (M) 0*2048kB 0*4096kB = 53972kB [ 1902.984049] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1902.995398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1903.047900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1903.068934] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1903.077856] 23534 total pagecache pages [ 1903.081990] 0 pages in swap cache [ 1903.085548] Swap cache stats: add 0, delete 0, find 0/0 [ 1903.091171] Free swap = 0kB [ 1903.094220] Total swap = 0kB [ 1903.097305] 1965979 pages RAM [ 1903.100408] 0 pages HighMem/MovableOnly [ 1903.104358] 339053 pages reserved [ 1903.107947] 0 pages cma reserved [ 1903.111319] Out of memory: Kill process 24824 (syz-executor.4) score 1007 or sacrifice child [ 1903.119957] Killed process 24824 (syz-executor.4) total-vm:75100kB, anon-rss:17876kB, file-rss:39344kB, shmem-rss:0kB [ 1903.137854] oom_reaper: reaped process 24824 (syz-executor.4), now anon-rss:17928kB, file-rss:5360kB, shmem-rss:0kB 09:44:24 executing program 0: pipe(&(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f0000006180), 0x400000000000193, 0x40012041, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x1d, 0x26, 0xd, 0xc, 0x8, 0xdce, 0x2, 0x8d, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) sendmsg$AUDIT_TTY_SET(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x3f9, 0x0, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x2004000c) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000100)={0x2, 0xc1, "52199fa7322b278b9e42da778a77f9ad155dbd38622dcf1fb1df5b58660955fc9b29d83ff95a4dd7d2a3ae87ce3bd612b37af06ec40d862498876a51a1e8213ea3bf84cb2598c0ec7674bcb0346eb579be9c5b531c5ebc63930c4ea4e11e2077d5f7be9ddd5b6cf434dbf10c1d841f7bf570488345c62b6f28424c122b4ca4e04d2eba7c6ff45297dd1483da4060975c996d3fb12082c4fe2b9d7ed44c75d770256df2f5438bfd6088703d846f3d60fd87f62459ee17ec78a0fe23256b2a458ed3"}) 09:44:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x6) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000000)=0x200) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:25 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) flistxattr(r0, &(0x7f0000000100)=""/123, 0x7b) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r2, &(0x7f0000db0000/0x1000)=nil, 0x1000) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) syncfs(0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r2, 0xc) 09:44:25 executing program 1: r0 = socket(0x10, 0xa, 0x6) msgget$private(0x0, 0x410) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) syz_mount_image$hfs(&(0x7f00000001c0)='hfs\x00', &(0x7f0000000240)='./file0\x00', 0x20, 0x0, &(0x7f00000002c0), 0x2c11, &(0x7f0000000300)=ANY=[@ANYBLOB='codepage=macgreek,iocharset=cp866,sessio10000,dir_umask=00000000000000000172153,gid=\x00'/99, @ANYRESHEX, @ANYBLOB="2c747970653d0b1bab482c7365636c6162656c2c00"]) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000140)={0x2, 0x2, 0x6, 0x7ff, r2}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x1ff}) ioctl$KVM_SMI(r1, 0xaeb7) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:44:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDADDIO(r1, 0x400455c8, 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xe) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20040050}, 0x4000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2044001}, 0x4001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:44:25 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000340)="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") pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000114010025bd7000fedbdf25d858ac1e00000000080001000200bdab5beab70000080001000000000008000100010000000800010001000000080001000000000008000100020000000800010000000000080001"], 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r5, 0xffff8001}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000440)={r5, 0x6, 0x8, [0x633, 0x0, 0x4, 0x6, 0x2, 0x3, 0x5e14, 0x9]}, 0x18) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) [ 1904.815383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1904.824310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1904.842980] ip_tables: iptables: counters copy to user failed while replacing table [ 1904.852552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1904.869095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1904.889801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1904.890200] ip_tables: iptables: counters copy to user failed while replacing table [ 1904.898524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1904.925516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1904.934891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1905.222479] syz-executor.2 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1905.245029] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1905.250242] CPU: 1 PID: 24873 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 1905.258138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1905.267508] Call Trace: [ 1905.270903] dump_stack+0x13e/0x194 [ 1905.274543] dump_header+0x178/0x6d4 [ 1905.278278] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1905.283316] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1905.288427] ? ___ratelimit+0x50/0x519 [ 1905.292338] oom_kill_process.cold+0x10/0xae3 [ 1905.296854] ? lock_downgrade+0x6e0/0x6e0 [ 1905.300997] out_of_memory+0x2d5/0x1110 [ 1905.305310] ? oom_killer_disable+0x1c0/0x1c0 [ 1905.309805] ? mutex_trylock+0x152/0x1a0 [ 1905.313875] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1905.318754] ? warn_alloc+0xf0/0xf0 [ 1905.322413] __alloc_pages_nodemask+0x5d3/0x700 [ 1905.327114] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1905.332146] ? find_held_lock+0x2d/0x110 [ 1905.336235] alloc_pages_vma+0xc2/0x4a0 [ 1905.340228] __handle_mm_fault+0x17b6/0x3280 [ 1905.344650] ? copy_page_range+0x1d70/0x1d70 [ 1905.349077] ? find_held_lock+0x2d/0x110 [ 1905.353170] handle_mm_fault+0x288/0x7a0 [ 1905.357504] __get_user_pages+0x44d/0x11e0 [ 1905.361751] ? follow_page_mask+0x1580/0x1580 [ 1905.366258] ? lock_acquire+0x170/0x3f0 [ 1905.370249] ? __mm_populate+0x1e3/0x2c0 [ 1905.374320] populate_vma_page_range+0x17b/0x210 [ 1905.379092] __mm_populate+0x195/0x2c0 [ 1905.382994] ? populate_vma_page_range+0x210/0x210 [ 1905.387930] ? security_capable+0x88/0xb0 [ 1905.392080] SyS_mlockall+0x3f5/0x520 [ 1905.395872] ? SyS_munlock+0xf0/0xf0 [ 1905.399596] do_syscall_64+0x1d5/0x640 [ 1905.403500] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1905.408693] RIP: 0033:0x45c829 [ 1905.411935] RSP: 002b:00007ffba12edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1905.419655] RAX: ffffffffffffffda RBX: 00000000004f5900 RCX: 000000000045c829 [ 1905.426934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1905.434213] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1905.441490] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1905.448766] R13: 0000000000000737 R14: 00000000004c9f77 R15: 00007ffba12ee6d4 [ 1905.471067] Mem-Info: [ 1905.473502] active_anon:238521 inactive_anon:1092273 isolated_anon:0 [ 1905.473502] active_file:23 inactive_file:11 isolated_file:0 [ 1905.473502] unevictable:25354 dirty:5 writeback:0 unstable:0 [ 1905.473502] slab_reclaimable:15844 slab_unreclaimable:118985 [ 1905.473502] mapped:60158 shmem:20599 pagetables:10632 bounce:0 [ 1905.473502] free:24929 free_pcp:0 free_cma:0 [ 1905.524019] Node 0 active_anon:917160kB inactive_anon:785660kB active_file:136kB inactive_file:0kB unevictable:88380kB isolated(anon):0kB isolated(file):0kB mapped:224840kB dirty:20kB writeback:0kB shmem:51452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1905.563978] Node 1 active_anon:36924kB inactive_anon:3583432kB active_file:20kB inactive_file:8kB unevictable:13036kB isolated(anon):0kB isolated(file):0kB mapped:15792kB dirty:0kB writeback:0kB shmem:30944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1905.603736] Node 0 DMA free:10428kB min:220kB low:272kB high:324kB active_anon:304kB inactive_anon:2080kB active_file:12kB inactive_file:0kB unevictable:148kB writepending:0kB present:15992kB managed:15908kB mlocked:148kB kernel_stack:0kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1905.643239] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1905.652658] Node 0 DMA32 free:35764kB min:36272kB low:45340kB high:54408kB active_anon:916856kB inactive_anon:783580kB active_file:40kB inactive_file:48kB unevictable:87736kB writepending:0kB present:3129332kB managed:2621260kB mlocked:87736kB kernel_stack:9440kB pagetables:13820kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1905.694752] lowmem_reserve[]: 0 0 0 0 0 [ 1905.702392] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1905.745171] lowmem_reserve[]: 0 0 0 0 0 [ 1905.753542] Node 1 Normal free:53524kB min:53612kB low:67012kB high:80412kB active_anon:36924kB inactive_anon:3583432kB active_file:24kB inactive_file:4kB unevictable:13036kB writepending:0kB present:3932160kB managed:3870192kB mlocked:13036kB kernel_stack:8000kB pagetables:28652kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1905.795602] lowmem_reserve[]: 0 0 0 0 0 [ 1905.800436] Node 0 DMA: 3*4kB (ME) 4*8kB (U) 3*16kB (UME) 11*32kB (UME) 12*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10428kB [ 1905.828173] Node 0 DMA32: 1311*4kB (UME) 377*8kB (UME) 943*16kB (UME) 193*32kB (UME) 82*64kB (UM) 10*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36052kB [ 1905.851129] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1905.861972] Node 1 Normal: 109*4kB (UME) 6*8kB (UM) 7*16kB (UME) 36*32kB (UME) 137*64kB (UME) 98*128kB (UME) 67*256kB (UME) 14*512kB (ME) 6*1024kB (M) 0*2048kB 0*4096kB = 53524kB [ 1905.887517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1905.901534] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1905.912850] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1905.926993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1905.941667] 23001 total pagecache pages [ 1905.945662] 0 pages in swap cache [ 1905.951766] Swap cache stats: add 0, delete 0, find 0/0 [ 1905.961609] Free swap = 0kB [ 1905.964644] Total swap = 0kB [ 1905.970213] 1965979 pages RAM [ 1905.973427] 0 pages HighMem/MovableOnly [ 1905.980131] 339053 pages reserved [ 1905.983617] 0 pages cma reserved [ 1905.988258] Out of memory: Kill process 11161 (syz-executor.4) score 1007 or sacrifice child [ 1905.999672] Killed process 11161 (syz-executor.4) total-vm:74968kB, anon-rss:18256kB, file-rss:34624kB, shmem-rss:0kB [ 1906.163540] oom_reaper: reaped process 11161 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1906.953201] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1907.004774] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1907.039787] CPU: 1 PID: 6345 Comm: syz-fuzzer Not tainted 4.14.177-syzkaller #0 [ 1907.047269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1907.056629] Call Trace: [ 1907.059233] dump_stack+0x13e/0x194 [ 1907.062868] dump_header+0x178/0x6d4 [ 1907.066610] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1907.071628] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1907.076755] ? ___ratelimit+0x50/0x519 [ 1907.080648] oom_kill_process.cold+0x10/0xae3 [ 1907.085160] ? lock_downgrade+0x6e0/0x6e0 [ 1907.089310] out_of_memory+0x2d5/0x1110 [ 1907.093290] ? oom_killer_disable+0x1c0/0x1c0 [ 1907.097790] ? mutex_trylock+0x152/0x1a0 [ 1907.101854] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1907.106714] ? warn_alloc+0xf0/0xf0 [ 1907.110358] __alloc_pages_nodemask+0x5d3/0x700 [ 1907.115030] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1907.120054] ? lock_downgrade+0x6e0/0x6e0 [ 1907.124220] alloc_pages_current+0xe7/0x1e0 [ 1907.128555] __page_cache_alloc+0x245/0x3d0 [ 1907.133687] filemap_fault+0xc18/0x1c50 [ 1907.137684] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1907.142383] ? lock_acquire+0x170/0x3f0 [ 1907.146540] ? ext4_filemap_fault+0x7c/0xb0 [ 1907.150867] ext4_filemap_fault+0x84/0xb0 [ 1907.155015] __do_fault+0xfa/0x380 [ 1907.158557] __handle_mm_fault+0x22e9/0x3280 [ 1907.162967] ? copy_page_range+0x1d70/0x1d70 [ 1907.169903] ? find_held_lock+0x2d/0x110 [ 1907.174354] handle_mm_fault+0x288/0x7a0 [ 1907.178415] __do_page_fault+0x4bc/0xb40 [ 1907.182476] ? vmalloc_fault+0xdf0/0xdf0 [ 1907.186535] ? do_page_fault+0x60/0x4f2 [ 1907.190508] ? page_fault+0x2f/0x50 [ 1907.194156] page_fault+0x45/0x50 [ 1907.197610] RIP: 3a67af80:0xc432c56ea0 [ 1907.201492] RSP: a44dc0:000000c42004bf88 EFLAGS: c43a67af50 [ 1907.283309] Mem-Info: [ 1907.307299] active_anon:238434 inactive_anon:1092209 isolated_anon:0 [ 1907.307299] active_file:1777 inactive_file:798 isolated_file:89 [ 1907.307299] unevictable:17408 dirty:0 writeback:0 unstable:0 [ 1907.307299] slab_reclaimable:15844 slab_unreclaimable:118409 [ 1907.307299] mapped:57946 shmem:20599 pagetables:10545 bounce:0 [ 1907.307299] free:30582 free_pcp:539 free_cma:0 [ 1907.496153] Node 0 active_anon:916836kB inactive_anon:792684kB active_file:1888kB inactive_file:3104kB unevictable:69632kB isolated(anon):0kB isolated(file):128kB mapped:224868kB dirty:0kB writeback:0kB shmem:51452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1907.605874] Node 1 active_anon:37000kB inactive_anon:3576152kB active_file:884kB inactive_file:2708kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:13016kB dirty:0kB writeback:0kB shmem:30944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1907.663733] Node 0 DMA free:10492kB min:220kB low:272kB high:324kB active_anon:304kB inactive_anon:2108kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.751948] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1907.757125] Node 0 DMA32 free:46252kB min:36272kB low:45340kB high:54408kB active_anon:916532kB inactive_anon:790576kB active_file:320kB inactive_file:332kB unevictable:69632kB writepending:0kB present:3129332kB managed:2621260kB mlocked:69632kB kernel_stack:9152kB pagetables:13612kB bounce:0kB free_pcp:936kB local_pcp:512kB free_cma:0kB [ 1907.803601] lowmem_reserve[]: 0 0 0 0 0 [ 1907.807700] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.834707] lowmem_reserve[]: 0 0 0 0 0 [ 1907.838785] Node 1 Normal free:72488kB min:53612kB low:67012kB high:80412kB active_anon:36900kB inactive_anon:3576152kB active_file:0kB inactive_file:424kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:7840kB pagetables:28512kB bounce:0kB free_pcp:736kB local_pcp:668kB free_cma:0kB [ 1907.875361] lowmem_reserve[]: 0 0 0 0 0 [ 1907.880485] Node 0 DMA: 23*4kB (UME) 6*8kB (UM) 2*16kB (ME) 11*32kB (UME) 12*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10508kB [ 1907.896775] Node 0 DMA32: 1879*4kB (UME) 430*8kB (UME) 1248*16kB (UME) 281*32kB (UME) 75*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44972kB [ 1907.922418] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1907.935111] Node 1 Normal: 653*4kB (UME) 572*8kB (UM) 217*16kB (UME) 115*32kB (UME) 132*64kB (UME) 101*128kB (UME) 57*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 72836kB [ 1907.952958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.962301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.971669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.980646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.989376] 21098 total pagecache pages [ 1907.993369] 0 pages in swap cache [ 1907.997479] Swap cache stats: add 0, delete 0, find 0/0 [ 1908.003448] Free swap = 0kB [ 1908.006611] Total swap = 0kB [ 1908.009637] 1965979 pages RAM [ 1908.012805] 0 pages HighMem/MovableOnly [ 1908.016878] 339053 pages reserved [ 1908.020327] 0 pages cma reserved [ 1908.024205] Out of memory: Kill process 24871 (syz-executor.2) score 1008 or sacrifice child 09:44:30 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x800, 0x0) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000280)=0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:44:30 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000240)={0x800, 0x4, 0x1}) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) 09:44:30 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x80000001, 0x12100) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000080)) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba8095abeaf4b4834ff922b3f1e0b02b0000c8f35f78", 0x23, 0x11, 0x0, 0x0) 09:44:30 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x9}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r0) sendmsg$netlink(r8, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r6, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:44:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2000000) 09:44:30 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20c4, 0x16) syz_open_pts(r2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) [ 1910.549952] net_ratelimit: 136 callbacks suppressed [ 1910.549957] ip_tables: iptables: counters copy to user failed while replacing table [ 1910.596821] ip_tables: iptables: counters copy to user failed while replacing table [ 1910.603740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1910.665641] Bluetooth: Invalid header checksum [ 1910.672716] Bluetooth: Invalid header checksum [ 1910.687064] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1910.767480] Bluetooth: Invalid header checksum [ 1910.876215] Bluetooth: Invalid header checksum [ 1910.986130] Bluetooth: Invalid header checksum [ 1911.096186] Bluetooth: Invalid header checksum [ 1911.206214] Bluetooth: Invalid header checksum [ 1911.326404] Bluetooth: Invalid header checksum [ 1911.389773] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1911.458889] Bluetooth: Invalid header checksum [ 1911.459445] in:imklog cpuset=/ mems_allowed=0-1 [ 1911.536337] Bluetooth: Invalid header checksum [ 1911.543889] CPU: 1 PID: 6031 Comm: in:imklog Not tainted 4.14.177-syzkaller #0 [ 1911.551300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1911.560676] Call Trace: [ 1911.563290] dump_stack+0x13e/0x194 [ 1911.566936] dump_header+0x178/0x6d4 [ 1911.570654] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1911.575675] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1911.580784] ? ___ratelimit+0x50/0x519 [ 1911.584678] oom_kill_process.cold+0x10/0xae3 [ 1911.589189] ? lock_downgrade+0x6e0/0x6e0 [ 1911.593347] out_of_memory+0x2d5/0x1110 [ 1911.597331] ? oom_killer_disable+0x1c0/0x1c0 [ 1911.601915] ? mutex_trylock+0x152/0x1a0 [ 1911.606002] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1911.610860] ? warn_alloc+0xf0/0xf0 [ 1911.614502] __alloc_pages_nodemask+0x5d3/0x700 [ 1911.619177] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1911.624229] ? lock_downgrade+0x6e0/0x6e0 [ 1911.628403] alloc_pages_current+0xe7/0x1e0 [ 1911.632740] __page_cache_alloc+0x245/0x3d0 [ 1911.637073] filemap_fault+0xc18/0x1c50 [ 1911.641069] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1911.646618] ? lock_acquire+0x170/0x3f0 [ 1911.650597] ? ext4_filemap_fault+0x7c/0xb0 [ 1911.654930] ext4_filemap_fault+0x84/0xb0 [ 1911.659088] __do_fault+0xfa/0x380 [ 1911.662654] __handle_mm_fault+0x22e9/0x3280 [ 1911.667075] ? copy_page_range+0x1d70/0x1d70 [ 1911.671490] ? find_held_lock+0x2d/0x110 [ 1911.675562] handle_mm_fault+0x288/0x7a0 [ 1911.679623] __do_page_fault+0x4bc/0xb40 [ 1911.683690] ? vmalloc_fault+0xdf0/0xdf0 [ 1911.687757] ? do_page_fault+0x60/0x4f2 [ 1911.691738] ? page_fault+0x2f/0x50 [ 1911.695370] page_fault+0x45/0x50 [ 1911.698825] RIP: fffff7e7:0x1f9f [ 1911.702183] RSP: 266af4a0:00007fe0266af4ac EFLAGS: 7fe0266afda0 [ 1911.703903] Bluetooth: Invalid header checksum [ 1911.812453] Bluetooth: Invalid header checksum [ 1911.916147] Bluetooth: Invalid header checksum [ 1912.026198] Bluetooth: Invalid header checksum [ 1912.039703] Mem-Info: [ 1912.042230] active_anon:238395 inactive_anon:1092224 isolated_anon:0 [ 1912.042230] active_file:4 inactive_file:22 isolated_file:2 [ 1912.042230] unevictable:26265 dirty:0 writeback:0 unstable:0 [ 1912.042230] slab_reclaimable:15832 slab_unreclaimable:118334 [ 1912.042230] mapped:60994 shmem:20599 pagetables:10590 bounce:0 [ 1912.042230] free:25075 free_pcp:10 free_cma:0 [ 1912.076471] Node 0 active_anon:916912kB inactive_anon:792736kB active_file:16kB inactive_file:52kB unevictable:84220kB isolated(anon):0kB isolated(file):0kB mapped:224184kB dirty:0kB writeback:0kB shmem:51448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1912.105225] Node 1 active_anon:36668kB inactive_anon:3576160kB active_file:8kB inactive_file:36kB unevictable:20840kB isolated(anon):0kB isolated(file):0kB mapped:19792kB dirty:0kB writeback:0kB shmem:30948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1912.133455] Node 0 DMA free:10452kB min:220kB low:272kB high:324kB active_anon:300kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:248kB writepending:0kB present:15992kB managed:15908kB mlocked:248kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1912.162272] Bluetooth: Invalid header checksum [ 1912.164370] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1912.172151] Node 0 DMA32 free:36240kB min:36272kB low:45340kB high:54408kB active_anon:916612kB inactive_anon:790628kB active_file:16kB inactive_file:52kB unevictable:83972kB writepending:0kB present:3129332kB managed:2621260kB mlocked:83972kB kernel_stack:9280kB pagetables:13744kB bounce:0kB free_pcp:172kB local_pcp:120kB free_cma:0kB [ 1912.244615] lowmem_reserve[]: 0 0 0 0 0 [ 1912.252378] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1912.451590] lowmem_reserve[]: 0 0 0 0 0 [ 1912.455628] Node 1 Normal free:53500kB min:53612kB low:67012kB high:80412kB active_anon:36668kB inactive_anon:3576160kB active_file:8kB inactive_file:36kB unevictable:20840kB writepending:0kB present:3932160kB managed:3870192kB mlocked:20840kB kernel_stack:7872kB pagetables:28572kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1912.629444] lowmem_reserve[]: 0 0 0 0 0 [ 1912.633517] Node 0 DMA: 3*4kB (UE) 13*8kB (U) 4*16kB (UE) 11*32kB (UME) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10452kB [ 1912.781383] Node 0 DMA32: 1349*4kB (UME) 468*8kB (UME) 1100*16kB (UME) 220*32kB (UME) 40*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36340kB [ 1912.889761] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1912.964547] Node 1 Normal: 97*4kB (UME) 135*8kB (UM) 20*16kB (UME) 9*32kB (UME) 86*64kB (UME) 87*128kB (UME) 48*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 53532kB [ 1913.075974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1913.084860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1913.094428] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1913.105180] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1913.113819] 23931 total pagecache pages [ 1913.117888] 0 pages in swap cache [ 1913.121448] Swap cache stats: add 0, delete 0, find 0/0 [ 1913.126883] Free swap = 0kB [ 1913.129909] Total swap = 0kB [ 1913.132925] 1965979 pages RAM [ 1913.136746] 0 pages HighMem/MovableOnly [ 1913.140738] 339053 pages reserved [ 1913.144175] 0 pages cma reserved [ 1913.147699] Out of memory: Kill process 24898 (syz-executor.2) score 1008 or sacrifice child [ 1913.156610] Killed process 24917 (syz-executor.2) total-vm:74968kB, anon-rss:18024kB, file-rss:34816kB, shmem-rss:0kB [ 1913.279098] oom_reaper: reaped process 24917 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1913.385609] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1913.459906] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1913.489680] CPU: 1 PID: 11844 Comm: syz-executor.3 Not tainted 4.14.177-syzkaller #0 [ 1913.497597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1913.507065] Call Trace: [ 1913.509665] dump_stack+0x13e/0x194 [ 1913.513303] dump_header+0x178/0x6d4 [ 1913.517020] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1913.522043] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1913.527145] ? ___ratelimit+0x50/0x519 [ 1913.531218] oom_kill_process.cold+0x10/0xae3 [ 1913.535729] ? lock_downgrade+0x6e0/0x6e0 [ 1913.539890] out_of_memory+0x2d5/0x1110 [ 1913.543880] ? oom_killer_disable+0x1c0/0x1c0 [ 1913.548384] ? mutex_trylock+0x152/0x1a0 [ 1913.552453] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1913.557313] ? warn_alloc+0xf0/0xf0 [ 1913.560963] __alloc_pages_nodemask+0x5d3/0x700 [ 1913.565639] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1913.570662] ? lock_downgrade+0x6e0/0x6e0 [ 1913.574849] alloc_pages_current+0xe7/0x1e0 [ 1913.579181] __page_cache_alloc+0x245/0x3d0 [ 1913.583510] filemap_fault+0xc18/0x1c50 [ 1913.587498] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1913.592178] ? lock_acquire+0x170/0x3f0 [ 1913.596160] ? ext4_filemap_fault+0x7c/0xb0 [ 1913.600497] ext4_filemap_fault+0x84/0xb0 [ 1913.604647] __do_fault+0xfa/0x380 [ 1913.608192] __handle_mm_fault+0x22e9/0x3280 [ 1913.612866] ? copy_page_range+0x1d70/0x1d70 [ 1913.617279] ? find_held_lock+0x2d/0x110 [ 1913.621356] handle_mm_fault+0x288/0x7a0 [ 1913.625418] __do_page_fault+0x4bc/0xb40 [ 1913.629489] ? vmalloc_fault+0xdf0/0xdf0 [ 1913.633550] ? do_page_fault+0x60/0x4f2 [ 1913.637541] ? page_fault+0x2f/0x50 [ 1913.641255] page_fault+0x45/0x50 [ 1913.644708] RIP: 69a73a00:0x1d26f7 [ 1913.648259] RSP: 1d2dc1:0000000000000529 EFLAGS: 00000007 [ 1913.711109] Mem-Info: [ 1913.719238] active_anon:238367 inactive_anon:1092224 isolated_anon:0 [ 1913.719238] active_file:38 inactive_file:13 isolated_file:0 [ 1913.719238] unevictable:26332 dirty:0 writeback:0 unstable:0 [ 1913.719238] slab_reclaimable:15824 slab_unreclaimable:118329 [ 1913.719238] mapped:61062 shmem:20599 pagetables:10527 bounce:0 [ 1913.719238] free:25036 free_pcp:69 free_cma:0 [ 1913.777760] Node 0 active_anon:916812kB inactive_anon:792736kB active_file:36kB inactive_file:32kB unevictable:84488kB isolated(anon):0kB isolated(file):0kB mapped:224456kB dirty:0kB writeback:0kB shmem:51448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1913.932088] Node 1 active_anon:36656kB inactive_anon:3576160kB active_file:16kB inactive_file:20kB unevictable:20840kB isolated(anon):0kB isolated(file):0kB mapped:19792kB dirty:0kB writeback:0kB shmem:30948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1913.961777] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:300kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:276kB writepending:0kB present:15992kB managed:15908kB mlocked:276kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1914.030125] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1914.035213] Node 0 DMA32 free:36176kB min:36272kB low:45340kB high:54408kB active_anon:916512kB inactive_anon:790628kB active_file:36kB inactive_file:32kB unevictable:84240kB writepending:0kB present:3129332kB managed:2621260kB mlocked:84240kB kernel_stack:9184kB pagetables:13640kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 1914.065668] lowmem_reserve[]: 0 0 0 0 0 [ 1914.069706] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1914.095251] lowmem_reserve[]: 0 0 0 0 0 [ 1914.099269] Node 1 Normal free:53624kB min:53612kB low:67012kB high:80412kB active_anon:36644kB inactive_anon:3576152kB active_file:24kB inactive_file:20kB unevictable:20840kB writepending:0kB present:3932160kB managed:3870192kB mlocked:20840kB kernel_stack:7808kB pagetables:28448kB bounce:0kB free_pcp:148kB local_pcp:4kB free_cma:0kB [ 1914.129139] lowmem_reserve[]: 0 0 0 0 0 [ 1914.133154] Node 0 DMA: 4*4kB (UME) 13*8kB (U) 4*16kB (UE) 10*32kB (UE) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10424kB [ 1914.148819] Node 0 DMA32: 1380*4kB (UME) 453*8kB (UME) 1097*16kB (UME) 223*32kB (UME) 41*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36456kB [ 1914.163935] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1914.185905] Node 1 Normal: 72*4kB (UME) 136*8kB (UM) 20*16kB (UME) 11*32kB (UME) 86*64kB (UME) 87*128kB (UME) 48*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 53504kB [ 1914.245907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1914.254795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1914.358002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1914.404881] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1914.448956] 23954 total pagecache pages [ 1914.452994] 0 pages in swap cache [ 1914.518015] Swap cache stats: add 0, delete 0, find 0/0 [ 1914.523458] Free swap = 0kB [ 1914.566295] Total swap = 0kB [ 1914.569994] 1965979 pages RAM [ 1914.591575] 0 pages HighMem/MovableOnly [ 1914.595620] 339053 pages reserved [ 1914.605852] 0 pages cma reserved [ 1914.609243] Out of memory: Kill process 24898 (syz-executor.2) score 1008 or sacrifice child 09:44:34 executing program 0: r0 = socket(0xb, 0x9a00aac84a15a51f, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) r5 = socket$inet(0x2, 0x4000000000000001, 0x20) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000001340)=""/4096, &(0x7f0000000200)=0x1000) sendto$inet(r5, 0x0, 0x0, 0x2001c7e9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x9) sendto$inet(r5, &(0x7f0000000340)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0x47, 0x20c49a, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="ef244ccee864bcbf54b59d618f176f90d3389474199e82506aa0410e4cce693672a1a815aee5acde3d1ee0a8cb1c73f62be414a3e29228a804b95e", @ANYRESHEX=r2, @ANYRES64, @ANYRES64, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES16], 0x1}], 0x1}, 0x0) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x3c, @multicast1, 0x4e23, 0x8000004, 'wlc\x00', 0x3, 0x0, 0x4f}, 0x2c) prctl$PR_SET_SECUREBITS(0x1c, 0x10) recvmmsg(r2, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:44:35 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000500)}, {&(0x7f0000000100)="f9b6f0402f2e8c0df5ba0db873af7be2b5ecb9c94887", 0x16}, {&(0x7f0000000140)="533b3b533d9d44723d04149d624e86693218c589b594f26f5bebca3ccd56", 0x1e}], 0x3, 0x0) ioctl$TIOCCONS(r0, 0x541d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) getsockopt$inet_dccp_int(r3, 0x21, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bridge0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0xffffffff, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x30000, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, &(0x7f0000000100)=0xfffffff8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:44:35 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x202002) keyctl$chown(0x4, r5, r3, r4) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x1f, 0x200}, {0xbe1b}], r3}, 0x18, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:44:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) fsync(r5) [ 1915.127850] ip_tables: iptables: counters copy to user failed while replacing table [ 1915.169441] ip_tables: iptables: counters copy to user failed while replacing table [ 1917.360442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1917.377032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1917.393472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1917.414503] ip_tables: iptables: counters copy to user failed while replacing table [ 1917.442538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1917.455299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1917.465045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1917.505042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1917.517605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1917.589886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:44:37 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r2, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000140)) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r2, 0xc) 09:44:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendmsg$rds(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/130, 0x82}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, &(0x7f0000000540)=[@fadd={0x58, 0x114, 0x6, {{0x2, 0x672b}, &(0x7f0000000140)=0x401, &(0x7f0000000180)=0x400, 0x10001, 0x6, 0x3aa, 0x8, 0x0, 0x80000001}}, @rdma_args={0x48, 0x114, 0x1, {{0x7}, {&(0x7f00000001c0)=""/234, 0xea}, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/87, 0x57}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/62, 0x3e}], 0x4, 0x10, 0x1800000000}}, @rdma_dest={0x18, 0x114, 0x2, {0x80, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0xd881, 0x1}, &(0x7f00000004c0)=0x2, &(0x7f0000000500), 0x8fc, 0x7, 0x9, 0x8000, 0x884a71ca77e2a7ee, 0x5}}], 0x110, 0x10}, 0x4000000) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:37 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x144, @time={0xffffffff, 0xfffffff7}, 0x6, {0x20, 0x5}, 0x9, 0x1, 0x8}) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x26, 0x20000ffd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0x4d, 0x2020848a, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x3, &(0x7f0000019000), 0x0, 0x0, 0x0, 0x40080}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:44:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x131200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000180)={0x0, {0x8, 0xdc}}) getsockname$packet(r1, &(0x7f0000000100), &(0x7f0000000140)=0x14) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) [ 1918.706209] Bluetooth: Invalid header checksum [ 1918.710869] Bluetooth: Invalid header checksum [ 1918.826194] Bluetooth: Invalid header checksum [ 1918.936115] Bluetooth: Invalid header checksum [ 1919.046192] Bluetooth: Invalid header checksum [ 1919.156378] Bluetooth: Invalid header checksum 09:44:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8001, 0x4, 0x0, 0x3, 0x18, 0x15, "3424a25e0a495cd4225721801b83e3ab11821307c33b04c3991662cb5f9d241c5fa78f972d80481a5b723b07e079466943853e9988783a09bcbea59ba3410eff", "2f3824c2b54d246af88d118342d526a841490b509941886ceb2f655024341ea481d3e55ec76b3196eb1392917a3fbf12487c61e90cc7227245e2561256ab4672", "a2848c9108fd660db9e753a5c8c0c931de85ede1c647792f31aad4b588642fec", [0x70000000000000, 0xffffffffffffff9c]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:39 executing program 4: mlockall(0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r2, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r2, 0xc) 09:44:39 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) r4 = dup2(r2, r0) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) dup(r5) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:44:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x131200, 0x1d1) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)={0xfffffff7, 0x2, 0x4, 0x200000, 0x803f, {0x0, 0x2710}, {0x1, 0xc, 0x41, 0x3, 0x6, 0x7, "ee47bcb9"}, 0x9, 0x2, @planes=&(0x7f0000000080)={0x24, 0x0, @mem_offset=0x1, 0x20}, 0x8f, 0x0, r1}) ioctl$VT_WAITACTIVE(r2, 0x5607) ioctl$KDADDIO(r0, 0x400455c8, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x60, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELTABLE={0x48, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x78, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0xeb892caed37f2fe8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xe43e6ece957ea511}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x78, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xb6}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x328}, 0x1, 0x0, 0x0, 0x40000}, 0x40000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:44:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200087fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:40 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40, 0x80) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c010000e42e7f21b9a41c8d579456ddbba9d5a2b6c10ff865b32d6ee3c13c17fed1e5b2c8683f869ac1e0173d7ba71c002646a3d63c320d4a23299f828caa0ca2da1112e3cfc940769e", @ANYRES16=r5, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x20000011) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0xfffffffffffffc00, 0x5421}) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x4e) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) sched_yield() recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:44:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @empty}, 0x10) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) [ 1919.913086] audit: type=1804 audit(1588412680.226:51): pid=24996 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir261663056/syzkaller.GWymDU/508/file0" dev="sda1" ino=15869 res=1 [ 1920.013597] audit: type=1804 audit(1588412680.296:52): pid=24996 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir261663056/syzkaller.GWymDU/508/file0" dev="sda1" ino=15869 res=1 [ 1920.479133] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1920.492532] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1920.505600] CPU: 1 PID: 24981 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 1920.513543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1920.522904] Call Trace: [ 1920.525508] dump_stack+0x13e/0x194 [ 1920.529159] dump_header+0x178/0x6d4 [ 1920.532890] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1920.537926] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1920.543072] ? ___ratelimit+0x50/0x519 [ 1920.546976] oom_kill_process.cold+0x10/0xae3 [ 1920.551504] ? lock_acquire+0x170/0x3f0 [ 1920.555497] ? lock_downgrade+0x6e0/0x6e0 [ 1920.559832] out_of_memory+0x2d5/0x1110 [ 1920.563823] ? oom_killer_disable+0x1c0/0x1c0 [ 1920.568346] ? mutex_trylock+0x152/0x1a0 [ 1920.572421] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1920.577307] ? warn_alloc+0xf0/0xf0 [ 1920.580956] __alloc_pages_nodemask+0x5d3/0x700 [ 1920.585657] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1920.590693] ? lock_downgrade+0x6e0/0x6e0 [ 1920.594856] alloc_pages_current+0xe7/0x1e0 [ 1920.599194] __page_cache_alloc+0x245/0x3d0 [ 1920.603524] filemap_fault+0xc18/0x1c50 [ 1920.607524] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1920.612201] ? lock_acquire+0x170/0x3f0 [ 1920.616189] ? ext4_filemap_fault+0x7c/0xb0 [ 1920.620535] ext4_filemap_fault+0x84/0xb0 [ 1920.624691] __do_fault+0xfa/0x380 [ 1920.628250] __handle_mm_fault+0x22e9/0x3280 [ 1920.632666] ? copy_page_range+0x1d70/0x1d70 [ 1920.637092] ? find_held_lock+0x2d/0x110 [ 1920.641179] handle_mm_fault+0x288/0x7a0 [ 1920.645268] __get_user_pages+0x44d/0x11e0 [ 1920.649519] ? follow_page_mask+0x1580/0x1580 [ 1920.654056] ? lock_acquire+0x170/0x3f0 [ 1920.658045] ? __mm_populate+0x1e3/0x2c0 [ 1920.662134] populate_vma_page_range+0x17b/0x210 [ 1920.666910] __mm_populate+0x195/0x2c0 [ 1920.670806] ? populate_vma_page_range+0x210/0x210 [ 1920.675920] ? security_capable+0x88/0xb0 [ 1920.680166] SyS_mlockall+0x3f5/0x520 [ 1920.684096] ? SyS_munlock+0xf0/0xf0 [ 1920.687825] do_syscall_64+0x1d5/0x640 [ 1920.691733] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1920.696949] RIP: 0033:0x45c829 [ 1920.700142] RSP: 002b:00007f65489b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1920.707859] RAX: ffffffffffffffda RBX: 00000000004f5900 RCX: 000000000045c829 [ 1920.715163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1920.722431] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1920.729712] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1920.736988] R13: 0000000000000737 R14: 00000000004c9f77 R15: 00007f65489b46d4 [ 1920.792886] Mem-Info: [ 1920.795376] active_anon:240039 inactive_anon:1092207 isolated_anon:0 [ 1920.795376] active_file:39 inactive_file:22 isolated_file:0 [ 1920.795376] unevictable:24980 dirty:2 writeback:0 unstable:0 [ 1920.795376] slab_reclaimable:15808 slab_unreclaimable:117895 [ 1920.795376] mapped:60899 shmem:22135 pagetables:10574 bounce:0 [ 1920.795376] free:24918 free_pcp:162 free_cma:0 [ 1920.834633] Node 0 active_anon:917012kB inactive_anon:792676kB active_file:92kB inactive_file:88kB unevictable:86776kB isolated(anon):0kB isolated(file):0kB mapped:227916kB dirty:4kB writeback:0kB shmem:51448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1920.873578] Node 1 active_anon:43144kB inactive_anon:3576152kB active_file:64kB inactive_file:0kB unevictable:13144kB isolated(anon):0kB isolated(file):0kB mapped:15680kB dirty:4kB writeback:0kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1920.904851] Node 0 DMA free:10420kB min:220kB low:272kB high:324kB active_anon:320kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:20kB writepending:0kB present:15992kB managed:15908kB mlocked:20kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1920.950061] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1920.955220] Node 0 DMA32 free:36160kB min:36272kB low:45340kB high:54408kB active_anon:916692kB inactive_anon:790568kB active_file:0kB inactive_file:88kB unevictable:86848kB writepending:0kB present:3129332kB managed:2621260kB mlocked:86848kB kernel_stack:9120kB pagetables:13540kB bounce:0kB free_pcp:648kB local_pcp:648kB free_cma:0kB [ 1920.998328] lowmem_reserve[]: 0 0 0 0 0 [ 1921.002370] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1921.033225] lowmem_reserve[]: 0 0 0 0 0 [ 1921.045505] Node 1 Normal free:53580kB min:53612kB low:67012kB high:80412kB active_anon:43144kB inactive_anon:3576152kB active_file:16kB inactive_file:16kB unevictable:13152kB writepending:0kB present:3932160kB managed:3870192kB mlocked:13152kB kernel_stack:8064kB pagetables:28712kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1921.085867] lowmem_reserve[]: 0 0 0 0 0 [ 1921.090173] Node 0 DMA: 13*4kB (ME) 6*8kB (M) 3*16kB (UME) 9*32kB (UME) 12*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10420kB [ 1921.113428] Node 0 DMA32: 1362*4kB (UME) 779*8kB (UMEH) 1088*16kB (UEH) 215*32kB (UMEH) 3*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36160kB [ 1921.135568] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1921.153581] Node 1 Normal: 229*4kB (UME) 57*8kB (UM) 67*16kB (UME) 10*32kB (UME) 84*64kB (UE) 87*128kB (UME) 46*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 53580kB [ 1921.189161] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1921.201211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1921.217625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1921.239266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1921.253394] 25263 total pagecache pages [ 1921.262155] 0 pages in swap cache [ 1921.265707] Swap cache stats: add 0, delete 0, find 0/0 [ 1921.283272] Free swap = 0kB [ 1921.289072] Total swap = 0kB [ 1921.292637] 1965979 pages RAM [ 1921.295745] 0 pages HighMem/MovableOnly [ 1921.304858] 339053 pages reserved [ 1921.309629] 0 pages cma reserved [ 1921.313032] Out of memory: Kill process 24977 (syz-executor.4) score 1008 or sacrifice child [ 1921.333886] Killed process 24977 (syz-executor.4) total-vm:75100kB, anon-rss:18004kB, file-rss:45620kB, shmem-rss:0kB [ 1921.354735] oom_reaper: reaped process 24977 (syz-executor.4), now anon-rss:18020kB, file-rss:12400kB, shmem-rss:0kB 09:44:42 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0, 0xffffffffffffffbd}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x9) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @private0, 0x20}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x81, 0x0, 0x10000, 0x7}) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x24000081) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:44:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x8, 0x7, 0x3, 0x4, 0x5, "1bc0144a6e21a617a47dd9cae65795981105f0"}) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000080)) 09:44:42 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_ROPEN(r2, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x12, 0x0, 0x4}, 0x20}}, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x28, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05630440010000007df604400000000007630440010000001063084000000000000000000d630000"], 0x6, 0x0, &(0x7f0000000100)="9cd6ef4011fc"}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:44:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) sendto$l2tp(r5, &(0x7f0000000000)="568be1aa7adb6a9541c444a1a92dd72a5bc2e73c3dd62e0e80f5dae46c0c7a9d8990a0495b5d9beaf4f0283bd4611eb280bea8969f0dc76b9ef94be530aa0ef33e8c2e44f6f68cdf5544e299e8c0bb8857b15a33ecc5aff4543bc9bd842aa170900f6f8a837e989c6ee43c", 0x6b, 0x14, &(0x7f0000000080)={0x2, 0x0, @loopback, 0x2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getpeername$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c) r5 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:42 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvfrom(r2, &(0x7f0000000000)=""/39, 0x27, 0x40000040, &(0x7f0000000040)=@l2={0x1f, 0x6, @any, 0xfff, 0x1}, 0x80) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) [ 1922.951438] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1922.979301] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1922.989808] CPU: 1 PID: 3638 Comm: systemd-udevd Not tainted 4.14.177-syzkaller #0 [ 1922.997537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1923.006907] Call Trace: [ 1923.009508] dump_stack+0x13e/0x194 [ 1923.013143] dump_header+0x178/0x6d4 [ 1923.016861] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1923.021883] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1923.027010] ? ___ratelimit+0x50/0x519 [ 1923.030913] oom_kill_process.cold+0x10/0xae3 [ 1923.035409] ? lock_downgrade+0x6e0/0x6e0 [ 1923.039563] out_of_memory+0x2d5/0x1110 [ 1923.043549] ? oom_killer_disable+0x1c0/0x1c0 [ 1923.048045] ? mutex_trylock+0x152/0x1a0 [ 1923.052108] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1923.056966] ? warn_alloc+0xf0/0xf0 [ 1923.060614] __alloc_pages_nodemask+0x5d3/0x700 [ 1923.065294] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1923.070319] ? lock_downgrade+0x6e0/0x6e0 [ 1923.074482] alloc_pages_current+0xe7/0x1e0 [ 1923.078830] __page_cache_alloc+0x245/0x3d0 [ 1923.083167] filemap_fault+0xc18/0x1c50 [ 1923.087187] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1923.091862] ? lock_acquire+0x170/0x3f0 [ 1923.095855] ? ext4_filemap_fault+0x7c/0xb0 [ 1923.100185] ext4_filemap_fault+0x84/0xb0 [ 1923.104352] __do_fault+0xfa/0x380 [ 1923.107903] __handle_mm_fault+0x22e9/0x3280 [ 1923.112377] ? copy_page_range+0x1d70/0x1d70 [ 1923.116798] ? find_held_lock+0x2d/0x110 [ 1923.120904] handle_mm_fault+0x288/0x7a0 [ 1923.124973] __do_page_fault+0x4bc/0xb40 [ 1923.129124] ? vmalloc_fault+0xdf0/0xdf0 [ 1923.133187] ? do_page_fault+0x60/0x4f2 [ 1923.137163] ? page_fault+0x2f/0x50 [ 1923.140814] page_fault+0x45/0x50 [ 1923.144292] RIP: 75db78f0:0x100 [ 1923.147568] RSP: 8000:000000000000000e EFLAGS: 00000001 [ 1923.843651] Mem-Info: [ 1923.875064] active_anon:239991 inactive_anon:1092208 isolated_anon:0 [ 1923.875064] active_file:44 inactive_file:0 isolated_file:0 [ 1923.875064] unevictable:25862 dirty:0 writeback:0 unstable:0 [ 1923.875064] slab_reclaimable:15808 slab_unreclaimable:117198 [ 1923.875064] mapped:61790 shmem:22135 pagetables:10549 bounce:0 [ 1923.875064] free:25062 free_pcp:0 free_cma:0 [ 1924.137856] Node 0 active_anon:916888kB inactive_anon:792688kB active_file:64kB inactive_file:60kB unevictable:97692kB isolated(anon):0kB isolated(file):0kB mapped:236060kB dirty:0kB writeback:0kB shmem:51456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1924.245783] Node 1 active_anon:43076kB inactive_anon:3576144kB active_file:8kB inactive_file:104kB unevictable:5832kB isolated(anon):0kB isolated(file):0kB mapped:11104kB dirty:0kB writeback:0kB shmem:37084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1924.330812] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:300kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1924.385514] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1924.390698] Node 0 DMA32 free:36248kB min:36272kB low:45340kB high:54408kB active_anon:916588kB inactive_anon:790580kB active_file:108kB inactive_file:4kB unevictable:97664kB writepending:0kB present:3129332kB managed:2621260kB mlocked:97664kB kernel_stack:9088kB pagetables:13640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1924.453922] lowmem_reserve[]: 0 0 0 0 0 [ 1924.474463] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1924.554311] lowmem_reserve[]: 0 0 0 0 0 [ 1924.590257] Node 1 Normal free:53008kB min:53612kB low:67012kB high:80412kB active_anon:43076kB inactive_anon:3576144kB active_file:8kB inactive_file:0kB unevictable:5832kB writepending:0kB present:3932160kB managed:3870192kB mlocked:5832kB kernel_stack:8000kB pagetables:28512kB bounce:0kB free_pcp:140kB local_pcp:0kB free_cma:0kB [ 1924.730744] lowmem_reserve[]: 0 0 0 0 0 [ 1924.734787] Node 0 DMA: 16*4kB (ME) 7*8kB (UM) 3*16kB (UME) 9*32kB (UME) 12*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10440kB [ 1924.788237] Node 0 DMA32: 88*4kB (UME) 531*8kB (UM) 1301*16kB (UME) 343*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36392kB [ 1924.839304] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1924.897369] Node 1 Normal: 99*4kB (UME) 52*8kB (UM) 161*16kB (UME) 103*32kB (UME) 39*64kB (ME) 72*128kB (UME) 49*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 53468kB [ 1924.983355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1925.031375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1925.100923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1925.142154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1925.151551] 26210 total pagecache pages [ 1925.155554] 0 pages in swap cache [ 1925.159077] Swap cache stats: add 0, delete 0, find 0/0 [ 1925.164454] Free swap = 0kB [ 1925.167550] Total swap = 0kB [ 1925.170571] 1965979 pages RAM [ 1925.173705] 0 pages HighMem/MovableOnly [ 1925.177734] 339053 pages reserved [ 1925.181193] 0 pages cma reserved [ 1925.184599] Out of memory: Kill process 25010 (syz-executor.4) score 1009 or sacrifice child [ 1925.193249] Killed process 25014 (syz-executor.4) total-vm:74968kB, anon-rss:18028kB, file-rss:50668kB, shmem-rss:0kB [ 1925.225491] oom_reaper: reaped process 25014 (syz-executor.4), now anon-rss:18020kB, file-rss:15852kB, shmem-rss:0kB 09:44:45 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r6, 0x8, 0x0, @in={0x2, 0x4e21, @broadcast}}}, 0xa0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:44:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000040), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) bind$inet(r4, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r5 = fcntl$dupfd(r1, 0x406, r2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x9, 0x9, 0x5d36, 0xbe}) 09:44:45 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4429b341, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x4000014}, 0x10011) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$cgroup_ro(r3, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:44:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400000, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r4, 0xffff8001}, 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000080)={r4, 0x2b, "7f0e6da93a2eff39e37059df46d8d513c1294fd9799201bba0e24ef3b4e6a19e51a4209e65d4a913d93295"}, &(0x7f00000000c0)=0x33) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r7, 0x80045510, &(0x7f0000000000)=0x3) socket$l2tp(0x2, 0x2, 0x73) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x1f1480, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x260, 0x98, 0x260, 0x98, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0x0, 0x0, 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0xfffffffffffffe3d, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'wg2\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2, 0x10}, 0x0, 0xffffffffffffff65, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00', {}, {0xff}}, 0x0, 0xffff, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x417) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:46 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/236, 0xec}, {&(0x7f00000000c0)=""/112, 0x70}, {&(0x7f0000000380)=""/144, 0x90}, {&(0x7f00000001c0)=""/97, 0x61}], 0x4) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r2}, 0xc) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r2, 0x5}, 0xc) vmsplice(r3, &(0x7f0000000140), 0x0, 0x5) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) [ 1926.633931] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1926.762761] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1926.790421] CPU: 0 PID: 6371 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 [ 1926.798298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1926.807655] Call Trace: [ 1926.810269] dump_stack+0x13e/0x194 [ 1926.813920] dump_header+0x178/0x6d4 [ 1926.817676] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1926.822699] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1926.827805] ? ___ratelimit+0x50/0x519 [ 1926.831697] oom_kill_process.cold+0x10/0xae3 [ 1926.836196] ? lock_acquire+0x170/0x3f0 [ 1926.840168] ? lock_downgrade+0x6e0/0x6e0 [ 1926.844319] out_of_memory+0x2d5/0x1110 [ 1926.848304] ? oom_killer_disable+0x1c0/0x1c0 [ 1926.852807] ? mutex_trylock+0x152/0x1a0 [ 1926.856874] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1926.861741] ? warn_alloc+0xf0/0xf0 [ 1926.865389] __alloc_pages_nodemask+0x5d3/0x700 [ 1926.870064] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1926.875092] ? lock_downgrade+0x6e0/0x6e0 [ 1926.879368] alloc_pages_current+0xe7/0x1e0 [ 1926.883820] __page_cache_alloc+0x245/0x3d0 [ 1926.888236] filemap_fault+0xc18/0x1c50 [ 1926.892234] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1926.896915] ? lock_acquire+0x170/0x3f0 [ 1926.900911] ? ext4_filemap_fault+0x7c/0xb0 [ 1926.905599] ext4_filemap_fault+0x84/0xb0 [ 1926.909754] __do_fault+0xfa/0x380 [ 1926.913302] __handle_mm_fault+0x22e9/0x3280 [ 1926.917722] ? copy_page_range+0x1d70/0x1d70 [ 1926.922752] ? find_held_lock+0x2d/0x110 [ 1926.926834] handle_mm_fault+0x288/0x7a0 [ 1926.930901] __do_page_fault+0x4bc/0xb40 [ 1926.934969] ? vmalloc_fault+0xdf0/0xdf0 [ 1926.939158] ? do_page_fault+0x60/0x4f2 [ 1926.943143] ? page_fault+0x2f/0x50 [ 1926.946775] page_fault+0x45/0x50 [ 1926.950236] RIP: d29d8850:0x1d627a [ 1926.953857] RSP: 1d62e8:0000000000000783 EFLAGS: 00000013 [ 1928.067119] Mem-Info: [ 1928.075248] active_anon:239995 inactive_anon:1092208 isolated_anon:0 [ 1928.075248] active_file:11 inactive_file:0 isolated_file:0 [ 1928.075248] unevictable:25660 dirty:0 writeback:0 unstable:0 [ 1928.075248] slab_reclaimable:15792 slab_unreclaimable:117261 [ 1928.075248] mapped:61577 shmem:22135 pagetables:10587 bounce:0 [ 1928.075248] free:25054 free_pcp:1 free_cma:0 [ 1928.381819] Node 0 active_anon:917212kB inactive_anon:792688kB active_file:24kB inactive_file:0kB unevictable:94204kB isolated(anon):0kB isolated(file):0kB mapped:230940kB dirty:0kB writeback:0kB shmem:51456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1928.587895] Node 1 active_anon:42768kB inactive_anon:3576144kB active_file:4kB inactive_file:8kB unevictable:8436kB isolated(anon):0kB isolated(file):0kB mapped:15368kB dirty:0kB writeback:0kB shmem:37084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1928.782004] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:300kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1928.992993] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1929.025859] Node 0 DMA32 free:36276kB min:36272kB low:45340kB high:54408kB active_anon:916912kB inactive_anon:790580kB active_file:48kB inactive_file:0kB unevictable:94176kB writepending:0kB present:3129332kB managed:2621260kB mlocked:94176kB kernel_stack:9504kB pagetables:13884kB bounce:0kB free_pcp:200kB local_pcp:104kB free_cma:0kB [ 1929.066278] lowmem_reserve[]: 0 0 0 0 0 [ 1929.080357] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1929.113528] lowmem_reserve[]: 0 0 0 0 0 [ 1929.117659] Node 1 Normal free:53500kB min:53612kB low:67012kB high:80412kB active_anon:42768kB inactive_anon:3576144kB active_file:12kB inactive_file:4kB unevictable:8500kB writepending:4kB present:3932160kB managed:3870192kB mlocked:8500kB kernel_stack:7808kB pagetables:28420kB bounce:0kB free_pcp:240kB local_pcp:240kB free_cma:0kB [ 1929.153774] lowmem_reserve[]: 0 0 0 0 0 [ 1929.159501] Node 0 DMA: 16*4kB (ME) 8*8kB (UM) 3*16kB (UME) 9*32kB (UME) 12*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10448kB [ 1929.179699] Node 0 DMA32: 63*4kB (UME) 476*8kB (UM) 1347*16kB (UME) 337*32kB (UE) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36460kB [ 1929.202184] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1929.253471] Node 1 Normal: 83*4kB (UME) 101*8kB (UM) 19*16kB (UE) 140*32kB (UME) 40*64kB (UME) 71*128kB (UME) 50*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 52900kB [ 1929.344101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1929.385872] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1929.394616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1929.426008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1929.435688] 23708 total pagecache pages [ 1929.448828] 0 pages in swap cache [ 1929.469101] Swap cache stats: add 0, delete 0, find 0/0 [ 1929.490604] Free swap = 0kB [ 1929.498394] Total swap = 0kB [ 1929.522261] 1965979 pages RAM [ 1929.536722] 0 pages HighMem/MovableOnly [ 1929.563986] 339053 pages reserved [ 1929.568784] 0 pages cma reserved [ 1929.573270] Out of memory: Kill process 25055 (syz-executor.4) score 1009 or sacrifice child [ 1929.674241] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1929.754812] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:44:50 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:44:50 executing program 1: r0 = socket(0xb, 0x5, 0x6) r1 = accept4$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) flistxattr(r1, &(0x7f00000000c0)=""/79, 0x4f) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:44:50 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000001580)=""/262, 0x106}], 0x1, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/72, 0x48}, {&(0x7f0000000500)=""/4094, 0xffe}], 0x6, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$isdn(r3, &(0x7f00000016c0)=ANY=[@ANYBLOB="810000001f0000006387caf5aaecbb6a4c64aaf41199c4106422048a9d2e3ea8a8d4497d81575ccca96806e51f96a301e34cffe3a7915c16208357b59cf87fa4c8dcc22813f373506f7e440b3948c838e0d91f9c6b11b8d05447ca6085943480d8089c8aab474576a81eaa736715114d64e98593cdaf22746605414687de46e6f0d6f4921ee45289ac2cdc7099b0edc2"], 0x85, 0x4000050, 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000100)=0x10, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) [ 1930.578245] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1930.630500] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1930.645574] CPU: 0 PID: 6346 Comm: syz-fuzzer Not tainted 4.14.177-syzkaller #0 [ 1930.653037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1930.662388] Call Trace: [ 1930.664985] dump_stack+0x13e/0x194 [ 1930.668616] dump_header+0x178/0x6d4 [ 1930.672355] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1930.677378] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1930.682490] ? ___ratelimit+0x50/0x519 [ 1930.686386] oom_kill_process.cold+0x10/0xae3 [ 1930.690895] ? lock_downgrade+0x6e0/0x6e0 [ 1930.695062] out_of_memory+0x2d5/0x1110 [ 1930.699041] ? oom_killer_disable+0x1c0/0x1c0 [ 1930.703543] ? mutex_trylock+0x152/0x1a0 [ 1930.707615] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1930.712485] ? warn_alloc+0xf0/0xf0 [ 1930.716134] __alloc_pages_nodemask+0x5d3/0x700 [ 1930.720809] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1930.725822] ? lock_downgrade+0x6e0/0x6e0 [ 1930.729982] alloc_pages_current+0xe7/0x1e0 [ 1930.734321] __page_cache_alloc+0x245/0x3d0 [ 1930.738648] filemap_fault+0xc18/0x1c50 [ 1930.742632] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1930.747304] ? lock_acquire+0x170/0x3f0 [ 1930.751284] ? ext4_filemap_fault+0x7c/0xb0 [ 1930.755612] ext4_filemap_fault+0x84/0xb0 [ 1930.760024] __do_fault+0xfa/0x380 [ 1930.763568] __handle_mm_fault+0x22e9/0x3280 [ 1930.767980] ? copy_page_range+0x1d70/0x1d70 [ 1930.772394] ? find_held_lock+0x2d/0x110 [ 1930.776467] handle_mm_fault+0x288/0x7a0 [ 1930.780538] __do_page_fault+0x4bc/0xb40 [ 1930.784603] ? vmalloc_fault+0xdf0/0xdf0 [ 1930.788669] ? do_page_fault+0x60/0x4f2 [ 1930.792670] ? page_fault+0x2f/0x50 [ 1930.796335] page_fault+0x45/0x50 [ 1930.799788] RIP: 0020:0x13 [ 1930.802628] RSP: 002b:000000c42025be40 EFLAGS: 00000000 [ 1930.842758] Mem-Info: [ 1930.850658] active_anon:239933 inactive_anon:1092208 isolated_anon:0 [ 1930.850658] active_file:4 inactive_file:0 isolated_file:0 [ 1930.850658] unevictable:25668 dirty:0 writeback:0 unstable:0 [ 1930.850658] slab_reclaimable:15792 slab_unreclaimable:117263 [ 1930.850658] mapped:62261 shmem:22135 pagetables:10528 bounce:0 [ 1930.850658] free:24989 free_pcp:0 free_cma:0 [ 1931.041198] Node 0 active_anon:916872kB inactive_anon:792692kB active_file:56kB inactive_file:76kB unevictable:94596kB isolated(anon):0kB isolated(file):116kB mapped:230576kB dirty:0kB writeback:0kB shmem:51460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1931.071268] Node 1 active_anon:42760kB inactive_anon:3576140kB active_file:40kB inactive_file:0kB unevictable:8228kB isolated(anon):0kB isolated(file):0kB mapped:18420kB dirty:0kB writeback:0kB shmem:37080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1931.104356] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:300kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:84kB writepending:0kB present:15992kB managed:15908kB mlocked:84kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1931.131510] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1931.142834] Node 0 DMA32 free:35948kB min:36272kB low:45340kB high:54408kB active_anon:916544kB inactive_anon:790584kB active_file:56kB inactive_file:348kB unevictable:94516kB writepending:8kB present:3129332kB managed:2621260kB mlocked:94516kB kernel_stack:9248kB pagetables:13668kB bounce:0kB free_pcp:784kB local_pcp:156kB free_cma:0kB [ 1931.178590] lowmem_reserve[]: 0 0 0 0 0 [ 1931.196492] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1931.270045] lowmem_reserve[]: 0 0 0 0 0 [ 1931.274112] Node 1 Normal free:53588kB min:53612kB low:67012kB high:80412kB active_anon:42760kB inactive_anon:3576140kB active_file:8kB inactive_file:4kB unevictable:8668kB writepending:0kB present:3932160kB managed:3870192kB mlocked:8668kB kernel_stack:7840kB pagetables:28420kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1931.303927] lowmem_reserve[]: 0 0 0 0 0 [ 1931.308085] Node 0 DMA: 2*4kB (ME) 13*8kB (UM) 3*16kB (UME) 9*32kB (UME) 12*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10432kB [ 1931.333260] Node 0 DMA32: 65*4kB (UM) 304*8kB (UM) 1394*16kB (UME) 346*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36068kB [ 1931.347343] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1931.361422] Node 1 Normal: 151*4kB (UME) 105*8kB (UM) 25*16kB (UME) 139*32kB (UME) 39*64kB (UME) 74*128kB (UME) 50*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 53588kB [ 1931.379534] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1931.404779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1931.419132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1931.434840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1931.443704] 26920 total pagecache pages [ 1931.453404] 0 pages in swap cache [ 1931.459944] Swap cache stats: add 0, delete 0, find 0/0 [ 1931.465355] Free swap = 0kB [ 1931.471533] Total swap = 0kB [ 1931.474642] 1965979 pages RAM [ 1931.489638] 0 pages HighMem/MovableOnly [ 1931.493639] 339053 pages reserved [ 1931.498610] 0 pages cma reserved [ 1931.501987] Out of memory: Kill process 25084 (syz-executor.4) score 1009 or sacrifice child [ 1931.517646] Killed process 25084 (syz-executor.4) total-vm:78864kB, anon-rss:15628kB, file-rss:52408kB, shmem-rss:0kB 09:44:52 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x4400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:44:52 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000001180)=[{&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f0000000080)}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x3, &(0x7f00000011c0)=""/167, 0xa7}, 0xd17}, {{&(0x7f0000001280)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/210, 0xd2}], 0x2, &(0x7f0000002440)}, 0x5}], 0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x9a9) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x40) r4 = dup2(r2, r0) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:44:52 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r2, 0xffff8001}, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000180)=0x4000076, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r3, 0xffff8001}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={r3, 0x3, 0x0, 0x400, 0x4, 0xfffffff8}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r2, 0x8}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)) 09:44:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) r2 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xc84) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) bind$inet(r4, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x80d1, 0x0, 0x0) 09:44:52 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r3, 0xffff8001}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r3, 0x2}, &(0x7f00000001c0)=0x8) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1932.263687] net_ratelimit: 61 callbacks suppressed [ 1932.263693] ip_tables: iptables: counters copy to user failed while replacing table [ 1932.314003] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1933.011453] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1933.026700] ip_tables: iptables: counters copy to user failed while replacing table 09:44:54 executing program 1: r0 = socket(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="34000040100081eee8000004000057fa10966492", @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000400)={{0x3, @netrom}, [@netrom, @bcast, @netrom, @null, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468000000b31800027f1400010000000000", @ANYRES32=0x0, @ANYBLOB="00f8b200080800001028e6c467144d2fa813"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{}, {{}, {0xf0ffff}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}]}]}}]}, 0x58}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000140)={@private2, 0x53, r7}) 09:44:54 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x110, 0x16, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xcc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}]}, @NFT_MSG_DELOBJ={0x60, 0x14, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x1a0, 0x3, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x705}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6a4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_HOOK={0x70, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x91ec9fe471fe7f92}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4168cd1c}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7b01d357}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_NEWTABLE={0x44, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x84, 0x5, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x20002000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_NEWSETELEM={0x1be4, 0xc, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x678, 0x3, 0x0, 0x1, [{0x674, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x7f, 0x6, 0x1, 0x0, "ff99ce473c38c7f934298f095c97cc184d816bb7d45f2399f4d14ea18f53659884c35e0b28412e2968127985b019bf29c978a36985fd1b0fdbb912101716c90131dab18d427fdd877bcd3340590d86f2a75bd90c83faf28f025ad1120acc2f0ba520294f55f225c0f039001bfd1efb74be0418be9bde78e1d76153"}, @NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "126f0ac6abacc4ac7bac"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xea, 0x1, "dd8fa84b76d756c22e68dfc60236c854a760db45f944b063ec1526fc51c21d6df33cd5d23fb27c3d84116c1d70588cb7a5fea81ea512b02014a3842f8f3eb4524c54f7202ed3b6c3dbaa4a18da9268e508b01bca8c734723f9bf9a0701f6a1af001622c19508bfba661e2e142f9510bea5acc577d05b84f9edda311a7d14f6e325b6b5ef614a09a334285130a501b82bd4a68c3201a268e49a76a82e9518cb98528510d120b9804f17635e00e387d82dcc3a88c40822ebcb43478af9ed58266725d377e11fc86d85b4484198ee70388f2d6a2d857e3afb211577fff264c7538caeae7caf748c"}]}, @NFTA_SET_ELEM_USERDATA={0x6a, 0x6, 0x1, 0x0, "16b6855808e9d8735d0a19d463662eee54005dbb4a38024ca85ba79af0e6bc74ad59cc44a5192cd71d1da35afdb563de9b65a062d34ab8745079386368cad849ec87a1d2990fcffae84eb4c041bdb8bcf93aebcf89b75179664169724813da8d2409004ce9d8"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x438, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x78, 0x1, "aa3e5df70c01f0bd22fed92279755d6bcc4e4494abd12e201ca6fd0352b64d2e14e6e0d0e24154234f7b5722a5ad49eea5f9b3d0d0fea86b5a92332b6d75d36f3a696119c405b18b2ce5e3e5d3f1c8a57fdd1a44e9b2008f37ec70b28f9893ed4951153356c110aa071750309d76e0671de37d60"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xdc, 0x1, "027aea50dd8455d6e3e27093a9720be0f2e6a36fd047d917c27a0759dc127bde32900e93e1b04abd2897c16ab3b14cc3c02ecb95ab7a2c3439a4d9acd02d6301c2240e2b721e0852b3da8ff115f84cb410e80ad25600c84287add34bfcab705c60de35fb845411d093d8a2c8ab19c5dc1da569d45e1be9d93bd3409ae346380146b65e6321b3cc07a72cdce5f9089586d06439443973fde295a0f6911d770668ef71423ff065703f25a0eb3d06e68dd72a70c018a6b29e0054672f0de04d3a1e5c30e2b3fa45114057170a9fcb45daa843b3be96c84de144"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf8, 0x1, "91575591114507fac8d4b39dfda526687bcb8d65d76771e084b6a39549f82718017af5b96643ad89a4ab4045b1ce08b6975db4e07e39693b7ca1307a9c441a37f85765ef984be9390578e19818403f4c3200adba37748763d686d22afcc71692e7925b840ad15887164185fa44a60d36cb3528add9457764f69c24ab21fcabc8f8039de484e80439901dc55e3f4392b9ebc4acac8513566f22a38a29a505fe5f6f6600521ea9cdf00ba11efe3b9ef9e3d4c4357cd551132131ba948ea1f70de2b42f7c7d232490e8a55b095ae69a5b7b5621a958c691fb7700f69c6c3dfbf073bc0d802721ce027f7b4d717c2d85f94b44d88900"}, @NFTA_DATA_VALUE={0xed, 0x1, "e70e5fd71cedad6a4db125d2fe9dd01405ed8670df3b104b1f53aa95e1eaa5082125eb44da2ff005fefce43c5652413ef3bd85bbb4fec7a9d9d0b79a91f1a3940cc56f14e10d2b1044cc5bacb92736599ebf8026a7ec0d4f6c89e21a15ca89dc23fa10d13f5c660b0328a587520cb8ac69b59b9071899dc78542277aa1a0612d0400029d8220b2a968b9bc6d2727afb4c5bb6c8baf5d14bcc4ccb01a947f65c4576938eb13bf1ded86d0bbb1857477745665b9971af7ab2476e95df1ffceb84d29cbd2879aa554302514b2d0d66832014d6c3169a327a8904c22e6f883abd27e97dd9a817ea2b35868"}, @NFTA_DATA_VALUE={0x48, 0x1, "079ec84922f5f80843dde5616507757d5de21272bea37052acc7fa435b4f40097b0f88fa9dde037b8495be713e78b13bd0686c1d94512d762fa84f355d8f26fce660392f"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1544, 0x3, 0x0, 0x1, [{0x1a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x6b, 0x6, 0x1, 0x0, "f99b7e732378f9166a2faadb94b1be4a6bf3c052986a8b217b7d20a7d4deb41b394363e17dcee915de9f3d7921a03639bb27f470da8f1668d7c25b42b3adc2a872039281eb85d503464ca173b5cf0a541a7d678ae6f226a8a3c9df2e620086c2a7b579ab5c1899"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_KEY={0x110, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x76, 0x1, "e0bd65da7cdefe592935cc0557ac6f69dc319b2a4675d10aea3213c997dcd7202c3a69665f04ee720e99d452ce3144ce4782645f0895fb8e2e5613179c5c1eb06ba2773587299d4c567c81fa9d0ab08007809232f701b8e202271d0c452a4f07790fa74f20876fe031d58f1d99529d341ffd"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x6c, 0x1, "29f18f820d2d44bef02c8563b68b12b0d4bae6c06265657a652ac025f05417e568aa16b619c76e62c1701bdc63388617c7a6da5866e2c9b117802bc134e693ac4ddefd679faf89a873d0f621038d762e64dd761b416c41e9d49f51c3f34d45984fcc0865ff3ae39e"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x208, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1ff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x679}, @NFTA_SET_ELEM_USERDATA={0xf6, 0x6, 0x1, 0x0, "ec8efc0e6041682ea54a11f6a85a9bdb6d22beaf82480a3b19232f28227e1ae8b165adf99ba422c5d0851bc2ffb87f3f9992df1997bc619bc02a18050f097022cf873378ded4b7756a3170de57991fc3ebd2939ace649fb3d84bd1277c6bfee4b6e31a64c1f8ef2bc195ec665b2eb2ece9a1d7d0a047fa92ef759970c409d7abcf1c899c3195be1e08d65b5cef8f00dc329c82f651b6ed18a1141c0b417d5a9e72b427cbfea43c7d64a4e1b734d79fd1778b0c041af03de2a27ba4fc93c29e8363ad7011284a18adfc8c115d5a4bfbcfa5fea2a17bb6c90d555f0f7dd8992a28c113241ac3af2c139fbdc0efbf034b2bbf3f"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0xac, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x64, 0x1, "ba05eac9343256aca865a40c4ca8aeda0e63b0ec738759f405a2efc4072eb774184bbf5a6e975025d2e3797790787b43f20bef812204a6f24d336732e7c80030e3428f770ea505ff51259a4b143af268e00da9a56680366c1968538d38d9141f"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x20, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x4}, {0x10c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xff}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0xd4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}]}]}]}, {0x1080, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1074, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x2040}, 0x1, 0x0, 0x0, 0x20048000}, 0x24040890) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r2, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r2, 0xc) 09:44:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$KDADDIO(r1, 0x400455c8, 0x81) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50e3c9066f9815e8fe629e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e4feffca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r2) r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000300)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r3, r4}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'wp256\x00'}}) r6 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50e3c9066f9815e8fe629e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e4feffca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r6) keyctl$link(0x8, r3, r6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000100)={0x7a, 0xfffffff8, 0x7228}) 09:44:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000100)=0x6a9, 0x4) sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f159", 0x26, 0x11, 0x0, 0x0) 09:44:54 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x802, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x2000) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r2, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000140)={0x800, 0x1}, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x8, 0x20082, 0xdf0d}, &(0x7f00000000c0)=0xd6, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = gettid() perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x7f, 0xff, 0x0, 0x0, 0x0, 0x0, 0x420, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0x0, 0x81}, 0x2040, 0x401, 0x9594, 0x5, 0x5, 0x8}, r5, 0x9, r4, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x400c00) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r5, r6, 0x0, 0x5, &(0x7f0000000580)='eth0\x00', r3}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r3}, 0xc) recvmmsg(r0, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) [ 1934.009489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1934.031177] ip_tables: iptables: counters copy to user failed while replacing table [ 1934.093014] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:44:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000000)) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:54 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x80) dup(r4) 09:44:54 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) [ 1934.278467] ip_tables: iptables: counters copy to user failed while replacing table [ 1934.320897] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1934.518239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1934.901572] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1935.052661] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1935.101529] CPU: 0 PID: 11844 Comm: syz-executor.3 Not tainted 4.14.177-syzkaller #0 [ 1935.109973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1935.134559] Call Trace: [ 1935.138457] dump_stack+0x13e/0x194 [ 1935.143046] dump_header+0x178/0x6d4 [ 1935.146982] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1935.152371] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1935.158504] ? ___ratelimit+0x50/0x519 [ 1935.162715] oom_kill_process.cold+0x10/0xae3 [ 1935.167872] ? lock_acquire+0x170/0x3f0 [ 1935.172157] ? lock_downgrade+0x6e0/0x6e0 [ 1935.176773] out_of_memory+0x2d5/0x1110 [ 1935.180867] ? oom_killer_disable+0x1c0/0x1c0 [ 1935.186161] ? mutex_trylock+0x152/0x1a0 [ 1935.190516] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1935.195724] ? warn_alloc+0xf0/0xf0 [ 1935.199565] __alloc_pages_nodemask+0x5d3/0x700 [ 1935.204644] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1935.210042] ? lock_downgrade+0x6e0/0x6e0 [ 1935.214910] alloc_pages_current+0xe7/0x1e0 [ 1935.219782] __page_cache_alloc+0x245/0x3d0 [ 1935.224536] filemap_fault+0xc18/0x1c50 [ 1935.228798] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1935.233992] ? lock_acquire+0x170/0x3f0 [ 1935.238355] ? ext4_filemap_fault+0x7c/0xb0 [ 1935.242966] ext4_filemap_fault+0x84/0xb0 [ 1935.247727] __do_fault+0xfa/0x380 [ 1935.251488] __handle_mm_fault+0x22e9/0x3280 [ 1935.256142] ? copy_page_range+0x1d70/0x1d70 [ 1935.260935] ? find_held_lock+0x2d/0x110 [ 1935.265136] handle_mm_fault+0x288/0x7a0 [ 1935.269616] __do_page_fault+0x4bc/0xb40 [ 1935.274032] ? vmalloc_fault+0xdf0/0xdf0 [ 1935.278113] ? do_page_fault+0x60/0x4f2 [ 1935.282442] ? page_fault+0x2f/0x50 [ 1935.286105] page_fault+0x45/0x50 [ 1935.289578] RIP: 69a73a00:0x1d8298 [ 1935.293454] RSP: 1d8341:0000000000000541 EFLAGS: 00000011 [ 1936.569511] Mem-Info: [ 1936.638670] active_anon:240528 inactive_anon:1092206 isolated_anon:0 [ 1936.638670] active_file:7 inactive_file:0 isolated_file:0 [ 1936.638670] unevictable:25633 dirty:0 writeback:0 unstable:0 [ 1936.638670] slab_reclaimable:15790 slab_unreclaimable:116940 [ 1936.638670] mapped:61592 shmem:22135 pagetables:10575 bounce:0 [ 1936.638670] free:24897 free_pcp:0 free_cma:0 [ 1936.959216] Node 0 active_anon:919240kB inactive_anon:792684kB active_file:16kB inactive_file:0kB unevictable:92392kB isolated(anon):0kB isolated(file):0kB mapped:231940kB dirty:0kB writeback:0kB shmem:51460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1937.222182] Node 1 active_anon:42872kB inactive_anon:3576140kB active_file:8kB inactive_file:44kB unevictable:10288kB isolated(anon):0kB isolated(file):0kB mapped:14576kB dirty:0kB writeback:0kB shmem:37080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1937.305636] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:376kB inactive_anon:2168kB active_file:0kB inactive_file:0kB unevictable:12kB writepending:0kB present:15992kB managed:15908kB mlocked:4kB kernel_stack:0kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1937.382597] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1937.405202] Node 0 DMA32 free:46400kB min:36272kB low:45340kB high:54408kB active_anon:918764kB inactive_anon:790584kB active_file:6368kB inactive_file:5868kB unevictable:69740kB writepending:0kB present:3129332kB managed:2621260kB mlocked:69728kB kernel_stack:9152kB pagetables:13752kB bounce:0kB free_pcp:964kB local_pcp:220kB free_cma:0kB 09:44:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:44:57 executing program 1: r0 = socket(0x10, 0x3, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f00000002c0)={0x4, "8da3227a554a92cab6c55e94b7cf42a5f95107c2aaa914aa602620ff781b848a", 0x1, 0x1}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) r2 = syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000340)={0x0, 0x100, @value=0xe112}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$packet(r3, &(0x7f00000001c0)=""/237, 0xed, 0x20, &(0x7f0000000140)={0x11, 0x1, 0x0, 0x1, 0x80, 0x6, @random="4707fcd518ff"}, 0x14) 09:44:57 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESOCT=r4, @ANYRES64=r5], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) [ 1937.562610] lowmem_reserve[]: 0 0 0 0 0 [ 1937.579947] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 09:44:57 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200d0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000100)={0x80fd}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) [ 1937.624584] lowmem_reserve[]: 0 0 0 0 0 [ 1937.630768] Node 1 Normal free:62164kB min:53612kB low:67012kB high:80412kB active_anon:42872kB inactive_anon:3576140kB active_file:400kB inactive_file:204kB unevictable:208kB writepending:0kB present:3932160kB managed:3870192kB mlocked:432kB kernel_stack:7840kB pagetables:28492kB bounce:0kB free_pcp:1392kB local_pcp:652kB free_cma:0kB [ 1937.665719] lowmem_reserve[]: 0 0 0 0 0 [ 1937.677929] Node 0 DMA: 4*4kB (UME) 11*8kB (UM) 12*16kB (UME) 7*32kB (UE) 12*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10504kB [ 1937.722621] ip_tables: iptables: counters copy to user failed while replacing table [ 1937.746563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1937.748062] ip_tables: iptables: counters copy to user failed while replacing table [ 1937.765368] Node 0 DMA32: 972*4kB (UME) 237*8kB (UME) 1528*16kB (UME) 387*32kB (UME) 6*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43000kB [ 1937.779362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1937.813523] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1937.827370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1937.835190] Node 1 Normal: 823*4kB (UME) 348*8kB (UM) 184*16kB (UME) 202*32kB (UME) 40*64kB (UME) 74*128kB (UME) 50*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 62844kB [ 1937.862359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1937.873367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1937.890137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1937.917181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1937.943285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1937.977687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1937.984718] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1938.024258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1938.062253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1938.081515] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1938.101930] 25186 total pagecache pages [ 1938.107769] 0 pages in swap cache [ 1938.112647] Swap cache stats: add 0, delete 0, find 0/0 [ 1938.160507] Free swap = 0kB [ 1938.180982] Total swap = 0kB [ 1938.203915] 1965979 pages RAM [ 1938.216057] 0 pages HighMem/MovableOnly [ 1938.221475] 339053 pages reserved [ 1938.226873] 0 pages cma reserved [ 1938.239983] Out of memory: Kill process 25125 (syz-executor.4) score 1009 or sacrifice child [ 1938.620323] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1938.709571] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1938.715383] CPU: 0 PID: 6367 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 1938.724214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1938.735003] Call Trace: [ 1938.737728] dump_stack+0x13e/0x194 [ 1938.742587] dump_header+0x178/0x6d4 [ 1938.746852] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1938.752279] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1938.757869] ? ___ratelimit+0x50/0x519 [ 1938.762565] oom_kill_process.cold+0x10/0xae3 [ 1938.768155] ? lock_acquire+0x170/0x3f0 [ 1938.773229] ? lock_downgrade+0x6e0/0x6e0 [ 1938.778464] out_of_memory+0x2d5/0x1110 [ 1938.783195] ? oom_killer_disable+0x1c0/0x1c0 [ 1938.788913] ? mutex_trylock+0x152/0x1a0 [ 1938.793466] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1938.798655] ? warn_alloc+0xf0/0xf0 [ 1938.803019] __alloc_pages_nodemask+0x5d3/0x700 [ 1938.808069] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1938.813720] ? lock_downgrade+0x6e0/0x6e0 [ 1938.818536] alloc_pages_current+0xe7/0x1e0 [ 1938.824496] __page_cache_alloc+0x245/0x3d0 [ 1938.829202] filemap_fault+0xc18/0x1c50 [ 1938.833212] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1938.838308] ? lock_acquire+0x170/0x3f0 [ 1938.842739] ? ext4_filemap_fault+0x7c/0xb0 [ 1938.847278] ext4_filemap_fault+0x84/0xb0 [ 1938.851458] __do_fault+0xfa/0x380 [ 1938.855232] __handle_mm_fault+0x22e9/0x3280 [ 1938.859751] ? copy_page_range+0x1d70/0x1d70 [ 1938.864355] ? find_held_lock+0x2d/0x110 [ 1938.868631] handle_mm_fault+0x288/0x7a0 [ 1938.872716] __do_page_fault+0x4bc/0xb40 [ 1938.877271] ? vmalloc_fault+0xdf0/0xdf0 [ 1938.881934] ? do_page_fault+0x60/0x4f2 [ 1938.886115] ? page_fault+0x2f/0x50 [ 1938.890369] page_fault+0x45/0x50 [ 1938.893940] RIP: b7596ca0:0x1d90f4 [ 1938.897495] RSP: 1d924c:00000000000008be EFLAGS: 00000009 [ 1938.938955] Mem-Info: [ 1938.965848] active_anon:240470 inactive_anon:1092207 isolated_anon:0 [ 1938.965848] active_file:10 inactive_file:4 isolated_file:0 [ 1938.965848] unevictable:25756 dirty:1 writeback:0 unstable:0 [ 1938.965848] slab_reclaimable:15805 slab_unreclaimable:116888 [ 1938.965848] mapped:61721 shmem:22135 pagetables:10553 bounce:0 [ 1938.965848] free:24966 free_pcp:0 free_cma:0 [ 1939.182579] Node 0 active_anon:919080kB inactive_anon:792688kB active_file:16kB inactive_file:92kB unevictable:92920kB isolated(anon):0kB isolated(file):0kB mapped:231092kB dirty:0kB writeback:0kB shmem:51460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1939.389641] Node 1 active_anon:42800kB inactive_anon:3576140kB active_file:0kB inactive_file:0kB unevictable:10104kB isolated(anon):0kB isolated(file):0kB mapped:15692kB dirty:0kB writeback:0kB shmem:37080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1939.584338] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:376kB inactive_anon:2108kB active_file:0kB inactive_file:4kB unevictable:224kB writepending:0kB present:15992kB managed:15908kB mlocked:224kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1939.760825] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1939.793788] Node 0 DMA32 free:36120kB min:36272kB low:45340kB high:54408kB active_anon:918704kB inactive_anon:790580kB active_file:96kB inactive_file:48kB unevictable:92696kB writepending:0kB present:3129332kB managed:2621260kB mlocked:92696kB kernel_stack:9376kB pagetables:13720kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1940.019894] lowmem_reserve[]: 0 0 0 0 0 [ 1940.024610] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1940.059699] lowmem_reserve[]: 0 0 0 0 0 [ 1940.064048] Node 1 Normal free:53568kB min:53612kB low:67012kB high:80412kB active_anon:42800kB inactive_anon:3576140kB active_file:4kB inactive_file:4kB unevictable:10104kB writepending:0kB present:3932160kB managed:3870192kB mlocked:10104kB kernel_stack:7872kB pagetables:28448kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 1940.124184] lowmem_reserve[]: 0 0 0 0 0 [ 1940.142022] Node 0 DMA: 3*4kB (UE) 16*8kB (UM) 14*16kB (UME) 7*32kB (UE) 10*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10444kB [ 1940.172319] Node 0 DMA32: 50*4kB (UM) 20*8kB (UM) 1464*16kB (UM) 387*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36168kB [ 1940.199944] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1940.223869] Node 1 Normal: 112*4kB (UME) 36*8kB (UM) 20*16kB (UME) 160*32kB (UME) 40*64kB (UME) 74*128kB (UME) 50*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 53536kB [ 1940.249257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1940.261123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1940.273160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1940.284943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1940.299273] 26043 total pagecache pages [ 1940.303598] 0 pages in swap cache [ 1940.307135] Swap cache stats: add 0, delete 0, find 0/0 [ 1940.312637] Free swap = 0kB [ 1940.315754] Total swap = 0kB [ 1940.324025] 1965979 pages RAM [ 1940.327211] 0 pages HighMem/MovableOnly [ 1940.331359] 339053 pages reserved [ 1940.334830] 0 pages cma reserved [ 1940.340821] Out of memory: Kill process 25166 (syz-executor.4) score 1009 or sacrifice child [ 1940.349641] Killed process 25166 (syz-executor.4) total-vm:74968kB, anon-rss:18008kB, file-rss:46204kB, shmem-rss:0kB [ 1940.457427] oom_reaper: reaped process 25166 (syz-executor.4), now anon-rss:18020kB, file-rss:15536kB, shmem-rss:0kB 09:45:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0x400}, 0x16, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="01bdff6b230771b70500", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r6, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000000c0)={r8, 0x4}, 0x8) prctl$PR_SET_THP_DISABLE(0x29, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000100)={{0x2c, @private=0xa010102, 0x4e20, 0x4, 'sh\x00', 0x10, 0x1, 0x47}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x4e20, 0x0, 0x7fffffff, 0x7ff, 0x1}}, 0x44) 09:45:01 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) r3 = dup2(r2, r0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000001c0)={0x1, 0x1ff, 0xd684}) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="87abb009c3b58b9c54827d80b164e61c1fd80834f60e99dd24fbe1d66ed5d84ba639fdd566ba38981d901af345b9a3fa92f64db9c420b0c325e2091ba79726a71b986509c9484b", @ANYRESOCT=r4], 0x1}], 0x1, 0x0, 0x0, 0x4008010}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000100)={0x3ff, 0xe8, 0x3, 0xc0c0c0c0}) 09:45:01 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8000000000006, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xfffffd2d) ioctl$TIOCSTI(r0, 0x5412, 0x2) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) socket$inet_dccp(0x2, 0x6, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x800480, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0xf7, 0x0, 0x81, 0x2, 0x0, 0x9, 0x400, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0xc, 0x8, 0x7, 0x3, 0xffff, 0x40, 0xb0}, r1, 0xffffffffffffffff, r2, 0xa) 09:45:01 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f00000001c0)=""/117, 0x75}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000340)=""/156, 0x9c}], 0x4) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000000)) 09:45:01 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000180)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r2, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000240)=ANY=[@ANYBLOB="01006700ff99467e6eb2afe2001a11390ee3b9056b6ec475f89176052f2ce6837f1a8c77fe7de7555a6849a18a62cc740875bcf222c70d701fb78d87e5c1ee6f4702f6d3ddadda19481865705c88950983a2257e8ea97a54ffba5a4cff0d4bfb91c3384d72a154900ac9adcbaccebb8a81e9fce5a0f6e21a96de3ef2e7032e35"]) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r2, 0xc) 09:45:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) modify_ldt$read(0x0, &(0x7f0000000000)=""/22, 0x16) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) [ 1940.967594] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:45:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000)="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", 0x23c, 0x20000011, 0x0, 0x0) [ 1941.713799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1942.059449] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1942.075052] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1942.080065] CPU: 0 PID: 6357 Comm: syz-fuzzer Not tainted 4.14.177-syzkaller #0 [ 1942.087517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1942.096876] Call Trace: [ 1942.099820] dump_stack+0x13e/0x194 [ 1942.103452] dump_header+0x178/0x6d4 [ 1942.107162] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1942.112179] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1942.117275] ? ___ratelimit+0x50/0x519 [ 1942.121168] oom_kill_process.cold+0x10/0xae3 [ 1942.125663] ? lock_downgrade+0x6e0/0x6e0 [ 1942.129827] out_of_memory+0x2d5/0x1110 [ 1942.133811] ? oom_killer_disable+0x1c0/0x1c0 [ 1942.138303] ? mutex_trylock+0x152/0x1a0 [ 1942.142361] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1942.147825] ? warn_alloc+0xf0/0xf0 [ 1942.151465] __alloc_pages_nodemask+0x5d3/0x700 [ 1942.156129] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1942.161575] ? lock_downgrade+0x6e0/0x6e0 [ 1942.165724] alloc_pages_current+0xe7/0x1e0 [ 1942.170032] __page_cache_alloc+0x245/0x3d0 [ 1942.174341] filemap_fault+0xc18/0x1c50 [ 1942.178313] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1942.182989] ? lock_acquire+0x170/0x3f0 [ 1942.186967] ? ext4_filemap_fault+0x7c/0xb0 [ 1942.191291] ext4_filemap_fault+0x84/0xb0 [ 1942.195432] __do_fault+0xfa/0x380 [ 1942.198964] __handle_mm_fault+0x22e9/0x3280 [ 1942.203379] ? copy_page_range+0x1d70/0x1d70 [ 1942.207781] ? find_held_lock+0x2d/0x110 [ 1942.211843] handle_mm_fault+0x288/0x7a0 [ 1942.215896] __do_page_fault+0x4bc/0xb40 [ 1942.219952] ? vmalloc_fault+0xdf0/0xdf0 [ 1942.223992] ? do_page_fault+0x60/0x4f2 [ 1942.227966] ? page_fault+0x2f/0x50 [ 1942.231681] page_fault+0x45/0x50 [ 1942.235122] RIP: 0020:0x13 [ 1942.237956] RSP: 491050:000000c44bef77c0 EFLAGS: c4293aadb8 [ 1942.251474] Mem-Info: [ 1942.259779] active_anon:240437 inactive_anon:1092207 isolated_anon:0 [ 1942.259779] active_file:8 inactive_file:21 isolated_file:0 [ 1942.259779] unevictable:26045 dirty:0 writeback:0 unstable:0 [ 1942.259779] slab_reclaimable:15829 slab_unreclaimable:116728 [ 1942.259779] mapped:61993 shmem:22135 pagetables:10528 bounce:0 [ 1942.259779] free:25034 free_pcp:0 free_cma:0 [ 1942.299114] Node 0 active_anon:919116kB inactive_anon:792688kB active_file:28kB inactive_file:80kB unevictable:94236kB isolated(anon):0kB isolated(file):0kB mapped:234308kB dirty:0kB writeback:0kB shmem:51460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1942.332684] Node 1 active_anon:42632kB inactive_anon:3576140kB active_file:4kB inactive_file:4kB unevictable:9944kB isolated(anon):0kB isolated(file):0kB mapped:13664kB dirty:0kB writeback:0kB shmem:37080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1942.363188] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:380kB inactive_anon:2116kB active_file:0kB inactive_file:0kB unevictable:444kB writepending:0kB present:15992kB managed:15908kB mlocked:444kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1942.393474] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1942.398697] Node 0 DMA32 free:36160kB min:36272kB low:45340kB high:54408kB active_anon:918736kB inactive_anon:790572kB active_file:32kB inactive_file:76kB unevictable:93792kB writepending:0kB present:3129332kB managed:2621260kB mlocked:93792kB kernel_stack:9184kB pagetables:13632kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1942.430134] lowmem_reserve[]: 0 0 0 0 0 [ 1942.434173] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1942.472423] lowmem_reserve[]: 0 0 0 0 0 [ 1942.479004] Node 1 Normal free:53552kB min:53612kB low:67012kB high:80412kB active_anon:42632kB inactive_anon:3576140kB active_file:8kB inactive_file:0kB unevictable:9944kB writepending:0kB present:3932160kB managed:3870192kB mlocked:9944kB kernel_stack:7840kB pagetables:28432kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1942.516823] lowmem_reserve[]: 0 0 0 0 0 [ 1942.521020] Node 0 DMA: 2*4kB (ME) 16*8kB (U) 15*16kB (UE) 10*32kB (UE) 8*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10424kB [ 1942.539105] Node 0 DMA32: 164*4kB (UM) 10*8kB (UM) 1376*16kB (UE) 418*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36128kB [ 1942.565224] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1942.586237] Node 1 Normal: 102*4kB (UME) 145*8kB (U) 3*16kB (ME) 143*32kB (UME) 40*64kB (UME) 74*128kB (UME) 50*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 53552kB [ 1942.613188] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1942.624799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1942.648510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1942.660141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1942.673878] 26303 total pagecache pages [ 1942.680519] 0 pages in swap cache [ 1942.684016] Swap cache stats: add 0, delete 0, find 0/0 [ 1942.701454] Free swap = 0kB [ 1942.704552] Total swap = 0kB [ 1942.707689] 1965979 pages RAM [ 1942.710799] 0 pages HighMem/MovableOnly [ 1942.714905] 339053 pages reserved [ 1942.726231] 0 pages cma reserved [ 1942.729638] Out of memory: Kill process 25190 (syz-executor.4) score 1009 or sacrifice child [ 1942.743310] Killed process 25190 (syz-executor.4) total-vm:74968kB, anon-rss:18008kB, file-rss:49544kB, shmem-rss:0kB [ 1942.804333] oom_reaper: reaped process 25190 (syz-executor.4), now anon-rss:18020kB, file-rss:16560kB, shmem-rss:0kB 09:45:03 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)={@local, @empty, 0x0, 0x6, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0x27}, @empty, @loopback, @remote]}, 0x28) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:45:03 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) [ 1943.351725] net_ratelimit: 199 callbacks suppressed [ 1943.351732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1943.394934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1943.436642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1943.457919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1943.475332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1943.494905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1943.519112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1943.542193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1943.557398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1943.565386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1943.891196] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1943.909125] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1943.914144] CPU: 1 PID: 6344 Comm: syz-fuzzer Not tainted 4.14.177-syzkaller #0 [ 1943.921806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1943.932988] Call Trace: [ 1943.935604] dump_stack+0x13e/0x194 [ 1943.939256] dump_header+0x178/0x6d4 [ 1943.943107] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1943.948433] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1943.953856] ? ___ratelimit+0x50/0x519 [ 1943.957941] oom_kill_process.cold+0x10/0xae3 [ 1943.962603] ? lock_downgrade+0x6e0/0x6e0 [ 1943.966868] out_of_memory+0x2d5/0x1110 [ 1943.970950] ? oom_killer_disable+0x1c0/0x1c0 [ 1943.975556] ? mutex_trylock+0x152/0x1a0 [ 1943.979637] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1943.985009] ? warn_alloc+0xf0/0xf0 [ 1943.988777] __alloc_pages_nodemask+0x5d3/0x700 [ 1943.993471] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1943.998506] ? lock_downgrade+0x6e0/0x6e0 [ 1944.002679] alloc_pages_current+0xe7/0x1e0 [ 1944.007023] __page_cache_alloc+0x245/0x3d0 [ 1944.011528] filemap_fault+0xc18/0x1c50 [ 1944.015608] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1944.020384] ? lock_acquire+0x170/0x3f0 [ 1944.024460] ? ext4_filemap_fault+0x7c/0xb0 [ 1944.028804] ext4_filemap_fault+0x84/0xb0 [ 1944.033333] __do_fault+0xfa/0x380 [ 1944.037054] __handle_mm_fault+0x22e9/0x3280 [ 1944.041640] ? copy_page_range+0x1d70/0x1d70 [ 1944.046419] ? find_held_lock+0x2d/0x110 [ 1944.050640] handle_mm_fault+0x288/0x7a0 [ 1944.054710] __do_page_fault+0x4bc/0xb40 [ 1944.058812] ? vmalloc_fault+0xdf0/0xdf0 [ 1944.062880] ? do_page_fault+0x60/0x4f2 [ 1944.066865] ? page_fault+0x2f/0x50 [ 1944.070521] page_fault+0x45/0x50 [ 1944.074002] RIP: 00f1:0x11 [ 1944.076907] RSP: 000c:000000c42004ff20 EFLAGS: 0042f0a0 [ 1944.092252] Mem-Info: [ 1944.107213] active_anon:240612 inactive_anon:1092206 isolated_anon:0 [ 1944.107213] active_file:13 inactive_file:37 isolated_file:25 [ 1944.107213] unevictable:25310 dirty:0 writeback:0 unstable:0 [ 1944.107213] slab_reclaimable:15835 slab_unreclaimable:117053 [ 1944.107213] mapped:61886 shmem:22135 pagetables:10590 bounce:0 [ 1944.107213] free:24986 free_pcp:67 free_cma:0 [ 1944.147819] Node 0 active_anon:919768kB inactive_anon:792684kB active_file:44kB inactive_file:52kB unevictable:84492kB isolated(anon):0kB isolated(file):0kB mapped:228168kB dirty:0kB writeback:0kB shmem:51460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1944.177923] Node 1 active_anon:42680kB inactive_anon:3576140kB active_file:12kB inactive_file:100kB unevictable:16768kB isolated(anon):0kB isolated(file):0kB mapped:19396kB dirty:0kB writeback:0kB shmem:37080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1944.218688] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:404kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:280kB writepending:0kB present:15992kB managed:15908kB mlocked:280kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1944.249978] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1944.255541] Node 0 DMA32 free:36224kB min:36272kB low:45340kB high:54408kB active_anon:919364kB inactive_anon:790576kB active_file:144kB inactive_file:48kB unevictable:84112kB writepending:0kB present:3129332kB managed:2621260kB mlocked:84100kB kernel_stack:9216kB pagetables:13756kB bounce:0kB free_pcp:164kB local_pcp:36kB free_cma:0kB [ 1944.332000] lowmem_reserve[]: 0 0 0 0 0 [ 1944.340513] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1944.474578] lowmem_reserve[]: 0 0 0 0 0 [ 1944.482577] Node 1 Normal free:62628kB min:53612kB low:67012kB high:80412kB active_anon:42680kB inactive_anon:3576140kB active_file:2348kB inactive_file:5732kB unevictable:340kB writepending:0kB present:3932160kB managed:3870192kB mlocked:412kB kernel_stack:7904kB pagetables:28560kB bounce:0kB free_pcp:1272kB local_pcp:632kB free_cma:0kB [ 1944.579969] lowmem_reserve[]: 0 0 0 0 0 [ 1944.585002] Node 0 DMA: 3*4kB (UME) 2*8kB (M) 9*16kB (UME) 13*32kB (UME) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10508kB [ 1944.602060] Node 0 DMA32: 1721*4kB (UME) 416*8kB (UME) 1014*16kB (UME) 487*32kB (UME) 10*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42660kB [ 1944.617314] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1944.628817] Node 1 Normal: 509*4kB (UME) 830*8kB (UM) 305*16kB (UME) 312*32kB (UME) 40*64kB (UME) 79*128kB (UME) 45*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 70260kB [ 1944.648321] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1944.662042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1944.673003] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1944.684198] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1944.712817] 23394 total pagecache pages [ 1944.725857] 0 pages in swap cache [ 1944.729375] Swap cache stats: add 0, delete 0, find 0/0 [ 1944.735936] Free swap = 0kB [ 1944.738975] Total swap = 0kB [ 1944.752498] 1965979 pages RAM [ 1944.756054] 0 pages HighMem/MovableOnly [ 1944.760048] 339053 pages reserved [ 1944.777038] 0 pages cma reserved [ 1944.780581] Out of memory: Kill process 25229 (syz-executor.4) score 1008 or sacrifice child 09:45:05 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)='trusted@eth1k+\x00', 0xf, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000140)) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000100)={0x7, 0x102, 0x2, {0x3, 0x2, 0x7, 0x7}}) [ 1945.521105] audit: type=1400 audit(1588412705.836:53): avc: denied { ioctl } for pid=25238 comm="syz-executor.0" path="socket:[73878]" dev="sockfs" ino=73878 ioctlcmd=0x5411 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 09:45:06 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYRESOCT], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004001) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x3) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x98, 0x260, 0x1c8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x1ba) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x0, 0x0, 0x0) 09:45:06 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x8, 0x4, 0x4, 0x40000000, 0x9, {}, {0x5, 0x8, 0x2, 0x2, 0x1, 0x18, "6259f42f"}, 0x8, 0x4, @planes=&(0x7f0000000140)={0x6, 0x4, @fd}, 0x8, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000013c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001400)=ANY=[@ANYBLOB="80100000130000082bbd7000ffdbdf25060207054e234e204e630000060000000010000000000000060000000700000009000000ff030000", @ANYRES32=r4, @ANYBLOB="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"], 0x1080}, 0x1, 0x0, 0x0, 0x20008080}, 0x4040001) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:45:06 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000340), &(0x7f0000000380)) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}]}, 0x48}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000125bd7000fcdbdf260e0000000800040006000000e0d62a7d69b495a733a1df0a5ce7c325b67d45733256ed02be0c9eaac217c26f44aaa6d82bffe659f832f017b89d54ddbb90182908a0f3c89338741fcdb74ea670e66127b5035b4a66dc44c039f852a06494bfb105901750c8d45f79433082b349affe37244b33743888fb839bb208ff3869"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004080) r4 = socket(0x10, 0x4, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$pptp(r6, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0x1e) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000140)={0x1}) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1946.861050] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1946.940511] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1946.972217] CPU: 0 PID: 6344 Comm: syz-fuzzer Not tainted 4.14.177-syzkaller #0 [ 1946.979735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1946.989379] Call Trace: [ 1946.992002] dump_stack+0x13e/0x194 [ 1946.995661] dump_header+0x178/0x6d4 [ 1946.999491] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1947.004529] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1947.009659] ? ___ratelimit+0x50/0x519 [ 1947.013674] oom_kill_process.cold+0x10/0xae3 [ 1947.018324] ? lock_downgrade+0x6e0/0x6e0 [ 1947.022673] out_of_memory+0x2d5/0x1110 [ 1947.026675] ? oom_killer_disable+0x1c0/0x1c0 [ 1947.031283] ? mutex_trylock+0x152/0x1a0 [ 1947.035373] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1947.040434] ? warn_alloc+0xf0/0xf0 [ 1947.044246] __alloc_pages_nodemask+0x5d3/0x700 [ 1947.049061] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1947.054126] ? lock_downgrade+0x6e0/0x6e0 [ 1947.058478] alloc_pages_current+0xe7/0x1e0 [ 1947.062843] __page_cache_alloc+0x245/0x3d0 [ 1947.067355] filemap_fault+0xc18/0x1c50 [ 1947.071432] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1947.076122] ? lock_acquire+0x170/0x3f0 [ 1947.080119] ? ext4_filemap_fault+0x7c/0xb0 [ 1947.084475] ext4_filemap_fault+0x84/0xb0 [ 1947.088660] __do_fault+0xfa/0x380 [ 1947.092310] __handle_mm_fault+0x22e9/0x3280 [ 1947.096834] ? copy_page_range+0x1d70/0x1d70 [ 1947.101261] ? find_held_lock+0x2d/0x110 [ 1947.105382] handle_mm_fault+0x288/0x7a0 [ 1947.109906] __do_page_fault+0x4bc/0xb40 [ 1947.113998] ? vmalloc_fault+0xdf0/0xdf0 [ 1947.118334] ? do_page_fault+0x60/0x4f2 [ 1947.122339] ? page_fault+0x2f/0x50 [ 1947.125986] page_fault+0x45/0x50 [ 1947.130035] RIP: 00f1:0x11 [ 1947.132906] RSP: 0000:000000c42004ff18 EFLAGS: 0042f0a0 [ 1947.162366] Mem-Info: [ 1947.185837] active_anon:240430 inactive_anon:1092208 isolated_anon:0 [ 1947.185837] active_file:0 inactive_file:25 isolated_file:0 [ 1947.185837] unevictable:25812 dirty:8 writeback:0 unstable:0 [ 1947.185837] slab_reclaimable:15831 slab_unreclaimable:116697 [ 1947.185837] mapped:62398 shmem:22135 pagetables:10527 bounce:0 [ 1947.185837] free:25027 free_pcp:0 free_cma:0 [ 1947.223382] Node 0 active_anon:919152kB inactive_anon:792692kB active_file:28kB inactive_file:44kB unevictable:84792kB isolated(anon):0kB isolated(file):0kB mapped:228652kB dirty:0kB writeback:0kB shmem:51460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1947.253778] Node 1 active_anon:42568kB inactive_anon:3576140kB active_file:20kB inactive_file:16kB unevictable:18548kB isolated(anon):0kB isolated(file):0kB mapped:20924kB dirty:0kB writeback:32kB shmem:37080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1947.283940] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:388kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:212kB writepending:0kB present:15992kB managed:15908kB mlocked:212kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1947.311923] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1947.317596] Node 0 DMA32 free:36412kB min:36272kB low:45340kB high:54408kB active_anon:918764kB inactive_anon:790584kB active_file:28kB inactive_file:44kB unevictable:84580kB writepending:0kB present:3129332kB managed:2621260kB mlocked:84580kB kernel_stack:9248kB pagetables:13644kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 1947.386940] lowmem_reserve[]: 0 0 0 0 0 [ 1947.395642] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1947.450673] lowmem_reserve[]: 0 0 0 0 0 [ 1947.456151] Node 1 Normal free:53276kB min:53612kB low:67012kB high:80412kB active_anon:42568kB inactive_anon:3584204kB active_file:120kB inactive_file:116kB unevictable:10384kB writepending:24kB present:3932160kB managed:3870192kB mlocked:10672kB kernel_stack:7840kB pagetables:28444kB bounce:0kB free_pcp:84kB local_pcp:84kB free_cma:0kB [ 1947.515211] lowmem_reserve[]: 0 0 0 0 0 [ 1947.526850] Node 0 DMA: 3*4kB (UME) 1*8kB (U) 10*16kB (UME) 12*32kB (UME) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10484kB [ 1947.568526] Node 0 DMA32: 1189*4kB (UE) 391*8kB (UME) 1073*16kB (UME) 519*32kB (UME) 7*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42108kB [ 1947.651445] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1947.680246] Node 1 Normal: 399*4kB (UME) 800*8kB (UM) 314*16kB (UME) 342*32kB (UME) 43*64kB (UME) 76*128kB (UME) 41*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 69468kB [ 1947.723038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1947.739148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1947.764841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 09:45:08 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/221, 0xdd}, {&(0x7f0000000000)=""/22, 0x16}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/232, 0xe8}], 0x5, &(0x7f00000003c0)=""/1, 0x1}, 0x3}, {{&(0x7f0000000400)=@x25={0x9, @remote}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/161, 0xa1}, 0x2b}, {{&(0x7f0000000580)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000600)=""/1, 0x1}], 0x1, &(0x7f0000000680)=""/9, 0x9}, 0x800}, {{&(0x7f00000006c0)=@caif=@rfm, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000740)=""/22, 0x16}, {&(0x7f0000000780)=""/106, 0x6a}, {&(0x7f0000000800)=""/215, 0xd7}, {&(0x7f0000000900)=""/129, 0x81}, {&(0x7f00000009c0)=""/196, 0xc4}, {&(0x7f0000000ac0)=""/255, 0xff}, {&(0x7f0000000bc0)=""/235, 0xeb}, {&(0x7f0000000cc0)=""/238, 0xee}], 0x8, &(0x7f0000000e40)=""/13, 0xd}, 0x4}, {{&(0x7f0000000e80)=@can, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f00)=""/26, 0x1a}, {&(0x7f0000000f40)=""/35, 0x23}, {&(0x7f0000000f80)=""/60, 0x3c}, {&(0x7f0000000fc0)=""/123, 0x7b}], 0x4, &(0x7f0000001080)=""/4096, 0x1000}, 0x77}], 0x5, 0x0, 0x0) [ 1947.790385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 09:45:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r3, 0xc91add0bf88807dd, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) r4 = getpgrp(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, r3, 0x0, 0x70bd26, 0x7, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000005) [ 1947.853272] 24831 total pagecache pages 09:45:08 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) write(r3, &(0x7f0000000240)="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", 0xfffffffffffffd2d) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) [ 1947.889326] 0 pages in swap cache [ 1947.909358] Swap cache stats: add 0, delete 0, find 0/0 [ 1947.952779] Free swap = 0kB [ 1947.970932] Total swap = 0kB [ 1947.988640] 1965979 pages RAM 09:45:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xcb, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0xfffffe85) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000100)="d1eb974c51ad2f822f9eba159aceefc6a00fa12c674486a440635fde5ce37bd6c9342de199ef10aaf339671806014e896cfa1b7bb14dad7fda018bb1dc6926e0", &(0x7f0000000140)=""/50}, 0x20) [ 1948.007035] 0 pages HighMem/MovableOnly [ 1948.036857] 339053 pages reserved [ 1948.050815] 0 pages cma reserved [ 1948.054425] Out of memory: Kill process 25241 (syz-executor.4) score 1009 or sacrifice child [ 1948.631315] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1948.791074] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1948.845818] CPU: 0 PID: 6358 Comm: syz-fuzzer Not tainted 4.14.177-syzkaller #0 [ 1948.853935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1948.863590] Call Trace: [ 1948.868090] dump_stack+0x13e/0x194 [ 1948.871757] dump_header+0x178/0x6d4 [ 1948.875587] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1948.880719] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1948.885935] ? ___ratelimit+0x50/0x519 [ 1948.889947] oom_kill_process.cold+0x10/0xae3 [ 1948.894485] ? lock_downgrade+0x6e0/0x6e0 [ 1948.898659] out_of_memory+0x2d5/0x1110 [ 1948.903517] ? oom_killer_disable+0x1c0/0x1c0 [ 1948.908038] ? mutex_trylock+0x152/0x1a0 [ 1948.912256] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1948.917533] ? warn_alloc+0xf0/0xf0 [ 1948.921195] __alloc_pages_nodemask+0x5d3/0x700 [ 1948.925976] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1948.931148] ? lock_downgrade+0x6e0/0x6e0 [ 1948.935639] alloc_pages_current+0xe7/0x1e0 [ 1948.941295] __page_cache_alloc+0x245/0x3d0 [ 1948.946600] filemap_fault+0xc18/0x1c50 [ 1948.950610] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1948.955639] ? lock_acquire+0x170/0x3f0 [ 1948.961031] ? ext4_filemap_fault+0x7c/0xb0 [ 1948.965622] ext4_filemap_fault+0x84/0xb0 [ 1948.969803] __do_fault+0xfa/0x380 [ 1948.973917] __handle_mm_fault+0x22e9/0x3280 [ 1948.978593] ? copy_page_range+0x1d70/0x1d70 [ 1948.983079] ? find_held_lock+0x2d/0x110 [ 1948.987217] handle_mm_fault+0x288/0x7a0 [ 1948.991426] __do_page_fault+0x4bc/0xb40 [ 1948.995502] ? vmalloc_fault+0xdf0/0xdf0 [ 1948.999581] ? do_page_fault+0x60/0x4f2 [ 1949.003835] ? page_fault+0x2f/0x50 [ 1949.007571] page_fault+0x45/0x50 [ 1949.011133] RIP: 0001:0xc874c0 [ 1949.014338] RSP: 22e40655:000000c4200396e8 EFLAGS: 1c5aaaad41d [ 1949.089607] Mem-Info: [ 1949.101511] active_anon:240569 inactive_anon:1092209 isolated_anon:0 [ 1949.101511] active_file:0 inactive_file:30 isolated_file:0 [ 1949.101511] unevictable:25069 dirty:0 writeback:0 unstable:0 [ 1949.101511] slab_reclaimable:15830 slab_unreclaimable:117360 [ 1949.101511] mapped:61634 shmem:22136 pagetables:10601 bounce:0 [ 1949.101511] free:25032 free_pcp:30 free_cma:0 [ 1949.141599] Node 0 active_anon:919276kB inactive_anon:792696kB active_file:4kB inactive_file:60kB unevictable:80960kB isolated(anon):0kB isolated(file):0kB mapped:231240kB dirty:0kB writeback:0kB shmem:51464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1949.235863] Node 1 active_anon:43000kB inactive_anon:3576140kB active_file:56kB inactive_file:0kB unevictable:19316kB isolated(anon):0kB isolated(file):0kB mapped:15296kB dirty:4kB writeback:0kB shmem:37080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1949.465056] Node 0 DMA free:10428kB min:220kB low:272kB high:324kB active_anon:392kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:240kB writepending:0kB present:15992kB managed:15908kB mlocked:240kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1949.632368] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1949.661273] Node 0 DMA32 free:36260kB min:36272kB low:45340kB high:54408kB active_anon:918884kB inactive_anon:790588kB active_file:24kB inactive_file:0kB unevictable:80720kB writepending:4kB present:3129332kB managed:2621260kB mlocked:80720kB kernel_stack:9344kB pagetables:13620kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1949.896344] lowmem_reserve[]: 0 0 0 0 0 [ 1949.900537] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1950.019900] lowmem_reserve[]: 0 0 0 0 0 [ 1950.024483] Node 1 Normal free:53540kB min:53612kB low:67012kB high:80412kB active_anon:43000kB inactive_anon:3576140kB active_file:56kB inactive_file:0kB unevictable:19316kB writepending:4kB present:3932160kB managed:3870192kB mlocked:19316kB kernel_stack:7968kB pagetables:28740kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1950.307349] lowmem_reserve[]: 0 0 0 0 0 [ 1950.313679] Node 0 DMA: 3*4kB (UME) 4*8kB (UM) 9*16kB (UE) 10*32kB (UE) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10428kB [ 1950.520078] Node 0 DMA32: 1313*4kB (UME) 358*8kB (UME) 646*16kB (UME) 526*32kB (UME) 18*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36436kB [ 1950.653660] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1950.748765] Node 1 Normal: 11*4kB (UME) 555*8kB (UM) 90*16kB (UME) 249*32kB (UME) 8*64kB (UE) 68*128kB (UE) 31*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 53572kB [ 1950.884359] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1950.964113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1951.022113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1951.073096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1951.092083] 25941 total pagecache pages [ 1951.096634] 0 pages in swap cache [ 1951.101995] Swap cache stats: add 0, delete 0, find 0/0 [ 1951.108245] Free swap = 0kB [ 1951.111533] Total swap = 0kB [ 1951.119099] 1965979 pages RAM [ 1951.122426] 0 pages HighMem/MovableOnly [ 1951.126883] 339053 pages reserved [ 1951.131245] 0 pages cma reserved [ 1951.136490] Out of memory: Kill process 25263 (syz-executor.4) score 1008 or sacrifice child [ 1951.147070] Killed process 25271 (syz-executor.4) total-vm:78872kB, anon-rss:15668kB, file-rss:49840kB, shmem-rss:4kB [ 1951.201052] oom_reaper: reaped process 25271 (syz-executor.4), now anon-rss:15652kB, file-rss:15024kB, shmem-rss:0kB 09:45:11 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000140), 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:45:11 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000000)=[0x4, 0x5]) 09:45:11 executing program 4: mlockall(0x1) clone(0xa00e1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x202002) keyctl$chown(0x4, r5, r3, r4) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x1f, 0x200}, {0xbe1b}], r3}, 0x18, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 09:45:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) [ 1951.679684] net_ratelimit: 129 callbacks suppressed [ 1951.679689] ip_tables: iptables: counters copy to user failed while replacing table [ 1951.711679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1951.781636] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1951.802021] ip_tables: iptables: counters copy to user failed while replacing table [ 1952.144318] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1952.192746] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1952.222332] CPU: 1 PID: 6358 Comm: syz-fuzzer Not tainted 4.14.177-syzkaller #0 [ 1952.230279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1952.239994] Call Trace: [ 1952.242997] dump_stack+0x13e/0x194 [ 1952.247375] dump_header+0x178/0x6d4 [ 1952.251294] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1952.256689] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1952.262019] ? ___ratelimit+0x50/0x519 [ 1952.266437] oom_kill_process.cold+0x10/0xae3 [ 1952.271569] ? lock_downgrade+0x6e0/0x6e0 [ 1952.275914] out_of_memory+0x2d5/0x1110 [ 1952.280234] ? oom_killer_disable+0x1c0/0x1c0 [ 1952.284771] ? mutex_trylock+0x152/0x1a0 [ 1952.289070] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1952.293963] ? warn_alloc+0xf0/0xf0 [ 1952.297756] __alloc_pages_nodemask+0x5d3/0x700 [ 1952.302893] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1952.307946] ? lock_downgrade+0x6e0/0x6e0 [ 1952.312641] alloc_pages_current+0xe7/0x1e0 [ 1952.317304] __page_cache_alloc+0x245/0x3d0 [ 1952.321847] filemap_fault+0xc18/0x1c50 [ 1952.326088] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1952.330887] ? lock_acquire+0x170/0x3f0 [ 1952.335285] ? ext4_filemap_fault+0x7c/0xb0 [ 1952.339962] ext4_filemap_fault+0x84/0xb0 [ 1952.344823] __do_fault+0xfa/0x380 [ 1952.348850] __handle_mm_fault+0x22e9/0x3280 [ 1952.353592] ? copy_page_range+0x1d70/0x1d70 [ 1952.358369] ? find_held_lock+0x2d/0x110 [ 1952.363114] handle_mm_fault+0x288/0x7a0 [ 1952.367479] __do_page_fault+0x4bc/0xb40 [ 1952.372118] ? vmalloc_fault+0xdf0/0xdf0 [ 1952.376303] ? do_page_fault+0x60/0x4f2 [ 1952.380495] ? page_fault+0x2f/0x50 [ 1952.384153] page_fault+0x45/0x50 [ 1952.387996] RIP: 00f8:0xf8 [ 1952.390858] RSP: 46f981:000000c44bef3da0 EFLAGS: 00000000 [ 1952.395991] Mem-Info: [ 1952.404470] active_anon:240654 inactive_anon:1092209 isolated_anon:0 [ 1952.404470] active_file:34 inactive_file:23 isolated_file:0 [ 1952.404470] unevictable:25197 dirty:15 writeback:4 unstable:0 [ 1952.404470] slab_reclaimable:15820 slab_unreclaimable:117020 [ 1952.404470] mapped:61888 shmem:22136 pagetables:10617 bounce:0 [ 1952.404470] free:24833 free_pcp:0 free_cma:0 [ 1952.441192] Node 0 active_anon:919812kB inactive_anon:792692kB active_file:72kB inactive_file:0kB unevictable:82276kB isolated(anon):0kB isolated(file):0kB mapped:226328kB dirty:20kB writeback:4kB shmem:51460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1952.472323] Node 1 active_anon:42804kB inactive_anon:3576144kB active_file:64kB inactive_file:92kB unevictable:18512kB isolated(anon):0kB isolated(file):0kB mapped:21224kB dirty:40kB writeback:12kB shmem:37084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1952.502971] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:392kB inactive_anon:2108kB active_file:0kB inactive_file:4kB unevictable:124kB writepending:0kB present:15992kB managed:15908kB mlocked:124kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1952.633269] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1952.688868] Node 0 DMA32 free:36188kB min:36272kB low:45340kB high:54408kB active_anon:919420kB inactive_anon:790584kB active_file:44kB inactive_file:4kB unevictable:81552kB writepending:24kB present:3129332kB managed:2621260kB mlocked:81552kB kernel_stack:9280kB pagetables:13788kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1952.815490] lowmem_reserve[]: 0 0 0 0 0 [ 1952.858636] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1952.993605] lowmem_reserve[]: 0 0 0 0 0 [ 1953.013950] Node 1 Normal free:53528kB min:53612kB low:67012kB high:80412kB active_anon:42804kB inactive_anon:3576144kB active_file:24kB inactive_file:80kB unevictable:18180kB writepending:52kB present:3932160kB managed:3870192kB mlocked:18612kB kernel_stack:7872kB pagetables:28640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1953.154604] lowmem_reserve[]: 0 0 0 0 0 [ 1953.165570] Node 0 DMA: 12*4kB (UME) 6*8kB (UM) 6*16kB (UME) 12*32kB (UME) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10496kB [ 1953.190798] Node 0 DMA32: 2031*4kB (UME) 866*8kB (UME) 779*16kB (UME) 526*32kB (UME) 20*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45628kB [ 1953.211553] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1953.223857] Node 1 Normal: 703*4kB (UME) 743*8kB (UM) 310*16kB (UME) 341*32kB (UME) 49*64kB (UME) 75*128kB (UME) 46*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 71668kB [ 1953.265698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1953.289608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1953.311319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1953.325514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1953.352677] 24206 total pagecache pages [ 1953.357319] 0 pages in swap cache [ 1953.360793] Swap cache stats: add 0, delete 0, find 0/0 [ 1953.386112] Free swap = 0kB [ 1953.389169] Total swap = 0kB [ 1953.395877] 1965979 pages RAM [ 1953.398996] 0 pages HighMem/MovableOnly [ 1953.413615] 339053 pages reserved [ 1953.430444] 0 pages cma reserved [ 1953.439493] Out of memory: Kill process 25277 (syz-executor.4) score 1009 or sacrifice child 09:45:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x1000]) clock_gettime(0x0, &(0x7f00000028c0)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000002880)=[{0x4, 0x5}, {0x3, 0x0, 0x9ed68390ff221bdc}, {0x0, 0x9}, {0x0, 0x2}], 0x4, &(0x7f0000002900)={r3, r4+60000000}) sendto$inet(r2, &(0x7f0000002a00)="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", 0x138, 0x20c49a, 0x0, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000002700)={&(0x7f0000000080), 0xc, &(0x7f00000026c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\"\x00', @ANYRES32=r5, @ANYBLOB="cca68c83bb2125f4c3e08b0c5674ff57a9f25739b0d2c6610d996f2d1291d1dd388a4d7a3a40357c518e4e632aa4991690010cc7b8143d10009d000180d7d296614b5ca75cdbd64f340918c4fa19a05c4d4e05dc55c060280f56eff41b54413897b8dff7963c313804f19f07666e7f60894160bef407feb22501c42461e3169b71a4edc6fd882cae51f320868aceaca3aafb9ccc4f258597a678d799a9fb7c85b484e2284ada2a0d6e287ad1e3bb4c9406826db8845dcbebb3b181a628d8316124071976903e89ca4b5a85858f6d4301cc600400170000000051c4255a20ed1e0911332b69b0f2ce81f5a9f74d9a2ef0aa978362473880108b5749803bb6653b9e188e6374e62a19ec31b4a065a0157cd9c0c6a2553206ad4d630b5d7d260ed41a5bea20c6de5387d5949e9f1fd3c5c178ae9c417275854dd4aa7342728dd2100318c466ca8c809f115b59f81378baeee14911f04b1a1f2132333c2e0f5e7ff1f360d3ccd5bd492fbf2359b8e92fa77ddf11868012b7e79b6eac1de58d92502bec8fc1957458199e0302ff5304abffecb872cac24b05e0a4ebd3ccd17e46810e82d5b9c5adea00730b2d061fa416d4e852982893daca4d4138a5a37e2acc2d87165aabd04bbe23d3834d13e33e7b483715372405fd8f37f31e57e2a72bbefb6ec9ef9a9eda96ea8a12b0d22f037c9769655a4e49943b731289c85741695e0962334ee2a70e116a6de95c7ba51be3353839df13bf0652d9fd15e09b1772cbc16dbc444da4912c43f8354baff05537fa424dfce45a3f1d4d33efb724b84b2e63e82a86a05100c62daff804c7f95072200180f6bb4eb131c44ae2811d5eacf0ff6bbe89a9499fb46d45ef21300062e3454f25667fa243e48de74395e2693f4447e7430d1cfe7d7240427e30e93aac07c3def69f8c1c13b8a35e4da10a8855ad199bda193bfafcf82d0c648a5d3e174bb30dbeb74df266e28b8e8f6005d5c8f0514b4d949fefae244f40152217922a0f4208fcc36c45ada230f1bedfda47975c9acfca7dd529e0ef9bdc972c0de64649f4fd08c65467cd455f45d9b170351bc6304502fb15e29ceabb297c4882d59aa1bd192e029397fadb2c5d48057c47b2b65b8295e1236991ca6307a2c8f0c18e050d0972feb1196101467eda5a052ac8c442a6dba8d94c3edd8683af747482cf208db62b684d10932a6d379d3aeeb1ab5cb35246402341159138b3230cf9530ac83bb0b81db90f5866b6ff84873777e4ef44394563bc932a28b50b68b713efba29b59aef0e818a05a949bd6ad9be631dd60a17470bf501b44f98bb29aa87e155cae977baebef5800d93a47a76dd66e0cc5a8e6f56fead6162a0d6b1ee6f8d0365d047c3a5e5a4134cda773437fb9d1d77c54dc0a48b0a183f66adec7000a275d1bd05e7915b3bb6d5adead1b691b03baaaf3c6c772fb4b7eeaf0855988b4efc320cd48561a418e3954487509ebf44c8d65ec25661b47ee109cc34db45ce9db608025191688e8ac0b3360c45f8b7ea0abe308e83b2b12d3758157f16e8f22138c3a171becd50635c8a3e609e6e2c35629de32f72315c4c8b5af0ea270d61a0171b2ae8d4f5b20bf59885df920df5146f79bf47ea8ed686900ad9db042d2841cd2240d926d341be14b755719f3923db341baefe249e7134883551c6abeead079b1ce08ce61c85ae5e4356df7671aa9f3a0df7432176f59354822093aaa8ab3269372454a2ad9fdd119ac0c77aa622de013437a03f9ad9e9dc065b7e11f4b4298c8770971f0c2eb0fee2400f2337519a6017656ca5a7143c01ff7b81cc5671c28c171f8e52daafe89dadeefc64e49d9ff3c58bfbcf77b6a81a35b6cdba0192dfd4951d131d3094b38adef770ae510f6b8a6de554ff90623c5433740470ba87f7ba9723770b6818a57ad27f28c0c35c068158850f9b7d79030b21125bba487a0dc842c72c9f2ff422211ba2c555527329c9752d5181e19bf286221791f8826ed5ab8f54d0de0aa34e6435ab2c77806152bf77afe59d04bbb55684bf9068d67140dd4ce701b4b96f8a672f18db9a4ad9c7cd665204f0e850a70771ce89004606db3bbdc8f2c50d07fb19bfe218dc2e1029816d8ac8aaee76c28facfb7742ebe52e80ac8de69127a38a346092321bbddaf606fd28e517ce6c4a05e87e02a9dbb576e71eaee11b54aca4399593f608a9cd529ee6957ed55178114b3e84a0dac47190f5c41d4fa1a52bc9f4f4bcfb05b5aeb057a9d2ddb7a83aacf2e17ce3f0bef3853d3763cce64adc1902021e55cb027ac39269c38ffe3b1cc09419dad4b14c1248488e2d0a714f866c985fa872fa698d42d427151d9e439ed53bed408e0b23f02921cbc6ceca007c6ca5bc3e6d9aa06c7983ec1de8839f27eaa689a4b21579b1aa1660f95ea2ed78183f84e55e0e950bd3eeb06c694310f5fad558194fd90beae0d2e84f26fab2e4563f9d516097055a7654fb05b381ab9397f5e39ae635f46fdd4bc236b1abfc9c8b89d51e8aa066b7293a3faaa275026c2bcf96273e20c8b57612e78a0ef1ad7cca9d6cb7e474446aef74ee51d05810e7f1265a294e9ea3ec2699c33b482c753e89bc1c05ff570da272c53d645cda8b9ef7d04062ceefc9ef3b37c830f1e9e669299f32f0a02b4249639ca2a409740a76de188d83eaac3cd506daa1e8266aae13ba7e73063fb95eec061dc489fc8227e7a0925f1d62848d4961d7e13a324e230729b4335dfedf1a8f7a870720b65f2c4cc09019b0af2822981700a7532940ac4492bd25a27585718032f29b6084dc2bf0833951e0af967892d426a5ed0b9937432706881d7e924c25b4660039c11896a56a78572f49e305db0605b9cbe3be34e9f7dda1101276a7472f54eba7c3c657b1e3104975775111b7846621416f5be49cc35ad861c188fa8072dc64ec7af74244843c5bf5c82a8b2fa6ad3de126dd600bf1b11873056cbecd6d94249be626a347be26a78348db3c2c331f531405848e05c36862828e7ccabfe62860bd58c056306f020d459a7be0b930724b83cf6e20beb073bc738c84699f73ed7020cd77d2bf6ef8f323e1043aefe1da3b143b91adf1dc954f4a1318234da10bbacef1da88cffa0b21275eadd29fccb1ead417012b455ec2be6f8bb192e63a70c43751545d6cd8bc97fa53b197c9c8b11fa5e1d4628898d2e1c4eb1923cb66fb3bc37b5f281c7f1457161892826557802ccf03d184f34b26a6b4c9ea5f7f6ee213a25f82d61f90817253358c28416d804e4a5ab13e7ff1780597740c6cf5a644d29a947051ef721b64284add73eb635b2b9be72deba874118dcc9ccd85018491a2e172c260f801e54bfeb8f9dc8c193fcad647d2b32ec193453233bf82556662ca059917e0b9d5698fa0a3473230c2cdb27faef63d10cddbc9f1b9dee6d03e2ed42bdbd05621d50a9cfb02307090294728b85d42a66c6b7afee28aeeb6adb51f4e87feb730a5c22cf81e39dcf76e75794cacb8e833a26f3d0bd14290f7363c7f65f4581177f95ddc56a91bb89699c0dc68fa91ff7817db5bc2c7b3b29dadd79d3b0c2809cc032af7e044496862859358256e11ae5641d0b27245e523220cfc6ea0e31e302e559364e755ecec82767016454ce2fbc778ccb623f7d8a71c5b4408f0d32676b1b1a94368a53dfcaf311c4c21de23cbb388f60a38d2ba870328416394fca47dd35610cb40d7af92a88b073e5d969fa7bc68d5a3055e656040fbe104d79e9caf84a64f0b08bc83557716cb97a429618da4b414addb51399dd7a50d37aa2d66f13ab15d29c1822c44fe8d7d6c000b093bec47d2ed8d9267b10dde244de30eeef08a5493130e37cdb71ae9cd1833541c7ccd040e34af869af49ced96e626956d0f18a2a46c72964d235a37a887f3355278c0286d0a5fd33d75480a87310d366274aed700de8fa3dbeea27f8802a176add60b98987a32036c7cb603914e2727489a7e505cf1d9c0f3b7c2eecee742b7e439758d1851c463177fc2bce7444da6914068a02554a087a97060e50c63aed2b788ff4a848b0843be51b8163c581fad3d5be8329d5d1051654cfc5ab86e32a8ce39611e7cc7800ac20f12177d2ae0bd1975b74cfa58063aea8da1ae8c3f4f325fdb1f761e44a28cc8f05b1d5bae323899b37d16df78c6162ead794b0028c3815b4299aed2dae65e5fa146732f204d72cd7a33fe3d1eec369c344d170dff242ae1922f5be7d84531f7401c714c871dcc6bfd36926d9de542ddcd255fab4955d58baa1fd67e6e6e3c6533f388568ca3df05a8aaa5330a056213ae157141aff95a7918e11a51ffb10a82829c579ec69a902dde7bcdc590887be063db3b7cddfae00f8c3cdd9d58d31c51eaedff5e34db9ad95c32d3696efae01bae198399503edf960958340bf82c643a471e4872477fd6ec738c2a3274df51bc10e75b6e61c6214b83adb8e50fa2f5849759e8c9695140d8fc8f0473541d6cf74475822db267c3a8e0ee83f31e4fdee1f6d8f5a78d1265a9119cb8c986e9d089683177698d8c66044d4c7311085b809d21d5baae9515780f3e98ba7a13b295f0f83c5db18cb6ed1a89e31991326d41a6dd303e1be59dc0ca76486e56f094d8976e66e818f0a07f5a10a14b4038ef1ee0a56232875576bcd6c65b6cf03ff08a8163b170f45687ad1af1f07d92c0ac6d23217c39cf24bed85af36d742d50378ec19d6c597fc21aa71cead27a02751713607d416211936357ef182ee13a1fff204fbc229687516a3e139984afedb942286563a8a0c4a686a15444e059029b9bf842dcc6964b23ce1dace81c249474783bce6224789995890ecbb9e40ababec096bd477628c00c11358a5e79975647b724ecba016cd66b690904018113e8a3a5e94f42dbe559565fc9fea85c1143c1caa832417e6dcf792ab9c1fc7fd9c03159c0dd898c8e28d13de3a1704d1571fa2e7495030fa9789239c052d1c6dd61977d57df588bcc6d6b17ed9bd9fc66a3097d6dc8e27bc2865b394a32c73770c4164f0dcc59f0626b5ae6d20f60652e47e69e403bd7e6d09141c955275ee03d9c7f0748a170388a38e35f907a7a4f555c72922eceee1eb8e08d9e86a4438d4017f7c7e4e095ccecbb6778fef20efe9d5f985c6454434479232b207fe6be4eb7b9e32b65c67ad4fa50ce00ffba356f3258c3a61e7adf34556ce5c3ebfc28b5d1b51cf0589f999da1568475988af89771639ddb22819b46d46daba6fa91cd31d3064137d2d2f64daabd154b0f026c459d0c0507d0306d8b5e3cc93d4c3d7ad29e96231376c9199cecdf85aa764d6fb564d96326ee58377245e77a2216d02074c0699f5715b91a852d6bd065d2a13155c9eba1765f4eb84e33497fd0c0ff2892b5ed9cda06d5fa59d54002c14d977f3a48891f96ec2f9214af0780c2e600a82adf41fa7c8f486825985d582ee3df0a68817009c0ae15e1ae546fc6b41a06c2d8a645f14b299d35c637a9910ce897559ecd78f706a89a52c8543222244fb55d7bfedd4022ddc805b438cfaad84b71e73bd17856504e8742b4a42f0fa65bf327a99c92904267bbe738a427878cd0d6dea2b846dc3050c5d10bbf34c9ec64a0b9e9d19152be1aeea431de35c7e9ca84267d1f8c58799d467b97125133b69f43f2c55838a80d4abcf703d6720ae6ea24599f67130e5ee1e8fd92368258946630217a7013a9f9d425de50425208bfac7559c7cb1820c433dfca776b98c4d979e432554e6d819ac5a22aad9789a949cf795b49e687b8450c485468195e7acc833a1758fa89e2e07475ac203d70357464564dbdacc9707f118248119e3a872871c5a5d7ca18ed519ff6a1ae1bcf87b44ff3f3297bafc35f141c08f85c82d2db3fafced652d3c7f4d2f29ab523af18f433b02a8bb3d57b905ea5aee6557a98ffff9a5214c8407f9ef1becfdcfd977ea020c6327d060f34bf1155da902931b60e3124541ebaa00ec110e692cdb716bdb8ee63af574969edb7026e231d54f96647c088d2ee2702a7be30181b65e7d0523370c4b3352e2bdec68829f15c60bc35e6d302da3b54740366fe7b769ef8bb07f11f6ec7a2de0deecc8b7f7cb2cdee08f34179a72cce0c4ff3973a2d753470d3c3ebd629df61537561cb233d78ea50c6e5874a4bf9d0099b2f1e25d54137aef8e109f2ff7c325da0c148bbe7f217a7a25c5484cb1e274c2086382c17758d7ea069c9b32b6fb36b9f4ca05834d4f79ba058b37886b9171889ca350e65ee385f442072beea175f627aa424650739ccb4620ef4dbdaf9cdbe51fad8c6db4743bda98cdef9f2d394d2112db4e36d244cb44b98a6e3aee8c2f74a6e4c571c0239ba3eaea586b32197a1b6b76b63bee70fe94afd6e3bdfae24999cbb8f18226bed0fd1a1b9a7c4a4668d52f63582cccf94f786be26987e4fc7be7e36727f62a583e84916cdb1a5928230b4643cdf8735d3b2a76ca1c958993430cc09bb2fb14ae885c7d38777e6b6b91675dd3a12d13fc678376317eeab72080950c02ec23703eae537a109d0d9a31cee588d080bc80bc390336f212b6d7f8fdc5784f7170c2a5420675ec1ae4c962658006465f2a3731e52581a4e0c1869dd450654eecb05dc6e90d56fc21ec27d30cf5d961289768f3cb32bd75a8a07d4914252ff29d09544aa0228c655429977c34e2d637d10d86981dad62b4274d1bcfc8223b114568178e3c4789b8caa1d2a9886565e7a554f68951c957e5e746d06056fa689b9f628e28618dd7ead88b793739029eb613e0e87e685ffd13c1bcc9cf4e62c44a4f55fba570397a7846905744f0c6d8f9c4d0f8bd739f68a4b21d0604290f1d54acf9d4e5c816b85c04120920311f7de77de4d06445edd985c5a561db950d4b5e55588c91028aba837cb13c99dd6cfe8ea101e97c020dc1aa3e40c3e27204556f88e9ac0c6cb8152cde8de4b7d7ea8d30473d9da185d23b8c868cb1aa2664ba79e9070093005d2600000000"], 0x258c}, 0x1, 0x0, 0x0, 0xc880}, 0x2400c0c0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) writev(r1, &(0x7f0000002840)=[{&(0x7f0000002740)="5e82234afde6de495288bcec409593b8904842d2c041363243312508b6ce03387c7d93d083d389bcc787013cafeb12ff596f817d25a88828541d59af2b23c8542358002dedb3eef616f0603e1281219ac7e92ac4e8b2341d87b996ab9e6a85f494615e89c1", 0x65}, {&(0x7f00000027c0)="80209485d4909b69d27977ed9b1afef552b9fdd76e69a4a2a0625f08740110ebc9b1c570a48b2151db096d6c240a60aeb781c1d42585", 0x36}, {&(0x7f0000002800)="0194799cc59868e6eeb8482268fb46e737e38232c1682027c49885402b5bec25fd020ab20bf2f743", 0x28}], 0x3) 09:45:13 executing program 4: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) r5 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:45:13 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r2, r3) recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, r5) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) sendmsg$netlink(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x4051) recvmmsg(r6, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) [ 1953.729764] device lo entered promiscuous mode [ 1953.739391] device veth3 entered promiscuous mode [ 1953.752574] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1953.781661] device veth3 left promiscuous mode [ 1953.805694] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:45:14 executing program 1: r0 = socket(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) waitid(0x1, r1, 0x0, 0x2, &(0x7f0000000380)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/212, 0xd4}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0xc0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4}, {0xa, 0x0, 0x0, @private1}, r4}}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r4, r5}}, 0x18) [ 1953.934833] device lo left promiscuous mode [ 1954.508402] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1954.591535] IPVS: ftp: loaded support on port[0] = 21 [ 1955.161083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:45:16 executing program 1: r0 = socket(0x10, 0x3, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x40, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:45:16 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "a9925cf6dbbc967b", "fb4d55c727254f3fb922295ee12f6f5f899b13a204c756bfd79e50b7ef50fe9b", "3b8df60a", "596713d22e18f207"}, 0x38) 09:45:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x80d1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000040)={0x0, 0x39, &(0x7f0000000000)={&(0x7f00000002c0)={0x24, 0x2, 0x1, 0x80b, 0x0, 0x0, {}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8}]}, 0x24}}, 0x0) [ 1956.908493] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1957.352303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.360201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.368134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.378851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.387267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.396451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.404719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.416698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.427052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.443368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:45:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10000, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000100)={0x0, 0xfffffffb, 0x4, 0x4, 0x1ff, 0x100, 0x7, 0x0, 0x70c, 0x9, 0x7, 0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:45:17 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/207, 0xcf}, {&(0x7f0000000500)=""/102400, 0x19000}, {&(0x7f00000003c0)=""/160, 0xa0}, {&(0x7f0000000480)=""/80, 0x50}], 0x4) write(r0, &(0x7f00000002c0)="2000000012005f0214f9f4070000fbe40a000000000024a94935b38ae0e44387469b1d1c8ec75d8e5e0ef9d44ad5f11b28a62224b56ca2d8c6d3b3429e6df39718e2d570c1aa0bec83302aa5a55f3ed46b2cb284a2c7d5c421999a922d0cb17eed9d4df91b71199bae789233d1415e3d2aacec5a16e689c892a7265959bb0c3e6553c7644a18fdfaf9a9dbcd2b509ab550720f0e3dd92613526558281099ebe77b3cc7487e677292deae727a1e69bd6d8bfc9c4b90a6061ff1b03e00bf804d79158d1352dc745d22de8e04de57e4ee506d8cf8bb1a9a0f6c5b439a428d9c", 0xde) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000019500)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1101, 0x2}) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000180)) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video1\x00', 0x2, 0x0) 09:45:17 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:45:17 executing program 4: r0 = socket(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) waitid(0x1, r1, 0x0, 0x2, &(0x7f0000000380)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/212, 0xd4}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0xc0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4}, {0xa, 0x0, 0x0, @private1}, r4}}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r4, r5}}, 0x18) 09:45:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x200080, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000100)=0xfffffff8) 09:45:18 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x2, 0x100, 0x6, 0x0, 0x3}) [ 1957.684036] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1957.763339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1957.806259] Bluetooth: Invalid header checksum [ 1957.811056] Bluetooth: Invalid header checksum [ 1957.927524] Bluetooth: Invalid header checksum [ 1957.938875] IPVS: ftp: loaded support on port[0] = 21 [ 1958.036795] Bluetooth: Invalid header checksum [ 1958.150596] Bluetooth: Invalid header checksum 09:45:18 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="180000002700000000000000380d0000720000000100000000000000", @ANYRES32, @ANYBLOB="000000000000000001090500060000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xe, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x1, 0x6, 0x3}, 0x10, 0x0, r4}, 0x78) fcntl$setsig(r5, 0xa, 0x29) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="70020000bd7000fddbdf250b03d096466999ef8479c0234ce2724f36000100fc350574447d4c0ff7cffedf40c4d7ba0305cb252069472e8e0d9dde089d4db746eadf184fbc8c6e64d6364cfdf7f8f28d96000016000100668494938267c6433939a8fb653fa4b1953e00008c0001004c7c4add7f7491ffbeaf158eca6c3baa0686a402f7eba979091c99a396009cc39731aa0a1c9e91d858f53de9a3af7605920ba02b13250383937165d85c4d0b3147cb8003c44f90e6f8bba161c80a6978cb6abcc435bcac1a883b66cccbbc2d3609d550b48d43e431d299f4167818e0c4b6978cf779069f529fbe15974962b4646fed991037a3630a8700010099855b7126852ed27c34f0ba1062cf39f63fabaef4e5551edfee5001f7503d3e448b15ce3e08a54074b918ae10f8d143e31c3e6b4526f68afb63af46796d5a1d260afd020b545e2236a51d5b703d13f9e0f014d753dd8a9455c0c0a94f43246bf8f05a70e3386036cddf37b01ebf88e35e59b16fd405bb025d7000f7000100b6024315a5c50c2aaa6226469d5b367f5f8e6cedf510bf64d64cb9d01474eae023a507e7a39467586bc4338779f2d644bd806231a0b2219192e743ae106bf4157f7563b1bd2ba182f19abe8e235a2337d321050cb55dc18850659aead35cd87aa9c0a6de3240319c824871e486ae73cdde9badaccd31bd3ced94517577a3fa28272e45789de95f1486595d389986f423e4e89964616d57d7d04fa74b9509474acf6ca8af9400db8de187c2c950e39b0b0e847cec754fd45d81ce2e93f627210dd0fafaf0549ba4f801a24ccf6672d99234c32037f27453f6139b9ce200f77cf8d81561e1799d5f33bb3964fb00d378e09f3eb8000000"], 0x270}, 0x1, 0x0, 0x0, 0x20000055}, 0x8040) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000500)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) [ 1958.256120] Bluetooth: Invalid header checksum [ 1958.366062] Bluetooth: Invalid header checksum [ 1958.401012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:45:18 executing program 1: r0 = socket(0x10, 0xa, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000001c0)={0x5, 0x96, "27da5056a99e183c8a329a8836536c3d741e73b33e8328763a20c0ad10b43a9869a448ed10acea6368d186790f008afaf26da61a86ff75fd50d71f231cac1846600db05d09b78cdeb6f271d7e77ae95672a7525a2ca09a4d025e1dc200ad42734ba250150b98fccc3356616dfc3b8eb9f04ab2e17cfe6dd06d03b67811d590dc2f1a093ecf5207462df6f3ff798fc1ead0f3fae300a7"}) 09:45:18 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f0000000000)=ANY=[], 0x1}], 0x1}, 0x814) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:45:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000180)=""/104, &(0x7f0000000080)=0x68) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x430000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000140)={{0x5, 0x0, @reserved="85e4e2334fb8d39243e45a31f027754dc28abfc43efd4d94368c3cba91960c09"}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) preadv(r4, &(0x7f0000000100), 0x0, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x20044014, 0x0, 0x0) 09:45:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000556e72ebc039cfefd7c154652f5d12e1ae26c24e4f1a870523f283627383815243dd9309d1", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r3, 0xffff8001}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3, 0x83, 0x10}, 0xc) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:45:19 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) unshare(0x8000400) mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, 0x0) inotify_init1(0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000300)={0x1, 0x2, 0x1000, 0xa5, &(0x7f0000000240)="dcc0196611d43c1aab90725ea49bdad1fa3962aa077ff7d92dfd832f6f17890185fda7692000eabfa54b51d210851969c15f91f993d286cc1ca3272cda1cce06d00134f4800aec214ed0ca3496d6a9d8601a12fcb096cf210354fe092a2c45898ef0a1d9a6beeaf008bda606da186a7e0a6f16dee2a5c38cb0e69238ea021b5c1e3dcbd57b838b0656eec2699b914eddcfc6397b664a9d5d84c159ebb1376cf394f501a695", 0x8, 0x0, &(0x7f0000000080)="4b65fb73c169a870"}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 09:45:19 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="b74a05379fb5a17009dab9ce94d672fef549c8a95925a228ca98e23347dbcce58179d11319b4d85d476496b74dc08a69e8409dcafe7d156e01bcdb6fd8a3c5f53aa984147abf9af83c54", 0x4a}, {&(0x7f0000000180)="4e413e80648594d78e8c56b7c15a3c58fc59e8cbb418c08c09bae57f248d9ef05f86ecaaaa3cb98cee551ec91ed1d86f95bce9aee1e0ad8016276a71128b93a48d81c3", 0x43}, {&(0x7f0000000080)}, {&(0x7f0000000240)="334a7464cb5e13efe493ed237508552b0a9cbbe96451cec94728b42283c591900bdf0169e40dfb394552a6201ab32a8e12abd2715d3fd493a75f3c6e221d026e3c7c2f7263b18c496a67c5ada2a83543a509c194baee67626e9ee89eec0d80ab61fff9e8192ff96b1b59ccb028253cdeb560de6f", 0x74}], 0x4, &(0x7f0000000300)=[@iv={0xe8, 0x117, 0x2, 0xcf, "89aac7454621b1ecbae4de555b2b99c0dd37d6ad4ed611c08e78357d3ebf0663051b40b0e6dd0813fce86d8dcd5a15c48d653a41ababba08c65e435c6540696674709f37432bbbca8644d3fc26709ec6f0fefce49806e556f21dc24f410b9dbf01b451a2725ee296bfbaeb5181ab976df97f438e77fa65fc3f4f751f9abf4522246b4bbc55d309af803647fc75939a77dd4ce10cb301f369e8a8c875eff652d4cab7a14534b39a0b4edc6fdea91b9f6b9651d1b36b43122063401436269f7a5d4dd72af502e632e3030c36cf9e88b6"}], 0xe8, 0x200000c1}, {0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)}, {&(0x7f0000000440)="faac59a88dd0f07368a580", 0xb}, {&(0x7f0000000480)="c96e6e7719b8df012b9c73df6e999957cda99a72d8bf450c4b495eb16c060481104f5a9888d0f14ccbbedfedc129d805c72fddf29b7e175062", 0x39}, {&(0x7f00000004c0)="f70321ac0bc9315e64941358d833ecb3f2562a8a7d072c3dd28ad140e5468a21b07aa83eece59cc5a5401268d3996e9410b8a755093b2fb0eed550092b0ef11e38d3c86b574abc29fb557239120c1480ad974a410b8c68", 0x57}, {&(0x7f0000000540)="bf4dc25fb57fcba97fc67bf0cb45048e3e8b4bb7d11bdb62e1b89b", 0x1b}, {&(0x7f0000000580)="2b42e5207149de1d88e3772e4eee991a2fdb7b603d30084a16d30a5da1c161dc3f351884cce289283f2e84ab0b2951a4f68ea0db5c1f4c87e9ab9c3b2ac802fe2afe1a688133530ff592ebfa1a0fa8b696befa5c99389b1dc7030343cad54d6fe0fec5da3b70ee19ff894cc3e5e0546ce435fe1a9ff3a99a208f2306f04dcc8a0beb827d953526a49b64d10d486c399f86556d7fb2d0d040f5e311a2586cc82a477ec30dc3f48cb9631b", 0xaa}, {&(0x7f0000000640)="32680aad44a460373b1614cc77c0ee5f9dd156a983966e946c594ccce666f62b1afcbd2823528fc93171f63a7983af485f5eb81269e33f9328d0a2e6e7d8f5ecc5952ec5fc78258e2cc629f06ae0c3f237ba528ad88a65fce97dc219d8467abf80954bc8ed92262c", 0x68}], 0x7, &(0x7f0000000740)=[@op={0x18}, @iv={0x70, 0x117, 0x2, 0x59, "d51a2dfc0bd59d01ca5961825707bda12bb454b3441105ae948aebda7e15d9d1da3e8b156ef69729d3cbb74f3d1e32eaa7f2730a5fd3071ec797d71faeb51af693059ca37739a3326e99b76f87ddf5b1b0f534ec7ab5ce3cf0"}, @iv={0x68, 0x117, 0x2, 0x4e, "aa17c458791b059da35611d5de5d45b8be7a13ff46617dd13db80742864054d7194318934714255df21b75507ea81ddb10c6e4e2e32680eea937d3fa52fd72491002a540caf351f0aa95ed821ad0"}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xb0, 0x117, 0x2, 0x9a, "d0612d735a1b76a5eb2d25090d973b3f74b5c0218968fa5c268e787abec24c25c1bc7280dbc3f8107255fd190368b9963d5d6b194d76a498a8cda98efc5f939d405dff6b7e8e7bc12d50b5ee31842018f7bd341e2d41b39a44dd35485a80af47533f081f564b99149b6c0fc06d77bcea011713f991d057145167cb4a5ade5f19cad6cc4011728bb483528f96c95d2d8c13e5533ef090023ec526"}], 0x1b8, 0x10}, {0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000900)="b90579f75930e8b934e6c87a00cf03de0d6b75d58a78fbbcbbe619f661bcefddfb807b997080c0793dfd61cafe0591c8fdd5723a6fe7c2faae514270be958e393d5481ece7b05e36c4e1a801bb5f9750d3839fc1582a656e8a76c80df0e3532f0d123dd6e91e0a444245aa1866965318f58048b3339a5fa893eca9bf278590627f4c0b", 0x83}, {&(0x7f00000009c0)="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", 0xfb}, {&(0x7f0000000ac0)="cc76b2f2f0a71106b242fbe1e0276ae60f45df23872bc1ffdcbc84f98c3c51", 0x1f}], 0x3, &(0x7f0000000b40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4010}], 0x3, 0x1) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = getpid() pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000000)={0x4, 0x81, {r5}, {0xffffffffffffffff}, 0xe6, 0xe4}) ptrace$poke(0x5, r7, &(0x7f0000000040), 0x101) dup(r3) recvmmsg(r1, &(0x7f0000000000), 0x0, 0x62, 0x0) 09:45:19 executing program 1: r0 = socket(0x2, 0x1, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:45:19 executing program 4: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000000)='ip6gretap0\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000005d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 09:45:20 executing program 3: syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x80000001, 0x20000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:45:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file2\x00', 0x30) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) removexattr(0x0, &(0x7f0000000080)=@random={'btrfs.', '9p\x00'}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:45:20 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468000000b31800027f1400010000000000", @ANYRES32=0x0, @ANYBLOB="00f8b200080800001028e6c467144d2fa813"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x5b, &(0x7f0000000080)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x5}, {0xfff1}}}, 0x44}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in=@remote, @in=@loopback, 0x4e24, 0x8, 0x4e22, 0x40, 0x2, 0x80, 0x0, 0x73, r6, r7}, {0x5, 0x80000001, 0x4, 0x200, 0x3, 0x100000000, 0x80, 0x400}, {0x1, 0x1, 0x7, 0x90e1e8e}, 0x7, 0x0, 0x2, 0x1, 0x2}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d4, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3500, 0x2, 0x1, 0x3, 0x9, 0x4, 0x2}}, 0xe8) [ 1960.021802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1960.078468] overlayfs: failed to resolve './file0': -2 09:45:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000080)={0x1, 0x1}, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1960.162874] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1960.173323] overlayfs: failed to resolve './file0': -2 [ 1960.213089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1960.240420] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 09:45:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file2\x00', 0x30) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) removexattr(0x0, &(0x7f0000000080)=@random={'btrfs.', '9p\x00'}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:45:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x14, r3, 0x1, 0x0, 0x0, {0x3, 0x6c00000000000000}}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x14, r5, 0x1, 0x0, 0x0, {0x3, 0x6c00000000000000}}, 0x14}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mreqsrc(r6, 0x0, 0x25, &(0x7f0000000000)={@remote, @private, @remote}, &(0x7f0000000040)=0xc) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r6, 0x0, 0x0, 0x200007fc, &(0x7f0000e68000)={0x2, 0x6e23, @empty}, 0x10) sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:45:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r2) sendmsg$netlink(r5, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000004f80)=[{{&(0x7f0000000100)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f00000003c0)=""/90, 0x5a}, {&(0x7f0000000240)=""/32, 0x20}, {&(0x7f0000000440)=""/141, 0x8d}, {&(0x7f0000004e00)=""/113, 0x71}, {&(0x7f0000001540)=""/144, 0x90}], 0x8, &(0x7f0000000500)=""/3, 0x3}, 0x40029}, {{&(0x7f0000000700)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/159, 0x9f}], 0x2}, 0x1000}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000900)=""/125, 0x7d}, {&(0x7f0000000980)=""/76, 0x4c}, {&(0x7f0000004e80)=""/203, 0xcb}, {&(0x7f0000000b00)=""/72, 0x48}, {&(0x7f0000000b80)=""/231, 0xe7}], 0x5, &(0x7f0000000d00)=""/82, 0x52}, 0xc9c}, {{&(0x7f0000000d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e00)=""/126, 0x7e}, {&(0x7f0000000e80)=""/197, 0xc5}, {&(0x7f0000000f80)=""/97, 0x61}], 0x3}, 0x49}, {{&(0x7f0000001040)=@ax25={{0x3, @netrom}, [@null, @netrom, @null, @null, @null, @default, @netrom, @null]}, 0x80, &(0x7f0000001240)=[{&(0x7f00000010c0)=""/154, 0x9a}, {&(0x7f0000001180)=""/11, 0xb}, {&(0x7f00000011c0)=""/105, 0x69}, {&(0x7f0000001340)=""/142, 0x8e}], 0x4, &(0x7f0000001400)=""/145, 0x91}, 0x6}, {{&(0x7f00000014c0)=@ipx, 0x80, &(0x7f0000002980)=[{&(0x7f0000000a00)=""/211, 0xd3}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/178, 0xb2}, {&(0x7f0000001780)=""/98, 0x62}, {&(0x7f0000001800)=""/78, 0x4e}, {&(0x7f0000001880)=""/232, 0xe8}, {&(0x7f0000001980)=""/4096, 0x1000}], 0x7, &(0x7f0000002a00)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000003a00)=@pppol2tp, 0x80, &(0x7f0000004b40)=[{&(0x7f0000001280)=""/33, 0x21}, {&(0x7f0000003a80)=""/169, 0xa9}, {&(0x7f0000003b40)=""/4096, 0x1000}], 0x3, &(0x7f0000004b80)=""/192, 0xc0}, 0x5}], 0x7, 0x62, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) fadvise64(r6, 0x2, 0x200, 0x1) [ 1960.500558] overlayfs: failed to resolve './file0': -2 09:45:20 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) syz_mount_image$iso9660(&(0x7f0000000440)='iso9660\x00', &(0x7f0000000480)='./file0\x00', 0x1, 0x2, &(0x7f0000000680)=[{&(0x7f00000004c0)="50733f813b9a75efd93102536710279d5c8ceb054341da54fb8a2d7af010dbdc848c48a092b1d9d4156438db5ae844fc0b5378148dc1914e6fcd628b6d46c468f62dcd164e7a4d4376e7af0c1f2fab6ca6b0499024433d02f9f8f7be7f28516e60c7eb82072d0e4d53c3f168138a399d8fa8733c19431c563f86c4084558767351c7cab2a8a6aaf7f5558616bba7a53b7e9e7054e3545d469e80fa4f3ef870b0d7ea0caba949c902e28ad163c88dc93a156d9e3586116134a8ca371e900ab131d668300b03d5f4ea81bf852f946eb4e6", 0xd0, 0x1000}, {&(0x7f00000005c0)="6449bc191e1124d095fce04bbf5d48fa5d65b3e9a42ef306f94db3578e86f105446dba916eb13b1a14687241fb3092fec577cc02b65a1bfcaab87583d80744cf4ad8e8a149cea40e22f307bb0a47e4d7969c6a7dda90d5bf99bf18f6e046f5500c0246b74cf0b3dc3d4b7a22adb79f68d01ef10dbf9be6ad1ce153aad51c9d12f48dcb1998637bffaa9c95ae5078f8ca9822693c3d512945d2057c987e11cdd5d72bbcf3f7e4", 0xa6, 0x7}], 0x2000, &(0x7f00000006c0)={[{@map_off='map=off'}, {@session={'session', 0x3d, 0x1f}}, {@mode={'mode'}}, {@norock='norock'}], [{@fsname={'fsname', 0x3d, 'dctcp\x00'}}]}) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000007c0)={{0x8, @private=0xa010142, 0x4e23, 0x2, 'lblc\x00', 0xf, 0x1f, 0x29}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 0xfff, 0x7fffffff, 0x6}}, 0x44) fcntl$getownex(r3, 0x10, &(0x7f00000003c0)) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000740), &(0x7f0000000780)=0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x7ff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x7, 0x3}, 0x0, 0x0, &(0x7f0000000400)={0x1, 0xb, 0x10, 0x3}, &(0x7f0000000240)=0xfffffffffffffa3c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x400}}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:45:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x4000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000040)={0x4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {}]}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x3c, 0x1, [@m_mirred={0x38, 0x1, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1}, 0x4, r3}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 09:45:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) r6 = dup3(r2, r1, 0x80000) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r7, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) sendto$ax25(r4, &(0x7f0000000000)="1088d8f194e80bb56f03bca3f13048962e18a08ceb5b22532785ea3d116cb589dbb27c557f3824605054ec41e1debf7a624bdca38ae2698c7dbf8057770c50b5004a4c6de64357a07aeaec8615593f7c47046b24213a59eb60cd2284a1cedba1ef9ed1cae2e8d09f18252cdb2c8d25ac05c50fe8608141400842d883db17d876fe9a65d78aecb0a7aea883578a09efeb980ee00155b3881c847b360f35202d9991a27a55e92a432a95373a1a4ad343472101acc9c10a454dc542633e21f981c3a224ca581641e62a658f8047744262566c575fb2ae629a3a03044ed8337502585bbf322cc8f2", 0xe6, 0x800, &(0x7f0000000100)={{0x3, @bcast, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) 09:45:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00ff000000000000ec8301000e9e4700000400000037a36b4b215480830100cf204bb00f622efdbaa97ffda04d688442d10f024e2cca2f61bc3d613229ffc334e74ad293168a90bde33d46d57fc262fde46ebcfc35c934cb59939758c1c59a70e32e4a9a3df09c889a5f0baeaa7f2f7c01f0776510e0280f06f134f12ffb3eb2fc10521f000000000000000000", @ANYBLOB="9a0302f72043a9b590ef0d5a80790603360139099e950486ce5a994bb674a5e6d9948ec09e1a0999416af501d4a207e6d0752e168b11b7d9788319e98eff268b6daecce33eb5b481fc183c196044dcbdd9049c6d12a5b0abb7d23f03"], 0x2}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x0, 0x0}, 0x10) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000032280)=""/102379) memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 09:45:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @remote}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x4068000, 0x0, 0x49) [ 1960.774644] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:45:21 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setgroups(0x1, &(0x7f00000000c0)=[r0]) setfsgid(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000100)={r3, 0x2}) alarm(0x6) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 09:45:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$TCSETXF(r3, 0x5434, &(0x7f0000000040)={0x1, 0x6, [0x8, 0x1, 0x2, 0x5, 0x9], 0x7e}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000240)="01c2ea30cf410338f9c9a4232d3bb5aa85a56ee1664b4378561ba2960da2f55f4848f35b372f9bffc03361fff992a1a955a49d1197208ead04e50ccff647497d8fb1a0b377bbf039f05f35fdd400b96ae938db00f6", 0x55) connect$vsock_dgram(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0xffc0, 0x3ff}, @sack_perm, @mss={0x2, 0x5}, @mss={0x2, 0x7ff}, @window={0x3, 0x6, 0x400}, @sack_perm, @mss={0x2, 0x500000}, @timestamp], 0x8) 09:45:21 executing program 1: r0 = socket(0x10, 0x3, 0x40006) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/199, 0xc7}], 0x1) openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x80800, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000240)={'bond_slave_1\x00', {0x2, 0x4e24, @private=0xa010101}}) getsockopt$sock_int(r1, 0x1, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 09:45:21 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0x4d, 0x20004880, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e26, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRESDEC=r4, @ANYRES16, @ANYBLOB="02f1294aebf069511563ded59d4ace94adc9e8f5a936457a8ba4a3c9ec7918894c778ef8a448f87a2e211a681a3ec17df25c0c030362508d23977808b6088bce1df92cc91efe644b0cd47f43b1c3e03ee59d02c6e9efc6be9b3402be9e8a0c3593839afa6be2de16f7f305d3e46502560c7eb9c20d68e02bb1dfd8b4", @ANYRESOCT, @ANYBLOB="333c956e9b53e853d7008dd5e2d1b935cd1819b0ba8e5ba46bd7704f82ccc554011a29e658382fd0fee3979d9af81fb1", @ANYRES16, @ANYRES64], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) 09:45:22 executing program 4: r0 = getpgrp(0x0) syz_open_procfs(0x0, 0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8}, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$cont(0x1f, r0, 0x9, 0xdc4) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$FUSE_ENTRY(r1, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x90) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0xb2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x0, 0x0, 0x10000101) 09:45:22 executing program 1: r0 = socket(0x10, 0x5, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:45:22 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x2, 0x1, 0x6, 0x1}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) write$P9_RREADDIR(r6, &(0x7f0000000040)={0x2a, 0x29, 0x1, {0x10001, [{{0x0, 0x0, 0x6}, 0x6, 0x8, 0x7, './file0'}]}}, 0x2a) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$MON_IOCQ_RING_SIZE(r7, 0x9205) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:45:22 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1410c2, 0x0) ftruncate(r2, 0x88001) write$P9_RXATTRCREATE(r2, &(0x7f0000000040)={0x3ba}, 0x7) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000240)={0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x2], 0x1, 0x800, r3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x7, 0x8, 0x0], 0x4, 0x800, r3}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) 09:45:22 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000140)={0x7, 0x4}) [ 1961.887605] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1961.934101] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:45:22 executing program 1: fcntl$setsig(0xffffffffffffffff, 0xa, 0x1d) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0x4) r1 = socket(0x1a, 0x7, 0x6) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) [ 1962.729942] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1963.004610] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1963.010527] CPU: 1 PID: 6346 Comm: syz-fuzzer Not tainted 4.14.177-syzkaller #0 [ 1963.017987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1963.027337] Call Trace: [ 1963.029927] dump_stack+0x13e/0x194 [ 1963.033549] dump_header+0x178/0x6d4 [ 1963.037270] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1963.042286] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1963.047425] ? ___ratelimit+0x50/0x519 [ 1963.051754] oom_kill_process.cold+0x10/0xae3 [ 1963.056266] ? lock_downgrade+0x6e0/0x6e0 [ 1963.060428] out_of_memory+0x2d5/0x1110 [ 1963.064411] ? oom_killer_disable+0x1c0/0x1c0 [ 1963.068916] ? mutex_trylock+0x152/0x1a0 [ 1963.072978] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1963.077838] ? warn_alloc+0xf0/0xf0 [ 1963.081473] __alloc_pages_nodemask+0x5d3/0x700 [ 1963.086141] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1963.091168] ? lock_downgrade+0x6e0/0x6e0 [ 1963.095321] alloc_pages_current+0xe7/0x1e0 [ 1963.099640] __page_cache_alloc+0x245/0x3d0 [ 1963.103969] filemap_fault+0xc18/0x1c50 [ 1963.107947] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1963.112622] ? lock_acquire+0x170/0x3f0 [ 1963.116597] ? ext4_filemap_fault+0x7c/0xb0 [ 1963.120925] ext4_filemap_fault+0x84/0xb0 [ 1963.125073] __do_fault+0xfa/0x380 [ 1963.129233] __handle_mm_fault+0x22e9/0x3280 [ 1963.133656] ? copy_page_range+0x1d70/0x1d70 [ 1963.138090] ? find_held_lock+0x2d/0x110 [ 1963.142173] handle_mm_fault+0x288/0x7a0 [ 1963.146246] __do_page_fault+0x4bc/0xb40 [ 1963.150662] ? vmalloc_fault+0xdf0/0xdf0 [ 1963.154984] ? do_page_fault+0x60/0x4f2 [ 1963.158953] ? page_fault+0x2f/0x50 [ 1963.162582] page_fault+0x45/0x50 [ 1963.166031] RIP: 00ff:0x33 [ 1963.168968] RSP: 715c1d:000000c43f12b040 EFLAGS: ffffffffffffff [ 1963.209395] Mem-Info: [ 1963.229452] active_anon:240503 inactive_anon:1092223 isolated_anon:0 [ 1963.229452] active_file:23 inactive_file:24 isolated_file:3 [ 1963.229452] unevictable:24125 dirty:0 writeback:0 unstable:0 [ 1963.229452] slab_reclaimable:15743 slab_unreclaimable:118329 [ 1963.229452] mapped:60139 shmem:22136 pagetables:10608 bounce:0 [ 1963.229452] free:25026 free_pcp:22 free_cma:0 [ 1963.263720] Node 0 active_anon:921352kB inactive_anon:792684kB active_file:16kB inactive_file:12kB unevictable:77884kB isolated(anon):0kB isolated(file):0kB mapped:226316kB dirty:0kB writeback:0kB shmem:51452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1963.293415] Node 1 active_anon:40660kB inactive_anon:3576208kB active_file:76kB inactive_file:84kB unevictable:18616kB isolated(anon):0kB isolated(file):12kB mapped:14240kB dirty:0kB writeback:0kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1963.323112] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:432kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1963.350150] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1963.355204] Node 0 DMA32 free:36172kB min:36272kB low:45340kB high:54408kB active_anon:920920kB inactive_anon:790576kB active_file:12kB inactive_file:16kB unevictable:77828kB writepending:0kB present:3129332kB managed:2621260kB mlocked:77828kB kernel_stack:9120kB pagetables:13436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1963.385564] lowmem_reserve[]: 0 0 0 0 0 [ 1963.399910] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1963.426456] lowmem_reserve[]: 0 0 0 0 0 [ 1963.430573] Node 1 Normal free:53772kB min:53612kB low:67012kB high:80412kB active_anon:40660kB inactive_anon:3576208kB active_file:156kB inactive_file:224kB unevictable:18616kB writepending:0kB present:3932160kB managed:3870192kB mlocked:18616kB kernel_stack:8192kB pagetables:28952kB bounce:0kB free_pcp:640kB local_pcp:428kB free_cma:0kB [ 1963.469855] lowmem_reserve[]: 0 0 0 0 0 [ 1963.479593] Node 0 DMA: 14*4kB (ME) 1*8kB (M) 3*16kB (UE) 11*32kB (UME) 12*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10448kB [ 1963.502334] Node 0 DMA32: 1339*4kB (UME) 250*8kB (UME) 507*16kB (UME) 576*32kB (UME) 36*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36204kB [ 1963.521295] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1963.532244] Node 1 Normal: 12*4kB (UME) 12*8kB (U) 3*16kB (ME) 222*32kB (UME) 94*64kB (UME) 60*128kB (UME) 40*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 53760kB [ 1963.554566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1963.564885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1963.578211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1963.589517] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1963.602340] 24421 total pagecache pages [ 1963.612030] 0 pages in swap cache [ 1963.623312] Swap cache stats: add 0, delete 0, find 0/0 [ 1963.630494] Free swap = 0kB [ 1963.633607] Total swap = 0kB [ 1963.639843] 1965979 pages RAM [ 1963.643160] 0 pages HighMem/MovableOnly [ 1963.648076] 339053 pages reserved [ 1963.651665] 0 pages cma reserved [ 1963.655017] Out of memory: Kill process 25572 (syz-executor.2) score 1008 or sacrifice child [ 1963.663693] Killed process 25581 (syz-executor.2) total-vm:74968kB, anon-rss:420kB, file-rss:34816kB, shmem-rss:0kB [ 1963.691698] oom_reaper: reaped process 25581 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1964.278138] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1964.353254] in:imklog cpuset=/ mems_allowed=0-1 [ 1964.374567] CPU: 0 PID: 6031 Comm: in:imklog Not tainted 4.14.177-syzkaller #0 [ 1964.381981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1964.391861] Call Trace: [ 1964.394467] dump_stack+0x13e/0x194 [ 1964.398217] dump_header+0x178/0x6d4 [ 1964.401944] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1964.406974] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1964.412087] ? ___ratelimit+0x50/0x519 [ 1964.415988] oom_kill_process.cold+0x10/0xae3 [ 1964.420490] ? lock_acquire+0x170/0x3f0 [ 1964.424475] ? lock_downgrade+0x6e0/0x6e0 [ 1964.428633] out_of_memory+0x2d5/0x1110 [ 1964.432617] ? oom_killer_disable+0x1c0/0x1c0 [ 1964.437206] ? mutex_trylock+0x152/0x1a0 [ 1964.441271] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1964.446132] ? warn_alloc+0xf0/0xf0 [ 1964.449787] __alloc_pages_nodemask+0x5d3/0x700 [ 1964.454467] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1964.459615] ? lock_downgrade+0x6e0/0x6e0 [ 1964.463775] alloc_pages_current+0xe7/0x1e0 [ 1964.468110] __page_cache_alloc+0x245/0x3d0 [ 1964.472444] filemap_fault+0xc18/0x1c50 [ 1964.476433] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1964.481110] ? lock_acquire+0x170/0x3f0 [ 1964.485090] ? ext4_filemap_fault+0x7c/0xb0 [ 1964.489423] ext4_filemap_fault+0x84/0xb0 [ 1964.493576] __do_fault+0xfa/0x380 [ 1964.497130] __handle_mm_fault+0x22e9/0x3280 [ 1964.501551] ? copy_page_range+0x1d70/0x1d70 [ 1964.506490] ? find_held_lock+0x2d/0x110 [ 1964.510572] handle_mm_fault+0x288/0x7a0 [ 1964.514646] __do_page_fault+0x4bc/0xb40 [ 1964.518720] ? vmalloc_fault+0xdf0/0xdf0 [ 1964.522795] ? do_page_fault+0x60/0x4f2 [ 1964.526780] ? page_fault+0x2f/0x50 [ 1964.530412] page_fault+0x45/0x50 [ 1964.533867] RIP: 266afda3:0x1f9f [ 1964.537225] RSP: 1c002080:00007fe0266af4b8 EFLAGS: 7fe0266afda0 [ 1964.915767] Mem-Info: [ 1964.924379] active_anon:240429 inactive_anon:1092209 isolated_anon:0 [ 1964.924379] active_file:3 inactive_file:10 isolated_file:29 [ 1964.924379] unevictable:24492 dirty:0 writeback:0 unstable:0 [ 1964.924379] slab_reclaimable:15735 slab_unreclaimable:117991 [ 1964.924379] mapped:60565 shmem:22136 pagetables:10531 bounce:0 [ 1964.924379] free:24966 free_pcp:365 free_cma:0 [ 1965.043235] Node 0 active_anon:921336kB inactive_anon:792720kB active_file:4388kB inactive_file:1424kB unevictable:69720kB isolated(anon):0kB isolated(file):256kB mapped:221900kB dirty:0kB writeback:0kB shmem:51452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1965.078237] Node 1 active_anon:40380kB inactive_anon:3576204kB active_file:312kB inactive_file:616kB unevictable:52kB isolated(anon):0kB isolated(file):4kB mapped:11096kB dirty:0kB writeback:0kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1965.116211] Node 0 DMA free:10472kB min:220kB low:272kB high:324kB active_anon:432kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1965.151605] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1965.161133] Node 0 DMA32 free:44196kB min:36272kB low:45340kB high:54408kB active_anon:920904kB inactive_anon:790588kB active_file:300kB inactive_file:340kB unevictable:69816kB writepending:0kB present:3129332kB managed:2621260kB mlocked:69816kB kernel_stack:9120kB pagetables:13432kB bounce:0kB free_pcp:1048kB local_pcp:424kB free_cma:0kB [ 1965.236364] lowmem_reserve[]: 0 0 0 0 0 [ 1965.240861] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1965.276002] lowmem_reserve[]: 0 0 0 0 0 [ 1965.281333] Node 1 Normal free:70388kB min:53612kB low:67012kB high:80412kB active_anon:40380kB inactive_anon:3576488kB active_file:924kB inactive_file:1356kB unevictable:64kB writepending:4kB present:3932160kB managed:3870192kB mlocked:44kB kernel_stack:7904kB pagetables:28652kB bounce:0kB free_pcp:740kB local_pcp:76kB free_cma:0kB [ 1965.314262] lowmem_reserve[]: 0 0 0 0 0 [ 1965.321519] Node 0 DMA: 2*4kB (ME) 9*8kB (U) 4*16kB (UE) 11*32kB (UME) 12*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10480kB [ 1965.349521] Node 0 DMA32: 1983*4kB (UME) 937*8kB (UME) 552*16kB (UME) 580*32kB (UME) 37*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45188kB [ 1965.368601] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1965.381316] Node 1 Normal: 21*4kB (UE) 54*8kB (UM) 253*16kB (UME) 344*32kB (UME) 138*64kB (UME) 68*128kB (UME) 43*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 66644kB [ 1965.420800] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1965.445547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1965.474917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1965.493964] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1965.511994] 23772 total pagecache pages [ 1965.516447] 0 pages in swap cache [ 1965.519985] Swap cache stats: add 0, delete 0, find 0/0 [ 1965.525423] Free swap = 0kB [ 1965.528584] Total swap = 0kB [ 1965.531700] 1965979 pages RAM [ 1965.534885] 0 pages HighMem/MovableOnly [ 1965.539006] 339053 pages reserved [ 1965.542546] 0 pages cma reserved [ 1965.546790] Out of memory: Kill process 25572 (syz-executor.2) score 1008 or sacrifice child 09:45:26 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) fsetxattr$security_selinux(r1, &(0x7f0000000140)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:systemd_logind_sessions_t:s0\x00', 0x2f, 0x2) 09:45:26 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r1 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x80800) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000080)=0x44) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) sendmsg$netlink(r5, &(0x7f0000028fc8)={0x0, 0x5f, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:45:26 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x9c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) 09:45:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2302, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_COMPAT_NAME={0xe, 0x1, '/dev/ptmx\x00'}, @NFTA_COMPAT_NAME={0xe, 0x1, '/dev/ptmx\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 09:45:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x478, 0xa0, 0x138, 0x2f8, 0x0, 0xa0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x10000, @broadcast, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@remote, @remote, 0xff, 0xff000000, 'caif0\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x4, 0x1, 0x5a}, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00', 0x0, 0x8, 0x1, 0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xffffffff, 0x6, @private=0xa010102, 0x4e22}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'netpci0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x6c}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="c67da1c62345", 0x101, 0xe, [0xc, 0x17, 0x27, 0x30, 0x1f, 0x22, 0xe, 0xd, 0xb, 0x28, 0x20, 0x1f, 0x2a, 0x40, 0xa, 0x2b], 0x1, 0xfffffffb, 0xffffffffffffffff}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xff, 0xffffff00, 'veth0_to_bond\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x0, 0x2, 0xa}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) [ 1966.683315] net_ratelimit: 168 callbacks suppressed [ 1966.683320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1966.696317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1966.698320] ip_tables: iptables: counters copy to user failed while replacing table [ 1966.704000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1966.724588] x_tables: ip_tables: TPROXY target: used from hooks OUTPUT, but only usable from PREROUTING [ 1966.739478] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1966.746016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1966.766551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1966.775848] SELinux: Context system_u:object_r:systemd_logind_sessions_t:s0 is not valid (left unmapped). [ 1966.783874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1966.794850] ip_tables: iptables: counters copy to user failed while replacing table [ 1966.805901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1966.823635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:45:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) write(r4, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x8, 0x9, 0x6, 0xd9}, 0x14) r6 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) [ 1966.831450] audit: type=1400 audit(1588412727.136:54): avc: denied { relabelto } for pid=25601 comm="syz-executor.1" name="TCP" dev="sockfs" ino=73550 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 [ 1966.835001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:45:27 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) unshare(0x8020400) [ 1967.222501] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1968.299729] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1968.382093] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1968.405554] CPU: 1 PID: 6344 Comm: syz-fuzzer Not tainted 4.14.177-syzkaller #0 [ 1968.413056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1968.422431] Call Trace: [ 1968.425034] dump_stack+0x13e/0x194 [ 1968.428679] dump_header+0x178/0x6d4 [ 1968.432398] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1968.437426] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1968.442564] ? ___ratelimit+0x50/0x519 [ 1968.446486] oom_kill_process.cold+0x10/0xae3 [ 1968.451091] ? lock_acquire+0x170/0x3f0 [ 1968.455182] ? lock_downgrade+0x6e0/0x6e0 [ 1968.459349] out_of_memory+0x2d5/0x1110 [ 1968.463384] ? oom_killer_disable+0x1c0/0x1c0 [ 1968.467895] ? mutex_trylock+0x152/0x1a0 [ 1968.472853] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1968.477714] ? warn_alloc+0xf0/0xf0 [ 1968.481360] __alloc_pages_nodemask+0x5d3/0x700 [ 1968.486039] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1968.491063] ? lock_downgrade+0x6e0/0x6e0 [ 1968.495222] alloc_pages_current+0xe7/0x1e0 [ 1968.499556] __page_cache_alloc+0x245/0x3d0 [ 1968.503902] filemap_fault+0xc18/0x1c50 [ 1968.507913] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1968.512617] ? lock_acquire+0x170/0x3f0 [ 1968.516601] ? ext4_filemap_fault+0x7c/0xb0 [ 1968.520948] ext4_filemap_fault+0x84/0xb0 [ 1968.525108] __do_fault+0xfa/0x380 [ 1968.528662] __handle_mm_fault+0x22e9/0x3280 [ 1968.533080] ? copy_page_range+0x1d70/0x1d70 [ 1968.537498] ? find_held_lock+0x2d/0x110 [ 1968.541580] handle_mm_fault+0x288/0x7a0 [ 1968.546086] __do_page_fault+0x4bc/0xb40 [ 1968.550252] ? vmalloc_fault+0xdf0/0xdf0 [ 1968.554409] ? do_page_fault+0x60/0x4f2 [ 1968.558482] ? page_fault+0x2f/0x50 [ 1968.562123] page_fault+0x45/0x50 [ 1968.565574] RIP: 00f1:0x11 [ 1968.568411] RSP: 000c:000000c42004ff18 EFLAGS: 0042f0a0 [ 1968.609231] Mem-Info: [ 1968.658306] active_anon:240449 inactive_anon:1092209 isolated_anon:0 [ 1968.658306] active_file:26 inactive_file:20 isolated_file:0 [ 1968.658306] unevictable:25044 dirty:0 writeback:0 unstable:0 [ 1968.658306] slab_reclaimable:15735 slab_unreclaimable:117652 [ 1968.658306] mapped:61084 shmem:22136 pagetables:10551 bounce:0 [ 1968.658306] free:24980 free_pcp:1 free_cma:0 [ 1968.815086] Node 0 active_anon:921460kB inactive_anon:792696kB active_file:80kB inactive_file:12kB unevictable:81284kB isolated(anon):0kB isolated(file):0kB mapped:225740kB dirty:0kB writeback:0kB shmem:51464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1968.880995] Node 1 active_anon:40336kB inactive_anon:3576140kB active_file:4kB inactive_file:68kB unevictable:18892kB isolated(anon):0kB isolated(file):0kB mapped:18596kB dirty:0kB writeback:0kB shmem:37080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1969.056955] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:444kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:252kB writepending:0kB present:15992kB managed:15908kB mlocked:252kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1969.114949] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1969.120219] Node 0 DMA32 free:35928kB min:36272kB low:45340kB high:54408kB active_anon:921016kB inactive_anon:790588kB active_file:36kB inactive_file:264kB unevictable:81320kB writepending:0kB present:3129332kB managed:2621260kB mlocked:81344kB kernel_stack:9184kB pagetables:13532kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1969.153075] lowmem_reserve[]: 0 0 0 0 0 [ 1969.157232] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1969.182832] lowmem_reserve[]: 0 0 0 0 0 [ 1969.186913] Node 1 Normal free:53264kB min:53612kB low:67012kB high:80412kB active_anon:40336kB inactive_anon:3576140kB active_file:28kB inactive_file:0kB unevictable:18972kB writepending:0kB present:3932160kB managed:3870192kB mlocked:18972kB kernel_stack:7904kB pagetables:28632kB bounce:0kB free_pcp:464kB local_pcp:44kB free_cma:0kB [ 1969.220763] lowmem_reserve[]: 0 0 0 0 0 [ 1969.224804] Node 0 DMA: 4*4kB (ME) 12*8kB (U) 8*16kB (UE) 13*32kB (UME) 9*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10448kB [ 1969.242914] Node 0 DMA32: 1328*4kB (UME) 562*8kB (UME) 411*16kB (UME) 540*32kB (UME) 38*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36096kB [ 1969.265804] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1969.286252] Node 1 Normal: 125*4kB (UME) 10*8kB (UM) 8*16kB (UME) 196*32kB (UME) 93*64kB (UME) 60*128kB (UME) 41*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 53636kB [ 1969.379422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1969.436142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1969.444781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1969.519998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1969.573704] 25451 total pagecache pages [ 1969.596669] 0 pages in swap cache [ 1969.600164] Swap cache stats: add 0, delete 0, find 0/0 [ 1969.605530] Free swap = 0kB [ 1969.664515] Total swap = 0kB [ 1969.687721] 1965979 pages RAM [ 1969.690868] 0 pages HighMem/MovableOnly [ 1969.694834] 339053 pages reserved [ 1969.750874] 0 pages cma reserved [ 1969.754326] Out of memory: Kill process 25606 (syz-executor.2) score 1008 or sacrifice child [ 1969.823810] Killed process 25609 (syz-executor.2) total-vm:75100kB, anon-rss:18032kB, file-rss:47848kB, shmem-rss:0kB [ 1969.872733] oom_reaper: reaped process 25609 (syz-executor.2), now anon-rss:18016kB, file-rss:13096kB, shmem-rss:0kB 09:45:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:45:30 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000114010025bd7000fedbdf2508000100000000000800010002000000e3285db9aeecb63d080001000100000008000100010000000800010000000000080001b36e0bd8a585058900020001178587e004aad79b56f82559e27d22fb0e9f7313d1d8b666ab0b36c6f29cc26d229f75d4b9253884e52348f2f0ea8c3036185407abb5ab3325a40f9298e698a389f6a18b78ba0f37c09870b4d9645f88387ccc03f2a64151f6912df9814a497f0daa4804dfbe6c733be4002697e0b9127d3b68ccc783250702f4ca9b30f5eef523dc1a78d1b63a293de3e1c8dde00337fd35aac6a1734a439f0794ad6ff2459e"], 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) 09:45:30 executing program 1: r0 = socket(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r2, 0xffff8001}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r2, 0x31, "7c42b7f5a58e61c6f6f2cc26563ab3b517a6541b500b07aee9b1a1eda4b134db0bf327a0f59520c0c66fc392f32df3629b"}, &(0x7f00000001c0)=0x39) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:45:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f00000000c0)={0x1, 0x40, &(0x7f0000000000)="5053eedeef405d3ac1b40d2371910ccd382bf044f9fd773d13ef3dee13f4446ea1e3997e190f41b9f2edb3fb24ccb1ff7ca4b3511acd5286aed7436c2b5d4bde58dcf24b444047f289c3debbe535a2e64b47723eff174aec7d64ab3a45f6f98ef0155753cfd2363d044daa5f1c57cd2425396720a5767ccf4d4b6192ae8afd7ebd3baa122160f8c6ac313790c98e8da57ee4c67793eff3a0e4256d6a61a686b4ea2b93", {0x7f, 0x58f6, 0x30314752, 0x1, 0x9, 0x2, 0x7}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:45:30 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e27, @remote}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) getsockopt$inet_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000000)=""/10, &(0x7f0000000040)=0xa) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$input_event(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xea60}, 0x1, 0x0, 0xffff}, 0x18) r5 = dup2(r4, r2) sendmsg$netlink(r5, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)}, 0x0) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:45:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000100)={'veth0_to_team\x00', 0x6, 0x400}) [ 1970.304637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:45:30 executing program 0: socket$inet6(0xa, 0x4, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) accept(0xffffffffffffffff, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f0000000080)=0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x200400, 0x0) r3 = dup2(0xffffffffffffffff, r2) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) [ 1970.366041] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:45:30 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x9, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000280)) r1 = socket(0x1e, 0x3, 0x6) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1971.925062] modprobe invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1972.038012] modprobe cpuset=/ mems_allowed=0-1 [ 1972.053357] CPU: 1 PID: 25658 Comm: modprobe Not tainted 4.14.177-syzkaller #0 [ 1972.060749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1972.070100] Call Trace: [ 1972.072700] dump_stack+0x13e/0x194 [ 1972.076340] dump_header+0x178/0x6d4 [ 1972.080092] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1972.085111] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1972.090214] ? ___ratelimit+0x50/0x519 [ 1972.094104] oom_kill_process.cold+0x10/0xae3 [ 1972.098610] ? lock_downgrade+0x6e0/0x6e0 [ 1972.102767] out_of_memory+0x2d5/0x1110 [ 1972.106779] ? oom_killer_disable+0x1c0/0x1c0 [ 1972.111284] ? mutex_trylock+0x152/0x1a0 [ 1972.115346] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1972.120208] ? warn_alloc+0xf0/0xf0 [ 1972.123850] __alloc_pages_nodemask+0x5d3/0x700 [ 1972.128540] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1972.133577] ? lock_downgrade+0x6e0/0x6e0 [ 1972.137734] alloc_pages_current+0xe7/0x1e0 [ 1972.142061] __page_cache_alloc+0x245/0x3d0 [ 1972.146391] filemap_fault+0xc18/0x1c50 [ 1972.150386] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1972.155054] ? lock_acquire+0x170/0x3f0 [ 1972.159034] ? ext4_filemap_fault+0x7c/0xb0 [ 1972.163375] ext4_filemap_fault+0x84/0xb0 [ 1972.167530] __do_fault+0xfa/0x380 [ 1972.171083] __handle_mm_fault+0x22e9/0x3280 [ 1972.175500] ? copy_page_range+0x1d70/0x1d70 [ 1972.179917] ? find_held_lock+0x2d/0x110 [ 1972.184004] handle_mm_fault+0x288/0x7a0 [ 1972.188075] __do_page_fault+0x4bc/0xb40 [ 1972.192159] ? vmalloc_fault+0xdf0/0xdf0 [ 1972.196222] ? do_page_fault+0x60/0x4f2 [ 1972.200198] ? page_fault+0x2f/0x50 [ 1972.203829] page_fault+0x45/0x50 [ 1972.207290] RIP: 0000:0x55a17e818068 [ 1972.211001] RSP: 0000:000055a17e610e99 EFLAGS: 00000000 [ 1973.038498] Mem-Info: [ 1973.055880] active_anon:240660 inactive_anon:1092225 isolated_anon:0 [ 1973.055880] active_file:46 inactive_file:21 isolated_file:0 [ 1973.055880] unevictable:24643 dirty:0 writeback:0 unstable:0 [ 1973.055880] slab_reclaimable:15726 slab_unreclaimable:117670 [ 1973.055880] mapped:60695 shmem:22136 pagetables:10644 bounce:0 [ 1973.055880] free:25043 free_pcp:0 free_cma:0 [ 1973.141473] Node 0 active_anon:921948kB inactive_anon:792688kB active_file:92kB inactive_file:0kB unevictable:81096kB isolated(anon):0kB isolated(file):0kB mapped:227044kB dirty:4kB writeback:0kB shmem:51452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1973.169976] Node 1 active_anon:40692kB inactive_anon:3576212kB active_file:52kB inactive_file:0kB unevictable:17544kB isolated(anon):0kB isolated(file):0kB mapped:15764kB dirty:0kB writeback:0kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1973.198152] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:432kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:352kB writepending:0kB present:15992kB managed:15908kB mlocked:352kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1973.225369] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1973.230525] Node 0 DMA32 free:36216kB min:36272kB low:45340kB high:54408kB active_anon:921516kB inactive_anon:790580kB active_file:124kB inactive_file:12kB unevictable:80744kB writepending:0kB present:3129332kB managed:2621260kB mlocked:80744kB kernel_stack:9184kB pagetables:13624kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1973.270209] lowmem_reserve[]: 0 0 0 0 0 [ 1973.274254] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1973.376305] lowmem_reserve[]: 0 0 0 0 0 [ 1973.391203] Node 1 Normal free:53168kB min:53612kB low:67012kB high:80412kB active_anon:40692kB inactive_anon:3588308kB active_file:576kB inactive_file:3156kB unevictable:1920kB writepending:0kB present:3932160kB managed:3870192kB mlocked:2012kB kernel_stack:8096kB pagetables:28912kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1973.447647] lowmem_reserve[]: 0 0 0 0 0 [ 1973.490971] Node 0 DMA: 16*4kB (UME) 4*8kB (UM) 10*16kB (UME) 18*32kB (UME) 8*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10560kB 09:45:33 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0xfb, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffa000/0x4000)=nil) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000340)) 09:45:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x266040, 0x0) getsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) [ 1973.614531] Node 0 DMA32: 1703*4kB (UME) 443*8kB (UME) 575*16kB (UME) 572*32kB (UME) 43*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40612kB 09:45:34 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0xffffffffffffffff, 0x460380, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x200000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000280)={0x1, r1}) r2 = socket(0x10, 0x3, 0x6) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) write$P9_RFLUSH(r3, &(0x7f0000000140)={0x7, 0x6d, 0x2}, 0x7) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x2a00, 0x0) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1973.664128] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1973.707013] Node 1 Normal: 365*4kB (UME) 562*8kB (UM) 269*16kB (UME) 252*32kB (UME) 153*64kB (UME) 59*128kB (UE) 45*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 69716kB [ 1973.751381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1973.764146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1973.773313] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1973.785085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1973.798145] 23366 total pagecache pages [ 1973.802374] 0 pages in swap cache [ 1973.806436] Swap cache stats: add 0, delete 0, find 0/0 [ 1973.811982] Free swap = 0kB [ 1973.816473] Total swap = 0kB [ 1973.819648] 1965979 pages RAM [ 1973.823651] 0 pages HighMem/MovableOnly [ 1973.828651] 339053 pages reserved [ 1973.833346] 0 pages cma reserved [ 1973.840128] Out of memory: Kill process 25640 (syz-executor.2) score 1008 or sacrifice child [ 1974.414065] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1974.486933] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1974.491750] CPU: 1 PID: 6344 Comm: syz-fuzzer Not tainted 4.14.177-syzkaller #0 [ 1974.499193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1974.508649] Call Trace: [ 1974.511251] dump_stack+0x13e/0x194 [ 1974.514888] dump_header+0x178/0x6d4 [ 1974.518601] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1974.523612] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1974.528709] ? ___ratelimit+0x50/0x519 [ 1974.532606] oom_kill_process.cold+0x10/0xae3 [ 1974.537099] ? lock_acquire+0x170/0x3f0 [ 1974.541069] ? lock_downgrade+0x6e0/0x6e0 [ 1974.545213] out_of_memory+0x2d5/0x1110 [ 1974.549186] ? oom_killer_disable+0x1c0/0x1c0 [ 1974.553676] ? mutex_trylock+0x152/0x1a0 [ 1974.557746] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1974.562599] ? warn_alloc+0xf0/0xf0 [ 1974.566231] __alloc_pages_nodemask+0x5d3/0x700 [ 1974.570898] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1974.575911] ? lock_downgrade+0x6e0/0x6e0 [ 1974.580057] alloc_pages_current+0xe7/0x1e0 [ 1974.584369] __page_cache_alloc+0x245/0x3d0 [ 1974.588688] filemap_fault+0xc18/0x1c50 [ 1974.592660] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1974.597324] ? lock_acquire+0x170/0x3f0 [ 1974.601293] ? ext4_filemap_fault+0x7c/0xb0 [ 1974.605611] ext4_filemap_fault+0x84/0xb0 [ 1974.609769] __do_fault+0xfa/0x380 [ 1974.613300] __handle_mm_fault+0x22e9/0x3280 [ 1974.617705] ? copy_page_range+0x1d70/0x1d70 [ 1974.622106] ? find_held_lock+0x2d/0x110 [ 1974.626172] handle_mm_fault+0x288/0x7a0 [ 1974.630230] __do_page_fault+0x4bc/0xb40 [ 1974.634293] ? vmalloc_fault+0xdf0/0xdf0 [ 1974.638366] ? do_page_fault+0x60/0x4f2 [ 1974.642344] ? page_fault+0x2f/0x50 [ 1974.645961] page_fault+0x45/0x50 [ 1974.649404] RIP: 00f1:0x11 [ 1974.652235] RSP: 000c:000000c42004ff20 EFLAGS: 0042f0a0 [ 1974.771410] Mem-Info: [ 1974.788147] active_anon:240716 inactive_anon:1092210 isolated_anon:0 [ 1974.788147] active_file:335 inactive_file:472 isolated_file:19 [ 1974.788147] unevictable:17416 dirty:0 writeback:0 unstable:0 [ 1974.788147] slab_reclaimable:15726 slab_unreclaimable:117402 [ 1974.788147] mapped:58071 shmem:22136 pagetables:10644 bounce:0 [ 1974.788147] free:31072 free_pcp:609 free_cma:0 [ 1974.823481] Node 0 active_anon:922016kB inactive_anon:792684kB active_file:340kB inactive_file:444kB unevictable:69660kB isolated(anon):0kB isolated(file):76kB mapped:221584kB dirty:0kB writeback:0kB shmem:51452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1974.856178] Node 1 active_anon:40848kB inactive_anon:3576156kB active_file:1228kB inactive_file:1272kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:12200kB dirty:0kB writeback:0kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1974.884983] Node 0 DMA free:10496kB min:220kB low:272kB high:324kB active_anon:444kB inactive_anon:2108kB active_file:96kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1974.915332] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1974.936994] Node 0 DMA32 free:43420kB min:36272kB low:45340kB high:54408kB active_anon:921572kB inactive_anon:790576kB active_file:356kB inactive_file:0kB unevictable:69976kB writepending:0kB present:3129332kB managed:2621260kB mlocked:69796kB kernel_stack:9152kB pagetables:13660kB bounce:0kB free_pcp:1416kB local_pcp:676kB free_cma:0kB [ 1975.016439] lowmem_reserve[]: 0 0 0 0 0 [ 1975.030932] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 09:45:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@int=0x5, 0x4) fcntl$notify(r1, 0x402, 0x80000010) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) [ 1975.135682] lowmem_reserve[]: 0 0 0 0 0 [ 1975.155682] Node 1 Normal free:67488kB min:53612kB low:67012kB high:80412kB active_anon:40840kB inactive_anon:3576156kB active_file:5116kB inactive_file:5112kB unevictable:0kB writepending:52kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8000kB pagetables:28828kB bounce:0kB free_pcp:1068kB local_pcp:604kB free_cma:0kB [ 1975.241387] net_ratelimit: 177 callbacks suppressed [ 1975.241392] ip_tables: iptables: counters copy to user failed while replacing table [ 1975.314687] lowmem_reserve[]: 0 0 0 0 0 [ 1975.347943] Node 0 DMA: 6*4kB (ME) 7*8kB (UM) 4*16kB (UME) 13*32kB (UME) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10480kB [ 1975.430495] Node 0 DMA32: 2355*4kB (UME) 733*8kB (UME) 172*16kB (UME) 596*32kB (UME) 48*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40180kB [ 1975.469679] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1975.495786] Node 1 Normal: 319*4kB (UME) 211*8kB (UM) 160*16kB (UME) 293*32kB (UME) 198*64kB (UME) 80*128kB (UME) 40*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 70580kB [ 1975.560851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1975.571475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1975.600059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1975.633596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1975.647291] 23851 total pagecache pages [ 1975.653604] 0 pages in swap cache [ 1975.661720] Swap cache stats: add 0, delete 0, find 0/0 [ 1975.669967] Free swap = 0kB [ 1975.673377] Total swap = 0kB [ 1975.680462] 1965979 pages RAM [ 1975.685435] 0 pages HighMem/MovableOnly [ 1975.690878] 339053 pages reserved [ 1975.694346] 0 pages cma reserved [ 1975.701397] Out of memory: Kill process 25676 (syz-executor.2) score 1009 or sacrifice child [ 1977.941046] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:45:46 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffdbe}], 0x4}, 0x4}], 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:45:46 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f00000004c0)="baa52b59895e349a737234a60d89390f04b99a6e0ebccd36fb1a62f745ef0f26b9068c5b92f9a66aa8bc1ae120868880f7e1c37084602a5809d4e81951f2ae541d95bfa074fdfbf5b909816dcda46db30062be19099e6f620eb480fe69e9e7a55063e934f99fb38484fecde2089722f254ef06a70b6405b04b2062b446734c4436366ebe0070750d9bc179daba788b763ecd1c979b38a44d7c58d3afac7f88894a1b1e66417f9d38b53e4a50d95bc0", 0xaf) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000140)="b6b3a5b8fd901e3541fe66ec1e2237cd545571f6587e0c72", &(0x7f00000001c0)=""/251, &(0x7f00000002c0)="6756a27eaced540b7986a1f73cd60438e0d985087d3a9ef453e5295f9209daffbf173f90d865bcebf11bdffef069892ed0cd9ecc2b5ee74f635a50b93f6659c0c1959db3215b862f8f0848d21583957d849df36831d5b7cd14b8b8a4b515d89bbdad7c332906327df45631a38e579abe83905e97f28aa64d08491ab3e03eca6498dca9f75f6e4e110c64b3c8f006a0a9842c002b2badaf69dc893149ff54d524086d88e6ce24980514df7bd929a4ba433fc9889dd5802caf8f7188d1", &(0x7f0000000380)="b046666a9814e8ed59b5073540fa874c17d5e7e4afba0a1f1c948ef3d4f597941ef8fee91bfa588e927ff2bd8ac43e11741de30a56eefd98c86fb624fbdb65e2dd052d590365da731eabd491e78205b47e458686a5593b435f4f8a464d53669cc39fcc7bd4764b8a13f3f4d1aeb69267d47ad8e05be34eb60cdea5e9384a485cc7492aee859a46628d0c6a93086d1a3e9187a08ea190e8404ef355d9bddcb09f3c85ba177d89158dcb48c733a530881576878c0a1896aad28c03ba1b3772e268d4b9f6df7905f06e57d6b1fa10d40f352d2394dba0cb1f92602a0a7aadd82bf27f27b29feb699d95e2e9fe41c8791266f52b", 0x6, r1}, 0x38) 09:45:47 executing program 2: mlockall(0x2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000380)=0x4) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000114010025bd7000fedbdf250800010000000000080001000200000008000100000000000800010000000800000000000800010002000000080001000000000008000100020000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) [ 1986.661438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1986.672663] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1986.725475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1986.733792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1986.774997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1986.797340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1986.821596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1986.832992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1986.846696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1986.859933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1986.867781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:45:47 executing program 1: r0 = socket(0x10, 0x2, 0x10000) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000003440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003400)={&(0x7f0000000200)=@newtfilter={0x31d0, 0x2c, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xfff1, 0xc}, {0xf, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3188, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1f}}]}, @TCA_CGROUP_POLICE={0x850, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x401, 0x7, 0x2, 0x100, 0x200, 0x1ff, 0x5, 0x9, 0x800, 0x2, 0x5, 0x9, 0x1, 0x3, 0x1f, 0x4, 0x0, 0x2, 0x5, 0x7ff, 0x2, 0x3, 0xffff, 0x7ff, 0x800, 0x0, 0x10001, 0x1000, 0x81, 0x3, 0x5, 0x6, 0x1, 0x0, 0xdb, 0x7, 0x5, 0x7, 0xd7, 0x0, 0x9c50, 0x10000, 0x5, 0x2, 0x507, 0x800, 0x8, 0x2, 0x7, 0x7f, 0x7f, 0x2, 0x4, 0xffffffb5, 0x2b, 0xffffffff, 0x8, 0x0, 0xfffffffc, 0x6, 0x1, 0xffffffff, 0x9, 0x5, 0x7, 0x9, 0xce, 0x8, 0x6, 0x4, 0x7d, 0x2, 0xfffffffb, 0x5, 0x3, 0x7ff, 0x4, 0x40000, 0x100, 0x1, 0x3, 0x0, 0x9c9, 0x401, 0x7, 0x0, 0x8, 0x3, 0x7f, 0x3, 0xffffffe2, 0x5, 0x80, 0x1, 0x6, 0x464, 0x2, 0x8, 0x7f, 0x1e, 0x3, 0x101, 0xffffffff, 0x0, 0x40, 0xfcc, 0x5, 0xffffffff, 0x1c, 0x40, 0x5a4, 0x1ff, 0x5, 0xba, 0x5, 0xe642, 0x401, 0x2, 0x7, 0x9, 0x4, 0x4d2, 0x3099423f, 0x3, 0x0, 0x8, 0x5, 0x8000, 0xffffffff, 0x3, 0xffffff01, 0x0, 0x4, 0xb8ed, 0x8, 0x0, 0x2, 0x1, 0x6, 0x7, 0x400, 0x2, 0x6, 0x80, 0x8001, 0x1, 0xff, 0x1, 0x4, 0x2a20, 0x81, 0x9d75, 0x1, 0x8, 0x2, 0xffffdb33, 0x2, 0x8b7, 0x9, 0xff8, 0x81, 0x6, 0x2, 0x3f, 0xffff6825, 0x8, 0x3f, 0x2, 0x200, 0x1, 0x200, 0x5, 0x7f, 0x1ff, 0x3, 0x9, 0x60, 0x0, 0x10, 0x0, 0x5, 0x100, 0xffffffff, 0xa22, 0x6, 0x10000, 0x22, 0x4, 0x8, 0x80, 0x38, 0x7, 0x0, 0x400, 0x1d9a, 0x6, 0x401, 0xfffffffb, 0xbd, 0x5, 0x12, 0x10001, 0x4, 0x6, 0xfff, 0x4c3, 0x9, 0x8, 0x3, 0x0, 0x9, 0x2, 0x266e, 0x6, 0xfffffffb, 0x43a, 0x7ff, 0x9, 0x7f, 0xc2, 0x0, 0x258, 0x0, 0x7ff, 0x8, 0x1, 0xb4db, 0x10001, 0xeb, 0x7, 0x2, 0x1, 0x7, 0x2, 0x9, 0x0, 0x7fff, 0x3f, 0x7, 0xffffffe1, 0x7, 0x10001, 0x11, 0xff, 0x5, 0x3f, 0x4, 0x3, 0x8a, 0xc3, 0x0, 0x2, 0x0, 0x3f, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x814, 0x4, 0x0, 0x3f80, 0xe268, 0x4, 0x8, 0x1, 0x8001, 0x4, 0x1, 0x401, 0x6, 0x4, 0x3, 0x81, 0x0, 0x6, 0xf5, 0x7, 0x1, 0x80000, 0x6, 0xb8d, 0xb3, 0x7ff, 0x3ff, 0x7fff, 0x1000, 0x1, 0x9, 0x0, 0xc714, 0x4, 0x4, 0x401, 0x8, 0x4, 0x3b, 0x1ff, 0x2, 0x1, 0x2, 0x7, 0x5, 0x1, 0xffffffff, 0x5, 0x0, 0x7, 0x6, 0xffffaf10, 0x8, 0x80, 0x9, 0x4, 0x1, 0x0, 0xffffffff, 0x5, 0x80000000, 0x8930, 0xe61, 0xf4, 0x10000, 0x6, 0x9, 0x401, 0x4, 0x200, 0xa1db, 0x1, 0xc124, 0x80, 0x0, 0x20, 0x9, 0x7, 0x101, 0x9, 0x1f, 0x6, 0x7fffffff, 0x3, 0xcb2, 0x3, 0x10000, 0x4c5, 0xfc24, 0x1ff, 0x8, 0x7, 0x8, 0x506, 0x7ff, 0x6, 0xffff33e3, 0x3ff, 0x3ff, 0x6, 0x200, 0x3, 0x80, 0x1, 0xfffffffb, 0x4, 0x1, 0x6, 0xfffffca0, 0x8001, 0x101, 0x4cecc388, 0x0, 0xffffffff, 0xffffff80, 0x9c9f, 0x400, 0x15, 0xa45, 0x5, 0x0, 0x6, 0x40, 0x40, 0xdbc, 0x3a, 0x20, 0x6, 0x7, 0x80, 0x1a8, 0x267, 0x6, 0x3, 0x57d, 0x9052, 0x3ff, 0x32000000, 0x7f27, 0x100, 0x4, 0x41c, 0x100, 0x3, 0x10000, 0x1, 0x9, 0x3, 0xffffffff, 0x6ca6, 0x6, 0x5, 0x1000, 0x80000000, 0x8, 0x7, 0x3ff, 0xe371, 0x5, 0x6, 0x80000001, 0x1f, 0x1f, 0x46d1, 0x9c9, 0xfffffffc, 0x6, 0x5, 0x4, 0x0, 0x800, 0x7fffffff, 0x6, 0x101, 0xff, 0xfffffe00, 0x4, 0xbe05, 0x5, 0x4e, 0x8, 0x8, 0x6, 0x42d, 0x6, 0x40, 0x3ff, 0xff6, 0x400, 0x0, 0x200, 0x3, 0x80000000, 0x0, 0x400, 0x1, 0x40, 0x37ac6529, 0x40004, 0x9, 0x80000000, 0x1, 0x4, 0x2, 0x1, 0x2, 0x2, 0xffffd5b9, 0x1ff, 0x1, 0x100, 0x86, 0x9, 0xa3, 0x1, 0x80000001, 0x5, 0x8, 0xd3, 0x7, 0x3ff, 0x94, 0x7, 0x8, 0x100, 0x0, 0x3f, 0x4, 0xcd, 0x5871, 0x4, 0x10000, 0xfc, 0x1, 0x1, 0x8, 0x2, 0x77, 0x4, 0x4, 0x8, 0x5, 0x2, 0x0, 0xfffff000, 0x4, 0x5, 0xe, 0x7fffffff, 0x44b9, 0x6, 0x8001, 0x9c52, 0x7, 0x1, 0x7ff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0x1, 0xe139, 0x40, {0x4, 0x2, 0x3ff, 0x54, 0x1, 0xa59b}, {0x7, 0x0, 0x9, 0x0, 0xffe1, 0x33}, 0xe4ad, 0x401, 0x8000}}]}, @TCA_CGROUP_EMATCHES={0x7c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb0ba}}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x0, 0x9, 0xffc0}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xc}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xc}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x515e}, {0x1, 0xc214, 0x3, 0x89}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x4, 0x3, 0x81}, {0x20, 0x2, 0x6, 0x8001}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_CGROUP_ACT={0x121c, 0x1, [@m_vlan={0xdc, 0xa, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}]}, {0xbf, 0x6, "1fedfec5da58218e36851730aaaf8406e0c0645fdec6f0889bb06c7dfb796ed517051de4b164aa9334ee07b58a325e92d9b19d77f56a199e310a0ca8e0e28d015fe9e795d9e2b329d8040a5f61bae97aea4475af911e029b00ba7a088b9bbb80019bf02d23bee26a9fb0ef0e3539ebbff2f3e501d3647fd3330225f08166db1fece84dbb23fb2a9b7337adb946d1741d5082c0641fe5bfe1699ebdf5a4960f3769b66697c11f32eb2b4e9cc0bc55b8b1724fe2b06639424932924d"}}}, @m_pedit={0xff8, 0x10, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xee4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xee0, 0x2, {{{0xc1, 0x10000, 0x10000000, 0x0, 0x1}, 0x1, 0x5d, [{0x5, 0x3, 0xfffffff7, 0x8001, 0x7fffffff, 0x4}, {0x2, 0xffff, 0xfffffffc, 0x8, 0x6, 0x6}, {0x5, 0x6, 0xa02, 0x1, 0xff, 0x79}, {0x0, 0x4, 0x1000, 0xf92d, 0x5, 0x80000000}, {0xd90, 0x5, 0x0, 0x80000000, 0x1, 0x8}, {0x5, 0x9, 0x1, 0x1, 0x800, 0x5}, {0x3, 0x80000000, 0x2, 0x702988a7, 0x8}, {0x7, 0x6, 0x7fffffff, 0x9, 0x6dd5, 0x816}]}, [{0x8, 0x1f, 0x4, 0xffff, 0x401, 0x3}, {0x80000000, 0x10001, 0x6, 0x6, 0x5, 0x5}, {0x0, 0x5, 0x7, 0x6, 0x401, 0x1}, {0xfffff80e, 0x1, 0x4, 0x9, 0x7fffffff, 0x7}, {0x6, 0x7f, 0xfffff000, 0x6, 0x0, 0x889a}, {0x0, 0x88, 0xfffff72a, 0x0, 0x84d5, 0x9}, {0xffffff81, 0xd0e4, 0x5, 0x20, 0x80000001, 0xfa7}, {0xeb28, 0xff, 0x5707, 0x9, 0x3, 0xd5}, {0x7, 0x7, 0x3, 0x5, 0x5e8, 0x4}, {0x0, 0x80000000, 0x800, 0x8001, 0x4, 0x1}, {0x7fffffff, 0x800, 0x5, 0x0, 0x9, 0x776a919a}, {0x9, 0x5, 0x7, 0x7, 0x10001, 0x7}, {0x8, 0x5, 0x3, 0x7fffffff, 0x3, 0x1}, {0x3, 0x0, 0x0, 0x10000, 0xfffffffd, 0x6267}, {0xff, 0x0, 0x3, 0x7, 0x2, 0x3}, {0x81, 0x2, 0x1, 0x1000, 0xfffffffc, 0x39a}, {0x8, 0x8, 0x0, 0x8, 0x3, 0xffffffff}, {0x65, 0x1ff, 0xe3, 0x4, 0x3f, 0x4}, {0x4, 0xfff, 0x7, 0x44, 0xdfc, 0x1}, {0x10001, 0x5, 0x9, 0x7, 0x7fff, 0x10000}, {0x2, 0x6, 0x1, 0x80000001, 0x0, 0x6}, {0x8, 0x7, 0x9, 0x6, 0xd535, 0x4b}, {0x1, 0x8, 0xbf, 0x400, 0x300, 0x80}, {0x7f, 0x1, 0x1000, 0x101, 0x7, 0x48d}, {0x0, 0x470e, 0xf86, 0x3, 0x95e}, {0xffffffff, 0x800, 0x1157, 0x2, 0x3}, {0x4, 0x7, 0x8, 0x3d9, 0x2}, {0xdff5, 0xfdb, 0x81, 0x2d1, 0x4, 0x357}, {0x2ea1aa1a, 0x400, 0x1, 0x8000, 0xdd3, 0x9}, {0xf28b, 0x6, 0xcf23, 0x800, 0x6, 0x40}, {0xba, 0x12c2e01e, 0x77, 0xfffffffd, 0xbea, 0xffff}, {0x2, 0x3, 0x8, 0x4, 0x4, 0x1e0}, {0x3f, 0xe93, 0x200, 0x9, 0xc, 0x3f}, {0x7, 0x5, 0x400, 0x5, 0x3ff, 0x7}, {0xd89, 0x8, 0x8, 0x8, 0x6, 0x7}, {0x1, 0x8000, 0x7, 0x6, 0x5, 0x7f}, {0x2, 0x8cf4, 0x6, 0x7fff, 0x0, 0x3}, {0x4, 0x40, 0x3, 0x3, 0x923b}, {0x80000000, 0x9, 0x3, 0x1ff, 0x9, 0x8}, {0x7, 0x6, 0x2, 0xf6f, 0x9e9a, 0x6}, {0x180000, 0x3, 0x2, 0x6, 0x7, 0xffffff1c}, {0x800, 0x3, 0xffffffff, 0x7, 0x400, 0x855e}, {0x162, 0x7, 0x4, 0x0, 0x1}, {0x3c, 0x7, 0xf2cd, 0x9, 0x4d33, 0x9}, {0x4, 0x5, 0x401, 0x100, 0x3, 0x8}, {0x8001, 0x7, 0x1edc80, 0x3, 0x4, 0x1}, {0x1000000, 0xffffffff, 0x7, 0x10001, 0xffffffff, 0xea4}, {0x1, 0x3, 0x80, 0x8, 0x80, 0x3}, {0x1, 0x46, 0xffff8000, 0x4, 0x1000, 0x8}, {0x7, 0x81, 0x6, 0x2, 0x6, 0x40}, {0xffffabd0, 0x4, 0x101, 0x80, 0x3ff, 0x8}, {0x3, 0x1, 0x80000001, 0x2, 0x2, 0x100}, {0x1000, 0x1f, 0x1, 0x6, 0x400, 0x7}, {0x800, 0x9, 0x1, 0x10001, 0x1, 0x5}, {0x1, 0x6, 0x100, 0x80000000, 0x8, 0xff}, {0x2, 0x9, 0x3f, 0x4, 0x20, 0x5}, {0x9, 0x775, 0x8000, 0x80000001, 0x9, 0x5}, {0x7fff, 0x8, 0x2ae0, 0x20, 0x9, 0x400}, {0x0, 0x2, 0x80000, 0x7, 0x5, 0xf5a}, {0xffff, 0x4, 0x2c, 0xff, 0x2, 0x2}, {0x6, 0x2, 0x5, 0x3ff, 0x6, 0x800}, {0x5ba9, 0x3, 0x1000, 0x3, 0x4e, 0xee}, {0xfffffffe, 0x2, 0x1, 0x1, 0x20, 0x20}, {0x401, 0x0, 0x200, 0x7cadd5c7, 0x3, 0x1}, {0x5, 0x2, 0x6, 0x3f, 0x40, 0xfffffffb}, {0x1ff, 0x8, 0x6, 0x7, 0x6, 0x4}, {0x9, 0x80000001, 0x7, 0xfffffff8, 0x4, 0x2}, {0x5, 0x1, 0x9, 0x1, 0x8}, {0x3, 0x20, 0x565f, 0x3f, 0x8c, 0x5}, {0x8df0, 0x3, 0x2, 0x81, 0x6, 0x9}, {0x5, 0x8000, 0x0, 0x6, 0x1, 0x7}, {0x5, 0x567, 0xffffffff, 0xfffffe00, 0x0, 0x2}, {0x8445, 0x9, 0xe8, 0x5, 0x1, 0x9a9}, {0x3b04, 0x7ff, 0x9, 0x6, 0x4, 0x98af}, {0x39, 0x3, 0x7, 0x7ff, 0x0, 0x10000}, {0x1f, 0x5, 0xffffffff, 0x4, 0xfff, 0x3}, {0x7f, 0x4, 0x1, 0x8, 0x200}, {0xfffffff7, 0x10000, 0x1f, 0xd333, 0xfffffffc, 0x2}, {0x3, 0x10000, 0xffff, 0x8, 0x80000001, 0x9c5}, {0xebf8, 0x7fff, 0x36, 0x9, 0x10000, 0x3}, {0x2, 0x100, 0x100, 0x33, 0x7053, 0x1}, {0x90e, 0x6, 0x1, 0x8000, 0x4, 0x5}, {0xffffffff, 0x100, 0x638, 0x0, 0x0, 0x3}, {0x4, 0x9, 0x200, 0xe822, 0x8001, 0xe62}, {0x2, 0x6d, 0x0, 0x400, 0x7, 0x7}, {0x3, 0x7ff, 0x4, 0x800, 0x5d}, {0x8, 0x1f, 0x7, 0x80000001, 0x9, 0x10000}, {0x7fffffff, 0x4, 0x0, 0x4, 0x7, 0x7}, {0x8001, 0x9, 0x6, 0x1, 0x7e, 0x800}, {0x400, 0xffff, 0xa9, 0x8, 0xfffffff8, 0x2}, {0x200, 0x0, 0x1ff, 0x3, 0x8000, 0x6}, {0x7e, 0x7ff, 0x80, 0x6, 0x401, 0x6}, {0x2, 0xfffffff7, 0x326, 0x8000, 0x3ff, 0x3}, {0x765, 0x16c40384, 0x8, 0x975, 0x100, 0x7fff}, {0x7, 0x0, 0x95, 0x8000, 0x1, 0x4}, {0x1, 0x1, 0x6, 0x3ff, 0x10000, 0x7ff}, {0x9, 0x100, 0x5, 0x0, 0x1, 0x5}, {0x0, 0x2, 0x4, 0x3, 0x8, 0x1}, {0x9d1, 0x100, 0x1, 0x20, 0xffff7fff, 0x1000}, {0xffff, 0xfffff582, 0x8, 0xffc0000, 0xfffffd45, 0x800}, {0x2, 0x1, 0x5, 0x3, 0x5, 0x4}, {0x353, 0x20, 0x7, 0x0, 0x4}, {0x4, 0x3, 0x2, 0x1000, 0x5, 0x9}, {0x4, 0x10001, 0x9, 0x400, 0x8, 0x8795}, {0x401, 0x200, 0x9, 0x0, 0x6, 0xff}, {0x1, 0xffff8ecb, 0x0, 0x24, 0x0, 0x1}, {0x860, 0x9, 0xe6d5, 0x4, 0xffff8000, 0x8fa2}, {0x2, 0x9, 0x5, 0x6, 0x800, 0x110e}, {0x2, 0x6, 0x6, 0x7, 0x600000, 0x81}, {0x1000, 0x6, 0xffff680c, 0x3, 0x5b, 0x5}, {0x34f, 0x7ed5, 0x0, 0x29, 0x8, 0x1}, {0x1e7, 0x80000000, 0x1, 0x0, 0x8001, 0x9}, {0x1ff, 0xffff, 0x4, 0x9, 0x0, 0x800}, {0x3, 0x1ff, 0x800, 0x2, 0x6, 0xffffffff}, {0x0, 0x401, 0x101, 0x3, 0x6, 0x6}, {0x7fff, 0x4, 0x1000, 0x4, 0x2, 0x100}, {0x1, 0x2, 0xda2bacdd, 0x8, 0x872, 0x1}, {0x7, 0x7, 0xffffeffa, 0x4, 0x7, 0x100}, {0xad, 0x20, 0x5, 0x5, 0xfffffffb, 0x4fb47627}, {0x7, 0x7ff, 0x3, 0x0, 0x1000, 0x1}, {0x69, 0x9, 0x2, 0x800, 0x7fffffff, 0x2}, {0x7, 0x4, 0x5, 0x7f, 0x33a, 0x101}, {0x3, 0x6, 0x5, 0x40, 0x1, 0x1}, {0x7, 0x3, 0x33b, 0xfffffff8, 0x6, 0x7}, {0x1ff, 0x7, 0xfffffbff, 0x9, 0x2, 0x4}, {0x80000000, 0x9b48, 0x2, 0x6, 0xfffffff8, 0x100}, {0x7, 0x6, 0x1, 0x1, 0x81, 0x10000}, {0x3f, 0x6, 0x6, 0x6, 0x10000, 0x6c}], [{0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x4d93780d2089089b}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x1, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x1}, {0x2}, {}, {}, {}, {0x4, 0x9821ab3a2039e96c}, {0x3}, {0x5}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x5}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x1}, {0x3}]}}]}, {0x101, 0x6, "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"}}}, @m_ife={0x144, 0x4, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x800}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_PRIO={0x8, 0x3, @val=0x8000}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}]}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x1000}]}]}, {0xe3, 0x6, "07f2e24f17f2c857d0b17608b57a7e44ee9b37d5238a156ab76ad68723ed412898b80b9e28097e51640eb13ae4c86d500301d1e2231e7c19239a3fb7c64c004170e2e32d75ec62a54234a4ad0c38bb4d694df6d266f1db453b298013a33a7644d3615ffaa0d6914c232511aa159a6b3e1c761edfb34c1932c410ae02c57cd13d266eff8266d721140202d4afb7acd482e835098aa1f30421e8cf287901c3821c2bf67732b57b1512d63fe8849be1361000c0f2e20129e8687fa36e1967256a3a87506ff47f2a8b9355091cbc5d8f2c30ffe4fb4f35401789850c353adbfc86"}}}]}, @TCA_CGROUP_ACT={0x16c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x1ff, 0x5, 0x10f794e9, 0xcd}}]}, {0x22, 0x6, "c240fda588d30f1e6717d86a4908866e2a7e436a676e37de7a0883889d86"}}}, @m_csum={0x110, 0x10, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xb595, 0x30000003, 0xffff, 0x7fffffff}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x8e0, 0x2}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x81, 0x0, 0x8001, 0x864}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x10001, 0xffffffffffffffff, 0x5, 0x7}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x7e, 0x4, 0xfffffffc, 0x101}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5f4, 0xfffffffd, 0x3, 0x1, 0x200}, 0x7}}]}, {0x54, 0x6, "5fa8f20a84fdd6e6ff99e5e7f045923fa0adaf9f51a7806b631ac734a8dbddb56303b1846647ae01b79218755b16c5220c216fd208974cbcbfff463e4b7092418b2753d983e130bb435e26e7c5cd0c6f"}}}]}, @TCA_CGROUP_EMATCHES={0x290, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7fff, 0x7, 0x8}, {{0x4, 0x0, 0x1, 0x1}, {0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xb0, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x80}, "00312035faa0fffd9ca7b4043a01b850a14f7edf14b4fe6e7a861d87fdfe03d96525e3f8675eddaa349ca21667e4b998ac70d894a8b106f21b13466c9279ebddd0d296575ceaac45bf8344f7ff3b92ac33b6c16afcf1781227b2e428cb4ac4829fc8e4f8e358cbac5957e0db2405840aefff5d1aec85797dddfa766a785977c1cbff2a66b57529eb9ac413c4d92610347179ccbcfb3bfd8db22c4196396b0774705ef0"}}]}, @TCA_EMATCH_TREE_LIST={0x1a8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x18, 0x1, 0x0, 0x0, {{0x459, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xfff8, 0x7, 0x9}, {{0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xe05b, 0x8, 0x7f}, {0x4, 0x6, 0x4}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0xfff7}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_META={0x58, 0x1, 0x0, 0x0, {{0xf0, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xf8, 0x2}, {0x450, 0x6, 0x1}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="1e8fcc8b68cda9d389"]}, @TCA_EM_META_LVALUE={0x2b, 0x2, [@TCF_META_TYPE_VAR="6a679a3905066309", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR='\'O', @TCF_META_TYPE_VAR="07ea925bceaa7885e9", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="4fb2f7ad62203878"]}]}}, @TCF_EM_META={0x7c, 0x3, 0x0, 0x0, {{0xb59, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="7da036", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="9027fcf9feb6f1ca6acd", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x80}, {0x2, 0xff, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xb8e9, 0x39, 0x2}, {0x1, 0xe1, 0x1}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="aef5765ba525", @TCF_META_TYPE_VAR="87", @TCF_META_TYPE_VAR="8b3c", @TCF_META_TYPE_VAR="f0abbd5f7b92c9ff", @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_META={0x68, 0x3, 0x0, 0x0, {{0x3, 0x4, 0x9000}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x80, 0x2}, {0x0, 0xff, 0x2}}}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="65ac98f3b2034f1aad", @TCF_META_TYPE_VAR="069d"]}, @TCA_EM_META_RVALUE={0x2e, 0x3, [@TCF_META_TYPE_VAR="830311628fe340", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="9b0b9751dd57455f28b8", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="1db13ff39f4313c5da"]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="5a80e12f3e2840deb2"]}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xffff}, {0x1, 0x4, 0x2, "836acf13"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xba8e}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}]}, @TCA_CGROUP_ACT={0x1290, 0x1, [@m_bpf={0x78, 0x1b, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7fffffff, 0xc10a, 0xffffffffffffffff, 0x5, 0xaa}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x45, 0x6, "3bf4093bf16e06ecfd5e5b7d1759dffaf68cb3883831c1107c407ec962a795e4c775c81dea9522bcd4f76b46544d1d38db267940bd2480500e66df6c7ab17383c7"}}}, @m_csum={0x10f8, 0x14, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xfff, 0x8, 0x3, 0x8}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x1, 0x1, 0x1}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xdad5, 0x8, 0x3, 0x3f, 0x7}, 0x47}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x2, 0x4}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x2, 0x80, 0x40}, 0x46}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x1, 0x2800000, 0xfa}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0x4, 0x20000000, 0x986b, 0x2}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x400, 0x4, 0x66, 0x3}, 0x5}}]}, {0x1004, 0x6, "ac6a531293c3739dacc60de4a0f5e8d228f4120c4269ff0421804125ed38ed592923658267fc9e0e4369defd0f348564b7ba73f9e4c6fe71896350fbdcc71d987d1baafc7287fd7435c3c684aee214dccb38e46ad1f63cfcfc85dfdc943acbc8a8b20bba7fb24688de8a14991e2fb55f3167e076b71ea65ef8af89ac6010fcc04023300090f989b97357a9867b2886998630105cf378ed9c7db4808cd86da221f8adac2c0bd076bb11d3cef40c63e994018843a00cd92b0458736e06a36a1d9a6f29c483ca1911f21cf91a231c8d2c8e53a849d666768743836a7230722c58bff4fc043ab85fe3b672caee9a495c3fe6de7b112440d8949975a873085975d90ad157ef68ec89b3636f71c65192e17b4f8425aa1136131382048c3387961479af2f0aaa26691cc818612c89c02899dc70a2d710ff725e79ed78569e82d4c4a6b17e628976d6577b64c187c9d12d34d6a198ec9971bc5aa30afe155259dd9eca1ede858d3865de3901b1276ccc97bab715eac23ccb5d5cc46e5e11e06538e8dbd8804df4611501eeb9b42e27d26ef41897596e7806be118f096c322b354d2280ab1e6b35ec3f6f93433d3108dba6d6b9bc9ec81074c246ce95f3ffc6a56f0ee5ce3d924bdd86c62c5c833fc63beb2ce4c330eb4eeef92ee1923d165890f8b3bb09cdc476b20b94d672c846b0d5607224a41ac6c964ccf1dc9f301d83c515907229e28dbcaba66d74639e23ff210366e5cc519b1cbd8a5eac4fed8c20a14a9bd4387cae2bc1d56b1d30f32423869e19146b787754031d22303789e41c060518eba4f88ee627848f94a3971d087e7717203683fcbaf06e65cf81e4becc8d15a292830cecff2c3430f750d10cfaf24fc671f213f191d0a265e25b82f34c5a058513e1395044a3c7fb6a07d73d0eef99bd4c9293f347d8271473781d052a049a8b8d95b3046aea8ebc86c4cc32b7da1762ff4be303d506e37c6b8fc81c0d9d16719f616faa828f2608cfad200799e5d5246d16351e0903fb2c24240b0dec264ce7ec24e660ecdfe882e754eae79dd3b97e4c4239dd216a2bf830532748d3894302931d52c6f2d43443aced72ff118f28ff2574b2252ec885d271ccd70d2aa38b200154f5161fe7d79c51c84808b03c2e772928e0c68491375caea09a665496b3f6d809687cb10c6201d8a201777e666244fec91f09b227ff19290a4b0b2561f45022f28d7265a77922c83ff2ab105f6e91f217a9b7fd354047b3fbdc05939006c876a0fcbd17fbed6a7d43870bb374f4e2f5b6b84a50b60141e9e25e75bfe3b3406ecaf51c6a1e30a3793400e7d75839702d25814d75274432c685da1e8b9478e181ded0713b3be41d7e1db635e8a457cd878a24ab75e0ecea762dbe006cd2cdb1fcee642a801e05eae6d95333e05a1b647f46925e67aaf1778c5387161cebf6392a6bad6fca60d9be3b6d852f247960fcbf32e5623ab51b03d89fed38a4809d0dcd6207fe03b48fb12ef50c9d4816cf6fe4314044051815b92f8fdfa199a8efea80f6ed567890250ecf77e64b3bb508d79bf3d031e07efe3fa009bf843c94f6d56ee157dcb55994737cc72d4b2c29c8d91d748daa30f0052572b6cc124c5bfa43c96ec5d478d3a15d77a620ff8c31aa1a34ee1751c1351d1da10727a311b88cdf87ed459f71d44696e4800066f436fbd476f1c7af0cd98400255df3cd74ecfacbf43911807aa9583c829891d410db5be9d494d06241dea0c7780010038fee2a6bafc0da684e3ddc56f24e6bcdef068f1a4390e2ab02a833786304de7d377ae5a8f9334afd49f666783c58863ef0344df6850d6e8376addc444e038993cd3aebff5e2edd68f261bdeab0f9a7871e7aa50b2303811001ffe0b4d53902f8c394fdbc93cb922c24ed9bfd0d19767d7452273c2cbad40fc0a4885662f6bfb9d57fb89cf5edbac30615c1aa2d1208d11464931b4a200785a43a2b054053d557eeb84ac92e128aac91078c57eebbbe7c4f7bd3246ca9344a66b0304ffd120c75953f2883239d6ac95e2436f5c0a37ea60974fd8ba8a6f7f7c670ed70a0308b26c7e8861dc603642c5786fb4c3f1809042ce27dece39df00fb6baf00b385e9d256516a4d189d052e85d2e491e0aff0bc37884d11f22670b2a1f507ec53950c42bb1a346fee539ac4dca334cacad64ebb5d570ea12ce7b80c0258d282dfd167711d36815cfd4567faabe5acb5a61053872372508738982d95349de4b34186ff91459ec2ba2f9872d022e06eac78d286de252def97d03262afad716652751953092686b8c52a8da299f6f9a62c3c4e726e433357b77ceda4ff57822189a4a1a4bad52b172617e511f0a3934eb5afb4cf01d6dbd272efb6e5790c5a7c1bbe6ce5c57253f65531b5a00adda8cbeffc7e45e482b9d17c376f3ce4b475c63d6ff8028bb3b004a6b6c0082ad515ae46937ce7cb84f8fc1a39154ae941c5cac6d030c2b565f2726465aa97268e3571868b2585e29571031d8bfa122131d7a4ceb2531a31c7c0563580d67077cfe66e663463ab6b862ac78bcf0ade9b9264e33720aa0315fa2cf3cde4cdffcfa697dc9abc58feb88ed2e52ea63a4b8c0895f21435b7208c8616290b83463eb279025353e82843de81ae9066f32db3330aa617f4dcb6ca6a45c3887f2b04e2373f03e8ea180d7d420c6b6611160165d9f4d4cdeb0c74e7af41f1f34daa6ab434256360dc993f2a26927f7bd9664006120091ae8c194fd44b4b26b7abbf98d9b7c7d60a5ced55c4bd0aa4d7b920eef69c15163e321f6879e33c7e3390cb031b7d561080790e807523c20ce1b948c738527e77c6024bc0c266a709958f0b61c01409ca9b39a29c1887ad1324b92f08ef4d91913a7157abfcef3697f9355752a6a803753700c8fa4d8ac9179900cfe055fcdedebd68694d1607ea0e9ca3ec054d9403f229b738a13a45d421fbb207c3cefb2b45a89020a62b4519f91ffdcbbb68c15eed27e2c426635804c3281b31f3f8e0a770feb6f8f46afee8c61e7eca8de29fd63f60e2cb1b6227b15474b556e310e4800196b8cb8f8e9a789dc853668dfc11cfa18a740b600c1b2192892be5c7ffe8c20a26a26388c06fb55529ab61d92028f27f4e276ea01e09793ace97de123877292e288f66406eeb43c369f236c378fd85bb327a7081d6bd168435b08e700262ff87aa351ab33b4a4ee93309ae5ab7ebf5bd3d65b70ad2a932898c8545e0eacc6e85d659a688519aeb9378667edf03bcf65d8136ffad807f99181430a494476b2dd9b296f8db76013addbe5fd0d81b2b028d2550d54108ab00d628d5c936fe9f69deb909e7fb56a0485686616c9eea5d20acdc23c5a688c0c62d06abf7dddc9aa903bbea45ee583b285b08a8e1a27bc8c705e7231a946fe119a041dd79991974f4b976818cde216c44b512697356a2b78c6cac4311ba480d6d5dbc6e9db209f4a7b1c5b02b2bec92214aae0c62147a78fb256e1ecaa757521e45cc1cc9251c2acf1a741ade291a53dcf1a9e9acb049677b0208408ce3826b56b9d48003ac9d7dc253a64eff583118af09c1d01b42b427c65064336434d9ddb9cab29949a46cc88da44956b59b561ddffa253c1e1f98b2a278d2c3bf6b455c3fb35c9945756b18c3249f909f6980bceddcb8ef43c001ad7bbe42b1277dff481e2c96f717193a99a2d88f6121a7a7afa4a6652447894af869f5185b960082f3c37d1fb56a4bdc7bee5b2e23dfb295cf58bf525e0e9e85e01fd00484d493692142b16bd899479f4a97846e507030ac49ffa6542de2c73d2d771e60bf32c724058e30672a2d3241de0d250cccf94d0f61f68d5b7819f68368e1dfa499d68e83f1655955d0005b0521f9e9dc570335a640182cc4969abbb4f26a3ffd3f364040cbb851a700dcbda4d97911cac3c01b7dfaf91f1d3b0dffce5d2f4cc7a1befb6352bb3835a7a81b2b8631fcf2c7cc24a49f32e366247279cd6f47cbcba806c394cf489e92035e5686c1d0daf839141e56992f99b5935cce62f0d4059f00227616a741239d376f4622f13525e35d7452b83e3141263551df052056d04e467bf450ea39312bab152255b98e404ebee3e79b6e973be38e846e08c2d97f921dd160322ed76ce006f24609a3b9c2770d505aa4a40f01013ca0b462a1d7bcd5439178dbbd10188c1d64d16696fc202858aa89676c6c14a1c3b9079f728ad958c273720dc58f0d294355f6912c6c9dc9fa783ec9ac5c6df247827c13cc27d11cf6fb6316cff05a0a4e3fb430b9abe0c17a0d67bc9570dabb2a577f7521361564dc8e0818eb58b58daaed07e4761ef4fce2cd9b8d94ad593497cc228426aba00bcd7f1386b2e4fef03f598e949c79bbe6a9d1112761c0f2883ec397ce01d3e91b852c9679bd52f419b93ffa4c25447a549e68538ec5b102f3b87a137df951995947925e307208f3da7fe9bea782c49036f3d1d20230e45e6d49baade4f83251140e2a3943cb21e3d538f3ff86dbf769002187521d100b804c23c6f3f38561fc839e7b5fa2b2d096082855db5e057a672df6fb49288053854cc396bfd9d09c048bbe593d8d2ae97bca0c1f95837dddb90d388509415684e16b27e1ebd6b0fc7112ae8de1600c5db8469b8f21c6bb5096218d2797ad06764487ed156cd1a7d81c9ff431217d3ad5e7f4e86ca95d825632e25e199d6a1f68b42da7917070d655c38ed371519cf2ee033944e2c1448e1088070ef325639edfa9959afb1e710edc76eb1cea21dcdfc377f354fc687137239ebcdb90aa9172dc603f27a90e576b620c2c0389dbb64a0de6ba9bc3a599bfe65461157c36ed63656f284cf9b72def4e90483db776a15acf8661cb90417fc5c32a9a381c80d26364d77721f756e06ad1967922a7ae096e4398b7ab79f9f528ab4559f7f1339de3f3f6db59f75b0ba4e5c8ada9fb5c3351b17f2051f5fc795820eab37f95e49c1466cd0a5e7a18585cfd6fd6de98b73818c364e85d7deb9f8083737e72f922856f1d6ef4e75ff1c39e7835e9c3060344cd2ef251ecce7c03ddd7f0653a8da89dd94f77bbadfffc1bd85baf0555d02752f92c9207839e329ced741fbdf7123afde950e05abbb1069d7c5f2d7ef27219f563f8d9e7c55f2bd82cef9df0f87496b75daa7e925ad47199a75c887b4ae3b985fa285a0b2c3f9d7466606efee9af17705393427e86ce57cc356ff221e038f2f9c26255ae71db9e5397ab253a194edee8625d57c525635e5343aeeebfb6ce863e25678e80b72c438c24d53624d1863673ba61374131cef7e346c1f48cec4621b596d7de76b518aeedc0451cbc8f7c0d8d27b02eb8eb0fdaf4abb934e8eda8d9bfbdf83c05fe4e00f44fb5fd915e30b5d733a90f98bf516170f17d0701e9c2abd555f515874ac2adf74df5963cd51c2e83a8426bb5f8ac985c9fd253aece681ac377551973cb337379f98168e78a5f117dd7da87b9e96f64e3895e86be3be872474b91a78bd9ed77b1fe1280baa69a2f206ba870c70d2230d3a0397f923219f1d19d45af670ef421f3efea3ee694d85dc8feae55f1ac9ca073da39ef42703b3c0a5e56dc87615802d5dccd670115159c81c97bf7f099904c9d201e8642144b2bbeabea40acb19dd49586e26bca505160090a8596a639b573beee30f149aebd3c7071912bd304d758b7d9ab3319f92333851b06002b607c368e2c608d5a74061d584cae11ea592c7f90c7d6437d056e8b4d24957f6dfd552e6bd5e62f2038fc3a141acc60bb12a9569a1c36c70f032d508fd95cd06f8ea5ce4"}}}, @m_connmark={0x11c, 0x16, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0x80, 0x1, 0x0, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x4c2ced36, 0xfffffffffffffffb, 0x5}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x8, 0x20745c9, 0xfffff15f}, 0x3ff}}]}, {0xae, 0x6, "363bd5fc568698cce1f8ec6bb0289692a8c9b7133278be20f5da6ae09e76a216490c2d5d739ea1f5d2feae8c62d8003b41fa2916c939e17dbcd1342fc1d05f770a481f6fecfde29519aa69942fe8fa59463475da78fb33fa6860a3b8b9cb0a4a326268a40d153410c0b00b66f6fe485421d927a1a9cad5c10b3b35524d2e767b7d395782d839e8809c332bc25ae773063d05dcd76e9b1a9b273837c1e62c227664a5dc5fed7eb8664fab"}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x80000000}]}, 0x31d0}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) [ 1986.875620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:45:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f00000000c0)={0xbf0, 0x8, &(0x7f0000000000)=[0x3, 0x0, 0x5, 0x0, 0x1, 0x73ae, 0x6, 0x2], &(0x7f0000000040)=[0x4, 0x1ff, 0x76, 0x9, 0x5, 0xffff], &(0x7f0000000080)=[0x78c, 0x401, 0x7f, 0x1, 0x200, 0x2, 0x100]}) r5 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x4103}, {0x20, 0x17, {0x0, 0x0, @l2={'ib', 0xa, 'veth1_virt_wifi\x00'}}}}}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r6, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x675, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x24004858) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:45:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{}, {{}, {0xf0ffff}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}]}]}}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) recvmmsg(r0, &(0x7f0000006180), 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r2) sendmsg$netlink(r5, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:45:47 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8001, 0x40000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'ipvlan1\x00', {0x2}, 0x40}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:45:47 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRESHEX=r4], 0x1}], 0x1, 0x0, 0x0, 0x4048010}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x1) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:45:47 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r6, 0xffff8001}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000000)={r6, 0x4, 0xb6, 0x5, 0x2, 0xfff, 0x0, 0xfff, {0x0, @in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x34}, 0x3}}, 0x9, 0x9, 0x1, 0x100, 0x2}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x4, 0x8005, 0x4, 0x7, r7}, &(0x7f0000000180)=0x10) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:45:47 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) 09:45:47 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) lseek(r3, 0x0, 0x3) r4 = dup2(r2, r0) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:45:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000006c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x5, 0x80000001, {"7bfc048cf705a03861687019cccb2769"}, 0x8, 0x8, 0x400}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000100), r4}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r4}}, 0x18) write(r2, &(0x7f0000000340), 0x41395527) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) fchdir(0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000500f4872ac899f1b8d0f518a7e49902067f20e3711cef2d34bf807c21edf2bc92be04deab711bdbd936369388b59eb775f293516b1d075cb2f3e0b32c9fd7b1938ad34484a382d6a204a02132e8b87de3407ef969edc432d8b381a0e172ac7a5e22118115377fc63c42468f98c38647e82b1e2702f2bb0fe0b25f1083b0864911916b379211cc825bfdf37fb4bcd73418e62a2de9bab354e6d7672ae1e2c73fe995f2193690335e1830dafe26126ecec4aaed58cf44e903298e0361994bfb24193616e545d45aeb9b10e1baa979dfb01772a04ef14da7629bec4d3", @ANYRES16=r5, @ANYRES16], 0x28}}, 0x4000440) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYRESOCT], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="24010000", @ANYRES16=r5, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:45:47 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x6, 0x14, "41ff22a30a27650d"}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000080)={0x6, 'caif0\x00', {0xffffffff}, 0x9}) getsockopt(r0, 0x7ffffffe, 0x1003ff, &(0x7f0000000100)=""/164, &(0x7f0000000040)=0xad) r4 = dup2(r2, r0) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:45:47 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000380), 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000340)=0x800, 0x4) flock(r1, 0x5) 09:45:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000040)={0x3, 0x4}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000)="0c268a927f1b6588b967481241ba7860005c9d5e796840d8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x60000015, 0x0, 0x0) [ 1988.858623] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1988.884910] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1988.892101] CPU: 0 PID: 6344 Comm: syz-fuzzer Not tainted 4.14.177-syzkaller #0 [ 1988.899559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1988.908925] Call Trace: [ 1988.911530] dump_stack+0x13e/0x194 [ 1988.915173] dump_header+0x178/0x6d4 [ 1988.918899] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1988.923925] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1988.929037] ? ___ratelimit+0x50/0x519 [ 1988.932940] oom_kill_process.cold+0x10/0xae3 [ 1988.937458] ? lock_downgrade+0x6e0/0x6e0 [ 1988.941630] out_of_memory+0x2d5/0x1110 [ 1988.945625] ? oom_killer_disable+0x1c0/0x1c0 [ 1988.950137] ? mutex_trylock+0x152/0x1a0 [ 1988.954341] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1988.959214] ? warn_alloc+0xf0/0xf0 [ 1988.962861] __alloc_pages_nodemask+0x5d3/0x700 [ 1988.967550] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1988.972588] ? lock_downgrade+0x6e0/0x6e0 [ 1988.976758] alloc_pages_current+0xe7/0x1e0 [ 1988.981109] __page_cache_alloc+0x245/0x3d0 [ 1988.985451] filemap_fault+0xc18/0x1c50 [ 1988.989456] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1988.994147] ? lock_acquire+0x170/0x3f0 [ 1988.998150] ? ext4_filemap_fault+0x7c/0xb0 [ 1989.002499] ext4_filemap_fault+0x84/0xb0 [ 1989.006658] __do_fault+0xfa/0x380 [ 1989.010213] __handle_mm_fault+0x22e9/0x3280 [ 1989.014638] ? copy_page_range+0x1d70/0x1d70 [ 1989.019069] ? find_held_lock+0x2d/0x110 [ 1989.023160] handle_mm_fault+0x288/0x7a0 [ 1989.027239] __do_page_fault+0x4bc/0xb40 [ 1989.031318] ? vmalloc_fault+0xdf0/0xdf0 [ 1989.035384] ? do_page_fault+0x60/0x4f2 [ 1989.039368] ? page_fault+0x2f/0x50 [ 1989.043004] page_fault+0x45/0x50 [ 1989.046464] RIP: 00f1:0x11 [ 1989.049309] RSP: 0000:000000c42004ff18 EFLAGS: 0042f0a0 [ 1989.076582] Mem-Info: [ 1989.084461] active_anon:240505 inactive_anon:1092229 isolated_anon:0 [ 1989.084461] active_file:11 inactive_file:4 isolated_file:8 [ 1989.084461] unevictable:26607 dirty:0 writeback:0 unstable:0 [ 1989.084461] slab_reclaimable:15682 slab_unreclaimable:116115 [ 1989.084461] mapped:62656 shmem:22136 pagetables:10611 bounce:0 [ 1989.084461] free:24957 free_pcp:0 free_cma:0 [ 1989.118615] Node 0 active_anon:921548kB inactive_anon:792716kB active_file:52kB inactive_file:36kB unevictable:82444kB isolated(anon):0kB isolated(file):0kB mapped:228172kB dirty:0kB writeback:0kB shmem:51456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1989.147080] Node 1 active_anon:40472kB inactive_anon:3576200kB active_file:8kB inactive_file:0kB unevictable:23984kB isolated(anon):0kB isolated(file):0kB mapped:22452kB dirty:0kB writeback:0kB shmem:37088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1989.175573] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:448kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:192kB writepending:0kB present:15992kB managed:15908kB mlocked:192kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1989.250791] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1989.269123] Node 0 DMA32 free:35900kB min:36272kB low:45340kB high:54408kB active_anon:921100kB inactive_anon:790608kB active_file:152kB inactive_file:0kB unevictable:82052kB writepending:0kB present:3129332kB managed:2621260kB mlocked:82052kB kernel_stack:9248kB pagetables:13764kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1989.380547] lowmem_reserve[]: 0 0 0 0 0 [ 1989.384715] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1989.527917] lowmem_reserve[]: 0 0 0 0 0 [ 1989.545203] Node 1 Normal free:53496kB min:53612kB low:67012kB high:80412kB active_anon:40472kB inactive_anon:3576200kB active_file:8kB inactive_file:0kB unevictable:23984kB writepending:0kB present:3932160kB managed:3870192kB mlocked:23984kB kernel_stack:7904kB pagetables:28636kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1989.656386] lowmem_reserve[]: 0 0 0 0 0 [ 1989.662634] Node 0 DMA: 4*4kB (ME) 14*8kB (UM) 4*16kB (UME) 12*32kB (UME) 10*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10432kB [ 1989.739210] Node 0 DMA32: 613*4kB (UME) 1056*8kB (UME) 233*16kB (UME) 550*32kB (UME) 60*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36196kB [ 1989.847250] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1989.894310] Node 1 Normal: 80*4kB (UE) 1*8kB (U) 19*16kB (UME) 168*32kB (UME) 166*64kB (UE) 74*128kB (UE) 19*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 53496kB [ 1989.956949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1989.968407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1990.005787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1990.014861] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1990.102072] 26883 total pagecache pages [ 1990.140246] 0 pages in swap cache [ 1990.143763] Swap cache stats: add 0, delete 0, find 0/0 [ 1990.159615] Free swap = 0kB [ 1990.162681] Total swap = 0kB [ 1990.165784] 1965979 pages RAM [ 1990.168893] 0 pages HighMem/MovableOnly [ 1990.172866] 339053 pages reserved [ 1990.205766] 0 pages cma reserved [ 1990.209176] Out of memory: Kill process 25764 (syz-executor.2) score 1009 or sacrifice child [ 1990.236938] Killed process 25776 (syz-executor.2) total-vm:74968kB, anon-rss:18024kB, file-rss:34816kB, shmem-rss:0kB [ 1990.320855] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1990.335274] systemd-journal cpuset=/ mems_allowed=0-1 [ 1990.348546] CPU: 1 PID: 3632 Comm: systemd-journal Not tainted 4.14.177-syzkaller #0 [ 1990.356476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1990.366089] Call Trace: [ 1990.368684] dump_stack+0x13e/0x194 [ 1990.372313] dump_header+0x178/0x6d4 [ 1990.376049] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1990.381065] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1990.386171] ? ___ratelimit+0x50/0x519 [ 1990.390054] oom_kill_process.cold+0x10/0xae3 [ 1990.394543] ? lock_downgrade+0x6e0/0x6e0 [ 1990.398681] out_of_memory+0x2d5/0x1110 [ 1990.402732] ? oom_killer_disable+0x1c0/0x1c0 [ 1990.407214] ? mutex_trylock+0x152/0x1a0 [ 1990.411274] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1990.416111] ? warn_alloc+0xf0/0xf0 [ 1990.419729] __alloc_pages_nodemask+0x5d3/0x700 [ 1990.424399] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1990.429423] ? lock_downgrade+0x6e0/0x6e0 [ 1990.433566] alloc_pages_current+0xe7/0x1e0 [ 1990.437879] __page_cache_alloc+0x245/0x3d0 [ 1990.442194] filemap_fault+0xc18/0x1c50 [ 1990.446171] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1990.450845] ? lock_acquire+0x170/0x3f0 [ 1990.454831] ? ext4_filemap_fault+0x7c/0xb0 [ 1990.459283] ext4_filemap_fault+0x84/0xb0 [ 1990.463430] __do_fault+0xfa/0x380 [ 1990.466960] __handle_mm_fault+0x22e9/0x3280 [ 1990.471381] ? copy_page_range+0x1d70/0x1d70 [ 1990.475813] ? find_held_lock+0x2d/0x110 [ 1990.479871] handle_mm_fault+0x288/0x7a0 [ 1990.483967] __do_page_fault+0x4bc/0xb40 [ 1990.488230] ? vmalloc_fault+0xdf0/0xdf0 [ 1990.492412] ? do_page_fault+0x60/0x4f2 [ 1990.496384] ? page_fault+0x2f/0x50 [ 1990.500023] page_fault+0x45/0x50 [ 1990.503480] RIP: 0001:0xffffffffffffffff [ 1990.507531] RSP: 7417c200:00007ffda0b7b040 EFLAGS: 7ffda0b7ae50 [ 1990.512392] Mem-Info: [ 1990.534240] active_anon:240503 inactive_anon:1092209 isolated_anon:0 [ 1990.534240] active_file:42 inactive_file:0 isolated_file:0 [ 1990.534240] unevictable:26621 dirty:0 writeback:0 unstable:0 [ 1990.534240] slab_reclaimable:15682 slab_unreclaimable:116115 [ 1990.534240] mapped:62648 shmem:22136 pagetables:10579 bounce:0 [ 1990.534240] free:25000 free_pcp:91 free_cma:0 [ 1990.576173] Node 0 active_anon:921540kB inactive_anon:792684kB active_file:0kB inactive_file:0kB unevictable:82500kB isolated(anon):0kB isolated(file):0kB mapped:228140kB dirty:0kB writeback:0kB shmem:51456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1990.609766] Node 1 active_anon:40472kB inactive_anon:3576152kB active_file:4kB inactive_file:0kB unevictable:23984kB isolated(anon):0kB isolated(file):0kB mapped:22452kB dirty:0kB writeback:0kB shmem:37088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1990.642575] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:448kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:192kB writepending:0kB present:15992kB managed:15908kB mlocked:192kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1990.679912] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1990.684982] Node 0 DMA32 free:36136kB min:36272kB low:45340kB high:54408kB active_anon:921092kB inactive_anon:790576kB active_file:68kB inactive_file:56kB unevictable:82308kB writepending:0kB present:3129332kB managed:2621260kB mlocked:82308kB kernel_stack:9184kB pagetables:13720kB bounce:0kB free_pcp:220kB local_pcp:0kB free_cma:0kB [ 1990.723078] lowmem_reserve[]: 0 0 0 0 0 [ 1990.727139] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1990.755554] lowmem_reserve[]: 0 0 0 0 0 [ 1990.770074] Node 1 Normal free:53560kB min:53612kB low:67012kB high:80412kB active_anon:40472kB inactive_anon:3576152kB active_file:0kB inactive_file:4kB unevictable:23984kB writepending:0kB present:3932160kB managed:3870192kB mlocked:23984kB kernel_stack:7840kB pagetables:28552kB bounce:0kB free_pcp:144kB local_pcp:144kB free_cma:0kB [ 1990.807377] lowmem_reserve[]: 0 0 0 0 0 [ 1990.811402] Node 0 DMA: 4*4kB (ME) 14*8kB (UM) 4*16kB (UME) 12*32kB (UME) 10*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10432kB [ 1990.834114] Node 0 DMA32: 582*4kB (UME) 1056*8kB (UME) 233*16kB (UME) 552*32kB (UME) 60*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36136kB [ 1990.853231] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1990.876369] Node 1 Normal: 80*4kB (UE) 1*8kB (U) 19*16kB (UME) 170*32kB (UME) 166*64kB (UE) 74*128kB (UE) 19*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 53560kB [ 1990.901067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1990.912730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1990.926955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1990.941260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1990.952526] 26883 total pagecache pages [ 1990.962139] 0 pages in swap cache [ 1990.965667] Swap cache stats: add 0, delete 0, find 0/0 [ 1990.972877] Free swap = 0kB [ 1990.980896] Total swap = 0kB [ 1990.983957] 1965979 pages RAM [ 1990.992795] 0 pages HighMem/MovableOnly [ 1990.999353] 339053 pages reserved [ 1991.002802] 0 pages cma reserved [ 1991.011186] Out of memory: Kill process 25764 (syz-executor.2) score 1009 or sacrifice child [ 1991.022376] Killed process 25765 (syz-executor.2) total-vm:75100kB, anon-rss:18032kB, file-rss:52012kB, shmem-rss:0kB [ 1991.077526] oom_reaper: reaped process 25765 (syz-executor.2), now anon-rss:18016kB, file-rss:18864kB, shmem-rss:0kB [ 1991.102160] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1991.180193] in:imklog cpuset=/ mems_allowed=0-1 [ 1991.184935] CPU: 0 PID: 6031 Comm: in:imklog Not tainted 4.14.177-syzkaller #0 [ 1991.192294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1991.201652] Call Trace: [ 1991.204261] dump_stack+0x13e/0x194 [ 1991.207901] dump_header+0x178/0x6d4 [ 1991.211622] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1991.216650] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1991.221763] ? ___ratelimit+0x50/0x519 [ 1991.225666] oom_kill_process.cold+0x10/0xae3 [ 1991.230174] ? lock_acquire+0x170/0x3f0 [ 1991.234360] ? lock_downgrade+0x6e0/0x6e0 [ 1991.238522] out_of_memory+0x2d5/0x1110 [ 1991.242593] ? oom_killer_disable+0x1c0/0x1c0 [ 1991.247122] ? mutex_trylock+0x152/0x1a0 [ 1991.251197] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1991.256098] ? warn_alloc+0xf0/0xf0 [ 1991.259759] __alloc_pages_nodemask+0x5d3/0x700 [ 1991.264435] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1991.269452] ? lock_downgrade+0x6e0/0x6e0 [ 1991.273630] alloc_pages_current+0xe7/0x1e0 [ 1991.277972] __page_cache_alloc+0x245/0x3d0 [ 1991.282297] filemap_fault+0xc18/0x1c50 [ 1991.286280] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1991.290964] ? lock_acquire+0x170/0x3f0 [ 1991.294945] ? ext4_filemap_fault+0x7c/0xb0 [ 1991.299274] ext4_filemap_fault+0x84/0xb0 [ 1991.303428] __do_fault+0xfa/0x380 [ 1991.306969] __handle_mm_fault+0x22e9/0x3280 [ 1991.311378] ? copy_page_range+0x1d70/0x1d70 [ 1991.315787] ? find_held_lock+0x2d/0x110 [ 1991.319862] handle_mm_fault+0x288/0x7a0 [ 1991.323937] __do_page_fault+0x4bc/0xb40 [ 1991.328008] ? vmalloc_fault+0xdf0/0xdf0 [ 1991.332071] ? do_page_fault+0x60/0x4f2 [ 1991.336047] ? page_fault+0x2f/0x50 [ 1991.339683] page_fault+0x45/0x50 [ 1991.343334] RIP: 1fa0:0x1f9f [ 1991.346349] RSP: 0000:000055b4964d09d0 EFLAGS: 7fe0266afda0 [ 1991.352983] Mem-Info: [ 1991.362168] active_anon:240499 inactive_anon:1092209 isolated_anon:0 [ 1991.362168] active_file:864 inactive_file:935 isolated_file:20 [ 1991.362168] unevictable:17447 dirty:0 writeback:0 unstable:0 [ 1991.362168] slab_reclaimable:15682 slab_unreclaimable:116115 [ 1991.362168] mapped:57949 shmem:22136 pagetables:10579 bounce:0 [ 1991.362168] free:32221 free_pcp:286 free_cma:0 [ 1991.398003] Node 0 active_anon:921528kB inactive_anon:792684kB active_file:3412kB inactive_file:3548kB unevictable:69632kB isolated(anon):0kB isolated(file):0kB mapped:221332kB dirty:0kB writeback:0kB shmem:51456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1991.427195] Node 1 active_anon:40456kB inactive_anon:3576152kB active_file:108kB inactive_file:3288kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:12492kB dirty:0kB writeback:0kB shmem:37088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1991.456840] Node 0 DMA free:10488kB min:220kB low:272kB high:324kB active_anon:448kB inactive_anon:2108kB active_file:28kB inactive_file:108kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1991.514191] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1991.539423] Node 0 DMA32 free:42336kB min:36272kB low:45340kB high:54408kB active_anon:921080kB inactive_anon:790576kB active_file:3384kB inactive_file:3440kB unevictable:69632kB writepending:0kB present:3129332kB managed:2621260kB mlocked:69632kB kernel_stack:9152kB pagetables:13596kB bounce:0kB free_pcp:816kB local_pcp:696kB free_cma:0kB [ 1991.626385] lowmem_reserve[]: 0 0 0 0 0 [ 1991.634691] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 09:45:52 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/207, 0xcf}, {&(0x7f0000000000)=""/51, 0x33}], 0x2) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f0000000500)}, {&(0x7f0000000280)="72594bfbd96655a4c1c9bfe066faf10dbb1103e4b23bd3090600ac05d094979635265980013788f1797decb7ac0ab23dfab1f0d983f2a2bde1b74be3236f02bba1e6f34fa92a85ec5213c93f6521198c334e74a17e6270947e194149908cbccbc73dfa6a332a6829d59dd89ee883193414010de4c1906f7530f1a3d9194f67865771760d4d7df17b", 0x88}], 0x2, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000001c0)=""/192, &(0x7f0000000140)=0xc0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468000000b31800027f1400010000000000", @ANYRES32=0x0, @ANYBLOB="00f8b200080800001028e6c467144d2fa813"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{}, {{}, {0xf0ffff}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}]}]}}]}, 0x58}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000080)=""/187, &(0x7f0000000380)=0xbb) 09:45:52 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000001c0)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000100)={@private, @broadcast, 0x0}, &(0x7f0000000140)=0xc) bind$can_raw(r5, &(0x7f0000000180)={0x1d, r7}, 0x10) [ 1991.683269] lowmem_reserve[]: 0 0 0 0 0 [ 1991.687370] Node 1 Normal free:69848kB min:53612kB low:67012kB high:80412kB active_anon:40456kB inactive_anon:3576152kB active_file:3356kB inactive_file:3888kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:7840kB pagetables:28512kB bounce:0kB free_pcp:784kB local_pcp:696kB free_cma:0kB [ 1991.762993] lowmem_reserve[]: 0 0 0 0 0 [ 1991.768068] Node 0 DMA: 2*4kB (ME) 9*8kB (U) 10*16kB (UME) 13*32kB (UME) 10*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10512kB [ 1991.785011] Node 0 DMA32: 1249*4kB (UME) 838*8kB (UME) 299*16kB (UME) 557*32kB (UME) 60*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38276kB [ 1991.801042] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1991.812386] Node 1 Normal: 744*4kB (UME) 356*8kB (UM) 152*16kB (UME) 239*32kB (UME) 201*64kB (UME) 82*128kB (UME) 49*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 74336kB [ 1991.834802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1991.844388] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1991.853150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1991.862121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1991.870793] 24375 total pagecache pages [ 1991.874778] 0 pages in swap cache [ 1991.878818] Swap cache stats: add 0, delete 0, find 0/0 [ 1991.884187] Free swap = 0kB [ 1991.887937] Total swap = 0kB [ 1991.890962] 1965979 pages RAM [ 1991.894048] 0 pages HighMem/MovableOnly [ 1991.898053] 339053 pages reserved [ 1991.901504] 0 pages cma reserved [ 1991.904860] Out of memory: Kill process 11221 (syz-executor.4) score 1007 or sacrifice child [ 1991.913499] Killed process 11221 (syz-executor.4) total-vm:74968kB, anon-rss:18256kB, file-rss:34624kB, shmem-rss:0kB [ 1991.953621] oom_reaper: reaped process 11221 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 09:45:52 executing program 3: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x28c180, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x400002000effd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/194, 0xd5}], 0x1, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xba, 0x3, 0x2, 0x4b, 0x1}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8015) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8000000000006, 0x0) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[], 0xfffffd2d) ioctl$TIOCNXCL(r4, 0x540d) 09:45:52 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x400480, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000114010025bd7000fedbdf25080001000000000008005150da793ee13ae801e30000000001000100010000000800010000000800010002000000087819dd0d4273f1fd00010002000000"], 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000380)=0x6c) fcntl$setpipe(r1, 0x407, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="00fb8d00401a0208d98a2383343065a81b3b8de4ac8dc4de260bf7a88fc8d0117b2bb30e0de02064743be1a225d4f5c45ff15df807fb2cd173d3cbc841ba16c24d440140df6387f72d279658dab467d69504e4a5abab5ab08d3e192fbd09005aa8800b00bfeef7b256723a6a30ab73fab5e0d89f30ceeaa47c981b117cb54ebcf3c00360253f953304a6d7bbb7"], 0x8d, 0x1) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000500), 0x0, 0x0) [ 1992.486044] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1992.506415] ptrace attach of "/root/syz-executor.3"[25796] was attempted by "/root/syz-executor.3"[25800] [ 1992.534575] net_ratelimit: 271 callbacks suppressed [ 1992.534581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1992.554897] IPVS: length: 187 != 66568 [ 1992.584614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1992.654136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1992.679020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1992.699399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1992.743920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1992.798327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1992.834986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1992.890432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1992.937920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:45:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) keyctl$setperm(0x5, 0x0, 0x202002) keyctl$chown(0x4, 0x0, 0x0, 0x0) r5 = getgid() r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002a00)=[{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000080)="e9b6c7c7ce975f5305f872607b7d2966db7a6ea13a7ebefa", 0x18}, {&(0x7f00000000c0)="c22b9348da38bd50eac09f1726900e354f2d3eda1a21a9fd139a3a4698ac02e314f603df56c8498533f4593f6465c2cb3027c40a7185c260cc324a994b60ecfbc7442fbd2461329516a5270bfb49a3a74fa0afa535f6eb0396879498668a5bb5ae3c24d36167e9cf21fd86483361943a57293ecb0c86821a481fa3f6751ce9", 0x7f}, {&(0x7f0000000140)="a4b3cc4efeb58a5bb47460e73e410c0d960432a36dce8bee838e700308c6d8c3622a0b97a9062ac9c2a854f3e7b45c1c8c13d6eeb2fc110eb4dee3c8329a66a98600f176292ca3224d946a4473b7d262d70e307a742584284212e39a53da181fa2bb578824b07f9b3321e5c93f122d2d87edee1c6e9615455dbeb7d816993f10b878652135dfe506e05a5f9b5936722dbd3697ccb72c6fdc5b4316b419", 0x9d}, {&(0x7f0000000200)="d3bc97b48ab79dfe7689b75cc628dda06f3094f03f5fc896f716d0b6e6d00df63457955a2288b08f266e50017e639bf5e8b1f20189ff2911f67a80d867693728d998ad7ac03f0c8850b7a7b2dc735da20c2521ceb7b2e5be9a6be9d95817f1b7bfeabbfb0b239414d8bf0f676dd80783c0c84eda2a34edf5120f5a293c94432ffc817f04ab50b1809fe60cbbb18a0721f083f7eac489d600ed2a43dd221dc131485d2de0c5aaa58caa1725f0e8b1e022450e927484ea1ee5faddc1d82d53d5fd8b1a0cd34a0e70c8329a48f94eb2d287749e2667317757f2c6365c3df6835e4c92bca23b296bc2b96f688bb6d4d0c78be82b11110be6cf3b", 0xf8}, {&(0x7f0000000300)="f8d863678af269526bca22d52edfeab1feec2ed36f8031e10138999339e0c8", 0x1f}, {&(0x7f0000000340)="bac922a387194bb8062d5ff64b1cc929464c8a1f9a3310c8c4c32f4e2190da80418e2f3dc2e9af5174bfc9281c0b8e0eb6977603f4ba5677d4da47cee963aa96f169608162ee6b53eba63efeffd1aba5893fb6c130707e5cd856dfad231f", 0x5e}], 0x6, 0x0, 0x0, 0x40044}, {&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000500)="42d7451905716871", 0x8}, {&(0x7f0000000540)="f452eae0b9e5865c49218cd7177a47fffd54e4affa0dc9498320340f03a24f84d6125d902a0f46d35a5bc5", 0x2b}, {&(0x7f0000000580)="606c02bebd7aa2d6fcf456a29d51c0267635b18036d06d5b40199b1a2944f2539feb6069ab55373b7976985231be513a794d8cd9a23b3eaf09", 0x39}, {&(0x7f00000005c0)="5193afabc63f9822e4c6914e4a1840c28504d8054d752ad7b905b1b735c75ac5917dc98be8510f91a487e2cd4b8b1dad2332626856040385bc68efadcba389adbce910f26e4b65d48fa1dbc1511b0c3fd125d897af6b339aa9450e15d250d085452ad27491d89016532dcb1b829e55cfb5b77cb27f740e578a93070c677c4efd249e5efe2a05e833e6b4809951", 0x8d}, {&(0x7f0000000680)="e6c06709b40e8b82ab39ab14ca28fdc0b84edbcf02d3511620a2939fa421c832fae5ef093106eab850f0d38e22a1089288a1e70b25104d24ed87c5170459e2b58401945c695ded82c369ca53569bdb635e4fdcc74766b8a96afa59445c2e44def74c62b385e7498d4970ffddc7248ebe421a70315dbf5b1e4e26255c9403fb9165", 0x81}, {&(0x7f0000000740)="a9515aa5f52ed402177db389bcd3b7ab8cc114513eea7c09aafbfdb703880128d77b0db2cccef3a487bbf4a963f8022af43e301496c74ebfe9eeb1a8a5954c787d60b5b7405ac3b1ef3005bd3dbe53ac062f9c149ce1dfa14eb3190e3da4e49c963460aa610c34f97a78ea7199dffdc93d9f0f41675358ca3cb59dded7a4dfec2d67c8d2e2", 0x85}, {&(0x7f0000000800)="627aed9a10f577ff7fb70346d8230d855b9811616b4f3f442f84363f82748d3adea32099de9f6e2fc0f2365a37acc8296ecfc4288eebd5044266f577a55dc8", 0x3f}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000840)="2ae079b2d5ffcde9113e3ef79a3dd7d3c01735214bee84f73565b953d4ffd82b56aa280024cc0b06bcca5a7726b4813e02b98fc718d53d3ff4d13e04a7eeb8ad7f42415df83ef50ebf4ff33d3ae4a259a276fb09cba09a19cc7dc0e07daeb5ef44863faaa66ba966f84f521a3f7c58626e82f6dd05788aa231175abab3830d06db7d7f6236833aedd39ae8beb30ab5b094fd598e57032527670de84ad72069238ddb0dc3a042bd180f986e1018f1300f0ceb5fe60910831786e94ce4e989bfae10fae8907e94181a86bb92e52192538397db6c1bdf5072f0172a085e7c8f4bb0e09116c790ace8611865122a91cbb6473df0a1871387", 0xf6}], 0x9, &(0x7f0000000b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0, 0x2404c004}, {&(0x7f0000000c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000cc0)="2e71dc678fb52139638e7792dd08255b", 0x10}, {&(0x7f0000000d00)="589fb79432173b36d71595f98b937f01d3b20f84bccc5036b76f27eccf654f07200a01778cee02776e0386b4ecdcda6464e8b78131de84969522cbf07ab804b2e263a01ef85e3c168b3f87b7499f47bc7d833d961af0d90538749703d9db513298df14dcc1a6ea", 0x67}, {&(0x7f0000001180)="152a5cde40e953bf244d2b8afd41a602356cb2c73a7733bafd00acb2f031b8104c945ab383ce943b31fc041cbb0740d2759d63", 0x33}], 0x3, 0x0, 0x0, 0x5}, {&(0x7f0000001200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000002300)="1a80b0984ca44d37b30da04a11fd942db2240a046bddf67292531e03a19ada8c0bfb469cfffe5c890a37ad32d555aa5532a9f02d7341144bb2c2ee615e28ca26e4607dc74479defbcacfb1d9d27996a0ddfe200b0cf4525ed62ab018e5b8a57d489bb3e3ebce3801", 0x68}], 0x1, &(0x7f0000002500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r2]}}], 0x78, 0x40088c4}, {&(0x7f0000002580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000002600)="15ef8642c557a69bb779cf09fededf5143fa33", 0x13}, {&(0x7f0000002640)="524f69e82bf85c437d67627a534a6109a7ce61cc6164086d371b689a6909ed6702c36ac484a0a1bfb7c6006ed3194fedf41fff0b8f60806d915d15015fb8285dc032530604932192c250abaa20a279849bf24ce79e59ea8dcb7900071302c94031af50de951965c8c39998baa9fbf89e2ad3aa557d7facbcded4e5ee05bdf12a02775197ef8c06562f77297202c7d66c8449e8a8a0b559b3de3cd05a993982ea5c1d4ef9a9ec6113d3660b1fdedd0435ac80df19db7c9dbbfca21961ce88329af040e7", 0xc3}], 0x2, &(0x7f0000002800)=[@rights={{0x38, 0x1, 0x1, [r1, r0, r0, r4, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2, 0xffffffffffffffff, r1]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r2, r2, r2, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4]}}], 0x80, 0x20}, {&(0x7f0000002880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002980)=[{&(0x7f0000002900)="48d7c961725c58e82b2964e232a9089c486236b0541830897e41c45afbda299597fa0e28e1ef4d43efb2513fd41bd547a50f2e511f258c60543112a8ca0d8ea575658bbd159f", 0x46}], 0x1, &(0x7f00000029c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38, 0x4000800}], 0x6, 0x48801) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) [ 1993.227074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1993.287508] IPVS: length: 187 != 66568 09:45:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = dup(r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in=@remote}}, {{@in6=@private1}}}, &(0x7f0000000240)=0xe8) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000080)) 09:45:54 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getpeername$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@mcast1, 0x77, r5}) 09:45:54 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) write(r3, &(0x7f00000001c0), 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000140)={0x1000}) [ 1994.694388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1995.907181] Bluetooth: Invalid header checksum [ 1995.914635] Bluetooth: Invalid header checksum 09:45:57 executing program 0: semget$private(0x0, 0x2, 0x240) recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x3f) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 09:45:57 executing program 2: mlockall(0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000114010025bd7000fedbdf250800010000000000080001000200000008000100000000000800010001000000088f02000000000000000800010000000000080001000200"/88], 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r3, r1, 0x4, r4}, 0x10) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) 09:45:57 executing program 1: r0 = socket(0x10, 0x3, 0x6) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f00000001c0)=0x80) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) 09:45:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000100)=0x8, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) r5 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:45:57 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) read$usbmon(r0, &(0x7f00000000c0)=""/171, 0xab) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000001c0)={0x8029, 0x2}) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000300)={{0x2, 0x4e21, @private=0xa010101}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x2c, {0x2, 0x4e20, @broadcast}, 'team_slave_0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) setsockopt(r3, 0x80000000, 0xfffffff9, &(0x7f0000000240)="32590f2d37f51e592c1a5bb4055fbc4c19ed78b6950f7c912fc98f680af005268b2aaf34b3b58f9e2c7f1dee2f84b34882c16e7ac1f479c9f43d37051f0a5d03de84e3ddea4757407ad327723afb7dc74b2ae472d30619f1e56225eeefcedb1fd9823b196ccbc215c2c920f81b14a44cb4faad6d8e4ac46f719ea6a71713a818e0223c231324e13af556b228f08c20d87ff12678b0d767b211df885482b96725b06427dddc198ecc2f4a8d75dc884e67c9", 0xb1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x4000000000010046) [ 1997.363907] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1997.413639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:45:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000140)={0x8001, 0x9}) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f00000000c0)=0x3) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e00000010a01010100f2ff29b4b3377ad8ffffffff7f00"/36], 0x24) fcntl$dupfd(r3, 0x0, r3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200407bd, &(0x7f00000001c0)={0x2, 0x4e33, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000000)="0c268a927f1f6588b967becc011927aacd71f63dc618ded8974895abeab700000000dcaa83c609ea5eac0ed01b2637aef4e4a580ba3334048a587c09e83ffd7040cfd4d6b37eefe7452fed7ac7484d8b1cdd121a3a03b66518d19785e8663d8ceed2af46094b07f705e30b67757bc0318b3b8860596c37c9f571c56631c17e6b49ffd65c4823461a1ac75b7000317c112b71451629b459c7a2d1e1d753d9de9a74eaf6a3", 0xfffffffffffffd82, 0x4000011, 0x0, 0x0) 09:45:57 executing program 1: r0 = socket(0x10, 0x3, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000140)={0x7f, 0x5, 0x2}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r4, 0xffff8001}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={r4, 0x8, 0x2, [0x0, 0x6]}, 0xc) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) [ 1997.669304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1998.060526] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1998.073984] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1998.079210] CPU: 1 PID: 3638 Comm: systemd-udevd Not tainted 4.14.177-syzkaller #0 [ 1998.086921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1998.096271] Call Trace: [ 1998.098867] dump_stack+0x13e/0x194 [ 1998.102497] dump_header+0x178/0x6d4 [ 1998.106234] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1998.111250] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1998.116352] ? ___ratelimit+0x50/0x519 [ 1998.120242] oom_kill_process.cold+0x10/0xae3 [ 1998.124782] ? lock_downgrade+0x6e0/0x6e0 [ 1998.128942] out_of_memory+0x2d5/0x1110 [ 1998.132926] ? oom_killer_disable+0x1c0/0x1c0 [ 1998.137426] ? mutex_trylock+0x152/0x1a0 [ 1998.141509] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1998.146373] ? warn_alloc+0xf0/0xf0 [ 1998.150016] __alloc_pages_nodemask+0x5d3/0x700 [ 1998.154706] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1998.159740] ? lock_downgrade+0x6e0/0x6e0 [ 1998.163912] alloc_pages_current+0xe7/0x1e0 [ 1998.168244] __page_cache_alloc+0x245/0x3d0 [ 1998.172585] filemap_fault+0xc18/0x1c50 [ 1998.176588] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1998.181268] ? lock_acquire+0x170/0x3f0 [ 1998.185248] ? ext4_filemap_fault+0x7c/0xb0 [ 1998.189577] ext4_filemap_fault+0x84/0xb0 [ 1998.193727] __do_fault+0xfa/0x380 [ 1998.197279] __handle_mm_fault+0x22e9/0x3280 [ 1998.201691] ? copy_page_range+0x1d70/0x1d70 [ 1998.206101] ? find_held_lock+0x2d/0x110 [ 1998.210175] handle_mm_fault+0x288/0x7a0 [ 1998.214230] __do_page_fault+0x4bc/0xb40 [ 1998.218276] ? vmalloc_fault+0xdf0/0xdf0 [ 1998.222334] ? do_page_fault+0x60/0x4f2 [ 1998.226309] ? page_fault+0x2f/0x50 [ 1998.229932] page_fault+0x45/0x50 [ 1998.233383] RIP: 0001:0x557c75db8b10 [ 1998.237098] RSP: 75d9df40:0000000000000008 EFLAGS: 557c74fcc68a [ 1998.316982] Mem-Info: [ 1998.339220] active_anon:240719 inactive_anon:1092209 isolated_anon:0 [ 1998.339220] active_file:20 inactive_file:19 isolated_file:0 [ 1998.339220] unevictable:26024 dirty:0 writeback:0 unstable:0 [ 1998.339220] slab_reclaimable:15646 slab_unreclaimable:116402 [ 1998.339220] mapped:62080 shmem:22136 pagetables:10704 bounce:0 [ 1998.339220] free:24903 free_pcp:0 free_cma:0 [ 1998.627435] Node 0 active_anon:921972kB inactive_anon:793164kB active_file:24kB inactive_file:28kB unevictable:87544kB isolated(anon):0kB isolated(file):0kB mapped:230456kB dirty:0kB writeback:0kB shmem:51468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1998.893001] Node 1 active_anon:40904kB inactive_anon:3575672kB active_file:56kB inactive_file:0kB unevictable:16552kB isolated(anon):0kB isolated(file):0kB mapped:17864kB dirty:0kB writeback:0kB shmem:37076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1999.142655] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:448kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:152kB writepending:0kB present:15992kB managed:15908kB mlocked:152kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1999.380891] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1999.430738] Node 0 DMA32 free:36000kB min:36272kB low:45340kB high:54408kB active_anon:921524kB inactive_anon:791056kB active_file:36kB inactive_file:0kB unevictable:87392kB writepending:0kB present:3129332kB managed:2621260kB mlocked:87392kB kernel_stack:9184kB pagetables:13924kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1999.674958] lowmem_reserve[]: 0 0 0 0 0 [ 1999.686779] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1999.775154] lowmem_reserve[]: 0 0 0 0 0 [ 1999.823403] Node 1 Normal free:53552kB min:53612kB low:67012kB high:80412kB active_anon:40904kB inactive_anon:3575672kB active_file:0kB inactive_file:0kB unevictable:16568kB writepending:0kB present:3932160kB managed:3870192kB mlocked:16568kB kernel_stack:8320kB pagetables:28852kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1999.870014] lowmem_reserve[]: 0 0 0 0 0 [ 1999.874138] Node 0 DMA: 2*4kB (ME) 13*8kB (UM) 3*16kB (UE) 11*32kB (UME) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10432kB [ 1999.889893] Node 0 DMA32: 598*4kB (UME) 535*8kB (UME) 655*16kB (UME) 535*32kB (UME) 27*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36000kB [ 1999.904254] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1999.914998] Node 1 Normal: 74*4kB (UME) 107*8kB (UM) 7*16kB (UME) 26*32kB (UME) 136*64kB (UME) 84*128kB (UME) 37*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 53552kB [ 1999.931693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1999.940578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1999.949191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1999.958089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1999.966732] 26285 total pagecache pages [ 1999.970717] 0 pages in swap cache [ 1999.974170] Swap cache stats: add 0, delete 0, find 0/0 [ 1999.980171] Free swap = 0kB [ 1999.983194] Total swap = 0kB [ 1999.987284] 1965979 pages RAM [ 1999.990390] 0 pages HighMem/MovableOnly [ 1999.994351] 339053 pages reserved [ 1999.997856] 0 pages cma reserved [ 2000.001228] Out of memory: Kill process 25846 (syz-executor.2) score 1009 or sacrifice child [ 2000.009970] Killed process 25846 (syz-executor.2) total-vm:74968kB, anon-rss:18000kB, file-rss:49968kB, shmem-rss:0kB [ 2000.041624] oom_reaper: reaped process 25846 (syz-executor.2), now anon-rss:18016kB, file-rss:16040kB, shmem-rss:0kB [ 2000.066461] systemd-udevd invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=-1000 [ 2000.077895] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2000.082911] CPU: 0 PID: 3638 Comm: systemd-udevd Not tainted 4.14.177-syzkaller #0 [ 2000.090606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2000.100056] Call Trace: [ 2000.102647] dump_stack+0x13e/0x194 [ 2000.106275] dump_header+0x178/0x6d4 [ 2000.109994] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2000.115005] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2000.120093] ? ___ratelimit+0x50/0x519 [ 2000.123967] oom_kill_process.cold+0x10/0xae3 [ 2000.128459] ? lock_downgrade+0x6e0/0x6e0 [ 2000.132596] out_of_memory+0x2d5/0x1110 [ 2000.136569] ? oom_killer_disable+0x1c0/0x1c0 [ 2000.141057] ? mutex_trylock+0x152/0x1a0 [ 2000.145449] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2000.150281] ? warn_alloc+0xf0/0xf0 [ 2000.153914] __alloc_pages_nodemask+0x5d3/0x700 [ 2000.158568] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2000.163574] ? inode_doinit_with_dentry+0x735/0xe30 [ 2000.168591] ? lockref_get+0x11/0x50 [ 2000.172291] alloc_pages_current+0xe7/0x1e0 [ 2000.176611] __get_free_pages+0xb/0x40 [ 2000.180494] inode_doinit_with_dentry+0x7b6/0xe30 [ 2000.185322] ? selinux_cred_free+0x70/0x70 [ 2000.189536] ? wake_atomic_t_function+0x1a0/0x1a0 [ 2000.194382] selinux_d_instantiate+0x23/0x30 [ 2000.198775] security_d_instantiate+0x54/0xd0 [ 2000.203268] d_splice_alias+0x7b/0xb70 [ 2000.207153] ? _raw_spin_unlock+0x29/0x40 [ 2000.211298] kernfs_iop_lookup+0x196/0x200 [ 2000.215518] lookup_slow+0x213/0x410 [ 2000.219235] ? page_put_link+0x1b0/0x1b0 [ 2000.223566] ? lookup_fast+0x458/0xeb0 [ 2000.227439] walk_component+0x648/0x1bc0 [ 2000.231494] ? wait_for_completion+0x390/0x390 [ 2000.236075] ? path_init+0x1920/0x1920 [ 2000.239947] ? security_inode_permission+0xb7/0xf0 [ 2000.244860] ? kernfs_iop_getattr+0xd0/0xd0 [ 2000.249194] ? __inode_permission+0x7c/0x300 [ 2000.253596] link_path_walk+0x717/0xed0 [ 2000.257605] ? path_init+0x26e/0x1920 [ 2000.261390] ? walk_component+0x1bc0/0x1bc0 [ 2000.265717] path_openat+0x16e/0x3c50 [ 2000.269506] ? __lock_acquire+0x5f7/0x4620 [ 2000.273737] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 2000.278394] ? __lock_is_held+0xad/0x140 [ 2000.282447] do_filp_open+0x18e/0x250 [ 2000.286285] ? may_open_dev+0xe0/0xe0 [ 2000.290081] ? lock_downgrade+0x6e0/0x6e0 [ 2000.294211] ? do_raw_spin_unlock+0x164/0x250 [ 2000.298691] ? __alloc_fd+0x1bf/0x490 [ 2000.302477] do_sys_open+0x29d/0x3f0 [ 2000.306179] ? filp_open+0x60/0x60 [ 2000.309707] ? do_syscall_64+0x4c/0x640 [ 2000.313666] ? do_sys_open+0x3f0/0x3f0 [ 2000.317564] do_syscall_64+0x1d5/0x640 [ 2000.321444] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2000.326618] RIP: 0033:0x7f42eb57a6f0 [ 2000.330313] RSP: 002b:00007ffcc0b70bb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2000.338010] RAX: ffffffffffffffda RBX: 0000557c75d9df40 RCX: 00007f42eb57a6f0 [ 2000.345271] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007ffcc0b70d60 [ 2000.352525] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 2000.359905] R10: 0000000000080000 R11: 0000000000000246 R12: 0000557c74fcc68a [ 2000.367249] R13: 0000000000000001 R14: 0000557c75db8b10 R15: 00007ffcc0b70de0 [ 2000.376449] Mem-Info: [ 2000.385735] active_anon:240717 inactive_anon:1092209 isolated_anon:0 [ 2000.385735] active_file:12 inactive_file:14 isolated_file:0 [ 2000.385735] unevictable:26028 dirty:0 writeback:0 unstable:0 [ 2000.385735] slab_reclaimable:15646 slab_unreclaimable:116402 [ 2000.385735] mapped:62089 shmem:22136 pagetables:10705 bounce:0 [ 2000.385735] free:25000 free_pcp:0 free_cma:0 [ 2000.473722] Node 0 active_anon:921972kB inactive_anon:793164kB active_file:16kB inactive_file:20kB unevictable:87544kB isolated(anon):0kB isolated(file):0kB mapped:230460kB dirty:0kB writeback:0kB shmem:51468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2000.632691] Node 1 active_anon:40896kB inactive_anon:3575672kB active_file:32kB inactive_file:36kB unevictable:16568kB isolated(anon):0kB isolated(file):0kB mapped:17896kB dirty:0kB writeback:0kB shmem:37076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2000.904880] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:448kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:152kB writepending:0kB present:15992kB managed:15908kB mlocked:152kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2001.143683] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2001.195715] Node 0 DMA32 free:36016kB min:36272kB low:45340kB high:54408kB active_anon:921524kB inactive_anon:791056kB active_file:4kB inactive_file:32kB unevictable:87396kB writepending:0kB present:3129332kB managed:2621260kB mlocked:87396kB kernel_stack:9184kB pagetables:13924kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2001.443788] lowmem_reserve[]: 0 0 0 0 0 [ 2001.505720] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2001.676703] lowmem_reserve[]: 0 0 0 0 0 [ 2001.680757] Node 1 Normal free:53608kB min:53612kB low:67012kB high:80412kB active_anon:40896kB inactive_anon:3575672kB active_file:84kB inactive_file:0kB unevictable:16568kB writepending:0kB present:3932160kB managed:3870192kB mlocked:16568kB kernel_stack:8256kB pagetables:28852kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2001.945030] lowmem_reserve[]: 0 0 0 0 0 [ 2001.973433] Node 0 DMA: 2*4kB (ME) 13*8kB (UM) 3*16kB (UE) 11*32kB (UME) 11*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10432kB [ 2002.125329] Node 0 DMA32: 603*4kB (UME) 538*8kB (UME) 657*16kB (UME) 534*32kB (UME) 27*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36044kB [ 2002.241650] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2002.330662] Node 1 Normal: 76*4kB (UME) 108*8kB (UM) 7*16kB (UME) 28*32kB (UME) 136*64kB (UME) 84*128kB (UME) 37*256kB (UME) 18*512kB (ME) 11*1024kB (M) 1*2048kB (M) 0*4096kB = 53632kB [ 2002.416951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2002.475903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2002.484528] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2002.609100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2002.667895] 26286 total pagecache pages [ 2002.671916] 0 pages in swap cache [ 2002.675362] Swap cache stats: add 0, delete 0, find 0/0 [ 2002.762964] Free swap = 0kB [ 2002.809762] Total swap = 0kB [ 2002.812834] 1965979 pages RAM [ 2002.850710] 0 pages HighMem/MovableOnly [ 2002.854725] 339053 pages reserved [ 2002.909829] 0 pages cma reserved [ 2002.913251] Out of memory: Kill process 25808 (syz-executor.2) score 1007 or sacrifice child [ 2003.005044] Killed process 25808 (syz-executor.2) total-vm:74968kB, anon-rss:18376kB, file-rss:34624kB, shmem-rss:0kB [ 2003.211635] oom_reaper: reaped process 25808 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 09:46:03 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = getpid() getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) move_pages(r4, 0x1, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000040)=[0x1d5, 0x1, 0x401, 0x10000, 0x401], &(0x7f0000000080)=[0x0], 0x4) 09:46:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x7ffffffd, 0x181280) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x0, 0x1c8, 0x130, 0x98, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth0_macvtap\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0xff, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x142) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet(0x2, 0x3, 0x40000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000040)=0x5, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:46:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x2}, 0x9cc46edb4bdecbe1, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x800}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x5]}, 0x0, r1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x324, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0xffffff31) r3 = socket$inet(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x9b02e6d4404d0861, &(0x7f0000000300), 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000180)={{0x4eeae72f2ef3d882, 0x0, @identifier="029272e4e893cce830d37b008768f2ae"}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) r5 = socket$unix(0x1, 0x0, 0x0) sendto$unix(r5, 0x0, 0x0, 0x4000811, 0x0, 0xffffffffffffff4c) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000000600)="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", 0xe00) sendfile(r6, r7, 0x0, 0x12000) 09:46:03 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x330, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) [ 2003.743351] audit: type=1800 audit(1588412764.056:55): pid=25877 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=16020 res=0 [ 2003.764206] audit: type=1804 audit(1588412764.056:56): pid=25877 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir151439082/syzkaller.JAKYpI/386/file0" dev="sda1" ino=16020 res=1 09:46:05 executing program 1: r0 = socket(0x1d, 0x80000, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000500)}], 0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) readv(r0, &(0x7f0000000100), 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x10000076, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x10}, 0x0) r4 = socket(0x10, 0x2, 0x7fff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r7, r5, r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setgroups(0x1, &(0x7f00000000c0)=[r8]) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={r3, r5, r8}, 0xc) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040)=0x1, 0x4) 09:46:05 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x0, 0x60, 0x0) 09:46:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "190f65570b0b0615", "ecdd0cad906c2689a6e89906721de744", "54a58e18", "c033b54b59c903e5"}, 0x28) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:46:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000500)='2', 0x1}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f00000001c0)='\xb3=\xbb{\xad\xa1<\x1b4\x83e', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000c, 0x110, r4, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x0, 0x0) [ 2005.610472] net_ratelimit: 138 callbacks suppressed [ 2005.610479] ip_tables: iptables: counters copy to user failed while replacing table [ 2005.656077] ip_tables: iptables: counters copy to user failed while replacing table [ 2006.200564] can: request_module (can-proto-6) failed. [ 2006.410484] ip_tables: iptables: counters copy to user failed while replacing table [ 2006.424905] lo: caps=(0x00000144401d7c69, 0x0000000000000000) len=582 data_len=0 gso_size=106 gso_type=1 ip_summed=3 [ 2006.435912] ------------[ cut here ]------------ [ 2006.440762] WARNING: CPU: 1 PID: 25921 at net/core/dev.c:2613 skb_warn_bad_offload.cold+0x1ce/0x448 [ 2006.450064] Kernel panic - not syncing: panic_on_warn set ... [ 2006.450064] 09:46:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x130, 0x1c8, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059", 0x2d, 0x11, 0x0, 0x0) 09:46:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x1) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x100000000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f00000005c0)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="a4bca4dddf9ce544fb925d7db919ef2e1259ffac68c378518b29877a5130a61a3ed6dfa983d16a01eb010001000000000097ce4b29ef3a71de3e0553cd80fcfe397cb18bb9923878673c8f65cc207d650978a5182d2600d3d2a6b2a3a4bea14bf4a2b781029c6ad93b00baa1805b9740831d331cbacad00db7b6671048b173441f97919961a7a1f7b2c2a969"], 0x8c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0], &(0x7f0000a8a000)=0x1) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000100)={0x9, 0x7}) sendfile(0xffffffffffffffff, r6, &(0x7f0000000180)=0xfffffffffffffffd, 0x8080fffffffe) 09:46:06 executing program 1: socket(0x10, 0x3, 0x6) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 09:46:06 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000058c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) io_submit(0x0, 0x5, &(0x7f0000000540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x9, 0xffffffffffffffff, &(0x7f0000000100)="6e8f06aedbe638a2aa186d22a9c15dbbca9138b0a221295051c1d9aae28ea82f2302784accb10eb2ff1c98647d69117eb4251ddf11c712c13e009a5670a876b47bfa0e82dc4ffac1a11b4ce8c6ee62430d47254cade863904d336d3950098c39455037bf3dafbe399cec6d23d6a78f9fe6732e01e2f2cdf21a721fe25ec4d3779e04bf3b0d855edb751b1df829dfe6cc9306e56aad24935717e96198140530d986293d9710a59643907209fee47616f9672ac81d2060dc472d046e9ac8bbcd51294472d1472fea5283b11c16dcb499c4b4ba40", 0xd3, 0x0, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xcd, r2, &(0x7f0000000200)="0050a800ef1286a289baa6e9649447a1296391d5b7080ad1087abb3707c5e6efa8277b4a5bf806e2677eadbea6c337d049d7c00334a5b68a5e31131ebc0f2c7e3d833f1e86d47b95e8c74bce0e6995e54b817d9cd682d3bb2666d4e7229b8590067faa852afdacc20a15e7a8a3a4e929825617b3", 0x74, 0x6, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="362f7cb16a8d0ac9bc15018b6e3b034b280d7a9ca94f4b366a32982fa627458e637ae254bce27ad6b9ed5b0f25bb0e7e3704d1bf09921c7f3f6237f6cdd0b52f86d748a56d8b7610476d2efdf2f3d472ebfc1ba119c0cbad56e1d694fdd2d441ce4f65fb4ad1425a7f909ed4e464f8f4a28ae1046f445a6a264b96bb01749260115f80465dce3910cb86fcc49c47c61deb45a0a6cbe531b00f96ea106c4488a70347d51056", 0xa5, 0x3, 0x0, 0x2, r3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x9, r0, &(0x7f00000003c0)="509fa3c1ee1e16bcbe4f7bfb3eacef5c27821d76f057100db1154f5b00215670c1a50051937c6afa7eb9c3424172f54e07b4065e7a12582961c43326ecb521aec61397a2ac2a18c77a750d2e8cc9fd648512d50523cadb7f6460c6472f922a13f5c0130d56b6ea61befaaab2a3f43a65379a603127159398eb381519e843b2f04ca59f3b9cc09b13d48158951ab9d5ddad2a18e7a84fdb9bc3639b8817f1fecc734131", 0xa3, 0x9, 0x0, 0x3, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0xcd, r0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x1, r5}]) r6 = dup2(r2, r0) sendmsg$netlink(r6, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) [ 2006.457433] CPU: 1 PID: 25921 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 [ 2006.465395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2006.474758] Call Trace: [ 2006.477348] [ 2006.479508] dump_stack+0x13e/0x194 [ 2006.483142] panic+0x1f9/0x42d [ 2006.486403] ? add_taint.cold+0x16/0x16 [ 2006.490392] ? skb_warn_bad_offload.cold+0x1ce/0x448 [ 2006.495524] ? skb_warn_bad_offload.cold+0x1ce/0x448 [ 2006.500656] __warn.cold+0x2f/0x30 [ 2006.504224] ? ist_end_non_atomic+0x10/0x10 [ 2006.508561] ? skb_warn_bad_offload.cold+0x1ce/0x448 [ 2006.513672] report_bug+0x20a/0x248 [ 2006.517311] do_error_trap+0x195/0x2d0 [ 2006.521230] ? math_error+0x2d0/0x2d0 [ 2006.525051] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2006.529915] invalid_op+0x1b/0x40 [ 2006.533375] RIP: 0010:skb_warn_bad_offload.cold+0x1ce/0x448 [ 2006.539090] RSP: 0018:ffff8880aeb07870 EFLAGS: 00010286 [ 2006.544747] RAX: 0000000000000068 RBX: ffffffff87387c60 RCX: 0000000000000000 [ 2006.552017] RDX: 0000000000000100 RSI: ffffffff86ac0860 RDI: ffffed1015d60f04 [ 2006.559288] RBP: ffff8880538daf90 R08: 0000000000000068 R09: 0000000000000000 [ 2006.566565] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880538daec0 [ 2006.573924] R13: 000000000000006a R14: 0000000000000000 R15: 0000000000000246 [ 2006.581245] skb_checksum_help+0x5f3/0x830 [ 2006.585499] ? mark_held_locks+0xa6/0xf0 [ 2006.589565] checksum_tg+0x52/0x65 [ 2006.593311] ipt_do_table+0xaaf/0x16d0 [ 2006.597240] ? ip_local_deliver_finish+0x67e/0xaa0 [ 2006.602184] ? get_info+0x530/0x530 [ 2006.605830] ? ip_call_ra_chain+0x530/0x530 09:46:06 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000500)=""/47, 0x2f) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000380)={0x990000, 0x1, 0x100, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x9a0916, 0x6, [], @value64=0x7f}}) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f00000003c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, 0x8) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="580000000114010025bd7000fedbdf2508000100000000000800010002000000080001000000000008000100010000000800010001000000080001000000fcff0700010034ed0080f12aca590008000100000000000c000100020000003a310003819456841564377681b07f60f5c4612d0d1dc50498c93ad62e62fe1b76a0f7f53c907ce610a2a50c99551bf8cd6b14220394b1318e44e99ff1e73aaa24f9f12f8cdc7742546c254c07106901790ca7550cab70a5f9652f624115add42f8b7beb085b3eeee8e40684708e53866ea1f56ddde8643889ea6173ea7d"], 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001840)={&(0x7f0000001980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="2000020009000000030000000f0000000000000000feffff04000000", @ANYRES32=0x0, @ANYBLOB="2000020003000000310000000000002004000000ffff000002000000", @ANYRES32=0x0, @ANYBLOB="69000600e7028bb3177096c6e3a75ce68860a791f90d36c84a6436eb887ce1b8aba1d9d22a15361f82530947ceadccbdc60030d3efe9dc548653c1e8112949e80b9f7e95b18dbc04a0bea14af19f9080d61231e780483f5af71378623b6a39ec398c9e3fc80d958a09000000"], 0x1234}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f00000000c0)="9cdc21f38451b4e4c59bc93607b6bdfa5c62b16294edb028d1129ac16f16b3ea1b74b47c13c221665a57ea81d0d2043c171abc552adadcbd24ce7308f35fe439838ab7defba2673dbb7491a2376a0f43c2cc6212816e48bf1b76c0f2b0c8fc2eef939e319a74751da1f8884f7a7d02210e5aaecbf08880fabb94a4bb4f29e45cce1d32bb7f7bb64dea9a4a834c49295744f0635c9fbe1ee22fc13d3c2e3d8b4d9c3c33efaf400a59bc5a6f2190e93fa7e572efe098cd4735813a5b35258cd1483648ea02c8f499b858a7e90e51c462a46dfb46a9d8b4922dd84f4b757c5137e829e3e0b6234e1a32e1573bf98348323753b8da9580", 0xf5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000000400)=""/226, 0xe2}], 0x1, 0x0) 09:46:06 executing program 1: r0 = socket(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/4096}, {&(0x7f0000000000)=""/37}, {&(0x7f00000011c0)=""/4096}], 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000002300)={0xca1c, 0xe8, 0x9c000000, 0xffffffff, [], [], [], 0x1, 0x6a1d7533, 0x68, 0xffffffff, "a7ebe268f4bb1ebeffbb5db34b1a1688"}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x800000000000001) write(r6, &(0x7f0000000340), 0x41395527) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$RTC_RD_TIME(r7, 0x80247009, &(0x7f0000000080)) [ 2006.610157] ? save_trace+0x1e0/0x290 [ 2006.614050] iptable_mangle_hook+0x9c/0x560 [ 2006.618379] nf_hook_slow+0xa5/0x1a0 [ 2006.622107] ip_rcv+0xb9e/0xfec [ 2006.625395] ? ip_local_deliver+0x450/0x450 [ 2006.629746] ? consume_skb+0x23b/0x330 [ 2006.633640] ? ip_local_deliver_finish+0xaa0/0xaa0 [ 2006.638570] ? ip_local_deliver+0x450/0x450 [ 2006.642908] __netif_receive_skb_core+0x1e50/0x2c00 [ 2006.647952] ? trace_hardirqs_on+0x10/0x10 [ 2006.652215] ? save_trace+0x1e0/0x290 [ 2006.656023] ? enqueue_to_backlog+0xd20/0xd20 [ 2006.660530] ? find_held_lock+0x2d/0x110 [ 2006.664596] ? process_backlog+0x42b/0x750 [ 2006.668862] ? lock_acquire+0x170/0x3f0 [ 2006.672849] ? __netif_receive_skb+0x27/0x1a0 [ 2006.677348] __netif_receive_skb+0x27/0x1a0 [ 2006.681732] process_backlog+0x214/0x750 [ 2006.685810] ? net_rx_action+0x237/0xe90 [ 2006.689875] net_rx_action+0x456/0xe90 [ 2006.693777] ? napi_complete_done+0x4e0/0x4e0 [ 2006.698301] __do_softirq+0x254/0x9bf [ 2006.702119] do_softirq_own_stack+0x2a/0x40 [ 2006.706441] [ 2006.708684] ? ip_finish_output2+0x77b/0x14a0 [ 2006.713191] do_softirq.part.0+0x103/0x160 [ 2006.717436] __local_bh_enable_ip+0x149/0x190 [ 2006.721942] ip_finish_output2+0x7ae/0x14a0 [ 2006.726289] ? save_trace+0x290/0x290 [ 2006.730097] ? ip_copy_metadata+0x980/0x980 [ 2006.734472] ? __lock_is_held+0xad/0x140 [ 2006.738550] ? ip_finish_output+0x556/0xc30 [ 2006.742875] ip_finish_output+0x556/0xc30 [ 2006.747049] ip_output+0x1c2/0x520 [ 2006.750602] ? ip_mc_output+0xcb0/0xcb0 [ 2006.754579] ? ip_fragment.constprop.0+0x200/0x200 [ 2006.759520] ip_local_out+0x93/0x170 [ 2006.763240] ip_queue_xmit+0x7b2/0x1b20 [ 2006.767236] ? tcp_established_options+0x2bc/0x420 [ 2006.772184] __tcp_transmit_skb+0x1654/0x2dd0 [ 2006.776683] ? dctcp_get_info+0x310/0x310 [ 2006.780868] ? __tcp_select_window+0x6a0/0x6a0 [ 2006.786316] ? tcp_fragment_tstamp+0xab/0x330 [ 2006.790824] tcp_write_xmit+0x56a/0x4a60 [ 2006.794897] ? _copy_from_iter_full+0x1b9/0x6a0 [ 2006.799576] ? __phys_addr_symbol+0x1f/0x60 [ 2006.803902] ? __check_object_size+0x208/0x28a [ 2006.808488] ? __sk_mem_schedule+0x99/0xd0 [ 2006.812730] tcp_sendmsg_locked+0x14da/0x2fd0 [ 2006.817241] ? tcp_sendpage+0x60/0x60 [ 2006.821043] ? __local_bh_enable_ip+0x94/0x190 [ 2006.825624] tcp_sendmsg+0x2b/0x40 [ 2006.829163] inet_sendmsg+0x116/0x4d0 [ 2006.832963] ? inet_recvmsg+0x4c0/0x4c0 [ 2006.836937] sock_sendmsg+0xc5/0x100 [ 2006.840675] SYSC_sendto+0x1c4/0x2b0 [ 2006.844395] ? SYSC_connect+0x250/0x250 [ 2006.848373] ? lock_downgrade+0x6e0/0x6e0 [ 2006.852533] ? put_timespec64+0xaa/0xf0 [ 2006.856510] ? nsecs_to_jiffies+0x30/0x30 [ 2006.860663] ? SyS_clock_gettime+0xf5/0x180 [ 2006.864999] ? SyS_clock_settime+0x1a0/0x1a0 [ 2006.869410] ? do_syscall_64+0x4c/0x640 [ 2006.873382] ? SyS_sendto+0x21/0x50 [ 2006.877094] ? SyS_getpeername+0x30/0x30 [ 2006.881166] do_syscall_64+0x1d5/0x640 [ 2006.885074] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2006.890262] RIP: 0033:0x45c829 [ 2006.893448] RSP: 002b:00007f589c942c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2006.901152] RAX: ffffffffffffffda RBX: 0000000000500d40 RCX: 000000000045c829 [ 2006.908430] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 2006.915702] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 000000000020c49a [ 2006.922989] R10: 000000000020c49a R11: 0000000000000246 R12: 00000000ffffffff [ 2006.930266] R13: 0000000000000a08 R14: 00000000004ccbe1 R15: 00007f589c9436d4 [ 2006.938886] Kernel Offset: disabled [ 2006.943008] Rebooting in 86400 seconds..