Warning: Permanently added '10.128.10.55' (ECDSA) to the list of known hosts. 2020/07/23 07:41:19 fuzzer started 2020/07/23 07:41:20 dialing manager at 10.128.0.105:39337 2020/07/23 07:41:20 syscalls: 3213 2020/07/23 07:41:20 code coverage: enabled 2020/07/23 07:41:20 comparison tracing: enabled 2020/07/23 07:41:20 extra coverage: enabled 2020/07/23 07:41:20 setuid sandbox: enabled 2020/07/23 07:41:20 namespace sandbox: enabled 2020/07/23 07:41:20 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/23 07:41:20 fault injection: enabled 2020/07/23 07:41:20 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/23 07:41:20 net packet injection: enabled 2020/07/23 07:41:20 net device setup: enabled 2020/07/23 07:41:20 concurrency sanitizer: enabled 2020/07/23 07:41:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/23 07:41:20 USB emulation: enabled 2020/07/23 07:41:23 suppressing KCSAN reports in functions: 'snd_rawmidi_transmit' 'ext4_mb_good_group' 'blk_mq_sched_dispatch_requests' 'futex_wait_queue_me' 'n_tty_receive_buf_common' 'step_into' 'do_sys_poll' 'snd_rawmidi_poll' 'xas_clear_mark' '__writeback_single_inode' '__send_signal' 'blk_mq_dispatch_rq_list' '__delayacct_blkio_end' 'audit_log_start' '__mod_timer' 'blk_mq_rq_ctx_init' 'do_nanosleep' 'do_select' 'ext4_mark_iloc_dirty' 'io_sq_thread' '__mark_inode_dirty' '__add_to_page_cache_locked' 'fsnotify' 'do_epoll_wait' '__ext4_new_inode' 'ext4_free_inodes_count' 'complete_signal' 'exit_mm' 'ext4_handle_inode_extension' 'pcpu_alloc' 'ext4_mb_regular_allocator' 'generic_write_end' 'find_get_pages_range_tag' 'page_counter_charge' 'do_syslog' 'dd_has_work' 'wg_packet_decrypt_worker' 'ext4_free_inode' 'alloc_pid' '__xa_set_mark' '__xa_clear_mark' 'expire_timers' 'kauditd_thread' 'ext4_da_write_end' 07:42:41 executing program 0: syzkaller login: [ 112.734399][ T8665] IPVS: ftp: loaded support on port[0] = 21 [ 112.784734][ T8665] chnl_net:caif_netlink_parms(): no params data found [ 112.816464][ T8665] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.823520][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.831177][ T8665] device bridge_slave_0 entered promiscuous mode [ 112.839255][ T8665] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.846847][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.854188][ T8665] device bridge_slave_1 entered promiscuous mode [ 112.869407][ T8665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 07:42:41 executing program 1: [ 112.880042][ T8665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.897852][ T8665] team0: Port device team_slave_0 added [ 112.904567][ T8665] team0: Port device team_slave_1 added [ 112.918841][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.926396][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.952507][ T8665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.964180][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.971592][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.997685][ T8665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.056652][ T8665] device hsr_slave_0 entered promiscuous mode [ 113.095200][ T8665] device hsr_slave_1 entered promiscuous mode 07:42:41 executing program 2: [ 113.196164][ T8827] IPVS: ftp: loaded support on port[0] = 21 [ 113.308996][ T8869] IPVS: ftp: loaded support on port[0] = 21 [ 113.321499][ T8665] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.377762][ T8665] netdevsim netdevsim0 netdevsim1: renamed from eth1 07:42:41 executing program 3: [ 113.419465][ T8827] chnl_net:caif_netlink_parms(): no params data found [ 113.430088][ T8665] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.494471][ T8665] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.563269][ T8665] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.570316][ T8665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.577610][ T8665] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.584613][ T8665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.611599][ T8991] IPVS: ftp: loaded support on port[0] = 21 07:42:42 executing program 4: [ 113.694117][ T8827] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.701704][ T8827] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.710438][ T8827] device bridge_slave_0 entered promiscuous mode [ 113.726202][ T8869] chnl_net:caif_netlink_parms(): no params data found [ 113.746691][ T8827] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.753725][ T8827] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.775534][ T8827] device bridge_slave_1 entered promiscuous mode [ 113.796105][ T8665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.863446][ T5035] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.878152][ T5035] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.896431][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 113.916543][ T8827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.930683][ T8869] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.938862][ T8869] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.947338][ T8869] device bridge_slave_0 entered promiscuous mode [ 113.954802][ T8869] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.962638][ T8869] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.971443][ T8869] device bridge_slave_1 entered promiscuous mode [ 113.979749][ T8827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.007968][ T8991] chnl_net:caif_netlink_parms(): no params data found [ 114.016791][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.024297][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 07:42:42 executing program 5: [ 114.062957][ T8827] team0: Port device team_slave_0 added [ 114.072790][ T8665] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.085120][ T8869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.094689][ T8827] team0: Port device team_slave_1 added [ 114.102883][ T9206] IPVS: ftp: loaded support on port[0] = 21 [ 114.134949][ T8827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.143450][ T8827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.170066][ T8827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.181946][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.191397][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.199947][ T5035] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.206999][ T5035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.215688][ T8869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.232910][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.241304][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.250578][ T3136] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.257606][ T3136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.266177][ T8827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.273092][ T8827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.299682][ T8827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.344357][ T9294] IPVS: ftp: loaded support on port[0] = 21 [ 114.351706][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.360888][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.372657][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.381183][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.389991][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.398417][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.407552][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.415971][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.423985][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.432579][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.444300][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.454004][ T8869] team0: Port device team_slave_0 added [ 114.506327][ T8827] device hsr_slave_0 entered promiscuous mode [ 114.546084][ T8827] device hsr_slave_1 entered promiscuous mode [ 114.585826][ T8827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.593382][ T8827] Cannot create hsr debugfs directory [ 114.607779][ T8991] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.614809][ T8991] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.622456][ T8991] device bridge_slave_0 entered promiscuous mode [ 114.629678][ T8665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.638002][ T8869] team0: Port device team_slave_1 added [ 114.653466][ T8991] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.660539][ T8991] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.668850][ T8991] device bridge_slave_1 entered promiscuous mode [ 114.684811][ T8869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.692711][ T8869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.719662][ T8869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.732167][ T8869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.739517][ T8869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.765815][ T8869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.816241][ T8665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.877799][ T8869] device hsr_slave_0 entered promiscuous mode [ 114.905241][ T8869] device hsr_slave_1 entered promiscuous mode [ 114.955112][ T8869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.962669][ T8869] Cannot create hsr debugfs directory [ 114.973691][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.981499][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.006325][ T8991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.050498][ T9294] chnl_net:caif_netlink_parms(): no params data found [ 115.059971][ T8991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.070292][ T9206] chnl_net:caif_netlink_parms(): no params data found [ 115.097169][ T8991] team0: Port device team_slave_0 added [ 115.104142][ T8991] team0: Port device team_slave_1 added [ 115.115297][ T8827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.137240][ T8827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.185659][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.194005][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.213770][ T8991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.220971][ T8991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.246966][ T8991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.257816][ T8827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.308047][ T8827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.346539][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.354584][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.369444][ T8991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.376577][ T8991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.402873][ T8991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.426941][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.434457][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.453848][ T8869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.516809][ T9294] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.523833][ T9294] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.531737][ T9294] device bridge_slave_0 entered promiscuous mode [ 115.538781][ T8665] device veth0_vlan entered promiscuous mode [ 115.596934][ T8991] device hsr_slave_0 entered promiscuous mode [ 115.655334][ T8991] device hsr_slave_1 entered promiscuous mode [ 115.715148][ T8991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.715153][ T8991] Cannot create hsr debugfs directory [ 115.716856][ T9206] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.735262][ T9206] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.742658][ T9206] device bridge_slave_0 entered promiscuous mode [ 115.751322][ T9206] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.758683][ T9206] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.766253][ T9206] device bridge_slave_1 entered promiscuous mode [ 115.773441][ T8869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.836781][ T9294] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.843838][ T9294] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.851792][ T9294] device bridge_slave_1 entered promiscuous mode [ 115.873012][ T9206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.882752][ T8869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.919582][ T8665] device veth1_vlan entered promiscuous mode [ 115.935943][ T9206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.947407][ T8869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.012460][ T9294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.030257][ T9206] team0: Port device team_slave_0 added [ 116.036483][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.044359][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.067282][ T9294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.078382][ T9206] team0: Port device team_slave_1 added [ 116.111417][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.119588][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.129670][ T8665] device veth0_macvtap entered promiscuous mode [ 116.140739][ T9206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.148255][ T9206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.174641][ T9206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.189474][ T8827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.198706][ T9294] team0: Port device team_slave_0 added [ 116.206508][ T8665] device veth1_macvtap entered promiscuous mode [ 116.217403][ T9206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.224361][ T9206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.250931][ T9206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.264979][ T9294] team0: Port device team_slave_1 added [ 116.294071][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.310895][ T8991] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 116.376749][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.384700][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.393059][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.401647][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.410407][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.418161][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.432905][ T8827] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.440825][ T9294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.447861][ T9294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.474590][ T9294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.485459][ T8991] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 116.566783][ T9206] device hsr_slave_0 entered promiscuous mode [ 116.605530][ T9206] device hsr_slave_1 entered promiscuous mode [ 116.685261][ T9206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.692824][ T9206] Cannot create hsr debugfs directory [ 116.699606][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.707660][ T9294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.714623][ T9294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.741098][ T9294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.757458][ T8991] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 116.789717][ T8991] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 116.857213][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.865750][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.966903][ T9294] device hsr_slave_0 entered promiscuous mode [ 117.025405][ T9294] device hsr_slave_1 entered promiscuous mode [ 117.075317][ T9294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.082834][ T9294] Cannot create hsr debugfs directory [ 117.093458][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.103185][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.111512][ T3136] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.118700][ T3136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.126749][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.135073][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.143267][ T3136] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.150370][ T3136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.158056][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.167920][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 07:42:45 executing program 0: [ 117.307319][ T8827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 117.323881][ T8827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.346589][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 07:42:45 executing program 0: [ 117.356401][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.364947][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.374148][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.382812][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.391887][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 07:42:45 executing program 0: [ 117.400978][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.424106][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.432742][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 07:42:45 executing program 0: [ 117.456582][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.464390][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.486038][ T8869] 8021q: adding VLAN 0 to HW filter on device bond0 07:42:46 executing program 0: [ 117.521613][ T9294] netdevsim netdevsim5 netdevsim0: renamed from eth0 07:42:46 executing program 0: 07:42:46 executing program 0: [ 117.562631][ T8869] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.589287][ T9294] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.626946][ T9294] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.676609][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.684099][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.705558][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.712914][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.744069][ T9206] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.776560][ T9294] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.808027][ T8991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.816634][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.824947][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.833176][ T8992] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.840214][ T8992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.850834][ T8827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.858214][ T9206] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.887279][ T9206] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.938109][ T9206] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.998410][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.006256][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.014557][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.023282][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.030398][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.051804][ T8991] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.061759][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.070509][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.079236][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.087842][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.096453][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.103866][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.133617][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.141455][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.149763][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.158304][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.166510][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.174629][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.182818][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.190866][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.199445][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.207850][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.216266][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.224382][ T5035] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.231455][ T5035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.241126][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.256018][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.263608][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.272333][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.280857][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.287964][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.305473][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.314003][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.323160][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.331532][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.340304][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.348678][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.357141][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.365552][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.387022][ T8869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.408337][ T8991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.420248][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.428857][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.437062][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.444432][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.453112][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.461224][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.470743][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.479357][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.489671][ T8827] device veth0_vlan entered promiscuous mode [ 118.501836][ T8827] device veth1_vlan entered promiscuous mode [ 118.520782][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.529409][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.537443][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.546848][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.556115][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.583606][ T8827] device veth0_macvtap entered promiscuous mode [ 118.591555][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.600595][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.609320][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.618584][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.632716][ T9206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.646153][ T9294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.662089][ T9206] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.671678][ T8827] device veth1_macvtap entered promiscuous mode [ 118.679642][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.689031][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.696884][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.704301][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.713362][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.726694][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.734052][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.741989][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.750667][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.759130][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.766197][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.773916][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.782581][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.790852][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.797888][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.806226][ T9294] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.815844][ T8991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.825358][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.833023][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.841535][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.851879][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.859944][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.867793][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.879545][ T8869] device veth0_vlan entered promiscuous mode [ 118.889342][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.901742][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.912732][ T8827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.935954][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.944461][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.955697][ T8992] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.962697][ T8992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.971952][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.980447][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.990097][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.998766][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.008401][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.016897][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.025045][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.035019][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.043168][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.051331][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.059472][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.075558][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.083260][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.091667][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.100108][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.108578][ T8992] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.115632][ T8992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.123281][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.131785][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.140274][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.149065][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.160009][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.171780][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.182281][ T8827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.193173][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.216326][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.225235][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.234506][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.243650][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.252616][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.260709][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.271162][ T8869] device veth1_vlan entered promiscuous mode [ 119.281450][ T8991] device veth0_vlan entered promiscuous mode [ 119.292220][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.300534][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.324802][ T9294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.336469][ T9294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.347889][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.356266][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.364468][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.373111][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.381614][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.389996][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.398111][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.407606][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.416966][ T8991] device veth1_vlan entered promiscuous mode [ 119.568892][ T8869] device veth0_macvtap entered promiscuous mode [ 119.576249][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.583595][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.592665][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.602924][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.621921][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.646912][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.654364][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 07:42:48 executing program 1: [ 119.666593][ T9206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.676740][ T8869] device veth1_macvtap entered promiscuous mode [ 119.688871][ T9294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.712050][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.721408][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.730745][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.742088][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.754319][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.766759][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.778225][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.790419][ T8869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.800672][ T8991] device veth0_macvtap entered promiscuous mode [ 119.809036][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.817137][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.825873][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.835983][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.847268][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.857893][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.868606][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.883868][ T8869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.892268][ T8991] device veth1_macvtap entered promiscuous mode [ 119.903407][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.911216][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.921807][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.020014][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 120.030581][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.041383][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 120.051961][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.062082][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 120.072779][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.084095][ T8991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.094825][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 120.114139][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.124742][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 120.135910][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.145980][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 120.156795][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.167766][ T8991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.175354][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.183834][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.192827][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.201357][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 07:42:48 executing program 2: 07:42:49 executing program 3: [ 120.492676][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.505700][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.525929][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.543900][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.579201][ T9294] device veth0_vlan entered promiscuous mode [ 120.588967][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.604733][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.620191][ T9294] device veth1_vlan entered promiscuous mode [ 120.628672][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.638039][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.645911][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.653770][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.662872][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.673180][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.681021][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.689111][ T9206] device veth0_vlan entered promiscuous mode [ 120.710751][ T9206] device veth1_vlan entered promiscuous mode [ 120.742658][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.751228][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.759267][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.767367][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.775921][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.785769][ T9294] device veth0_macvtap entered promiscuous mode [ 120.797782][ T9294] device veth1_macvtap entered promiscuous mode [ 120.808661][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.817104][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.824943][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.833552][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.844239][ T9206] device veth0_macvtap entered promiscuous mode [ 120.854771][ T9206] device veth1_macvtap entered promiscuous mode [ 120.861856][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 120.872307][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.883588][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 120.894001][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.905224][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 120.916275][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.926246][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 120.936680][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.947417][ T9294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.962286][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.970321][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.978442][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.987107][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.997684][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.008644][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.019017][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.029827][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.040108][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.050689][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.060654][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.071083][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.081688][ T9294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.094722][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.103674][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.113262][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 121.126763][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.136938][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 121.147555][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.157732][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 121.168477][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.178530][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 121.189222][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.199326][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 121.210003][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.220907][ T9206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.233112][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.244251][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.254396][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.265185][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.275165][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.287650][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.297526][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.308038][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.317885][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.328390][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.340320][ T9206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.348153][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.357939][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.366748][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.375047][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 07:42:50 executing program 4: 07:42:50 executing program 0: 07:42:50 executing program 1: 07:42:50 executing program 2: 07:42:50 executing program 3: 07:42:50 executing program 5: 07:42:50 executing program 1: 07:42:50 executing program 5: 07:42:50 executing program 0: 07:42:50 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r2, r0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) 07:42:50 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 07:42:50 executing program 3: socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0048d9955d000000140012800b00010062726964676500000498028008000a00", @ANYRES32], 0x3c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 07:42:50 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 07:42:50 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)='bdev\x00', 0x0, 0x0) 07:42:50 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x3c) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x2, 0x0) [ 121.883548][ T9985] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 07:42:50 executing program 4: sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000002ac0)={0xc0c, 0x12, 0x0, 0x0, 0x25dfdbfe, {0x8, 0x0, 0xb8, 0x0, {0x0, 0x0, [0x86e5, 0xffff, 0x5, 0x1875], [0x0, 0xd6b], 0x0, [0x0, 0x4]}, 0xbb, 0x4e}, [@INET_DIAG_REQ_BYTECODE={0x4b, 0x1, "5e68fa68d73ff0797ddabe36d1dbcbe9aa0bce4c508da2cda17ebb3e8a0c3d436c4daef6173e13fc5466ebfe82dda0a138e11b8ee018b246b0e01e32a15207038a65ef0ca721b4"}, @INET_DIAG_REQ_BYTECODE={0xa68, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "d0bd2a265b0dbd62e1a77902ae6997b80b8c8d3cf6b414206171fd6c71d9ed72c845e4f5b28ecb70eaac7e248fe213ead0222d1bb584598053b3996091ca7140fedd9d4df3b0993920ace4cd5491ad94fd896bf8d135911040d67a292405215dcad574203e25f99a4fd8c68bcdef1f6530ba6e2b16e94be88e384455a65bd6b2233b47bccef575054459fd23cbde109416dd491cc44a907f4152a5ef1990b2f32f919c91a0605616c17e726f4b26c1d5face8873c372f367898cf14ff59df7b8eab49a67bd42607199f97c247d77bda05cb399da5a2e241515b483b38cfbe0f549d6d68d"}, @INET_DIAG_REQ_BYTECODE={0x23, 0x1, "cb2610708f561e91fc3f4c377da9d060100921b0f1379a301f219f64b79d5c"}]}, 0xc0c}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000001500)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) [ 121.933812][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 07:42:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/protocols\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x101082) sendfile(r1, r0, 0x0, 0x800000080004103) 07:42:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x22202b, 0x1000}, 0x18) 07:42:50 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x5c}, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "c25046a2415e61559190e0a03e4015f4263d55a82ac3f583", "bfb4a4a3dcc9fb4cf8f41a1465e042ea6a767fbeb314c04aefd09916e368489a"}}}}}}, 0x0) 07:42:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x22202b, 0x1000}, 0x18) 07:42:50 executing program 0: syz_genetlink_get_family_id$ipvs(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) sendmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000400)=@xdp={0x2c, 0x4788, 0x0, 0x0, 0xfeffffff}, 0x80, 0x0}}], 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) 07:42:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x22202b, 0x1000}, 0x18) [ 122.087304][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.124138][ C1] hrtimer: interrupt took 23285 ns [ 122.175424][ T9207] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.445384][ T9207] usb 3-1: Using ep0 maxpacket: 8 [ 122.575646][ T9207] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 122.583718][ T9207] usb 3-1: config 0 has no interface number 0 [ 122.591672][ T9207] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 122.602915][ T9207] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 122.614661][ T9207] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 122.624804][ T9207] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 122.635849][ T9207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.651115][ T9207] usb 3-1: config 0 descriptor?? [ 122.686744][ T9987] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 122.693713][ T9987] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 122.912557][ T3136] usb 3-1: USB disconnect, device number 2 [ 123.695498][ T9207] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.935518][ T9207] usb 3-1: Using ep0 maxpacket: 8 [ 124.055763][ T9207] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 124.063805][ T9207] usb 3-1: config 0 has no interface number 0 [ 124.070778][ T9207] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 124.082538][ T9207] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 124.092871][ T9207] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 124.102891][ T9207] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 124.112202][ T9207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.122272][ T9207] usb 3-1: config 0 descriptor?? [ 124.146336][ T9987] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 124.153233][ T9987] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 124.368070][ T3136] usb 3-1: USB disconnect, device number 3 07:42:52 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 07:42:52 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0x23f) close(r1) 07:42:52 executing program 3: socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0048d9955d000000140012800b00010062726964676500000498028008000a00", @ANYRES32], 0x3c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 07:42:52 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20004004) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$sock(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)='\f', 0x1}], 0x1, &(0x7f0000000780)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x0) 07:42:52 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x10001, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 07:42:52 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x5}}]}]}, 0x50}}, 0x0) 07:42:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b}) 07:42:53 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) [ 124.485378][T10142] IPVS: Error joining to the multicast group [ 124.516392][T10142] IPVS: Error joining to the multicast group 07:42:53 executing program 5: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') lseek(r0, 0x10, 0x0) [ 124.536466][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 07:42:53 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) [ 124.609329][T10159] 9pnet: Insufficient options for proto=fd [ 124.623986][T10163] 9pnet: Insufficient options for proto=fd 07:42:53 executing program 5: 07:42:53 executing program 1: [ 124.694528][T10173] 9pnet: Insufficient options for proto=fd [ 124.945545][ T3136] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.185518][ T3136] usb 3-1: Using ep0 maxpacket: 8 [ 125.305814][ T3136] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 125.313879][ T3136] usb 3-1: config 0 has no interface number 0 [ 125.319996][ T3136] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 125.330985][ T3136] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 125.340907][ T3136] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 125.350685][ T3136] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 125.360257][ T3136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.370653][ T3136] usb 3-1: config 0 descriptor?? [ 125.396273][T10146] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 125.403245][T10146] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 125.677746][ T8992] usb 3-1: USB disconnect, device number 4 07:42:54 executing program 3: 07:42:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000600)="7d116188a50d8d8a63be9754cdf66e59951bec13bfbc6519b00178c49b30837bac61b71d2ce83f833960a5cb9284072c6af0683b9a8ffba519d0f5cdf2f71a6ad9ca403e8dcc29ec4c0bff68a91ada4bd03f0a55c0b62b06472a40c45a7395bfdb18c61722db19079ba74390731c8146eb7da9eef9c16244ec0db60fc62a6734c3fa189d49d12f8e12b19a6ac2bdcff4e1ab74512fe09bf8d06f6752ba66fe5f72515399db8f0a198bd0dd6daabf06ec9d10b392a685c78c881129212f96b1f4eda9a18e7324f56c9bc7311c07fdf383a7c54a898bd1bc46c1b6b30664ca326a3034867accd873f51f52f51f9fadf740ee012a620d39d899c626ff3aa4f8d68d6e31f6d9c711411dce9f75e92fd7b41cf812e51a027606993c8805414dbf3df2dfaf5325e6e25f1de41b39a9093617b52363ae84d9fd06951cc64f1f917a4fdfc8164920893fd941163ef6c9e6fbb42a6e4e91e6d72c068b6d3a63f3712782a848c68221e63b38fcce868266aaf5d1769f6292d5639018ea2665a2178ff0c314a1961e8db7449a269315b424eaf19575aac0a8105cc602a14742832e47c70ce80d0241e375a66f08696cbb171502f502b9555f1171c83070403c754fdb921e1787fb44c167a5f54c599a3df441c944001a8d91d8868117481b9e57b270c5503b6b3a7fcbf65875f21d929ec846f6ffe50c8efe9fda2e938c80e113b24f3113c6d238eeb2d391dcf10a5f53b9504cc9dbd1ef4999723efc48d145e85c0dc4f3c11a8afee014b62fe5c5eee3ee8559e6c1024140f405a6ea4f96ba7e6e6e7b1c39a3e39a0e932d201dd2257009dc0f3c20ff7dca3481354795af9a4a80458d81323cd0d736f365b7694a058e30e9df8017c335da41de4c54e8fd464b1e962d717ed85680bebea314514bcc30359b971c2d0409d2b81cb3e9b4f788e3a71b055b6f3feaff36dc86b34fad47ab2c482113dd281757029aa1acb733a931158babc2d11a7f6d81ec8acfcc1784cde86b5cd8099531ea3e82c9eae15910aa041ea8fd08fb332bdaaab50f29fab5081a703fba31e6e08cafab9151466184e5592e445572375f28d92fe5471f5d5d4fbd72551eb1d686ca95379b1d64023480834f0140b785727dbcbe67ab970f0361f05a00489a87641489b1d0fcf09c79f548b9b8c416f689bc0dcd789c09a28bda1d1b66bb0a3bcd46a8476cc6e643d1601401b29dab52f6569146c352153524847958faa97a4421ead9acf9fef3f25047dcf027d15fc7165ac1233d69390336ef5554ade394e187da59bcc43931189aebc2b0ea77e5434d2a5cf8f6f400f2ed52c9a2cf2fcabed1d0d662e3112189103a1c53cac95ca4aa393e3dd29d7a3db60fdc0b5d216134ac55d1120575f631ba9b5dd92e717aa0b3bea2831df07df60e3594f5b41ea7c9a44387a1ac57576b7de34fe17c28c83428c302551b9abab31d9cfb5b24470fc7967199a26055885cd2ac2a4f906da5ad1b47323a2ce777ff4028c24c94025b45164b033dd5b0c63666b6d1b5aa3bb3d4062f0ae227c219833b413b3eb89dd1a5f428963c61051cebb53e294f2f2c8e43297f1939235dd146978ab060cb8e6e9a9b90c9d0420b245a1d81913d4bbcc4044302fe90dcdfc4e2d63ecd36d6e9d4a1080b5f680e8c00f482a55dd070e786787b956e87dde20b5788a4c7d1ec0b76620d82ac913f8ca39a3c6d975623026b9a9507c43b1a4d5b26184124fcd4e28c917eeb178a92ba9ac089d4a60a7cdbf9b7b46b13742757c0c262f036f4f65c7683736cda556cd1e705d9b5509951235d92c8da200e54fb049e16aa2c70f55950e08c2a5da301d2cd63e43228a61df5628f35185d24722c6d0d29ba1787289a02d6985acafc240e4188a944476b499dfd8e70f0f5b94dffaa7b3e80261170dc229361b5db9c336d249e6894707f932ad531cdce587c8380627a3a72b07f6ee103140ebeb7b556885f05c71ad9b2a08213e118584e307bda1a28bc0ddb9186e6432918ccb3cf8ccd7b3dd71ef785fbeddf5d5d15d9d704172f8ccea0c1c38c7b2254be23dcda4dc326dcb79ca67a6e975d6db89fc96fe455c1c81eb6c692009d478d846fb4bd3a0e3fab6ef5314bce33aaa3eb400f54f4cbbed1afde2854ed11bc80910e28d8ad596f5bae25a0216bdb9fc3aecf64d04a6cc3d458a25820c91be22e639f3d031f758515d833fef73951fdfa19cb6830407b108373c03d85c77f2a0ee4062a6299685e28a8869346f8a23ab6953adee7eca1044fbd3e3afb89f166a1d2f891a210a46b285f8e62a23a39114b57630bf636ee20413b64f094c6a2f26ba26770b8d10cdc342665c240ec148e1f5b40f8e39dce879f2e89666eb4fbc7292c1c9524e0411081de8dc386cd39bb4a5922afdb92a550b77e125cb023cc92d386f4513add2103e4caf8f0f0f01abe4cd4d85d00371f0abe6768fd7109dd32f9fd826f0c7b08afde49b0f4124ec5a28a8f83ff919dfef015ea3b2b0834a2d5b2ae4aa81de0f4bf41760dae993c74893815009505bbb9b0f7ff76f68c2de23dad465a61a45cee070042f0f97c2235b6773627db57517b9c9d56fc2fd2dac6e27ce63056faeadb3c995819cbba61c136de7af87b52b95a2bc118df7b89a26e26ae236f8f4ab8d4a7de050ed88b1fe7832f7cf206e69d144282d28cff58fc8a199e75b5060cc904510474640a0e8a28312883008be2e53f1906ef3eecebdaefeb267a253c1df1de5631e375f5b00bb18a381a21d5e3238bbc4f02049f3363efcd1c0034bee248b644b94cef92f0dbf8fe5fa1de70d5bb3f9c3e577a785ed1f42ecd0b8b8eb3899725d1d8401a9ef31dbe4a514bb2eae696316beb25417af991eeba5643528c5e193cc833e2c127f513ff33c78822ad350f818de137d13b155ec8485cf2dae3c9e2956794a5f165248a4ff64d10c945f91db626b60982f91969c23be7ebe4156690270b938847fd068469cebcf5844ac5a9acec77816db8cc1d41c8eda2d128ab29b5d9e6b801e7654232d47e8740d9b77ba8ff815d2ea1a70116e6cebaf6265b232a1bb5d08338a9f9853369dee54788d987c5c5b2e9d28db437162eae63254a4368c28d8284e58e15a68060580d29bff62e146f1d717ea171535c30abc3e6878eb31cdd65a7d96d743b257f0b2bf4d068f87f1d3c835992ce63a0c7119742e19873c2a31abb647260138a0d046f2b821036535b3fafce99bb47eb67e770932cf7170ff9aeab0eb3b4dc47dc061ee431aed0bbda8f93e4f487e7852819c2ffce38f44b86d128c155d4ab9d21b9f21203d3a0fcd09116fb4257844c78bc1c444ea8fb00d6aa1bd0bebbf352bee67c821456a61246bf907c9fdb3618186413653f85ea23f9261aaa2c565557c883a88ce15b20b550dd452ecaa2f0792edf2c9dc8bf7bebf07bd951d65d794c0da91148a2f8c18017e4a35dff8c766b63bfd8d023c473e0de906d4a93c393b20fa9001d7f760580a2080c2754b4c3c9f0f0a3c5fd66d5332248a9906525a0d04f369261fbca1185a8dcbda3648612b1da8618f4f9226d6ce3284b0d82c4f6e7a152f47c82fb9e6301900595545d868eb04a21600ad9421ac850efba8024f3610d3cca941ee8461a1499e20efe81d0dc7c9be9669b76681caa6d7f6edcf2e7886399ee7e3e6a774bc6fe30fab684a1b628af6d7ba928a5783dea2f0a1801a1d6982aa703da7f14e72517241462ad764a951172da9b501ed9f408e6868f9f0ffea03b124975c012cb5bcb613008f59fb149a367716f77c3b45b41426ab919983d89f82525bb7ee532f47275f3bb99986038f2bf77d8c90354095fe2a9e2695a3361e80a9e79d0b1eb614c493968d48c8155e0d2ac46344feb39a3f072698789425131ca5b40a666579051e950927b0b6f8a465dee8525e5c6562c15679de9ba7b8fbfcda0ce80e7331fcdfad9c2badb259504773fc0eabe2be686", 0xafb}], 0x1) 07:42:54 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:54 executing program 5: 07:42:54 executing program 1: 07:42:54 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x10001, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 07:42:54 executing program 5: 07:42:54 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:54 executing program 1: 07:42:54 executing program 3: [ 126.239769][T10231] 9pnet: Insufficient options for proto=fd 07:42:54 executing program 5: 07:42:54 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:54 executing program 3: [ 126.323464][T10237] 9pnet: Insufficient options for proto=fd [ 126.401097][T10244] 9pnet: Insufficient options for proto=fd 07:42:55 executing program 2: 07:42:55 executing program 1: 07:42:55 executing program 5: 07:42:55 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:55 executing program 3: 07:42:55 executing program 4: 07:42:55 executing program 5: 07:42:55 executing program 1: 07:42:55 executing program 3: 07:42:55 executing program 4: [ 126.778423][T10261] 9pnet: Insufficient options for proto=fd 07:42:55 executing program 2: 07:42:55 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:55 executing program 5: 07:42:55 executing program 1: 07:42:55 executing program 4: 07:42:55 executing program 3: 07:42:55 executing program 2: 07:42:55 executing program 5: [ 126.930939][T10270] 9pnet: Insufficient options for proto=fd 07:42:55 executing program 1: 07:42:55 executing program 4: 07:42:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:55 executing program 3: 07:42:55 executing program 2: 07:42:55 executing program 2: 07:42:55 executing program 5: 07:42:55 executing program 4: 07:42:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:55 executing program 3: 07:42:55 executing program 1: 07:42:55 executing program 5: 07:42:55 executing program 1: 07:42:55 executing program 2: 07:42:55 executing program 3: 07:42:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:55 executing program 4: 07:42:55 executing program 5: 07:42:55 executing program 0: creat(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:55 executing program 1: 07:42:55 executing program 2: 07:42:55 executing program 4: 07:42:55 executing program 3: 07:42:55 executing program 0: creat(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:55 executing program 5: 07:42:55 executing program 0: creat(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:55 executing program 1: 07:42:55 executing program 2: 07:42:55 executing program 5: 07:42:55 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:56 executing program 4: 07:42:56 executing program 3: 07:42:56 executing program 2: 07:42:56 executing program 1: 07:42:56 executing program 5: 07:42:56 executing program 3: 07:42:56 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:56 executing program 4: [ 127.559793][T10322] 9pnet: Insufficient options for proto=fd 07:42:56 executing program 5: 07:42:56 executing program 1: 07:42:56 executing program 4: 07:42:56 executing program 2: 07:42:56 executing program 5: 07:42:56 executing program 3: 07:42:56 executing program 2: [ 127.706558][T10333] 9pnet: Insufficient options for proto=fd 07:42:56 executing program 1: 07:42:56 executing program 4: 07:42:56 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:56 executing program 5: 07:42:56 executing program 4: 07:42:56 executing program 3: 07:42:56 executing program 1: 07:42:56 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:56 executing program 2: [ 127.856388][T10346] 9pnet: Insufficient options for proto=fd 07:42:56 executing program 3: 07:42:56 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:56 executing program 4: 07:42:56 executing program 5: 07:42:56 executing program 2: 07:42:56 executing program 1: 07:42:56 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:56 executing program 3: 07:42:56 executing program 5: 07:42:56 executing program 4: 07:42:56 executing program 2: 07:42:56 executing program 1: 07:42:56 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:56 executing program 3: 07:42:56 executing program 4: 07:42:56 executing program 2: 07:42:56 executing program 5: 07:42:56 executing program 1: 07:42:56 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:56 executing program 4: 07:42:56 executing program 3: 07:42:56 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 07:42:56 executing program 2: 07:42:56 executing program 1: 07:42:56 executing program 5: 07:42:56 executing program 4: 07:42:56 executing program 3: 07:42:56 executing program 1: 07:42:56 executing program 2: 07:42:56 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, 0x0) 07:42:56 executing program 5: 07:42:56 executing program 3: 07:42:56 executing program 4: 07:42:56 executing program 1: 07:42:57 executing program 2: 07:42:57 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, 0x0) 07:42:57 executing program 3: 07:42:57 executing program 4: 07:42:57 executing program 5: 07:42:57 executing program 1: 07:42:57 executing program 2: 07:42:57 executing program 3: 07:42:57 executing program 5: 07:42:57 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, 0x0) 07:42:57 executing program 4: 07:42:57 executing program 1: 07:42:57 executing program 2: 07:42:57 executing program 3: 07:42:57 executing program 5: 07:42:57 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:42:57 executing program 4: 07:42:57 executing program 1: 07:42:57 executing program 2: 07:42:57 executing program 4: 07:42:57 executing program 3: 07:42:57 executing program 5: 07:42:57 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:42:57 executing program 1: 07:42:57 executing program 2: [ 128.900660][T10433] 9pnet: Insufficient options for proto=fd 07:42:57 executing program 5: 07:42:57 executing program 1: 07:42:57 executing program 3: 07:42:57 executing program 4: 07:42:57 executing program 2: 07:42:57 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:42:57 executing program 5: [ 129.044238][T10444] 9pnet: Insufficient options for proto=fd 07:42:57 executing program 4: 07:42:57 executing program 3: 07:42:57 executing program 1: 07:42:57 executing program 2: 07:42:57 executing program 5: 07:42:57 executing program 3: 07:42:57 executing program 4: 07:42:57 executing program 0: 07:42:57 executing program 1: 07:42:57 executing program 2: [ 129.228682][T10458] 9pnet: Insufficient options for proto=fd 07:42:57 executing program 3: 07:42:57 executing program 5: 07:42:57 executing program 4: 07:42:57 executing program 0: 07:42:57 executing program 3: 07:42:57 executing program 2: 07:42:57 executing program 1: 07:42:57 executing program 5: 07:42:57 executing program 4: 07:42:57 executing program 0: 07:42:57 executing program 5: 07:42:58 executing program 0: 07:42:58 executing program 3: 07:42:58 executing program 2: 07:42:58 executing program 1: 07:42:58 executing program 4: 07:42:58 executing program 2: 07:42:58 executing program 5: 07:42:58 executing program 0: 07:42:58 executing program 3: 07:42:58 executing program 1: 07:42:58 executing program 2: 07:42:58 executing program 4: 07:42:58 executing program 5: 07:42:58 executing program 1: 07:42:58 executing program 2: 07:42:58 executing program 3: 07:42:58 executing program 0: 07:42:58 executing program 2: 07:42:58 executing program 4: 07:42:58 executing program 1: 07:42:58 executing program 4: 07:42:58 executing program 3: 07:42:58 executing program 5: 07:42:58 executing program 0: 07:42:58 executing program 2: 07:42:58 executing program 1: 07:42:58 executing program 5: 07:42:58 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 07:42:58 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x2800) close(r0) 07:42:58 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x13d) 07:42:58 executing program 3: syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={[{@dmode={'dmode'}}]}) 07:42:58 executing program 5: 07:42:58 executing program 1: 07:42:58 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x35, 0x1, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:42:58 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5b]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:42:58 executing program 5: sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204a30402"], 0x10}}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207400002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 07:42:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000001a00)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 130.151092][T10519] ISOFS: Unable to identify CD-ROM format. 07:42:58 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r5, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:42:58 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x80045017, 0x0) [ 130.265359][T10519] ISOFS: Unable to identify CD-ROM format. 07:42:58 executing program 3: syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={[{@dmode={'dmode'}}]}) [ 130.334959][T10545] x86/PAT: syz-executor.1:10545 map pfn RAM range req write-combining for [mem 0x9f000000-0x9f201fff], got write-back 07:42:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 130.411536][T10558] x86/PAT: syz-executor.1:10558 map pfn RAM range req write-combining for [mem 0xa1800000-0xa1a01fff], got write-back [ 130.442594][T10558] x86/PAT: syz-executor.1:10558 map pfn RAM range req write-combining for [mem 0x9f000000-0x9f201fff], got write-back [ 130.445486][T10559] ISOFS: Unable to identify CD-ROM format. 07:42:59 executing program 0: kexec_load(0x0, 0x2, &(0x7f00000013c0)=[{0x0}, {0x0}], 0x0) [ 130.466472][T10562] x86/PAT: syz-executor.0:10562 map pfn RAM range req write-combining for [mem 0x9e800000-0x9ea01fff], got write-back 07:42:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r5, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:42:59 executing program 3: syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={[{@dmode={'dmode'}}]}) 07:42:59 executing program 0: waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r0, 0x1000000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000390414", @ANYRES32, @ANYBLOB="83080000000000002000128008000100736974001400028008e300004816a13214f265c06eaeb7801944992e079feab246072766a4c617c8d136103f2b15f551fd5684a07c01fbd26d9148c4ea616d3bf863a8fee3333ab71c872626c727c2547826f742119ffb24501e9017a41ee1632edad3c690dddbcec86bba842cb4c028b3fb8fa481bc06e5765f2436c71519baad", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 07:42:59 executing program 2: syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={[{@check_strict='check=strict'}]}) [ 130.626928][T10585] x86/PAT: syz-executor.1:10585 map pfn RAM range req write-combining for [mem 0x9e800000-0x9ea01fff], got write-back 07:42:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r5, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) [ 130.676457][T10592] ISOFS: Unable to identify CD-ROM format. [ 130.680502][T10597] ISOFS: Unable to identify CD-ROM format. [ 130.711351][T10604] x86/PAT: syz-executor.1:10604 map pfn RAM range req write-combining for [mem 0xa1800000-0xa1a01fff], got write-back [ 130.833267][T10597] ISOFS: Unable to identify CD-ROM format. [ 130.834459][T10623] x86/PAT: syz-executor.1:10623 map pfn RAM range req write-combining for [mem 0xa1800000-0xa1a01fff], got write-back [ 130.861328][T10623] x86/PAT: syz-executor.1:10623 map pfn RAM range req write-combining for [mem 0x9f000000-0x9f201fff], got write-back 07:42:59 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB="9400000010001fff00619c000000000000080000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000540012800b000100697036746e6c00004400028006000f"], 0x94}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 131.018570][T10631] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 131.034058][T10631] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. 07:42:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x600, {0x17e}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "b04a83706694a75154c629f75b71a95a8f3b289271c60000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d4300", "5244534b0f00000d574556820000a482ebf7c88c115bee08d600"}) 07:42:59 executing program 0: waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r0, 0x1000000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000390414", @ANYRES32, @ANYBLOB="83080000000000002000128008000100736974001400028008e300004816a13214f265c06eaeb7801944992e079feab246072766a4c617c8d136103f2b15f551fd5684a07c01fbd26d9148c4ea616d3bf863a8fee3333ab71c872626c727c2547826f742119ffb24501e9017a41ee1632edad3c690dddbcec86bba842cb4c028b3fb8fa481bc06e5765f2436c71519baad", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 07:42:59 executing program 3: syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={[{@dmode={'dmode'}}]}) 07:42:59 executing program 2: ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000240)={'team_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x8080) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x7f, 0x8000, 0x9}, &(0x7f00000002c0)=0x10) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file1\x00', 0x8, 0x1) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2026c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x8000000200036150, 0x200800007b, 0x0, 0x0, 0x0, 0x10000001, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x2008480, &(0x7f000000a000)) 07:42:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r5, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:42:59 executing program 5: unshare(0x8000400) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x1e, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000002200)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 07:42:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:42:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3f, 0x1, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) [ 131.221808][T10648] x86/PAT: syz-executor.1:10648 map pfn RAM range req write-combining for [mem 0x9e800000-0x9ea01fff], got write-back [ 131.242261][T10648] x86/PAT: syz-executor.1:10648 map pfn RAM range req write-combining for [mem 0xa1800000-0xa1a01fff], got write-back [ 131.263642][T10650] ISOFS: Unable to identify CD-ROM format. 07:42:59 executing program 4: syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 131.327709][T10657] NFS: Device name not specified 07:42:59 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={[{@dmode={'dmode'}}]}) 07:42:59 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='/\x93posix_acl_access\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe80, 0x3580, &(0x7f0000000280)="b95b03b708030000009e40f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 131.367832][T10662] x86/PAT: syz-executor.1:10662 map pfn RAM range req write-combining for [mem 0x9e800000-0x9ea01fff], got write-back 07:42:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3f, 0x1, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:42:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:42:59 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, 0x0}, 0x0) 07:42:59 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='/\x93posix_acl_access\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe80, 0x3580, &(0x7f0000000280)="b95b03b708030000009e40f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 07:43:00 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={[{@dmode={'dmode'}}]}) 07:43:00 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044d76, 0x0) [ 131.594674][T10685] x86/PAT: syz-executor.1:10685 map pfn RAM range req write-combining for [mem 0x9e800000-0x9ea01fff], got write-back 07:43:00 executing program 5: unshare(0x8000400) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x1e, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000002200)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 07:43:00 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 07:43:00 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='/\x93posix_acl_access\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe80, 0x3580, &(0x7f0000000280)="b95b03b708030000009e40f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 07:43:00 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, 0x0}, 0x0) 07:43:00 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:43:00 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={[{@dmode={'dmode'}}]}) 07:43:00 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='/\x93posix_acl_access\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000d000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000056ce36b68b0f334d6c37d03057c90000866f55e3376e4a82071d7827af04f8426e5b0eb4642172797fc01200533324f871d94768e25851d3162c1bde856ed69b673e5b8d861ff207c0eb4b60a82fc3c0e2085d6add5893b223f703b454af0805f231eb8474953f640e3d490cdc0448ecf21b205768e34ab95b6ef820398c1ba4b81cee61a98d7df3768db9bd084623ca56c82b205eca4d90628aeacbd4654eb4371861a98bb8fc0fb89f8abf8e94d4429449cd85af76d9929b318c989bebd2f992112024650892c2e25b38f9cac8fea1a8c4712b53306c00a649a62720cd661d21ab5d7a8b9f974b4f5da4862c01b4cbe5f279fe779d5f9f366ec0aee3344d712d35edc17c209296c3db7ff279c9bc5ab356c3471399f860fef75f37888d0b0968f5a8fcdf57cc5c62f45fcaccb1a3401d604f415840873a0e1df38c8c7c9ce232542acf57c44faea190b98de36aa113dba42def9c5bc3c90823529860583d8fb2dd17279eafcbdb226c00545f7f7c4fa93603f2ae2260bb56cb1a542ab27dfb25f54b6f73e2da29ef6b6f33e099cd94987238b5b09ab1b377fc08135572dd7e7ae09d603115f1cde757c9d2fd838a84251cbe5f8e9e62fee4d1554fa20d84df5e107d368c139b5c17e916a990422a72150235ea93abb04521db134aad75b7c41ec63ca90e22c26a6ef512cd5c598330e07b18183e20f145c031a129aed2186d7a6e3cc00125abaf55b18a727bfc6616d0df05a684730e2f014e5400000000000000007d468676e6c0da27c75254f16c0680519c26f1a602b0df27df00e16af8ac465612353a1e4fc13dfb"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe80, 0x3580, &(0x7f0000000280)="b95b03b708030000009e40f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 07:43:00 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x0) [ 132.088626][T10722] x86/PAT: syz-executor.1:10722 map pfn RAM range req write-combining for [mem 0x9e400000-0x9e601fff], got write-back 07:43:00 executing program 3: syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={[{@dmode={'dmode'}}]}) 07:43:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = memfd_create(&(0x7f0000000340), 0x0) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 07:43:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_score_adj\x00') lseek(r0, 0x0, 0x2) 07:43:00 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b}) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) [ 132.317181][T10744] x86/PAT: syz-executor.1:10744 map pfn RAM range req write-combining for [mem 0x9e800000-0x9ea01fff], got write-back 07:43:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000340)) 07:43:01 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 07:43:01 executing program 3: syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={[{@dmode={'dmode'}}]}) 07:43:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 07:43:01 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b}) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:43:01 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x93, &(0x7f0000000240)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c9400010000dca7712c225da4a455f4c9fd98a568097aa4acd6ecd74d473fdd43b9693122310088463ad3f8fbe0a10fff4bbaef7cd058ec3a54a90a11c890a73cef2d28533220798a2b0180000000000000c6fa53cea17bd8d700000000000000f53e2623193c8ff31a4582a85559ca5fbc21ae2b"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:01 executing program 3: syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={[{@dmode={'dmode'}}]}) [ 132.909510][T10770] x86/PAT: syz-executor.1:10770 map pfn RAM range req write-combining for [mem 0x9e400000-0x9e601fff], got write-back 07:43:01 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b}) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:43:01 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:43:01 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 07:43:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) [ 133.113090][T10796] x86/PAT: syz-executor.1:10796 map pfn RAM range req write-combining for [mem 0x9ec00000-0x9ee01fff], got write-back 07:43:01 executing program 3: syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 133.211692][T10803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.261582][T10811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:43:04 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x0) 07:43:04 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5b]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:43:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r3, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:43:04 executing program 4: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'none'}}]}) 07:43:04 executing program 3: syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:04 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 135.942487][T10837] x86/PAT: syz-executor.1:10837 map pfn RAM range req write-combining for [mem 0x9e400000-0x9e601fff], got write-back 07:43:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r3, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:43:04 executing program 3: syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 136.085000][T10840] hfs: unable to load iocharset "none" [ 136.091963][T10840] hfs: unable to parse mount options 07:43:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="b7", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r3, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) [ 136.145553][T10857] x86/PAT: syz-executor.1:10857 map pfn RAM range req write-combining for [mem 0xa1800000-0xa1a01fff], got write-back 07:43:04 executing program 3: syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)) 07:43:04 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 136.227180][T10866] x86/PAT: syz-executor.1:10866 map pfn RAM range req write-combining for [mem 0x9f000000-0x9f201fff], got write-back [ 136.246407][T10840] hfs: unable to load iocharset "none" [ 136.252092][T10840] hfs: unable to parse mount options 07:43:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="b7", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 136.364795][T10873] ISOFS: Unable to identify CD-ROM format. 07:43:05 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x80c24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) 07:43:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:43:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000200)) 07:43:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="b7", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:05 executing program 3: syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)) 07:43:05 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:43:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="b7", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 136.666267][T10896] x86/PAT: syz-executor.1:10896 map pfn RAM range req write-combining for [mem 0xa1800000-0xa1a01fff], got write-back 07:43:05 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x697, 0xa0024, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x84, 0x2ec, 0xfff, 0x0, 0x200, 0x4, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 07:43:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) [ 136.728621][T10895] ISOFS: Unable to identify CD-ROM format. 07:43:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:05 executing program 3: syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)) 07:43:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 136.868887][T10915] x86/PAT: syz-executor.1:10915 map pfn RAM range req write-combining for [mem 0x9ec00000-0x9ee01fff], got write-back [ 136.965427][T10925] ISOFS: Unable to identify CD-ROM format. 07:43:06 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5b]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:43:06 executing program 4: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x7fffffff, 0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000040) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000100)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 07:43:06 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:43:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:43:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:06 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff0100a7f38400000000000000000000000001e00000010000e1ff7f0000000000000000000000000000000a0001000000002e3ae3b5bd68f8c2b1055b97613ce5a76804c1ef70886e6d472824c228d38fc47c1015aea16e54dbc1024876a14042a968dbec16d37528562459cc86da3f036d235eb4c9ef6de17fed5c5e52ccf507afc360f0f357d2d534828bb4e101edfdc1d3c55de0b63a028031df945f2e7550387778"], 0xb8}}, 0x0) 07:43:06 executing program 2: sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="b7", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:06 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff0100a7f38400000000000000000000000001e00000010000e1ff7f0000000000000000000000000000000a0001000000002e3ae3b5bd68f8c2b1055b97613ce5a76804c1ef70886e6d472824c228d38fc47c1015aea16e54dbc1024876a14042a968dbec16d37528562459cc86da3f036d235eb4c9ef6de17fed5c5e52ccf507afc360f0f357d2d534828bb4e101edfdc1d3c55de0b63a028031df945f2e7550387778"], 0xb8}}, 0x0) [ 137.583419][T10943] x86/PAT: syz-executor.1:10943 map pfn RAM range req write-combining for [mem 0x9f400000-0x9f601fff], got write-back 07:43:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r3, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, 0xffffffffffffffff, 0x0) 07:43:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 07:43:06 executing program 2: sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="b7", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 137.804968][T10974] x86/PAT: syz-executor.1:10974 map pfn RAM range req write-combining for [mem 0x9c800000-0x9ca01fff], got write-back 07:43:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 137.969976][T10982] x86/PAT: syz-executor.3:10982 map pfn RAM range req write-combining for [mem 0x9f000000-0x9f201fff], got write-back 07:43:06 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0x1279, 0x0) 07:43:06 executing program 2: sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="b7", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:06 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:43:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r3, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, 0xffffffffffffffff, 0x0) 07:43:06 executing program 4: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@creator={'creator', 0x3d, "b643b626"}}]}) 07:43:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 07:43:06 executing program 5: r0 = socket$inet_sctp(0x2, 0x4000000000000005, 0x84) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000180)=@in={0x10}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="ee267a88594d96d10788cad26abaf4d7d6e894b582853defb570610d28d02a6580f455055ad71c5ecba773a878d76a04bd7c3a810fa20aaf223fd609b14d889854cc0fe1c6a58f24bcba8d8695472eb328682706aa", 0x55}, {0x0}], 0x2, &(0x7f00000003c0)=[{0x2c, 0x0, 0x0, "3c92fa6e389170b8597485481141a40309baecac18f1c5fafa4760462fed13"}, {0x14, 0x0, 0x0, "8f0af94fa8"}, {0x84, 0x0, 0x0, "a03700b3c196d393341538927069b04522968b9f305eb01cd96522cd37448e1e4482af44ec237434ff3c30c72cd817cdc5ac49e09a30e702f4e8825188f65ad62cd4b1a31fe32d124d21fa626cd41699f55d375d7754946dc11d7c254708cfbb45c89e711dff8384c9dad8b07638223d1ef801f6008042"}, {0x108, 0x0, 0x0, "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"}], 0x1cc}, 0x80) 07:43:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, &(0x7f0000000080)="b7", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r3, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, 0xffffffffffffffff, 0x0) [ 138.213532][T11006] x86/PAT: syz-executor.3:11006 map pfn RAM range req write-combining for [mem 0x9cc00000-0x9ce01fff], got write-back [ 138.235178][T11005] x86/PAT: syz-executor.1:11005 map pfn RAM range req write-combining for [mem 0x9f000000-0x9f201fff], got write-back 07:43:06 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) [ 138.288282][T11008] hfs: can't find a HFS filesystem on dev loop4 07:43:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="8d", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x517, 0x102, 0x0) 07:43:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x7fffffff, 0x1, {0x2, @raw_data="1f1e932a3866b6112b0224cb147ea4c7b5d88f9f4f2de51a029d9000bac55b0d2b5a2749d9fe23889f7a6e543df6652dce2bc42ebc465b0ffd15a947652eafc59bd84cd7ec9f458d11141ccdd62ce8f004e261919a602858318efbd45f67a079c9d06c3f9a82e5237356e03ed7f7eac0fa34a75254525d4400ffd4786e76451235d44416bdc7536e73a8231cd1e949399a8efe0acd7bea4d24bd1ddfceb9f200d95ff81065a6400c013d15b8e354eaef003d95ad5e34e2a37e2da0d30ef79038a4d582964f54540f"}}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 138.358815][T11008] hfs: can't find a HFS filesystem on dev loop4 07:43:06 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 138.405851][T11023] x86/PAT: syz-executor.1:11023 map pfn RAM range req write-combining for [mem 0x9cc00000-0x9ce01fff], got write-back 07:43:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)={[{@gqnoenforce='gqnoenforce'}, {@noattr2='noattr2'}, {@wsync='wsync'}]}) 07:43:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, &(0x7f0000000080)="b7", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:07 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r3, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r0, 0x0) 07:43:07 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="3dd0b7e45803", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 138.584386][T11045] x86/PAT: syz-executor.1:11045 map pfn RAM range req write-combining for [mem 0x9d000000-0x9d201fff], got write-back 07:43:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, &(0x7f0000000080)="b7", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:07 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 138.639293][T11043] XFS (loop4): Invalid superblock magic number 07:43:07 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r3, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r0, 0x0) 07:43:07 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80c24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x3, 0xd5, 0x0, 0x21, 0x0, 0x3, 0x0, 0x82, 0x40, 0x33f, 0x0, 0x8, 0x38, 0x1, 0x7, 0xfff, 0x5}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x7}], "d3"}, 0x79) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) 07:43:07 executing program 3: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=ANY=[@ANYBLOB='N.,:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) 07:43:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="b7", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 138.793109][T11070] x86/PAT: syz-executor.1:11070 map pfn RAM range req write-combining for [mem 0x97800000-0x97a01fff], got write-back [ 138.803290][T11073] libceph: resolve 'N.' (ret=-3): failed [ 138.834108][T11080] libceph: resolve 'N.' (ret=-3): failed [ 138.837586][T11073] libceph: Failed to parse monitor IPs: -3 [ 138.863091][T11080] libceph: Failed to parse monitor IPs: -3 [ 144.739627][ T1931] oom_reaper: reaped process 11030 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 144.788645][ T8643] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 144.803316][ T8643] CPU: 0 PID: 8643 Comm: syz-fuzzer Not tainted 5.8.0-rc6-syzkaller #0 [ 144.811576][ T8643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.821630][ T8643] Call Trace: [ 144.824906][ T8643] dump_stack+0x10f/0x19d [ 144.829222][ T8643] dump_header+0x8e/0x400 [ 144.833539][ T8643] oom_kill_process+0x18d/0x3f0 [ 144.838424][ T8643] out_of_memory+0x5bd/0x880 [ 144.842998][ T8643] ? get_page_from_freelist+0x127/0x3c0 [ 144.848531][ T8643] __alloc_pages_slowpath+0x742/0x970 [ 144.853889][ T8643] __alloc_pages_nodemask+0x235/0x390 [ 144.859290][ T8643] alloc_pages_current+0x21d/0x310 [ 144.864413][ T8643] __page_cache_alloc+0x4f/0x120 [ 144.869382][ T8643] pagecache_get_page+0x494/0x8b0 [ 144.874444][ T8643] ? __do_page_cache_readahead+0x96/0xb0 [ 144.880157][ T8643] filemap_fault+0xba4/0x11e0 [ 144.884916][ T8643] ext4_filemap_fault+0x4b/0x60 [ 144.889820][ T8643] do_read_fault+0x41f/0x730 [ 144.894401][ T8643] handle_mm_fault+0x135d/0x1930 [ 144.899333][ T8643] do_user_addr_fault+0x393/0x810 [ 144.904346][ T8643] exc_page_fault+0xb8/0x330 [ 144.908920][ T8643] ? asm_exc_page_fault+0x8/0x30 [ 144.913842][ T8643] asm_exc_page_fault+0x1e/0x30 [ 144.918674][ T8643] RIP: 0033:0x4561b0 [ 144.922562][ T8643] Code: Bad RIP value. [ 144.926606][ T8643] RSP: 002b:000000c00004df30 EFLAGS: 00010206 [ 144.932635][ T8643] RAX: 00000021b48eebe4 RBX: 000000c00003e000 RCX: 0000000000000090 [ 144.940573][ T8643] RDX: 000000002d7d4be4 RSI: 000000c00004df10 RDI: 000000002d7d4be4 [ 144.948557][ T8643] RBP: 000000c00004dfa0 R08: 0000004f78bcdfb5 R09: 00007fffe5d69080 [ 144.956495][ T8643] R10: 0000000000000010 R11: 00007fffe5d690b8 R12: 0000000000439470 [ 144.964511][ T8643] R13: 0000000000000000 R14: 0000000000ac94e8 R15: 0000000000000000 [ 144.975460][ T8643] Mem-Info: [ 144.978608][ T8643] active_anon:134504 inactive_anon:4886 isolated_anon:0 [ 144.978608][ T8643] active_file:28 inactive_file:0 isolated_file:0 [ 144.978608][ T8643] unevictable:0 dirty:6 writeback:0 [ 144.978608][ T8643] slab_reclaimable:7255 slab_unreclaimable:18364 [ 144.978608][ T8643] mapped:52910 shmem:5070 pagetables:1288 bounce:0 [ 144.978608][ T8643] free:15551 free_pcp:199 free_cma:0 [ 144.980624][T11040] syz-executor.5: vmalloc: allocation failure, allocated 378454016 of 451231744 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 145.017298][ T8643] Node 0 active_anon:538016kB inactive_anon:19544kB active_file:0kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211556kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 325632kB writeback_tmp:0kB all_unreclaimable? yes [ 145.060856][ T8643] Node 1 active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:24kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 145.087339][ T8643] Node 0 DMA free:14308kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 145.116938][T11040] CPU: 0 PID: 11040 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 145.125592][T11040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.135628][T11040] Call Trace: [ 145.138903][T11040] dump_stack+0x10f/0x19d [ 145.143224][T11040] warn_alloc+0x105/0x160 [ 145.147539][T11040] __vmalloc_node_range+0x458/0x530 [ 145.152720][T11040] vmalloc_user+0x55/0x60 [ 145.157091][T11040] ? vb2_vmalloc_alloc+0x8f/0x120 [ 145.162128][T11040] vb2_vmalloc_alloc+0x8f/0x120 [ 145.166960][T11040] ? tsan.module_ctor+0x10/0x10 [ 145.171803][T11040] __vb2_queue_alloc+0x4fe/0xaf0 [ 145.176722][T11040] vb2_core_create_bufs+0x334/0x570 [ 145.181940][T11040] ? tomoyo_profile+0x17/0x30 [ 145.186599][T11040] vb2_create_bufs+0x419/0x560 [ 145.191348][T11040] ? tomoyo_profile+0x17/0x30 [ 145.196006][T11040] v4l2_m2m_ioctl_create_bufs+0xb4/0xc0 [ 145.201622][T11040] v4l_create_bufs+0x15e/0x1b0 [ 145.206368][T11040] __video_do_ioctl+0x65b/0x870 [ 145.211283][T11040] ? __video_do_ioctl+0x2b1/0x870 [ 145.216301][T11040] ? __check_object_size+0x253/0x310 [ 145.221595][T11040] video_usercopy+0x6da/0xfc0 [ 145.226256][T11040] ? video_ioctl2+0x30/0x30 [ 145.230742][T11040] ? putname+0xa5/0xc0 [ 145.234788][T11040] ? do_vfs_ioctl+0x4f1/0xec0 [ 145.239495][T11040] video_ioctl2+0x25/0x30 [ 145.243802][T11040] ? video_usercopy+0xfc0/0xfc0 [ 145.248629][T11040] v4l2_ioctl+0xc2/0xd0 [ 145.252762][T11040] ? v4l2_poll+0x150/0x150 [ 145.257157][T11040] __se_sys_ioctl+0xc9/0x130 [ 145.261730][T11040] __x64_sys_ioctl+0x3f/0x50 [ 145.266301][T11040] do_syscall_64+0x51/0xb0 [ 145.270702][T11040] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 145.276570][T11040] RIP: 0033:0x45c1f9 [ 145.280513][T11040] Code: Bad RIP value. [ 145.284556][T11040] RSP: 002b:00007fc80743fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.292945][T11040] RAX: ffffffffffffffda RBX: 000000000001dc40 RCX: 000000000045c1f9 [ 145.300901][T11040] RDX: 0000000020000240 RSI: 00000000c100565c RDI: 0000000000000003 [ 145.308858][T11040] RBP: 000000000078bfe0 R08: 0000000000000000 R09: 0000000000000000 [ 145.316808][T11040] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 145.324757][T11040] R13: 00007ffcd836209f R14: 00007fc8074409c0 R15: 000000000078bfac [ 145.334107][ T8643] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 145.342408][ T8643] Node 0 DMA32 free:52160kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:82944kB inactive_anon:0kB active_file:80kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:640kB pagetables:1260kB bounce:0kB free_pcp:1500kB local_pcp:168kB free_cma:0kB [ 145.380460][ T8643] lowmem_reserve[]: 0 0 707 707 707 [ 145.385670][ T8643] Node 0 Normal free:8812kB min:8668kB low:10832kB high:12996kB reserved_highatomic:0KB active_anon:455032kB inactive_anon:19544kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3752kB pagetables:3884kB bounce:0kB free_pcp:1408kB local_pcp:0kB free_cma:0kB [ 145.419155][ T8643] lowmem_reserve[]: 0 0 0 0 0 [ 145.423826][ T8643] Node 1 Normal free:329204kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:764kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:12kB bounce:0kB free_pcp:1556kB local_pcp:136kB free_cma:0kB [ 145.458619][ T8643] lowmem_reserve[]: 0 0 0 0 0 [ 145.463969][ T8643] Node 0 DMA: 3*4kB (U) 2*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 14348kB [ 145.481528][ T8643] Node 0 DMA32: 180*4kB (UME) 130*8kB (UE) 110*16kB (UME) 111*32kB (UME) 87*64kB (UE) 94*128kB (UME) 51*256kB (UM) 61*512kB (UME) 61*1024kB (UM) 25*2048kB (U) 81*4096kB (U) = 514400kB [ 145.501992][ T8643] Node 0 Normal: 610*4kB (UME) 198*8kB (UME) 90*16kB (UME) 51*32kB (UME) 28*64kB (UM) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 9656kB [ 145.519880][ T8643] Node 1 Normal: 849*4kB (U) 838*8kB (UE) 840*16kB (UM) 850*32kB (UME) 851*64kB (UME) 844*128kB (UM) 139*256kB (UME) 49*512kB (U) 22*1024kB (UE) 4*2048kB (UM) 6*4096kB (UM) = 329204kB [ 145.540605][ T8643] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 145.550732][ T8643] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 145.563363][ T8643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 145.573584][ T8643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 145.577214][T11040] Mem-Info: [ 145.584519][ T8643] 6663 total pagecache pages [ 145.590943][ T8643] 0 pages in swap cache [ 145.595084][ T8643] Swap cache stats: add 0, delete 0, find 0/0 [ 145.599809][T11040] active_anon:134494 inactive_anon:4886 isolated_anon:0 [ 145.599809][T11040] active_file:34 inactive_file:1614 isolated_file:0 [ 145.599809][T11040] unevictable:0 dirty:0 writeback:0 [ 145.599809][T11040] slab_reclaimable:7250 slab_unreclaimable:18365 [ 145.599809][T11040] mapped:53928 shmem:5070 pagetables:1289 bounce:0 [ 145.599809][T11040] free:334194 free_pcp:1142 free_cma:0 [ 145.602687][ T8643] Free swap = 0kB [ 145.643519][ T8643] Total swap = 0kB [ 145.647452][ T8643] 1965979 pages RAM [ 145.651254][ T8643] 0 pages HighMem/MovableOnly [ 145.655905][ T8643] 83163 pages reserved [ 145.661448][ T8643] 0 pages cma reserved [ 145.665508][ T8643] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=11074,uid=0 [ 145.682056][T11040] Node 0 active_anon:537976kB inactive_anon:19544kB active_file:104kB inactive_file:6092kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215996kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 323584kB writeback_tmp:0kB all_unreclaimable? yes [ 145.711535][ T8643] Out of memory: Killed process 11074 (syz-executor.3) total-vm:74980kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 145.729754][ T1931] oom_reaper: reaped process 11074 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 145.740994][T11040] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:764kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:516kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 145.768647][T11040] Node 0 DMA free:14348kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 145.800183][T11040] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 145.805914][T11040] Node 0 DMA32 free:1441240kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:80888kB inactive_anon:0kB active_file:100kB inactive_file:6892kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:640kB pagetables:1260kB bounce:0kB free_pcp:1684kB local_pcp:408kB free_cma:0kB [ 145.839929][T11040] lowmem_reserve[]: 0 0 707 707 707 [ 145.845122][T11040] Node 0 Normal free:13640kB min:8668kB low:10832kB high:12996kB reserved_highatomic:0KB active_anon:454964kB inactive_anon:19544kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3752kB pagetables:3784kB bounce:0kB free_pcp:1520kB local_pcp:112kB free_cma:0kB [ 145.879026][T11040] lowmem_reserve[]: 0 0 0 0 0 [ 145.883726][T11040] Node 1 Normal free:628004kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:764kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:12kB bounce:0kB free_pcp:1460kB local_pcp:136kB free_cma:0kB [ 145.917673][T11040] lowmem_reserve[]: 0 0 0 0 0 [ 145.922347][T11040] Node 0 DMA: 166*4kB (U) 3*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15008kB [ 145.946548][T11040] Node 0 DMA32: 2557*4kB (UME) 2564*8kB (UME) 2543*16kB (UE) 2557*32kB (UE) 2535*64kB (UE) 2522*128kB (UE) 575*256kB (U) 145*512kB (UME) 135*1024kB (UM) 59*2048kB (UM) 97*4096kB (U) = 1516132kB [ 145.967808][T11040] Node 0 Normal: 1764*4kB (UME) 819*8kB (UME) 387*16kB (UME) 216*32kB (UME) 119*64kB (UM) 27*128kB (UM) 10*256kB (U) 5*512kB (U) 1*1024kB (U) 1*2048kB (U) 0*4096kB = 45976kB [ 145.985463][T11040] Node 1 Normal: 1888*4kB (UM) 1833*8kB (UE) 1853*16kB (UM) 1855*32kB (UE) 1872*64kB (UE) 1850*128kB (UM) 358*256kB (UE) 117*512kB (UM) 76*1024kB (UE) 37*2048kB (UM) 55*4096kB (UM) = 998264kB [ 146.009335][T11040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.019669][T11040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 146.030927][T11040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.041338][T11040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 146.052019][T11040] 7038 total pagecache pages [ 146.057419][T11040] 0 pages in swap cache [ 146.061563][T11040] Swap cache stats: add 0, delete 0, find 0/0 [ 146.068921][T11040] Free swap = 0kB [ 146.072629][T11040] Total swap = 0kB [ 146.077135][T11040] 1965979 pages RAM [ 146.080929][T11040] 0 pages HighMem/MovableOnly [ 146.085624][T11040] 83163 pages reserved [ 146.091375][T11040] 0 pages cma reserved 07:43:15 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r3, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r0, 0x0) 07:43:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x7fffffff, 0x1, {0x2, @raw_data="1f1e932a3866b6112b0224cb147ea4c7b5d88f9f4f2de51a029d9000bac55b0d2b5a2749d9fe23889f7a6e543df6652dce2bc42ebc465b0ffd15a947652eafc59bd84cd7ec9f458d11141ccdd62ce8f004e261919a602858318efbd45f67a079c9d06c3f9a82e5237356e03ed7f7eac0fa34a75254525d4400ffd4786e76451235d44416bdc7536e73a8231cd1e949399a8efe0acd7bea4d24bd1ddfceb9f200d95ff81065a6400c013d15b8e354eaef003d95ad5e34e2a37e2da0d30ef79038a4d582964f54540f"}}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:43:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="b7", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000340), 0x0) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 07:43:15 executing program 4: getpid() write$binfmt_misc(0xffffffffffffffff, 0x0, 0x1000000c8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x44}}, 0x0) 07:43:15 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:43:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:43:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="b7", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:15 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r1, 0x0) [ 146.747886][T11109] x86/PAT: syz-executor.1:11109 map pfn RAM range req write-combining for [mem 0xa8000000-0xa8201fff], got write-back 07:43:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 146.846093][T11123] x86/PAT: syz-executor.1:11123 map pfn RAM range req write-combining for [mem 0xa9400000-0xa9601fff], got write-back [ 146.864137][T11121] x86/PAT: syz-executor.4:11121 map pfn RAM range req write-combining for [mem 0x87400000-0x87601fff], got write-back 07:43:15 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:43:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:43:15 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r1, 0x0) [ 147.022949][T11132] x86/PAT: syz-executor.4:11132 map pfn RAM range req write-combining for [mem 0xab000000-0xab201fff], got write-back [ 147.043947][T11137] x86/PAT: syz-executor.1:11137 map pfn RAM range req write-combining for [mem 0xab400000-0xab601fff], got write-back [ 150.769244][ T1931] oom_reaper: reaped process 11122 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 150.794751][ T8195] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 150.806677][ T8195] CPU: 0 PID: 8195 Comm: in:imklog Not tainted 5.8.0-rc6-syzkaller #0 [ 150.814814][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.824880][ T8195] Call Trace: [ 150.828149][ T8195] dump_stack+0x10f/0x19d [ 150.832517][ T8195] dump_header+0x8e/0x400 [ 150.836902][ T8195] oom_kill_process+0x18d/0x3f0 [ 150.841734][ T8195] out_of_memory+0x5bd/0x880 [ 150.846319][ T8195] ? get_page_from_freelist+0x127/0x3c0 [ 150.851943][ T8195] __alloc_pages_slowpath+0x742/0x970 [ 150.857299][ T8195] __alloc_pages_nodemask+0x235/0x390 [ 150.862654][ T8195] alloc_pages_current+0x21d/0x310 [ 150.867747][ T8195] __page_cache_alloc+0x4f/0x120 [ 150.872662][ T8195] pagecache_get_page+0x494/0x8b0 [ 150.877738][ T8195] ? __do_page_cache_readahead+0x96/0xb0 [ 150.883367][ T8195] filemap_fault+0xba4/0x11e0 [ 150.888087][ T8195] ext4_filemap_fault+0x4b/0x60 [ 150.892993][ T8195] do_read_fault+0x41f/0x730 [ 150.897563][ T8195] handle_mm_fault+0x135d/0x1930 [ 150.902489][ T8195] do_user_addr_fault+0x393/0x810 [ 150.907539][ T8195] exc_page_fault+0xb8/0x330 [ 150.912179][ T8195] ? asm_exc_page_fault+0x8/0x30 [ 150.917112][ T8195] asm_exc_page_fault+0x1e/0x30 [ 150.921976][ T8195] RIP: 0033:0x7f9897db522d [ 150.926366][ T8195] Code: Bad RIP value. [ 150.930496][ T8195] RSP: 002b:00007f9895751580 EFLAGS: 00010293 [ 150.936537][ T8195] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007f9897db522d [ 150.944485][ T8195] RDX: 0000000000001fa0 RSI: 00007f9895751da0 RDI: 0000000000000004 [ 150.952436][ T8195] RBP: 000055de524979d0 R08: 0000000000000000 R09: 0000000000000000 [ 150.960473][ T8195] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f9895751da0 [ 150.968432][ T8195] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f9895751ebc [ 150.979436][ T8195] Mem-Info: [ 150.982595][ T8195] active_anon:133962 inactive_anon:4886 isolated_anon:0 [ 150.982595][ T8195] active_file:34 inactive_file:2 isolated_file:0 [ 150.982595][ T8195] unevictable:0 dirty:4 writeback:0 [ 150.982595][ T8195] slab_reclaimable:7193 slab_unreclaimable:18306 [ 150.982595][ T8195] mapped:52911 shmem:5070 pagetables:1262 bounce:0 [ 150.982595][ T8195] free:16352 free_pcp:216 free_cma:0 [ 151.020204][ T8195] Node 0 active_anon:535844kB inactive_anon:19544kB active_file:52kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211612kB dirty:12kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 323584kB writeback_tmp:0kB all_unreclaimable? yes [ 151.049243][ T8195] Node 1 active_anon:4kB inactive_anon:0kB active_file:84kB inactive_file:1104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:732kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 151.076490][ T8195] Node 0 DMA free:14428kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 151.107648][ T8195] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 151.113379][ T8195] Node 0 DMA32 free:153408kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:81172kB inactive_anon:28kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:12kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:624kB pagetables:1252kB bounce:0kB free_pcp:1464kB local_pcp:4kB free_cma:0kB [ 151.146754][ T8195] lowmem_reserve[]: 0 0 707 707 707 [ 151.151948][ T8195] Node 0 Normal free:102108kB min:16860kB low:19024kB high:21188kB reserved_highatomic:0KB active_anon:454676kB inactive_anon:19516kB active_file:32kB inactive_file:1276kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3736kB pagetables:3788kB bounce:0kB free_pcp:1552kB local_pcp:116kB free_cma:0kB [ 151.185661][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 151.190365][ T8195] Node 1 Normal free:225572kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:1204kB unevictable:0kB writepending:4kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:1332kB local_pcp:0kB free_cma:0kB [ 151.224088][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 151.228902][ T8195] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 3*4096kB (UM) = 14444kB [ 151.244242][ T8195] Node 0 DMA32: 321*4kB (UME) 189*8kB (UME) 121*16kB (UME) 102*32kB (UME) 88*64kB (UME) 80*128kB (UME) 50*256kB (UM) 54*512kB (UME) 55*1024kB (UM) 53*2048kB (U) 113*4096kB (UM) = 692028kB [ 151.264079][ T8195] Node 0 Normal: 2155*4kB (UME) 1181*8kB (UME) 657*16kB (UM) 381*32kB (UM) 211*64kB (UM) 68*128kB (UM) 23*256kB (UM) 13*512kB (UM) 7*1024kB (U) 8*2048kB (U) 1*4096kB (U) = 103172kB [ 151.283492][ T8195] Node 1 Normal: 12*4kB (U) 11*8kB (UME) 9*16kB (U) 13*32kB (UE) 9*64kB (UE) 7*128kB (UM) 4*256kB (UME) 3*512kB (U) 4*1024kB (UE) 2*2048kB (UM) 52*4096kB (UM) = 225912kB [ 151.301960][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.311510][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 151.322153][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.332323][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 151.342982][ T8195] 5742 total pagecache pages [ 151.347593][ T8195] 0 pages in swap cache [ 151.351728][ T8195] Swap cache stats: add 0, delete 0, find 0/0 [ 151.359314][ T8195] Free swap = 0kB [ 151.363075][ T8195] Total swap = 0kB [ 151.366827][ T8195] 1965979 pages RAM [ 151.370609][ T8195] 0 pages HighMem/MovableOnly [ 151.375286][ T8195] 83163 pages reserved [ 151.380852][ T8195] 0 pages cma reserved [ 151.384964][ T8195] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=10161,uid=0 [ 151.400506][ T8195] Out of memory: Killed process 10161 (syz-executor.0) total-vm:74980kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 07:43:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x7fffffff, 0x1, {0x2, @raw_data="1f1e932a3866b6112b0224cb147ea4c7b5d88f9f4f2de51a029d9000bac55b0d2b5a2749d9fe23889f7a6e543df6652dce2bc42ebc465b0ffd15a947652eafc59bd84cd7ec9f458d11141ccdd62ce8f004e261919a602858318efbd45f67a079c9d06c3f9a82e5237356e03ed7f7eac0fa34a75254525d4400ffd4786e76451235d44416bdc7536e73a8231cd1e949399a8efe0acd7bea4d24bd1ddfceb9f200d95ff81065a6400c013d15b8e354eaef003d95ad5e34e2a37e2da0d30ef79038a4d582964f54540f"}}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:43:20 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:43:20 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r1, 0x0) 07:43:20 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl(r0, 0x6681, 0x0) 07:43:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) syz_open_procfs(0x0, &(0x7f0000272000)) 07:43:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 152.380134][T11172] x86/PAT: syz-executor.1:11172 map pfn RAM range req write-combining for [mem 0x9b800000-0x9ba01fff], got write-back 07:43:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r5, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:43:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x125, &(0x7f0000000240)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c9400010000dca7712c225da4a455f4c9fd98a568097aa4acd6ecd74d473fdd43b9693122310088463ad3f8fbe0a10fff4bbaef7cd058ec3a54a90a11c890a73cef2d28533220798a2b0180000000000000c6fa53cea17bd8d700000000000000f53e2623193c8ff31a4582a85559ca5fbc21ae2b0927eced00b121edcfdeff5287fde7f3635391822e79d7bd3dd1a3b31bdba0c944352bfe78ed160eda2b362276cc49e8cc650975db4d2d8bb2e2c30b54f66eb615799b39f20195ffff7fd2d6f81bd3b9ac913471abb207801572a8930c4aeb491305abdee1a422c7cf0bb78dde02584bd9c89884021f32c4f79f99e1fa3322d87a24fc43644358045e9c56082ce1dfbe4d6a"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 07:43:21 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000300)={0x9, 0x7fff, 0x0, 0x3, 0x9026, 0x20}) r1 = dup(0xffffffffffffffff) execveat(r1, 0x0, 0x0, 0x0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000200)='\xf4y6\xce\xaa#\x9d\xc6\xa6\x03\"H\xbaa\xbf\xae\x05\xe8\xd9\xadwJ\xf7m\xeb\x8b\x1c\xea\xa57\xb2u\x90\xd8\xd1\xc1\xf4\x12\f\x86\x9b\xa9\xd5\xfd\xff,\xb8\xcf\xba\x12\xd7\xc2\x1d\xb4\x85>YN\x19\xe2\xabM\xad\xe4\x14\x0f\xc5\xa4}\xfcdV\'X\xf3\xc5p\xee\xf9+\x1e\x96%8\xe7\xf49\x89\xff\xdb\x03[p\x8a\x87Q\xde,\x11\x90\xb1\xb3\xce\xbb\xdca\xc2\xca\x06\x00\x00\x00\xd3\xf9\xb09\xba&\x96\x18\xb1i\xdf\xa2\xc4\x05\xdc*I\xdb\xb5\x8c\xf1\xd8{\xed\xc1\xa2Qm\xa0+\x06\x9f\xa5;V\x96:\x02\xedN\x89\x97\xb8\x90}N\xc5\x8fu\x1d\x7fW\n\xe44', 0xfffffffffffffffd) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x200040, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000180)) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/fib_trie\x00') read(r3, &(0x7f0000000040)=""/230, 0x1c02fa81) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x400202, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_NMI(r1, 0xae9a) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYBLOB="008e5d496a714c401adb3cd5f1975cdbc711ac6fa6f0fcddf52d90c6b9752500"/45]) 07:43:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:21 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 152.548023][T11183] x86/PAT: syz-executor.1:11183 map pfn RAM range req write-combining for [mem 0x99c00000-0x99e01fff], got write-back 07:43:21 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001f5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x17000000, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000251, 0x0) creat(0x0, 0x110) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:43:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x8800) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60004020}, 0x4000050) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x60, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40084}, 0x4801) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000012c0)={r1, 0x20, 0xffffffff, 0x6, 0x0, 0x40, 0xac8, 0x9, 0x7379, 0xffffffff, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) 07:43:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r5, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:43:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 152.729476][T11207] x86/PAT: syz-executor.1:11207 map pfn RAM range req write-combining for [mem 0x9b400000-0x9b601fff], got write-back [ 156.657195][ T1931] oom_reaper: reaped process 11167 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 156.684076][ T8195] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 156.695922][ T8195] CPU: 0 PID: 8195 Comm: in:imklog Not tainted 5.8.0-rc6-syzkaller #0 [ 156.704052][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.706309][T11167] warn_alloc: 2 callbacks suppressed [ 156.706324][T11167] syz-executor.5: vmalloc: allocation failure, allocated 259547136 of 451231744 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 156.714084][ T8195] Call Trace: [ 156.738927][ T8195] dump_stack+0x10f/0x19d [ 156.743243][ T8195] dump_header+0x8e/0x400 [ 156.747559][ T8195] oom_kill_process+0x18d/0x3f0 [ 156.752388][ T8195] out_of_memory+0x5bd/0x880 [ 156.757019][ T8195] ? get_page_from_freelist+0x127/0x3c0 [ 156.762571][ T8195] __alloc_pages_slowpath+0x742/0x970 [ 156.767955][ T8195] __alloc_pages_nodemask+0x235/0x390 [ 156.773388][ T8195] alloc_pages_current+0x21d/0x310 [ 156.778479][ T8195] __page_cache_alloc+0x4f/0x120 [ 156.783443][ T8195] pagecache_get_page+0x494/0x8b0 [ 156.788476][ T8195] ? __do_page_cache_readahead+0x96/0xb0 [ 156.794087][ T8195] filemap_fault+0xba4/0x11e0 [ 156.798747][ T8195] ext4_filemap_fault+0x4b/0x60 [ 156.803644][ T8195] do_read_fault+0x41f/0x730 [ 156.808219][ T8195] handle_mm_fault+0x135d/0x1930 [ 156.813142][ T8195] do_user_addr_fault+0x393/0x810 [ 156.818177][ T8195] exc_page_fault+0xb8/0x330 [ 156.822784][ T8195] ? asm_exc_page_fault+0x8/0x30 [ 156.827721][ T8195] asm_exc_page_fault+0x1e/0x30 [ 156.832588][ T8195] RIP: 0033:0x7f9897db522d [ 156.837048][ T8195] Code: Bad RIP value. [ 156.841091][ T8195] RSP: 002b:00007f9895751580 EFLAGS: 00010293 [ 156.847134][ T8195] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007f9897db522d [ 156.855119][ T8195] RDX: 0000000000001fa0 RSI: 00007f9895751da0 RDI: 0000000000000004 [ 156.863070][ T8195] RBP: 000055de524979d0 R08: 0000000000000000 R09: 0000000004000001 [ 156.871046][ T8195] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f9895751da0 [ 156.879035][ T8195] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f9895751e2e [ 156.886997][T11167] CPU: 1 PID: 11167 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 156.891646][ T8195] Mem-Info: [ 156.895665][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.898783][ T8195] active_anon:134508 inactive_anon:4886 isolated_anon:0 [ 156.898783][ T8195] active_file:16 inactive_file:0 isolated_file:0 [ 156.898783][ T8195] unevictable:0 dirty:0 writeback:0 [ 156.898783][ T8195] slab_reclaimable:7169 slab_unreclaimable:18299 [ 156.898783][ T8195] mapped:52892 shmem:5070 pagetables:1288 bounce:0 [ 156.898783][ T8195] free:16142 free_pcp:213 free_cma:0 [ 156.908772][T11167] Call Trace: [ 156.908789][T11167] dump_stack+0x10f/0x19d [ 156.908867][T11167] warn_alloc+0x105/0x160 [ 156.945153][ T8195] Node 0 active_anon:538024kB inactive_anon:19544kB active_file:24kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211552kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 325632kB writeback_tmp:0kB all_unreclaimable? yes [ 156.948391][T11167] __vmalloc_node_range+0x458/0x530 [ 156.948440][T11167] vmalloc_user+0x55/0x60 [ 156.952750][ T8195] Node 1 active_anon:8kB inactive_anon:0kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 156.957054][T11167] ? vb2_vmalloc_alloc+0x8f/0x120 [ 156.957121][T11167] vb2_vmalloc_alloc+0x8f/0x120 [ 156.984522][ T8195] Node 0 DMA free:14308kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.989722][T11167] ? tsan.module_ctor+0x10/0x10 [ 156.989736][T11167] __vb2_queue_alloc+0x4fe/0xaf0 [ 156.994105][ T8195] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 157.019504][T11167] vb2_core_create_bufs+0x334/0x570 [ 157.019523][T11167] ? tomoyo_profile+0x17/0x30 [ 157.024543][ T8195] Node 0 DMA32 free:19996kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:83448kB inactive_anon:28kB active_file:0kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:656kB pagetables:1428kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 157.029404][T11167] vb2_create_bufs+0x419/0x560 [ 157.029424][T11167] ? tomoyo_profile+0x17/0x30 [ 157.058298][ T8195] lowmem_reserve[]: 0 0 707 707 707 [ 157.063127][T11167] v4l2_m2m_ioctl_create_bufs+0xb4/0xc0 [ 157.068099][ T8195] Node 0 Normal free:7560kB min:16860kB low:19024kB high:21188kB reserved_highatomic:0KB active_anon:454580kB inactive_anon:19516kB active_file:28kB inactive_file:20kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3720kB pagetables:3716kB bounce:0kB free_pcp:348kB local_pcp:100kB free_cma:0kB [ 157.073815][T11167] v4l_create_bufs+0x15e/0x1b0 [ 157.078985][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 157.083673][T11167] __video_do_ioctl+0x65b/0x870 [ 157.114701][ T8195] Node 1 Normal free:22704kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 157.119456][T11167] ? __video_do_ioctl+0x2b1/0x870 [ 157.119499][T11167] ? __check_object_size+0x253/0x310 [ 157.124194][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 157.129361][T11167] video_usercopy+0x6da/0xfc0 [ 157.129391][T11167] ? video_ioctl2+0x30/0x30 [ 157.134933][ T8195] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 14308kB [ 157.166490][T11167] ? putname+0xa5/0xc0 [ 157.166507][T11167] ? do_vfs_ioctl+0x4f1/0xec0 [ 157.171248][ T8195] Node 0 DMA32: 153*4kB (UME) 97*8kB (UME) 47*16kB (ME) 26*32kB (ME) 22*64kB (UME) 18*128kB (UME) 12*256kB (M) 8*512kB (UME) 6*1024kB (UM) 0*2048kB 0*4096kB = 19996kB [ 157.175911][T11167] video_ioctl2+0x25/0x30 [ 157.180730][ T8195] Node 0 Normal: 505*4kB (ME) 227*8kB (UME) 99*16kB (UM) 37*32kB (UM) 11*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7308kB [ 157.211136][T11167] ? video_usercopy+0xfc0/0xfc0 [ 157.211154][T11167] v4l2_ioctl+0xc2/0xd0 [ 157.216153][ T8195] Node 1 Normal: 4*4kB (UM) 6*8kB (UME) 3*16kB (M) 4*32kB (UME) 3*64kB (ME) 2*128kB (M) 4*256kB (UME) 1*512kB (M) 2*1024kB (UE) 1*2048kB (M) 4*4096kB (M) = 22704kB [ 157.221441][T11167] ? v4l2_poll+0x150/0x150 [ 157.221460][T11167] __se_sys_ioctl+0xc9/0x130 [ 157.226110][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.230768][T11167] __x64_sys_ioctl+0x3f/0x50 [ 157.230859][T11167] do_syscall_64+0x51/0xb0 [ 157.235331][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 157.249977][T11167] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 157.249991][T11167] RIP: 0033:0x45c1f9 [ 157.254035][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.258681][T11167] Code: Bad RIP value. [ 157.258687][T11167] RSP: 002b:00007fc807460c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.258704][T11167] RAX: ffffffffffffffda RBX: 000000000001dc40 RCX: 000000000045c1f9 [ 157.275258][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 157.279536][T11167] RDX: 0000000020000240 RSI: 00000000c100565c RDI: 0000000000000003 [ 157.279542][T11167] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 157.279556][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 157.294209][ T8195] 5104 total pagecache pages [ 157.299087][T11167] R13: 00007ffcd836209f R14: 00007fc8074619c0 R15: 000000000078bf0c [ 157.305374][T11167] Mem-Info: [ 157.322898][ T8195] 0 pages in swap cache [ 157.326433][T11167] active_anon:134508 inactive_anon:4886 isolated_anon:0 [ 157.326433][T11167] active_file:14 inactive_file:13 isolated_file:0 [ 157.326433][T11167] unevictable:0 dirty:0 writeback:0 [ 157.326433][T11167] slab_reclaimable:7169 slab_unreclaimable:18299 [ 157.326433][T11167] mapped:52888 shmem:5070 pagetables:1288 bounce:0 [ 157.326433][T11167] free:16079 free_pcp:212 free_cma:0 [ 157.328556][ T8195] Swap cache stats: add 0, delete 0, find 0/0 [ 157.339981][T11167] Node 0 active_anon:538024kB inactive_anon:19544kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211552kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 325632kB writeback_tmp:0kB all_unreclaimable? yes [ 157.344323][ T8195] Free swap = 0kB [ 157.347210][T11167] Node 1 active_anon:8kB inactive_anon:0kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 157.357827][ T8195] Total swap = 0kB [ 157.363805][T11167] Node 0 DMA free:14308kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.366268][ T8195] 1965979 pages RAM [ 157.378664][T11167] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 157.381127][ T8195] 0 pages HighMem/MovableOnly [ 157.388144][T11167] Node 0 DMA32 free:19996kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:83444kB inactive_anon:28kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:656kB pagetables:1428kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 157.396290][ T8195] 83163 pages reserved [ 157.410964][T11167] lowmem_reserve[]: 0 0 707 707 707 [ 157.415097][ T8195] 0 pages cma reserved [ 157.421533][T11167] Node 0 Normal free:7308kB min:16860kB low:19024kB high:21188kB reserved_highatomic:0KB active_anon:454556kB inactive_anon:19516kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3720kB pagetables:3712kB bounce:0kB free_pcp:344kB local_pcp:248kB free_cma:0kB [ 157.431614][ T8195] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=11191,uid=0 [ 157.454546][T11167] lowmem_reserve[]: 0 0 0 0 0 [ 157.488536][ T8195] Out of memory: Killed process 11191 (syz-executor.4) total-vm:74980kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 157.709797][T11167] Node 1 Normal free:22704kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 157.719943][ T1931] oom_reaper: reaped process 11191 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 157.742080][T11167] lowmem_reserve[]: 0 0 0 0 0 [ 157.756110][T11167] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 14308kB [ 157.772211][T11167] Node 0 DMA32: 153*4kB (UME) 97*8kB (UME) 47*16kB (ME) 26*32kB (ME) 22*64kB (UME) 18*128kB (UME) 12*256kB (M) 8*512kB (UME) 6*1024kB (UM) 1*2048kB (M) 0*4096kB = 22044kB [ 157.790868][T11167] Node 0 Normal: 472*4kB (UME) 226*8kB (UME) 98*16kB (UM) 36*32kB (UM) 10*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7056kB [ 157.805501][T11167] Node 1 Normal: 4*4kB (UM) 6*8kB (UME) 3*16kB (M) 5*32kB (UME) 3*64kB (ME) 2*128kB (M) 4*256kB (UME) 1*512kB (M) 2*1024kB (UE) 1*2048kB (M) 4*4096kB (M) = 22736kB [ 157.806422][ T8195] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 157.824519][T11167] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.840274][ T8195] CPU: 0 PID: 8195 Comm: in:imklog Not tainted 5.8.0-rc6-syzkaller #0 [ 157.845276][T11167] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 157.850101][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.850105][ T8195] Call Trace: [ 157.850122][ T8195] dump_stack+0x10f/0x19d [ 157.850368][ T8195] dump_header+0x8e/0x400 [ 157.860636][T11167] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.869485][ T8195] oom_kill_process+0x18d/0x3f0 [ 157.869503][ T8195] out_of_memory+0x5bd/0x880 [ 157.872756][T11167] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 157.877062][ T8195] ? get_page_from_freelist+0x127/0x3c0 [ 157.877088][ T8195] __alloc_pages_slowpath+0x742/0x970 [ 157.877103][ T8195] __alloc_pages_nodemask+0x235/0x390 [ 157.882639][T11167] 5097 total pagecache pages [ 157.890929][ T8195] alloc_pages_current+0x21d/0x310 [ 157.890945][ T8195] __page_cache_alloc+0x4f/0x120 [ 157.895762][T11167] 0 pages in swap cache [ 157.900322][ T8195] pagecache_get_page+0x494/0x8b0 [ 157.900333][ T8195] ? __do_page_cache_readahead+0x96/0xb0 [ 157.900344][ T8195] filemap_fault+0xba4/0x11e0 [ 157.900358][ T8195] ext4_filemap_fault+0x4b/0x60 [ 157.900384][ T8195] do_read_fault+0x41f/0x730 [ 157.911282][T11167] Swap cache stats: add 0, delete 0, find 0/0 [ 157.915312][ T8195] handle_mm_fault+0x135d/0x1930 [ 157.935129][T11167] Free swap = 0kB [ 157.935675][ T8195] do_user_addr_fault+0x393/0x810 [ 157.940601][T11167] Total swap = 0kB [ 157.944777][ T8195] exc_page_fault+0xb8/0x330 [ 157.951128][T11167] 1965979 pages RAM [ 157.955292][ T8195] ? asm_exc_page_fault+0x8/0x30 [ 157.959970][T11167] 0 pages HighMem/MovableOnly [ 157.964783][ T8195] asm_exc_page_fault+0x1e/0x30 [ 157.970648][T11167] 83163 pages reserved [ 157.975373][ T8195] RIP: 0033:0x7f9897db522d [ 157.980303][T11167] 0 pages cma reserved [ 157.983976][ T8195] Code: Bad RIP value. [ 158.031904][ T8195] RSP: 002b:00007f9895751580 EFLAGS: 00010293 [ 158.037946][ T8195] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007f9897db522d [ 158.045892][ T8195] RDX: 0000000000001fa0 RSI: 00007f9895751da0 RDI: 0000000000000004 [ 158.053840][ T8195] RBP: 000055de524979d0 R08: 0000000000000000 R09: 0000000004000001 [ 158.061803][ T8195] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f9895751da0 [ 158.069753][ T8195] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f9895751e2e [ 158.097622][ T8195] Mem-Info: [ 158.100743][ T8195] active_anon:133963 inactive_anon:4886 isolated_anon:0 [ 158.100743][ T8195] active_file:14 inactive_file:13 isolated_file:0 [ 158.100743][ T8195] unevictable:0 dirty:0 writeback:0 [ 158.100743][ T8195] slab_reclaimable:7169 slab_unreclaimable:18299 [ 158.100743][ T8195] mapped:52888 shmem:5070 pagetables:1287 bounce:0 [ 158.100743][ T8195] free:38981 free_pcp:315 free_cma:0 [ 158.139358][ T8195] Node 0 active_anon:535848kB inactive_anon:19544kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211552kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 323584kB writeback_tmp:0kB all_unreclaimable? yes [ 158.170743][ T8195] Node 1 active_anon:4kB inactive_anon:0kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 158.199830][ T8195] Node 0 DMA free:14428kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 158.230629][ T8195] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 158.237035][ T8195] Node 0 DMA32 free:318272kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:81304kB inactive_anon:28kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:656kB pagetables:1428kB bounce:0kB free_pcp:1340kB local_pcp:0kB free_cma:0kB [ 158.271123][ T8195] lowmem_reserve[]: 0 0 707 707 707 [ 158.276565][ T8195] Node 0 Normal free:102672kB min:8668kB low:10832kB high:12996kB reserved_highatomic:0KB active_anon:454556kB inactive_anon:19516kB active_file:24kB inactive_file:836kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3720kB pagetables:3712kB bounce:0kB free_pcp:1440kB local_pcp:128kB free_cma:0kB [ 158.311117][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 158.315802][ T8195] Node 1 Normal free:218392kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:1360kB local_pcp:0kB free_cma:0kB [ 158.349301][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 158.354688][ T8195] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 3*4096kB (UM) = 14444kB [ 158.368922][ T8195] Node 0 DMA32: 375*4kB (UME) 231*8kB (UME) 139*16kB (UME) 113*32kB (UME) 90*64kB (UME) 93*128kB (UME) 61*256kB (UM) 65*512kB (UME) 60*1024kB (UM) 51*2048kB (U) 152*4096kB (U) = 864228kB [ 158.388060][ T8195] Node 0 Normal: 1741*4kB (UME) 1225*8kB (UME) 675*16kB (UME) 401*32kB (UME) 230*64kB (UME) 80*128kB (UM) 31*256kB (U) 15*512kB (U) 5*1024kB (U) 6*2048kB (U) 1*4096kB (M) = 102476kB [ 158.406271][ T8195] Node 1 Normal: 7*4kB (UM) 6*8kB (UME) 2*16kB (M) 6*32kB (UME) 4*64kB (UME) 3*128kB (UM) 4*256kB (UME) 5*512kB (UM) 3*1024kB (UE) 1*2048kB (M) 51*4096kB (UM) = 218540kB [ 158.424471][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.434782][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 158.444642][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.454189][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 158.463461][ T8195] 5503 total pagecache pages [ 158.468049][ T8195] 0 pages in swap cache [ 158.472681][ T8195] Swap cache stats: add 0, delete 0, find 0/0 [ 158.478768][ T8195] Free swap = 0kB [ 158.482562][ T8195] Total swap = 0kB [ 158.486264][ T8195] 1965979 pages RAM [ 158.490137][ T8195] 0 pages HighMem/MovableOnly [ 158.494793][ T8195] 83163 pages reserved [ 158.498867][ T8195] 0 pages cma reserved [ 158.502937][ T8195] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=11195,uid=0 [ 158.517833][ T8195] Out of memory: Killed process 11195 (syz-executor.3) total-vm:74848kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 158.536369][ T1931] oom_reaper: reaped process 11195 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 07:43:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="b7", 0x1, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@mcast1}, {@in=@multicast2, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 07:43:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r5, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:43:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x7fffffff, 0x1, {0x2, @raw_data="1f1e932a3866b6112b0224cb147ea4c7b5d88f9f4f2de51a029d9000bac55b0d2b5a2749d9fe23889f7a6e543df6652dce2bc42ebc465b0ffd15a947652eafc59bd84cd7ec9f458d11141ccdd62ce8f004e261919a602858318efbd45f67a079c9d06c3f9a82e5237356e03ed7f7eac0fa34a75254525d4400ffd4786e76451235d44416bdc7536e73a8231cd1e949399a8efe0acd7bea4d24bd1ddfceb9f200d95ff81065a6400c013d15b8e354eaef003d95ad5e34e2a37e2da0d30ef79038a4d582964f54540f"}}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:43:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="b7", 0x1, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:27 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:43:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x15c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) socket(0x11, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x20000000) 07:43:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="b7", 0x1, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:28 executing program 4: socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) [ 159.509393][T11260] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.537819][T11264] x86/PAT: syz-executor.1:11264 map pfn RAM range req write-combining for [mem 0xa1800000-0xa1a01fff], got write-back 07:43:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="b7", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:28 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r1, 0x0) 07:43:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x15c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) socket(0x11, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x20000000) [ 159.647215][T11275] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 07:43:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="b7", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 07:43:28 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 159.716374][T11279] x86/PAT: syz-executor.1:11279 map pfn RAM range req write-combining for [mem 0x0a000000-0x0a201fff], got write-back 07:43:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="b7", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 163.640647][ T1931] oom_reaper: reaped process 11259 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 163.660608][ T8195] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 163.672848][ T8195] CPU: 0 PID: 8195 Comm: in:imklog Not tainted 5.8.0-rc6-syzkaller #0 [ 163.680980][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.691018][ T8195] Call Trace: [ 163.694288][ T8195] dump_stack+0x10f/0x19d [ 163.698613][ T8195] dump_header+0x8e/0x400 [ 163.702930][ T8195] oom_kill_process+0x18d/0x3f0 [ 163.707771][ T8195] out_of_memory+0x5bd/0x880 [ 163.712401][ T8195] ? get_page_from_freelist+0x127/0x3c0 [ 163.717911][ T8195] __alloc_pages_slowpath+0x742/0x970 [ 163.723252][ T8195] __alloc_pages_nodemask+0x235/0x390 [ 163.728601][ T8195] alloc_pages_current+0x21d/0x310 [ 163.733737][ T8195] __page_cache_alloc+0x4f/0x120 [ 163.738640][ T8195] pagecache_get_page+0x494/0x8b0 [ 163.743630][ T8195] ? __do_page_cache_readahead+0x96/0xb0 [ 163.749254][ T8195] filemap_fault+0xba4/0x11e0 [ 163.753903][ T8195] ext4_filemap_fault+0x4b/0x60 [ 163.758750][ T8195] do_read_fault+0x41f/0x730 [ 163.763306][ T8195] handle_mm_fault+0x135d/0x1930 [ 163.768227][ T8195] do_user_addr_fault+0x393/0x810 [ 163.773252][ T8195] exc_page_fault+0xb8/0x330 [ 163.777860][ T8195] ? asm_exc_page_fault+0x8/0x30 [ 163.782841][ T8195] asm_exc_page_fault+0x1e/0x30 [ 163.787674][ T8195] RIP: 0033:0x7f9897db522d [ 163.792050][ T8195] Code: Bad RIP value. [ 163.796178][ T8195] RSP: 002b:00007f9895751580 EFLAGS: 00010293 [ 163.802220][ T8195] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007f9897db522d [ 163.810192][ T8195] RDX: 0000000000001fa0 RSI: 00007f9895751da0 RDI: 0000000000000004 [ 163.818146][ T8195] RBP: 000055de524979d0 R08: 0000000000000000 R09: 0000000004000001 [ 163.826093][ T8195] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f9895751da0 [ 163.834039][ T8195] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f9895751e2e [ 163.843100][ T8195] Mem-Info: [ 163.846212][ T8195] active_anon:133431 inactive_anon:4886 isolated_anon:0 [ 163.846212][ T8195] active_file:28 inactive_file:9 isolated_file:0 [ 163.846212][ T8195] unevictable:0 dirty:1 writeback:0 [ 163.846212][ T8195] slab_reclaimable:7093 slab_unreclaimable:18268 [ 163.846212][ T8195] mapped:52913 shmem:5070 pagetables:1236 bounce:0 [ 163.846212][ T8195] free:16041 free_pcp:190 free_cma:0 [ 163.882425][ T8195] Node 0 active_anon:533716kB inactive_anon:19544kB active_file:76kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211648kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 321536kB writeback_tmp:0kB all_unreclaimable? yes [ 163.909894][ T8195] Node 1 active_anon:8kB inactive_anon:0kB active_file:36kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 163.935950][ T8195] Node 0 DMA free:14348kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 163.967668][ T8195] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 163.973412][ T8195] Node 0 DMA32 free:48012kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:79136kB inactive_anon:28kB active_file:368kB inactive_file:212kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:624kB pagetables:1252kB bounce:0kB free_pcp:1272kB local_pcp:0kB free_cma:0kB [ 164.006245][ T8195] lowmem_reserve[]: 0 0 707 707 707 [ 164.011559][ T8195] Node 0 Normal free:102840kB min:14812kB low:16976kB high:19140kB reserved_highatomic:0KB active_anon:454580kB inactive_anon:19516kB active_file:144kB inactive_file:1524kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3720kB pagetables:3684kB bounce:0kB free_pcp:1504kB local_pcp:0kB free_cma:0kB [ 164.044910][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 164.049613][ T8195] Node 1 Normal free:229096kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:36kB inactive_file:608kB unevictable:0kB writepending:4kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:1496kB local_pcp:0kB free_cma:0kB [ 164.082219][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 164.086935][ T8195] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 3*4096kB (UM) = 14444kB [ 164.102172][ T8195] Node 0 DMA32: 351*4kB (UME) 208*8kB (UME) 132*16kB (UME) 113*32kB (UME) 90*64kB (UME) 94*128kB (UME) 62*256kB (UM) 66*512kB (UME) 58*1024kB (UM) 51*2048kB (U) 64*4096kB (U) = 502236kB [ 164.121932][ T8195] Node 0 Normal: 1633*4kB (UME) 1228*8kB (UME) 681*16kB (UME) 405*32kB (UME) 235*64kB (UM) 78*128kB (UM) 32*256kB (UM) 17*512kB (U) 9*1024kB (U) 6*2048kB (UM) 0*4096kB = 103636kB [ 164.140947][ T8195] Node 1 Normal: 3*4kB (U) 4*8kB (UE) 2*16kB (U) 7*32kB (UE) 5*64kB (UE) 3*128kB (UM) 5*256kB (UME) 3*512kB (UM) 4*1024kB (UE) 2*2048kB (UM) 53*4096kB (UM) = 229100kB [ 164.159148][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.169212][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 164.179803][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.189992][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 164.200805][ T8195] 5739 total pagecache pages [ 164.205380][ T8195] 0 pages in swap cache [ 164.209571][ T8195] Swap cache stats: add 0, delete 0, find 0/0 [ 164.215658][ T8195] Free swap = 0kB [ 164.220828][ T8195] Total swap = 0kB [ 164.224533][ T8195] 1965979 pages RAM [ 164.228410][ T8195] 0 pages HighMem/MovableOnly [ 164.233068][ T8195] 83163 pages reserved [ 164.238607][ T8195] 0 pages cma reserved [ 164.242691][ T8195] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=10007,uid=0 [ 164.258355][ T8195] Out of memory: Killed process 10007 (syz-executor.1) total-vm:74980kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 164.274936][ T1931] oom_reaper: reaped process 10007 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 07:43:33 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r1, 0x0) 07:43:33 executing program 4: socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) 07:43:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x15c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) socket(0x11, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x20000000) [ 165.232780][T11308] x86/PAT: syz-executor.1:11308 map pfn RAM range req write-combining for [mem 0x82800000-0x82a01fff], got write-back 07:43:33 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 07:43:33 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:43:33 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r1, 0x0) 07:43:33 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x7fffffff, 0x1, {0x2, @raw_data="1f1e932a3866b6112b0224cb147ea4c7b5d88f9f4f2de51a029d9000bac55b0d2b5a2749d9fe23889f7a6e543df6652dce2bc42ebc465b0ffd15a947652eafc59bd84cd7ec9f458d11141ccdd62ce8f004e261919a602858318efbd45f67a079c9d06c3f9a82e5237356e03ed7f7eac0fa34a75254525d4400ffd4786e76451235d44416bdc7536e73a8231cd1e949399a8efe0acd7bea4d24bd1ddfceb9f200d95ff81065a6400c013d15b8e354eaef003d95ad5e34e2a37e2da0d30ef79038a4d582964f54540f"}}) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) 07:43:33 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x0}) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl(r0, 0x6681, 0x0) syz_genetlink_get_family_id$tipc2(0x0) [ 165.377585][T11318] x86/PAT: syz-executor.1:11318 map pfn RAM range req write-combining for [mem 0x7f400000-0x7f601fff], got write-back 07:43:33 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 07:43:33 executing program 2: syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af0003140000000000000007a60000000000000000000500000000204200ffffffffa000800000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 07:43:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r1, 0x0) 07:43:34 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 165.560971][T11345] x86/PAT: syz-executor.1:11345 map pfn RAM range req write-combining for [mem 0x0d800000-0x0da01fff], got write-back [ 165.587043][T11340] ldm_validate_privheads(): Disk read failed. [ 165.594503][T11340] loop2: p2 p3 07:43:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r1, 0x0) [ 165.617571][T11340] loop2: partition table partially beyond EOD, truncated [ 165.651249][T11340] loop2: p2 size 327680 extends beyond EOD, truncated [ 165.667063][T11340] loop2: p3 start 10551295 is beyond EOD, truncated [ 165.742776][T11357] x86/PAT: syz-executor.1:11357 map pfn RAM range req write-combining for [mem 0x9a000000-0x9a201fff], got write-back [ 165.776728][T11340] ldm_validate_privheads(): Disk read failed. [ 165.783956][T11340] loop2: p2 p3 [ 165.790851][T11340] loop2: partition table partially beyond EOD, truncated [ 165.805768][T11340] loop2: p2 size 327680 extends beyond EOD, truncated [ 165.820537][T11340] loop2: p3 start 10551295 is beyond EOD, truncated [ 165.868157][ T5039] ldm_validate_privheads(): Disk read failed. [ 165.891494][ T5039] loop2: p2 p3 [ 165.899483][ T5039] loop2: partition table partially beyond EOD, truncated [ 165.913792][ T5039] loop2: p2 size 327680 extends beyond EOD, truncated [ 165.922456][ T5039] loop2: p3 start 10551295 is beyond EOD, truncated [ 166.477140][ T0] NOHZ: local_softirq_pending 08 [ 169.293364][ T1931] oom_reaper: reaped process 11324 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 169.312726][ T8195] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 169.328572][ T8195] CPU: 0 PID: 8195 Comm: in:imklog Not tainted 5.8.0-rc6-syzkaller #0 [ 169.336734][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.346797][ T8195] Call Trace: [ 169.347749][T11324] warn_alloc: 1 callbacks suppressed [ 169.347764][T11324] syz-executor.5: vmalloc: allocation failure, allocated 267210752 of 451231744 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 169.350075][ T8195] dump_stack+0x10f/0x19d [ 169.375966][ T8195] dump_header+0x8e/0x400 [ 169.380275][ T8195] oom_kill_process+0x18d/0x3f0 [ 169.385155][ T8195] out_of_memory+0x5bd/0x880 [ 169.389791][ T8195] ? get_page_from_freelist+0x127/0x3c0 [ 169.395315][ T8195] __alloc_pages_slowpath+0x742/0x970 [ 169.400746][ T8195] __alloc_pages_nodemask+0x235/0x390 [ 169.406152][ T8195] alloc_pages_current+0x21d/0x310 [ 169.411261][ T8195] __page_cache_alloc+0x4f/0x120 [ 169.416177][ T8195] pagecache_get_page+0x494/0x8b0 [ 169.421239][ T8195] ? __do_page_cache_readahead+0x96/0xb0 [ 169.426852][ T8195] filemap_fault+0xba4/0x11e0 [ 169.431560][ T8195] ext4_filemap_fault+0x4b/0x60 [ 169.436470][ T8195] do_read_fault+0x41f/0x730 [ 169.441050][ T8195] handle_mm_fault+0x135d/0x1930 [ 169.445987][ T8195] do_user_addr_fault+0x393/0x810 [ 169.451010][ T8195] exc_page_fault+0xb8/0x330 [ 169.455578][ T8195] ? asm_exc_page_fault+0x8/0x30 [ 169.460495][ T8195] asm_exc_page_fault+0x1e/0x30 [ 169.465341][ T8195] RIP: 0033:0x7f9897db522d [ 169.469729][ T8195] Code: Bad RIP value. [ 169.473770][ T8195] RSP: 002b:00007f9895751580 EFLAGS: 00010293 [ 169.479810][ T8195] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007f9897db522d [ 169.487768][ T8195] RDX: 0000000000001fa0 RSI: 00007f9895751da0 RDI: 0000000000000004 [ 169.495768][ T8195] RBP: 000055de524979d0 R08: 0000000000000000 R09: 0000000004000001 [ 169.503716][ T8195] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f9895751da0 [ 169.511667][ T8195] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f9895751dd9 [ 169.519626][T11324] CPU: 1 PID: 11324 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 169.526436][ T8195] Mem-Info: [ 169.528410][T11324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.528418][T11324] Call Trace: [ 169.531521][ T8195] active_anon:132881 inactive_anon:4886 isolated_anon:0 [ 169.531521][ T8195] active_file:9 inactive_file:9 isolated_file:0 [ 169.531521][ T8195] unevictable:0 dirty:0 writeback:0 [ 169.531521][ T8195] slab_reclaimable:7043 slab_unreclaimable:18245 [ 169.531521][ T8195] mapped:52921 shmem:5070 pagetables:1209 bounce:0 [ 169.531521][ T8195] free:16143 free_pcp:219 free_cma:0 [ 169.541538][T11324] dump_stack+0x10f/0x19d [ 169.541554][T11324] warn_alloc+0x105/0x160 [ 169.544828][ T8195] Node 0 active_anon:531520kB inactive_anon:19544kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211684kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 317440kB writeback_tmp:0kB all_unreclaimable? yes [ 169.580888][T11324] __vmalloc_node_range+0x458/0x530 [ 169.580906][T11324] vmalloc_user+0x55/0x60 [ 169.585230][ T8195] Node 1 active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 169.589513][T11324] ? vb2_vmalloc_alloc+0x8f/0x120 [ 169.589531][T11324] vb2_vmalloc_alloc+0x8f/0x120 [ 169.617110][ T8195] Node 0 DMA free:14308kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 169.622287][T11324] ? tsan.module_ctor+0x10/0x10 [ 169.626588][ T8195] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 169.651877][T11324] __vb2_queue_alloc+0x4fe/0xaf0 [ 169.651908][T11324] vb2_core_create_bufs+0x334/0x570 [ 169.656898][ T8195] Node 0 DMA32 free:20240kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:76920kB inactive_anon:24kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:608kB pagetables:1148kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 169.661722][T11324] vb2_create_bufs+0x419/0x560 [ 169.690607][ T8195] lowmem_reserve[]: 0 0 707 707 707 [ 169.695430][T11324] v4l2_m2m_ioctl_create_bufs+0xb4/0xc0 [ 169.701143][ T8195] Node 0 Normal free:7280kB min:14812kB low:16976kB high:19140kB reserved_highatomic:0KB active_anon:454600kB inactive_anon:19520kB active_file:16kB inactive_file:36kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3720kB pagetables:3680kB bounce:0kB free_pcp:360kB local_pcp:112kB free_cma:0kB [ 169.706068][T11324] v4l_create_bufs+0x15e/0x1b0 [ 169.711253][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 169.742310][T11324] __video_do_ioctl+0x65b/0x870 [ 169.742328][T11324] ? __video_do_ioctl+0x2b1/0x870 [ 169.747058][ T8195] Node 1 Normal free:22744kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:268kB local_pcp:20kB free_cma:0kB [ 169.752229][T11324] ? __check_object_size+0x253/0x310 [ 169.757754][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 169.789322][T11324] video_usercopy+0x6da/0xfc0 [ 169.789376][T11324] ? video_ioctl2+0x30/0x30 [ 169.794123][ T8195] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 14308kB [ 169.798773][T11324] ? putname+0xa5/0xc0 [ 169.798791][T11324] ? do_vfs_ioctl+0x4f1/0xec0 [ 169.803665][ T8195] Node 0 DMA32: 90*4kB (ME) 41*8kB (ME) 42*16kB (UME) 32*32kB (UME) 23*64kB (ME) 18*128kB (ME) 13*256kB (M) 7*512kB (UME) 7*1024kB (UM) 0*2048kB 0*4096kB = 20240kB [ 169.808658][T11324] video_ioctl2+0x25/0x30 [ 169.808676][T11324] ? video_usercopy+0xfc0/0xfc0 [ 169.838955][ T8195] Node 0 Normal: 524*4kB (UME) 214*8kB (UME) 95*16kB (UME) 37*32kB (UM) 12*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7280kB [ 169.844218][T11324] v4l2_ioctl+0xc2/0xd0 [ 169.848874][ T8195] Node 1 Normal: 2*4kB (M) 4*8kB (ME) 3*16kB (M) 4*32kB (UME) 4*64kB (UME) 0*128kB 3*256kB (UME) 2*512kB (M) 2*1024kB (UE) 1*2048kB (M) 4*4096kB (M) = 22744kB [ 169.853539][T11324] ? v4l2_poll+0x150/0x150 [ 169.858014][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.872632][T11324] __se_sys_ioctl+0xc9/0x130 [ 169.872657][T11324] __x64_sys_ioctl+0x3f/0x50 [ 169.876694][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 169.881340][T11324] do_syscall_64+0x51/0xb0 [ 169.897723][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.902034][T11324] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 169.906882][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 169.921469][T11324] RIP: 0033:0x45c1f9 [ 169.921472][T11324] Code: Bad RIP value. [ 169.921489][T11324] RSP: 002b:00007fc807460c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.925613][ T8195] 5088 total pagecache pages [ 169.941450][T11324] RAX: ffffffffffffffda RBX: 000000000001dc40 RCX: 000000000045c1f9 [ 169.941457][T11324] RDX: 0000000020000240 RSI: 00000000c100565c RDI: 0000000000000003 [ 169.941469][T11324] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 169.945868][ T8195] 0 pages in swap cache [ 169.955355][T11324] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 169.955362][T11324] R13: 00007ffcd836209f R14: 00007fc8074619c0 R15: 000000000078bf0c [ 169.961469][T11324] Mem-Info: [ 169.970449][ T8195] Swap cache stats: add 0, delete 0, find 0/0 [ 169.974357][T11324] active_anon:132881 inactive_anon:4886 isolated_anon:0 [ 169.974357][T11324] active_file:9 inactive_file:9 isolated_file:0 [ 169.974357][T11324] unevictable:0 dirty:0 writeback:0 [ 169.974357][T11324] slab_reclaimable:7043 slab_unreclaimable:18245 [ 169.974357][T11324] mapped:52921 shmem:5070 pagetables:1209 bounce:0 [ 169.974357][T11324] free:16143 free_pcp:219 free_cma:0 [ 169.982320][ T8195] Free swap = 0kB [ 169.992217][T11324] Node 0 active_anon:531520kB inactive_anon:19544kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211684kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 317440kB writeback_tmp:0kB all_unreclaimable? yes [ 169.993918][ T8195] Total swap = 0kB [ 170.003226][T11324] Node 1 active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 170.003235][T11324] Node 0 DMA free:14308kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 170.010561][ T8195] 1965979 pages RAM [ 170.015480][T11324] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 170.019596][ T8195] 0 pages HighMem/MovableOnly [ 170.024177][T11324] Node 0 DMA32 free:20240kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:76920kB inactive_anon:24kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:608kB pagetables:1148kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 170.035777][ T8195] 83163 pages reserved [ 170.044094][T11324] lowmem_reserve[]: 0 0 707 707 707 [ 170.050382][ T8195] 0 pages cma reserved [ 170.053591][T11324] Node 0 Normal free:7280kB min:14812kB low:16976kB high:19140kB reserved_highatomic:0KB active_anon:454600kB inactive_anon:19520kB active_file:16kB inactive_file:36kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3720kB pagetables:3680kB bounce:0kB free_pcp:360kB local_pcp:248kB free_cma:0kB [ 170.060295][ T8195] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=10460,uid=0 [ 170.074940][T11324] lowmem_reserve[]: 0 0 0 0 0 [ 170.080200][ T8195] Out of memory: Killed process 10460 (syz-executor.0) total-vm:74848kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 170.332204][T11324] Node 1 Normal free:22744kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:268kB local_pcp:20kB free_cma:0kB [ 170.364575][T11324] lowmem_reserve[]: 0 0 0 0 0 [ 170.369261][T11324] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 14308kB [ 170.386249][T11324] Node 0 DMA32: 90*4kB (UME) 42*8kB (UME) 42*16kB (UME) 33*32kB (UME) 24*64kB (UME) 19*128kB (UME) 13*256kB (M) 7*512kB (UME) 7*1024kB (UM) 1*2048kB (M) 0*4096kB = 22520kB [ 170.403521][T11324] Node 0 Normal: 605*4kB (UME) 243*8kB (UME) 101*16kB (UME) 38*32kB (UM) 12*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7964kB [ 170.418333][T11324] Node 1 Normal: 1*4kB (M) 4*8kB (UME) 2*16kB (UM) 3*32kB (ME) 3*64kB (UME) 1*128kB (M) 2*256kB (ME) 3*512kB (UM) 2*1024kB (UE) 1*2048kB (M) 4*4096kB (M) = 23012kB [ 170.425825][ T8195] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 170.434715][T11324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.453616][ T8195] CPU: 1 PID: 8195 Comm: in:imklog Not tainted 5.8.0-rc6-syzkaller #0 [ 170.455621][T11324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 170.462913][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.462917][ T8195] Call Trace: [ 170.462933][ T8195] dump_stack+0x10f/0x19d [ 170.462994][ T8195] dump_header+0x8e/0x400 [ 170.472234][T11324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.482262][ T8195] oom_kill_process+0x18d/0x3f0 [ 170.482280][ T8195] out_of_memory+0x5bd/0x880 [ 170.485536][T11324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 170.489831][ T8195] ? get_page_from_freelist+0x127/0x3c0 [ 170.489918][ T8195] __alloc_pages_slowpath+0x742/0x970 [ 170.494140][T11324] 5088 total pagecache pages [ 170.503742][ T8195] __alloc_pages_nodemask+0x235/0x390 [ 170.508485][T11324] 0 pages in swap cache [ 170.513082][ T8195] alloc_pages_current+0x21d/0x310 [ 170.522350][T11324] Swap cache stats: add 0, delete 0, find 0/0 [ 170.527835][ T8195] __page_cache_alloc+0x4f/0x120 [ 170.527852][ T8195] pagecache_get_page+0x494/0x8b0 [ 170.533243][T11324] Free swap = 0kB [ 170.537801][ T8195] ? __do_page_cache_readahead+0x96/0xb0 [ 170.537816][ T8195] filemap_fault+0xba4/0x11e0 [ 170.543163][T11324] Total swap = 0kB [ 170.547293][ T8195] ext4_filemap_fault+0x4b/0x60 [ 170.547312][ T8195] do_read_fault+0x41f/0x730 [ 170.552380][T11324] 1965979 pages RAM [ 170.558431][ T8195] handle_mm_fault+0x135d/0x1930 [ 170.558455][ T8195] do_user_addr_fault+0x393/0x810 [ 170.563451][T11324] 0 pages HighMem/MovableOnly [ 170.568514][ T8195] exc_page_fault+0xb8/0x330 [ 170.568610][ T8195] ? asm_exc_page_fault+0x8/0x30 [ 170.572216][T11324] 83163 pages reserved [ 170.577845][ T8195] asm_exc_page_fault+0x1e/0x30 [ 170.577874][ T8195] RIP: 0033:0x7f9897db522d [ 170.582515][T11324] 0 pages cma reserved [ 170.586220][ T8195] Code: Bad RIP value. [ 170.644696][ T8195] RSP: 002b:00007f9895751580 EFLAGS: 00010293 [ 170.650770][ T8195] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007f9897db522d [ 170.658721][ T8195] RDX: 0000000000001fa0 RSI: 00007f9895751da0 RDI: 0000000000000004 [ 170.666685][ T8195] RBP: 000055de524979d0 R08: 0000000000000000 R09: 0000000004000001 [ 170.674670][ T8195] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f9895751da0 [ 170.682621][ T8195] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f9895751dd9 [ 170.699376][ T8195] Mem-Info: [ 170.703118][ T8195] active_anon:132347 inactive_anon:4886 isolated_anon:0 [ 170.703118][ T8195] active_file:9 inactive_file:59 isolated_file:0 [ 170.703118][ T8195] unevictable:0 dirty:0 writeback:0 [ 170.703118][ T8195] slab_reclaimable:7043 slab_unreclaimable:18245 [ 170.703118][ T8195] mapped:52921 shmem:5070 pagetables:1184 bounce:0 [ 170.703118][ T8195] free:26047 free_pcp:374 free_cma:0 [ 170.739984][ T8195] Node 0 active_anon:529384kB inactive_anon:19544kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211684kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 317440kB writeback_tmp:0kB all_unreclaimable? yes [ 170.768135][ T8195] Node 1 active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 170.794789][ T8195] Node 0 DMA free:14428kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 170.825472][ T8195] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 170.831920][ T8195] Node 0 DMA32 free:265036kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:74872kB inactive_anon:24kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:608kB pagetables:1148kB bounce:0kB free_pcp:1428kB local_pcp:8kB free_cma:0kB [ 170.863782][ T8195] lowmem_reserve[]: 0 0 707 707 707 [ 170.869536][ T8195] Node 0 Normal free:103692kB min:8668kB low:10832kB high:12996kB reserved_highatomic:0KB active_anon:454532kB inactive_anon:19520kB active_file:20kB inactive_file:848kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3720kB pagetables:3580kB bounce:0kB free_pcp:1324kB local_pcp:20kB free_cma:0kB [ 170.902194][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 170.907748][ T8195] Node 1 Normal free:226052kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:304kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:1428kB local_pcp:52kB free_cma:0kB [ 170.940915][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 170.945582][ T8195] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 3*4096kB (UM) = 14444kB [ 170.959287][ T8195] Node 0 DMA32: 299*4kB (UME) 157*8kB (UME) 127*16kB (UME) 108*32kB (UME) 84*64kB (UME) 78*128kB (UME) 55*256kB (UM) 55*512kB (UME) 55*1024kB (UM) 47*2048kB (UM) 153*4096kB (UM) = 844804kB [ 170.977911][ T8195] Node 0 Normal: 1725*4kB (UME) 1252*8kB (UME) 690*16kB (UME) 406*32kB (UME) 231*64kB (UME) 83*128kB (UM) 34*256kB (UM) 19*512kB (U) 12*1024kB (U) 3*2048kB (UM) 0*4096kB = 103220kB [ 170.995839][ T8195] Node 1 Normal: 7*4kB (U) 6*8kB (UE) 4*16kB (UM) 4*32kB (UME) 7*64kB (UME) 3*128kB (U) 5*256kB (UE) 5*512kB (UM) 4*1024kB (UE) 2*2048kB (UM) 52*4096kB (UM) = 226124kB [ 171.013465][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 171.023716][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 171.033056][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 171.043722][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 171.054215][ T8195] 5588 total pagecache pages [ 171.058845][ T8195] 0 pages in swap cache [ 171.062980][ T8195] Swap cache stats: add 0, delete 0, find 0/0 [ 171.069641][ T8195] Free swap = 0kB [ 171.073343][ T8195] Total swap = 0kB [ 171.077058][ T8195] 1965979 pages RAM [ 171.080873][ T8195] 0 pages HighMem/MovableOnly [ 171.085625][ T8195] 83163 pages reserved [ 171.089827][ T8195] 0 pages cma reserved [ 171.093938][ T8195] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=10445,uid=0 [ 171.109202][ T8195] Out of memory: Killed process 10445 (syz-executor.0) total-vm:74848kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 07:43:40 executing program 2: syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af0003140000000000000007a60000000000000000000500000000204200ffffffffa000800000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 07:43:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0xda0, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:43:40 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000440)={@loopback, 0x0, r2}) 07:43:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x7fffffff, 0x1, {0x2, @raw_data="1f1e932a3866b6112b0224cb147ea4c7b5d88f9f4f2de51a029d9000bac55b0d2b5a2749d9fe23889f7a6e543df6652dce2bc42ebc465b0ffd15a947652eafc59bd84cd7ec9f458d11141ccdd62ce8f004e261919a602858318efbd45f67a079c9d06c3f9a82e5237356e03ed7f7eac0fa34a75254525d4400ffd4786e76451235d44416bdc7536e73a8231cd1e949399a8efe0acd7bea4d24bd1ddfceb9f200d95ff81065a6400c013d15b8e354eaef003d95ad5e34e2a37e2da0d30ef79038a4d582964f54540f"}}) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) 07:43:40 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:43:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r1, 0x0) 07:43:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r5, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) [ 172.015088][T11383] x86/PAT: syz-executor.1:11383 map pfn RAM range req write-combining for [mem 0x0a000000-0x0a201fff], got write-back [ 172.058723][T11382] ldm_validate_privheads(): Disk read failed. [ 172.069142][T11382] loop2: p2 p3 [ 172.076018][T11382] loop2: partition table partially beyond EOD, truncated 07:43:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0xc0000082, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) [ 172.139176][T11382] loop2: p2 size 327680 extends beyond EOD, truncated [ 172.151998][T11401] x86/PAT: syz-executor.1:11401 map pfn RAM range req write-combining for [mem 0xab800000-0xaba01fff], got write-back 07:43:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r5, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) [ 172.180662][T11382] loop2: p3 start 10551295 is beyond EOD, truncated 07:43:40 executing program 2: syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af0003140000000000000007a60000000000000000000500000000204200ffffffffa000800000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 07:43:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0xfe, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) [ 172.290494][T11416] x86/PAT: syz-executor.1:11416 map pfn RAM range req write-combining for [mem 0x87400000-0x87601fff], got write-back 07:43:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r5, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) [ 172.428359][T11428] ldm_validate_privheads(): Disk read failed. [ 172.435250][T11428] loop2: p2 p3 [ 172.463724][T11428] loop2: partition table partially beyond EOD, truncated [ 172.477547][T11434] x86/PAT: syz-executor.1:11434 map pfn RAM range req write-combining for [mem 0xab000000-0xab201fff], got write-back [ 172.524319][T11428] loop2: p2 size 327680 extends beyond EOD, truncated [ 172.557013][T11428] loop2: p3 start 10551295 is beyond EOD, truncated [ 176.186347][ T1931] oom_reaper: reaped process 11390 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 176.215011][ T8195] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 176.236776][ T8195] CPU: 1 PID: 8195 Comm: in:imklog Not tainted 5.8.0-rc6-syzkaller #0 [ 176.244936][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.254987][ T8195] Call Trace: [ 176.258265][ T8195] dump_stack+0x10f/0x19d [ 176.262600][ T8195] dump_header+0x8e/0x400 [ 176.266910][ T8195] oom_kill_process+0x18d/0x3f0 [ 176.271842][ T8195] out_of_memory+0x5bd/0x880 [ 176.276398][ T8195] ? get_page_from_freelist+0x127/0x3c0 [ 176.281984][ T8195] __alloc_pages_slowpath+0x742/0x970 [ 176.287347][ T8195] __alloc_pages_nodemask+0x235/0x390 [ 176.292706][ T8195] alloc_pages_current+0x21d/0x310 [ 176.297816][ T8195] __page_cache_alloc+0x4f/0x120 [ 176.302734][ T8195] pagecache_get_page+0x494/0x8b0 [ 176.307847][ T8195] ? __do_page_cache_readahead+0x96/0xb0 [ 176.313530][ T8195] filemap_fault+0xba4/0x11e0 [ 176.318209][ T8195] ext4_filemap_fault+0x4b/0x60 [ 176.323123][ T8195] do_read_fault+0x41f/0x730 [ 176.327705][ T8195] handle_mm_fault+0x135d/0x1930 [ 176.332687][ T8195] do_user_addr_fault+0x393/0x810 [ 176.337715][ T8195] exc_page_fault+0xb8/0x330 [ 176.342294][ T8195] ? asm_exc_page_fault+0x8/0x30 [ 176.347216][ T8195] asm_exc_page_fault+0x1e/0x30 [ 176.352112][ T8195] RIP: 0033:0x7f9897db522d [ 176.356499][ T8195] Code: Bad RIP value. [ 176.360541][ T8195] RSP: 002b:00007f9895751580 EFLAGS: 00010293 [ 176.366623][ T8195] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007f9897db522d [ 176.374599][ T8195] RDX: 0000000000001fa0 RSI: 00007f9895751da0 RDI: 0000000000000004 [ 176.382589][ T8195] RBP: 000055de524979d0 R08: 0000000000000000 R09: 0000000004000001 [ 176.390545][ T8195] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f9895751da0 [ 176.398593][ T8195] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f9895751dec [ 176.414511][ T8195] Mem-Info: [ 176.418264][ T8195] active_anon:131807 inactive_anon:4886 isolated_anon:0 [ 176.418264][ T8195] active_file:17 inactive_file:42 isolated_file:0 [ 176.418264][ T8195] unevictable:0 dirty:0 writeback:0 [ 176.418264][ T8195] slab_reclaimable:7033 slab_unreclaimable:18228 [ 176.418264][ T8195] mapped:52941 shmem:5070 pagetables:1157 bounce:0 [ 176.418264][ T8195] free:28566 free_pcp:1009 free_cma:0 [ 176.457360][ T8195] Node 0 active_anon:527224kB inactive_anon:19544kB active_file:64kB inactive_file:260kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211764kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 313344kB writeback_tmp:0kB all_unreclaimable? yes [ 176.487415][ T8195] Node 1 active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 176.515699][ T8195] Node 0 DMA free:14428kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 176.548301][ T8195] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 176.554846][ T8195] Node 0 DMA32 free:305992kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:72912kB inactive_anon:28kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:608kB pagetables:1148kB bounce:0kB free_pcp:2028kB local_pcp:572kB free_cma:0kB [ 176.591687][ T8195] lowmem_reserve[]: 0 0 707 707 707 [ 176.598103][ T8195] Node 0 Normal free:104428kB min:16860kB low:19024kB high:21188kB reserved_highatomic:0KB active_anon:454312kB inactive_anon:19516kB active_file:16kB inactive_file:1444kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3688kB pagetables:3472kB bounce:0kB free_pcp:1896kB local_pcp:596kB free_cma:0kB [ 176.633046][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 176.638364][ T8195] Node 1 Normal free:236392kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:108kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:1596kB local_pcp:124kB free_cma:0kB [ 176.672645][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 176.677943][ T8195] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 3*4096kB (UM) = 14444kB [ 176.693625][ T8195] Node 0 DMA32: 360*4kB (UME) 230*8kB (UME) 176*16kB (UME) 148*32kB (UME) 133*64kB (UME) 113*128kB (UM) 80*256kB (UM) 74*512kB (UME) 59*1024kB (UM) 63*2048kB (UM) 142*4096kB (U) = 863248kB [ 176.714316][ T8195] Node 0 Normal: 1892*4kB (UME) 1249*8kB (UME) 698*16kB (UME) 412*32kB (UME) 237*64kB (UME) 78*128kB (UM) 29*256kB (UM) 15*512kB (U) 9*1024kB (U) 6*2048kB (UM) 0*4096kB = 103672kB [ 176.735907][ T8195] Node 1 Normal: 4*4kB (UM) 3*8kB (UE) 2*16kB (U) 4*32kB (UME) 3*64kB (UE) 4*128kB (UM) 2*256kB (UE) 3*512kB (UM) 2*1024kB (UE) 3*2048kB (UM) 55*4096kB (UM) = 236424kB [ 176.754478][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.764598][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 176.776273][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.787639][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 176.798777][ T8195] 5804 total pagecache pages [ 176.803916][ T8195] 0 pages in swap cache [ 176.809108][ T8195] Swap cache stats: add 0, delete 0, find 0/0 [ 176.815814][ T8195] Free swap = 0kB [ 176.821651][ T8195] Total swap = 0kB [ 176.835731][ T8195] 1965979 pages RAM [ 176.841463][ T8195] 0 pages HighMem/MovableOnly [ 176.846126][ T8195] 83163 pages reserved [ 176.850817][ T8195] 0 pages cma reserved [ 176.854871][ T8195] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=10435,uid=0 [ 176.871041][ T8195] Out of memory: Killed process 10435 (syz-executor.0) total-vm:74848kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 07:43:46 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000440)={@loopback, 0x0, r2}) 07:43:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:43:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r5, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:43:46 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:43:46 executing program 2: syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af0003140000000000000007a60000000000000000000500000000204200ffffffffa000800000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 07:43:46 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x7fffffff, 0x1, {0x2, @raw_data="1f1e932a3866b6112b0224cb147ea4c7b5d88f9f4f2de51a029d9000bac55b0d2b5a2749d9fe23889f7a6e543df6652dce2bc42ebc465b0ffd15a947652eafc59bd84cd7ec9f458d11141ccdd62ce8f004e261919a602858318efbd45f67a079c9d06c3f9a82e5237356e03ed7f7eac0fa34a75254525d4400ffd4786e76451235d44416bdc7536e73a8231cd1e949399a8efe0acd7bea4d24bd1ddfceb9f200d95ff81065a6400c013d15b8e354eaef003d95ad5e34e2a37e2da0d30ef79038a4d582964f54540f"}}) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) [ 177.879081][T11472] x86/PAT: syz-executor.1:11472 map pfn RAM range req write-combining for [mem 0x0d800000-0x0da01fff], got write-back 07:43:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) [ 177.938427][T11467] ldm_validate_privheads(): Disk read failed. [ 177.961137][T11467] loop2: p2 p3 [ 177.985147][T11467] loop2: partition table partially beyond EOD, truncated 07:43:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000440)={0x1, 0x0, @pic={0x0, 0x7f, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x3}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x100004c8]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_RUN(r4, 0xae80, 0x0) 07:43:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r5, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) [ 178.056273][T11467] loop2: p2 size 327680 extends beyond EOD, truncated [ 178.097859][T11467] loop2: p3 start 10551295 is beyond EOD, truncated 07:43:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:43:46 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:43:46 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) [ 178.150531][T11493] kvm: pic: level sensitive irq not supported [ 178.150822][T11493] kvm: pic: single mode not supported [ 178.168716][T11493] kvm: pic: level sensitive irq not supported [ 178.218732][T11499] x86/PAT: syz-executor.1:11499 map pfn RAM range req write-combining for [mem 0x9d400000-0x9d601fff], got write-back 07:43:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:43:46 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x1a2, 0x0) 07:43:46 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) 07:43:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r5, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:43:46 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) [ 178.483765][T11538] x86/PAT: syz-executor.1:11538 map pfn RAM range req write-combining for [mem 0x9a400000-0x9a601fff], got write-back [ 182.242881][ T1931] oom_reaper: reaped process 11465 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 182.260703][ T8195] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 182.276880][ T8195] CPU: 1 PID: 8195 Comm: in:imklog Not tainted 5.8.0-rc6-syzkaller #0 [ 182.285000][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.286760][T11465] warn_alloc: 1 callbacks suppressed [ 182.286775][T11465] syz-executor.5: vmalloc: allocation failure, allocated 274382848 of 451231744 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 182.295040][ T8195] Call Trace: [ 182.319903][ T8195] dump_stack+0x10f/0x19d [ 182.324220][ T8195] dump_header+0x8e/0x400 [ 182.328534][ T8195] oom_kill_process+0x18d/0x3f0 [ 182.333368][ T8195] out_of_memory+0x5bd/0x880 [ 182.337945][ T8195] ? get_page_from_freelist+0x127/0x3c0 [ 182.343527][ T8195] __alloc_pages_slowpath+0x742/0x970 [ 182.348898][ T8195] __alloc_pages_nodemask+0x235/0x390 [ 182.354252][ T8195] alloc_pages_current+0x21d/0x310 [ 182.359404][ T8195] __page_cache_alloc+0x4f/0x120 [ 182.364322][ T8195] pagecache_get_page+0x494/0x8b0 [ 182.369389][ T8195] ? __do_page_cache_readahead+0x96/0xb0 [ 182.375063][ T8195] filemap_fault+0xba4/0x11e0 [ 182.379731][ T8195] ext4_filemap_fault+0x4b/0x60 [ 182.384566][ T8195] do_read_fault+0x41f/0x730 [ 182.389224][ T8195] handle_mm_fault+0x135d/0x1930 [ 182.394158][ T8195] do_user_addr_fault+0x393/0x810 [ 182.399470][ T8195] exc_page_fault+0xb8/0x330 [ 182.404045][ T8195] ? asm_exc_page_fault+0x8/0x30 [ 182.408965][ T8195] asm_exc_page_fault+0x1e/0x30 [ 182.413820][ T8195] RIP: 0033:0x7f9897db522d [ 182.418224][ T8195] Code: Bad RIP value. [ 182.422272][ T8195] RSP: 002b:00007f9895751580 EFLAGS: 00010293 [ 182.428314][ T8195] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007f9897db522d [ 182.436291][ T8195] RDX: 0000000000001fa0 RSI: 00007f9895751da0 RDI: 0000000000000004 [ 182.444257][ T8195] RBP: 000055de524979d0 R08: 0000000000000000 R09: 0000000004000001 [ 182.452214][ T8195] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f9895751da0 [ 182.460202][ T8195] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f9895751e2e [ 182.468226][T11465] CPU: 0 PID: 11465 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 182.476911][T11465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.483749][ T8195] Mem-Info: [ 182.487070][T11465] Call Trace: [ 182.487086][T11465] dump_stack+0x10f/0x19d [ 182.487102][T11465] warn_alloc+0x105/0x160 [ 182.490236][ T8195] active_anon:131266 inactive_anon:4886 isolated_anon:0 [ 182.490236][ T8195] active_file:14 inactive_file:13 isolated_file:0 [ 182.490236][ T8195] unevictable:0 dirty:0 writeback:0 [ 182.490236][ T8195] slab_reclaimable:7030 slab_unreclaimable:18271 [ 182.490236][ T8195] mapped:52948 shmem:5070 pagetables:1131 bounce:0 [ 182.490236][ T8195] free:16115 free_pcp:228 free_cma:0 [ 182.493511][T11465] __vmalloc_node_range+0x458/0x530 [ 182.497773][ T8195] Node 0 active_anon:525060kB inactive_anon:19544kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211792kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 311296kB writeback_tmp:0kB all_unreclaimable? yes [ 182.502059][T11465] vmalloc_user+0x55/0x60 [ 182.538322][ T8195] Node 1 active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 182.543507][T11465] ? vb2_vmalloc_alloc+0x8f/0x120 [ 182.570893][ T8195] Node 0 DMA free:14308kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.570930][ T8195] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 182.575297][T11465] vb2_vmalloc_alloc+0x8f/0x120 [ 182.600516][ T8195] Node 0 DMA32 free:20188kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:70860kB inactive_anon:24kB active_file:8kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:624kB pagetables:1148kB bounce:0kB free_pcp:268kB local_pcp:0kB free_cma:0kB [ 182.605511][T11465] ? tsan.module_ctor+0x10/0x10 [ 182.634377][ T8195] lowmem_reserve[]: 0 0 707 707 707 [ 182.640061][T11465] __vb2_queue_alloc+0x4fe/0xaf0 [ 182.640078][T11465] vb2_core_create_bufs+0x334/0x570 [ 182.644895][ T8195] Node 0 Normal free:7080kB min:16860kB low:19024kB high:21188kB reserved_highatomic:0KB active_anon:454200kB inactive_anon:19520kB active_file:40kB inactive_file:28kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3656kB pagetables:3368kB bounce:0kB free_pcp:392kB local_pcp:112kB free_cma:0kB [ 182.675932][T11465] ? tomoyo_profile+0x17/0x30 [ 182.675949][T11465] vb2_create_bufs+0x419/0x560 [ 182.680839][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 182.685940][T11465] ? tomoyo_profile+0x17/0x30 [ 182.690842][ T8195] Node 1 Normal free:22884kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 182.696015][T11465] v4l2_m2m_ioctl_create_bufs+0xb4/0xc0 [ 182.727567][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 182.732220][T11465] v4l_create_bufs+0x15e/0x1b0 [ 182.736946][ T8195] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 14308kB [ 182.741660][T11465] __video_do_ioctl+0x65b/0x870 [ 182.746248][ T8195] Node 0 DMA32: 111*4kB (UME) 90*8kB (UME) 59*16kB (UME) 42*32kB (ME) 38*64kB (ME) 20*128kB (UM) 14*256kB (M) 10*512kB (UME) 3*1024kB (UM) 0*2048kB 0*4096kB = 20220kB [ 182.776417][T11465] ? __video_do_ioctl+0x2b1/0x870 [ 182.776489][T11465] ? __check_object_size+0x253/0x310 [ 182.781948][ T8195] Node 0 Normal: 440*4kB (UME) 215*8kB (UM) 105*16kB (UM) 36*32kB (UM) 12*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7080kB [ 182.786606][T11465] video_usercopy+0x6da/0xfc0 [ 182.791345][ T8195] Node 1 Normal: 3*4kB (UM) 5*8kB (UME) 3*16kB (UM) 2*32kB (ME) 3*64kB (UME) 2*128kB (UM) 3*256kB (UME) 2*512kB (M) 2*1024kB (UE) 1*2048kB (M) 4*4096kB (M) = 22884kB [ 182.805960][T11465] ? video_ioctl2+0x30/0x30 [ 182.805977][T11465] ? putname+0xa5/0xc0 [ 182.810810][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.827331][T11465] ? do_vfs_ioctl+0x4f1/0xec0 [ 182.827349][T11465] video_ioctl2+0x25/0x30 [ 182.832339][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 182.837602][T11465] ? video_usercopy+0xfc0/0xfc0 [ 182.837613][T11465] v4l2_ioctl+0xc2/0xd0 [ 182.837630][T11465] ? v4l2_poll+0x150/0x150 [ 182.852196][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.856821][T11465] __se_sys_ioctl+0xc9/0x130 [ 182.856838][T11465] __x64_sys_ioctl+0x3f/0x50 [ 182.873297][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 182.877760][T11465] do_syscall_64+0x51/0xb0 [ 182.877782][T11465] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 182.881808][ T8195] 5097 total pagecache pages [ 182.891314][T11465] RIP: 0033:0x45c1f9 [ 182.891318][T11465] Code: Bad RIP value. [ 182.891330][T11465] RSP: 002b:00007fc807460c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.895972][ T8195] 0 pages in swap cache [ 182.900263][T11465] RAX: ffffffffffffffda RBX: 000000000001dc40 RCX: 000000000045c1f9 [ 182.900269][T11465] RDX: 0000000020000240 RSI: 00000000c100565c RDI: 0000000000000003 [ 182.900275][T11465] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 182.900335][T11465] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 182.909616][ T8195] Swap cache stats: add 0, delete 0, find 0/0 [ 182.914433][T11465] R13: 00007ffcd836209f R14: 00007fc8074619c0 R15: 000000000078bf0c [ 182.918627][ T8195] Free swap = 0kB [ 182.924728][T11465] Mem-Info: [ 182.947760][ T8195] Total swap = 0kB [ 182.951147][T11465] active_anon:131266 inactive_anon:4886 isolated_anon:0 [ 182.951147][T11465] active_file:14 inactive_file:13 isolated_file:0 [ 182.951147][T11465] unevictable:0 dirty:0 writeback:0 [ 182.951147][T11465] slab_reclaimable:7030 slab_unreclaimable:18271 [ 182.951147][T11465] mapped:52948 shmem:5070 pagetables:1131 bounce:0 [ 182.951147][T11465] free:16115 free_pcp:227 free_cma:0 [ 182.955756][ T8195] 1965979 pages RAM [ 182.961455][T11465] Node 0 active_anon:525060kB inactive_anon:19544kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211792kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 311296kB writeback_tmp:0kB all_unreclaimable? yes [ 182.973260][ T8195] 0 pages HighMem/MovableOnly [ 182.973929][T11465] Node 1 active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 182.984927][ T8195] 83163 pages reserved [ 182.986396][T11465] Node 0 DMA free:14308kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.999415][ T8195] 0 pages cma reserved [ 183.002425][T11465] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 183.017924][ T8195] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=10397,uid=0 [ 183.018355][T11465] Node 0 DMA32 free:20188kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:70860kB inactive_anon:24kB active_file:8kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:624kB pagetables:1148kB bounce:0kB free_pcp:268kB local_pcp:268kB free_cma:0kB [ 183.024384][ T8195] Out of memory: Killed process 10397 (syz-executor.0) total-vm:74848kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 183.033016][T11465] lowmem_reserve[]: 0 0 707 707 707 [ 183.088809][ T8646] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 183.111070][T11465] Node 0 Normal free:7420kB min:8668kB low:10832kB high:12996kB reserved_highatomic:0KB active_anon:454132kB inactive_anon:19520kB active_file:40kB inactive_file:28kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3656kB pagetables:3268kB bounce:0kB free_pcp:516kB local_pcp:0kB free_cma:0kB [ 183.136055][ T8646] CPU: 1 PID: 8646 Comm: syz-fuzzer Not tainted 5.8.0-rc6-syzkaller #0 [ 183.142267][T11465] lowmem_reserve[]: 0 0 0 0 0 [ 183.144914][ T8646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.173846][T11465] Node 1 Normal free:23084kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.177814][ T8646] Call Trace: [ 183.177831][ T8646] dump_stack+0x10f/0x19d [ 183.177850][ T8646] dump_header+0x8e/0x400 [ 183.183543][T11465] lowmem_reserve[]: 0 0 0 0 0 [ 183.197757][ T8646] oom_kill_process+0x18d/0x3f0 [ 183.197785][ T8646] out_of_memory+0x5bd/0x880 [ 183.197796][ T8646] ? get_page_from_freelist+0x127/0x3c0 [ 183.197828][ T8646] __alloc_pages_slowpath+0x742/0x970 [ 183.229090][T11465] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 14308kB [ 183.245316][ T8646] __alloc_pages_nodemask+0x235/0x390 [ 183.245340][ T8646] alloc_pages_current+0x21d/0x310 [ 183.251114][T11465] Node 0 DMA32: 116*4kB (UME) 88*8kB (UME) 56*16kB (UME) 41*32kB (UME) 38*64kB (UME) 22*128kB (UM) 14*256kB (M) 10*512kB (UME) 3*1024kB (UM) 1*2048kB (M) 0*4096kB = 22448kB [ 183.261215][ T8646] __page_cache_alloc+0x4f/0x120 [ 183.261294][ T8646] pagecache_get_page+0x494/0x8b0 [ 183.292741][T11465] Node 0 Normal: 444*4kB (UME) 222*8kB (UM) 110*16kB (UM) 36*32kB (UM) 12*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7232kB [ 183.300910][ T8646] ? __do_page_cache_readahead+0x96/0xb0 [ 183.300921][ T8646] filemap_fault+0xba4/0x11e0 [ 183.300940][ T8646] ext4_filemap_fault+0x4b/0x60 [ 183.305579][T11465] Node 1 Normal: 2*4kB (UM) 3*8kB (ME) 2*16kB (UM) 1*32kB (E) 2*64kB (UE) 1*128kB (U) 1*256kB (E) 2*512kB (UM) 3*1024kB (UME) 1*2048kB (M) 4*4096kB (M) = 23136kB [ 183.315653][ T8646] do_read_fault+0x41f/0x730 [ 183.315674][ T8646] handle_mm_fault+0x135d/0x1930 [ 183.345787][T11465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.349010][ T8646] do_user_addr_fault+0x393/0x810 [ 183.349031][ T8646] exc_page_fault+0xb8/0x330 [ 183.353329][T11465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 183.357664][ T8646] ? asm_exc_page_fault+0x8/0x30 [ 183.357682][ T8646] asm_exc_page_fault+0x1e/0x30 [ 183.362983][T11465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.367208][ T8646] RIP: 0033:0x469240 [ 183.367218][ T8646] Code: Bad RIP value. [ 183.371782][T11465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 183.377283][ T8646] RSP: 002b:000000c00008f7f0 EFLAGS: 00010246 [ 183.377291][ T8646] RAX: 0000000000000000 RBX: 00000000000003e7 RCX: 0000000000469240 [ 183.377297][ T8646] RDX: 0000000000000080 RSI: 000000c00008f840 RDI: 0000000000000003 [ 183.377302][ T8646] RBP: 000000c00008fe40 R08: 0000000000000000 R09: 0000000000000000 [ 183.377308][ T8646] R10: 00000000000003e7 R11: 0000000000000246 R12: 0000000000000003 [ 183.377319][ T8646] R13: 000000c0000a0180 R14: 0000000000ac915a R15: 0000000000000000 [ 183.382719][T11465] 5097 total pagecache pages [ 183.410490][ T8646] Mem-Info: [ 183.425209][T11465] 0 pages in swap cache [ 183.437762][ T8646] active_anon:130727 inactive_anon:4886 isolated_anon:0 [ 183.437762][ T8646] active_file:13 inactive_file:13 isolated_file:0 [ 183.437762][ T8646] unevictable:0 dirty:1 writeback:0 [ 183.437762][ T8646] slab_reclaimable:7027 slab_unreclaimable:18251 [ 183.437762][ T8646] mapped:52948 shmem:5070 pagetables:1105 bounce:0 [ 183.437762][ T8646] free:16781 free_pcp:148 free_cma:0 [ 183.453291][T11465] Swap cache stats: add 0, delete 0, find 0/0 [ 183.458771][ T8646] Node 0 active_anon:522904kB inactive_anon:19544kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211792kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 309248kB writeback_tmp:0kB all_unreclaimable? yes [ 183.459972][T11465] Free swap = 0kB [ 183.464656][ T8646] Node 1 active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 183.484791][T11465] Total swap = 0kB [ 183.488331][ T8646] Node 0 DMA free:14308kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.490251][T11465] 1965979 pages RAM [ 183.501974][ T8646] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 183.508129][T11465] 0 pages HighMem/MovableOnly [ 183.510464][ T8646] Node 0 DMA32 free:22448kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:68812kB inactive_anon:24kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:624kB pagetables:1148kB bounce:0kB free_pcp:76kB local_pcp:76kB free_cma:0kB [ 183.519544][T11465] 83163 pages reserved [ 183.526930][ T8646] lowmem_reserve[]: 0 0 707 707 707 [ 183.530725][T11465] 0 pages cma reserved [ 183.541428][ T8646] Node 0 Normal free:7232kB min:8668kB low:10832kB high:12996kB reserved_highatomic:0KB active_anon:454092kB inactive_anon:19520kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3640kB pagetables:3264kB bounce:0kB free_pcp:516kB local_pcp:516kB free_cma:0kB [ 183.836042][ T8646] lowmem_reserve[]: 0 0 0 0 0 [ 183.840839][ T8646] Node 1 Normal free:231028kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:4kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:1296kB local_pcp:0kB free_cma:0kB [ 183.871334][ T8646] lowmem_reserve[]: 0 0 0 0 0 [ 183.876072][ T8646] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 3*4096kB (UM) = 14444kB [ 183.889819][ T8646] Node 0 DMA32: 339*4kB (UME) 220*8kB (UME) 162*16kB (UME) 128*32kB (UME) 113*64kB (UME) 96*128kB (UM) 64*256kB (UM) 68*512kB (UME) 57*1024kB (UM) 56*2048kB (UM) 204*4096kB (U) = 1089164kB [ 183.908430][ T8646] Node 0 Normal: 1859*4kB (UME) 1277*8kB (UME) 715*16kB (UME) 412*32kB (UME) 240*64kB (UME) 80*128kB (UM) 38*256kB (UM) 15*512kB (U) 10*1024kB (U) 2*2048kB (UM) 1*4096kB (U) = 103716kB [ 183.926702][ T8646] Node 1 Normal: 3*4kB (UM) 4*8kB (UME) 3*16kB (UM) 3*32kB (UE) 3*64kB (UE) 2*128kB (U) 2*256kB (UE) 3*512kB (UM) 5*1024kB (UME) 1*2048kB (M) 54*4096kB (UM) = 231036kB [ 183.944757][ T8646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.954427][ T8646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 183.963807][ T8646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.973823][ T8646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 183.983495][ T8646] 5671 total pagecache pages [ 183.988767][ T8646] 0 pages in swap cache [ 183.993381][ T8646] Swap cache stats: add 0, delete 0, find 0/0 [ 184.002142][ T8646] Free swap = 0kB [ 184.005968][ T8646] Total swap = 0kB [ 184.009769][ T8646] 1965979 pages RAM [ 184.013554][ T8646] 0 pages HighMem/MovableOnly [ 184.018295][ T8646] 83163 pages reserved [ 184.022337][ T8646] 0 pages cma reserved [ 184.027201][ T8646] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=10386,uid=0 [ 184.041688][ T8646] Out of memory: Killed process 10386 (syz-executor.0) total-vm:74848kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 07:43:53 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b}) r1 = dup(0xffffffffffffffff) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r1, 0x0) 07:43:53 executing program 2: syz_read_part_table(0x0, 0x0, &(0x7f0000000200)) 07:43:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:43:53 executing program 0: chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:43:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = dup(r2) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0xc) 07:43:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x7fffffff, 0x1, {0x2, @raw_data="1f1e932a3866b6112b0224cb147ea4c7b5d88f9f4f2de51a029d9000bac55b0d2b5a2749d9fe23889f7a6e543df6652dce2bc42ebc465b0ffd15a947652eafc59bd84cd7ec9f458d11141ccdd62ce8f004e261919a602858318efbd45f67a079c9d06c3f9a82e5237356e03ed7f7eac0fa34a75254525d4400ffd4786e76451235d44416bdc7536e73a8231cd1e949399a8efe0acd7bea4d24bd1ddfceb9f200d95ff81065a6400c013d15b8e354eaef003d95ad5e34e2a37e2da0d30ef79038a4d582964f54540f"}}) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 07:43:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:43:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) [ 184.941797][T11562] x86/PAT: syz-executor.1:11562 map pfn RAM range req write-combining for [mem 0x2c800000-0x2ca01fff], got write-back 07:43:53 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b}) r1 = dup(0xffffffffffffffff) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r1, 0x0) 07:43:53 executing program 2: syz_read_part_table(0x0, 0x0, &(0x7f0000000200)) 07:43:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) [ 185.138379][T11587] x86/PAT: syz-executor.1:11587 map pfn RAM range req write-combining for [mem 0x0a000000-0x0a201fff], got write-back 07:43:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:43:53 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:43:53 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b}) r1 = dup(0xffffffffffffffff) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r1, 0x0) 07:43:53 executing program 2: syz_read_part_table(0x0, 0x0, &(0x7f0000000200)) 07:43:53 executing program 0: chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:43:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) [ 185.413442][T11622] x86/PAT: syz-executor.1:11622 map pfn RAM range req write-combining for [mem 0xa0400000-0xa0601fff], got write-back [ 186.957761][ T0] NOHZ: local_softirq_pending 08 [ 189.358129][ T1931] oom_reaper: reaped process 11577 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 189.389591][ T8646] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 189.415695][ T8646] CPU: 0 PID: 8646 Comm: syz-fuzzer Not tainted 5.8.0-rc6-syzkaller #0 [ 189.423922][ T8646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.433954][ T8646] Call Trace: [ 189.437231][ T8646] dump_stack+0x10f/0x19d [ 189.441548][ T8646] dump_header+0x8e/0x400 [ 189.445916][ T8646] oom_kill_process+0x18d/0x3f0 [ 189.450813][ T8646] out_of_memory+0x5bd/0x880 [ 189.455386][ T8646] ? get_page_from_freelist+0x127/0x3c0 [ 189.460951][ T8646] __alloc_pages_slowpath+0x742/0x970 [ 189.466291][ T8646] __alloc_pages_nodemask+0x235/0x390 [ 189.471661][ T8646] alloc_pages_current+0x21d/0x310 [ 189.476740][ T8646] __page_cache_alloc+0x4f/0x120 [ 189.481717][ T8646] pagecache_get_page+0x494/0x8b0 [ 189.486707][ T8646] ? __do_page_cache_readahead+0x96/0xb0 [ 189.492304][ T8646] filemap_fault+0xba4/0x11e0 [ 189.496949][ T8646] ext4_filemap_fault+0x4b/0x60 [ 189.501769][ T8646] do_read_fault+0x41f/0x730 [ 189.506354][ T8646] handle_mm_fault+0x135d/0x1930 [ 189.511264][ T8646] do_user_addr_fault+0x393/0x810 [ 189.516255][ T8646] exc_page_fault+0xb8/0x330 [ 189.520812][ T8646] ? asm_exc_page_fault+0x8/0x30 [ 189.525716][ T8646] asm_exc_page_fault+0x1e/0x30 [ 189.530529][ T8646] RIP: 0033:0x44b724 [ 189.534461][ T8646] Code: Bad RIP value. [ 189.538491][ T8646] RSP: 002b:000000c0000a99a8 EFLAGS: 00010283 [ 189.544564][ T8646] RAX: 0000000000000017 RBX: 0000000001683cc0 RCX: 0000000000000000 [ 189.552517][ T8646] RDX: 0000000000000045 RSI: 000000c0000a9bf0 RDI: 0000000000000017 [ 189.560515][ T8646] RBP: 000000c0000a99e0 R08: 00000067411bf328 R09: 00007fffe5d69080 [ 189.568455][ T8646] R10: 0000000000000010 R11: 00007fffe5d690b8 R12: 000000c0004dfbb0 [ 189.576392][ T8646] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000007c5 [ 189.587249][ T8646] Mem-Info: [ 189.590459][ T8646] active_anon:130195 inactive_anon:4886 isolated_anon:0 [ 189.590459][ T8646] active_file:6 inactive_file:16 isolated_file:0 [ 189.590459][ T8646] unevictable:0 dirty:0 writeback:0 [ 189.590459][ T8646] slab_reclaimable:7020 slab_unreclaimable:18247 [ 189.590459][ T8646] mapped:52972 shmem:5070 pagetables:1080 bounce:0 [ 189.590459][ T8646] free:15392 free_pcp:193 free_cma:0 [ 189.626757][ T8646] Node 0 active_anon:520772kB inactive_anon:19544kB active_file:16kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211888kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 309248kB writeback_tmp:0kB all_unreclaimable? yes [ 189.654265][ T8646] Node 1 active_anon:8kB inactive_anon:0kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 189.679546][ T8646] Node 0 DMA free:14308kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.709161][ T8646] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 189.714875][ T8646] Node 0 DMA32 free:52472kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:66804kB inactive_anon:28kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:608kB pagetables:1148kB bounce:0kB free_pcp:1304kB local_pcp:4kB free_cma:0kB [ 189.746205][ T8646] lowmem_reserve[]: 0 0 707 707 707 [ 189.751454][ T8646] Node 0 Normal free:42012kB min:8668kB low:10832kB high:12996kB reserved_highatomic:0KB active_anon:454016kB inactive_anon:19516kB active_file:60kB inactive_file:1560kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3640kB pagetables:3164kB bounce:0kB free_pcp:1260kB local_pcp:0kB free_cma:0kB [ 189.783337][ T8646] lowmem_reserve[]: 0 0 0 0 0 [ 189.788038][ T8646] Node 1 Normal free:241756kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:8kB inactive_file:1508kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:1336kB local_pcp:0kB free_cma:0kB [ 189.819399][ T8646] lowmem_reserve[]: 0 0 0 0 0 [ 189.824147][ T8646] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 3*4096kB (UM) = 14444kB [ 189.837855][ T8646] Node 0 DMA32: 366*4kB (UM) 242*8kB (UM) 186*16kB (UM) 155*32kB (UM) 132*64kB (UM) 109*128kB (UM) 68*256kB (UM) 65*512kB (UM) 55*1024kB (U) 53*2048kB (U) 19*4096kB (U) = 327112kB [ 189.855749][ T8646] Node 0 Normal: 1917*4kB (UME) 1244*8kB (UME) 702*16kB (UME) 403*32kB (UME) 241*64kB (UME) 86*128kB (UM) 41*256kB (UM) 22*512kB (UM) 9*1024kB (U) 2*2048kB (UM) 0*4096kB = 103252kB [ 189.873797][ T8646] Node 1 Normal: 0*4kB 4*8kB (UME) 3*16kB (U) 5*32kB (UME) 2*64kB (UE) 2*128kB (U) 2*256kB (UE) 2*512kB (U) 4*1024kB (UE) 1*2048kB (M) 57*4096kB (UM) = 241776kB [ 189.890024][ T8646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.899594][ T8646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 189.908908][ T8646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.918841][ T8646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 189.929000][ T8646] 6063 total pagecache pages [ 189.933575][ T8646] 0 pages in swap cache [ 189.938116][ T8646] Swap cache stats: add 0, delete 0, find 0/0 [ 189.944176][ T8646] Free swap = 0kB [ 189.948614][ T8646] Total swap = 0kB [ 189.952376][ T8646] 1965979 pages RAM [ 189.956158][ T8646] 0 pages HighMem/MovableOnly [ 189.961489][ T8646] 83163 pages reserved [ 189.965540][ T8646] 0 pages cma reserved [ 189.970113][ T8646] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=10232,uid=0 [ 189.984692][ T8646] Out of memory: Killed process 10232 (syz-executor.0) total-vm:74848kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 190.004571][ T1931] oom_reaper: reaped process 10232 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 07:43:59 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x7fffffff, 0x1, {0x2, @raw_data="1f1e932a3866b6112b0224cb147ea4c7b5d88f9f4f2de51a029d9000bac55b0d2b5a2749d9fe23889f7a6e543df6652dce2bc42ebc465b0ffd15a947652eafc59bd84cd7ec9f458d11141ccdd62ce8f004e261919a602858318efbd45f67a079c9d06c3f9a82e5237356e03ed7f7eac0fa34a75254525d4400ffd4786e76451235d44416bdc7536e73a8231cd1e949399a8efe0acd7bea4d24bd1ddfceb9f200d95ff81065a6400c013d15b8e354eaef003d95ad5e34e2a37e2da0d30ef79038a4d582964f54540f"}}) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 07:43:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:43:59 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:43:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r5, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:43:59 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1c0}]) 07:43:59 executing program 0: chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:43:59 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) [ 191.073714][T11652] x86/PAT: syz-executor.1:11652 map pfn RAM range req write-combining for [mem 0x98400000-0x98601fff], got write-back 07:43:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:43:59 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:43:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r5, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) [ 191.121279][T11655] Dev loop2: unable to read RDB block 1 [ 191.129324][T11655] loop2: unable to read partition table [ 191.140389][T11655] loop2: partition table beyond EOD, truncated [ 191.146845][T11655] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 07:43:59 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1c0}]) 07:43:59 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) [ 191.233831][T11668] x86/PAT: syz-executor.1:11668 map pfn RAM range req write-combining for [mem 0x30800000-0x30a01fff], got write-back [ 191.327183][T11674] Dev loop2: unable to read RDB block 1 [ 191.334852][T11674] loop2: unable to read partition table [ 191.352268][T11674] loop2: partition table beyond EOD, truncated [ 191.374747][T11674] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 195.061895][ T1931] oom_reaper: reaped process 11650 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 195.080960][ T8195] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 195.099496][ T8195] CPU: 0 PID: 8195 Comm: in:imklog Not tainted 5.8.0-rc6-syzkaller #0 [ 195.107656][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.117781][ T8195] Call Trace: [ 195.121159][ T8195] dump_stack+0x10f/0x19d [ 195.125488][ T8195] dump_header+0x8e/0x400 [ 195.129891][ T8195] oom_kill_process+0x18d/0x3f0 [ 195.134836][ T8195] out_of_memory+0x5bd/0x880 [ 195.139577][ T8195] ? get_page_from_freelist+0x127/0x3c0 [ 195.145116][ T8195] __alloc_pages_slowpath+0x742/0x970 [ 195.150586][ T8195] __alloc_pages_nodemask+0x235/0x390 [ 195.155944][ T8195] alloc_pages_current+0x21d/0x310 [ 195.161044][ T8195] __page_cache_alloc+0x4f/0x120 [ 195.161683][T11650] warn_alloc: 1 callbacks suppressed [ 195.161699][T11650] syz-executor.5: vmalloc: allocation failure, allocated 280027136 of 451231744 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 195.166006][ T8195] pagecache_get_page+0x494/0x8b0 [ 195.192597][ T8195] ? __do_page_cache_readahead+0x96/0xb0 [ 195.198224][ T8195] filemap_fault+0xba4/0x11e0 [ 195.202907][ T8195] ext4_filemap_fault+0x4b/0x60 [ 195.207754][ T8195] do_read_fault+0x41f/0x730 [ 195.212372][ T8195] handle_mm_fault+0x135d/0x1930 [ 195.217322][ T8195] do_user_addr_fault+0x393/0x810 [ 195.222346][ T8195] exc_page_fault+0xb8/0x330 [ 195.227003][ T8195] ? asm_exc_page_fault+0x8/0x30 [ 195.231937][ T8195] asm_exc_page_fault+0x1e/0x30 [ 195.236774][ T8195] RIP: 0033:0x7f9897db522d [ 195.241218][ T8195] Code: Bad RIP value. [ 195.245272][ T8195] RSP: 002b:00007f9895751580 EFLAGS: 00010293 [ 195.251444][ T8195] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007f9897db522d [ 195.259407][ T8195] RDX: 0000000000001fa0 RSI: 00007f9895751da0 RDI: 0000000000000004 [ 195.267373][ T8195] RBP: 000055de524979d0 R08: 0000000000000000 R09: 0000000004000001 [ 195.275347][ T8195] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f9895751da0 [ 195.283326][ T8195] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f9895751dfc [ 195.291345][T11650] CPU: 1 PID: 11650 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 195.296490][ T8195] Mem-Info: [ 195.300164][T11650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.300168][T11650] Call Trace: [ 195.300182][T11650] dump_stack+0x10f/0x19d [ 195.300213][T11650] warn_alloc+0x105/0x160 [ 195.303383][ T8195] active_anon:129656 inactive_anon:4886 isolated_anon:0 [ 195.303383][ T8195] active_file:13 inactive_file:17 isolated_file:0 [ 195.303383][ T8195] unevictable:0 dirty:0 writeback:0 [ 195.303383][ T8195] slab_reclaimable:7001 slab_unreclaimable:18205 [ 195.303383][ T8195] mapped:52983 shmem:5070 pagetables:1054 bounce:0 [ 195.303383][ T8195] free:16445 free_pcp:215 free_cma:0 [ 195.313555][T11650] __vmalloc_node_range+0x458/0x530 [ 195.313573][T11650] vmalloc_user+0x55/0x60 [ 195.316952][ T8195] Node 0 active_anon:518616kB inactive_anon:19544kB active_file:52kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211932kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 307200kB writeback_tmp:0kB all_unreclaimable? yes [ 195.321249][T11650] ? vb2_vmalloc_alloc+0x8f/0x120 [ 195.325588][ T8195] Node 1 active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 195.362283][T11650] vb2_vmalloc_alloc+0x8f/0x120 [ 195.362310][T11650] ? tsan.module_ctor+0x10/0x10 [ 195.362347][T11650] __vb2_queue_alloc+0x4fe/0xaf0 [ 195.367671][ T8195] Node 0 DMA free:14308kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.371987][T11650] vb2_core_create_bufs+0x334/0x570 [ 195.399410][ T8195] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 195.404514][T11650] ? tomoyo_profile+0x17/0x30 [ 195.429964][ T8195] Node 0 DMA32 free:21148kB min:36976kB low:45708kB high:54440kB reserved_highatomic:0KB active_anon:64724kB inactive_anon:28kB active_file:0kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:608kB pagetables:1148kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 195.434774][T11650] vb2_create_bufs+0x419/0x560 [ 195.439600][ T8195] lowmem_reserve[]: 0 0 707 707 707 [ 195.444585][T11650] ? tomoyo_profile+0x17/0x30 [ 195.473686][ T8195] Node 0 Normal free:7372kB min:14812kB low:16976kB high:19140kB reserved_highatomic:0KB active_anon:453976kB inactive_anon:19516kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3624kB pagetables:3060kB bounce:0kB free_pcp:360kB local_pcp:112kB free_cma:0kB [ 195.478861][T11650] v4l2_m2m_ioctl_create_bufs+0xb4/0xc0 [ 195.478881][T11650] v4l_create_bufs+0x15e/0x1b0 [ 195.484586][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 195.489246][T11650] __video_do_ioctl+0x65b/0x870 [ 195.489265][T11650] ? __video_do_ioctl+0x2b1/0x870 [ 195.520315][ T8195] Node 1 Normal free:22952kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 195.525133][T11650] ? __check_object_size+0x253/0x310 [ 195.530308][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 195.535092][T11650] video_usercopy+0x6da/0xfc0 [ 195.566609][ T8195] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 14308kB [ 195.572155][T11650] ? video_ioctl2+0x30/0x30 [ 195.572170][T11650] ? putname+0xa5/0xc0 [ 195.576928][ T8195] Node 0 DMA32: 113*4kB (UME) 81*8kB (ME) 61*16kB (UM) 34*32kB (M) 33*64kB (M) 24*128kB (UM) 18*256kB (UM) 12*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 21148kB [ 195.581594][T11650] ? do_vfs_ioctl+0x4f1/0xec0 [ 195.586413][ T8195] Node 0 Normal: 540*4kB (UM) 263*8kB (UM) 109*16kB (UM) 33*32kB (UM) 12*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7832kB [ 195.591451][T11650] video_ioctl2+0x25/0x30 [ 195.591470][T11650] ? video_usercopy+0xfc0/0xfc0 [ 195.622051][ T8195] Node 1 Normal: 2*4kB (M) 4*8kB (ME) 3*16kB (UM) 5*32kB (UME) 3*64kB (ME) 2*128kB (M) 3*256kB (ME) 2*512kB (UM) 4*1024kB (UME) 0*2048kB 4*4096kB (M) = 22968kB [ 195.627410][T11650] v4l2_ioctl+0xc2/0xd0 [ 195.627436][T11650] ? v4l2_poll+0x150/0x150 [ 195.632185][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.636926][T11650] __se_sys_ioctl+0xc9/0x130 [ 195.636984][T11650] __x64_sys_ioctl+0x3f/0x50 [ 195.651597][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 195.656254][T11650] do_syscall_64+0x51/0xb0 [ 195.660310][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.676623][T11650] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 195.676638][T11650] RIP: 0033:0x45c1f9 [ 195.681302][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 195.695757][T11650] Code: Bad RIP value. [ 195.695763][T11650] RSP: 002b:00007fc807460c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.695777][T11650] RAX: ffffffffffffffda RBX: 000000000001dc40 RCX: 000000000045c1f9 [ 195.695789][T11650] RDX: 0000000020000240 RSI: 00000000c100565c RDI: 0000000000000003 [ 195.700103][ T8195] 5100 total pagecache pages [ 195.704943][T11650] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 195.720894][ T8195] 0 pages in swap cache [ 195.725027][T11650] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 195.729548][ T8195] Swap cache stats: add 0, delete 0, find 0/0 [ 195.739067][T11650] R13: 00007ffcd836209f R14: 00007fc8074619c0 R15: 000000000078bf0c [ 195.744911][T11650] Mem-Info: [ 195.755704][ T8195] Free swap = 0kB [ 195.760044][T11650] active_anon:129649 inactive_anon:4886 isolated_anon:0 [ 195.760044][T11650] active_file:14 inactive_file:12 isolated_file:0 [ 195.760044][T11650] unevictable:0 dirty:0 writeback:0 [ 195.760044][T11650] slab_reclaimable:7001 slab_unreclaimable:18205 [ 195.760044][T11650] mapped:52983 shmem:5070 pagetables:1053 bounce:0 [ 195.760044][T11650] free:16564 free_pcp:215 free_cma:0 [ 195.762004][ T8195] Total swap = 0kB [ 195.771670][T11650] Node 0 active_anon:518592kB inactive_anon:19544kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211932kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 305152kB writeback_tmp:0kB all_unreclaimable? yes [ 195.771744][T11650] Node 1 active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 195.783153][ T8195] 1965979 pages RAM [ 195.792906][T11650] Node 0 DMA free:14308kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.795055][ T8195] 0 pages HighMem/MovableOnly [ 195.803480][T11650] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 195.803502][T11650] Node 0 DMA32 free:21148kB min:36976kB low:45708kB high:54440kB reserved_highatomic:0KB active_anon:64724kB inactive_anon:28kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:608kB pagetables:1148kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 195.816760][ T8195] 83163 pages reserved [ 195.821487][T11650] lowmem_reserve[]: 0 0 707 707 707 [ 195.824132][ T8195] 0 pages cma reserved [ 195.832120][T11650] Node 0 Normal free:7832kB min:14812kB low:16976kB high:19140kB reserved_highatomic:0KB active_anon:453868kB inactive_anon:19516kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3624kB pagetables:3056kB bounce:0kB free_pcp:360kB local_pcp:248kB free_cma:0kB [ 195.832247][T11650] lowmem_reserve[]: 0 0 0 0 0 [ 195.841571][ T8195] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=10174,uid=0 [ 195.846675][T11650] Node 1 Normal free:22968kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 195.853609][ T8195] Out of memory: Killed process 10174 (syz-executor.0) total-vm:74848kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 196.150880][T11650] lowmem_reserve[]: 0 0 0 0 0 [ 196.153873][ T1931] oom_reaper: reaped process 10174 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 196.155588][T11650] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 14308kB [ 196.175698][ T8195] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 196.185345][T11650] Node 0 DMA32: 113*4kB (UME) 81*8kB (ME) 61*16kB (UM) 34*32kB (M) 33*64kB (M) 24*128kB (UM) 18*256kB (UM) 12*512kB (M) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 23196kB [ 196.195856][ T8195] CPU: 0 PID: 8195 Comm: in:imklog Not tainted 5.8.0-rc6-syzkaller #0 [ 196.212914][T11650] Node 0 Normal: 540*4kB (UM) 263*8kB (UM) 109*16kB (UM) 33*32kB (UM) 12*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7832kB [ 196.217085][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.217089][ T8195] Call Trace: [ 196.217107][ T8195] dump_stack+0x10f/0x19d [ 196.217128][ T8195] dump_header+0x8e/0x400 [ 196.235801][T11650] Node 1 Normal: 2*4kB (M) 4*8kB (ME) 3*16kB (UM) 5*32kB (UME) 3*64kB (ME) 2*128kB (M) 3*256kB (ME) 2*512kB (UM) 4*1024kB (UME) 0*2048kB 4*4096kB (M) = 22968kB [ 196.241732][ T8195] oom_kill_process+0x18d/0x3f0 [ 196.241812][ T8195] out_of_memory+0x5bd/0x880 [ 196.241867][ T8195] ? get_page_from_freelist+0x127/0x3c0 [ 196.245175][T11650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.249507][ T8195] __alloc_pages_slowpath+0x742/0x970 [ 196.249522][ T8195] __alloc_pages_nodemask+0x235/0x390 [ 196.249543][ T8195] alloc_pages_current+0x21d/0x310 [ 196.259229][T11650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 196.269878][ T8195] __page_cache_alloc+0x4f/0x120 [ 196.269889][ T8195] pagecache_get_page+0x494/0x8b0 [ 196.269905][ T8195] ? __do_page_cache_readahead+0x96/0xb0 [ 196.275347][T11650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.279376][ T8195] filemap_fault+0xba4/0x11e0 [ 196.279396][ T8195] ext4_filemap_fault+0x4b/0x60 [ 196.286267][T11650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 196.294592][ T8195] do_read_fault+0x41f/0x730 [ 196.294668][ T8195] handle_mm_fault+0x135d/0x1930 [ 196.302982][T11650] 5096 total pagecache pages [ 196.305532][ T8195] do_user_addr_fault+0x393/0x810 [ 196.310642][T11650] 0 pages in swap cache [ 196.320002][ T8195] exc_page_fault+0xb8/0x330 [ 196.320081][ T8195] ? asm_exc_page_fault+0x8/0x30 [ 196.329340][T11650] Swap cache stats: add 0, delete 0, find 0/0 [ 196.330019][ T8195] asm_exc_page_fault+0x1e/0x30 [ 196.335677][T11650] Free swap = 0kB [ 196.345198][ T8195] RIP: 0033:0x7f9897db522d [ 196.345202][ T8195] Code: Bad RIP value. [ 196.345208][ T8195] RSP: 002b:00007f9895751580 EFLAGS: 00010293 [ 196.345216][ T8195] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007f9897db522d [ 196.345222][ T8195] RDX: 0000000000001fa0 RSI: 00007f9895751da0 RDI: 0000000000000004 [ 196.345235][ T8195] RBP: 000055de524979d0 R08: 0000000000000000 R09: 0000000004000001 [ 196.353815][T11650] Total swap = 0kB [ 196.354835][ T8195] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f9895751da0 [ 196.364098][T11650] 1965979 pages RAM [ 196.368653][ T8195] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f9895751dfc [ 196.373414][ T8195] Mem-Info: [ 196.379649][T11650] 0 pages HighMem/MovableOnly [ 196.383350][ T8195] active_anon:129112 inactive_anon:4886 isolated_anon:0 [ 196.383350][ T8195] active_file:16 inactive_file:10 isolated_file:0 [ 196.383350][ T8195] unevictable:0 dirty:0 writeback:0 [ 196.383350][ T8195] slab_reclaimable:7001 slab_unreclaimable:18205 [ 196.383350][ T8195] mapped:52983 shmem:5070 pagetables:1053 bounce:0 [ 196.383350][ T8195] free:17076 free_pcp:252 free_cma:0 [ 196.392697][T11650] 83163 pages reserved [ 196.397031][ T8195] Node 0 active_anon:516444kB inactive_anon:19544kB active_file:52kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211932kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 305152kB writeback_tmp:0kB all_unreclaimable? yes [ 196.397054][ T8195] Node 1 active_anon:4kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 196.397064][ T8195] Node 0 DMA free:14308kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.405426][T11650] 0 pages cma reserved [ 196.408191][ T8195] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 196.614941][ T8195] Node 0 DMA32 free:303596kB min:36976kB low:45708kB high:54440kB reserved_highatomic:0KB active_anon:62664kB inactive_anon:28kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:608kB pagetables:1148kB bounce:0kB free_pcp:1312kB local_pcp:12kB free_cma:0kB [ 196.646414][ T8195] lowmem_reserve[]: 0 0 707 707 707 [ 196.651741][ T8195] Node 0 Normal free:103804kB min:14812kB low:16976kB high:19140kB reserved_highatomic:0KB active_anon:453800kB inactive_anon:19516kB active_file:32kB inactive_file:3644kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3624kB pagetables:2956kB bounce:0kB free_pcp:1528kB local_pcp:228kB free_cma:0kB [ 196.683818][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 196.688602][ T8195] Node 1 Normal free:246740kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:12kB inactive_file:1400kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:1468kB local_pcp:4kB free_cma:0kB [ 196.720379][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 196.725065][ T8195] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 3*4096kB (UM) = 14444kB [ 196.738946][ T8195] Node 0 DMA32: 361*4kB (UME) 221*8kB (UME) 159*16kB (UME) 120*32kB (UME) 101*64kB (UME) 92*128kB (UM) 67*256kB (UM) 71*512kB (UME) 60*1024kB (UM) 53*2048kB (U) 90*4096kB (U) = 619964kB [ 196.757388][ T8195] Node 0 Normal: 1696*4kB (UME) 1091*8kB (UME) 734*16kB (UM) 419*32kB (UME) 245*64kB (UM) 87*128kB (UME) 41*256kB (UM) 25*512kB (U) 8*1024kB (U) 2*2048kB (UM) 0*4096kB = 103064kB [ 196.775244][ T8195] Node 1 Normal: 4*4kB (UM) 7*8kB (UME) 3*16kB (UM) 3*32kB (UE) 6*64kB (UME) 5*128kB (U) 3*256kB (UE) 4*512kB (U) 5*1024kB (UME) 0*2048kB 58*4096kB (UM) = 246744kB [ 196.791920][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.801751][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 196.811144][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.820880][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 196.830770][ T8195] 6721 total pagecache pages [ 196.835429][ T8195] 0 pages in swap cache [ 196.839694][ T8195] Swap cache stats: add 0, delete 0, find 0/0 [ 196.845751][ T8195] Free swap = 0kB [ 196.849513][ T8195] Total swap = 0kB [ 196.853321][ T8195] 1965979 pages RAM [ 196.857231][ T8195] 0 pages HighMem/MovableOnly [ 196.861910][ T8195] 83163 pages reserved [ 196.866123][ T8195] 0 pages cma reserved [ 196.870286][ T8195] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=10347,uid=0 [ 196.884654][ T8195] Out of memory: Killed process 10347 (syz-executor.0) total-vm:74848kB, anon-rss:2192kB, file-rss:34560kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 07:44:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r5, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:44:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:06 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1c0}]) 07:44:06 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:06 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:44:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x7fffffff, 0x1, {0x2, @raw_data="1f1e932a3866b6112b0224cb147ea4c7b5d88f9f4f2de51a029d9000bac55b0d2b5a2749d9fe23889f7a6e543df6652dce2bc42ebc465b0ffd15a947652eafc59bd84cd7ec9f458d11141ccdd62ce8f004e261919a602858318efbd45f67a079c9d06c3f9a82e5237356e03ed7f7eac0fa34a75254525d4400ffd4786e76451235d44416bdc7536e73a8231cd1e949399a8efe0acd7bea4d24bd1ddfceb9f200d95ff81065a6400c013d15b8e354eaef003d95ad5e34e2a37e2da0d30ef79038a4d582964f54540f"}}) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 07:44:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) [ 197.830860][T11701] x86/PAT: syz-executor.1:11701 map pfn RAM range req write-combining for [mem 0x99800000-0x99a01fff], got write-back [ 197.847372][T11696] Dev loop2: unable to read RDB block 1 [ 197.853240][T11696] loop2: unable to read partition table [ 197.861463][T11696] loop2: partition table beyond EOD, truncated [ 197.870696][T11696] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 07:44:06 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:06 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:06 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080), 0x0, 0x1c0}]) 07:44:06 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) [ 197.991219][T11722] x86/PAT: syz-executor.1:11722 map pfn RAM range req write-combining for [mem 0x0a000000-0x0a201fff], got write-back 07:44:06 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) [ 198.087393][T11731] Dev loop2: unable to read RDB block 1 [ 198.093260][T11731] loop2: unable to read partition table 07:44:06 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 198.138519][T11731] loop2: partition table beyond EOD, truncated [ 198.176605][T11731] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 201.984941][ T1931] oom_reaper: reaped process 11714 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 202.011621][ T5029] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 202.023005][ T5029] CPU: 0 PID: 5029 Comm: systemd-journal Not tainted 5.8.0-rc6-syzkaller #0 [ 202.031671][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.041718][ T5029] Call Trace: [ 202.045023][ T5029] dump_stack+0x10f/0x19d [ 202.049532][ T5029] dump_header+0x8e/0x400 [ 202.053868][ T5029] oom_kill_process+0x18d/0x3f0 [ 202.058713][ T5029] out_of_memory+0x5bd/0x880 [ 202.063304][ T5029] ? get_page_from_freelist+0x127/0x3c0 [ 202.068949][ T5029] __alloc_pages_slowpath+0x742/0x970 [ 202.074312][ T5029] __alloc_pages_nodemask+0x235/0x390 [ 202.079804][ T5029] alloc_pages_current+0x21d/0x310 [ 202.085082][ T5029] __page_cache_alloc+0x4f/0x120 [ 202.090012][ T5029] pagecache_get_page+0x494/0x8b0 [ 202.095077][ T5029] ? __do_page_cache_readahead+0x96/0xb0 [ 202.100717][ T5029] filemap_fault+0xba4/0x11e0 [ 202.105645][ T5029] ext4_filemap_fault+0x4b/0x60 [ 202.110560][ T5029] do_read_fault+0x41f/0x730 [ 202.115158][ T5029] handle_mm_fault+0x135d/0x1930 [ 202.120099][ T5029] do_user_addr_fault+0x393/0x810 [ 202.125120][ T5029] exc_page_fault+0xb8/0x330 [ 202.129763][ T5029] ? asm_exc_page_fault+0x8/0x30 [ 202.134752][ T5029] asm_exc_page_fault+0x1e/0x30 [ 202.139591][ T5029] RIP: 0033:0x7f6d637992e3 [ 202.143994][ T5029] Code: Bad RIP value. [ 202.148055][ T5029] RSP: 002b:00007ffd30bec028 EFLAGS: 00010246 [ 202.154272][ T5029] RAX: 0000000000000001 RBX: 000055d01e2e81e0 RCX: 00007f6d637992e3 [ 202.162243][ T5029] RDX: 0000000000000013 RSI: 00007ffd30bec030 RDI: 0000000000000008 [ 202.170209][ T5029] RBP: 00007ffd30bec220 R08: 0000006c52ddfe37 R09: 00007ffd30bf1080 [ 202.178173][ T5029] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd30bec030 [ 202.186224][ T5029] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005ab17056c4f88 [ 202.197018][ T5029] Mem-Info: [ 202.200138][ T5029] active_anon:128577 inactive_anon:4886 isolated_anon:0 [ 202.200138][ T5029] active_file:17 inactive_file:8 isolated_file:0 [ 202.200138][ T5029] unevictable:0 dirty:7 writeback:1 [ 202.200138][ T5029] slab_reclaimable:6995 slab_unreclaimable:18206 [ 202.200138][ T5029] mapped:53029 shmem:5070 pagetables:1003 bounce:0 [ 202.200138][ T5029] free:16094 free_pcp:760 free_cma:0 [ 202.236628][ T5029] Node 0 active_anon:514304kB inactive_anon:19544kB active_file:64kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212116kB dirty:16kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 303104kB writeback_tmp:0kB all_unreclaimable? yes [ 202.264845][ T5029] Node 1 active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:4kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 202.290448][ T5029] Node 0 DMA free:14428kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.320940][ T5029] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 202.327178][ T5029] Node 0 DMA32 free:138660kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:60620kB inactive_anon:28kB active_file:16kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:608kB pagetables:1148kB bounce:0kB free_pcp:1692kB local_pcp:248kB free_cma:0kB [ 202.358797][ T5029] lowmem_reserve[]: 0 0 707 707 707 [ 202.364027][ T5029] Node 0 Normal free:105952kB min:14812kB low:16976kB high:19140kB reserved_highatomic:0KB active_anon:453660kB inactive_anon:19516kB active_file:32kB inactive_file:944kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3592kB pagetables:2852kB bounce:0kB free_pcp:1876kB local_pcp:356kB free_cma:0kB [ 202.396698][ T5029] lowmem_reserve[]: 0 0 0 0 0 [ 202.402053][ T5029] Node 1 Normal free:244796kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:1732kB local_pcp:400kB free_cma:0kB [ 202.433563][ T5029] lowmem_reserve[]: 0 0 0 0 0 [ 202.438562][ T5029] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 3*4096kB (UM) = 14444kB [ 202.452575][ T5029] Node 0 DMA32: 346*4kB (UME) 207*8kB (UME) 155*16kB (UME) 130*32kB (UME) 108*64kB (UME) 95*128kB (UM) 65*256kB (UM) 72*512kB (UME) 62*1024kB (UM) 62*2048kB (U) 84*4096kB (U) = 616784kB [ 202.471227][ T5029] Node 0 Normal: 1785*4kB (UME) 1298*8kB (UME) 753*16kB (UME) 431*32kB (UME) 250*64kB (UME) 80*128kB (UM) 41*256kB (UM) 20*512kB (U) 13*1024kB (U) 1*2048kB (M) 0*4096kB = 105700kB [ 202.489082][ T5029] Node 1 Normal: 5*4kB (U) 7*8kB (UME) 5*16kB (U) 5*32kB (UME) 6*64kB (UE) 7*128kB (U) 6*256kB (UME) 6*512kB (UM) 7*1024kB (UME) 1*2048kB (U) 56*4096kB (UM) = 244796kB [ 202.506205][ T5029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.516004][ T5029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 202.525294][ T5029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.535031][ T5029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 202.545035][ T5029] 5667 total pagecache pages [ 202.549668][ T5029] 0 pages in swap cache [ 202.553952][ T5029] Swap cache stats: add 0, delete 0, find 0/0 [ 202.560101][ T5029] Free swap = 0kB [ 202.563985][ T5029] Total swap = 0kB [ 202.567723][ T5029] 1965979 pages RAM [ 202.571582][ T5029] 0 pages HighMem/MovableOnly [ 202.576236][ T5029] 83163 pages reserved [ 202.580746][ T5029] 0 pages cma reserved [ 202.584796][ T5029] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=10337,uid=0 [ 202.599083][ T5029] Out of memory: Killed process 10337 (syz-executor.0) total-vm:74848kB, anon-rss:2192kB, file-rss:34560kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 202.615904][ T1931] oom_reaper: reaped process 10337 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 07:44:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:44:12 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:12 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:44:12 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:12 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080), 0x0, 0x1c0}]) 07:44:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x7fffffff, 0x1, {0x2, @raw_data="1f1e932a3866b6112b0224cb147ea4c7b5d88f9f4f2de51a029d9000bac55b0d2b5a2749d9fe23889f7a6e543df6652dce2bc42ebc465b0ffd15a947652eafc59bd84cd7ec9f458d11141ccdd62ce8f004e261919a602858318efbd45f67a079c9d06c3f9a82e5237356e03ed7f7eac0fa34a75254525d4400ffd4786e76451235d44416bdc7536e73a8231cd1e949399a8efe0acd7bea4d24bd1ddfceb9f200d95ff81065a6400c013d15b8e354eaef003d95ad5e34e2a37e2da0d30ef79038a4d582964f54540f"}}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 203.690501][T11767] x86/PAT: syz-executor.1:11767 map pfn RAM range req write-combining for [mem 0x30c00000-0x30e01fff], got write-back [ 203.717223][T11773] Dev loop2: unable to read RDB block 1 [ 203.722935][T11773] loop2: unable to read partition table [ 203.730461][T11773] loop2: partition table beyond EOD, truncated 07:44:12 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:12 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) [ 203.737263][T11773] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 07:44:12 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080), 0x0, 0x1c0}]) 07:44:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) r4 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:44:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) [ 203.834408][T11785] x86/PAT: syz-executor.1:11785 map pfn RAM range req write-combining for [mem 0x7d400000-0x7d601fff], got write-back 07:44:12 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) [ 203.904070][T11787] Dev loop2: unable to read RDB block 1 [ 203.912648][T11787] loop2: unable to read partition table [ 203.933679][T11787] loop2: partition table beyond EOD, truncated [ 203.946640][T11787] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 203.974027][T11793] x86/PAT: syz-executor.1:11793 map pfn RAM range req write-combining for [mem 0x7d000000-0x7d201fff], got write-back 07:44:12 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:44:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:12 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af0003140000000000000007a600000000000000000005000000", 0x20, 0x1c0}]) [ 204.350396][T11809] Dev loop2: unable to read RDB block 1 [ 204.356098][T11809] loop2: unable to read partition table [ 204.364477][T11809] loop2: partition table beyond EOD, truncated [ 204.370829][T11809] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 207.853987][ T1931] oom_reaper: reaped process 11772 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 207.871017][ T8195] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 207.887053][ T8195] CPU: 1 PID: 8195 Comm: in:imklog Not tainted 5.8.0-rc6-syzkaller #0 [ 207.895220][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.905339][ T8195] Call Trace: [ 207.907136][T11772] warn_alloc: 1 callbacks suppressed [ 207.907186][T11772] syz-executor.5: vmalloc: allocation failure, allocated 286834688 of 451231744 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 207.908638][ T8195] dump_stack+0x10f/0x19d [ 207.934501][ T8195] dump_header+0x8e/0x400 [ 207.938871][ T8195] oom_kill_process+0x18d/0x3f0 [ 207.943700][ T8195] out_of_memory+0x5bd/0x880 [ 207.948268][ T8195] ? get_page_from_freelist+0x127/0x3c0 [ 207.953806][ T8195] __alloc_pages_slowpath+0x742/0x970 [ 207.959157][ T8195] __alloc_pages_nodemask+0x235/0x390 [ 207.964525][ T8195] alloc_pages_current+0x21d/0x310 [ 207.969637][ T8195] __page_cache_alloc+0x4f/0x120 [ 207.974619][ T8195] pagecache_get_page+0x494/0x8b0 [ 207.979675][ T8195] ? __do_page_cache_readahead+0x96/0xb0 [ 207.985289][ T8195] filemap_fault+0xba4/0x11e0 [ 207.989950][ T8195] ext4_filemap_fault+0x4b/0x60 [ 207.994780][ T8195] do_read_fault+0x41f/0x730 [ 207.999351][ T8195] handle_mm_fault+0x135d/0x1930 [ 208.004310][ T8195] do_user_addr_fault+0x393/0x810 [ 208.009318][ T8195] exc_page_fault+0xb8/0x330 [ 208.013889][ T8195] ? asm_exc_page_fault+0x8/0x30 [ 208.018805][ T8195] asm_exc_page_fault+0x1e/0x30 [ 208.023631][ T8195] RIP: 0033:0x7f9897db522d [ 208.028016][ T8195] Code: Bad RIP value. [ 208.032056][ T8195] RSP: 002b:00007f9895751580 EFLAGS: 00010293 [ 208.038130][ T8195] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007f9897db522d [ 208.046078][ T8195] RDX: 0000000000001fa0 RSI: 00007f9895751da0 RDI: 0000000000000004 [ 208.054074][ T8195] RBP: 000055de524979d0 R08: 0000000000000000 R09: 0000000004000001 [ 208.062123][ T8195] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f9895751da0 [ 208.070072][ T8195] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f9895751dfc [ 208.078045][T11772] CPU: 0 PID: 11772 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 208.083970][ T8195] Mem-Info: [ 208.086718][T11772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.089887][ T8195] active_anon:128042 inactive_anon:4886 isolated_anon:0 [ 208.089887][ T8195] active_file:22 inactive_file:0 isolated_file:0 [ 208.089887][ T8195] unevictable:0 dirty:14 writeback:0 [ 208.089887][ T8195] slab_reclaimable:6994 slab_unreclaimable:18185 [ 208.089887][ T8195] mapped:53054 shmem:5070 pagetables:978 bounce:0 [ 208.089887][ T8195] free:16153 free_pcp:634 free_cma:0 [ 208.099818][T11772] Call Trace: [ 208.099832][T11772] dump_stack+0x10f/0x19d [ 208.099853][T11772] warn_alloc+0x105/0x160 [ 208.136026][ T8195] Node 0 active_anon:512160kB inactive_anon:19544kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212148kB dirty:44kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 301056kB writeback_tmp:0kB all_unreclaimable? yes [ 208.139267][T11772] __vmalloc_node_range+0x458/0x530 [ 208.139285][T11772] vmalloc_user+0x55/0x60 [ 208.143652][ T8195] Node 1 active_anon:8kB inactive_anon:0kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:12kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 208.147936][T11772] ? vb2_vmalloc_alloc+0x8f/0x120 [ 208.147955][T11772] vb2_vmalloc_alloc+0x8f/0x120 [ 208.175948][ T8195] Node 0 DMA free:14308kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.180524][T11772] ? tsan.module_ctor+0x10/0x10 [ 208.180540][T11772] __vb2_queue_alloc+0x4fe/0xaf0 [ 208.184835][ T8195] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 208.210414][T11772] vb2_core_create_bufs+0x334/0x570 [ 208.210433][T11772] ? tomoyo_profile+0x17/0x30 [ 208.215427][ T8195] Node 0 DMA32 free:21280kB min:36976kB low:45708kB high:54440kB reserved_highatomic:0KB active_anon:58640kB inactive_anon:28kB active_file:4kB inactive_file:88kB unevictable:0kB writepending:72kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:608kB pagetables:1148kB bounce:0kB free_pcp:1320kB local_pcp:1068kB free_cma:0kB [ 208.220252][T11772] vb2_create_bufs+0x419/0x560 [ 208.220277][T11772] ? tomoyo_profile+0x17/0x30 [ 208.249134][ T8195] lowmem_reserve[]: 0 0 707 707 707 [ 208.253960][T11772] v4l2_m2m_ioctl_create_bufs+0xb4/0xc0 [ 208.258880][ T8195] Node 0 Normal free:5996kB min:14812kB low:16976kB high:19140kB reserved_highatomic:0KB active_anon:453520kB inactive_anon:19516kB active_file:100kB inactive_file:0kB unevictable:0kB writepending:172kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3576kB pagetables:2756kB bounce:0kB free_pcp:964kB local_pcp:716kB free_cma:0kB [ 208.264576][T11772] v4l_create_bufs+0x15e/0x1b0 [ 208.269754][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 208.274390][T11772] __video_do_ioctl+0x65b/0x870 [ 208.305864][ T8195] Node 1 Normal free:23028kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:16kB inactive_file:8kB unevictable:0kB writepending:12kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 208.310591][T11772] ? __video_do_ioctl+0x2b1/0x870 [ 208.310609][T11772] ? __check_object_size+0x253/0x310 [ 208.315260][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 208.320437][T11772] video_usercopy+0x6da/0xfc0 [ 208.320458][T11772] ? video_ioctl2+0x30/0x30 [ 208.326021][ T8195] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 14308kB [ 208.357768][T11772] ? putname+0xa5/0xc0 [ 208.357780][T11772] ? do_vfs_ioctl+0x4f1/0xec0 [ 208.357799][T11772] video_ioctl2+0x25/0x30 [ 208.362537][ T8195] Node 0 DMA32: 162*4kB (UME) 119*8kB (UME) 74*16kB (ME) 60*32kB (UME) 49*64kB (UME) 35*128kB (UM) 11*256kB (UM) 10*512kB (ME) 1*1024kB (U) 0*2048kB 0*4096kB = 21280kB [ 208.367200][T11772] ? video_usercopy+0xfc0/0xfc0 [ 208.367232][T11772] v4l2_ioctl+0xc2/0xd0 [ 208.372044][ T8195] Node 0 Normal: 408*4kB (UME) 191*8kB (UME) 94*16kB (UME) 33*32kB (UME) 11*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6424kB [ 208.402399][T11772] ? v4l2_poll+0x150/0x150 [ 208.402410][T11772] __se_sys_ioctl+0xc9/0x130 [ 208.402433][T11772] __x64_sys_ioctl+0x3f/0x50 [ 208.411355][ T8195] Node 1 Normal: 2*4kB (M) 2*8kB (ME) 2*16kB (UM) 4*32kB (UME) 2*64kB (ME) 2*128kB (UM) 2*256kB (ME) 3*512kB (UM) 4*1024kB (UME) 0*2048kB 4*4096kB (M) = 23096kB [ 208.412701][T11772] do_syscall_64+0x51/0xb0 [ 208.417370][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.422096][T11772] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 208.426607][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 208.441185][T11772] RIP: 0033:0x45c1f9 [ 208.441251][T11772] Code: Bad RIP value. [ 208.441263][T11772] RSP: 002b:00007fc807460c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.451117][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.454249][T11772] RAX: ffffffffffffffda RBX: 000000000001dc40 RCX: 000000000045c1f9 [ 208.473122][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 208.475690][T11772] RDX: 0000000020000240 RSI: 00000000c100565c RDI: 0000000000000003 [ 208.479822][ T8195] 5124 total pagecache pages [ 208.494528][T11772] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 208.494535][T11772] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 208.494542][T11772] R13: 00007ffcd836209f R14: 00007fc8074619c0 R15: 000000000078bf0c [ 208.495988][T11772] Mem-Info: [ 208.514838][ T8195] 0 pages in swap cache [ 208.524323][T11772] active_anon:128035 inactive_anon:4886 isolated_anon:0 [ 208.524323][T11772] active_file:11 inactive_file:11 isolated_file:0 [ 208.524323][T11772] unevictable:0 dirty:0 writeback:0 [ 208.524323][T11772] slab_reclaimable:6991 slab_unreclaimable:18185 [ 208.524323][T11772] mapped:53016 shmem:5070 pagetables:977 bounce:0 [ 208.524323][T11772] free:16277 free_pcp:639 free_cma:0 [ 208.537846][ T8195] Swap cache stats: add 0, delete 0, find 0/0 [ 208.538221][T11772] Node 0 active_anon:512136kB inactive_anon:19544kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212064kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 299008kB writeback_tmp:0kB all_unreclaimable? yes [ 208.543997][ T8195] Free swap = 0kB [ 208.553284][T11772] Node 1 active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 208.553294][T11772] Node 0 DMA free:14308kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.566716][ T8195] Total swap = 0kB [ 208.569720][T11772] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 208.597118][ T8195] 1965979 pages RAM [ 208.605005][T11772] Node 0 DMA32 free:21280kB min:36976kB low:45708kB high:54440kB reserved_highatomic:0KB active_anon:58616kB inactive_anon:28kB active_file:4kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:608kB pagetables:1148kB bounce:0kB free_pcp:1320kB local_pcp:252kB free_cma:0kB [ 208.619827][ T8195] 0 pages HighMem/MovableOnly [ 208.625049][T11772] lowmem_reserve[]: 0 0 707 707 707 [ 208.642628][ T8195] 83163 pages reserved [ 208.676506][T11772] Node 0 Normal free:6424kB min:14812kB low:16976kB high:19140kB reserved_highatomic:0KB active_anon:453520kB inactive_anon:19516kB active_file:32kB inactive_file:20kB unevictable:0kB writepending:0kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3576kB pagetables:2752kB bounce:0kB free_pcp:984kB local_pcp:264kB free_cma:0kB [ 208.676537][T11772] lowmem_reserve[]: 0 0 0 0 0 [ 208.676550][T11772] Node 1 Normal free:23096kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 208.676586][T11772] lowmem_reserve[]: 0 0 0 0 0 [ 208.693827][ T8195] 0 pages cma reserved [ 208.710596][T11772] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 14308kB [ 208.723649][ T8195] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=10325,uid=0 [ 208.739121][T11772] Node 0 DMA32: 162*4kB (UME) 120*8kB (UME) 74*16kB (ME) 60*32kB (UME) 49*64kB (UME) 35*128kB (UM) 11*256kB (UM) 10*512kB (ME) 1*1024kB (U) 0*2048kB 0*4096kB = 21288kB [ 208.778958][ T8195] Out of memory: Killed process 10325 (syz-executor.0) total-vm:74848kB, anon-rss:2192kB, file-rss:34560kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 208.967368][ T1931] oom_reaper: reaped process 10325 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 208.971988][T11772] Node 0 Normal: 408*4kB (UME) 191*8kB (UME) 94*16kB (UME) 33*32kB (UME) 11*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6424kB [ 208.988854][ T8195] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 209.000957][T11772] Node 1 Normal: 2*4kB (M) 2*8kB (ME) 2*16kB (UM) 4*32kB (UME) 2*64kB (ME) 2*128kB (UM) 2*256kB (ME) 3*512kB (UM) 4*1024kB (UME) 0*2048kB 4*4096kB (M) = 23096kB [ 209.005895][ T8195] CPU: 1 PID: 8195 Comm: in:imklog Not tainted 5.8.0-rc6-syzkaller #0 [ 209.027292][T11772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.027917][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.042663][T11772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 209.047457][ T8195] Call Trace: [ 209.047474][ T8195] dump_stack+0x10f/0x19d [ 209.047487][ T8195] dump_header+0x8e/0x400 [ 209.047504][ T8195] oom_kill_process+0x18d/0x3f0 [ 209.062296][T11772] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.064345][ T8195] out_of_memory+0x5bd/0x880 [ 209.071317][T11772] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 209.073448][ T8195] ? get_page_from_freelist+0x127/0x3c0 [ 209.090718][T11772] 5092 total pagecache pages [ 209.096938][ T8195] __alloc_pages_slowpath+0x742/0x970 [ 209.105931][T11772] 0 pages in swap cache [ 209.107157][ T8195] __alloc_pages_nodemask+0x235/0x390 [ 209.116589][T11772] Swap cache stats: add 0, delete 0, find 0/0 [ 209.121843][ T8195] alloc_pages_current+0x21d/0x310 [ 209.121856][ T8195] __page_cache_alloc+0x4f/0x120 [ 209.121867][ T8195] pagecache_get_page+0x494/0x8b0 [ 209.121884][ T8195] ? __do_page_cache_readahead+0x96/0xb0 [ 209.135843][T11772] Free swap = 0kB [ 209.137963][ T8195] filemap_fault+0xba4/0x11e0 [ 209.137978][ T8195] ext4_filemap_fault+0x4b/0x60 [ 209.138015][ T8195] do_read_fault+0x41f/0x730 [ 209.142985][T11772] Total swap = 0kB [ 209.148589][ T8195] handle_mm_fault+0x135d/0x1930 [ 209.148608][ T8195] do_user_addr_fault+0x393/0x810 [ 209.148622][ T8195] exc_page_fault+0xb8/0x330 [ 209.148640][ T8195] ? asm_exc_page_fault+0x8/0x30 [ 209.170324][T11772] 1965979 pages RAM [ 209.175038][ T8195] asm_exc_page_fault+0x1e/0x30 [ 209.193117][T11772] 0 pages HighMem/MovableOnly [ 209.193221][ T8195] RIP: 0033:0x7f9897db522d [ 209.202639][T11772] 83163 pages reserved [ 209.202684][ T8195] Code: Bad RIP value. [ 209.207086][T11772] 0 pages cma reserved [ 209.211160][ T8195] RSP: 002b:00007f9895751580 EFLAGS: 00010293 [ 209.225293][ T8195] RAX: 000000000000007f RBX: 0000000000000000 RCX: 00007f9897db522d [ 209.233246][ T8195] RDX: 0000000000001fa0 RSI: 00007f9895751da0 RDI: 0000000000000004 [ 209.241203][ T8195] RBP: 000055de524979d0 R08: 0000000000000000 R09: 0000000004000001 [ 209.249197][ T8195] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f9895751da0 [ 209.257150][ T8195] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f9895751dfc [ 209.289833][ T8195] Mem-Info: [ 209.293590][ T8195] active_anon:127497 inactive_anon:4886 isolated_anon:0 [ 209.293590][ T8195] active_file:11 inactive_file:186 isolated_file:0 [ 209.293590][ T8195] unevictable:0 dirty:0 writeback:0 [ 209.293590][ T8195] slab_reclaimable:6991 slab_unreclaimable:18185 [ 209.293590][ T8195] mapped:53066 shmem:5070 pagetables:952 bounce:0 [ 209.293590][ T8195] free:43712 free_pcp:370 free_cma:0 [ 209.331162][ T8195] Node 0 active_anon:509984kB inactive_anon:19544kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212064kB dirty:0kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 299008kB writeback_tmp:0kB all_unreclaimable? no [ 209.360469][ T8195] Node 1 active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:1384kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:976kB dirty:0kB writeback:4kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 209.387838][ T8195] Node 0 DMA free:14428kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 209.419670][ T8195] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 209.425402][ T8195] Node 0 DMA32 free:218700kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:56564kB inactive_anon:28kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:4kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:608kB pagetables:1148kB bounce:0kB free_pcp:1368kB local_pcp:0kB free_cma:0kB [ 209.458272][ T8195] lowmem_reserve[]: 0 0 707 707 707 [ 209.463464][ T8195] Node 0 Normal free:106192kB min:8668kB low:10832kB high:12996kB reserved_highatomic:0KB active_anon:453452kB inactive_anon:19516kB active_file:44kB inactive_file:1520kB unevictable:0kB writepending:8kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3560kB pagetables:2656kB bounce:0kB free_pcp:1548kB local_pcp:0kB free_cma:0kB [ 209.497178][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 209.497191][ T8195] Node 1 Normal free:245316kB min:46320kB low:57900kB high:69480kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:1484kB unevictable:0kB writepending:4kB present:3932160kB managed:3870248kB mlocked:0kB kernel_stack:8kB pagetables:8kB bounce:0kB free_pcp:1288kB local_pcp:16kB free_cma:0kB [ 209.497235][ T8195] lowmem_reserve[]: 0 0 0 0 0 [ 209.497246][ T8195] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 3*4096kB (UM) = 14444kB [ 209.554752][ T8195] Node 0 DMA32: 375*4kB (UME) 240*8kB (UME) 171*16kB (UME) 143*32kB (UME) 116*64kB (UME) 105*128kB (UM) 75*256kB (UM) 73*512kB (UME) 67*1024kB (UM) 63*2048kB (UM) 54*4096kB (U) = 506988kB [ 209.574829][ T8195] Node 0 Normal: 1720*4kB (UME) 1288*8kB (UME) 740*16kB (UME) 437*32kB (UME) 247*64kB (UME) 86*128kB (UM) 34*256kB (U) 22*512kB (UM) 11*1024kB (U) 3*2048kB (U) 0*4096kB = 107200kB [ 209.594148][ T8195] Node 1 Normal: 2*4kB (UM) 5*8kB (UE) 4*16kB (UM) 2*32kB (UE) 5*64kB (UE) 3*128kB (U) 5*256kB (UE) 3*512kB (U) 4*1024kB (UE) 2*2048kB (UM) 57*4096kB (UM) = 245360kB [ 209.612219][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.622408][ T8195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 209.633299][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.642857][ T8195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 209.653582][ T8195] 5926 total pagecache pages [ 209.658983][ T8195] 0 pages in swap cache [ 209.663126][ T8195] Swap cache stats: add 0, delete 0, find 0/0 [ 209.670491][ T8195] Free swap = 0kB [ 209.674192][ T8195] Total swap = 0kB [ 209.678011][ T8195] 1965979 pages RAM [ 209.681940][ T8195] 0 pages HighMem/MovableOnly [ 209.686599][ T8195] 83163 pages reserved [ 209.692906][ T8195] 0 pages cma reserved [ 209.696982][ T8195] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=10518,uid=0 [ 209.713001][ T8195] Out of memory: Killed process 10518 (syz-executor.2) total-vm:74848kB, anon-rss:112kB, file-rss:34560kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 07:44:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:19 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x7fffffff, 0x1, {0x2, @raw_data="1f1e932a3866b6112b0224cb147ea4c7b5d88f9f4f2de51a029d9000bac55b0d2b5a2749d9fe23889f7a6e543df6652dce2bc42ebc465b0ffd15a947652eafc59bd84cd7ec9f458d11141ccdd62ce8f004e261919a602858318efbd45f67a079c9d06c3f9a82e5237356e03ed7f7eac0fa34a75254525d4400ffd4786e76451235d44416bdc7536e73a8231cd1e949399a8efe0acd7bea4d24bd1ddfceb9f200d95ff81065a6400c013d15b8e354eaef003d95ad5e34e2a37e2da0d30ef79038a4d582964f54540f"}}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:44:19 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 07:44:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:19 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af0003140000000000000007a600000000000000000005000000", 0x20, 0x1c0}]) 07:44:19 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) r4 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) 07:44:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:19 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) [ 210.649991][T11838] x86/PAT: syz-executor.1:11838 map pfn RAM range req write-combining for [mem 0x0a000000-0x0a201fff], got write-back 07:44:19 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) 07:44:19 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a926, 0x3b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) r4 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r2, 0x0) [ 210.722159][T11839] Dev loop2: unable to read RDB block 1 [ 210.734383][T11839] loop2: unable to read partition table [ 210.746835][T11839] loop2: partition table beyond EOD, truncated [ 210.753430][T11839] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 07:44:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x560, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) [ 210.779423][T11855] x86/PAT: syz-executor.1:11855 map pfn RAM range req write-combining for [mem 0x29400000-0x29601fff], got write-back 07:44:19 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af0003140000000000000007a600000000000000000005000000", 0x20, 0x1c0}]) 07:44:19 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [0x3b, 0x0, 0x3, 0x8, 0x4b564d03, 0x0, 0xc1]}) [ 210.918220][T11866] Dev loop2: unable to read RDB block 1 [ 210.923800][T11866] loop2: unable to read partition table [ 210.947110][T11866] loop2: partition table beyond EOD, truncated [ 210.953259][T11866] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 214.651665][ T8643] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 214.662342][ T8643] CPU: 0 PID: 8643 Comm: syz-fuzzer Not tainted 5.8.0-rc6-syzkaller #0 [ 214.670574][ T8643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.680611][ T8643] Call Trace: [ 214.683874][ T8643] dump_stack+0x10f/0x19d [ 214.688179][ T8643] dump_header+0x8e/0x400 [ 214.692483][ T8643] oom_kill_process+0x18d/0x3f0 [ 214.697302][ T8643] out_of_memory+0x5bd/0x880 [ 214.701857][ T8643] ? get_page_from_freelist+0x127/0x3c0 [ 214.707379][ T8643] __alloc_pages_slowpath+0x742/0x970 [ 214.712727][ T8643] __alloc_pages_nodemask+0x235/0x390 [ 214.718081][ T8643] alloc_pages_current+0x21d/0x310 [ 214.723174][ T8643] __page_cache_alloc+0x4f/0x120 [ 214.728115][ T8643] pagecache_get_page+0x494/0x8b0 [ 214.733138][ T8643] ? __do_page_cache_readahead+0x96/0xb0 [ 214.738782][ T8643] filemap_fault+0xba4/0x11e0 [ 214.743502][ T8643] ext4_filemap_fault+0x4b/0x60 [ 214.748329][ T8643] do_read_fault+0x41f/0x730 [ 214.752898][ T8643] handle_mm_fault+0x135d/0x1930 [ 214.757810][ T8643] do_user_addr_fault+0x393/0x810 [ 214.762854][ T8643] exc_page_fault+0xb8/0x330 [ 214.767420][ T8643] ? asm_exc_page_fault+0x8/0x30 [ 214.772336][ T8643] asm_exc_page_fault+0x1e/0x30 [ 214.777168][ T8643] RIP: 0033:0x40abd0 [ 214.781069][ T8643] Code: Bad RIP value. [ 214.785102][ T8643] RSP: 002b:000000c00004ded8 EFLAGS: 00010202 [ 214.791132][ T8643] RAX: 00000000017dc4d8 RBX: 000000c00003e000 RCX: 000000c000000480 [ 214.799103][ T8643] RDX: 0000000022c40742 RSI: 000000c00004df10 RDI: 0000000022c40742 [ 214.807100][ T8643] RBP: 000000c00004df28 R08: 00000074dc8b4276 R09: 00007fffe5d69080 [ 214.815061][ T8643] R10: 0000000000000010 R11: 00007fffe5d690b8 R12: 0000000000439470 [ 214.823001][ T8643] R13: 0000000000000000 R14: 0000000000ac94e8 R15: 0000000000000000 [ 214.953210][ T8643] Mem-Info: [ 214.956362][ T8643] active_anon:128009 inactive_anon:4886 isolated_anon:0 [ 214.956362][ T8643] active_file:4 inactive_file:6 isolated_file:0 [ 214.956362][ T8643] unevictable:0 dirty:22 writeback:1 [ 214.956362][ T8643] slab_reclaimable:6983 slab_unreclaimable:18165 [ 214.956362][ T8643] mapped:53066 shmem:5070 pagetables:929 bounce:0 [ 214.956362][ T8643] free:26586 free_pcp:0 free_cma:0 [ 215.008497][ T8643] Node 0 active_anon:512032kB inactive_anon:19544kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212216kB dirty:80kB writeback:0kB shmem:20280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 299008kB writeback_tmp:0kB all_unreclaimable? yes [ 215.063521][ T8643] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:8kB writeback:4kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? yes [ 215.117350][ T8643] Node 0 DMA free:14396kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.160026][ T8643] lowmem_reserve[]: 0 2850 3557 3557 3557 [ 215.165753][ T8643] Node 0 DMA32 free:37604kB min:34928kB low:43660kB high:52392kB reserved_highatomic:0KB active_anon:58616kB inactive_anon:28kB active_file:20kB inactive_file:56kB unevictable:0kB writepending:20kB present:3129332kB managed:2920588kB mlocked:0kB kernel_stack:608kB pagetables:1148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.206938][ T8643] lowmem_reserve[]: 0 0 707 707 707 [ 215.212134][ T8643] Node 0 Normal free:8256kB min:8668kB low:10832kB high:12996kB reserved_highatomic:0KB active_anon:453416kB inactive_anon:19516kB active_file:72kB inactive_file:16kB unevictable:0kB writepending:260kB present:786432kB managed:724524kB mlocked:0kB kernel_stack:3544kB pagetables:2560kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.248983][ T5029] ================================================================== [ 215.257055][ T5029] BUG: KCSAN: data-race in get_scan_count / mem_cgroup_update_lru_size [ 215.265267][ T5029] [ 215.267580][ T5029] write to 0xffff88812bd0fa00 of 8 bytes by task 11846 on cpu 0: [ 215.275274][ T5029] mem_cgroup_update_lru_size+0x53/0xf0 [ 215.280806][ T5029] move_pages_to_lru+0x2f5/0x9d0 [ 215.285740][ T5029] shrink_inactive_list+0x29b/0x610 [ 215.290918][ T5029] shrink_lruvec+0x38a/0x620 [ 215.295488][ T5029] shrink_node_memcgs+0x1be/0x360 [ 215.300493][ T5029] shrink_node+0x94e/0x1170 [ 215.304976][ T5029] shrink_zones+0x2af/0x490 [ 215.309462][ T5029] do_try_to_free_pages+0x1b4/0x6c0 [ 215.314642][ T5029] try_to_free_pages+0x38d/0x8d0 [ 215.319588][ T5029] __alloc_pages_slowpath+0x50a/0x970 [ 215.324944][ T5029] __alloc_pages_nodemask+0x235/0x390 [ 215.330302][ T5029] alloc_pages_current+0x21d/0x310 [ 215.335403][ T5029] __vmalloc_node_range+0x2bf/0x530 [ 215.340599][ T5029] vmalloc_user+0x55/0x60 [ 215.344913][ T5029] vb2_vmalloc_alloc+0x8f/0x120 [ 215.349744][ T5029] __vb2_queue_alloc+0x4fe/0xaf0 [ 215.354664][ T5029] vb2_core_create_bufs+0x334/0x570 [ 215.359843][ T5029] vb2_create_bufs+0x419/0x560 [ 215.364606][ T5029] v4l2_m2m_ioctl_create_bufs+0xb4/0xc0 [ 215.370144][ T5029] v4l_create_bufs+0x15e/0x1b0 [ 215.374889][ T5029] __video_do_ioctl+0x65b/0x870 [ 215.379719][ T5029] video_usercopy+0x6da/0xfc0 [ 215.384376][ T5029] video_ioctl2+0x25/0x30 [ 215.388686][ T5029] v4l2_ioctl+0xc2/0xd0 [ 215.392824][ T5029] __se_sys_ioctl+0xc9/0x130 [ 215.397392][ T5029] __x64_sys_ioctl+0x3f/0x50 [ 215.401965][ T5029] do_syscall_64+0x51/0xb0 [ 215.406361][ T5029] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 215.412228][ T5029] [ 215.414526][ T5029] read to 0xffff88812bd0fa00 of 8 bytes by task 5029 on cpu 1: [ 215.422033][ T5029] get_scan_count+0x2b3/0x770 [ 215.426683][ T5029] shrink_lruvec+0x5a/0x620 [ 215.431156][ T5029] shrink_node_memcgs+0x1be/0x360 [ 215.436146][ T5029] shrink_node+0x94e/0x1170 [ 215.440615][ T5029] shrink_zones+0x2af/0x490 [ 215.445095][ T5029] do_try_to_free_pages+0x1b4/0x6c0 [ 215.450258][ T5029] try_to_free_pages+0x38d/0x8d0 [ 215.455162][ T5029] __alloc_pages_slowpath+0x50a/0x970 [ 215.460499][ T5029] __alloc_pages_nodemask+0x235/0x390 [ 215.465851][ T5029] alloc_pages_current+0x21d/0x310 [ 215.470940][ T5029] __page_cache_alloc+0x4f/0x120 [ 215.475841][ T5029] pagecache_get_page+0x494/0x8b0 [ 215.480843][ T5029] filemap_fault+0xba4/0x11e0 [ 215.485485][ T5029] ext4_filemap_fault+0x4b/0x60 [ 215.490356][ T5029] do_read_fault+0x41f/0x730 [ 215.494910][ T5029] handle_mm_fault+0x135d/0x1930 [ 215.499814][ T5029] do_user_addr_fault+0x393/0x810 [ 215.504813][ T5029] exc_page_fault+0xb8/0x330 [ 215.509371][ T5029] asm_exc_page_fault+0x1e/0x30 [ 215.514181][ T5029] [ 215.516487][ T5029] Reported by Kernel Concurrency Sanitizer on: [ 215.522607][ T5029] CPU: 1 PID: 5029 Comm: systemd-journal Not tainted 5.8.0-rc6-syzkaller #0 [ 215.531255][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.541277][ T5029] ================================================================== [ 215.549304][ T5029] Kernel panic - not syncing: panic_on_warn set ... [ 215.555866][ T5029] CPU: 1 PID: 5029 Comm: systemd-journal Not tainted 5.8.0-rc6-syzkaller #0 [ 215.564513][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.574548][ T5029] Call Trace: [ 215.577820][ T5029] dump_stack+0x10f/0x19d [ 215.582116][ T5029] panic+0x207/0x64a [ 215.585992][ T5029] ? vprintk_emit+0x44a/0x4f0 [ 215.590648][ T5029] kcsan_report+0x684/0x690 [ 215.595117][ T5029] ? kcsan_setup_watchpoint+0x453/0x4d0 [ 215.600626][ T5029] ? get_scan_count+0x2b3/0x770 [ 215.605441][ T5029] ? shrink_lruvec+0x5a/0x620 [ 215.610084][ T5029] ? shrink_node_memcgs+0x1be/0x360 [ 215.615248][ T5029] ? shrink_node+0x94e/0x1170 [ 215.619900][ T5029] ? shrink_zones+0x2af/0x490 [ 215.624542][ T5029] ? do_try_to_free_pages+0x1b4/0x6c0 [ 215.629878][ T5029] ? try_to_free_pages+0x38d/0x8d0 [ 215.634953][ T5029] ? __alloc_pages_slowpath+0x50a/0x970 [ 215.640473][ T5029] ? __alloc_pages_nodemask+0x235/0x390 [ 215.645984][ T5029] ? alloc_pages_current+0x21d/0x310 [ 215.651276][ T5029] ? __page_cache_alloc+0x4f/0x120 [ 215.656350][ T5029] ? pagecache_get_page+0x494/0x8b0 [ 215.661515][ T5029] ? filemap_fault+0xba4/0x11e0 [ 215.666329][ T5029] ? ext4_filemap_fault+0x4b/0x60 [ 215.671320][ T5029] ? do_read_fault+0x41f/0x730 [ 215.676047][ T5029] ? handle_mm_fault+0x135d/0x1930 [ 215.681133][ T5029] ? do_user_addr_fault+0x393/0x810 [ 215.686304][ T5029] ? exc_page_fault+0xb8/0x330 [ 215.691049][ T5029] ? asm_exc_page_fault+0x1e/0x30 [ 215.696053][ T5029] ? snd_bbfpro_ctl_put+0x107/0x230 [ 215.701241][ T5029] kcsan_setup_watchpoint+0x453/0x4d0 [ 215.706593][ T5029] get_scan_count+0x2b3/0x770 [ 215.711239][ T5029] ? get_scan_count+0x4d0/0x770 [ 215.716057][ T5029] ? super_cache_count+0x171/0x190 [ 215.721132][ T5029] shrink_lruvec+0x5a/0x620 [ 215.725600][ T5029] ? do_shrink_slab+0xb2/0x5c0 [ 215.730332][ T5029] ? css_next_descendant_pre+0x4f/0x180 [ 215.735844][ T5029] ? __rcu_read_unlock+0x4b/0x260 [ 215.740836][ T5029] ? vmpressure+0xd4/0x260 [ 215.745217][ T5029] shrink_node_memcgs+0x1be/0x360 [ 215.750207][ T5029] shrink_node+0x94e/0x1170 [ 215.754681][ T5029] shrink_zones+0x2af/0x490 [ 215.759150][ T5029] do_try_to_free_pages+0x1b4/0x6c0 [ 215.764324][ T5029] try_to_free_pages+0x38d/0x8d0 [ 215.769227][ T5029] __alloc_pages_slowpath+0x50a/0x970 [ 215.774580][ T5029] __alloc_pages_nodemask+0x235/0x390 [ 215.779916][ T5029] alloc_pages_current+0x21d/0x310 [ 215.784988][ T5029] __page_cache_alloc+0x4f/0x120 [ 215.789891][ T5029] pagecache_get_page+0x494/0x8b0 [ 215.794896][ T5029] ? __do_page_cache_readahead+0x96/0xb0 [ 215.800496][ T5029] filemap_fault+0xba4/0x11e0 [ 215.805140][ T5029] ext4_filemap_fault+0x4b/0x60 [ 215.809956][ T5029] do_read_fault+0x41f/0x730 [ 215.814529][ T5029] handle_mm_fault+0x135d/0x1930 [ 215.819451][ T5029] do_user_addr_fault+0x393/0x810 [ 215.824448][ T5029] exc_page_fault+0xb8/0x330 [ 215.829005][ T5029] ? asm_exc_page_fault+0x8/0x30 [ 215.833923][ T5029] asm_exc_page_fault+0x1e/0x30 [ 215.838738][ T5029] RIP: 0033:0x7f6d637992e3 [ 215.843114][ T5029] Code: Bad RIP value. [ 215.847159][ T5029] RSP: 002b:00007ffd30bec028 EFLAGS: 00010246 [ 215.853190][ T5029] RAX: 0000000000000001 RBX: 000055d01e2e81e0 RCX: 00007f6d637992e3 [ 215.861143][ T5029] RDX: 0000000000000013 RSI: 00007ffd30bec030 RDI: 0000000000000008 [ 215.869081][ T5029] RBP: 00007ffd30bec220 R08: 0000007326bf4ecd R09: 00007ffd30bf1080 [ 215.877020][ T5029] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd30bec030 [ 215.884983][ T5029] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005ab17062edb32 [ 215.893951][ T5029] Kernel Offset: disabled [ 215.898257][ T5029] Rebooting in 86400 seconds..