en_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:58:38 executing program 2: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1410, 0x800, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x400) mlockall(0x3) mlockall(0x0) 01:58:38 executing program 1: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x0) mlockall(0x1) 01:58:38 executing program 3: mlockall(0x7) mlockall(0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x2710}, 0x1, 0x87b4, 0x400}, {{0x0, 0x2710}, 0x2, 0xaa76, 0x5}], 0x30) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) 01:58:38 executing program 5: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) socket(0x29, 0x800, 0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x8, 0x800], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) 01:58:38 executing program 0: mlockall(0x7) mlockall(0x3) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:58:39 executing program 2: mlockall(0x3) mlockall(0x0) 01:58:39 executing program 0: mlockall(0x0) mlockall(0x3) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:58:40 executing program 1: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 01:58:40 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x7, 0x2, 0xc3a, 0x1, 0x8001], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000140)={0x0, 0x10}) 01:58:40 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xa400, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) 01:58:40 executing program 5: mlockall(0x7) mlockall(0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x2710}, 0x1, 0x87b4, 0x400}, {{0x0, 0x2710}, 0x2, 0xaa76, 0x5}], 0x30) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) 01:58:41 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000000)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) mlockall(0x3) mlockall(0x0) 01:58:41 executing program 5: mlockall(0x7) mlockall(0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x2710}, 0x1, 0x87b4, 0x400}, {{0x0, 0x2710}, 0x2, 0xaa76, 0x5}], 0x30) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) 01:58:41 executing program 0: mlockall(0x0) mlockall(0x3) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:58:41 executing program 1: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 01:58:42 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2, 0x4, 0x9c], 0x3, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0xfff], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000100)={'vlan1\x00', 0x8, 0x5}) mlockall(0x2) 01:58:43 executing program 2: getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) mlockall(0x7) mlockall(0x0) 01:58:43 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f00000000c0)={0x0, "be1d272bd68548f9bffb98d020dfe2704d8df287b9c6f2e87ab8afec2b00962839933d526c057ef1f1bc3620438164e0e32f9c667e764841c50ce9a49bdd25e72a136a5186818f1c2cf665df067e079df5cb0a6311cda48a9df777318f151b78e620ccd79f3f54e7583fade11eed2218186ba676d0d8e46154f4acebd3240fd3"}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x1407, 0x10, 0x70bd2a, 0x25dfdbff}, 0x10}}, 0x8000) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:58:43 executing program 0: mlockall(0x0) mlockall(0x3) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:58:43 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000000)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) mlockall(0x3) mlockall(0x0) 01:58:43 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) bind$x25(r0, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) mlockall(0x2) 01:58:44 executing program 1: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 01:58:44 executing program 2: mlockall(0x3) mlockall(0x0) mlockall(0x2) 01:58:44 executing program 0: mlockall(0x7) mlockall(0x0) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:58:44 executing program 0: mlockall(0x7) mlockall(0x0) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:58:44 executing program 5: mlockall(0x0) mlockall(0x3) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:58:45 executing program 0: mlockall(0x7) mlockall(0x0) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:58:45 executing program 1: mlockall(0x7) mlockall(0x0) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:58:45 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa1942376b003e4417a6dc585750d962993fe6ce68436d055ae178576abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}], 0x0, 0x0, '\x00', 0x7, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x4, 0x200) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f00000001c0)=0x5) mlockall(0x2) 01:58:45 executing program 0: mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:58:45 executing program 3: mlockall(0x0) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) mlockall(0x2) mq_open(&(0x7f0000000000)=',%\x1f\x00', 0x803, 0x24, &(0x7f0000000040)={0x3, 0x5, 0x5e, 0x3}) mlockall(0x1) 01:58:46 executing program 2: r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x7fffffff, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r1, 0x0, 0x6, &(0x7f0000000240)='wpan0\x00'}, 0x30) mlockall(0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) r3 = socket$inet(0x2, 0xa, 0x3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) mlockall(0x0) 01:58:46 executing program 1: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) bind$x25(r0, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) mlockall(0x2) 01:58:46 executing program 5: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mlockall(0x3) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:58:46 executing program 0: mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 01:58:46 executing program 3: mlockall(0x7) mlockall(0x4) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) 01:58:47 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000001c0)={0x15}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)={0x5580af36, 0x1, 0x4, 0x10000, 0x1f, {0x77359400}, {0x1, 0x2, 0xe, 0x6, 0x7f, 0x81, "db538e7d"}, 0xfffffffd, 0x3, @fd=r1, 0x7ff, 0x0, r2}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000380)={0x4, 0xee, &(0x7f0000000280)="d28902eba1373af3463b192310524edb925be3672e80d51f360eada284def358525462a59b13d894a9dcbbcf80f7cd0cddba814b31de8ea4eb15335a7011a3cea23b2ca2e23940f7b56b8b236b0fd066ed2ee102eb988412eb7405424f98c01a12ca89bf0bc32d6041cf3f18f37af215ef7b68c2aa193988e50cc57252bb90ec03549688ba10517d2a5d1ef08a3bf4f6de67ddf9e14413472f01e48db7b65a25179d45643ae09b51f4a0dccf2437bfcfcf07fdbd9304505aa1c4067d8393918f03f58009672b20d0d32477c583796ff2478f8e5266cac621c791d0d68eaaa932b3c3b37bc2637d3190415fe627dc"}) mlockall(0x7) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) mlockall(0x3) r3 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:58:48 executing program 1: mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:58:48 executing program 5: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mlockall(0x3) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:58:48 executing program 0: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mlockall(0x3) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:58:48 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40500, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x2, 0x0, 0x8, 0xffffffff, 0x0], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000040)=0x4) mlockall(0x2) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x0, 0xe34}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14, &(0x7f0000000400)={&(0x7f0000000500)="ea9a0ff6ed56d7a813c7fc33781b95d4b6b7cc0f71a1fdbdced7b8f967365a223c05c25f53bab6d582afe6337eec5614aa62650a4df9eafbbb30ba91cdffda3bb02076ee92cc79ccfb438371f7a2643d04a3392c935604b6e56170d080bd93935f9cdd149dcf15b005551f6b3d40fc07c8985445ba22f22817854e6936db6fee1d28f0cc116f01efef163880062efa952d4fe8bc1d9961301098d27c9cbc85e54c2d42509e8b93ff06b88c67cd10baece2e2f3311652cb32559545131ca34ebcbb42ac8c8d", 0xc5}, 0x1, 0x0, 0x0, 0x8000}, 0x4000005) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000180)={r4, 0x3, 0x3, 0x5, 0xffe, 0x3, 0x9, 0x0, 0x10001, 0x31e5, 0x1, 0x301}) mlockall(0x2) 01:58:49 executing program 2: mlockall(0x3) mlockall(0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x5, 0x2, 0x1, 0x0, 0xf800000000000000, 0x7, 0x3, 0x6}, &(0x7f0000000040)={0x100, 0x9, 0xdbe, 0x5, 0x4, 0x6333, 0x401, 0x5}, &(0x7f0000000080)={0x2, 0x4, 0x81, 0x47e2, 0x1f, 0x7f, 0x1, 0x8001}, &(0x7f0000000100)={r0, r1/1000+10000}) mlockall(0x0) 01:58:50 executing program 1: r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x7fffffff, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r1, 0x0, 0x6, &(0x7f0000000240)='wpan0\x00'}, 0x30) mlockall(0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) r3 = socket$inet(0x2, 0xa, 0x3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) mlockall(0x0) 01:58:50 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) clock_gettime(0x1, &(0x7f0000000000)) mlockall(0x1) mlockall(0x2) 01:58:50 executing program 5: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40500, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x2, 0x0, 0x8, 0xffffffff, 0x0], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000040)=0x4) mlockall(0x2) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x0, 0xe34}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14, &(0x7f0000000400)={&(0x7f0000000500)="ea9a0ff6ed56d7a813c7fc33781b95d4b6b7cc0f71a1fdbdced7b8f967365a223c05c25f53bab6d582afe6337eec5614aa62650a4df9eafbbb30ba91cdffda3bb02076ee92cc79ccfb438371f7a2643d04a3392c935604b6e56170d080bd93935f9cdd149dcf15b005551f6b3d40fc07c8985445ba22f22817854e6936db6fee1d28f0cc116f01efef163880062efa952d4fe8bc1d9961301098d27c9cbc85e54c2d42509e8b93ff06b88c67cd10baece2e2f3311652cb32559545131ca34ebcbb42ac8c8d", 0xc5}, 0x1, 0x0, 0x0, 0x8000}, 0x4000005) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000180)={r4, 0x3, 0x3, 0x5, 0xffe, 0x3, 0x9, 0x0, 0x10001, 0x31e5, 0x1, 0x301}) mlockall(0x2) 01:58:50 executing program 0: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mlockall(0x3) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:58:50 executing program 4: mlockall(0x7) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140f, 0x4, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x40001) mlockall(0x3) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x10200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0x2c4800) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x9, 0x20, 0x9, 0x4910, 0x400, r1, 0x3, '\x00', r2, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x40) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mlockall(0x4) 01:58:51 executing program 2: mlockall(0x1) mlockall(0x0) 01:58:51 executing program 1: mlockall(0x7) mlockall(0x4) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) 01:58:52 executing program 0: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mlockall(0x3) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:58:52 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) getrusage(0xffffffffffffffff, &(0x7f0000000000)) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_setparam(r0, &(0x7f00000000c0)=0x81) 01:58:52 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x0) mlockall(0x1) 01:58:53 executing program 2: mlockall(0x1) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f00000000c0)={@broadcast, @broadcast}, &(0x7f0000000100)=0xc) mlockall(0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x80000001, 0x8000, 0x1, 0xffffffff, 0xd95, 0x4], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0xaf59, 0x79f9, 0x6, 0xff800000, 0x3, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x4, 0x4, 0x8, 0x7, 0x80], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000280)={0x310}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r3) 01:58:53 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x10000, 0x3, 0x6], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000280)={'veth1_virt_wifi\x00', 0x9, 0x1f}) mlockall(0x7) mlockall(0x3) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:58:53 executing program 3: mlockall(0x7) mlockall(0x0) mlockall(0x4) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) 01:58:53 executing program 5: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) getrusage(0xffffffffffffffff, &(0x7f0000000000)) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_setparam(r0, &(0x7f00000000c0)=0x81) 01:58:54 executing program 0: mlockall(0x7) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140f, 0x4, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x40001) mlockall(0x3) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x10200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0x2c4800) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x9, 0x20, 0x9, 0x4910, 0x400, r1, 0x3, '\x00', r2, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x40) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mlockall(0x4) 01:58:54 executing program 1: mlockall(0x7) mlockall(0x3) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:58:55 executing program 2: mlockall(0x3) r0 = socket(0x2c, 0x1, 0xfffffff9) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x10b140, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4040) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r5, 0x40104593, 0x0) ioctl$EVIOCSMASK(r5, 0x40104593, 0x0) ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f0000000000)={0x28, "2b48a21faced8c090b8095e024c4a386a4da90051fd0df3b4e23dfcdb7cbc3101fe62f3ad384a5bfa8703ceb8f65e3794f13df7da5b3c0f4962cad7deff666b5fdef17dc3b3d2fd5a31f6458f68bfc4a8fd333fc101e630b5a45dc93835562f3349241d4298079667924b07946b3919e3f5d886b9678c97b9a4f0623258d2ab6"}) mlockall(0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000100)={"957e890a3318bd684f71030eb582f265", r6, 0x0, {0x9, 0x1}, {0x12, 0x2}, 0x7, [0xc2, 0x6, 0x4, 0x4, 0x8001, 0x7, 0x5, 0x5, 0x0, 0x1f, 0x7, 0x100, 0xaa8d, 0x9, 0xfffffffffffffff8]}) 01:58:55 executing program 0: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1410, 0x800, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x400) mlockall(0x3) mlockall(0x0) 01:58:56 executing program 5: getresgid(&(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0)) mlockall(0x7) mlockall(0x3) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:58:56 executing program 1: getresgid(&(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0)) mlockall(0x7) mlockall(0x3) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:58:56 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x1, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000080)={r1, 0x5}) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) 01:58:56 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x5) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000001c0)={0x201, 0x1, &(0x7f00000000c0)=[0x80], &(0x7f0000000100)=[0x8001, 0x7, 0x0, 0x6, 0xfd, 0x9, 0xf6, 0x9], &(0x7f0000000140)=[0x45, 0x9], &(0x7f0000000180)=[0x6, 0x0, 0x9], 0x0, 0x1}) 01:58:56 executing program 0: mlockall(0x7) mlockall(0x0) mlockall(0x4) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) 01:58:57 executing program 2: mlockall(0x2) mlockall(0x0) 01:58:58 executing program 2: ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/210) mlockall(0x3) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid\x00') ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000003c0)={&(0x7f00000002c0)="6b32d21f92c682d229f8bf720fc5690e7560f9b27ff63d3be97244a5a514ab496d55a0a081314ae0f0a72762486a60d1904cb68122daa556d6b4b434a97ea7885392ddf969973c4fcc5e128bb840387e05b35f8df6118b16e4159561e9d65290b512602b77ee04b78763373e2582a05a5ca31c8d76e0b9ed0f1bdcd6ee57847ba892c728020da0e6750e923a3574ad2ebdefa92f058e00ba19e7b0f79a229b60a2500012e1fb1c06fcd53b58f7653ea336fb21bf01f5dc1a84a52b8e77e7f2ab9dbd9492b8f52b1dad6f0e7ede22c4a43fe8ecd21562167d", 0xd8}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000400)=[0x5, 0x8]) mlockall(0x0) timerfd_create(0x7, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x203040}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x1404, 0x200, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) 01:58:58 executing program 5: ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0xa465, 0x8, 0x1f, 0x7, 0x0, 0x8, 0x11, "51814c7b3a49d5f2515eb639c260eb131755cf35", "c84ad16e25317ada9a40326ca5c95711a394f654"}) mlockall(0x3) mlockall(0x0) 01:58:58 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x6) 01:58:58 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x8, 0x3, {r0}, {r1}, 0x4}) 01:58:58 executing program 0: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x1, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000080)={r1, 0x5}) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) 01:58:58 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f00000000c0)={0x6, 0x3f}) mlockall(0x7) mlockall(0x3) mlockall(0x2) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:58:59 executing program 2: mlockall(0x3) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000080)={r0, 0x3c}) mlockall(0x0) 01:59:00 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=""/100, &(0x7f0000000280)=[{0x8, 0xa3, 0x3f, &(0x7f0000000140)=""/163}]}) mlockall(0x4) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) write$evdev(r3, &(0x7f0000000300)=[{{0x0, 0x2710}, 0x15, 0x5, 0x6}, {{}, 0x12, 0xff, 0xb2f5}], 0x30) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0xa4000, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) mlockall(0x4) 01:59:00 executing program 5: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)={0x22, 0x4, 0xc, 0xa, 0xcc7, 0x81}) syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) mlockall(0x2) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x123000, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)={0x0, 0x3}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)=0x9) mlockall(0x4) 01:59:00 executing program 0: mlockall(0x0) mlockall(0x3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x4, 0x5]) 01:59:00 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) mlockall(0x2) 01:59:00 executing program 1: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000000)={0x2, 0x3, 0x1f, 0x1dd6, 0x3}) mlockall(0x2) 01:59:01 executing program 2: mlockall(0x3) mlockall(0x2) 01:59:01 executing program 4: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000280)={0x14, 0x43, &(0x7f0000000180)="cb42155e36eb0748b3672ef55bb8180ee065ed9084879d963fec202bbbad2999e77cd09bd8ae16653df2aedd905201610e10699093d60b00468bbe5243e4db0ef5de28"}) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x1) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x6, 0x2, 0x4, 0x200, 0x3]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x20]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4014) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000000c0)={0x36, "2fd6e91013452d30d12cc1646d56dc123f33b6ddbae9da1ae447d8114d026754fefc767bdf3540a2a3999449d43aacd4ba0496c0de0ee8fd390c48a30ad2ddf74f819921af26df2e2721f57b976cdd3886e7d3255a441e90375723de8d65940f417a7c5ed6bb87c17a0175d3e43c1fa558a2f9c5238fe5ff94438cd3973d43ba"}) mlockall(0x4) 01:59:02 executing program 5: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f00000000c0)={0x6, 0x3f}) mlockall(0x7) mlockall(0x3) mlockall(0x2) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:59:02 executing program 3: mlockall(0x7) mlockall(0x0) mlockall(0x6) mlockall(0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) mlockall(0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) mlockall(0x0) mlockall(0x2) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r3 = fork() sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x38, 0x0) r4 = fork() sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r5, 0x40104593, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd8, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x40) 01:59:02 executing program 0: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={'batadv_slave_1\x00', 0x8001, 0x5a}) mlockall(0x1) mlockall(0x2) 01:59:02 executing program 1: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x1) 01:59:03 executing program 2: mlockall(0x1) mlockall(0x4) 01:59:04 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@private0, @in=@broadcast}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) mlockall(0x3) socket$nl_rdma(0x10, 0x3, 0x14) mlockall(0x0) 01:59:04 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0x8001, 0x80000000, 0xa7b8, 0x800, 0x40, 0x1, 0x8bd, 0x2, 0x400}) 01:59:04 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x1) 01:59:04 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='virtio_transport_alloc_pkt\x00'}, 0x10) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) mlockall(0x639ec88348bffbd6) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x2, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:59:05 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mq_open(&(0x7f0000000000)='\x00', 0x2, 0x1, &(0x7f0000000040)={0x9, 0x1, 0x3db80, 0x8}) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffff7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4890) mlockall(0x2) 01:59:05 executing program 1: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000280)={0x14, 0x43, &(0x7f0000000180)="cb42155e36eb0748b3672ef55bb8180ee065ed9084879d963fec202bbbad2999e77cd09bd8ae16653df2aedd905201610e10699093d60b00468bbe5243e4db0ef5de28"}) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x1) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x6, 0x2, 0x4, 0x200, 0x3]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x20]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4014) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000000c0)={0x36, "2fd6e91013452d30d12cc1646d56dc123f33b6ddbae9da1ae447d8114d026754fefc767bdf3540a2a3999449d43aacd4ba0496c0de0ee8fd390c48a30ad2ddf74f819921af26df2e2721f57b976cdd3886e7d3255a441e90375723de8d65940f417a7c5ed6bb87c17a0175d3e43c1fa558a2f9c5238fe5ff94438cd3973d43ba"}) mlockall(0x4) 01:59:05 executing program 5: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x3f, 0xdc2f, {0xffffffffffffffff}, {0xee01}, 0x3}) sched_rr_get_interval(r1, &(0x7f0000000100)) 01:59:05 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@private0, @in=@broadcast}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) mlockall(0x3) socket$nl_rdma(0x10, 0x3, 0x14) mlockall(0x0) 01:59:06 executing program 2: mlockall(0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) mlockall(0x0) mlockall(0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001300)={0x0}, &(0x7f0000001340)=0xc) sched_setparam(r3, &(0x7f0000001380)=0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001180)={0x4, 0x4, 0xff, 0x5, 0xc40, r2, 0x3f, '\x00', 0x0, r0, 0x1, 0x2, 0x4}, 0x40) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000012c0)={&(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0], 0x4, 0x1, 0x3, 0x3}) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="87a859a8196f5f711bddaa3f159d0dee586812e3a6f262c27ca1671ba5024a2e8e5b404d95d306721968ddd312c787446763211a62b3b029c4468ab60dc74160fb2a9d0a182d616145c8aff8f3ef79e7313f95f49534cd549f5e1671a9a60e2c8ca486a41bec540ee44082c769c9952a71a613021b4c6ba3fe5eaed3bd55642002140f092689336936e2a00d2c3464319fb0527223", 0x95, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000001140)={r5, 0x1000, &(0x7f0000000140)=""/4096}) 01:59:06 executing program 2: mlockall(0x3) mlockall(0x4) 01:59:06 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x193005, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f00000000c0)={0x7, 0x6, 0x6, 0x7, 0x3f, 0x12, 0x19, "8867f2aa9159193c8b967552c2d827ff27aef954", "05a8413e7b5ddb431e8a939d40c176fa8b262f53"}) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) socket$inet6(0xa, 0x6, 0xc918) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) 01:59:07 executing program 5: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x3f, 0xdc2f, {0xffffffffffffffff}, {0xee01}, 0x3}) sched_rr_get_interval(r1, &(0x7f0000000100)) 01:59:07 executing program 1: mlockall(0x3) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) connect$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1df841, 0x0) socket(0x18, 0x3, 0xbf07) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0xe, 0x4, 0x4, 0xb, 0x100}) mlockall(0x2) 01:59:07 executing program 0: mlockall(0x3) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) connect$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1df841, 0x0) socket(0x18, 0x3, 0xbf07) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0xe, 0x4, 0x4, 0xb, 0x100}) mlockall(0x2) 01:59:08 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000100)=0x2) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='fsi_master_gpio_break\x00'}, 0x10) 01:59:08 executing program 5: getresgid(&(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0)) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340), 0x3200c0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000000)={0x38}, 0x38, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000180)={0x401, 0x2, {r1}, {r2}, 0x527, 0x91}) r3 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000300)={0x20, 0x1a, 0x3, 0x3, "ff0f6ba24c5d55206da7ef2ee9752dc2a6823eba79d84c10653532e16ad30a48"}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000240)={0x0, 0x1}) 01:59:08 executing program 2: mlockall(0x3) mlockall(0x0) mlockall(0x3) 01:59:09 executing program 0: getresgid(&(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0)) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340), 0x3200c0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000000)={0x38}, 0x38, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000180)={0x401, 0x2, {r1}, {r2}, 0x527, 0x91}) r3 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000300)={0x20, 0x1a, 0x3, 0x3, "ff0f6ba24c5d55206da7ef2ee9752dc2a6823eba79d84c10653532e16ad30a48"}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000240)={0x0, 0x1}) 01:59:09 executing program 3: mlockall(0x7) mlockall(0x6) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x0) mlockall(0x2) 01:59:09 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) syz_init_net_socket$x25(0x9, 0x5, 0x0) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000100)={0x0, 0x12}) mlockall(0x4) 01:59:09 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x1) 01:59:10 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f00000000c0)={0x1}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:59:10 executing program 0: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0xfffffffffffffffe, 0x72d02) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x240) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000001c0)={0x41, 0x0, &(0x7f0000000100)}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000180)=0x3f) 01:59:10 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x18, 0xffffff01, 0xd0bd0a5, 0x4, 0x9, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x40) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:59:11 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x7fffffff, 0x9, 0x4, 0x70000, 0x1680, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x7, 0x2, 0x1f, "d55d81c1"}, 0x240, 0x1, @fd=r0, 0x1004, 0x0, 0xffffffffffffffff}) mlockall(0x3) mlockall(0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000080)=""/232) 01:59:11 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x3) mlockall(0x2) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"183c41781c30cc3055c928047ed4faa5", r0, 0x0, {0x8, 0x5}, {0x7, 0x1f}, 0xfffffffffffffffd, [0x6, 0xfffffffffffff001, 0x9, 0x9, 0xff, 0x2dc25ce3, 0x1, 0x3, 0x4, 0x5e, 0x1ff, 0xf7f, 0x3, 0xffffffff, 0x7, 0x5]}) 01:59:11 executing program 5: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) socket(0x4, 0x5, 0xe9e) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="ed15b45f690823aef5a3b75b4e19948fda77ec222b38b0991282e9b4b313223579951d595bde558cdaee6e374d2d3f70102407da962a25909f43b6cb8e48f54ba680654c39456ee76958e034ad10503f02", 0x51}, 0x1, 0x0, 0x0, 0x40}, 0x8014) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, 0xc289e986734800d3) mlockall(0x1) mlockall(0x2) 01:59:12 executing program 0: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001014000226bd0400fcdbdf2508004a00020000000800010000ce5b15000200000008004f000100cbf22f1f02e5296a1a83cde58f93ec81134954e55ca57598ef8aca3c88462c5901a29ee4c6ab11512bea2bc09b1a409dad1992f3c95085b95796a4202c659388e2ff7b09f1bb26fe2064316248e902ee731a8c8d1045ee27d6bf59d0e195396475e4ed8ea94c354c332093715740e156f124cf79baa85682d96556e6f1c8c1560f669422a512507a721f1045efc86f9ac15007486bfef342d2b5a8c064c1b18f24fafbf335fd000000000000000000000000000000009dc3aa423f4b78c8158d9ab9983d8bf56a923bff17b6e40fab4a334b617f340e0127423d2d0f5efc1f74b787938e0d9ecb7e7db9ed2f9a7b6adb6f9c05a6e97ce87487d808173b3b9f7f33b6a6ec8c763500dff97987689bea12219c938713bbb029a7dc90f2988a115a13c2ebeebd3a98f13165ff44296a8203f982a43ef10000000000000000000000000000000091501923f0316908630537c26df0a36d6acd6342f82e57b14f2ff19e3a0c83a639d38b311c3e689da827997f80c45826934ffce24cd69a0e27080f2e59f4b28cfb7ec75fe931e4b0d436cf4faa4d14bc1c4b3ab740ea3781e613fe1b414e50ba599c1cb396be26fd4612b16b9148f7861b9acded66e623e60747c1332cd99e1ad3314a"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000003c0)={0x57, "b9605b75edc14f08ab0d53844053ad4ee65b12dd2ef72dc1e836c385001765e32003bed6844d2038944c8926f3ea1051d043d7eb118a3f99a42104027d025b5225be2c66ce178b94b727968a6b2ee41af4dfa14a6088be8fc1c452717a2c7b58dc2767051947366c4a5ad0266e63004a1442bbfa77edb69c302aa20f7668c70f"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x2f9dc21673aa4c7a, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) mlockall(0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000101400012abd7000ffdbdf250800010001000000b1e2d3c1c03d031dc5fbd669f612e117ded4cfa0677c39dd93f542e935809fea9190ca56acce1ccbf8d965df3a7b4910f0a5b7ffba7a0d122d446bc88a75c23cb53b1866d8eed9aae89c9978dbb5ba794289170e4c626c041ebae5876d1caed5353ef0e5794de65c0c715cbc8615a244862ce176846a45035d633b2d8132f4b7a3ddefe4169892b9f39d071d"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x300008c1) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r3}) mlockall(0x2) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0xef75, 0x8, 0xf8c, 0x5, 0x3745, 0xaaf9}) 01:59:12 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x18, 0xffffff01, 0xd0bd0a5, 0x4, 0x9, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x40) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:59:13 executing program 2: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x82, &(0x7f0000000000)=""/130, 0xd0, &(0x7f00000000c0)=""/208, 0x7f, &(0x7f00000001c0)=""/127}) mlockall(0x3) mlockall(0x0) fork() r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_rr_get_interval(r0, &(0x7f0000000280)) 01:59:13 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x1) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:59:13 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) mlockall(0x4) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000), 0x4) 01:59:13 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x7fffffff, 0x9, 0x4, 0x70000, 0x1680, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x7, 0x2, 0x1f, "d55d81c1"}, 0x240, 0x1, @fd=r0, 0x1004, 0x0, 0xffffffffffffffff}) mlockall(0x3) mlockall(0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000080)=""/232) 01:59:13 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x18, 0xffffff01, 0xd0bd0a5, 0x4, 0x9, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x40) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:59:14 executing program 0: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x20, 0xb, 0x4, 0x70000, 0x400, {r0, r1/1000+60000}, {0x3, 0x2, 0xff, 0x8, 0x1, 0x6, "1626025b"}, 0x4, 0x1, @planes=&(0x7f0000000100)={0xb7ba, 0x40, @userptr, 0x8000}, 0x1}) mlockall(0x3) r2 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:59:14 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000d1400012caf7000fedbdf2508003e000100000008003e000300000008003e0003000000080003000959455c0dbf1cfe020000000800030001000000080001000200000008003e00040000000800010001000000"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x1) 01:59:15 executing program 1: mlockall(0x7) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@empty, @loopback}, &(0x7f0000000040)=0xc) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) 01:59:15 executing program 4: r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000100)) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={'veth1_macvtap\x00', 0x1, 0x5}) mlockall(0x7) mlockall(0x3) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d1a, 0x2c0c02) mlockall(0x4) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x20600, 0x0) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x7, 'veth0_to_team\x00'}) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000140)) mlockall(0x6) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000480)={0x0, 0x3}) mlockall(0x4) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, 0x0) r5 = fork() ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000180)={0x7712, 0x80000001, {r5}, {0xffffffffffffffff}, 0x9, 0x4}) 01:59:15 executing program 0: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x20, 0xb, 0x4, 0x70000, 0x400, {r0, r1/1000+60000}, {0x3, 0x2, 0xff, 0x8, 0x1, 0x6, "1626025b"}, 0x4, 0x1, @planes=&(0x7f0000000100)={0xb7ba, 0x40, @userptr, 0x8000}, 0x1}) mlockall(0x3) r2 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:59:15 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000000)=""/247) 01:59:16 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)) mlockall(0x3) mlockall(0x0) mlockall(0x2) 01:59:17 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000d1400012caf7000fedbdf2508003e000100000008003e000300000008003e0003000000080003000959455c0dbf1cfe020000000800030001000000080001000200000008003e00040000000800010001000000"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x1) 01:59:17 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x2) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)) 01:59:17 executing program 1: mlockall(0x7) mlockall(0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000000)=""/247) 01:59:17 executing program 0: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x20, 0xb, 0x4, 0x70000, 0x400, {r0, r1/1000+60000}, {0x3, 0x2, 0xff, 0x8, 0x1, 0x6, "1626025b"}, 0x4, 0x1, @planes=&(0x7f0000000100)={0xb7ba, 0x40, @userptr, 0x8000}, 0x1}) mlockall(0x3) r2 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:59:17 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) 01:59:18 executing program 2: r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000340)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000040)={0x46, "0414064672c15fcdcd7d52adc54e6ba3f02a423f7fb63ac6d6fbb2baf2256490e369bd5623c41d3e7570aa0fe8eed7b836c3de142447e552f30b49cbed85b258060e02dbcdff166aad37f75ff0c39fb3b642d312b2f0e5964b704d0664502f3f882b37cf48254187e1114b6ecb37af6c767e55ff38836e6aac9faa72f552a50b"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"0a7c5f0e28dba46c0001414c1e00", 0x0, 0x0, {0x401, 0x1}, {0x6fdb, 0xffff0000}, 0xfffffffffffffffa, [0x4004, 0x100000001, 0x4, 0x400, 0x2b, 0x2, 0x8, 0x7, 0x8, 0x7fff, 0x6, 0xb5d1, 0xff, 0x8, 0x61e9]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000300)=r3) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setgid(r4) mlockall(0x3) mlockall(0x0) 01:59:19 executing program 1: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x82, &(0x7f0000000000)=""/130, 0xd0, &(0x7f00000000c0)=""/208, 0x7f, &(0x7f00000001c0)=""/127}) mlockall(0x3) mlockall(0x0) fork() r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_rr_get_interval(r0, &(0x7f0000000280)) 01:59:19 executing program 5: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) mlockall(0x4) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000), 0x4) 01:59:19 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) getgroups(0x1, &(0x7f00000000c0)=[0xffffffffffffffff]) mlockall(0x4) 01:59:19 executing program 0: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x1) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:59:19 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x12, 0x78, &(0x7f0000000000)="997142e17b3c827e7571d7dcdd955b841b6a5794c08e64250dd3f13530527840d29279ffd492d1e9fb898fdbade240fe8ec2224a68d2846e7cf99e23b72673e42a817ae7a44856d3588e2ce87a7691a8260f3dc6708ac95a622c4b67327663fd0d2bdad000c0c0a715afa6c177368bcf6333441ced27e22f"}) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0xa) 01:59:20 executing program 2: mlockall(0x3) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) mlockall(0x0) 01:59:20 executing program 1: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x82, &(0x7f0000000000)=""/130, 0xd0, &(0x7f00000000c0)=""/208, 0x7f, &(0x7f00000001c0)=""/127}) mlockall(0x3) mlockall(0x0) fork() r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_rr_get_interval(r0, &(0x7f0000000280)) 01:59:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2dc, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000440)={0x4, &(0x7f0000000040)=""/72, &(0x7f00000003c0)=[{0x9, 0x69, 0x7429, &(0x7f0000000480)=""/105}, {0x1, 0xa1, 0x3f, &(0x7f0000000140)=""/161}, {0x4, 0x90, 0xb8, &(0x7f0000000200)=""/144}, {0x3, 0xf0, 0x4, &(0x7f00000002c0)=""/240}]}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x80, 0x7, {0x0}, {}, 0x7, 0x80000000}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000580)={0x7, 0x4, {r2}, {r3}, 0x6, 0x8}) mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) 01:59:21 executing program 5: r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000340)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000040)={0x46, "0414064672c15fcdcd7d52adc54e6ba3f02a423f7fb63ac6d6fbb2baf2256490e369bd5623c41d3e7570aa0fe8eed7b836c3de142447e552f30b49cbed85b258060e02dbcdff166aad37f75ff0c39fb3b642d312b2f0e5964b704d0664502f3f882b37cf48254187e1114b6ecb37af6c767e55ff38836e6aac9faa72f552a50b"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"0a7c5f0e28dba46c0001414c1e00", 0x0, 0x0, {0x401, 0x1}, {0x6fdb, 0xffff0000}, 0xfffffffffffffffa, [0x4004, 0x100000001, 0x4, 0x400, 0x2b, 0x2, 0x8, 0x7, 0x8, 0x7fff, 0x6, 0xb5d1, 0xff, 0x8, 0x61e9]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000300)=r3) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setgid(r4) mlockall(0x3) mlockall(0x0) 01:59:21 executing program 0: r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000100)) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={'veth1_macvtap\x00', 0x1, 0x5}) mlockall(0x7) mlockall(0x3) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d1a, 0x2c0c02) mlockall(0x4) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x20600, 0x0) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x7, 'veth0_to_team\x00'}) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000140)) mlockall(0x6) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000480)={0x0, 0x3}) mlockall(0x4) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, 0x0) r5 = fork() ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000180)={0x7712, 0x80000001, {r5}, {0xffffffffffffffff}, 0x9, 0x4}) 01:59:22 executing program 2: getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)) getrusage(0x0, &(0x7f0000000080)) mlockall(0x3) mlockall(0x0) 01:59:22 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000180)={0x92, 0xb8}) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f00000000c0)={0x34, "f82e14ca9541422cb3859cdd7409f0773410708a9c9d0f7bc09e7a1f6dffa5e545cfbd0c3acec358808fbda044d08c5a97699d8386149e47c18290e70596aa0832346751d30b329b0d5068f88b5dbd39b040e730cdaccaeae33c41f04e1e0dcd4e982e93eab3e5d2c01700180d1dab3b95c5152c5ada95482e23a818e69d35ca"}) mlockall(0x4) 01:59:22 executing program 1: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x82, &(0x7f0000000000)=""/130, 0xd0, &(0x7f00000000c0)=""/208, 0x7f, &(0x7f00000001c0)=""/127}) mlockall(0x3) mlockall(0x0) fork() r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_rr_get_interval(r0, &(0x7f0000000280)) 01:59:22 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) mlockall(0x3) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@multicast1}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_LINK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x44004) mlockall(0x1) mlockall(0x2) 01:59:23 executing program 5: r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000100)) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={'veth1_macvtap\x00', 0x1, 0x5}) mlockall(0x7) mlockall(0x3) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d1a, 0x2c0c02) mlockall(0x4) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x20600, 0x0) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x7, 'veth0_to_team\x00'}) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000140)) mlockall(0x6) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000480)={0x0, 0x3}) mlockall(0x4) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, 0x0) r5 = fork() ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000180)={0x7712, 0x80000001, {r5}, {0xffffffffffffffff}, 0x9, 0x4}) 01:59:23 executing program 0 (fault-call:2 fault-nth:0): mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1768.168816] FAULT_INJECTION: forcing a failure. [ 1768.168816] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.209911] CPU: 0 PID: 12874 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1768.217831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1768.227195] Call Trace: [ 1768.229795] dump_stack+0x1b2/0x281 [ 1768.233457] should_fail.cold+0x10a/0x149 [ 1768.237797] should_failslab+0xd6/0x130 [ 1768.241775] kmem_cache_alloc_node+0x263/0x410 [ 1768.246367] copy_process.part.0+0x17d3/0x71c0 [ 1768.250970] ? get_pid_task+0xb8/0x130 [ 1768.254901] ? proc_fail_nth_write+0x7b/0x180 [ 1768.259409] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1768.264357] ? fsnotify+0x974/0x11b0 [ 1768.268077] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1768.273008] ? __handle_mm_fault+0x80f/0x4620 [ 1768.277542] ? __cleanup_sighand+0x40/0x40 [ 1768.281870] ? lock_downgrade+0x740/0x740 [ 1768.286015] ? vfs_write+0x35d/0x4d0 [ 1768.289735] _do_fork+0x184/0xc80 [ 1768.293190] ? fork_idle+0x270/0x270 [ 1768.296946] ? fput+0xb/0x140 [ 1768.300055] ? SyS_write+0x14d/0x210 [ 1768.303790] ? SyS_read+0x210/0x210 [ 1768.307437] ? __do_page_fault+0x159/0xad0 [ 1768.311688] ? do_syscall_64+0x4c/0x640 [ 1768.315662] ? kernel_thread+0x40/0x40 [ 1768.319547] do_syscall_64+0x1d5/0x640 [ 1768.323439] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1768.328627] RIP: 0033:0x4665f9 [ 1768.331810] RSP: 002b:00007f838ebad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1768.339528] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1768.346799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1768.354073] RBP: 00007f838ebad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1768.361379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.368752] R13: 00007ffee6f884af R14: 00007f838ebad300 R15: 0000000000022000 01:59:24 executing program 2: mlockall(0x3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2c, 0x600) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x6, 0x8, 0x81, 0x1, 0x3, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xe3, 0x141) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f00000000c0)={0x3ff, 0x101, 0x101, 0x8, 0x2, 0x7fff, 0x80000000}) mlockall(0x0) mlockall(0x6) 01:59:24 executing program 1: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x82, &(0x7f0000000000)=""/130, 0xd0, &(0x7f00000000c0)=""/208, 0x7f, &(0x7f00000001c0)=""/127}) mlockall(0x3) mlockall(0x0) fork() r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:59:25 executing program 0 (fault-call:2 fault-nth:1): mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1769.912726] FAULT_INJECTION: forcing a failure. [ 1769.912726] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1769.947061] CPU: 1 PID: 12891 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1769.954975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1769.964326] Call Trace: [ 1769.966921] dump_stack+0x1b2/0x281 [ 1769.970550] should_fail.cold+0x10a/0x149 [ 1769.974727] __alloc_pages_nodemask+0x22c/0x2720 [ 1769.979499] ? trace_hardirqs_on+0x10/0x10 [ 1769.983745] ? __might_fault+0x104/0x1b0 [ 1769.987816] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1769.992667] ? fs_reclaim_release+0xd0/0x110 [ 1769.997081] ? copy_process.part.0+0x17d3/0x71c0 [ 1770.001838] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1770.007325] ? rcu_read_lock_sched_held+0x16c/0x1d0 01:59:25 executing program 3: mlockall(0x7) mlockall(0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x141a41a6, 0x8000, 0x9, 0x7f, 0x7], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) mlockall(0x3) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) [ 1770.012347] ? kmem_cache_alloc_node+0x38b/0x410 [ 1770.017113] copy_process.part.0+0x265/0x71c0 [ 1770.021617] ? get_pid_task+0xb8/0x130 [ 1770.025713] ? proc_fail_nth_write+0x7b/0x180 [ 1770.030214] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1770.035153] ? fsnotify+0x974/0x11b0 [ 1770.038872] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1770.043803] ? __handle_mm_fault+0x80f/0x4620 [ 1770.048305] ? __cleanup_sighand+0x40/0x40 [ 1770.052559] ? lock_downgrade+0x740/0x740 [ 1770.056708] ? vfs_write+0x35d/0x4d0 [ 1770.060428] _do_fork+0x184/0xc80 [ 1770.063885] ? fork_idle+0x270/0x270 [ 1770.067599] ? fput+0xb/0x140 [ 1770.070709] ? SyS_write+0x14d/0x210 [ 1770.074422] ? SyS_read+0x210/0x210 [ 1770.078159] ? __do_page_fault+0x159/0xad0 [ 1770.082396] ? do_syscall_64+0x4c/0x640 [ 1770.086374] ? kernel_thread+0x40/0x40 [ 1770.090263] do_syscall_64+0x1d5/0x640 [ 1770.094157] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1770.099353] RIP: 0033:0x4665f9 [ 1770.102538] RSP: 002b:00007f838ebad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 01:59:25 executing program 5 (fault-call:4 fault-nth:0): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 1770.110276] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1770.117726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1770.125088] RBP: 00007f838ebad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.132363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1770.139635] R13: 00007ffee6f884af R14: 00007f838ebad300 R15: 0000000000022000 [ 1770.230243] FAULT_INJECTION: forcing a failure. [ 1770.230243] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1770.303423] CPU: 1 PID: 12900 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1770.311340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1770.320721] Call Trace: [ 1770.323333] dump_stack+0x1b2/0x281 [ 1770.326972] should_fail.cold+0x10a/0x149 [ 1770.331136] __alloc_pages_nodemask+0x22c/0x2720 [ 1770.335908] ? trace_hardirqs_on+0x10/0x10 [ 1770.340179] ? trace_hardirqs_on+0x10/0x10 [ 1770.344420] ? __lock_acquire+0x5fc/0x3f20 [ 1770.348665] ? gfp_pfmemalloc_allowed+0x150/0x150 01:59:25 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) mlockall(0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 1770.353513] ? lock_acquire+0x170/0x3f0 [ 1770.357492] ? reacquire_held_locks+0xb5/0x3f0 [ 1770.362250] ? __lock_acquire+0x5fc/0x3f20 [ 1770.366496] alloc_pages_vma+0xd2/0x6d0 [ 1770.370471] wp_page_copy+0x1f5/0x25c0 [ 1770.374393] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1770.378892] ? __lock_acquire+0x5fc/0x3f20 [ 1770.383138] do_wp_page+0x245/0x1db0 [ 1770.386865] ? __handle_mm_fault+0x129c/0x4620 [ 1770.391450] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1770.396128] __handle_mm_fault+0x234f/0x4620 [ 1770.400643] ? lock_downgrade+0x740/0x740 [ 1770.404791] ? vm_insert_page+0x7c0/0x7c0 [ 1770.408950] ? do_raw_spin_unlock+0x164/0x220 [ 1770.413540] ? mark_held_locks+0xa6/0xf0 [ 1770.417627] handle_mm_fault+0x455/0x9c0 [ 1770.421696] __get_user_pages+0x4e9/0x1270 [ 1770.425937] ? follow_page_mask+0x18a0/0x18a0 [ 1770.430557] ? lock_acquire+0x170/0x3f0 [ 1770.434562] populate_vma_page_range+0x17b/0x210 [ 1770.439326] __mm_populate+0x195/0x2c0 [ 1770.443216] ? populate_vma_page_range+0x210/0x210 [ 1770.448145] ? security_capable+0x88/0xb0 [ 1770.452300] SyS_mlockall+0x3ff/0x520 [ 1770.456100] ? SyS_munlock+0xf0/0xf0 [ 1770.459810] do_syscall_64+0x1d5/0x640 [ 1770.463701] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1770.469012] RIP: 0033:0x4665f9 [ 1770.472216] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1770.479921] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1770.487186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1770.495149] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.502441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1770.509741] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 01:59:26 executing program 2: mlockall(0x3) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000000)="3f8448277cf2e48dfbd2b3e1fe76dcf4ff19ed7f32bd444623cc59034c2ff7da2924ec1cf531292f924c5f72d07e913f3306455b1839b8731097ce9bdb3cc92260978f6d787476aa1bfa4b733e78a78b349f50d11d43d9b3bb77cc0949cd7d51a5d114f94a929e3ffa51970587cb7fe68092ca1b202c078729178f3f581967065d17f63abdc371677b0880b65d85dc6376a219fca77205e12e724f15f9d9221ba9793e434f9e83b21161a7c0990ad46f71e0b0a1d9b90a431f054dbbf732c10929870fe63b44ef925edd52b16eab53770e16d5b19bdf478bbd5a9ab1f09e", 0xde, 0x4, &(0x7f0000000140)={r1, r2+60000000}) mlockall(0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) getgroups(0x0, &(0x7f0000000340)) ioctl$EVIOCSMASK(r5, 0x40104593, 0x0) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f0000000280)={0x8001, 0x851a, 0x1ff, 0xc2, 0x8, 0x4}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x103, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040805}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) 01:59:26 executing program 1: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x82, &(0x7f0000000000)=""/130, 0xd0, &(0x7f00000000c0)=""/208, 0x7f, &(0x7f00000001c0)=""/127}) mlockall(0x3) mlockall(0x0) fork() sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:59:26 executing program 0: mlockall(0x3) fork() ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000000)=[0x401], &(0x7f0000000140), &(0x7f0000000080)=[0x8, 0x8, 0x6, 0x6], &(0x7f00000000c0), 0x0, 0x1}) sched_getattr(0x0, 0x0, 0x0, 0x0) mlockall(0x4) 01:59:27 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000000)={0x4, 0x6}) 01:59:27 executing program 1: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x82, &(0x7f0000000000)=""/130, 0xd0, &(0x7f00000000c0)=""/208, 0x7f, &(0x7f00000001c0)=""/127}) mlockall(0x3) mlockall(0x0) fork() sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:59:28 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000140)={0x1, 0x1d, &(0x7f0000000100)=""/29}) mlockall(0x3) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:59:28 executing program 2: mlockall(0x3) mlockall(0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000100)={0x500, 0x5, &(0x7f0000000000)=[0x400, 0x5, 0x7f, 0x20000000, 0x3], &(0x7f0000000040)=[0xe5be, 0x2e, 0x9, 0x4], &(0x7f0000000080)=[0x4, 0x8001, 0x80000000, 0x1], &(0x7f00000000c0)=[0x4, 0x80000001, 0xff, 0x6], 0x0, 0xf21}) 01:59:28 executing program 5 (fault-call:4 fault-nth:1): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 1773.549732] FAULT_INJECTION: forcing a failure. [ 1773.549732] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1773.618786] CPU: 1 PID: 12955 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1773.626702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1773.636061] Call Trace: [ 1773.638654] dump_stack+0x1b2/0x281 [ 1773.642295] should_fail.cold+0x10a/0x149 [ 1773.646452] __alloc_pages_nodemask+0x22c/0x2720 [ 1773.651207] ? __lock_acquire+0x5fc/0x3f20 [ 1773.655463] ? trace_hardirqs_on+0x10/0x10 [ 1773.659707] ? trace_hardirqs_on+0x10/0x10 [ 1773.663948] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1773.668903] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1773.674354] ? _find_next_bit+0xdb/0x100 [ 1773.678420] ? __lock_acquire+0x5fc/0x3f20 [ 1773.682663] alloc_pages_vma+0xd2/0x6d0 [ 1773.686660] wp_page_copy+0x1f5/0x25c0 [ 1773.690552] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1773.695046] ? __lock_acquire+0x5fc/0x3f20 [ 1773.699291] do_wp_page+0x245/0x1db0 [ 1773.703007] ? __handle_mm_fault+0x129c/0x4620 [ 1773.707584] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1773.712253] __handle_mm_fault+0x234f/0x4620 01:59:29 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"9c2a79d2272511b8eb7abf328265a283", 0x0, 0x0, {0xff, 0x6}, {0x3fa, 0x6}, 0x2, [0x1, 0x1, 0xffff, 0x2, 0x8156, 0x0, 0xc2, 0xbe, 0x1, 0x1000, 0xa, 0xfd8, 0x3, 0x3fe, 0x100000000, 0x5]}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x1406, 0x4, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x4014) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000240)) mlockall(0x1) mlockall(0x0) mlockall(0x2) [ 1773.716661] ? lock_downgrade+0x740/0x740 [ 1773.720826] ? vm_insert_page+0x7c0/0x7c0 [ 1773.724970] ? do_raw_spin_unlock+0x164/0x220 [ 1773.729475] ? mark_held_locks+0xa6/0xf0 [ 1773.733539] handle_mm_fault+0x455/0x9c0 [ 1773.737604] __get_user_pages+0x4e9/0x1270 [ 1773.741845] ? follow_page_mask+0x18a0/0x18a0 [ 1773.746342] ? lock_acquire+0x170/0x3f0 [ 1773.750320] populate_vma_page_range+0x17b/0x210 [ 1773.755084] __mm_populate+0x195/0x2c0 [ 1773.758971] ? populate_vma_page_range+0x210/0x210 [ 1773.763898] ? security_capable+0x88/0xb0 [ 1773.768054] SyS_mlockall+0x3ff/0x520 [ 1773.771861] ? SyS_munlock+0xf0/0xf0 [ 1773.775578] do_syscall_64+0x1d5/0x640 [ 1773.779472] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1773.784669] RIP: 0033:0x4665f9 [ 1773.787853] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1773.795558] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1773.802827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1773.810094] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1773.817456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1773.824720] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 01:59:29 executing program 1: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x82, &(0x7f0000000000)=""/130, 0xd0, &(0x7f00000000c0)=""/208, 0x7f, &(0x7f00000001c0)=""/127}) mlockall(0x3) mlockall(0x0) fork() sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:59:29 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000000c0)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x100000001}) 01:59:30 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x908f, 0x7, 0x4, 0x1000, 0x7fffffff, {r1, r2/1000+60000}, {0x2, 0xc, 0xe8, 0x0, 0x3, 0x0, "5181cd28"}, 0x3, 0x3, @userptr=0xfffffffffffff800, 0x4}) mlockall(0x3) mlockall(0x0) mlockall(0x4) 01:59:30 executing program 1: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x82, &(0x7f0000000000)=""/130, 0xd0, &(0x7f00000000c0)=""/208, 0x7f, &(0x7f00000001c0)=""/127}) mlockall(0x3) mlockall(0x0) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:59:30 executing program 0: mlockall(0xc) mlockall(0x3) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), 0x4) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000080)={0x5e, "33a962e74370e61023f6acfbb5667f3c8449a27ad05904617feef57057dda6cf59989b32d9c212bdae1b96ea4e31668b7a886896f5ae3a6a4a67b1a169e800bc6898ab6e33d180bd2afb25ad456dc95eddd17df6604f1a984d1146a3e62e7b9241b451d023b73bfff08ca2a3b863c0aee85fe93d929ff311579ec1379634b9b4"}) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 01:59:30 executing program 3: mlockall(0x6) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={'batadv0\x00', 0x0, 0x1}) mlockall(0x1) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) mlockall(0x2) mlockall(0x7) 01:59:31 executing program 5 (fault-call:4 fault-nth:2): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 1775.954186] FAULT_INJECTION: forcing a failure. [ 1775.954186] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1776.020262] CPU: 0 PID: 12990 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1776.028174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1776.037524] Call Trace: [ 1776.040116] dump_stack+0x1b2/0x281 [ 1776.043745] should_fail.cold+0x10a/0x149 [ 1776.047894] __alloc_pages_nodemask+0x22c/0x2720 [ 1776.052706] ? __lock_acquire+0x5fc/0x3f20 [ 1776.056941] ? trace_hardirqs_on+0x10/0x10 [ 1776.061205] ? trace_hardirqs_on+0x10/0x10 [ 1776.065437] ? __lock_acquire+0x5fc/0x3f20 [ 1776.069676] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1776.074521] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1776.079968] ? _find_next_bit+0xdb/0x100 [ 1776.084043] ? __lock_acquire+0x5fc/0x3f20 [ 1776.088282] alloc_pages_vma+0xd2/0x6d0 [ 1776.092256] wp_page_copy+0x1f5/0x25c0 [ 1776.096155] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1776.100747] ? __lock_acquire+0x5fc/0x3f20 [ 1776.104981] do_wp_page+0x245/0x1db0 [ 1776.108699] ? __handle_mm_fault+0x129c/0x4620 [ 1776.113278] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1776.117947] __handle_mm_fault+0x234f/0x4620 [ 1776.123225] ? lock_downgrade+0x740/0x740 [ 1776.127372] ? vm_insert_page+0x7c0/0x7c0 [ 1776.131517] ? do_raw_spin_unlock+0x164/0x220 [ 1776.136015] ? mark_held_locks+0xa6/0xf0 [ 1776.140088] handle_mm_fault+0x455/0x9c0 [ 1776.144187] __get_user_pages+0x4e9/0x1270 [ 1776.148424] ? follow_page_mask+0x18a0/0x18a0 [ 1776.152936] ? lock_acquire+0x170/0x3f0 [ 1776.156913] populate_vma_page_range+0x17b/0x210 [ 1776.161669] __mm_populate+0x195/0x2c0 [ 1776.165565] ? populate_vma_page_range+0x210/0x210 [ 1776.170493] ? security_capable+0x88/0xb0 [ 1776.174658] SyS_mlockall+0x3ff/0x520 [ 1776.178458] ? SyS_munlock+0xf0/0xf0 [ 1776.182195] do_syscall_64+0x1d5/0x640 [ 1776.186175] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1776.191359] RIP: 0033:0x4665f9 [ 1776.194592] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1776.202321] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1776.209586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1776.216874] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1776.224227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1776.231509] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 01:59:31 executing program 1: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x82, &(0x7f0000000000)=""/130, 0xd0, &(0x7f00000000c0)=""/208, 0x7f, &(0x7f00000001c0)=""/127}) mlockall(0x3) mlockall(0x0) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:59:32 executing program 0: mlockall(0x7) mlockall(0x3) fork() r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000280)={0x6, 0xffff, 0x0, 0xb0, &(0x7f0000000000)=""/176, 0xdd, &(0x7f00000000c0)=""/221, 0xab, &(0x7f00000001c0)=""/171}) sched_getattr(0x0, 0x0, 0x0, 0x0) mlockall(0x5) 01:59:32 executing program 3: mlockall(0x7) mlockall(0x7) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2c, 0x7cf5, 0x9], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000080)={0xa, "7538066c2c267e59513b94761fadf912d9e625ecb55d87a0d71397f140e487018a2aac56706247209918c5a54572f02a9e41c9c64a6de38aeff28b4e7ae4853ab8aa0c95991f79ace542dab525cd1c458e2cd01ca81b03b9c111569c1e18367f72dd9e170320430321d985537ed24c664313fb06bfac2736c2758113b2c9f3c7"}) mlockall(0x1) mlockall(0x2) 01:59:32 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x2) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:59:33 executing program 2: mlockall(0x4) mlockall(0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xffff, 0x422480) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000080)={0x0, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 01:59:33 executing program 2: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x9, 0x6, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0x2b, 0x3f, 0xfe, 0x7f, "317a9c46"}, 0x6, 0x4, @offset=0x1}) mlockall(0x3) mlockall(0x0) 01:59:33 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000000c0)={0x77, "606168048575f3efac221df870d6b3c818f1c10e7046143a962cd04088eed0b12ed572793c8c7a0d9c24df17d56d67862409c0f851641dd2b66ecf46b5210759fdf57b11d258ae55d0ba4e0506db099580e08427beb05790c9c7719e8feb18ebcb315a92ebaf95ffe2465f2ea1b69b6456f0d7399ac1e5e453c37a25c677f331"}) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x0, 0xf4, &(0x7f0000000280)=""/244}) 01:59:33 executing program 5 (fault-call:4 fault-nth:3): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 01:59:33 executing program 1: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x82, &(0x7f0000000000)=""/130, 0xd0, &(0x7f00000000c0)=""/208, 0x7f, &(0x7f00000001c0)=""/127}) mlockall(0x3) mlockall(0x0) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) [ 1778.541377] FAULT_INJECTION: forcing a failure. [ 1778.541377] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1778.603934] CPU: 0 PID: 13031 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1778.611866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1778.621226] Call Trace: [ 1778.623821] dump_stack+0x1b2/0x281 [ 1778.627453] should_fail.cold+0x10a/0x149 [ 1778.631600] __alloc_pages_nodemask+0x22c/0x2720 [ 1778.636359] ? __lock_acquire+0x5fc/0x3f20 [ 1778.640597] ? trace_hardirqs_on+0x10/0x10 [ 1778.644834] ? __lock_acquire+0x5fc/0x3f20 [ 1778.649096] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1778.653946] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1778.659413] ? _find_next_bit+0xdb/0x100 [ 1778.664005] ? __lock_acquire+0x5fc/0x3f20 [ 1778.668358] alloc_pages_vma+0xd2/0x6d0 [ 1778.672339] wp_page_copy+0x1f5/0x25c0 [ 1778.676234] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1778.680816] ? __lock_acquire+0x5fc/0x3f20 [ 1778.685056] do_wp_page+0x245/0x1db0 [ 1778.688787] ? __handle_mm_fault+0x129c/0x4620 [ 1778.693369] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1778.698041] __handle_mm_fault+0x234f/0x4620 [ 1778.702450] ? lock_downgrade+0x740/0x740 [ 1778.706597] ? vm_insert_page+0x7c0/0x7c0 [ 1778.710742] ? do_raw_spin_unlock+0x164/0x220 [ 1778.715247] ? mark_held_locks+0xa6/0xf0 [ 1778.719311] handle_mm_fault+0x455/0x9c0 [ 1778.723379] __get_user_pages+0x4e9/0x1270 [ 1778.727619] ? follow_page_mask+0x18a0/0x18a0 [ 1778.732121] ? lock_acquire+0x170/0x3f0 [ 1778.736187] populate_vma_page_range+0x17b/0x210 [ 1778.740959] __mm_populate+0x195/0x2c0 [ 1778.745413] ? populate_vma_page_range+0x210/0x210 [ 1778.750342] ? security_capable+0x88/0xb0 [ 1778.754495] SyS_mlockall+0x3ff/0x520 [ 1778.758294] ? SyS_munlock+0xf0/0xf0 [ 1778.762004] do_syscall_64+0x1d5/0x640 [ 1778.765899] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1778.771111] RIP: 0033:0x4665f9 [ 1778.774301] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1778.782010] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1778.789278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1778.796631] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1778.803896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1778.811163] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 01:59:34 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x8401, 0x0) mlockall(0x2) 01:59:35 executing program 2: ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000000)=""/178) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000100)=""/62) mlockall(0x3) r1 = fork() sched_getattr(r1, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_rr_get_interval(r1, &(0x7f00000000c0)) mlockall(0x0) 01:59:35 executing program 1: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x82, &(0x7f0000000000)=""/130, 0xd0, &(0x7f00000000c0)=""/208, 0x7f, &(0x7f00000001c0)=""/127}) mlockall(0x3) fork() r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:59:35 executing program 0: ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000100)=""/4096) mlockall(0x7) mlockall(0x3) r0 = fork() r1 = fork() sched_getattr(r1, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_getattr(r1, &(0x7f0000001140)={0x38}, 0x38, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) sched_rr_get_interval(r0, &(0x7f0000001240)) write$evdev(r2, &(0x7f00000011c0)=[{{0x0, 0x2710}, 0x11, 0x81, 0x6}, {{0x0, 0x2710}, 0x0, 0x8000, 0x8}, {{0x77359400}, 0x12, 0x3}, {{0x0, 0x2710}, 0x4, 0xfff9, 0x6}, {{}, 0x14, 0x2}], 0x78) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xffff, 0x2, 0xfffffff8, 0x9], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) bind$802154_dgram(r3, &(0x7f00000000c0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x3) clock_gettime(0x7, &(0x7f0000000000)) r4 = fork() sched_rr_get_interval(r4, &(0x7f0000001100)) fork() 01:59:35 executing program 5 (fault-call:4 fault-nth:4): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 01:59:36 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/92) mlockall(0x2) [ 1780.730440] FAULT_INJECTION: forcing a failure. [ 1780.730440] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1780.790426] CPU: 0 PID: 13057 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1780.798347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1780.807709] Call Trace: [ 1780.810302] dump_stack+0x1b2/0x281 [ 1780.813937] should_fail.cold+0x10a/0x149 [ 1780.818109] __alloc_pages_nodemask+0x22c/0x2720 [ 1780.822869] ? __lock_acquire+0x5fc/0x3f20 [ 1780.827127] ? trace_hardirqs_on+0x10/0x10 [ 1780.831453] ? _raw_spin_unlock_irq+0x24/0x80 [ 1780.835955] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1780.841199] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1780.845698] ? finish_task_switch+0x178/0x610 [ 1780.850200] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1780.855045] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1780.860497] ? _find_next_bit+0xdb/0x100 [ 1780.864568] ? __lock_acquire+0x5fc/0x3f20 [ 1780.868837] alloc_pages_vma+0xd2/0x6d0 [ 1780.872836] wp_page_copy+0x1f5/0x25c0 [ 1780.876729] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1780.881224] ? __lock_acquire+0x5fc/0x3f20 [ 1780.885459] do_wp_page+0x245/0x1db0 [ 1780.889175] ? __handle_mm_fault+0x129c/0x4620 [ 1780.893791] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1780.898475] __handle_mm_fault+0x234f/0x4620 [ 1780.902893] ? lock_downgrade+0x740/0x740 [ 1780.907067] ? vm_insert_page+0x7c0/0x7c0 [ 1780.911324] ? do_raw_spin_unlock+0x164/0x220 [ 1780.915919] ? mark_held_locks+0xa6/0xf0 [ 1780.919991] handle_mm_fault+0x455/0x9c0 [ 1780.924065] __get_user_pages+0x4e9/0x1270 [ 1780.928306] ? follow_page_mask+0x18a0/0x18a0 [ 1780.932812] ? lock_acquire+0x170/0x3f0 [ 1780.936802] populate_vma_page_range+0x17b/0x210 [ 1780.941598] __mm_populate+0x195/0x2c0 [ 1780.946357] ? populate_vma_page_range+0x210/0x210 [ 1780.951289] ? security_capable+0x88/0xb0 [ 1780.955443] SyS_mlockall+0x3ff/0x520 [ 1780.959267] ? SyS_munlock+0xf0/0xf0 [ 1780.962980] do_syscall_64+0x1d5/0x640 [ 1780.966880] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1780.972127] RIP: 0033:0x4665f9 [ 1780.975308] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1780.983031] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1780.990293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1780.997556] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1781.004819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1781.012086] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 01:59:36 executing program 4: ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x16, 0xdf, &(0x7f00000000c0)="6af630ca51b0fe208970b6c9c626f98dd559d722530c85dd5b44863bd99d12d6a0d35f2609953bbd672298b407767bfcd0bd62fb729792983b2fffda3b55f7777008d678f8b4ef01fe321753faeb8b605bf11c8bd504d00d2a80d8b4d63eb110b50234d23fb329339b444cf7acb874105f25c67eb473c75aba4e26bd9940a98caad6b7fe09021ed8fe4da651ee9c1848288630f19f71c569fea989b1c30c283c2bd360b4ed2b740b67705b6f9dfe8646c09bc793ba947c587c72ddb6aa9ceb8c871f8e63a471ee833ef0c4518032a816b2fb59151b9a59ec928591463fb5af"}) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000300)={0x3, 0x77, &(0x7f0000000280)="5553b195f785b295feab6c2bae0c5c92d27f6152a4d85aa38085126f105b6fcdc6e864df929b8ac01604e2bd704b0e85dc0618336f6521f2e2356daf9131ecf8f1af0bb9db1b51021109452dbd9dd0656b546f7ddde25f9539e48668821856baa47156daf5104b1a0d660fe1e3aff939aa3e4a7482bea9"}) 01:59:36 executing program 1: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x82, &(0x7f0000000000)=""/130, 0xd0, &(0x7f00000000c0)=""/208, 0x7f, &(0x7f00000001c0)=""/127}) mlockall(0x3) fork() r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:59:37 executing program 3: mlockall(0x1) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000000)=""/2) syz_init_net_socket$x25(0x9, 0x5, 0x0) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) mlockall(0x2) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) 01:59:38 executing program 2: mlockall(0x3) mlockall(0x0) mlockall(0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) getgroups(0x3, &(0x7f0000000240)=[0xee01, 0x0, r2]) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8805}, 0x810) 01:59:38 executing program 1: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x82, &(0x7f0000000000)=""/130, 0xd0, &(0x7f00000000c0)=""/208, 0x7f, &(0x7f00000001c0)=""/127}) fork() r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:59:38 executing program 1: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x82, &(0x7f0000000000)=""/130, 0xd0, &(0x7f00000000c0)=""/208, 0x7f, &(0x7f00000001c0)=""/127}) fork() r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:59:38 executing program 1: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x82, &(0x7f0000000000)=""/130, 0xd0, &(0x7f00000000c0)=""/208, 0x7f, &(0x7f00000001c0)=""/127}) fork() r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:59:38 executing program 1: mlockall(0x3) fork() r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:59:38 executing program 5 (fault-call:4 fault-nth:5): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 01:59:39 executing program 0: mlockall(0x2) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1404, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004004) mlockall(0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 01:59:39 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x3) mlockall(0x2) r0 = socket(0x2b, 0x5, 0x80000001) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) [ 1783.753942] FAULT_INJECTION: forcing a failure. [ 1783.753942] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1783.812960] CPU: 0 PID: 13110 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1783.820876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1783.830245] Call Trace: [ 1783.833065] dump_stack+0x1b2/0x281 [ 1783.836709] should_fail.cold+0x10a/0x149 [ 1783.840878] __alloc_pages_nodemask+0x22c/0x2720 [ 1783.845638] ? __lock_acquire+0x5fc/0x3f20 [ 1783.849876] ? trace_hardirqs_on+0x10/0x10 [ 1783.854120] ? trace_hardirqs_on+0x10/0x10 [ 1783.858375] ? __lock_acquire+0x5fc/0x3f20 [ 1783.862618] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1783.867464] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1783.872921] ? _find_next_bit+0xdb/0x100 [ 1783.877006] ? __lock_acquire+0x5fc/0x3f20 [ 1783.881248] alloc_pages_vma+0xd2/0x6d0 [ 1783.885230] wp_page_copy+0x1f5/0x25c0 [ 1783.889123] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1783.893654] ? __lock_acquire+0x5fc/0x3f20 [ 1783.897915] do_wp_page+0x245/0x1db0 [ 1783.901632] ? __handle_mm_fault+0x129c/0x4620 [ 1783.906210] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1783.910882] __handle_mm_fault+0x234f/0x4620 [ 1783.915296] ? lock_downgrade+0x740/0x740 [ 1783.919442] ? vm_insert_page+0x7c0/0x7c0 [ 1783.923589] ? do_raw_spin_unlock+0x164/0x220 [ 1783.928093] ? mark_held_locks+0xa6/0xf0 [ 1783.932181] handle_mm_fault+0x455/0x9c0 [ 1783.936262] __get_user_pages+0x4e9/0x1270 [ 1783.940590] ? follow_page_mask+0x18a0/0x18a0 [ 1783.945092] ? lock_acquire+0x170/0x3f0 [ 1783.949069] populate_vma_page_range+0x17b/0x210 [ 1783.953832] __mm_populate+0x195/0x2c0 [ 1783.957725] ? populate_vma_page_range+0x210/0x210 01:59:39 executing program 0: mlockall(0x7) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1783.962653] ? security_capable+0x88/0xb0 [ 1783.966803] SyS_mlockall+0x3ff/0x520 [ 1783.970599] ? SyS_munlock+0xf0/0xf0 [ 1783.974346] do_syscall_64+0x1d5/0x640 [ 1783.978242] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1783.983427] RIP: 0033:0x4665f9 [ 1783.986611] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1783.994312] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1784.001598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1784.008864] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1784.016131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1784.023501] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 01:59:39 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x535642, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000001c0)={0x53, 0x2, 0x81, {0x5, 0x9}, {0x0, 0x8}, @ramp={0xfffd, 0x401, {0x3, 0x1, 0x3, 0x6}}}) bind$x25(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000240)) mlockall(0x5) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000100)={0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) 01:59:39 executing program 1: mlockall(0x0) fork() r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:59:40 executing program 1: mlockall(0x0) fork() r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:59:40 executing program 1: mlockall(0x0) fork() r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:59:40 executing program 2: mlockall(0x3) mlockall(0x7) mlockall(0x0) setns(0xffffffffffffffff, 0x8000000) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x58400) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)) 01:59:40 executing program 1: mlockall(0x3) fork() fork() sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 01:59:41 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x4) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100), 0x100) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) socket$inet_icmp(0x2, 0x2, 0x1) 01:59:41 executing program 3: mlockall(0x7) mlockall(0x3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/44) mlockall(0x4) 01:59:41 executing program 5 (fault-call:4 fault-nth:6): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 1785.873882] FAULT_INJECTION: forcing a failure. [ 1785.873882] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1785.936988] CPU: 1 PID: 13166 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1785.944891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1785.954241] Call Trace: [ 1785.956831] dump_stack+0x1b2/0x281 [ 1785.960460] should_fail.cold+0x10a/0x149 [ 1785.964620] __alloc_pages_nodemask+0x22c/0x2720 [ 1785.969376] ? __lock_acquire+0x5fc/0x3f20 [ 1785.973607] ? trace_hardirqs_on+0x10/0x10 [ 1785.977839] ? trace_hardirqs_on+0x10/0x10 [ 1785.982106] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1785.986949] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1785.992400] ? _find_next_bit+0xdb/0x100 [ 1785.998031] ? __lock_acquire+0x5fc/0x3f20 [ 1786.002268] alloc_pages_vma+0xd2/0x6d0 [ 1786.006244] wp_page_copy+0x1f5/0x25c0 [ 1786.010145] ? _vm_normal_page+0x162/0x3b0 [ 1786.014466] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1786.018981] ? __lock_acquire+0x5fc/0x3f20 [ 1786.023214] do_wp_page+0x245/0x1db0 [ 1786.027012] ? __handle_mm_fault+0x129c/0x4620 [ 1786.031588] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1786.037654] __handle_mm_fault+0x234f/0x4620 [ 1786.042065] ? lock_downgrade+0x740/0x740 [ 1786.046207] ? vm_insert_page+0x7c0/0x7c0 [ 1786.050350] ? do_raw_spin_unlock+0x164/0x220 [ 1786.054846] ? mark_held_locks+0xa6/0xf0 [ 1786.058918] handle_mm_fault+0x455/0x9c0 [ 1786.062982] __get_user_pages+0x4e9/0x1270 [ 1786.067227] ? follow_page_mask+0x18a0/0x18a0 [ 1786.071732] ? lock_acquire+0x170/0x3f0 [ 1786.075707] populate_vma_page_range+0x17b/0x210 [ 1786.080497] __mm_populate+0x195/0x2c0 [ 1786.084412] ? populate_vma_page_range+0x210/0x210 [ 1786.089336] ? security_capable+0x88/0xb0 [ 1786.093504] SyS_mlockall+0x3ff/0x520 [ 1786.097302] ? SyS_munlock+0xf0/0xf0 [ 1786.101102] do_syscall_64+0x1d5/0x640 [ 1786.104995] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1786.110183] RIP: 0033:0x4665f9 [ 1786.113377] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1786.121092] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1786.128359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1786.135627] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1786.142889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1786.150251] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 01:59:41 executing program 0: mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) mlockall(0x5) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000), 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0x1849, 0xfffffff8, 0x1f, 0x7, 0x40, 0xd49a}) 01:59:41 executing program 1: mlockall(0x3) fork() fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 01:59:42 executing program 2: mlockall(0x1) mlockall(0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) mq_open(&(0x7f0000000080)='/&.]!\x00', 0x2, 0x154, &(0x7f00000000c0)={0x3, 0x529, 0x7fff, 0x6}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) mlockall(0x0) 01:59:43 executing program 5 (fault-call:4 fault-nth:7): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 01:59:43 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x100, 0x3]) mlockall(0x3) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) mlockall(0x4) [ 1788.091324] FAULT_INJECTION: forcing a failure. [ 1788.091324] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1788.142865] CPU: 1 PID: 13201 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1788.150805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1788.160164] Call Trace: [ 1788.162773] dump_stack+0x1b2/0x281 [ 1788.166505] should_fail.cold+0x10a/0x149 [ 1788.170667] __alloc_pages_nodemask+0x22c/0x2720 [ 1788.175421] ? __lock_acquire+0x5fc/0x3f20 [ 1788.179690] ? trace_hardirqs_on+0x10/0x10 [ 1788.183959] ? trace_hardirqs_on+0x10/0x10 [ 1788.188199] ? trace_hardirqs_on+0x10/0x10 [ 1788.192438] ? __lock_acquire+0x5fc/0x3f20 [ 1788.196684] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1788.201531] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1788.207009] ? check_preemption_disabled+0x35/0x240 [ 1788.212068] ? __lock_acquire+0x5fc/0x3f20 [ 1788.216317] alloc_pages_vma+0xd2/0x6d0 [ 1788.220301] wp_page_copy+0x1f5/0x25c0 [ 1788.224204] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1788.228709] ? __lock_acquire+0x5fc/0x3f20 [ 1788.232968] do_wp_page+0x245/0x1db0 [ 1788.236711] ? __handle_mm_fault+0x129c/0x4620 [ 1788.241317] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1788.246110] __handle_mm_fault+0x234f/0x4620 [ 1788.250532] ? lock_downgrade+0x740/0x740 [ 1788.254692] ? vm_insert_page+0x7c0/0x7c0 [ 1788.258941] ? do_raw_spin_unlock+0x164/0x220 [ 1788.263452] ? mark_held_locks+0xa6/0xf0 [ 1788.267521] handle_mm_fault+0x455/0x9c0 [ 1788.271621] __get_user_pages+0x4e9/0x1270 [ 1788.275888] ? follow_page_mask+0x18a0/0x18a0 [ 1788.280400] ? lock_acquire+0x170/0x3f0 [ 1788.284403] populate_vma_page_range+0x17b/0x210 [ 1788.289172] __mm_populate+0x195/0x2c0 [ 1788.293098] ? populate_vma_page_range+0x210/0x210 [ 1788.299858] ? security_capable+0x88/0xb0 [ 1788.304054] SyS_mlockall+0x3ff/0x520 [ 1788.307859] ? SyS_munlock+0xf0/0xf0 [ 1788.311579] do_syscall_64+0x1d5/0x640 [ 1788.315477] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1788.320675] RIP: 0033:0x4665f9 [ 1788.323869] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1788.331765] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 01:59:43 executing program 1: mlockall(0x3) fork() fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 01:59:43 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) exit_group(0xdc) mlockall(0x2) [ 1788.339228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1788.346572] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1788.354024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1788.361477] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 01:59:44 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000080)={0x0, 0x50, &(0x7f0000000000)="59f70ed567376c4ce7f10f5663a25df3146d1f9e8038cc8282336a029b6f8ac17bcfd63868ac43a7dc7042a81a943d0c586942f6a2492e7b952878e88878eeec6795e121ad2745f942d68515f7e727c3"}) mlockall(0x2) 01:59:44 executing program 0: mlockall(0x3) mlockall(0x3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r0 = fork() r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x5, 0x6, {r0}, {0xee01}, 0x5bdf, 0x8a}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @short}, 0x14, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) mlockall(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/net\x00') ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) connect$x25(r1, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) sched_getattr(0x0, 0x0, 0x0, 0x0) 01:59:45 executing program 2: mlockall(0x3) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)) mlockall(0x0) 01:59:45 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) mlockall(0x6) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000001400)=""/4131) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000040)) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/39) 01:59:45 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x45, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000000c0)={0x2a, "d09c6502a55f948117fc6c6a0eae0795fbbccedb42c04d40c3ae7a0085adec53b7a0bd32550e78831e80f7793039a763e6c900b29ddc63ac4ab4785b79db99c10e62000d4b12288b97b1d62d53322595d010bb9e1afa64f2c3ae91e7d9f5ebfee6e451fd5746e6ac6ec4769a060c51c87c7a1cba94ec34e93e4355b0e01feffc"}) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) mlockall(0x4) mlockall(0x7) 01:59:46 executing program 5 (fault-call:4 fault-nth:8): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 01:59:46 executing program 1: mlockall(0x3) fork() fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1790.828792] FAULT_INJECTION: forcing a failure. [ 1790.828792] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1790.901909] CPU: 1 PID: 13256 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1790.909825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1790.919181] Call Trace: [ 1790.921777] dump_stack+0x1b2/0x281 [ 1790.925412] should_fail.cold+0x10a/0x149 [ 1790.929566] __alloc_pages_nodemask+0x22c/0x2720 [ 1790.934326] ? wp_page_copy+0xc31/0x25c0 [ 1790.938398] ? __lock_acquire+0x5fc/0x3f20 [ 1790.942644] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1790.947495] ? __lock_acquire+0x5fc/0x3f20 [ 1790.951733] ? do_wp_page+0x24d/0x1db0 [ 1790.955628] alloc_pages_vma+0xd2/0x6d0 [ 1790.959622] __handle_mm_fault+0x25fa/0x4620 [ 1790.964034] ? lock_downgrade+0x740/0x740 [ 1790.968186] ? vm_insert_page+0x7c0/0x7c0 [ 1790.972356] ? do_raw_spin_unlock+0x164/0x220 [ 1790.976860] ? mark_held_locks+0xa6/0xf0 [ 1790.980924] handle_mm_fault+0x455/0x9c0 [ 1790.984987] __get_user_pages+0x4e9/0x1270 [ 1790.989227] ? follow_page_mask+0x18a0/0x18a0 [ 1790.993740] ? lock_acquire+0x170/0x3f0 [ 1790.997725] populate_vma_page_range+0x17b/0x210 [ 1791.002485] __mm_populate+0x195/0x2c0 [ 1791.006372] ? populate_vma_page_range+0x210/0x210 [ 1791.011301] ? security_capable+0x88/0xb0 [ 1791.015453] SyS_mlockall+0x3ff/0x520 [ 1791.019252] ? SyS_munlock+0xf0/0xf0 [ 1791.022984] do_syscall_64+0x1d5/0x640 [ 1791.026905] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1791.032090] RIP: 0033:0x4665f9 [ 1791.035303] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1791.043014] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1791.050281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1791.057547] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1791.067543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1791.074905] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 01:59:47 executing program 2: mlockall(0x3) mlockall(0x3) mlockall(0x0) 01:59:47 executing program 3: mlockall(0x7) mlockall(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x11, 0x7d6d, 0x3f, 0x101, 0xc08, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x40) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x484000, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x8}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) 01:59:47 executing program 0: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x8, 0x4, {0xffffffffffffffff}, {0xee01}, 0x0, 0x9}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='J\x00'}, 0x30) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) 01:59:47 executing program 1: mlockall(0x3) mlockall(0x3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r0 = fork() r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x5, 0x6, {r0}, {0xee01}, 0x5bdf, 0x8a}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @short}, 0x14, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) mlockall(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/net\x00') ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) connect$x25(r1, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) sched_getattr(0x0, 0x0, 0x0, 0x0) 01:59:48 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)={r1, 0x1}) mlockall(0x4) 01:59:48 executing program 5 (fault-call:4 fault-nth:9): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 1793.114870] FAULT_INJECTION: forcing a failure. [ 1793.114870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1793.181785] CPU: 0 PID: 13287 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1793.189702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1793.199059] Call Trace: [ 1793.201658] dump_stack+0x1b2/0x281 [ 1793.205287] should_fail.cold+0x10a/0x149 [ 1793.209440] __alloc_pages_nodemask+0x22c/0x2720 [ 1793.214206] ? __lock_acquire+0x5fc/0x3f20 [ 1793.218466] ? trace_hardirqs_on+0x10/0x10 [ 1793.222709] ? __lock_acquire+0x5fc/0x3f20 [ 1793.226947] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1793.232000] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1793.236769] ? __lock_acquire+0x5fc/0x3f20 [ 1793.242876] alloc_pages_vma+0xd2/0x6d0 [ 1793.247046] __handle_mm_fault+0x25fa/0x4620 [ 1793.251459] ? lock_downgrade+0x740/0x740 [ 1793.255609] ? vm_insert_page+0x7c0/0x7c0 [ 1793.259768] ? do_raw_spin_unlock+0x164/0x220 [ 1793.264294] ? mark_held_locks+0xa6/0xf0 [ 1793.268379] handle_mm_fault+0x455/0x9c0 [ 1793.272442] __get_user_pages+0x4e9/0x1270 [ 1793.276685] ? follow_page_mask+0x18a0/0x18a0 [ 1793.281186] ? lock_acquire+0x170/0x3f0 [ 1793.285204] populate_vma_page_range+0x17b/0x210 [ 1793.290009] __mm_populate+0x195/0x2c0 [ 1793.293906] ? populate_vma_page_range+0x210/0x210 [ 1793.298842] ? security_capable+0x88/0xb0 [ 1793.303015] SyS_mlockall+0x3ff/0x520 [ 1793.306817] ? SyS_munlock+0xf0/0xf0 [ 1793.310535] do_syscall_64+0x1d5/0x640 [ 1793.314449] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1793.319658] RIP: 0033:0x4665f9 [ 1793.322843] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1793.330569] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1793.337857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1793.345125] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1793.352398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1793.359666] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 01:59:48 executing program 3: mlockall(0x6) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x7fffffff, 0x4, 0x0, 0x5, 0x7, 0x8001}) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x4) mlockall(0x2) 01:59:49 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) mlockall(0x3) 01:59:49 executing program 2: mlockall(0x3) mlockall(0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 01:59:49 executing program 1: mlockall(0x3) mlockall(0x3) mlockall(0x0) 01:59:50 executing program 0: mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x900000, 0xe00) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)={r2, 0x1}) mlockall(0x4) mlockall(0x3) 01:59:50 executing program 5 (fault-call:4 fault-nth:10): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 1795.459693] FAULT_INJECTION: forcing a failure. [ 1795.459693] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1795.525033] CPU: 0 PID: 13324 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1795.532960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1795.542320] Call Trace: [ 1795.544934] dump_stack+0x1b2/0x281 [ 1795.548571] should_fail.cold+0x10a/0x149 [ 1795.552867] __alloc_pages_nodemask+0x22c/0x2720 [ 1795.557640] ? _raw_spin_unlock_irq+0x24/0x80 [ 1795.562144] ? __lock_acquire+0x5fc/0x3f20 [ 1795.566385] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1795.571258] ? __schedule+0x893/0x1de0 [ 1795.575151] ? __lock_acquire+0x5fc/0x3f20 [ 1795.579396] ? preempt_schedule_common+0x45/0xc0 [ 1795.584159] alloc_pages_vma+0xd2/0x6d0 [ 1795.588148] __handle_mm_fault+0x25fa/0x4620 [ 1795.592566] ? lock_downgrade+0x740/0x740 [ 1795.596715] ? vm_insert_page+0x7c0/0x7c0 [ 1795.600911] ? do_raw_spin_unlock+0x164/0x220 [ 1795.605415] ? mark_held_locks+0xa6/0xf0 [ 1795.609481] handle_mm_fault+0x455/0x9c0 [ 1795.613553] __get_user_pages+0x4e9/0x1270 [ 1795.617798] ? follow_page_mask+0x18a0/0x18a0 [ 1795.622322] ? lock_acquire+0x170/0x3f0 [ 1795.626316] populate_vma_page_range+0x17b/0x210 [ 1795.631076] __mm_populate+0x195/0x2c0 [ 1795.634970] ? populate_vma_page_range+0x210/0x210 [ 1795.639898] ? security_capable+0x88/0xb0 [ 1795.644061] SyS_mlockall+0x3ff/0x520 [ 1795.647881] ? SyS_munlock+0xf0/0xf0 [ 1795.651600] do_syscall_64+0x1d5/0x640 [ 1795.655493] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1795.660677] RIP: 0033:0x4665f9 [ 1795.663865] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1795.671569] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1795.678836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1795.686112] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1795.693379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1795.700648] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 01:59:51 executing program 3: mlockall(0x2) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x252a41, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0xffffffffffffffda) mlockall(0x1) mlockall(0x2) mlockall(0x2) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000100)={0x2, 0x15, &(0x7f00000000c0)=""/21}) accept4$x25(r0, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x0) 01:59:51 executing program 2: mlockall(0x3) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) mlockall(0x0) 01:59:51 executing program 1: mlockall(0x3) mlockall(0x3) mlockall(0x0) 01:59:52 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x8, 0x9, 0x1, 0xb828, 0xc56, 0x2], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000080)=""/65) mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000240)={0x15, 0xfb, &(0x7f0000000140)="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"}) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x402100, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)={0x6a0, 0x9, 0x4, 0x100000, 0xff, {}, {0x1, 0x0, 0x2, 0x81, 0x46, 0x0, "140dd645"}, 0x9, 0x3, @planes=&(0x7f0000000280)={0x1f4, 0x40000000, @mem_offset=0x40, 0x5}, 0x7fff, 0x0, r2}) mlockall(0x2) 01:59:52 executing program 5 (fault-call:4 fault-nth:11): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 01:59:52 executing program 0: mlockall(0x7) mlockall(0x3) r0 = fork() r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000100e8d561de8152c6edbdf25080015000000000008004a00000000000800150000000000b0181561fedcee65d6468711a20133d2803255c99287f407f712ed245689529715ab5a1983f620b8350a95948dd80202d1690005299b6238a1ef3eb8caa75c27d3a187a7936d3768b1f238bb0fc504ecef20e0a39eb446d99bc07f3e5ac42ce9058c28b82a0f09ff61500a16d1d51c67effb82ea3396316b998af9fb87b58ebc8686de84391a413d791fbfd6e8f0a561881cfb"], 0x28}, 0x1, 0x0, 0x0, 0x20040805}, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1797.484170] FAULT_INJECTION: forcing a failure. [ 1797.484170] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1797.514473] CPU: 0 PID: 13352 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1797.522962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1797.532462] Call Trace: [ 1797.535079] dump_stack+0x1b2/0x281 [ 1797.539049] should_fail.cold+0x10a/0x149 [ 1797.543378] __alloc_pages_nodemask+0x22c/0x2720 [ 1797.548407] ? __lock_acquire+0x5fc/0x3f20 [ 1797.553068] ? trace_hardirqs_on+0x10/0x10 [ 1797.557652] ? __lock_acquire+0x5fc/0x3f20 [ 1797.562333] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1797.568292] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1797.573833] ? __lock_acquire+0x5fc/0x3f20 [ 1797.578195] alloc_pages_vma+0xd2/0x6d0 [ 1797.583218] __handle_mm_fault+0x25fa/0x4620 [ 1797.587999] ? lock_downgrade+0x740/0x740 [ 1797.592180] ? vm_insert_page+0x7c0/0x7c0 [ 1797.596450] ? do_raw_spin_unlock+0x164/0x220 [ 1797.601111] ? mark_held_locks+0xa6/0xf0 [ 1797.605288] handle_mm_fault+0x455/0x9c0 [ 1797.609515] __get_user_pages+0x4e9/0x1270 [ 1797.614087] ? follow_page_mask+0x18a0/0x18a0 [ 1797.618790] ? lock_acquire+0x170/0x3f0 [ 1797.623185] populate_vma_page_range+0x17b/0x210 [ 1797.628122] __mm_populate+0x195/0x2c0 [ 1797.632318] ? populate_vma_page_range+0x210/0x210 [ 1797.637297] ? security_capable+0x88/0xb0 [ 1797.641568] SyS_mlockall+0x3ff/0x520 [ 1797.645657] ? SyS_munlock+0xf0/0xf0 [ 1797.649736] do_syscall_64+0x1d5/0x640 [ 1797.653916] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1797.659124] RIP: 0033:0x4665f9 [ 1797.662419] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1797.670323] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1797.678022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1797.685545] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1797.693165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1797.701108] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 01:59:53 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{}, {0x0}, {}, {}, {}, {}, {}]}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000240)={r1, 0x3}) mlockall(0x4) 01:59:53 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x45, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000000c0)={0x2a, "d09c6502a55f948117fc6c6a0eae0795fbbccedb42c04d40c3ae7a0085adec53b7a0bd32550e78831e80f7793039a763e6c900b29ddc63ac4ab4785b79db99c10e62000d4b12288b97b1d62d53322595d010bb9e1afa64f2c3ae91e7d9f5ebfee6e451fd5746e6ac6ec4769a060c51c87c7a1cba94ec34e93e4355b0e01feffc"}) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) mlockall(0x4) mlockall(0x7) 01:59:53 executing program 2: mlockall(0x4) mlockall(0x0) 01:59:53 executing program 2: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040cd4}, 0x4008811) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001400)={@multicast2, @multicast1, 0x0}, &(0x7f0000001440)=0xc) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x48, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x44000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0xfffffffffffffffc, 0x40000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, 0x140a, 0x20, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x1) mlockall(0x3) mlockall(0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f00000002c0)={0x2, 0x1, 0x2, 0x42, &(0x7f0000000100)=""/66, 0x25, &(0x7f0000000180)=""/37, 0xc9, &(0x7f00000001c0)=""/201}) 01:59:54 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x180dc3, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/53) mlockall(0x2) 01:59:54 executing program 3: mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={0x0, 0x6}) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x0) mlockall(0x2) 01:59:54 executing program 5 (fault-call:4 fault-nth:12): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 1799.637042] FAULT_INJECTION: forcing a failure. [ 1799.637042] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1799.705324] CPU: 1 PID: 13388 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1799.714494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1799.725189] Call Trace: [ 1799.728139] dump_stack+0x1b2/0x281 [ 1799.732476] should_fail.cold+0x10a/0x149 [ 1799.736902] __alloc_pages_nodemask+0x22c/0x2720 [ 1799.742258] ? __lock_acquire+0x5fc/0x3f20 [ 1799.747991] ? trace_hardirqs_on+0x10/0x10 [ 1799.752870] ? __lock_acquire+0x5fc/0x3f20 [ 1799.757755] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1799.763167] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1799.768431] ? __lock_acquire+0x5fc/0x3f20 [ 1799.772971] alloc_pages_vma+0xd2/0x6d0 [ 1799.778784] __handle_mm_fault+0x25fa/0x4620 [ 1799.784216] ? lock_downgrade+0x740/0x740 [ 1799.788759] ? vm_insert_page+0x7c0/0x7c0 [ 1799.793666] ? do_raw_spin_unlock+0x164/0x220 [ 1799.801410] ? mark_held_locks+0xa6/0xf0 [ 1799.807105] handle_mm_fault+0x455/0x9c0 [ 1799.811432] __get_user_pages+0x4e9/0x1270 [ 1799.816115] ? follow_page_mask+0x18a0/0x18a0 [ 1799.821225] ? lock_acquire+0x170/0x3f0 [ 1799.827446] populate_vma_page_range+0x17b/0x210 [ 1799.832244] __mm_populate+0x195/0x2c0 [ 1799.836250] ? populate_vma_page_range+0x210/0x210 [ 1799.841297] ? security_capable+0x88/0xb0 [ 1799.845647] SyS_mlockall+0x3ff/0x520 [ 1799.849735] ? SyS_munlock+0xf0/0xf0 [ 1799.853554] do_syscall_64+0x1d5/0x640 [ 1799.857899] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1799.863469] RIP: 0033:0x4665f9 [ 1799.866949] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1799.875030] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1799.883111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1799.890807] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1799.898766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1799.906412] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 01:59:55 executing program 3: mlockall(0x7) mlockall(0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000001200)={0x0, 0x0}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x1) mq_timedsend(r1, &(0x7f0000000240)="6b78bde46f9917c9f894d5a22cd1e8d0c2f15422d7021affd31414df2cd720c16e079b00d634bd5a63c87004c01dd1ccc8cfb03866a632d9a0edabbe64742e4cfdb2e134f8b9593df1b1d3ed6b8b36effa3e6e536b6e4194422767867cc21571", 0x60, 0xffffffffffffffc1, &(0x7f00000002c0)={0x0, 0x3938700}) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0xda8af80b054b49a8) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x200, 0x600) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000480)={0x0, &(0x7f0000000340)=""/253, &(0x7f0000000440)}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f00000001c0)) mlockall(0x1) mlockall(0x2) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000000c0)={"a965a777ab7900edffffff00", r4, 0x0, {0x6c0, 0x800000}, {0x6, 0xbddd}, 0x2, [0x81, 0x0, 0xb662, 0x9, 0x1, 0xffff, 0x1, 0xa2, 0x2, 0x7b, 0xfff, 0x6, 0xffffffffffffffff, 0x9, 0x40080000000]}) 01:59:55 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x8, 0x9, 0x1, 0xb828, 0xc56, 0x2], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000080)=""/65) mlockall(0x7) mlockall(0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000240)={0x15, 0xfb, &(0x7f0000000140)="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"}) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x402100, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)={0x6a0, 0x9, 0x4, 0x100000, 0xff, {}, {0x1, 0x0, 0x2, 0x81, 0x46, 0x0, "140dd645"}, 0x9, 0x3, @planes=&(0x7f0000000280)={0x1f4, 0x40000000, @mem_offset=0x40, 0x5}, 0x7fff, 0x0, r2}) mlockall(0x2) 01:59:55 executing program 2: mlockall(0x3) mlockall(0x3) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000d140c002dbd70f2fbdbdf2508003e0005000000080003000200000054bc0f626f92d4d61b9f8e79096d7f426c03d3bba785146ab40b2700b159383e3ff99cff"], 0x20}, 0x1, 0x0, 0x0, 0x44010}, 0x95) 01:59:55 executing program 4: r0 = socket(0xa, 0x1, 0x0) bind$x25(r0, 0x0, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:59:56 executing program 0: mlockall(0x7) mlockall(0x3) r0 = fork() mlockall(0x1) sched_setparam(r0, &(0x7f0000000040)=0x401) sched_getattr(0x0, 0x0, 0x0, 0x0) 01:59:57 executing program 3: mlockall(0x7) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000040)=0xfffffe6a) mlockall(0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) mlockall(0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0xd41c1, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0xd1, 0x9d1, 0x0, 0x0, 0x1, 0xbb8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000000)={0xfffffff9}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r2 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) 01:59:57 executing program 1: mlockall(0x7) mlockall(0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000001200)={0x0, 0x0}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x1) mq_timedsend(r1, &(0x7f0000000240)="6b78bde46f9917c9f894d5a22cd1e8d0c2f15422d7021affd31414df2cd720c16e079b00d634bd5a63c87004c01dd1ccc8cfb03866a632d9a0edabbe64742e4cfdb2e134f8b9593df1b1d3ed6b8b36effa3e6e536b6e4194422767867cc21571", 0x60, 0xffffffffffffffc1, &(0x7f00000002c0)={0x0, 0x3938700}) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0xda8af80b054b49a8) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x200, 0x600) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000480)={0x0, &(0x7f0000000340)=""/253, &(0x7f0000000440)}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f00000001c0)) mlockall(0x1) mlockall(0x2) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000000c0)={"a965a777ab7900edffffff00", r4, 0x0, {0x6c0, 0x800000}, {0x6, 0xbddd}, 0x2, [0x81, 0x0, 0xb662, 0x9, 0x1, 0xffff, 0x1, 0xa2, 0x2, 0x7b, 0xfff, 0x6, 0xffffffffffffffff, 0x9, 0x40080000000]}) 01:59:57 executing program 5 (fault-call:4 fault-nth:13): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 1802.060534] FAULT_INJECTION: forcing a failure. [ 1802.060534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1802.135760] CPU: 0 PID: 13426 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1802.144920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.154525] Call Trace: [ 1802.157323] dump_stack+0x1b2/0x281 [ 1802.161064] should_fail.cold+0x10a/0x149 [ 1802.165981] __alloc_pages_nodemask+0x22c/0x2720 [ 1802.170982] ? __lock_acquire+0x5fc/0x3f20 [ 1802.175436] ? trace_hardirqs_on+0x10/0x10 [ 1802.179691] ? __lock_acquire+0x5fc/0x3f20 [ 1802.184267] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1802.189557] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1802.194695] ? __lock_acquire+0x5fc/0x3f20 [ 1802.199158] alloc_pages_vma+0xd2/0x6d0 [ 1802.203157] __handle_mm_fault+0x25fa/0x4620 [ 1802.207848] ? lock_downgrade+0x740/0x740 [ 1802.212623] ? vm_insert_page+0x7c0/0x7c0 [ 1802.217139] ? do_raw_spin_unlock+0x164/0x220 [ 1802.222182] ? mark_held_locks+0xa6/0xf0 [ 1802.226686] handle_mm_fault+0x455/0x9c0 [ 1802.230779] __get_user_pages+0x4e9/0x1270 [ 1802.235440] ? follow_page_mask+0x18a0/0x18a0 [ 1802.240063] ? lock_acquire+0x170/0x3f0 [ 1802.244445] populate_vma_page_range+0x17b/0x210 [ 1802.249223] __mm_populate+0x195/0x2c0 [ 1802.253653] ? populate_vma_page_range+0x210/0x210 [ 1802.258792] ? security_capable+0x88/0xb0 [ 1802.263140] SyS_mlockall+0x3ff/0x520 [ 1802.267132] ? SyS_munlock+0xf0/0xf0 [ 1802.273318] do_syscall_64+0x1d5/0x640 [ 1802.277697] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1802.283156] RIP: 0033:0x4665f9 [ 1802.287346] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1802.295935] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1802.303548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1802.311051] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1802.318465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1802.326346] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 01:59:58 executing program 2: mlockall(0x0) mlockall(0x0) 01:59:58 executing program 2: mlockall(0x3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000180)=""/238) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/247}) mlockall(0x3) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=""/33}) 01:59:58 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x3, 0x9, {0xffffffffffffffff}, {0xee00}, 0x7, 0xfffffffffffffffe}) mlockall(0x7) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x13c4819b8a7bfeee) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0xc29, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f00000001c0)={r2, 0x81}) mlockall(0x3) r3 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 01:59:58 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x5, 0x200, 0x1, 0x4, 0xb4, 0x7, 0x6, 0x3ff], 0x8, 0x800, 0x0, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780), 0x4400, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x200}, [@generic={0x2, 0x8, 0x5, 0x88a5, 0x2}, @alu={0x7, 0x1, 0x6, 0x9, 0x9, 0xffffffffffffffc0, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xff35}, @alu={0x7, 0x1, 0xd, 0xe, 0x6, 0xc, 0xffffffffffffffff}, @ldst={0x2, 0x0, 0x1, 0x1, 0x5, 0x8, 0x4}, @alu={0x4, 0x1, 0x2, 0x4, 0x8, 0x80, 0x8bb6fe46ef411203}, @jmp={0x5, 0x1, 0x5, 0x8, 0x9, 0xfffffffffffffffe, 0x10}, @alu={0x4, 0x1, 0xa, 0x8, 0x5, 0x4}]}, &(0x7f0000000680)='syzkaller\x00', 0xa815, 0x8f, &(0x7f00000006c0)=""/143, 0x100, 0x18, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000007c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x8, 0x10000, 0x8}, 0x10}, 0x78) mlockall(0x7) mlockall(0x3) mlockall(0xe) r2 = fork() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x800c) sched_getattr(0x0, 0x0, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r5 = fork() getrusage(0x1, &(0x7f00000004c0)) sched_getattr(r5, &(0x7f00000002c0)={0x38}, 0x38, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r4, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x64}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x201, 0x70bd28, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20044004) 01:59:58 executing program 1: mlockall(0x7) mlockall(0x3) r0 = fork() mlockall(0x1) sched_setparam(r0, &(0x7f0000000040)=0x401) sched_getattr(0x0, 0x0, 0x0, 0x0) 01:59:59 executing program 5 (fault-call:4 fault-nth:14): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 01:59:59 executing program 3: mlockall(0x7) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000040)=0xfffffe6a) mlockall(0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) mlockall(0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0xd41c1, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0xd1, 0x9d1, 0x0, 0x0, 0x1, 0xbb8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000000)={0xfffffff9}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r2 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) mlockall(0x2) [ 1803.925620] FAULT_INJECTION: forcing a failure. [ 1803.925620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1803.983047] CPU: 0 PID: 13454 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1803.991051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1804.000403] Call Trace: [ 1804.002995] dump_stack+0x1b2/0x281 [ 1804.006621] should_fail.cold+0x10a/0x149 [ 1804.010795] __alloc_pages_nodemask+0x22c/0x2720 [ 1804.015549] ? __lock_acquire+0x5fc/0x3f20 [ 1804.019791] ? trace_hardirqs_on+0x10/0x10 [ 1804.024041] ? finish_task_switch+0x178/0x610 [ 1804.028554] ? switch_mm_irqs_off+0x601/0xeb0 [ 1804.033053] ? __lock_acquire+0x5fc/0x3f20 [ 1804.037301] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1804.042146] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1804.046914] ? __lock_acquire+0x5fc/0x3f20 [ 1804.051242] alloc_pages_vma+0xd2/0x6d0 [ 1804.055218] __handle_mm_fault+0x25fa/0x4620 [ 1804.059642] ? lock_downgrade+0x740/0x740 [ 1804.063786] ? vm_insert_page+0x7c0/0x7c0 [ 1804.067932] ? do_raw_spin_unlock+0x164/0x220 [ 1804.072435] ? mark_held_locks+0xa6/0xf0 [ 1804.076495] handle_mm_fault+0x455/0x9c0 [ 1804.080738] __get_user_pages+0x4e9/0x1270 [ 1804.084978] ? follow_page_mask+0x18a0/0x18a0 [ 1804.089479] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1804.094247] ? lock_acquire+0x170/0x3f0 [ 1804.098233] populate_vma_page_range+0x17b/0x210 [ 1804.102997] __mm_populate+0x195/0x2c0 [ 1804.107421] ? populate_vma_page_range+0x210/0x210 [ 1804.112358] ? security_capable+0x88/0xb0 [ 1804.116515] SyS_mlockall+0x3ff/0x520 [ 1804.120332] ? SyS_munlock+0xf0/0xf0 [ 1804.124047] do_syscall_64+0x1d5/0x640 [ 1804.128054] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1804.133241] RIP: 0033:0x4665f9 [ 1804.136447] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1804.144154] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1804.151420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1804.158692] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1804.166136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1804.173404] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 02:00:00 executing program 2: mlockall(0x3) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000600)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5, 0x5, 0xa}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000006c0)={0x0, 0x3, 0x9, 0x7fff, 0x6, 0x200, 0x4, 0x8, 0x3, 0x7, 0x4, 0x1}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000640)={@loopback, @dev}, &(0x7f0000000680)=0xc) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000440)={0x0, @multicast2, @initdev}, &(0x7f0000000480)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd74, 0x0, 0x0, 0x0, 0x200}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x90}, @generic={0x9, 0xf, 0x2, 0x1131, 0x34cdbf33}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @map={0x18, 0x4, 0x1, 0x0, 0x1}, @alu={0x4, 0x0, 0x4, 0x9, 0x7, 0x4, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xcf, &(0x7f00000000c0)=""/207, 0x1e00, 0x15, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x3, 0x7fffffff, 0x52fd}, 0x10}, 0x78) 02:00:00 executing program 1: mlockall(0x7) mlockall(0x3) r0 = fork() mlockall(0x1) sched_setparam(r0, &(0x7f0000000040)=0x401) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:00:00 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440), 0x4000) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000280)={0x15, "2dc3f574b150bfb3c3aec6b432a510ea4192d1d0918df946cdaae2b9f07ef33c9dc50d8e51379705c8ffaa119ea28e7d2dff6b4510e8898fa5b096248b6aad477350db2aab09cb5ca303543c08bf32a6e0808f2afbf6cf36e74f8951856ed9df2bb54eacbdd8755ec022a4583a8fb9b25731ced34660cc2815d9d4ed536f67aa"}) r1 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x800) sendto$x25(r1, &(0x7f0000000140)="0cfdf18e5eb1c1f355d79cbeff66b838c4", 0x11, 0x20000000, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000340)={'ipvlan0\x00', 0x8000000000000000}) 02:00:00 executing program 3: mlockall(0x3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000180)=""/238) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/247}) mlockall(0x3) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=""/33}) 02:00:01 executing program 0: mlockall(0x9) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) fork() 02:00:01 executing program 5 (fault-call:4 fault-nth:15): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 1806.695203] FAULT_INJECTION: forcing a failure. [ 1806.695203] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1806.795355] CPU: 0 PID: 13490 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1806.803289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1806.812637] Call Trace: [ 1806.815226] dump_stack+0x1b2/0x281 [ 1806.818854] should_fail.cold+0x10a/0x149 [ 1806.823001] __alloc_pages_nodemask+0x22c/0x2720 [ 1806.827755] ? __lock_acquire+0x5fc/0x3f20 [ 1806.831991] ? trace_hardirqs_on+0x10/0x10 [ 1806.836224] ? __lock_acquire+0x5fc/0x3f20 [ 1806.840456] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1806.845297] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1806.850052] ? __lock_acquire+0x5fc/0x3f20 [ 1806.854316] alloc_pages_vma+0xd2/0x6d0 [ 1806.858297] __handle_mm_fault+0x25fa/0x4620 [ 1806.862704] ? lock_downgrade+0x740/0x740 [ 1806.866848] ? vm_insert_page+0x7c0/0x7c0 [ 1806.870990] ? do_raw_spin_unlock+0x164/0x220 [ 1806.875510] ? mark_held_locks+0xa6/0xf0 [ 1806.879572] handle_mm_fault+0x455/0x9c0 [ 1806.883631] __get_user_pages+0x4e9/0x1270 [ 1806.887866] ? follow_page_mask+0x18a0/0x18a0 [ 1806.892538] ? lock_acquire+0x170/0x3f0 [ 1806.896515] populate_vma_page_range+0x17b/0x210 [ 1806.901275] __mm_populate+0x195/0x2c0 [ 1806.905160] ? populate_vma_page_range+0x210/0x210 [ 1806.910090] ? security_capable+0x88/0xb0 [ 1806.914244] SyS_mlockall+0x3ff/0x520 [ 1806.918134] ? SyS_munlock+0xf0/0xf0 [ 1806.921875] do_syscall_64+0x1d5/0x640 [ 1806.925788] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1806.930974] RIP: 0033:0x4665f9 [ 1806.934160] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1806.941866] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1806.949143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1806.956413] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1806.963692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1806.970997] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 02:00:02 executing program 2: mlockall(0x0) mlockall(0x0) 02:00:02 executing program 2: mlockall(0x4) mlockall(0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000040)=""/161) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) mlockall(0x2) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1407, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x40810) 02:00:02 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x80000000, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000000c0)={0x0, r1}) mlockall(0x3) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000180)={r2, 0x8}) mlockall(0x0) clock_gettime(0x0, &(0x7f0000000000)) mlockall(0x6) 02:00:02 executing program 1: mlockall(0x4) mlockall(0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000040)=""/161) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) mlockall(0x2) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1407, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x40810) 02:00:02 executing program 1: mlockall(0x3) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000600)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5, 0x5, 0xa}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000006c0)={0x0, 0x3, 0x9, 0x7fff, 0x6, 0x200, 0x4, 0x8, 0x3, 0x7, 0x4, 0x1}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000640)={@loopback, @dev}, &(0x7f0000000680)=0xc) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000440)={0x0, @multicast2, @initdev}, &(0x7f0000000480)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd74, 0x0, 0x0, 0x0, 0x200}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x90}, @generic={0x9, 0xf, 0x2, 0x1131, 0x34cdbf33}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @map={0x18, 0x4, 0x1, 0x0, 0x1}, @alu={0x4, 0x0, 0x4, 0x9, 0x7, 0x4, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xcf, &(0x7f00000000c0)=""/207, 0x1e00, 0x15, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x3, 0x7fffffff, 0x52fd}, 0x10}, 0x78) 02:00:03 executing program 3: mlockall(0x7) mlockall(0x3) r0 = fork() mlockall(0x1) sched_setparam(r0, &(0x7f0000000040)=0x401) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:00:03 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x0) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 02:00:04 executing program 1: mlockall(0x7) mlockall(0x3) r0 = fork() r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000100e8d561de8152c6edbdf25080015000000000008004a00000000000800150000000000b0181561fedcee65d6468711a20133d2803255c99287f407f712ed245689529715ab5a1983f620b8350a95948dd80202d1690005299b6238a1ef3eb8caa75c27d3a187a7936d3768b1f238bb0fc504ecef20e0a39eb446d99bc07f3e5ac42ce9058c28b82a0f09ff61500a16d1d51c67effb82ea3396316b998af9fb87b58ebc8686de84391a413d791fbfd6e8f0a561881cfb"], 0x28}, 0x1, 0x0, 0x0, 0x20040805}, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:00:04 executing program 5 (fault-call:4 fault-nth:16): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 1809.058192] FAULT_INJECTION: forcing a failure. [ 1809.058192] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1809.155808] CPU: 0 PID: 13530 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1809.163727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1809.173079] Call Trace: [ 1809.175673] dump_stack+0x1b2/0x281 [ 1809.179307] should_fail.cold+0x10a/0x149 [ 1809.183467] __alloc_pages_nodemask+0x22c/0x2720 [ 1809.188239] ? __lock_acquire+0x5fc/0x3f20 [ 1809.192475] ? trace_hardirqs_on+0x10/0x10 [ 1809.196812] ? __lock_acquire+0x5fc/0x3f20 [ 1809.201059] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1809.205921] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1809.210696] ? __lock_acquire+0x5fc/0x3f20 [ 1809.214951] alloc_pages_vma+0xd2/0x6d0 [ 1809.218937] __handle_mm_fault+0x25fa/0x4620 [ 1809.223362] ? lock_downgrade+0x740/0x740 [ 1809.227508] ? vm_insert_page+0x7c0/0x7c0 [ 1809.231681] ? do_raw_spin_unlock+0x164/0x220 [ 1809.236191] ? mark_held_locks+0xa6/0xf0 [ 1809.240257] handle_mm_fault+0x455/0x9c0 [ 1809.244338] __get_user_pages+0x4e9/0x1270 [ 1809.248581] ? follow_page_mask+0x18a0/0x18a0 [ 1809.253079] ? lock_acquire+0x170/0x3f0 [ 1809.257052] populate_vma_page_range+0x17b/0x210 [ 1809.261811] __mm_populate+0x195/0x2c0 [ 1809.265708] ? populate_vma_page_range+0x210/0x210 [ 1809.270645] ? security_capable+0x88/0xb0 [ 1809.275059] SyS_mlockall+0x3ff/0x520 [ 1809.278857] ? SyS_munlock+0xf0/0xf0 [ 1809.282571] do_syscall_64+0x1d5/0x640 [ 1809.286486] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1809.291690] RIP: 0033:0x4665f9 [ 1809.294887] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1809.302597] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1809.309882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1809.317171] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1809.324439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1809.331709] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 02:00:05 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"345b9e39121ff85ba79ea648e8d46185", 0x0, 0x0, {0xfffffffffffff800, 0x1}, {0x2}, 0x3, [0x9b, 0x6, 0x13fc7261, 0xffffffffffffff73, 0x6, 0x1ffe0000000, 0x0, 0x0, 0x3, 0xff, 0x6, 0xd4, 0x7f, 0x7, 0x2, 0x1ff]}) mlockall(0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8441, 0x0) write$evdev(r1, &(0x7f0000000040)=[{{0x0, 0x2710}, 0xcd19abae1d8811e7, 0x7fff, 0xb7}, {{0x77359400}, 0x5, 0x2, 0x7}], 0x30) 02:00:05 executing program 0: sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="a0000000051404002abd7000fbdbdf25080001000200f0167bbc31e7c176b8000008000300040000000800010000000000080003000300000008000100090000000800030003000000080001000200000008000300000000000800017f010000000800030004000000080026c9f4c0d0753d229d010002000000080003000400000008000100020000000800030003000000080001000000000008000300040000000800010002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x24044801}, 0x4044070) mlockall(0x7) mlockall(0x3) fork() mlockall(0x5) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:00:05 executing program 2: mlockall(0x3) mlockall(0x3) mlockall(0x0) mlockall(0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0x10001}) r0 = socket(0x1e, 0x80000, 0x1f) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x8, 0x4, 0x0, 0x7}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000300)={0x100000001}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x2000, 0x7fff, {r1, r2/1000+60000}, {0x5, 0x0, 0xdf, 0x36, 0xc1, 0x3f, "085d21fd"}, 0x9, 0x2, @offset=0x40, 0x95, 0x0, r3}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000002c0)) 02:00:05 executing program 3: mlockall(0x9) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) fork() 02:00:06 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000000)={0x1f, "1de82fe7199005625360800f179602ef5e987bb117f7327d5057a85037a1ed30f7c30b0c708179775a68fdec8083063a7036be3f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=""/55, &(0x7f0000000140)=[{0xfff, 0x2, 0x3, &(0x7f0000000100)=""/2}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 02:00:06 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x0) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 02:00:06 executing program 5 (fault-call:4 fault-nth:17): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 1811.772561] FAULT_INJECTION: forcing a failure. [ 1811.772561] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1811.858844] CPU: 0 PID: 13567 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1811.866771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1811.876125] Call Trace: [ 1811.878718] dump_stack+0x1b2/0x281 [ 1811.882351] should_fail.cold+0x10a/0x149 [ 1811.886529] __alloc_pages_nodemask+0x22c/0x2720 [ 1811.891325] ? __lock_acquire+0x5fc/0x3f20 [ 1811.895560] ? trace_hardirqs_on+0x10/0x10 [ 1811.899797] ? __lock_acquire+0x5fc/0x3f20 [ 1811.904052] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1811.908892] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1811.913648] ? __lock_acquire+0x5fc/0x3f20 [ 1811.917916] alloc_pages_vma+0xd2/0x6d0 [ 1811.921899] __handle_mm_fault+0x25fa/0x4620 [ 1811.926323] ? lock_downgrade+0x740/0x740 [ 1811.930500] ? vm_insert_page+0x7c0/0x7c0 [ 1811.934650] ? do_raw_spin_unlock+0x164/0x220 [ 1811.939151] ? mark_held_locks+0xa6/0xf0 [ 1811.943220] handle_mm_fault+0x455/0x9c0 [ 1811.947282] __get_user_pages+0x4e9/0x1270 [ 1811.951545] ? follow_page_mask+0x18a0/0x18a0 [ 1811.956043] ? lock_acquire+0x170/0x3f0 [ 1811.960021] populate_vma_page_range+0x17b/0x210 [ 1811.964800] __mm_populate+0x195/0x2c0 [ 1811.968687] ? populate_vma_page_range+0x210/0x210 [ 1811.973614] ? security_capable+0x88/0xb0 [ 1811.977766] SyS_mlockall+0x3ff/0x520 [ 1811.981565] ? SyS_munlock+0xf0/0xf0 [ 1811.985277] do_syscall_64+0x1d5/0x640 [ 1811.989169] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1811.994373] RIP: 0033:0x4665f9 [ 1811.997568] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1812.005274] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1812.012537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1812.019805] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1812.027092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1812.034371] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 02:00:07 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x80000000, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000000c0)={0x0, r1}) mlockall(0x3) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000180)={r2, 0x8}) mlockall(0x0) clock_gettime(0x0, &(0x7f0000000000)) mlockall(0x6) 02:00:08 executing program 2: sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x1401, 0x20, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000003c0)={0x8}, 0x4) mlockall(0x3) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/76) mlockall(0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000400), 0xc4a01, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000440)={0x0, 0x1880e5d1f983c609}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x8, 0x1, 0x4, 0x6, 0xff, 0x6ec0, 0x7, 0x1000], 0x8, 0x100000, 0x0, 0xffffffffffffffff}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000380)=0xfff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22000000}, 0x48800) 02:00:08 executing program 0: mlockall(0x7) mlockall(0x3) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x731780, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) fork() socket$inet_icmp(0x2, 0x2, 0x1) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:00:08 executing program 1: mlockall(0x3) mlockall(0x3) mlockall(0x0) mlockall(0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0x10001}) r0 = socket(0x1e, 0x80000, 0x1f) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x8, 0x4, 0x0, 0x7}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000300)={0x100000001}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x2000, 0x7fff, {r1, r2/1000+60000}, {0x5, 0x0, 0xdf, 0x36, 0xc1, 0x3f, "085d21fd"}, 0x9, 0x2, @offset=0x40, 0x95, 0x0, r3}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000002c0)) 02:00:08 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{}, {0x0}, {}, {}, {}, {}, {}]}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000240)={r1, 0x3}) mlockall(0x4) 02:00:08 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) fork() ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) 02:00:09 executing program 5 (fault-call:4 fault-nth:18): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 1814.704634] FAULT_INJECTION: forcing a failure. [ 1814.704634] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1814.782458] CPU: 1 PID: 13604 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1814.790398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1814.799752] Call Trace: [ 1814.802346] dump_stack+0x1b2/0x281 [ 1814.805982] should_fail.cold+0x10a/0x149 [ 1814.810133] __alloc_pages_nodemask+0x22c/0x2720 [ 1814.814898] ? __lock_acquire+0x5fc/0x3f20 [ 1814.819142] ? trace_hardirqs_on+0x10/0x10 [ 1814.823408] ? __lock_acquire+0x5fc/0x3f20 [ 1814.827648] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1814.832495] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1814.837258] ? __lock_acquire+0x5fc/0x3f20 [ 1814.841600] alloc_pages_vma+0xd2/0x6d0 [ 1814.845589] __handle_mm_fault+0x25fa/0x4620 [ 1814.850002] ? lock_downgrade+0x740/0x740 [ 1814.854164] ? vm_insert_page+0x7c0/0x7c0 [ 1814.858316] ? do_raw_spin_unlock+0x164/0x220 [ 1814.862815] ? mark_held_locks+0xa6/0xf0 [ 1814.866878] handle_mm_fault+0x455/0x9c0 [ 1814.870949] __get_user_pages+0x4e9/0x1270 [ 1814.875197] ? follow_page_mask+0x18a0/0x18a0 [ 1814.879717] ? lock_acquire+0x170/0x3f0 [ 1814.883693] populate_vma_page_range+0x17b/0x210 [ 1814.888454] __mm_populate+0x195/0x2c0 [ 1814.892352] ? populate_vma_page_range+0x210/0x210 [ 1814.897308] ? security_capable+0x88/0xb0 [ 1814.901460] SyS_mlockall+0x3ff/0x520 [ 1814.905282] ? SyS_munlock+0xf0/0xf0 [ 1814.908999] do_syscall_64+0x1d5/0x640 [ 1814.912892] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1814.918103] RIP: 0033:0x4665f9 [ 1814.921305] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1814.929016] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1814.936406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1814.943678] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1814.950952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1814.958227] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 02:00:10 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2a8000, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000100)=""/89) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=""/195}) mlockall(0x3) mlockall(0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x40040, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00e2910346db5915430329bd7100fddbdf25020000000c000300c3f450d5782fd8d108000409000000010600060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x200000c0}, 0x60001013) 02:00:10 executing program 1: mlockall(0x3) mlockall(0x3) mlockall(0x0) mlockall(0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0x10001}) r0 = socket(0x1e, 0x80000, 0x1f) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x8, 0x4, 0x0, 0x7}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000300)={0x100000001}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x2000, 0x7fff, {r1, r2/1000+60000}, {0x5, 0x0, 0xdf, 0x36, 0xc1, 0x3f, "085d21fd"}, 0x9, 0x2, @offset=0x40, 0x95, 0x0, r3}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000002c0)) 02:00:11 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000000)={0x1f, "1de82fe7199005625360800f179602ef5e987bb117f7327d5057a85037a1ed30f7c30b0c708179775a68fdec8083063a7036be3f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=""/55, &(0x7f0000000140)=[{0xfff, 0x2, 0x3, &(0x7f0000000100)=""/2}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 02:00:11 executing program 0: mlockall(0x7) mlockall(0x3) r0 = fork() r1 = fork() sched_getattr(r1, &(0x7f0000000000)={0x38}, 0x38, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80000001, 0x1, {r0}, {}, 0x5, 0xaf}) r2 = fork() sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) r3 = fork() sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x38, 0x0) r4 = fork() sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) r5 = fork() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_getattr(r5, &(0x7f0000000000)={0x38}, 0x38, 0x0) r6 = fork() syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/ipc\x00') sched_getattr(r6, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_getattr(r0, 0x0, 0x2d, 0x0) 02:00:11 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 02:00:13 executing program 2: mlockall(0x3) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0100, 0x0) mlockall(0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100) 02:00:13 executing program 5 (fault-call:4 fault-nth:19): ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:00:13 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) fork() ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) 02:00:13 executing program 3: mlockall(0x7) mlockall(0x3) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x731780, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) fork() socket$inet_icmp(0x2, 0x2, 0x1) sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1818.339691] FAULT_INJECTION: forcing a failure. [ 1818.339691] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1818.421316] CPU: 1 PID: 13644 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1818.429243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1818.438604] Call Trace: [ 1818.441200] dump_stack+0x1b2/0x281 [ 1818.444837] should_fail.cold+0x10a/0x149 [ 1818.448996] __alloc_pages_nodemask+0x22c/0x2720 [ 1818.453765] ? __lock_acquire+0x5fc/0x3f20 [ 1818.458225] ? trace_hardirqs_on+0x10/0x10 [ 1818.462470] ? __lock_acquire+0x5fc/0x3f20 [ 1818.466709] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1818.471559] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1818.476328] ? __lock_acquire+0x5fc/0x3f20 [ 1818.480585] alloc_pages_vma+0xd2/0x6d0 [ 1818.484568] __handle_mm_fault+0x25fa/0x4620 [ 1818.488983] ? lock_downgrade+0x740/0x740 [ 1818.493133] ? vm_insert_page+0x7c0/0x7c0 [ 1818.497286] ? do_raw_spin_unlock+0x164/0x220 [ 1818.501799] ? mark_held_locks+0xa6/0xf0 [ 1818.505867] handle_mm_fault+0x455/0x9c0 [ 1818.509964] __get_user_pages+0x4e9/0x1270 [ 1818.514207] ? follow_page_mask+0x18a0/0x18a0 [ 1818.518711] ? lock_acquire+0x170/0x3f0 [ 1818.522689] populate_vma_page_range+0x17b/0x210 [ 1818.527460] __mm_populate+0x195/0x2c0 [ 1818.531353] ? populate_vma_page_range+0x210/0x210 [ 1818.536288] ? security_capable+0x88/0xb0 [ 1818.540448] SyS_mlockall+0x3ff/0x520 [ 1818.544250] ? SyS_munlock+0xf0/0xf0 [ 1818.547966] do_syscall_64+0x1d5/0x640 [ 1818.551864] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1818.557060] RIP: 0033:0x4665f9 [ 1818.560249] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1818.567962] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1818.575233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1818.582532] RBP: 00007f62564c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1818.589806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1818.597099] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 02:00:14 executing program 4: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x6d, "1de82fe7199005625360800f179604995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68edec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed44237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf0200"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x0) mlockall(0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000001c0)={0x201, 0x5, &(0x7f00000000c0)=[0x4, 0xffff, 0x7aef, 0x200, 0xe69e], &(0x7f0000000100)=[0x3, 0x80000000, 0xfffffffe, 0x6, 0x80000000, 0x7d80], &(0x7f0000000140)=[0x5, 0xfffffff7, 0x7, 0x3, 0x2eb, 0x2], &(0x7f0000000180)=[0x0], 0x0, 0x401}) 02:00:14 executing program 0: mlockall(0x7) mlockall(0x3) fork() ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) sched_getattr(0x0, 0x0, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x1406, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20060040}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x401}, 0x8) 02:00:15 executing program 3: mlockall(0x7) mlockall(0x3) r0 = fork() r1 = fork() sched_getattr(r1, &(0x7f0000000000)={0x38}, 0x38, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80000001, 0x1, {r0}, {}, 0x5, 0xaf}) r2 = fork() sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) r3 = fork() sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x38, 0x0) r4 = fork() sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) r5 = fork() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_getattr(r5, &(0x7f0000000000)={0x38}, 0x38, 0x0) r6 = fork() syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/ipc\x00') sched_getattr(r6, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_getattr(r0, 0x0, 0x2d, 0x0) 02:00:15 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000200)) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x5) mlockall(0x0) 02:00:16 executing program 1: mlockall(0x7) mlockall(0x3) r0 = fork() r1 = fork() sched_getattr(r1, &(0x7f0000000000)={0x38}, 0x38, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80000001, 0x1, {r0}, {}, 0x5, 0xaf}) r2 = fork() sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) r3 = fork() sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x38, 0x0) r4 = fork() sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) r5 = fork() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_getattr(r5, &(0x7f0000000000)={0x38}, 0x38, 0x0) r6 = fork() syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/ipc\x00') sched_getattr(r6, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_getattr(r0, 0x0, 0x2d, 0x0) 02:00:17 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000040)={0xd, "3e00e3beea3f395bcef6aa58b276e5eacc626ae8230c80da74ad794beecbc98908051bc4192704192b4a4c8ec38e5f0b6fcccd5a494ae7a6198ff6913ef0d5b73c1928c2ebcf53d9b8d329dcb5627e23b2ea8c0f89688357e9dfca11fdd4d186b43833fa62c57ac34634d0ee590cc84fd9f035973f4f627777438c8fa072db8b"}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000100)={0x21, 0x2, 0x9, 0xc, 0x8}) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000000)={0x81, 0x7f}) mlockall(0x3) mlockall(0x6) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 02:00:17 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000280)={r2, 0x1f, 0x3, 0xffffab42, 0x7b, 0xffff7e95, 0x2, 0x1ff, 0x8, 0x0, 0xff, 0x4}) mlockall(0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x12002, 0x0) mlockall(0x0) 02:00:17 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000002c0)={r1, &(0x7f0000000200)=""/139}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:00:18 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14, &(0x7f0000000280)={&(0x7f0000000100)="3a0f62c3f207e42877c996dc9b48df2f33ed3a2121bf981328c332c81fffbf3d18d76d47c9ba57dcf95c2695c9c07dc0b0a03d1d6380858602fc3009d5b22335c606e31a1750fd95387c8db91056419471fd50502e44008d11b36a903732654d039f4bc13d4a6c21eed5003e9600d6e35b18bb0c3acbb7802946e99edbaec9bf688d8bc43b145a517ee742eec0e94926991f0d499547df27fc0d2768073f72bcf2a83b8ec3ba5a66e354dac29790ac40d7620c3b95d6da6f2540051c6190e2a92afe8d", 0xc3}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0c5) mlockall(0x7) mlockall(0x3) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000300)=0x1, 0x4) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) syz_open_dev$dri(&(0x7f0000000340), 0xfff, 0x22c600) mlockall(0x4) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000380)=0x6) 02:00:18 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) mlockall(0x7) mlockall(0x3) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000180)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x22, 0x0, '\x00', 0x6, 0x7}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000100)={0x0, 0x10}) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1823.690989] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1823.765362] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1823.809873] CPU: 1 PID: 7968 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1823.817349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1823.826700] Call Trace: [ 1823.829296] dump_stack+0x1b2/0x281 [ 1823.832927] dump_header+0x178/0x82f [ 1823.836637] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1823.841745] ? ___ratelimit+0x2cd/0x530 [ 1823.845736] oom_kill_process.cold+0x10/0xa40 [ 1823.850258] out_of_memory+0xe3e/0x1190 [ 1823.854326] ? oom_killer_disable+0x1c0/0x1c0 [ 1823.858815] ? mutex_trylock+0x152/0x1a0 [ 1823.862874] __alloc_pages_nodemask+0x23e1/0x2720 [ 1823.867737] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1823.872591] alloc_pages_current+0x155/0x260 [ 1823.877000] filemap_fault+0x11a1/0x1ad0 [ 1823.881071] ext4_filemap_fault+0x84/0xb0 [ 1823.885220] __do_fault+0xfa/0x380 [ 1823.888858] __handle_mm_fault+0x2497/0x4620 [ 1823.893265] ? vm_insert_page+0x7c0/0x7c0 [ 1823.897406] ? free_object+0xe4/0x240 [ 1823.901228] ? mark_held_locks+0xa6/0xf0 [ 1823.905290] handle_mm_fault+0x455/0x9c0 [ 1823.909354] __do_page_fault+0x549/0xad0 [ 1823.913422] ? spurious_fault+0x640/0x640 [ 1823.917578] ? do_page_fault+0x60/0x500 [ 1823.922853] ? page_fault+0x2f/0x50 [ 1823.926480] page_fault+0x45/0x50 [ 1823.929928] RIP: 0000:0x947a7c [ 1823.933128] RSP: 4e20:000000c00003dfa0 EFLAGS: 0043b6a0 [ 1824.598501] Mem-Info: [ 1824.651550] active_anon:421580 inactive_anon:813604 isolated_anon:0 [ 1824.651550] active_file:37 inactive_file:8 isolated_file:0 [ 1824.651550] unevictable:46350 dirty:0 writeback:0 unstable:0 [ 1824.651550] slab_reclaimable:26716 slab_unreclaimable:144363 [ 1824.651550] mapped:66344 shmem:6930 pagetables:103074 bounce:0 [ 1824.651550] free:25074 free_pcp:31 free_cma:0 [ 1824.969286] Node 0 active_anon:1400024kB inactive_anon:208356kB active_file:0kB inactive_file:4kB unevictable:109676kB isolated(anon):0kB isolated(file):0kB mapped:235400kB dirty:0kB writeback:0kB shmem:19512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1339392kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1825.112441] Node 1 active_anon:286284kB inactive_anon:3046444kB active_file:836kB inactive_file:712kB unevictable:74120kB isolated(anon):0kB isolated(file):124kB mapped:29576kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1825.213259] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:4184kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:120kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1825.260224] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1825.286632] Node 0 DMA32 free:46960kB min:36200kB low:45248kB high:54296kB active_anon:1395840kB inactive_anon:208780kB active_file:960kB inactive_file:764kB unevictable:97140kB writepending:0kB present:3129332kB managed:2788128kB mlocked:96772kB kernel_stack:40608kB pagetables:108456kB bounce:0kB free_pcp:808kB local_pcp:256kB free_cma:0kB [ 1825.407503] lowmem_reserve[]: 0 0 0 0 0 [ 1825.421738] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 02:00:20 executing program 3: mlockall(0x7) mlockall(0x3) r0 = fork() r1 = fork() sched_getattr(r1, &(0x7f0000000000)={0x38}, 0x38, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80000001, 0x1, {r0}, {}, 0x5, 0xaf}) r2 = fork() sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) r3 = fork() sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x38, 0x0) r4 = fork() sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) r5 = fork() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_getattr(r5, &(0x7f0000000000)={0x38}, 0x38, 0x0) r6 = fork() syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/ipc\x00') sched_getattr(r6, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_getattr(r0, 0x0, 0x2d, 0x0) [ 1825.534367] lowmem_reserve[]: 0 0 0 0 0 [ 1825.565565] Node 1 Normal free:53288kB min:53696kB low:67120kB high:80544kB active_anon:286284kB inactive_anon:3045940kB active_file:2320kB inactive_file:3068kB unevictable:71536kB writepending:0kB present:4194304kB managed:4128256kB mlocked:71688kB kernel_stack:96160kB pagetables:302952kB bounce:0kB free_pcp:824kB local_pcp:124kB free_cma:0kB [ 1825.634408] lowmem_reserve[]: 0 0 0 0 0 [ 1825.639019] Node 0 DMA: 7*4kB (UME) 3*8kB (UM) 5*16kB (UME) 2*32kB (ME) 2*64kB (ME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11076kB [ 1825.660587] Node 0 DMA32: 153*4kB (UME) 689*8kB (UME) 1089*16kB (UME) 395*32kB (UM) 1*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36380kB [ 1825.708454] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1825.735253] Node 1 Normal: 126*4kB (UME) 1263*8kB (UME) 610*16kB (UM) 263*32kB (UME) 61*64kB (UME) 12*128kB (U) 2*256kB (U) 1*512kB (M) 3*1024kB (UME) 0*2048kB 4*4096kB (M) = 54704kB [ 1825.798693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1825.876257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1825.922382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 02:00:21 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0x1) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 1825.982181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1826.015661] 17411 total pagecache pages [ 1826.043889] 0 pages in swap cache [ 1826.081429] Swap cache stats: add 0, delete 0, find 0/0 [ 1826.110743] Free swap = 0kB [ 1826.145892] Total swap = 0kB [ 1826.170906] 2097051 pages RAM [ 1826.195527] 0 pages HighMem/MovableOnly 02:00:21 executing program 1: mlockall(0x7) mlockall(0x3) r0 = fork() r1 = fork() sched_getattr(r1, &(0x7f0000000000)={0x38}, 0x38, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80000001, 0x1, {r0}, {}, 0x5, 0xaf}) r2 = fork() sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) r3 = fork() sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x38, 0x0) r4 = fork() sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) r5 = fork() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_getattr(r5, &(0x7f0000000000)={0x38}, 0x38, 0x0) r6 = fork() syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/ipc\x00') sched_getattr(r6, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_getattr(r0, 0x0, 0x2d, 0x0) [ 1826.225874] 363849 pages reserved [ 1826.245643] 0 pages cma reserved [ 1826.276290] Out of memory (oom_kill_allocating_task): Kill process 7968 (syz-fuzzer) score 0 or sacrifice child [ 1826.347376] Killed process 18990 (syz-executor.0) total-vm:84924kB, anon-rss:76kB, file-rss:35840kB, shmem-rss:0kB [ 1826.476150] oom_reaper: reaped process 18990 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 02:00:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast2, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) mlockall(0x3) connect$x25(0xffffffffffffffff, &(0x7f0000000000), 0x12) mlockall(0x0) 02:00:25 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/113}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000300)={r2, &(0x7f00000002c0)=""/28}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000200)={0x0, 0x70000000000000}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x8001, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0x9, 0xfffff90c, 0x2}) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000040)=0x6) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4a076400a97ec526db3d7277"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) mq_open(&(0x7f00000003c0)='/\x00', 0x1, 0x120, &(0x7f0000000400)={0x7, 0x2, 0x200, 0x1}) 02:00:25 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f00000000c0)=[0xb0000000], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0}]}) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000180)={r2, 0x2}) mlockall(0x4) 02:00:25 executing program 3: mlockall(0x7) mlockall(0x3) r0 = fork() r1 = fork() sched_getattr(r1, &(0x7f0000000000)={0x38}, 0x38, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80000001, 0x1, {r0}, {}, 0x5, 0xaf}) r2 = fork() sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) r3 = fork() sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x38, 0x0) r4 = fork() sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) r5 = fork() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_getattr(r5, &(0x7f0000000000)={0x38}, 0x38, 0x0) r6 = fork() syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/ipc\x00') sched_getattr(r6, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_getattr(r0, 0x0, 0x2d, 0x0) 02:00:25 executing program 1: mlockall(0x7) mlockall(0x3) r0 = fork() r1 = fork() sched_getattr(r1, &(0x7f0000000000)={0x38}, 0x38, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80000001, 0x1, {r0}, {}, 0x5, 0xaf}) r2 = fork() sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) r3 = fork() sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x38, 0x0) r4 = fork() sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) r5 = fork() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_getattr(r5, &(0x7f0000000000)={0x38}, 0x38, 0x0) r6 = fork() syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/ipc\x00') sched_getattr(r6, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_getattr(r0, 0x0, 0x2d, 0x0) 02:00:25 executing program 0: mlockall(0x7) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), 0x4) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1831.149216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1831.167556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1831.224388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1831.264028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1831.313354] device bridge_slave_1 left promiscuous mode [ 1831.335803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1831.363909] device bridge_slave_0 left promiscuous mode [ 1831.385945] bridge0: port 1(bridge_slave_0) entered disabled state 02:00:26 executing program 2: mlockall(0x3) mlockall(0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_open_dev$evdev(&(0x7f0000000000), 0x7ff, 0x48a040) mlockall(0x0) [ 1831.444590] device veth1_macvtap left promiscuous mode [ 1831.455873] device veth0_macvtap left promiscuous mode [ 1831.500148] device veth1_vlan left promiscuous mode [ 1831.505343] device veth0_vlan left promiscuous mode [ 1831.831644] device hsr_slave_1 left promiscuous mode 02:00:27 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x5, 0x101, {0xffffffffffffffff}, {0xee01}, 0x6, 0x3}) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x8, 0x7, 0x40, 0x1f, 0x0, 0x3, 0x300, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000040)}, 0x40, 0xa48, 0x8, 0xa, 0xc2, 0x8001, 0x359, 0x0, 0x3, 0x0, 0x7f}, r1, 0xd, 0xffffffffffffffff, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x4000010) mlockall(0x3) mlockall(0x0) [ 1831.893071] device hsr_slave_0 left promiscuous mode 02:00:27 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast2, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) mlockall(0x3) connect$x25(0xffffffffffffffff, &(0x7f0000000000), 0x12) mlockall(0x0) [ 1831.953273] team0 (unregistering): Port device team_slave_1 removed [ 1831.988241] team0 (unregistering): Port device team_slave_0 removed [ 1832.038463] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1832.098940] bond0 (unregistering): Releasing backup interface bond_slave_0 02:00:27 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) mlockall(0x7) mlockall(0x3) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000180)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x22, 0x0, '\x00', 0x6, 0x7}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000100)={0x0, 0x10}) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1832.314571] bond0 (unregistering): Released all slaves 02:00:27 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)={0x0, 0x2}) mlockall(0x4) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x8000, 0x64800) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000140)={r2}) 02:00:28 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:00:29 executing program 2: mlockall(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000100)={r0, 0x65}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xc6, 0x10000, 0x56fb], 0x3, 0x0, 0x0, 0xffffffffffffffff}) mlockall(0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000140)=[0x7fffffff, 0x9]) 02:00:29 executing program 2: mlockall(0x3) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2b7dd699ef3c7351, 0x0) mlockall(0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000000c0)={0x1}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000000)) 02:00:29 executing program 1: mlockall(0x3) mlockall(0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_open_dev$evdev(&(0x7f0000000000), 0x7ff, 0x48a040) mlockall(0x0) 02:00:29 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f00000000c0)=[0xb0000000], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0}]}) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000180)={r2, 0x2}) mlockall(0x4) 02:00:29 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000200)=""/192) mlockall(0x3) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x100) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0x7fffffff) mlockall(0x0) [ 1835.416597] Bluetooth: hci4 command 0x0409 tx timeout [ 1835.580341] IPVS: ftp: loaded support on port[0] = 21 [ 1835.811222] chnl_net:caif_netlink_parms(): no params data found [ 1835.983900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1835.991896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1836.004752] device bridge_slave_0 entered promiscuous mode [ 1836.013293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.024604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1836.032708] device bridge_slave_1 entered promiscuous mode [ 1836.068592] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1836.077928] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1836.098926] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1836.106001] team0: Port device team_slave_0 added [ 1836.112139] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1836.120013] team0: Port device team_slave_1 added [ 1836.138481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1836.144852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1836.170864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1836.182305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1836.189079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1836.215649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1836.227080] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1836.234388] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1836.257997] device hsr_slave_0 entered promiscuous mode [ 1836.263630] device hsr_slave_1 entered promiscuous mode [ 1836.270672] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1836.278123] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1836.350565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.356930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1836.363530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.370045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1836.402911] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1836.409072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1836.418290] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1836.427478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1836.434661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1836.451767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1836.461703] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1836.467978] 8021q: adding VLAN 0 to HW filter on device team0 [ 1836.476352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1836.483936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.490466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1836.500030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1836.507947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.514291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1836.534982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1836.544981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1836.556794] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1836.563740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1836.572184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1836.581612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1836.589714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1836.597598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1836.604417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1836.618357] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1836.625509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1836.632550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1836.643906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1836.697159] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1836.707436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1836.737303] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1836.744320] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1836.751267] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1836.760919] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1836.768957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1836.777458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1836.784400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1836.794076] device veth0_vlan entered promiscuous mode [ 1836.804138] device veth1_vlan entered promiscuous mode [ 1836.816795] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1836.825579] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1836.832989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1836.841497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1836.852322] device veth0_macvtap entered promiscuous mode [ 1836.858822] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1836.867212] device veth1_macvtap entered promiscuous mode [ 1836.873239] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1836.881873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1836.891587] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1836.900250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1836.910114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.919582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1836.929460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.938646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1836.949567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.958763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1836.968574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.977793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1836.987584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.997920] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1837.004936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1837.013087] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1837.020768] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1837.028511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1837.036700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1837.045706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1837.055926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1837.065117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1837.074892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1837.084054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1837.093943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1837.103116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1837.112946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1837.122111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1837.131874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1837.142008] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1837.148974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1837.156435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1837.164186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1837.500560] Bluetooth: hci4 command 0x041b tx timeout 02:00:33 executing program 0: mlockall(0x7) mlockall(0x1) mlockall(0x3) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000040)={0x3ff, 0x5, 0x4, 0x1f, 0x40, 0xc, 0xf, "12f9eb575e265843027b389db69844c1c107f2be", "cb5adc3269a5a3ac9635a387240236cab9ac4b73"}) r0 = fork() ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)=0x6) sched_getattr(0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x7, 0x10000, {r0}, {0xee01}, 0x1, 0x8}) sched_getattr(r1, &(0x7f0000000100)={0x38}, 0x38, 0x0) 02:00:33 executing program 4: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) mlockall(0x0) r2 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 02:00:33 executing program 2: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@ipv4={""/10, ""/2, @private}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x3, 0x1, 0x7, 0x10001, 0x108, 0xffffffffffffffff, 0x6, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) mlockall(0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0xec0ea222391740}, 0x0) mlockall(0x3) 02:00:33 executing program 1: mlockall(0x3) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2b7dd699ef3c7351, 0x0) mlockall(0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000000c0)={0x1}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000000)) 02:00:33 executing program 3: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="45b318a1aa52b36b59cf72d5ce37cdce151674f829b5f5f447198b3f727ff3c621dd368e31cc37e28358bfb3ebb0b0c84b575853f38c7f77670f4898c51cb3a0bc4f2bc4b9f23bf5fad7fc8ad16b9e09236c657c3cd16b0955789b7acf7b5be8ee2fe572e54caa1cd90e946564edce2ce29e4de92e7a9cd5b58c6ea0b85eaa971313c86488f4a6526f693df27a366c4ce0e6bcf5367f4050bb5bb3727da0ebbc41c51e85c586ab141bce3a1fd86a85c38c1c6d44c6c3ff5f8a76810e6eb2fcebb8e4945f86065f158c0f945e7b7470d06425e7a034cbc0aa31fea1c4ab58870a103a9caebae468f79f200de1c29a0a910783708aab81036ba6fccb3c7d393d3175eca0c3f0e0d16100fb3929976994b13885cc2660ac20546eb8bec24873410780260740533dc3df016597013c270cb40c89267dba1043"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:00:33 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="41a4c65353f3ebc7109930116e2983071d2c0325d28eb6a251f5630acbba070000003271394628000000"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x428801, 0x0) mlockall(0x0) 02:00:34 executing program 2: sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1405, 0x100, 0x70bd28, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x10) mlockall(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x9, 0x0, {r0}, {r1}, 0x3, 0x100000000}) mlockall(0x4) mlockall(0x0) 02:00:34 executing program 2: mlockall(0x3) mlockall(0x2) [ 1839.567012] Bluetooth: hci4 command 0x040f tx timeout 02:00:34 executing program 3: mlockall(0x7) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), 0x4) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:00:34 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) mlockall(0x7) mlockall(0x3) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000180)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x22, 0x0, '\x00', 0x6, 0x7}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000100)={0x0, 0x10}) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:00:35 executing program 0: mlockall(0x7) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) mlockall(0x3) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:00:35 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x14480, 0x0) timerfd_gettime(r1, &(0x7f0000000080)) 02:00:35 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) r1 = socket(0x4, 0x6, 0x8499) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x7, 'wlan1\x00'}) 02:00:36 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) mlockall(0x7) mlockall(0x3) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000180)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x22, 0x0, '\x00', 0x6, 0x7}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000100)={0x0, 0x10}) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:00:36 executing program 2: mlockall(0x3) mlockall(0x0) mlockall(0x4) 02:00:36 executing program 1: mlockall(0x3) mlockall(0x2) [ 1841.646451] Bluetooth: hci4 command 0x0419 tx timeout 02:00:37 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:00:37 executing program 0: mlockall(0x3) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:00:37 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14, &(0x7f0000000280)={&(0x7f0000000100)="3a0f62c3f207e42877c996dc9b48df2f33ed3a2121bf981328c332c81fffbf3d18d76d47c9ba57dcf95c2695c9c07dc0b0a03d1d6380858602fc3009d5b22335c606e31a1750fd95387c8db91056419471fd50502e44008d11b36a903732654d039f4bc13d4a6c21eed5003e9600d6e35b18bb0c3acbb7802946e99edbaec9bf688d8bc43b145a517ee742eec0e94926991f0d499547df27fc0d2768073f72bcf2a83b8ec3ba5a66e354dac29790ac40d7620c3b95d6da6f2540051c6190e2a92afe8d", 0xc3}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0c5) mlockall(0x7) mlockall(0x3) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000300)=0x1, 0x4) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) syz_open_dev$dri(&(0x7f0000000340), 0xfff, 0x22c600) mlockall(0x4) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000380)=0x6) 02:00:38 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x6d, "1de82fe7199005625360800f179604995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68edec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed44237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf0200"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x0) mlockall(0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000001c0)={0x201, 0x5, &(0x7f00000000c0)=[0x4, 0xffff, 0x7aef, 0x200, 0xe69e], &(0x7f0000000100)=[0x3, 0x80000000, 0xfffffffe, 0x6, 0x80000000, 0x7d80], &(0x7f0000000140)=[0x5, 0xfffffff7, 0x7, 0x3, 0x2eb, 0x2], &(0x7f0000000180)=[0x0], 0x0, 0x401}) 02:00:38 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x3201, 0x0) connect$802154_dgram(r1, &(0x7f0000000040), 0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000100)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x2) mlockall(0x3) sendmsg$802154_dgram(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}, 0x1, 0x0, 0x0, 0x48075}, 0x0) mlockall(0x5) r2 = syz_open_dev$dri(&(0x7f0000000200), 0x6, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000240)) mlockall(0x4) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f00000000c0)={0x0, 0x200}) 02:00:38 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000280)={0x100, 0x3, &(0x7f0000000040)=[0x8000, 0x2, 0x2], &(0x7f0000000080)=[0x68, 0xffff3d8e, 0x5], &(0x7f0000000200)=[0x7, 0x5, 0x5, 0x0, 0xffffffff, 0xffff, 0x9, 0x80000001], &(0x7f0000000240)=[0x6, 0xffffffff, 0x5, 0x9, 0x6, 0x9, 0x1ff, 0x7, 0x98], 0x0, 0x4bb}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x2cc240, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:00:39 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:00:39 executing program 2: mlockall(0x3) mlockall(0x0) mlockall(0x1) 02:00:40 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000180)={0x7, 0x1, 0x96d8, 0x76, &(0x7f0000000000)=""/118, 0x9f, &(0x7f0000000080)=""/159, 0x14, &(0x7f0000000140)=""/20}) mlockall(0x7) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x5, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000200)={0x0, r2}) mlockall(0x3) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:00:40 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000200)={"28b6086c1605f8e61cbac4d5c4329001", 0x0, 0x0, {0xffffffffffffb476, 0x456a}, {0x100000000, 0x8000}, 0x7, [0x3ff, 0x7ff, 0x1, 0x9, 0x3, 0x1, 0x881, 0x2, 0x7ff, 0x3ff, 0x3ff, 0x5, 0x100, 0x7d1, 0x1, 0xbbb]}) 02:00:40 executing program 1: mlockall(0x3) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:00:40 executing program 3: mlockall(0x3) mlockall(0x0) mlockall(0x4) 02:00:41 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x1404, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffdf4, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000810}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x5560a892e69d8a78, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x0, 0xf18, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x48}}, 0x4000000) mlockall(0x3) r2 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x4000, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000580)={0x0, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000240)) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x7c77, 0x400000) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000100)=[0x1, 0x4], &(0x7f0000000140)=[0x800, 0xcc, 0x7ff, 0x8, 0x339, 0x796, 0x7fff], &(0x7f0000000180)=[0x4, 0x200, 0x0, 0x3, 0x0], &(0x7f00000001c0)=[0x8, 0x16b5, 0x10001, 0x24, 0x3, 0x4, 0x2572, 0x5, 0x3, 0x80], 0x0, 0x2}) mlockall(0x4) 02:00:41 executing program 2: mlockall(0x3) mlockall(0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/193, 0xc1, 0x9, &(0x7f0000000100)={0x77359400}) 02:00:42 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="e5d5b393ae6fff88"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x189301) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000200)={0x9, 0x20, 0x10000, 0xff, 0xfff, 0x2}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000002c0), 0x4) 02:00:42 executing program 0: mlockall(0x7) mlockall(0x0) mlockall(0x0) r0 = fork() ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x10000, 0x7ed, 0x7, 0x6, 0x9, 0x3], 0x6, 0x400, 0x0, 0xffffffffffffffff}) sched_rr_get_interval(r0, &(0x7f0000000080)) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) sched_getattr(0x0, 0x0, 0x0, 0x0) sched_getattr(r0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) 02:00:42 executing program 3: mlockall(0x3) mlockall(0x0) mlockall(0x4) 02:00:42 executing program 1: mlockall(0x7) mlockall(0x3) fork() ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) sched_getattr(0x0, 0x0, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x1406, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20060040}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x401}, 0x8) 02:00:42 executing program 0: mlockall(0x7) mlockall(0x6) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_setparam(r0, &(0x7f00000000c0)=0x7) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x6, 0x4) mlockall(0x4) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000140)={0x8, 0x8000, 0x1, 0x5, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[{}], 0x5, 0x0, '\x00', 0x6, 0x1}) 02:00:43 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x1) mlockall(0x6) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d13, 0xc0800) bind$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)) mlockall(0x4) 02:00:43 executing program 2: mlockall(0x3) mlockall(0x6) mq_open(&(0x7f0000000000)='[\x00', 0x1, 0x9c, &(0x7f0000000040)={0x1, 0x6ca, 0x4, 0x8b}) mlockall(0x1) 02:00:44 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x1404, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffdf4, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000810}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x5560a892e69d8a78, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x0, 0xf18, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x48}}, 0x4000000) mlockall(0x3) r2 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x4000, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000580)={0x0, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000240)) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x7c77, 0x400000) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000100)=[0x1, 0x4], &(0x7f0000000140)=[0x800, 0xcc, 0x7ff, 0x8, 0x339, 0x796, 0x7fff], &(0x7f0000000180)=[0x4, 0x200, 0x0, 0x3, 0x0], &(0x7f00000001c0)=[0x8, 0x16b5, 0x10001, 0x24, 0x3, 0x4, 0x2572, 0x5, 0x3, 0x80], 0x0, 0x2}) mlockall(0x4) 02:00:44 executing program 3: mlockall(0x7) mlockall(0x0) mlockall(0x0) r0 = fork() ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x10000, 0x7ed, 0x7, 0x6, 0x9, 0x3], 0x6, 0x400, 0x0, 0xffffffffffffffff}) sched_rr_get_interval(r0, &(0x7f0000000080)) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) sched_getattr(0x0, 0x0, 0x0, 0x0) sched_getattr(r0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) 02:00:44 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x200800, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="15c7f0aa37749d102cc4140b591525b95378db86b83d3f91d0d8b208eb041d5d12ad58aa6093cffc5596f681d62bd1b46bf61ec36dab39afe40283ff9a5dab0038f00217b5c8aece8b58e199d6037761b8a4d790110c565dd6c46203074e30e9a1025481"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) r1 = socket(0xa, 0xa, 0x4) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000280)=""/202) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000400)={'veth1\x00', 0x31d6, 0x7}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x202100) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000001400)=""/4096) mlockall(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="079b0000db81e6aad256bf251aefc7a70c4489b7278af6341c1e8849", @ANYRES16=0x0, @ANYBLOB="100129bd7000fddbdf2504000000050007000000000000000400fdffffff22d9000029edf8592b000000580900000500060007000000a3155958526568ac95a80e4f046690000000d061f3b32e6407f0"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x8809) 02:00:44 executing program 3: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="e5d5b393ae6fff88"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x189301) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000200)={0x9, 0x20, 0x10000, 0xff, 0xfff, 0x2}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000002c0), 0x4) 02:00:45 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @generic={0x0, 0xd, 0x2, 0xfff, 0x6}, @exit, @call={0x85, 0x0, 0x0, 0xa3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xaed, 0x0, 0x0, 0x0, 0xa1e}, @alu={0x4, 0x0, 0x4, 0xd5eea7b997c2cfc6, 0x2, 0xfffffffffffffffe, 0x8}, @jmp={0x5, 0x1, 0x1, 0x6, 0x4, 0x20, 0x10}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x146, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0xf4, &(0x7f0000000300)=""/244, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x5, 0x3, 0x1}, 0x10}, 0x78) mlockall(0x3) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1406, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x20004000) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x4d1a, 0x40801) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000500)={'veth1_virt_wifi\x00', 0x7ff, 0x6}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) socket$inet_icmp(0x2, 0x2, 0x1) mlockall(0x4) 02:00:45 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x1) mlockall(0x6) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d13, 0xc0800) bind$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)) mlockall(0x4) 02:00:46 executing program 2: mlockall(0x3) mlockall(0x0) mlockall(0x7) 02:00:46 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x1) mlockall(0x6) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d13, 0xc0800) bind$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)) mlockall(0x4) 02:00:46 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="fe98ea2d7f71b8e957544a6b447659388d3db9bb6b7d951c4cb86ad470f9c10c97a68aa62b2c943d5b4edbb813ab933d74322f38fe5e306553d769ffe0"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:00:46 executing program 0: mlockall(0x7) mlockall(0x3) r0 = fork() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='^%\'%\x00'}, 0x30) sched_getattr(0x0, 0x0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000080)={0x6, 0x8, 0x7, 0x0, 0x8, 0x800, 0xbd}) mlockall(0x6) 02:00:46 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x1) mlockall(0x6) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d13, 0xc0800) bind$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)) mlockall(0x4) 02:00:47 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d1a, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 02:00:47 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000440)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000480)=r3) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000005c0), 0x705000, 0x0) waitid$P_PIDFD(0x3, r4, &(0x7f0000000600), 0x40000000, &(0x7f0000000680)) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0], 0x4, 0x1, 0x4}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="a645fae77028d390f9f69d4c7138bd508f6777689e51e86a3c061e7cbfecd58c66010a13bd62ad6cd7b8f49e0f46f159322a1ce51e365e35edbd71316de5333c392978160f45840b259690885c37b3b915cc24ec2df50d5b4b3fd117ef"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000000f1400022cbd7000c9d7f69abe71983c636d6100080001000200000008000300030010000a00450069706f69620000000800010002000000080003000100f8f308000100010000000d3597e0baa669b4d680490618c2e8481f0adf95c250fc8396417250f43afafb8bc090780e401dde0e79c0080edf484acba9f9e4edd9e2dfe79b15b2598709253603227477f0d8972c3bda9ac87872ecdcceb988a618d64bbe6e3359a39968b820950c599484bee07586d93bd043c39e34ce1307a773bfa2a225b259cdef22542392167a666b5125d1908acce0a55b25bde458bc6bbd25b1a9115dd90285"], 0x4c}}, 0x40080) mlockall(0x3) mlockall(0x0) 02:00:47 executing program 3: mlockall(0x7) mlockall(0x6) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_setparam(r0, &(0x7f00000000c0)=0x7) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x6, 0x4) mlockall(0x4) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000140)={0x8, 0x8000, 0x1, 0x5, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[{}], 0x5, 0x0, '\x00', 0x6, 0x1}) 02:00:48 executing program 2: mlockall(0x3) mlockall(0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x240500, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/182) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1410, 0x400, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}}, 0x4000040) 02:00:48 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x1) mlockall(0x6) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d13, 0xc0800) bind$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)) mlockall(0x4) 02:00:48 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x161483, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5a233a07905d9a892daa4ccefecd34a3b31e2eec194974e5427f6397daf4460e1109862e0182b998a56bfa5e135a6ae769af28f56adb0e69b7d1e3b074fb35960543460a3ccef33a6c694e0aec23200027d82617f84b082bb4c728f337cdc2c150b1f816da5b5508c63af552a07ec29bf46c1d730003f596bfa21f1b4219facd1b0fb7023e1e33a068ab48694c743e9b1a57022599ba18231fcc7938b67b80520c7311bb719e0fdf0b693199ca132c83db98579f3810ade2d6daf38a326a33f5f203df82a0c2c8b43a27371be2851202fe06f0af15c133a71f0742a26f4b63339ec19a5fe67e9339a8cc8cbdba7e"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:00:49 executing program 0: mlockall(0x6) mlockall(0x3) r0 = fork() syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/time\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r2 = socket(0x29, 0x2, 0x0) bind$802154_dgram(r2, 0x0, 0x0) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:00:49 executing program 3: mlockall(0x7) mlockall(0x6) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_setparam(r0, &(0x7f00000000c0)=0x7) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x6, 0x4) mlockall(0x4) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000140)={0x8, 0x8000, 0x1, 0x5, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[{}], 0x5, 0x0, '\x00', 0x6, 0x1}) 02:00:49 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x1b62cdf3109be0f3) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc08c0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000000c0)=""/181) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000180)={0x80}) mlockall(0x4) 02:00:50 executing program 2: mlockall(0x0) mlockall(0x6) 02:00:50 executing program 1: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x200800, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="15c7f0aa37749d102cc4140b591525b95378db86b83d3f91d0d8b208eb041d5d12ad58aa6093cffc5596f681d62bd1b46bf61ec36dab39afe40283ff9a5dab0038f00217b5c8aece8b58e199d6037761b8a4d790110c565dd6c46203074e30e9a1025481"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) r1 = socket(0xa, 0xa, 0x4) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000280)=""/202) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000400)={'veth1\x00', 0x31d6, 0x7}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x202100) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000001400)=""/4096) mlockall(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="079b0000db81e6aad256bf251aefc7a70c4489b7278af6341c1e8849", @ANYRES16=0x0, @ANYBLOB="100129bd7000fddbdf2504000000050007000000000000000400fdffffff22d9000029edf8592b000000580900000500060007000000a3155958526568ac95a80e4f046690000000d061f3b32e6407f0"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x8809) 02:00:50 executing program 2: mlockall(0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x0, 0x10001, 0x0, 0x0, 0x0, 0x200000}, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffff937, 0x10000}, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000100)={0x0, r0+60000000}, 0x0) mlockall(0x3) 02:00:50 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000380)={0x0, 0x2a}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f00000006c0)=""/73) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9909880d1d44ea1b00520a9978ef3e1b899468ded77681c907d7926e4d3ed8089fb6152f846a4ec2bb926775d7b769d58cc1d4c5163e64e864de0c7132c95a0c0b10cdbdec6c82719836368e484c53040bbfa118ff2da82a5b75b63b9154b6e70387"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000080)=[0x1, 0x400], &(0x7f0000000200)=[0x7fff, 0x47, 0x7, 0x0, 0x5], &(0x7f0000000240)=[0x0, 0xfffffffe, 0x7, 0x0, 0xfffff6eb, 0x200, 0x7f], &(0x7f0000000680)=[0xfff, 0xc7, 0x3, 0x7, 0x3, 0x4, 0x477, 0x7, 0x7fff, 0xffff0000], 0x0, 0x2000}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000004c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x4, 0x0, 0x400}) mlockall(0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000a64310002abd7000fedbdf2508003f0001000000080001000200000008000100020000000800030004000000080003000400000008003f0001000000080001000200000008e40200030000e4"], 0x50}, 0x1, 0x0, 0x0, 0x65162072f1514e11}, 0x10) 02:00:50 executing program 3: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x161483, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5a233a07905d9a892daa4ccefecd34a3b31e2eec194974e5427f6397daf4460e1109862e0182b998a56bfa5e135a6ae769af28f56adb0e69b7d1e3b074fb35960543460a3ccef33a6c694e0aec23200027d82617f84b082bb4c728f337cdc2c150b1f816da5b5508c63af552a07ec29bf46c1d730003f596bfa21f1b4219facd1b0fb7023e1e33a068ab48694c743e9b1a57022599ba18231fcc7938b67b80520c7311bb719e0fdf0b693199ca132c83db98579f3810ade2d6daf38a326a33f5f203df82a0c2c8b43a27371be2851202fe06f0af15c133a71f0742a26f4b63339ec19a5fe67e9339a8cc8cbdba7e"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:00:51 executing program 0: mlockall(0x7) mlockall(0x1) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xfffffe29, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1404, 0x10, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x2010}, 0x48080) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x1ff, 0x3f, 0x4, 0x40004, 0x1], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000002c0)=""/121) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x140d, 0x4, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x20}}, 0x8000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000000414020028bd7000fedb7e2508000100010000000800010001000014f000000000000000080001000200000008000100010000000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x40080) 02:00:52 executing program 2: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7fffffff, 0x1, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x4}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x400, 0x2, {r0}, {r1}, 0x7, 0xe5b}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, r2, 0x0, 0x2, &(0x7f0000000080)='#\x00'}, 0x30) mlockall(0x3) mlockall(0x0) 02:00:52 executing program 1: mlockall(0x7) mlockall(0x3) fork() ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) sched_getattr(0x0, 0x0, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x1406, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20060040}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x401}, 0x8) 02:00:52 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f00000000c0)="31e25ea6d05ba76f4bd057db34f527e62f8c8da90d42a7f318e2a49a351a3a9744baaa397bceb569d383159e9885846687e5e9a3131afe00"/68, 0x44}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x0) 02:00:52 executing program 3: mlockall(0x3) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0100, 0x0) mlockall(0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100) 02:00:52 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)=0x8) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:00:54 executing program 2: mlockall(0x2) mlockall(0x4) mlockall(0x2) 02:00:54 executing program 2: mlockall(0x3) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0100, 0x0) mlockall(0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100) 02:00:54 executing program 0: mlockall(0x7) mlockall(0x3) fork() r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44104700}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x400c8d1) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:00:54 executing program 1: mlockall(0x7) mlockall(0x1) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xfffffe29, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1404, 0x10, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x2010}, 0x48080) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x1ff, 0x3f, 0x4, 0x40004, 0x1], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000002c0)=""/121) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x140d, 0x4, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x20}}, 0x8000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000000414020028bd7000fedb7e2508000100010000000800010001000014f000000000000000080001000200000008000100010000000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x40080) 02:00:54 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[{}, {}], 0xffffffc1, 0x0, '\x00', 0x5, 0x2}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9738f70bf9c2c32495e2bce7220f9ed87c96063b0d5a4d518bc31a28deb660d5f2184f3038cc3dad6805352e3f06aa28db0bbd3995ec32c9e7bdcd0123e50cb2bd121032128314f83febe7a2fb1a11859a301380fe91d031b50bcb4666ac18837d84a4b0b66c4962202a2e611dfa56e46f09bf82edf06db0ac17574de24ced10736d397b9ea5ef0a2c91517b14c6c01d432576796830905105f265a8"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:00:54 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f00000014c0)={0x7, &(0x7f00000000c0)=""/60, &(0x7f0000001400)=[{0x7, 0x0, 0x800, &(0x7f0000000100)}, {0x5, 0x1000, 0xce, &(0x7f0000000280)=""/4096}, {0x2, 0x42, 0x7, &(0x7f0000000140)=""/66}, {0x9, 0x8, 0x0, &(0x7f00000001c0)=""/8}, {0x100, 0x22, 0x2, &(0x7f0000001280)=""/34}, {0xde6, 0xa8, 0x101, &(0x7f00000012c0)=""/168}, {0x100, 0x5b, 0x2d80, &(0x7f0000001380)=""/91}]}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 02:00:54 executing program 3: mlockall(0x7) mlockall(0x3) r0 = fork() r1 = fork() sched_getattr(r1, &(0x7f0000000000)={0x38}, 0x38, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80000001, 0x1, {r0}, {}, 0x5, 0xaf}) r2 = fork() sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) r3 = fork() sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x38, 0x0) r4 = fork() sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) r5 = fork() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_getattr(r5, &(0x7f0000000000)={0x38}, 0x38, 0x0) r6 = fork() syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/ipc\x00') sched_getattr(r6, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_getattr(r0, 0x0, 0x2d, 0x0) 02:00:56 executing program 2: mlockall(0x7) mlockall(0x3) r0 = fork() r1 = fork() sched_getattr(r1, &(0x7f0000000000)={0x38}, 0x38, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80000001, 0x1, {r0}, {}, 0x5, 0xaf}) r2 = fork() sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) r3 = fork() sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x38, 0x0) r4 = fork() sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) r5 = fork() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_getattr(r5, &(0x7f0000000000)={0x38}, 0x38, 0x0) r6 = fork() syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/ipc\x00') sched_getattr(r6, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_getattr(r0, 0x0, 0x2d, 0x0) 02:00:56 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={@null, 0x1, 'macsec0\x00'}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000200)=""/241) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) mlockall(0x3) mlockall(0x0) 02:00:56 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 02:00:56 executing program 1: mlockall(0x3) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)) mlockall(0x0) 02:00:57 executing program 0: mlockall(0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"092c71f280036c49538cafac4c8f716a", 0x0, 0x0, {0xa6, 0xfffff800}, {0x4, 0x81}, 0x83, [0xf3, 0xfff, 0x5, 0x5, 0x2, 0x99, 0x9, 0x100000001, 0x3, 0x81b2, 0xffffffff, 0x6, 0x7, 0x5, 0x0, 0x7fff]}) mlockall(0x3) fork() 02:00:57 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="33ed8d066db074d3512c0057172cab1687bc4b4bf22cc426ae02d63508c1903e189e322f6451259db76ff7e30adc1e2353508370ea1f00d16d8329a00e4ee6487f1e5be806bef711ef84efc351a2cb811222ce7c35ed86bc87c0d68624fc20d284079c19814e23ed044825289ee37d26d68a70270a6262e41f1cc098cead2713d9eb0044c262022e59154a28bdae610407d6e44bf8196f750838df4aebca2194933b4e6e060901ab7bff9590ec46e1f75dc5e1956a9db41a6ee2201211b5c2dcd1e2"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:00:57 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x5) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000180), 0x4) mlockall(0x1) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x400, 0x3809, 0x1f7}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000140)) mlockall(0x4) 02:00:58 executing program 2: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={@null, 0x1, 'macsec0\x00'}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000200)=""/241) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) mlockall(0x3) mlockall(0x0) 02:00:58 executing program 3: mlockall(0x1) mlockall(0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) mq_open(&(0x7f0000000080)='/&.]!\x00', 0x2, 0x154, &(0x7f00000000c0)={0x3, 0x529, 0x7fff, 0x6}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) mlockall(0x0) 02:00:58 executing program 1: mlockall(0x7) mlockall(0x3) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) mlockall(0x1) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/44) mlockall(0x4) 02:00:58 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000500)={0x200, 0x3f, 0x0, 0xda, &(0x7f00000002c0)=""/218, 0x1b, &(0x7f00000003c0)=""/27, 0xf9, &(0x7f0000000400)=""/249}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x341020, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000240)={r1, 0x5, 0x7, 0x1, 0x1, 0xa5, 0x2, 0x0, 0x3ff, 0x4, 0x6, 0xffffffc0}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000540)={0x9}) mlockall(0x3) mlockall(0x0) 02:00:58 executing program 0: mlockall(0x7) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x10000, 0x201) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x1}) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:00:59 executing program 0: mlockall(0x1) mlockall(0x3) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = fork() sched_setparam(r0, &(0x7f0000000040)=0x1) r1 = fork() sched_getattr(r1, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_getattr(r1, 0x0, 0x0, 0x0) 02:00:59 executing program 2: mlockall(0x7) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x10000, 0x201) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x1}) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:00:59 executing program 3: mlockall(0x3) fork() fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:00 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000280)="63fbe204e41bb0bce73228281fbd078a40247e61f95061f9feef3fc2037276b862760f36498be2b59ea00ff30e18e66c4f7d56ad1f1c47114924d96863ca1cce281d9b50ff7247a19f89edf7ccc600d78c77eaa593df6c98b36b08a48a91c88362a3f67c74fd206ed83a78e31a33d438a3c4bc56664fecabcf5dfb5988323f2f509b32018df8bdc2f823c0dcfab5f6beacabb02bab8d9e67631ca15cdd0cdcd82835e38cbf600e63f1da4c99caebf51206367215ca4297468369b08bb4f83ebf3e7e4a32dbd8979c7f5a00b074593730a2a18bb1dea25e4ed642aa97df25540daf8e8d95", 0xe4, 0x100000001, &(0x7f0000000140)={0x77359400}) r1 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r1, 0x0, 0xffffffffffffffff, 0xf) mlockall(0x4) 02:01:00 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x5) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000180), 0x4) mlockall(0x1) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x400, 0x3809, 0x1f7}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000140)) mlockall(0x4) 02:01:00 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ee5fe46dd5865181192dfd1ecb36c4a2eb05e5fdfcf8348616d251fa021d9e4922d0ef5891eae5960e0c22f3fc9d441f69a2bda1b98c08470f4fdd7ec19a5eac9c8d39d006df217c7ed9b6607dac6048a147295b940faa25d4edb5f001c59e0d43e11f05250a50fef1c8056e716f4c474429f329d2061c6c181fb2b83d18afe3e9fe5c9fca1818d17ae15bd0cd8571f3f62c073f514997eed44fe80865242772ca0cf59ebfcccf125ee343361c5f1bf13bf083d12e4b1d55957f6ffc5c6dc40fa66f39c5cb829e96836cbc54584c6736e4dffc76fc47c80102d82461e8298d6b0908b51a2b63d148856ba75d3f07"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:01:00 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x5) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000180), 0x4) mlockall(0x1) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x400, 0x3809, 0x1f7}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000140)) mlockall(0x4) 02:01:01 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x4) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100), 0x100) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) socket$inet_icmp(0x2, 0x2, 0x1) 02:01:01 executing program 0: mlockall(0x7) mlockall(0x6) r0 = fork() sched_getattr(0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mlockall(0x0) sched_rr_get_interval(r0, &(0x7f0000000000)) 02:01:01 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) r1 = socket(0x10, 0xa, 0x5) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x48, 0x1412, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c880}, 0x4054) mlockall(0x3) mlockall(0x0) 02:01:02 executing program 1: mlockall(0x7) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:02 executing program 0: mlockall(0x7) mlockall(0x3) r0 = fork() r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x9, 0xffffff90, 0x8, 0x7, 0x1ff, 0x7, 0x6, 0x200], 0x8, 0x800, 0x0, 0xffffffffffffffff}) r4 = fork() sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0xab, 0x5, {r0}, {0xffffffffffffffff}, 0x2, 0x2}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r6, 0x40104593, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x144, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x144}}, 0x44000) sched_getattr(0x0, 0x0, 0x0, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r7, 0x40104593, 0x0) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000300)={0x7, 0x1, 0x4, 0x8, 0x80000000, {0x77359400}, {0x2, 0xc, 0x6, 0x80, 0x8, 0x8, "536528a2"}, 0x5af1, 0x2, @fd=r6}) 02:01:03 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x5) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000180), 0x4) mlockall(0x1) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x400, 0x3809, 0x1f7}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000140)) mlockall(0x4) 02:01:03 executing program 3: mlockall(0x7) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:03 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc8b00) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 02:01:03 executing program 1: mlockall(0x7) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:03 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:01:04 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x5) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000180), 0x4) mlockall(0x1) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x400, 0x3809, 0x1f7}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000140)) mlockall(0x4) 02:01:05 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4103, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000002c0)={0x400, 0x2, &(0x7f0000000080)=[0x4, 0x7f], &(0x7f0000000200)=[0x5, 0x423d, 0x0, 0xfd6], &(0x7f0000000240)=[0x3, 0xa, 0x2, 0x6, 0x400000, 0xff, 0xbfbb, 0x5, 0x2], &(0x7f0000000280)=[0x3, 0x3, 0x80000000, 0x3ff, 0x42afb0d6, 0x4], 0x0, 0x7}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000003c0)=0x8) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4040055) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:01:05 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000280)="63fbe204e41bb0bce73228281fbd078a40247e61f95061f9feef3fc2037276b862760f36498be2b59ea00ff30e18e66c4f7d56ad1f1c47114924d96863ca1cce281d9b50ff7247a19f89edf7ccc600d78c77eaa593df6c98b36b08a48a91c88362a3f67c74fd206ed83a78e31a33d438a3c4bc56664fecabcf5dfb5988323f2f509b32018df8bdc2f823c0dcfab5f6beacabb02bab8d9e67631ca15cdd0cdcd82835e38cbf600e63f1da4c99caebf51206367215ca4297468369b08bb4f83ebf3e7e4a32dbd8979c7f5a00b074593730a2a18bb1dea25e4ed642aa97df25540daf8e8d95", 0xe4, 0x100000001, &(0x7f0000000140)={0x77359400}) r1 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r1, 0x0, 0xffffffffffffffff, 0xf) mlockall(0x4) 02:01:05 executing program 1: mlockall(0x7) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:05 executing program 0: mlockall(0x2) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:06 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360920f179602995e987bb117f7323d5057a85037a4ed30c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa19423707013e4417a7dc585750d962993fe6ce68436d055ae178706abcc530369f8f81433da5ff5521f46f2e071a9394cf0200"}) mlockall(0x7) mlockall(0x3) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 02:01:07 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000280)="63fbe204e41bb0bce73228281fbd078a40247e61f95061f9feef3fc2037276b862760f36498be2b59ea00ff30e18e66c4f7d56ad1f1c47114924d96863ca1cce281d9b50ff7247a19f89edf7ccc600d78c77eaa593df6c98b36b08a48a91c88362a3f67c74fd206ed83a78e31a33d438a3c4bc56664fecabcf5dfb5988323f2f509b32018df8bdc2f823c0dcfab5f6beacabb02bab8d9e67631ca15cdd0cdcd82835e38cbf600e63f1da4c99caebf51206367215ca4297468369b08bb4f83ebf3e7e4a32dbd8979c7f5a00b074593730a2a18bb1dea25e4ed642aa97df25540daf8e8d95", 0xe4, 0x100000001, &(0x7f0000000140)={0x77359400}) r1 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r1, 0x0, 0xffffffffffffffff, 0xf) mlockall(0x4) 02:01:07 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x2000808d) mlockall(0x3) mlockall(0x0) 02:01:07 executing program 1: mlockall(0x7) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) fork() 02:01:07 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x535642, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000001c0)={0x53, 0x2, 0x81, {0x5, 0x9}, {0x0, 0x8}, @ramp={0xfffd, 0x401, {0x3, 0x1, 0x3, 0x6}}}) bind$x25(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000240)) mlockall(0x5) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000100)={0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) 02:01:08 executing program 0: mlockall(0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) mlockall(0x3) fork() mlockall(0x1) sched_getattr(0x0, 0x0, 0x0, 0x0) mlockall(0x2) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) mlockall(0x2) 02:01:09 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x8d, 0x7f}) mlockall(0x4) 02:01:09 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) accept4$x25(r1, 0x0, &(0x7f0000000040), 0x800) mlockall(0x0) 02:01:09 executing program 1: mlockall(0x7) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) fork() 02:01:10 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000280)="63fbe204e41bb0bce73228281fbd078a40247e61f95061f9feef3fc2037276b862760f36498be2b59ea00ff30e18e66c4f7d56ad1f1c47114924d96863ca1cce281d9b50ff7247a19f89edf7ccc600d78c77eaa593df6c98b36b08a48a91c88362a3f67c74fd206ed83a78e31a33d438a3c4bc56664fecabcf5dfb5988323f2f509b32018df8bdc2f823c0dcfab5f6beacabb02bab8d9e67631ca15cdd0cdcd82835e38cbf600e63f1da4c99caebf51206367215ca4297468369b08bb4f83ebf3e7e4a32dbd8979c7f5a00b074593730a2a18bb1dea25e4ed642aa97df25540daf8e8d95", 0xe4, 0x100000001, &(0x7f0000000140)={0x77359400}) r1 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r1, 0x0, 0xffffffffffffffff, 0xf) mlockall(0x4) 02:01:10 executing program 3: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x2000808d) mlockall(0x3) mlockall(0x0) 02:01:10 executing program 1: mlockall(0x7) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) fork() 02:01:11 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0x1ff, 0x8, 0x7, 0x7fff, 0x2, 0xdc84}) 02:01:11 executing program 0: mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x0, 0x3, 0x1, 0x9, 0x9, 0x0, 0xffffffffffffffe9}, @ldst={0x2, 0x1, 0x0, 0x4, 0x9, 0x20, 0xffffffffffffffff}], &(0x7f0000000040)='GPL\x00', 0xb25, 0x88, &(0x7f0000000080)=""/136, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x10, 0x1f, 0x100}, 0x10, 0x27f3d}, 0x78) 02:01:11 executing program 3: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x2000808d) mlockall(0x3) mlockall(0x0) 02:01:12 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000280)="63fbe204e41bb0bce73228281fbd078a40247e61f95061f9feef3fc2037276b862760f36498be2b59ea00ff30e18e66c4f7d56ad1f1c47114924d96863ca1cce281d9b50ff7247a19f89edf7ccc600d78c77eaa593df6c98b36b08a48a91c88362a3f67c74fd206ed83a78e31a33d438a3c4bc56664fecabcf5dfb5988323f2f509b32018df8bdc2f823c0dcfab5f6beacabb02bab8d9e67631ca15cdd0cdcd82835e38cbf600e63f1da4c99caebf51206367215ca4297468369b08bb4f83ebf3e7e4a32dbd8979c7f5a00b074593730a2a18bb1dea25e4ed642aa97df25540daf8e8d95", 0xe4, 0x100000001, &(0x7f0000000140)={0x77359400}) r1 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r1, 0x0, 0xffffffffffffffff, 0xf) mlockall(0x4) 02:01:12 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000000c0)={0x4c, "b0f013e7161a660e75eb7b3ea863f5021582f887cf67ba2c6d6a6ffb3abbdc3a4023297d0ff1b240b1f47f9c75da3ba6a3fe89ff8a5e30356f91fbc622f252d1572deb310d62e945f72da8161e51735bf7b9aa9e092957e1582bd39b4e1fa6fe669a4596ef27ef14be56b9f2bf936e0a9c1fddd487e22565668034334a0390f0"}) mlockall(0x7) mlockall(0x5) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x9, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 02:01:13 executing program 3: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x2000808d) mlockall(0x3) mlockall(0x0) 02:01:13 executing program 1: mlockall(0x7) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:13 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:01:14 executing program 1: mlockall(0x7) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1879.665239] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1879.722723] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1879.758775] CPU: 0 PID: 7988 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1879.766598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1879.775955] Call Trace: [ 1879.778554] dump_stack+0x1b2/0x281 [ 1879.782186] dump_header+0x178/0x82f [ 1879.785907] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1879.791018] ? ___ratelimit+0x2cd/0x530 [ 1879.795013] oom_kill_process.cold+0x10/0xa40 [ 1879.799528] out_of_memory+0xe3e/0x1190 [ 1879.803546] ? oom_killer_disable+0x1c0/0x1c0 [ 1879.808048] ? mutex_trylock+0x152/0x1a0 [ 1879.812116] __alloc_pages_nodemask+0x23e1/0x2720 [ 1879.816984] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1879.821853] alloc_pages_current+0x155/0x260 [ 1879.826300] filemap_fault+0x11a1/0x1ad0 [ 1879.830419] ext4_filemap_fault+0x84/0xb0 [ 1879.834580] __do_fault+0xfa/0x380 [ 1879.838145] __handle_mm_fault+0x2497/0x4620 [ 1879.842563] ? vm_insert_page+0x7c0/0x7c0 [ 1879.846720] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1879.851187] ? nanosleep_copyout+0x100/0x100 [ 1879.855611] ? mark_held_locks+0xa6/0xf0 [ 1879.859774] handle_mm_fault+0x455/0x9c0 [ 1879.863855] __do_page_fault+0x549/0xad0 [ 1879.867942] ? spurious_fault+0x640/0x640 [ 1879.872218] ? do_page_fault+0x60/0x500 [ 1879.876259] ? page_fault+0x2f/0x50 [ 1879.879897] page_fault+0x45/0x50 [ 1879.883364] RIP: 1cabb8:0x8 [ 1879.886295] RSP: 54e3:00007fff35b7f2ac EFLAGS: 00000032 [ 1879.896740] Mem-Info: [ 1879.906930] active_anon:407253 inactive_anon:859645 isolated_anon:0 [ 1879.906930] active_file:31 inactive_file:187 isolated_file:0 [ 1879.906930] unevictable:36328 dirty:1 writeback:0 unstable:0 [ 1879.906930] slab_reclaimable:26697 slab_unreclaimable:133273 [ 1879.906930] mapped:61994 shmem:6930 pagetables:91469 bounce:0 [ 1879.906930] free:32260 free_pcp:389 free_cma:0 02:01:15 executing program 3: mlockall(0x7) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1880.180347] Node 0 active_anon:1384068kB inactive_anon:249680kB active_file:540kB inactive_file:660kB unevictable:84600kB isolated(anon):0kB isolated(file):128kB mapped:218572kB dirty:8kB writeback:0kB shmem:19512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1337344kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1880.419162] Node 1 active_anon:237480kB inactive_anon:3161964kB active_file:268kB inactive_file:292kB unevictable:121360kB isolated(anon):0kB isolated(file):0kB mapped:49312kB dirty:76kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1880.542316] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:4180kB inactive_anon:76kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.573544] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1880.579519] Node 0 DMA32 free:35420kB min:36200kB low:45248kB high:54296kB active_anon:1379376kB inactive_anon:248584kB active_file:0kB inactive_file:0kB unevictable:89740kB writepending:20kB present:3129332kB managed:2788128kB mlocked:89748kB kernel_stack:40928kB pagetables:109060kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.620296] lowmem_reserve[]: 0 0 0 0 0 [ 1880.624651] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.650734] lowmem_reserve[]: 0 0 0 0 0 [ 1880.655065] Node 1 Normal free:55020kB min:53696kB low:67120kB high:80544kB active_anon:237500kB inactive_anon:3163240kB active_file:504kB inactive_file:984kB unevictable:119936kB writepending:96kB present:4194304kB managed:4128256kB mlocked:119828kB kernel_stack:80864kB pagetables:256724kB bounce:0kB free_pcp:208kB local_pcp:0kB free_cma:0kB [ 1880.686578] lowmem_reserve[]: 0 0 0 0 0 [ 1880.690849] Node 0 DMA: 1*4kB (E) 5*8kB (U) 5*16kB (UE) 2*32kB (ME) 2*64kB (ME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11068kB [ 1880.706717] Node 0 DMA32: 2512*4kB (UMEH) 1420*8kB (UMH) 22*16kB (UMEH) 336*32kB (UMEH) 42*64kB (ME) 3*128kB (M) 0*256kB 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 36608kB [ 1880.722463] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1880.733768] Node 1 Normal: 17*4kB (M) 2062*8kB (UM) 1241*16kB (UME) 593*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55396kB [ 1880.755026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1880.779761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 02:01:15 executing program 0: setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000340), 0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000000)) mlockall(0x7) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3, 0x10000, 0x400, 0x9, 0xfffffffa], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)={r1}) mlockall(0x6) mlockall(0x3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xf75d, 0x8, 0xbc, 0x40], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000300)=0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x4, 0x8, 0x3, 0x1}) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1880.794583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1880.803794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1880.812761] 18405 total pagecache pages [ 1880.820274] 0 pages in swap cache [ 1880.835708] Swap cache stats: add 0, delete 0, find 0/0 [ 1880.853146] Free swap = 0kB [ 1880.860019] Total swap = 0kB [ 1880.864530] 2097051 pages RAM [ 1880.885435] 0 pages HighMem/MovableOnly [ 1880.903865] 363849 pages reserved [ 1880.930831] 0 pages cma reserved [ 1880.957589] Out of memory (oom_kill_allocating_task): Kill process 7988 (syz-executor.4) score 0 or sacrifice child [ 1881.021671] Killed process 10797 (syz-executor.4) total-vm:93648kB, anon-rss:37028kB, file-rss:35084kB, shmem-rss:0kB 02:01:16 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000280)="63fbe204e41bb0bce73228281fbd078a40247e61f95061f9feef3fc2037276b862760f36498be2b59ea00ff30e18e66c4f7d56ad1f1c47114924d96863ca1cce281d9b50ff7247a19f89edf7ccc600d78c77eaa593df6c98b36b08a48a91c88362a3f67c74fd206ed83a78e31a33d438a3c4bc56664fecabcf5dfb5988323f2f509b32018df8bdc2f823c0dcfab5f6beacabb02bab8d9e67631ca15cdd0cdcd82835e38cbf600e63f1da4c99caebf51206367215ca4297468369b08bb4f83ebf3e7e4a32dbd8979c7f5a00b074593730a2a18bb1dea25e4ed642aa97df25540daf8e8d95", 0xe4, 0x100000001, &(0x7f0000000140)={0x77359400}) r1 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r1, 0x0, 0xffffffffffffffff, 0xf) 02:01:16 executing program 1: mlockall(0x7) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:16 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x0) mlockall(0x3) mlockall(0x0) 02:01:16 executing program 4: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x25c400) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000001280)={0x1, &(0x7f0000000100)=""/192, &(0x7f00000001c0)=[{0x4, 0x1000, 0xa06, &(0x7f0000000280)=""/4096}]}) mlockall(0x4) 02:01:17 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000000c0)={0x4c, "b0f013e7161a660e75eb7b3ea863f5021582f887cf67ba2c6d6a6ffb3abbdc3a4023297d0ff1b240b1f47f9c75da3ba6a3fe89ff8a5e30356f91fbc622f252d1572deb310d62e945f72da8161e51735bf7b9aa9e092957e1582bd39b4e1fa6fe669a4596ef27ef14be56b9f2bf936e0a9c1fddd487e22565668034334a0390f0"}) mlockall(0x7) mlockall(0x5) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x9, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) [ 1882.852675] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1882.936417] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1882.956014] CPU: 0 PID: 7968 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1882.963487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1882.972842] Call Trace: [ 1882.975440] dump_stack+0x1b2/0x281 [ 1882.979070] dump_header+0x178/0x82f [ 1882.982783] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1882.987885] ? ___ratelimit+0x2cd/0x530 [ 1882.991863] oom_kill_process.cold+0x10/0xa40 [ 1882.996366] out_of_memory+0xe3e/0x1190 [ 1883.000345] ? oom_killer_disable+0x1c0/0x1c0 [ 1883.004838] ? mutex_trylock+0x152/0x1a0 [ 1883.008909] __alloc_pages_nodemask+0x23e1/0x2720 [ 1883.013765] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1883.018666] alloc_pages_current+0x155/0x260 [ 1883.023080] filemap_fault+0x11a1/0x1ad0 [ 1883.027167] ext4_filemap_fault+0x84/0xb0 [ 1883.031350] __do_fault+0xfa/0x380 [ 1883.034892] __handle_mm_fault+0x2497/0x4620 [ 1883.039304] ? vm_insert_page+0x7c0/0x7c0 [ 1883.043455] ? free_object+0xe4/0x240 [ 1883.047265] ? mark_held_locks+0xa6/0xf0 [ 1883.051333] handle_mm_fault+0x455/0x9c0 [ 1883.055402] __do_page_fault+0x549/0xad0 [ 1883.059498] ? spurious_fault+0x640/0x640 [ 1883.063652] ? do_page_fault+0x60/0x500 [ 1883.068932] ? page_fault+0x2f/0x50 [ 1883.072562] page_fault+0x45/0x50 [ 1883.076013] RIP: 0000:0x947a7c [ 1883.079214] RSP: 76adf70b:000000c00003dfa0 EFLAGS: 0043b6a0 [ 1883.511358] Mem-Info: [ 1883.536289] active_anon:405131 inactive_anon:843945 isolated_anon:0 [ 1883.536289] active_file:28 inactive_file:0 isolated_file:0 [ 1883.536289] unevictable:62160 dirty:0 writeback:0 unstable:0 [ 1883.536289] slab_reclaimable:26911 slab_unreclaimable:132698 [ 1883.536289] mapped:72443 shmem:6930 pagetables:91465 bounce:0 [ 1883.536289] free:25216 free_pcp:60 free_cma:0 [ 1883.743646] Node 0 active_anon:1383108kB inactive_anon:248296kB active_file:4kB inactive_file:16kB unevictable:89280kB isolated(anon):0kB isolated(file):0kB mapped:218660kB dirty:0kB writeback:0kB shmem:19508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1337344kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1883.812418] Node 1 active_anon:237416kB inactive_anon:3127484kB active_file:64kB inactive_file:48kB unevictable:159360kB isolated(anon):0kB isolated(file):120kB mapped:71112kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1883.840939] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:4180kB inactive_anon:76kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1883.867861] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1883.872917] Node 0 DMA32 free:36112kB min:36200kB low:45248kB high:54296kB active_anon:1378928kB inactive_anon:248220kB active_file:0kB inactive_file:56kB unevictable:89280kB writepending:0kB present:3129332kB managed:2788128kB mlocked:89280kB kernel_stack:40832kB pagetables:108860kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1883.904317] lowmem_reserve[]: 0 0 0 0 0 [ 1883.908338] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1883.934732] lowmem_reserve[]: 0 0 0 0 0 [ 1883.966271] Node 1 Normal free:53684kB min:53696kB low:67120kB high:80544kB active_anon:237416kB inactive_anon:3127484kB active_file:52kB inactive_file:52kB unevictable:159364kB writepending:0kB present:4194304kB managed:4128256kB mlocked:159364kB kernel_stack:80960kB pagetables:256900kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1884.020210] lowmem_reserve[]: 0 0 0 0 0 [ 1884.024289] Node 0 DMA: 1*4kB (E) 5*8kB (U) 5*16kB (UE) 2*32kB (ME) 2*64kB (ME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11068kB [ 1884.047047] Node 0 DMA32: 2320*4kB (UME) 1410*8kB (UM) 30*16kB (UME) 359*32kB (UME) 44*64kB (ME) 4*128kB (ME) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36112kB [ 1884.078749] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1884.096351] Node 1 Normal: 31*4kB (U) 2286*8kB (UM) 1106*16kB (UME) 552*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53772kB [ 1884.110149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1884.130748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1884.139444] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1884.148345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1884.157014] 24692 total pagecache pages [ 1884.161004] 0 pages in swap cache [ 1884.164467] Swap cache stats: add 0, delete 0, find 0/0 [ 1884.169897] Free swap = 0kB [ 1884.172915] Total swap = 0kB [ 1884.175946] 2097051 pages RAM [ 1884.179142] 0 pages HighMem/MovableOnly [ 1884.183108] 363849 pages reserved [ 1884.186607] 0 pages cma reserved [ 1884.189984] Out of memory (oom_kill_allocating_task): Kill process 7968 (syz-fuzzer) score 0 or sacrifice child [ 1884.200498] Killed process 7984 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:960kB, shmem-rss:0kB 02:01:22 executing program 1: mlockall(0x7) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:23 executing program 0: mlockall(0x6) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)="7d9f8a394fb85a92a585b3eb30d234403298c2503a1c960c15c2447f799f39f6ec690b5607dfb7b3552d0bbd0a6c1fe213da9947e36e13f41796f33c4d931e323e7b3edb2954716bd5dd98297bd822343e86c3eb8c007d0e888c9fdb9bf35a612815a6a3ffc75122b0a2a74e196f6614e24fda14d42a0a6561ab2c3a15e35ba7e85b26fef0b64e0237bcd16e89a13bbb23c158c5a5ca7941d4da3d857c5271fe13284f04dfdeb24dd5f90d5f25fb2d2c70119a8b99d3c1eaa3fd9c8a2ccf", 0xbe}) mlockall(0x3) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) fork() r1 = fork() sched_getattr(r1, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_getattr(r1, 0x0, 0x0, 0x0) 02:01:23 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000000c0)={0x4c, "b0f013e7161a660e75eb7b3ea863f5021582f887cf67ba2c6d6a6ffb3abbdc3a4023297d0ff1b240b1f47f9c75da3ba6a3fe89ff8a5e30356f91fbc622f252d1572deb310d62e945f72da8161e51735bf7b9aa9e092957e1582bd39b4e1fa6fe669a4596ef27ef14be56b9f2bf936e0a9c1fddd487e22565668034334a0390f0"}) mlockall(0x7) mlockall(0x5) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x9, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 02:01:23 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}}, 0x10) mlockall(0x3) mlockall(0x0) 02:01:24 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000100)={0x2}) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000001400)=""/102400) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r2 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0a00) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000240)) mlockall(0x4) 02:01:24 executing program 1: mlockall(0x7) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:24 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000280)="63fbe204e41bb0bce73228281fbd078a40247e61f95061f9feef3fc2037276b862760f36498be2b59ea00ff30e18e66c4f7d56ad1f1c47114924d96863ca1cce281d9b50ff7247a19f89edf7ccc600d78c77eaa593df6c98b36b08a48a91c88362a3f67c74fd206ed83a78e31a33d438a3c4bc56664fecabcf5dfb5988323f2f509b32018df8bdc2f823c0dcfab5f6beacabb02bab8d9e67631ca15cdd0cdcd82835e38cbf600e63f1da4c99caebf51206367215ca4297468369b08bb4f83ebf3e7e4a32dbd8979c7f5a00b074593730a2a18bb1dea25e4ed642aa97df25540daf8e8d95", 0xe4, 0x100000001, &(0x7f0000000140)={0x77359400}) r1 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r1, 0x0, 0xffffffffffffffff, 0xf) 02:01:24 executing program 1: mlockall(0x7) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1889.328879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1889.335595] batman_adv: batadv0: Removing interface: batadv_slave_0 02:01:24 executing program 0: mlockall(0x7) mlockall(0x3) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="040026bd7000fbdbdf2501000000080003000300000014000400060000004d000000090000000000000008000400000000000500060081000000140004000000000004000000ff0309000100000008000300020000000800030003000000140001002001000000000000000000000000000208000400ffffffff08000300ffffff7f"], 0x88}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000005) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1889.375540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1889.400901] batman_adv: batadv0: Removing interface: batadv_slave_1 02:01:24 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000340)={0x6, 0x8c, 0x6, 0x14fd5fce, 0x2, 0xd314}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x1404, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) mlockall(0x3) mlockall(0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={0x0, 0x65, 0x5b, 0x9, 0x3, 0xffff, 0x7, 0x6, 0xfff, 0x401, 0x5, 0x3}) [ 1889.421591] device bridge_slave_1 left promiscuous mode [ 1889.435864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1889.465738] device bridge_slave_0 left promiscuous mode [ 1889.485785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1889.522782] device veth1_macvtap left promiscuous mode [ 1889.542093] device veth0_macvtap left promiscuous mode 02:01:24 executing program 3: mlockall(0x6) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)="7d9f8a394fb85a92a585b3eb30d234403298c2503a1c960c15c2447f799f39f6ec690b5607dfb7b3552d0bbd0a6c1fe213da9947e36e13f41796f33c4d931e323e7b3edb2954716bd5dd98297bd822343e86c3eb8c007d0e888c9fdb9bf35a612815a6a3ffc75122b0a2a74e196f6614e24fda14d42a0a6561ab2c3a15e35ba7e85b26fef0b64e0237bcd16e89a13bbb23c158c5a5ca7941d4da3d857c5271fe13284f04dfdeb24dd5f90d5f25fb2d2c70119a8b99d3c1eaa3fd9c8a2ccf", 0xbe}) mlockall(0x3) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) fork() r1 = fork() sched_getattr(r1, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_getattr(r1, 0x0, 0x0, 0x0) 02:01:24 executing program 1: mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1889.562423] device veth1_vlan left promiscuous mode [ 1889.580649] device veth0_vlan left promiscuous mode [ 1890.112156] device hsr_slave_1 left promiscuous mode [ 1890.155013] device hsr_slave_0 left promiscuous mode [ 1890.243066] team0 (unregistering): Port device team_slave_1 removed [ 1890.289631] team0 (unregistering): Port device team_slave_0 removed [ 1890.325625] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1890.337915] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1890.421715] bond0 (unregistering): Released all slaves 02:01:25 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000280)="63fbe204e41bb0bce73228281fbd078a40247e61f95061f9feef3fc2037276b862760f36498be2b59ea00ff30e18e66c4f7d56ad1f1c47114924d96863ca1cce281d9b50ff7247a19f89edf7ccc600d78c77eaa593df6c98b36b08a48a91c88362a3f67c74fd206ed83a78e31a33d438a3c4bc56664fecabcf5dfb5988323f2f509b32018df8bdc2f823c0dcfab5f6beacabb02bab8d9e67631ca15cdd0cdcd82835e38cbf600e63f1da4c99caebf51206367215ca4297468369b08bb4f83ebf3e7e4a32dbd8979c7f5a00b074593730a2a18bb1dea25e4ed642aa97df25540daf8e8d95", 0xe4, 0x100000001, &(0x7f0000000140)={0x77359400}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xf) 02:01:26 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000080)={r2, 0x2}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) mlockall(0x3) mlockall(0x0) 02:01:26 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000280)="63fbe204e41bb0bce73228281fbd078a40247e61f95061f9feef3fc2037276b862760f36498be2b59ea00ff30e18e66c4f7d56ad1f1c47114924d96863ca1cce281d9b50ff7247a19f89edf7ccc600d78c77eaa593df6c98b36b08a48a91c88362a3f67c74fd206ed83a78e31a33d438a3c4bc56664fecabcf5dfb5988323f2f509b32018df8bdc2f823c0dcfab5f6beacabb02bab8d9e67631ca15cdd0cdcd82835e38cbf600e63f1da4c99caebf51206367215ca4297468369b08bb4f83ebf3e7e4a32dbd8979c7f5a00b074593730a2a18bb1dea25e4ed642aa97df25540daf8e8d95", 0xe4, 0x100000001, &(0x7f0000000140)={0x77359400}) r1 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r1, 0x0, 0xffffffffffffffff, 0xf) 02:01:26 executing program 0: mlockall(0x7) mlockall(0x2) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1409, 0x9bbcf767f1e96ab8, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x1405, 0x10, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x24010045}, 0x4) [ 1892.451549] IPVS: ftp: loaded support on port[0] = 21 [ 1892.551039] chnl_net:caif_netlink_parms(): no params data found [ 1892.681116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1892.687822] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.694761] device bridge_slave_0 entered promiscuous mode [ 1892.702250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1892.708715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.715600] device bridge_slave_1 entered promiscuous mode [ 1892.737093] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1892.745903] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1892.764568] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1892.771730] team0: Port device team_slave_0 added [ 1892.777508] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1892.784617] team0: Port device team_slave_1 added [ 1892.801268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1892.807565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1892.832852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1892.843971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1892.850925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1892.876191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1892.887261] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1892.894646] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1892.917160] device hsr_slave_0 entered promiscuous mode [ 1892.922814] device hsr_slave_1 entered promiscuous mode [ 1892.929395] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1892.936571] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1893.010769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1893.017147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1893.023734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1893.030140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1893.062529] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1893.069300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1893.077849] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1893.086090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1893.095206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.113261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1893.123436] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1893.129718] 8021q: adding VLAN 0 to HW filter on device team0 [ 1893.139576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1893.147247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1893.153589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1893.168271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1893.177134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1893.183870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1893.197748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1893.205448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1893.215503] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1893.226602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1893.237082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1893.249309] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1893.255382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1893.269927] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1893.278167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1893.285176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1893.297314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1893.327124] Bluetooth: hci3 command 0x0409 tx timeout [ 1893.354748] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1893.367234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1893.395556] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1893.403864] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1893.410656] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1893.421026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1893.429025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1893.435901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1893.445469] device veth0_vlan entered promiscuous mode [ 1893.454011] device veth1_vlan entered promiscuous mode [ 1893.460141] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1893.469045] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1893.482560] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1893.491650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1893.499123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1893.506471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1893.516699] device veth0_macvtap entered promiscuous mode [ 1893.523010] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1893.531816] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1893.539867] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1893.548026] device veth1_macvtap entered promiscuous mode [ 1893.557452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1893.566779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1893.575924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1893.586633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.595829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1893.605927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.615115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1893.625310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.634738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1893.645080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.654263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1893.664060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.674256] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1893.681567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1893.689073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1893.697581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1893.709648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1893.720014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.730204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1893.740572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.749754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1893.759654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.768906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1893.778700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.787887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1893.797719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.808038] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1893.814918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1893.823035] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1893.831152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:01:29 executing program 4: mlockall(0x7) mlockall(0x3) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="040026bd7000fbdbdf2501000000080003000300000014000400060000004d000000090000000000000008000400000000000500060081000000140004000000000004000000ff0309000100000008000300020000000800030003000000140001002001000000000000000000000000000208000400ffffffff08000300ffffff7f"], 0x88}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000005) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:29 executing program 1: mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:29 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000280)="63fbe204e41bb0bce73228281fbd078a40247e61f95061f9feef3fc2037276b862760f36498be2b59ea00ff30e18e66c4f7d56ad1f1c47114924d96863ca1cce281d9b50ff7247a19f89edf7ccc600d78c77eaa593df6c98b36b08a48a91c88362a3f67c74fd206ed83a78e31a33d438a3c4bc56664fecabcf5dfb5988323f2f509b32018df8bdc2f823c0dcfab5f6beacabb02bab8d9e67631ca15cdd0cdcd82835e38cbf600e63f1da4c99caebf51206367215ca4297468369b08bb4f83ebf3e7e4a32dbd8979c7f5a00b074593730a2a18bb1dea25e4ed642aa97df25540daf8e8d95", 0xe4, 0x100000001, &(0x7f0000000140)={0x77359400}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xf) 02:01:29 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) fork() geteuid() r0 = fork() r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x20, {r0}, {r3}, 0x8, 0x194}) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="91de6e8ad17d503c84f1745d959a240400730e26633d460000b20661d03ce452134ee5ec6338207eb3335c0000"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) r5 = syz_open_dev$video(&(0x7f0000000340), 0xff, 0x20c402) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f00000003c0)={0x3f, 0x9, 0x4, 0x10000, 0x9, {r6, r7/1000+10000}, {0x5, 0x1, 0x0, 0x3, 0x8, 0x2, "be1d6254"}, 0x3, 0x3, @fd, 0x80}) mlockall(0x2) mlockall(0x0) 02:01:29 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000280)="63fbe204e41bb0bce73228281fbd078a40247e61f95061f9feef3fc2037276b862760f36498be2b59ea00ff30e18e66c4f7d56ad1f1c47114924d96863ca1cce281d9b50ff7247a19f89edf7ccc600d78c77eaa593df6c98b36b08a48a91c88362a3f67c74fd206ed83a78e31a33d438a3c4bc56664fecabcf5dfb5988323f2f509b32018df8bdc2f823c0dcfab5f6beacabb02bab8d9e67631ca15cdd0cdcd82835e38cbf600e63f1da4c99caebf51206367215ca4297468369b08bb4f83ebf3e7e4a32dbd8979c7f5a00b074593730a2a18bb1dea25e4ed642aa97df25540daf8e8d95", 0xe4, 0x100000001, &(0x7f0000000140)={0x77359400}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xf) 02:01:29 executing program 0: mlockall(0x7) mlockall(0x5) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) mlockall(0x5) 02:01:30 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=""/112}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x4, 0x400]) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:01:30 executing program 0: mlockall(0x7) mlockall(0x3) fork() syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket(0xf, 0x6, 0x5) r1 = accept4$x25(r0, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x0) connect$x25(r1, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) sched_getattr(0x0, 0x0, 0x0, 0x0) mlockall(0x2) [ 1895.407045] Bluetooth: hci3 command 0x041b tx timeout 02:01:30 executing program 4: mlockall(0x7) mlockall(0x3) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="040026bd7000fbdbdf2501000000080003000300000014000400060000004d000000090000000000000008000400000000000500060081000000140004000000000004000000ff0309000100000008000300020000000800030003000000140001002001000000000000000000000000000208000400ffffffff08000300ffffff7f"], 0x88}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000005) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:30 executing program 1: mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:31 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000240)={0x0, 0xfffffff8, {0x0}, {0xffffffffffffffff}, 0x4, 0x7f}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000280)={0x0, 0x10001, {r2}, {}, 0x6d4, 0xdf3}) mlockall(0x3) mlockall(0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) 02:01:31 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000280)="63fbe204e41bb0bce73228281fbd078a40247e61f95061f9feef3fc2037276b862760f36498be2b59ea00ff30e18e66c4f7d56ad1f1c47114924d96863ca1cce281d9b50ff7247a19f89edf7ccc600d78c77eaa593df6c98b36b08a48a91c88362a3f67c74fd206ed83a78e31a33d438a3c4bc56664fecabcf5dfb5988323f2f509b32018df8bdc2f823c0dcfab5f6beacabb02bab8d9e67631ca15cdd0cdcd82835e38cbf600e63f1da4c99caebf51206367215ca4297468369b08bb4f83ebf3e7e4a32dbd8979c7f5a00b074593730a2a18bb1dea25e4ed642aa97df25540daf8e8d95", 0xe4, 0x100000001, &(0x7f0000000140)={0x77359400}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xf) 02:01:31 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000280)="63fbe204e41bb0bce73228281fbd078a40247e61f95061f9feef3fc2037276b862760f36498be2b59ea00ff30e18e66c4f7d56ad1f1c47114924d96863ca1cce281d9b50ff7247a19f89edf7ccc600d78c77eaa593df6c98b36b08a48a91c88362a3f67c74fd206ed83a78e31a33d438a3c4bc56664fecabcf5dfb5988323f2f509b32018df8bdc2f823c0dcfab5f6beacabb02bab8d9e67631ca15cdd0cdcd82835e38cbf600e63f1da4c99caebf51206367215ca4297468369b08bb4f83ebf3e7e4a32dbd8979c7f5a00b074593730a2a18bb1dea25e4ed642aa97df25540daf8e8d95", 0xe4, 0x100000001, &(0x7f0000000140)={0x77359400}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xf) 02:01:32 executing program 4: mlockall(0x7) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:32 executing program 1: mlockall(0x0) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:32 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000100), 0x12) sendto$x25(r4, 0x0, 0x0, 0x80, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8041) mlockall(0x3) 02:01:32 executing program 4: mlockall(0x7) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1897.486252] Bluetooth: hci3 command 0x040f tx timeout 02:01:32 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000280)="63fbe204e41bb0bce73228281fbd078a40247e61f95061f9feef3fc2037276b862760f36498be2b59ea00ff30e18e66c4f7d56ad1f1c47114924d96863ca1cce281d9b50ff7247a19f89edf7ccc600d78c77eaa593df6c98b36b08a48a91c88362a3f67c74fd206ed83a78e31a33d438a3c4bc56664fecabcf5dfb5988323f2f509b32018df8bdc2f823c0dcfab5f6beacabb02bab8d9e67631ca15cdd0cdcd82835e38cbf600e63f1da4c99caebf51206367215ca4297468369b08bb4f83ebf3e7e4a32dbd8979c7f5a00b074593730a2a18bb1dea25e4ed642aa97df25540daf8e8d95", 0xe4, 0x100000001, &(0x7f0000000140)={0x77359400}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xf) 02:01:32 executing program 0: mlockall(0x7) mlockall(0x3) r0 = fork() mlockall(0x1) sched_getattr(r0, 0x0, 0x0, 0x0) 02:01:33 executing program 4: mlockall(0x7) mlockall(0x3) fork() syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket(0xf, 0x6, 0x5) r1 = accept4$x25(r0, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x0) connect$x25(r1, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) sched_getattr(0x0, 0x0, 0x0, 0x0) mlockall(0x2) 02:01:33 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)) r1 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r1, 0x0, 0xffffffffffffffff, 0xf) 02:01:33 executing program 1: mlockall(0x0) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:33 executing program 5: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={r0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="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", @ANYRES64=r2, @ANYRES64, @ANYRES16, @ANYRES64=r2], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:01:34 executing program 3: setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000340), 0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000000)) mlockall(0x7) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3, 0x10000, 0x400, 0x9, 0xfffffffa], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)={r1}) mlockall(0x6) mlockall(0x3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xf75d, 0x8, 0xbc, 0x40], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000300)=0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x4, 0x8, 0x3, 0x1}) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:34 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) [ 1899.566590] Bluetooth: hci3 command 0x0419 tx timeout 02:01:35 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:01:35 executing program 1: mlockall(0x0) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:35 executing program 0: mlockall(0x7) mlockall(0x2) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1900.922828] syz-executor.2 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 1900.978279] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1900.992192] CPU: 0 PID: 15331 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1901.000089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1901.009436] Call Trace: [ 1901.012033] dump_stack+0x1b2/0x281 [ 1901.015665] dump_header+0x178/0x82f [ 1901.019380] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1901.024484] ? ___ratelimit+0x2cd/0x530 [ 1901.028460] oom_kill_process.cold+0x10/0xa40 [ 1901.032965] out_of_memory+0xe3e/0x1190 [ 1901.036949] ? oom_killer_disable+0x1c0/0x1c0 [ 1901.041444] ? mutex_trylock+0x152/0x1a0 [ 1901.045529] __alloc_pages_nodemask+0x23e1/0x2720 [ 1901.050395] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1901.055237] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1901.060692] ? _find_next_bit+0xdb/0x100 [ 1901.064770] alloc_pages_vma+0xd2/0x6d0 [ 1901.068749] wp_page_copy+0x1f5/0x25c0 [ 1901.072642] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1901.077138] ? __lock_acquire+0x5fc/0x3f20 [ 1901.081371] do_wp_page+0x245/0x1db0 [ 1901.085089] ? __handle_mm_fault+0x129c/0x4620 [ 1901.089672] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1901.094345] __handle_mm_fault+0x234f/0x4620 [ 1901.098760] ? lock_downgrade+0x740/0x740 [ 1901.102920] ? vm_insert_page+0x7c0/0x7c0 [ 1901.107243] ? do_raw_spin_unlock+0x164/0x220 [ 1901.111747] ? mark_held_locks+0xa6/0xf0 [ 1901.115822] handle_mm_fault+0x455/0x9c0 [ 1901.119888] __get_user_pages+0x4e9/0x1270 [ 1901.124133] ? follow_page_mask+0x18a0/0x18a0 [ 1901.128637] ? lock_acquire+0x170/0x3f0 [ 1901.132621] populate_vma_page_range+0x17b/0x210 [ 1901.137385] __mm_populate+0x195/0x2c0 [ 1901.141285] ? populate_vma_page_range+0x210/0x210 [ 1901.146217] ? security_capable+0x88/0xb0 [ 1901.150368] SyS_mlockall+0x3ff/0x520 [ 1901.154168] ? SyS_munlock+0xf0/0xf0 [ 1901.157901] do_syscall_64+0x1d5/0x640 [ 1901.161892] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1901.167082] RIP: 0033:0x4665f9 [ 1901.170263] RSP: 002b:00007fe19973b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1901.177970] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665f9 [ 1901.185233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1901.192587] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1901.199854] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1901.207142] R13: 00007fffd7040a0f R14: 00007fe19973b300 R15: 0000000000022000 02:01:36 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='f2fs_lookup_end\x00', r0}, 0x10) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x140a, 0x200, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x2008000) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/149) mlockall(0x0) 02:01:37 executing program 0: mlockall(0x7) mlockall(0x1) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:37 executing program 3: mlockall(0x7) mlockall(0x2) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:37 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:01:37 executing program 3: mlockall(0x0) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1902.373801] Mem-Info: [ 1902.394258] active_anon:276585 inactive_anon:1000415 isolated_anon:0 [ 1902.394258] active_file:596 inactive_file:1164 isolated_file:27 [ 1902.394258] unevictable:63472 dirty:35 writeback:1 unstable:0 [ 1902.394258] slab_reclaimable:20658 slab_unreclaimable:135777 [ 1902.394258] mapped:63258 shmem:6930 pagetables:70462 bounce:0 [ 1902.394258] free:30212 free_pcp:311 free_cma:0 [ 1902.569824] Node 0 active_anon:936200kB inactive_anon:615192kB active_file:1784kB inactive_file:2480kB unevictable:218040kB isolated(anon):0kB isolated(file):128kB mapped:232228kB dirty:76kB writeback:0kB shmem:19508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1273856kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1902.682825] Node 1 active_anon:170140kB inactive_anon:3406668kB active_file:1224kB inactive_file:2764kB unevictable:33748kB isolated(anon):0kB isolated(file):0kB mapped:25204kB dirty:64kB writeback:4kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1902.880927] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:4332kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1902.913212] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1902.920442] Node 0 DMA32 free:40808kB min:36200kB low:45248kB high:54296kB active_anon:935964kB inactive_anon:624920kB active_file:1868kB inactive_file:1576kB unevictable:199368kB writepending:76kB present:3129332kB managed:2788128kB mlocked:199024kB kernel_stack:30816kB pagetables:78720kB bounce:0kB free_pcp:884kB local_pcp:184kB free_cma:0kB [ 1902.964822] lowmem_reserve[]: 0 0 0 0 0 [ 1903.021539] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1903.054997] lowmem_reserve[]: 0 0 0 0 0 [ 1903.059396] Node 1 Normal free:53288kB min:53696kB low:67120kB high:80544kB active_anon:170064kB inactive_anon:3409448kB active_file:8kB inactive_file:284kB unevictable:35756kB writepending:88kB present:4194304kB managed:4128256kB mlocked:35668kB kernel_stack:63488kB pagetables:203084kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1903.090531] lowmem_reserve[]: 0 0 0 0 0 [ 1903.094840] Node 0 DMA: 5*4kB (UE) 11*8kB (UE) 7*16kB (UME) 2*32kB (ME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11036kB [ 1903.112097] Node 0 DMA32: 266*4kB (UMEH) 195*8kB (ME) 773*16kB (UMEH) 682*32kB (UMEH) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36944kB [ 1903.128377] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1903.140155] Node 1 Normal: 42*4kB (UM) 536*8kB (UM) 1404*16kB (UME) 833*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53576kB [ 1903.154921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1903.164706] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1903.177109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1903.186992] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1903.198622] 12867 total pagecache pages [ 1903.203367] 0 pages in swap cache [ 1903.208621] Swap cache stats: add 0, delete 0, find 0/0 [ 1903.214166] Free swap = 0kB [ 1903.217437] Total swap = 0kB [ 1903.220701] 2097051 pages RAM [ 1903.223993] 0 pages HighMem/MovableOnly [ 1903.228212] 363849 pages reserved [ 1903.231846] 0 pages cma reserved [ 1903.235430] Out of memory (oom_kill_allocating_task): Kill process 15331 (syz-executor.2) score 0 or sacrifice child [ 1903.246840] Killed process 15322 (syz-executor.2) total-vm:93384kB, anon-rss:108kB, file-rss:34944kB, shmem-rss:0kB [ 1903.264048] oom_reaper: reaped process 15322 (syz-executor.2), now anon-rss:160kB, file-rss:1156kB, shmem-rss:0kB [ 1903.291137] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1903.360145] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1903.379840] CPU: 1 PID: 15348 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1903.387792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1903.397263] Call Trace: [ 1903.399873] dump_stack+0x1b2/0x281 [ 1903.403508] dump_header+0x178/0x82f [ 1903.407248] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1903.412375] ? ___ratelimit+0x2cd/0x530 [ 1903.416449] oom_kill_process.cold+0x10/0xa40 [ 1903.421151] out_of_memory+0xe3e/0x1190 [ 1903.425136] ? oom_killer_disable+0x1c0/0x1c0 [ 1903.429658] ? mutex_trylock+0x152/0x1a0 [ 1903.433733] __alloc_pages_nodemask+0x23e1/0x2720 [ 1903.438593] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1903.443450] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1903.448211] ? __lock_acquire+0x5fc/0x3f20 [ 1903.452484] alloc_pages_vma+0xd2/0x6d0 [ 1903.456466] __handle_mm_fault+0x25fa/0x4620 [ 1903.460876] ? lock_downgrade+0x740/0x740 [ 1903.465046] ? vm_insert_page+0x7c0/0x7c0 [ 1903.469199] ? do_raw_spin_unlock+0x164/0x220 [ 1903.473723] ? mark_held_locks+0xa6/0xf0 [ 1903.477789] handle_mm_fault+0x455/0x9c0 [ 1903.481877] __get_user_pages+0x4e9/0x1270 [ 1903.486115] ? follow_page_mask+0x18a0/0x18a0 [ 1903.490615] ? lock_acquire+0x170/0x3f0 [ 1903.494615] populate_vma_page_range+0x17b/0x210 [ 1903.499383] __mm_populate+0x195/0x2c0 [ 1903.503276] ? populate_vma_page_range+0x210/0x210 [ 1903.508202] ? security_capable+0x88/0xb0 [ 1903.512354] SyS_mlockall+0x3ff/0x520 [ 1903.516162] ? SyS_munlock+0xf0/0xf0 [ 1903.519881] do_syscall_64+0x1d5/0x640 [ 1903.523759] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1903.528931] RIP: 0033:0x4665f9 [ 1903.532114] RSP: 002b:00007f9fdba52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1903.539808] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665f9 [ 1903.547083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1903.554388] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1903.561649] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1903.568919] R13: 00007ffef36577cf R14: 00007f9fdba52300 R15: 0000000000022000 [ 1903.580294] Mem-Info: [ 1903.585036] active_anon:276587 inactive_anon:1009611 isolated_anon:0 [ 1903.585036] active_file:10 inactive_file:20 isolated_file:0 [ 1903.585036] unevictable:61271 dirty:0 writeback:0 unstable:0 [ 1903.585036] slab_reclaimable:20650 slab_unreclaimable:135947 [ 1903.585036] mapped:60750 shmem:6930 pagetables:70460 bounce:0 [ 1903.585036] free:24963 free_pcp:61 free_cma:0 [ 1903.619768] Node 0 active_anon:936280kB inactive_anon:628980kB active_file:36kB inactive_file:0kB unevictable:209000kB isolated(anon):0kB isolated(file):0kB mapped:222748kB dirty:0kB writeback:0kB shmem:19508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1273856kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1903.648932] Node 1 active_anon:170068kB inactive_anon:3409464kB active_file:4kB inactive_file:72kB unevictable:36084kB isolated(anon):0kB isolated(file):0kB mapped:20252kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1903.682919] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:4332kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1903.723619] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1903.729177] Node 0 DMA32 free:35804kB min:36200kB low:45248kB high:54296kB active_anon:936244kB inactive_anon:624648kB active_file:44kB inactive_file:64kB unevictable:209048kB writepending:0kB present:3129332kB managed:2788128kB mlocked:209048kB kernel_stack:30816kB pagetables:78804kB bounce:0kB free_pcp:108kB local_pcp:0kB free_cma:0kB [ 1903.762466] lowmem_reserve[]: 0 0 0 0 0 [ 1903.775507] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1903.817921] lowmem_reserve[]: 0 0 0 0 0 [ 1903.821928] Node 1 Normal free:53444kB min:53696kB low:67120kB high:80544kB active_anon:170068kB inactive_anon:3409464kB active_file:0kB inactive_file:12kB unevictable:36100kB writepending:0kB present:4194304kB managed:4128256kB mlocked:36100kB kernel_stack:63392kB pagetables:202956kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 1903.861990] lowmem_reserve[]: 0 0 0 0 0 [ 1903.866000] Node 0 DMA: 5*4kB (UE) 11*8kB (UE) 7*16kB (UME) 2*32kB (ME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11036kB [ 1903.887930] Node 0 DMA32: 178*4kB (UME) 142*8kB (UME) 752*16kB (UE) 677*32kB (UME) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35672kB [ 1903.906515] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1903.922472] Node 1 Normal: 19*4kB (UM) 519*8kB (UM) 1404*16kB (UME) 836*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53444kB [ 1903.942793] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1903.951679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1903.966835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1903.980794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1903.992207] 12995 total pagecache pages [ 1904.000680] 0 pages in swap cache [ 1904.004136] Swap cache stats: add 0, delete 0, find 0/0 [ 1904.011708] Free swap = 0kB [ 1904.014730] Total swap = 0kB [ 1904.022351] 2097051 pages RAM [ 1904.025470] 0 pages HighMem/MovableOnly [ 1904.031642] 363849 pages reserved [ 1904.035093] 0 pages cma reserved [ 1904.042968] Out of memory (oom_kill_allocating_task): Kill process 15348 (syz-executor.0) score 0 or sacrifice child [ 1904.056191] Killed process 15344 (syz-executor.0) total-vm:93384kB, anon-rss:18500kB, file-rss:39292kB, shmem-rss:0kB [ 1904.084963] oom_reaper: reaped process 15344 (syz-executor.0), now anon-rss:18620kB, file-rss:5376kB, shmem-rss:0kB [ 1904.103534] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1904.130645] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1904.136028] CPU: 0 PID: 15352 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1904.143900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1904.153258] Call Trace: [ 1904.156276] dump_stack+0x1b2/0x281 [ 1904.159932] dump_header+0x178/0x82f [ 1904.163646] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1904.168754] ? ___ratelimit+0x2cd/0x530 [ 1904.172760] oom_kill_process.cold+0x10/0xa40 [ 1904.177257] out_of_memory+0xe3e/0x1190 [ 1904.181233] ? oom_killer_disable+0x1c0/0x1c0 [ 1904.186159] ? mutex_trylock+0x152/0x1a0 [ 1904.190221] __alloc_pages_nodemask+0x23e1/0x2720 [ 1904.195071] ? finish_task_switch+0x178/0x610 [ 1904.199567] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1904.204409] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1904.209167] ? __lock_acquire+0x5fc/0x3f20 [ 1904.213396] alloc_pages_vma+0xd2/0x6d0 [ 1904.217379] __handle_mm_fault+0x25fa/0x4620 [ 1904.221790] ? lock_downgrade+0x740/0x740 [ 1904.225933] ? vm_insert_page+0x7c0/0x7c0 [ 1904.230079] ? do_raw_spin_unlock+0x164/0x220 [ 1904.234569] ? mark_held_locks+0xa6/0xf0 [ 1904.238709] handle_mm_fault+0x455/0x9c0 [ 1904.242782] __get_user_pages+0x4e9/0x1270 [ 1904.247018] ? follow_page_mask+0x18a0/0x18a0 [ 1904.251520] ? lock_acquire+0x170/0x3f0 [ 1904.255503] populate_vma_page_range+0x17b/0x210 [ 1904.260263] __mm_populate+0x195/0x2c0 [ 1904.264151] ? populate_vma_page_range+0x210/0x210 [ 1904.269082] ? security_capable+0x88/0xb0 [ 1904.273230] SyS_mlockall+0x3ff/0x520 [ 1904.277033] ? SyS_munlock+0xf0/0xf0 [ 1904.280752] do_syscall_64+0x1d5/0x640 [ 1904.284653] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1904.289837] RIP: 0033:0x4665f9 [ 1904.293117] RSP: 002b:00007fb48474d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1904.300825] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1904.308095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1904.315355] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1904.322617] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1904.329883] R13: 00007ffe38b31b3f R14: 00007fb48474d300 R15: 0000000000022000 [ 1904.348217] Mem-Info: [ 1904.350658] active_anon:276587 inactive_anon:1009611 isolated_anon:0 [ 1904.350658] active_file:14 inactive_file:14 isolated_file:0 [ 1904.350658] unevictable:61288 dirty:0 writeback:0 unstable:0 [ 1904.350658] slab_reclaimable:20650 slab_unreclaimable:135965 [ 1904.350658] mapped:60766 shmem:6930 pagetables:70461 bounce:0 [ 1904.350658] free:25029 free_pcp:90 free_cma:0 [ 1904.394596] Node 0 active_anon:936280kB inactive_anon:628980kB active_file:92kB inactive_file:0kB unevictable:209052kB isolated(anon):0kB isolated(file):0kB mapped:222796kB dirty:0kB writeback:0kB shmem:19508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1273856kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1904.431801] Node 1 active_anon:170068kB inactive_anon:3409464kB active_file:12kB inactive_file:0kB unevictable:36100kB isolated(anon):0kB isolated(file):0kB mapped:20268kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1904.468843] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:4332kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1904.503902] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1904.509117] Node 0 DMA32 free:35572kB min:36200kB low:45248kB high:54296kB active_anon:936244kB inactive_anon:624648kB active_file:88kB inactive_file:4kB unevictable:209052kB writepending:0kB present:3129332kB managed:2788128kB mlocked:209052kB kernel_stack:30784kB pagetables:78804kB bounce:0kB free_pcp:336kB local_pcp:216kB free_cma:0kB [ 1904.545826] lowmem_reserve[]: 0 0 0 0 0 [ 1904.550655] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1904.584101] lowmem_reserve[]: 0 0 0 0 0 [ 1904.588463] Node 1 Normal free:53540kB min:53696kB low:67120kB high:80544kB active_anon:170068kB inactive_anon:3409464kB active_file:4kB inactive_file:8kB unevictable:36100kB writepending:0kB present:4194304kB managed:4128256kB mlocked:36100kB kernel_stack:63232kB pagetables:202956kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 1904.625461] lowmem_reserve[]: 0 0 0 0 0 [ 1904.630231] Node 0 DMA: 5*4kB (UE) 11*8kB (UE) 7*16kB (UME) 2*32kB (ME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11036kB [ 1904.652528] Node 0 DMA32: 147*4kB (UME) 142*8kB (UME) 751*16kB (UE) 678*32kB (UME) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35564kB [ 1904.673110] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1904.683931] Node 1 Normal: 19*4kB (UM) 519*8kB (UM) 1404*16kB (UME) 841*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53604kB [ 1904.704416] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1904.713572] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1904.729321] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1904.741007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1904.754137] 12995 total pagecache pages [ 1904.761235] 0 pages in swap cache [ 1904.764710] Swap cache stats: add 0, delete 0, find 0/0 [ 1904.774723] Free swap = 0kB [ 1904.780380] Total swap = 0kB [ 1904.783647] 2097051 pages RAM [ 1904.791517] 0 pages HighMem/MovableOnly [ 1904.795563] 363849 pages reserved [ 1904.801323] 0 pages cma reserved [ 1904.804767] Out of memory (oom_kill_allocating_task): Kill process 15352 (syz-executor.4) score 0 or sacrifice child [ 1904.821783] Killed process 15351 (syz-executor.4) total-vm:93252kB, anon-rss:5316kB, file-rss:39280kB, shmem-rss:0kB [ 1904.843844] oom_reaper: reaped process 15351 (syz-executor.4), now anon-rss:5528kB, file-rss:5380kB, shmem-rss:0kB [ 1904.870564] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1904.910803] systemd-journal cpuset=/ mems_allowed=0-1 [ 1904.925810] CPU: 1 PID: 4620 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1904.933714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1904.943266] Call Trace: [ 1904.945866] dump_stack+0x1b2/0x281 [ 1904.949503] dump_header+0x178/0x82f [ 1904.953240] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1904.958344] ? ___ratelimit+0x2cd/0x530 [ 1904.962325] oom_kill_process.cold+0x10/0xa40 [ 1904.966832] out_of_memory+0xe3e/0x1190 [ 1904.970810] ? oom_killer_disable+0x1c0/0x1c0 [ 1904.975303] ? mutex_trylock+0x152/0x1a0 [ 1904.979362] __alloc_pages_nodemask+0x23e1/0x2720 [ 1904.984214] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1904.989051] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1904.994418] ? cache_grow_begin+0x3f/0x700 [ 1904.998660] cache_grow_begin+0x91/0x700 [ 1905.002722] fallback_alloc+0x207/0x2c0 [ 1905.006702] kmem_cache_alloc+0x1e5/0x3c0 [ 1905.010850] getname_flags+0xc8/0x550 [ 1905.014733] user_path_at_empty+0x2a/0x50 [ 1905.018884] SyS_faccessat+0x21b/0x680 [ 1905.022775] ? SyS_fallocate+0x80/0x80 [ 1905.026663] ? do_syscall_64+0x4c/0x640 [ 1905.030627] ? SyS_faccessat+0x680/0x680 [ 1905.034684] do_syscall_64+0x1d5/0x640 [ 1905.038600] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1905.043811] RIP: 0033:0x7fabcb0889c7 [ 1905.047511] RSP: 002b:00007ffda1e30aa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1905.055215] RAX: ffffffffffffffda RBX: 00007ffda1e339c0 RCX: 00007fabcb0889c7 [ 1905.062482] RDX: 00007fabcbaf9a00 RSI: 0000000000000000 RDI: 00005561a65f19a3 [ 1905.069749] RBP: 00007ffda1e30ae0 R08: 0000000000000000 R09: 0000000000000000 [ 1905.077044] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1905.084334] R13: 0000000000000000 R14: 00007ffda1e339c0 R15: 00007ffda1e30fd0 [ 1905.096967] Mem-Info: [ 1905.101538] active_anon:276587 inactive_anon:1013561 isolated_anon:0 [ 1905.101538] active_file:2024 inactive_file:44 isolated_file:0 [ 1905.101538] unevictable:53234 dirty:0 writeback:0 unstable:0 [ 1905.101538] slab_reclaimable:20650 slab_unreclaimable:135979 [ 1905.101538] mapped:58741 shmem:6930 pagetables:70387 bounce:0 [ 1905.101538] free:26611 free_pcp:469 free_cma:0 [ 1905.137612] Node 0 active_anon:936256kB inactive_anon:637880kB active_file:5580kB inactive_file:64kB unevictable:193228kB isolated(anon):0kB isolated(file):0kB mapped:217268kB dirty:0kB writeback:0kB shmem:19508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1273856kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 02:01:40 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:01:40 executing program 1: mlockall(0x7) mlockall(0x0) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:40 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:01:40 executing program 0: mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, '\x00', 0x1, 0x9}) [ 1905.230209] Node 1 active_anon:170056kB inactive_anon:3410060kB active_file:1024kB inactive_file:1008kB unevictable:23052kB isolated(anon):0kB isolated(file):128kB mapped:19400kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1905.391799] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:4332kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1905.573479] lowmem_reserve[]: 0 2717 2718 2718 2718 02:01:40 executing program 1: mlockall(0x7) mlockall(0x0) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1905.601433] Node 0 DMA32 free:36024kB min:36200kB low:45248kB high:54296kB active_anon:936220kB inactive_anon:657740kB active_file:3424kB inactive_file:4108kB unevictable:166012kB writepending:0kB present:3129332kB managed:2788128kB mlocked:166176kB kernel_stack:31008kB pagetables:78704kB bounce:0kB free_pcp:316kB local_pcp:68kB free_cma:0kB [ 1905.733998] lowmem_reserve[]: 0 0 0 0 0 02:01:41 executing program 3: mlockall(0x0) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1905.758537] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 02:01:41 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8, 0x0}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x140a, 0x400, 0x70bd2c, 0xfffffffc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x44) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)={0x0, r1}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6813d78f802f1582107f162456b0d999f48d416edae1061d900c927b49dc0fc8b43da3657d3cc816007d32503b39d5562b9421740fb50a6b77c1f7c0f50eaa49ee966dc42ec0f55b634e5339d12dcd64c4d4d824bf19c03b82c317704d9342bd9b6543ad"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 1905.946730] lowmem_reserve[]: 0 0 0 0 0 [ 1905.979864] Node 1 Normal free:62684kB min:53696kB low:67120kB high:80544kB active_anon:170056kB inactive_anon:3409808kB active_file:260kB inactive_file:952kB unevictable:24564kB writepending:0kB present:4194304kB managed:4128256kB mlocked:24584kB kernel_stack:63200kB pagetables:202796kB bounce:0kB free_pcp:280kB local_pcp:112kB free_cma:0kB [ 1906.103092] lowmem_reserve[]: 0 0 0 0 0 [ 1906.130139] Node 0 DMA: 5*4kB (UE) 11*8kB (UE) 7*16kB (UME) 2*32kB (ME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11036kB [ 1906.152647] Node 0 DMA32: 176*4kB (UME) 161*8kB (ME) 587*16kB (UME) 669*32kB (UME) 44*64kB (M) 3*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35992kB [ 1906.197772] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1906.241881] Node 1 Normal: 59*4kB (UM) 561*8kB (UE) 1389*16kB (UE) 831*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53540kB [ 1906.268461] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1906.281544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1906.290219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1906.299452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1906.308405] 11658 total pagecache pages [ 1906.312633] 0 pages in swap cache [ 1906.317044] Swap cache stats: add 0, delete 0, find 0/0 [ 1906.322591] Free swap = 0kB [ 1906.325746] Total swap = 0kB [ 1906.328786] 2097051 pages RAM [ 1906.331922] 0 pages HighMem/MovableOnly [ 1906.335921] 363849 pages reserved [ 1906.339431] 0 pages cma reserved [ 1906.342871] Out of memory (oom_kill_allocating_task): Kill process 4620 (systemd-journal) score 0 or sacrifice child [ 1906.353918] Killed process 4620 (systemd-journal) total-vm:54288kB, anon-rss:508kB, file-rss:0kB, shmem-rss:12944kB [ 1906.367625] oom_reaper: reaped process 4620 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:12944kB [ 1906.387187] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1906.407108] in:imklog cpuset=/ mems_allowed=0-1 [ 1906.414312] CPU: 0 PID: 7675 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1906.421691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1906.431066] Call Trace: [ 1906.433658] dump_stack+0x1b2/0x281 [ 1906.437292] dump_header+0x178/0x82f [ 1906.441002] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1906.446099] ? ___ratelimit+0x2cd/0x530 [ 1906.450075] oom_kill_process.cold+0x10/0xa40 [ 1906.454665] out_of_memory+0xe3e/0x1190 [ 1906.458642] ? oom_killer_disable+0x1c0/0x1c0 [ 1906.463138] ? mutex_trylock+0x152/0x1a0 [ 1906.467308] __alloc_pages_nodemask+0x23e1/0x2720 [ 1906.472198] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1906.477065] alloc_pages_current+0x155/0x260 [ 1906.481499] filemap_fault+0x11a1/0x1ad0 [ 1906.485572] ext4_filemap_fault+0x84/0xb0 [ 1906.489721] __do_fault+0xfa/0x380 [ 1906.493700] __handle_mm_fault+0x2497/0x4620 [ 1906.498113] ? vm_insert_page+0x7c0/0x7c0 [ 1906.502263] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1906.507283] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1906.512050] ? mark_held_locks+0xa6/0xf0 [ 1906.516118] handle_mm_fault+0x455/0x9c0 [ 1906.520189] __do_page_fault+0x549/0xad0 [ 1906.524265] ? spurious_fault+0x640/0x640 [ 1906.528417] ? do_page_fault+0x60/0x500 [ 1906.532388] ? page_fault+0x2f/0x50 [ 1906.537176] page_fault+0x45/0x50 [ 1906.540742] RIP: 933fda3:0x1f9f [ 1906.544191] RSP: 40206a0:0000562b7caebfb0 EFLAGS: 7f8c0933fda0 [ 1906.710765] Mem-Info: [ 1906.723528] active_anon:277258 inactive_anon:1008932 isolated_anon:0 [ 1906.723528] active_file:24 inactive_file:0 isolated_file:0 [ 1906.723528] unevictable:60115 dirty:0 writeback:0 unstable:0 [ 1906.723528] slab_reclaimable:20671 slab_unreclaimable:136842 [ 1906.723528] mapped:56967 shmem:6930 pagetables:70556 bounce:0 [ 1906.723528] free:25183 free_pcp:65 free_cma:0 [ 1906.767149] Node 0 active_anon:938896kB inactive_anon:626200kB active_file:36kB inactive_file:0kB unevictable:205236kB isolated(anon):0kB isolated(file):0kB mapped:214116kB dirty:0kB writeback:0kB shmem:19508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1273856kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1906.806805] Node 1 active_anon:170136kB inactive_anon:3409528kB active_file:60kB inactive_file:0kB unevictable:35224kB isolated(anon):0kB isolated(file):0kB mapped:13752kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1906.844617] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:4332kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1906.877139] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1906.882414] Node 0 DMA32 free:35976kB min:36200kB low:45248kB high:54296kB active_anon:938480kB inactive_anon:622248kB active_file:80kB inactive_file:0kB unevictable:205236kB writepending:0kB present:3129332kB managed:2788128kB mlocked:205236kB kernel_stack:31136kB pagetables:79220kB bounce:0kB free_pcp:360kB local_pcp:120kB free_cma:0kB [ 1906.917119] lowmem_reserve[]: 0 0 0 0 0 [ 1906.921162] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1906.949184] lowmem_reserve[]: 0 0 0 0 0 [ 1906.953527] Node 1 Normal free:53596kB min:53696kB low:67120kB high:80544kB active_anon:170136kB inactive_anon:3409528kB active_file:4kB inactive_file:44kB unevictable:35224kB writepending:0kB present:4194304kB managed:4128256kB mlocked:35224kB kernel_stack:63264kB pagetables:202920kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 1906.986655] lowmem_reserve[]: 0 0 0 0 0 [ 1906.990659] Node 0 DMA: 5*4kB (UE) 11*8kB (UE) 7*16kB (UME) 2*32kB (ME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11036kB [ 1907.010042] Node 0 DMA32: 170*4kB (UE) 144*8kB (E) 591*16kB (UME) 671*32kB (UME) 44*64kB (M) 3*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35960kB [ 1907.024765] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1907.038356] Node 1 Normal: 73*4kB (UM) 561*8kB (UE) 1389*16kB (UE) 831*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53596kB [ 1907.052633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.062080] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.071035] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.080383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.089550] 11669 total pagecache pages [ 1907.094034] 0 pages in swap cache [ 1907.097677] Swap cache stats: add 0, delete 0, find 0/0 [ 1907.103081] Free swap = 0kB [ 1907.106088] Total swap = 0kB [ 1907.109116] 2097051 pages RAM [ 1907.112225] 0 pages HighMem/MovableOnly [ 1907.116829] 363849 pages reserved [ 1907.120281] 0 pages cma reserved [ 1907.123633] Out of memory (oom_kill_allocating_task): Kill process 7675 (in:imklog) score 0 or sacrifice child [ 1907.133857] Killed process 7640 (rsyslogd) total-vm:254332kB, anon-rss:1012kB, file-rss:0kB, shmem-rss:0kB [ 1907.146617] oom_reaper: reaped process 7640 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1907.215781] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1907.231352] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1907.249998] CPU: 0 PID: 15381 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1907.257887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1907.267238] Call Trace: [ 1907.269852] dump_stack+0x1b2/0x281 [ 1907.273492] dump_header+0x178/0x82f [ 1907.277213] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1907.282315] ? ___ratelimit+0x2cd/0x530 [ 1907.286287] oom_kill_process.cold+0x10/0xa40 [ 1907.290790] out_of_memory+0xe3e/0x1190 [ 1907.294786] ? oom_killer_disable+0x1c0/0x1c0 [ 1907.299279] ? mutex_trylock+0x152/0x1a0 [ 1907.303342] __alloc_pages_nodemask+0x23e1/0x2720 [ 1907.308207] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1907.313063] alloc_pages_current+0x155/0x260 [ 1907.317481] filemap_fault+0x11a1/0x1ad0 [ 1907.321550] ext4_filemap_fault+0x84/0xb0 [ 1907.325693] __do_fault+0xfa/0x380 [ 1907.329246] __handle_mm_fault+0x2497/0x4620 [ 1907.333656] ? lock_downgrade+0x740/0x740 [ 1907.337802] ? vm_insert_page+0x7c0/0x7c0 [ 1907.341945] ? do_raw_spin_unlock+0x164/0x220 [ 1907.346447] ? mark_held_locks+0xa6/0xf0 [ 1907.350510] handle_mm_fault+0x455/0x9c0 [ 1907.354574] __get_user_pages+0x4e9/0x1270 [ 1907.358813] ? follow_page_mask+0x18a0/0x18a0 [ 1907.363327] ? lock_acquire+0x170/0x3f0 [ 1907.367305] populate_vma_page_range+0x17b/0x210 [ 1907.372078] __mm_populate+0x195/0x2c0 [ 1907.375984] ? populate_vma_page_range+0x210/0x210 [ 1907.380910] ? security_capable+0x88/0xb0 [ 1907.385058] SyS_mlockall+0x3ff/0x520 [ 1907.388853] ? SyS_munlock+0xf0/0xf0 [ 1907.392561] do_syscall_64+0x1d5/0x640 [ 1907.396478] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1907.401685] RIP: 0033:0x4665f9 [ 1907.404869] RSP: 002b:00007f62564c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1907.412574] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1907.419845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1907.427139] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1907.434415] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1907.441688] R13: 00007ffce206cb7f R14: 00007f62564c7300 R15: 0000000000022000 [ 1907.485502] Mem-Info: [ 1907.488181] active_anon:276970 inactive_anon:1008927 isolated_anon:0 [ 1907.488181] active_file:37 inactive_file:8 isolated_file:12 [ 1907.488181] unevictable:60345 dirty:0 writeback:0 unstable:0 [ 1907.488181] slab_reclaimable:20672 slab_unreclaimable:136865 [ 1907.488181] mapped:57079 shmem:6930 pagetables:70491 bounce:0 [ 1907.488181] free:24985 free_pcp:243 free_cma:0 [ 1907.522210] Node 0 active_anon:937908kB inactive_anon:626180kB active_file:104kB inactive_file:44kB unevictable:205764kB isolated(anon):0kB isolated(file):48kB mapped:214640kB dirty:0kB writeback:0kB shmem:19508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1273856kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1907.551128] Node 1 active_anon:169972kB inactive_anon:3409528kB active_file:44kB inactive_file:0kB unevictable:35616kB isolated(anon):0kB isolated(file):0kB mapped:13676kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1907.580270] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:4332kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.607014] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1907.612042] Node 0 DMA32 free:35744kB min:36200kB low:45248kB high:54296kB active_anon:937872kB inactive_anon:621848kB active_file:104kB inactive_file:376kB unevictable:205764kB writepending:0kB present:3129332kB managed:2788128kB mlocked:205764kB kernel_stack:31008kB pagetables:78976kB bounce:0kB free_pcp:748kB local_pcp:512kB free_cma:0kB [ 1907.642491] lowmem_reserve[]: 0 0 0 0 0 [ 1907.647577] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.673269] lowmem_reserve[]: 0 0 0 0 0 [ 1907.677321] Node 1 Normal free:53160kB min:53696kB low:67120kB high:80544kB active_anon:169972kB inactive_anon:3409528kB active_file:44kB inactive_file:0kB unevictable:35616kB writepending:0kB present:4194304kB managed:4128256kB mlocked:35616kB kernel_stack:63264kB pagetables:202904kB bounce:0kB free_pcp:224kB local_pcp:0kB free_cma:0kB [ 1907.708064] lowmem_reserve[]: 0 0 0 0 0 [ 1907.712060] Node 0 DMA: 5*4kB (UE) 11*8kB (UE) 7*16kB (UME) 2*32kB (ME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11036kB [ 1907.727912] Node 0 DMA32: 183*4kB (UE) 150*8kB (UME) 575*16kB (UME) 676*32kB (UME) 44*64kB (M) 3*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35964kB [ 1907.742695] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1907.753643] Node 1 Normal: 1*4kB (U) 552*8kB (UE) 1390*16kB (UE) 831*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53252kB [ 1907.767025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.775857] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.784468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.793321] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.801939] 11817 total pagecache pages [ 1907.805920] 0 pages in swap cache [ 1907.809387] Swap cache stats: add 0, delete 0, find 0/0 [ 1907.814738] Free swap = 0kB [ 1907.817811] Total swap = 0kB [ 1907.820850] 2097051 pages RAM [ 1907.823945] 0 pages HighMem/MovableOnly [ 1907.827969] 363849 pages reserved [ 1907.831408] 0 pages cma reserved [ 1907.834779] Out of memory (oom_kill_allocating_task): Kill process 15381 (syz-executor.5) score 0 or sacrifice child [ 1907.846138] Killed process 15380 (syz-executor.5) total-vm:93252kB, anon-rss:192kB, file-rss:36400kB, shmem-rss:0kB [ 1908.141546] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1908.155363] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1908.161074] CPU: 0 PID: 15375 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1908.168962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1908.178313] Call Trace: [ 1908.180907] dump_stack+0x1b2/0x281 [ 1908.184538] dump_header+0x178/0x82f [ 1908.188255] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1908.193355] ? ___ratelimit+0x2cd/0x530 [ 1908.197337] oom_kill_process.cold+0x10/0xa40 [ 1908.201843] out_of_memory+0xe3e/0x1190 [ 1908.205822] ? oom_killer_disable+0x1c0/0x1c0 [ 1908.210316] ? mutex_trylock+0x152/0x1a0 [ 1908.214386] __alloc_pages_nodemask+0x23e1/0x2720 [ 1908.219250] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1908.224102] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1908.228863] ? __lock_acquire+0x5fc/0x3f20 [ 1908.233105] alloc_pages_vma+0xd2/0x6d0 [ 1908.237080] __handle_mm_fault+0x25fa/0x4620 [ 1908.241491] ? lock_downgrade+0x740/0x740 [ 1908.245644] ? vm_insert_page+0x7c0/0x7c0 [ 1908.249794] ? do_raw_spin_unlock+0x164/0x220 [ 1908.254323] ? mark_held_locks+0xa6/0xf0 [ 1908.260996] handle_mm_fault+0x455/0x9c0 [ 1908.265066] __get_user_pages+0x4e9/0x1270 [ 1908.269334] ? follow_page_mask+0x18a0/0x18a0 [ 1908.273847] ? lock_acquire+0x170/0x3f0 [ 1908.277911] populate_vma_page_range+0x17b/0x210 [ 1908.282676] __mm_populate+0x195/0x2c0 [ 1908.286563] ? populate_vma_page_range+0x210/0x210 [ 1908.291489] ? security_capable+0x88/0xb0 [ 1908.295647] SyS_mlockall+0x3ff/0x520 [ 1908.299471] ? SyS_munlock+0xf0/0xf0 [ 1908.303182] do_syscall_64+0x1d5/0x640 [ 1908.307077] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1908.312257] RIP: 0033:0x4665f9 [ 1908.315450] RSP: 002b:00007f6714366188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1908.323159] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1908.330425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1908.337691] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1908.344956] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1908.352221] R13: 00007ffdd2939eaf R14: 00007f6714366300 R15: 0000000000022000 [ 1908.387899] Mem-Info: [ 1908.390584] active_anon:276960 inactive_anon:1008928 isolated_anon:0 [ 1908.390584] active_file:29 inactive_file:0 isolated_file:0 [ 1908.390584] unevictable:60398 dirty:0 writeback:0 unstable:0 [ 1908.390584] slab_reclaimable:20680 slab_unreclaimable:136924 [ 1908.390584] mapped:56647 shmem:6930 pagetables:70471 bounce:0 [ 1908.390584] free:25161 free_pcp:31 free_cma:0 [ 1908.516539] Node 0 active_anon:937900kB inactive_anon:626184kB active_file:100kB inactive_file:0kB unevictable:206200kB isolated(anon):0kB isolated(file):0kB mapped:212976kB dirty:0kB writeback:0kB shmem:19508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1273856kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1908.752548] Node 1 active_anon:169940kB inactive_anon:3409528kB active_file:12kB inactive_file:16kB unevictable:35392kB isolated(anon):0kB isolated(file):0kB mapped:13612kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1908.895755] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:4332kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1908.923958] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1908.929912] Node 0 DMA32 free:48908kB min:36200kB low:45248kB high:54296kB active_anon:937864kB inactive_anon:621872kB active_file:0kB inactive_file:88kB unevictable:191916kB writepending:0kB present:3129332kB managed:2788128kB mlocked:191964kB kernel_stack:30848kB pagetables:78912kB bounce:0kB free_pcp:1036kB local_pcp:400kB free_cma:0kB [ 1908.986593] lowmem_reserve[]: 0 0 0 0 0 [ 1908.991531] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1909.077634] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1909.113468] lowmem_reserve[]: 0 0 0 0 0 02:01:44 executing program 1: mlockall(0x7) mlockall(0x0) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:44 executing program 0: mlockall(0x7) mlockall(0x3) mlockall(0x5) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 02:01:44 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in, @in6=@loopback}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000080)=0xe8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000340)={0x38a, 0x4, 0x4, 0x1000, 0x10001, {}, {0x1, 0xc, 0x1, 0x1, 0x40, 0x56, "49cae693"}, 0x5, 0xe, @fd, 0x401, 0x0, r2}) 02:01:44 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) [ 1909.117562] Node 1 Normal free:71208kB min:53696kB low:67120kB high:80544kB active_anon:169856kB inactive_anon:3414044kB active_file:4kB inactive_file:4kB unevictable:12684kB writepending:0kB present:4194304kB managed:4128256kB mlocked:12684kB kernel_stack:63168kB pagetables:202868kB bounce:0kB free_pcp:1032kB local_pcp:740kB free_cma:0kB [ 1909.137608] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1909.248316] lowmem_reserve[]: 0 0 0 0 0 [ 1909.272827] Node 0 DMA: 5*4kB (UE) 11*8kB (UE) 7*16kB (UME) 2*32kB (ME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11036kB [ 1909.297987] systemd[1]: rsyslog.service: Unit entered failed state. [ 1909.330726] Node 0 DMA32: 82*4kB (UME) 404*8kB (UME) 660*16kB (UME) 793*32kB (UME) 62*64kB (ME) 6*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44232kB [ 1909.338342] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1909.403133] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1909.444769] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1909.461071] Node 1 Normal: 413*4kB (U) 833*8kB (UME) 1721*16kB (UME) 908*32kB (UME) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 65036kB [ 1909.527763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1909.570638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1909.600209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1909.632193] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1909.661548] 12406 total pagecache pages [ 1909.676511] 0 pages in swap cache [ 1909.686246] Swap cache stats: add 0, delete 0, find 0/0 [ 1909.703032] Free swap = 0kB [ 1909.715900] Total swap = 0kB [ 1909.732375] 2097051 pages RAM [ 1909.745419] 0 pages HighMem/MovableOnly [ 1909.764807] 363849 pages reserved [ 1909.808988] 0 pages cma reserved [ 1909.823258] Out of memory (oom_kill_allocating_task): Kill process 15375 (syz-executor.3) score 0 or sacrifice child [ 1909.870559] Killed process 15375 (syz-executor.3) total-vm:93252kB, anon-rss:3248kB, file-rss:40196kB, shmem-rss:0kB [ 1909.923859] oom_reaper: reaped process 15375 (syz-executor.3), now anon-rss:3352kB, file-rss:5376kB, shmem-rss:0kB 02:01:45 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) [ 1910.532306] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. 02:01:45 executing program 3: mlockall(0x0) mlockall(0x3) clock_gettime(0x7, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1910.667789] systemd[1]: Stopped System Logging Service. [ 1910.819255] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1910.832085] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1910.837540] CPU: 0 PID: 7974 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1910.845509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1910.854886] Call Trace: [ 1910.857490] dump_stack+0x1b2/0x281 [ 1910.861298] dump_header+0x178/0x82f [ 1910.865005] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1910.870101] ? ___ratelimit+0x2cd/0x530 [ 1910.874078] oom_kill_process.cold+0x10/0xa40 [ 1910.878585] out_of_memory+0xe3e/0x1190 [ 1910.882569] ? oom_killer_disable+0x1c0/0x1c0 [ 1910.887079] ? mutex_trylock+0x152/0x1a0 [ 1910.891148] __alloc_pages_nodemask+0x23e1/0x2720 [ 1910.896003] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1910.900870] alloc_pages_current+0x155/0x260 [ 1910.905290] filemap_fault+0x11a1/0x1ad0 [ 1910.909349] ext4_filemap_fault+0x84/0xb0 [ 1910.913502] __do_fault+0xfa/0x380 [ 1910.917047] __handle_mm_fault+0x2497/0x4620 [ 1910.921463] ? vm_insert_page+0x7c0/0x7c0 [ 1910.925609] ? mark_held_locks+0xa6/0xf0 [ 1910.929671] handle_mm_fault+0x455/0x9c0 [ 1910.933735] __do_page_fault+0x549/0xad0 [ 1910.937796] ? spurious_fault+0x640/0x640 [ 1910.941968] ? do_page_fault+0x60/0x500 [ 1910.945957] ? page_fault+0x2f/0x50 [ 1910.949586] page_fault+0x45/0x50 [ 1910.953161] RIP: 00f3:0x200 [ 1910.956072] RSP: 0001:000000c00042ff28 EFLAGS: 000000f4 [ 1910.985812] Mem-Info: [ 1910.993670] active_anon:276945 inactive_anon:1008954 isolated_anon:0 [ 1910.993670] active_file:15 inactive_file:25 isolated_file:0 [ 1910.993670] unevictable:59450 dirty:1 writeback:0 unstable:0 [ 1910.993670] slab_reclaimable:20808 slab_unreclaimable:137922 [ 1910.993670] mapped:58713 shmem:6930 pagetables:70449 bounce:0 [ 1910.993670] free:25147 free_pcp:0 free_cma:0 [ 1911.033741] Node 0 active_anon:937904kB inactive_anon:626244kB active_file:32kB inactive_file:36kB unevictable:202720kB isolated(anon):0kB isolated(file):0kB mapped:218872kB dirty:0kB writeback:0kB shmem:19512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1273856kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1911.066476] Node 1 active_anon:169876kB inactive_anon:3409572kB active_file:28kB inactive_file:64kB unevictable:35080kB isolated(anon):0kB isolated(file):0kB mapped:15980kB dirty:4kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1911.100119] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:4332kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1911.193635] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1911.214154] Node 0 DMA32 free:35924kB min:36200kB low:45248kB high:54296kB active_anon:937868kB inactive_anon:621912kB active_file:28kB inactive_file:28kB unevictable:202720kB writepending:0kB present:3129332kB managed:2788128kB mlocked:202720kB kernel_stack:30752kB pagetables:78708kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1911.332978] lowmem_reserve[]: 0 0 0 0 0 [ 1911.365212] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1911.483049] lowmem_reserve[]: 0 0 0 0 0 [ 1911.503416] Node 1 Normal free:53684kB min:53696kB low:67120kB high:80544kB active_anon:169876kB inactive_anon:3409572kB active_file:12kB inactive_file:12kB unevictable:35084kB writepending:4kB present:4194304kB managed:4128256kB mlocked:35084kB kernel_stack:63264kB pagetables:203004kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1911.635531] lowmem_reserve[]: 0 0 0 0 0 [ 1911.651923] Node 0 DMA: 5*4kB (UE) 11*8kB (UE) 7*16kB (UME) 2*32kB (ME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11036kB [ 1911.725309] Node 0 DMA32: 128*4kB (UME) 160*8kB (UME) 354*16kB (UME) 730*32kB (UME) 68*64kB (ME) 6*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35936kB [ 1911.773491] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1911.810033] Node 1 Normal: 85*4kB (UM) 529*8kB (UM) 1395*16kB (UME) 838*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53708kB [ 1911.886468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1911.920497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1911.961082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1912.008472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1912.051700] 13420 total pagecache pages [ 1912.055776] 0 pages in swap cache [ 1912.059319] Swap cache stats: add 0, delete 0, find 0/0 [ 1912.064694] Free swap = 0kB [ 1912.072059] Total swap = 0kB [ 1912.075212] 2097051 pages RAM [ 1912.078393] 0 pages HighMem/MovableOnly [ 1912.082622] 363849 pages reserved [ 1912.095264] 0 pages cma reserved [ 1912.098716] Out of memory (oom_kill_allocating_task): Kill process 7974 (syz-fuzzer) score 0 or sacrifice child [ 1912.111279] Killed process 13787 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:960kB, shmem-rss:0kB [ 1912.140893] oom_reaper: reaped process 13787 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1912.158382] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1912.172977] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1912.406864] CPU: 0 PID: 7974 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1912.414364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1912.423852] Call Trace: [ 1912.426453] dump_stack+0x1b2/0x281 [ 1912.430111] dump_header+0x178/0x82f [ 1912.433830] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1912.438939] ? ___ratelimit+0x2cd/0x530 [ 1912.442928] oom_kill_process.cold+0x10/0xa40 [ 1912.447439] out_of_memory+0xe3e/0x1190 [ 1912.451528] ? oom_killer_disable+0x1c0/0x1c0 [ 1912.456030] ? mutex_trylock+0x152/0x1a0 [ 1912.460530] __alloc_pages_nodemask+0x23e1/0x2720 [ 1912.466695] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1912.471907] alloc_pages_current+0x155/0x260 [ 1912.476329] filemap_fault+0x11a1/0x1ad0 [ 1912.480407] ext4_filemap_fault+0x84/0xb0 [ 1912.484555] __do_fault+0xfa/0x380 [ 1912.488093] __handle_mm_fault+0x2497/0x4620 [ 1912.492585] ? vm_insert_page+0x7c0/0x7c0 [ 1912.496743] ? mark_held_locks+0xa6/0xf0 [ 1912.500805] handle_mm_fault+0x455/0x9c0 [ 1912.504870] __do_page_fault+0x549/0xad0 [ 1912.508936] ? spurious_fault+0x640/0x640 [ 1912.513104] ? do_page_fault+0x60/0x500 [ 1912.517089] ? page_fault+0x2f/0x50 [ 1912.520711] page_fault+0x45/0x50 [ 1912.524162] RIP: 00f3:0x200 02:01:48 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) 02:01:48 executing program 1: mlockall(0x7) mlockall(0x3) clock_gettime(0x0, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1912.527442] RSP: 0001:000000c00042ff28 EFLAGS: 000000f4 [ 1912.946282] systemd[1]: Starting System Logging Service... [ 1913.129818] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1913.161152] systemd[1]: Stopping Flush Journal to Persistent Storage... 02:01:48 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a6090000003ca683b03a3ded7eab3a8bb21871ab2e27768937aad503198b748c145fb8a16fa5dbf93c8f44f2614fb749adf06b234586cf61f98b", @ANYRESOCT=r1], 0x58}, 0x1, 0x0, 0x0, 0x4000854}, 0x11) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0x6, 0xa09, {0x0}, {0xee00}, 0x7fffffff, 0x2f9}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000100)={0xed, 0x6, {r3}, {0xee01}, 0xffffffff, 0x10000}) mlockall(0x3) mlockall(0x0) 02:01:48 executing program 0: mlockall(0x7) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x80000) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000100)={0x2, 0x6c}) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000000000)=""/19}) [ 1913.635201] Mem-Info: [ 1913.657854] active_anon:277655 inactive_anon:753837 isolated_anon:0 [ 1913.657854] active_file:6476 inactive_file:2914 isolated_file:0 [ 1913.657854] unevictable:60530 dirty:33 writeback:0 unstable:0 [ 1913.657854] slab_reclaimable:20850 slab_unreclaimable:138543 [ 1913.657854] mapped:65598 shmem:6930 pagetables:68912 bounce:0 [ 1913.657854] free:278627 free_pcp:561 free_cma:0 [ 1913.835858] systemd-journald[15414]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1913.904675] Node 0 active_anon:939616kB inactive_anon:466344kB active_file:50880kB inactive_file:11756kB unevictable:200600kB isolated(anon):0kB isolated(file):0kB mapped:239180kB dirty:216kB writeback:0kB shmem:19512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1255424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1914.006091] Node 1 active_anon:169720kB inactive_anon:2585772kB active_file:1052kB inactive_file:124kB unevictable:7032kB isolated(anon):0kB isolated(file):0kB mapped:7092kB dirty:16kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1914.038350] Node 0 DMA free:15272kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:176kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1914.137010] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1914.154937] Node 0 DMA32 free:144020kB min:36200kB low:45248kB high:54296kB active_anon:939684kB inactive_anon:465656kB active_file:49368kB inactive_file:11508kB unevictable:210984kB writepending:416kB present:3129332kB managed:2788128kB mlocked:210940kB kernel_stack:30592kB pagetables:77720kB bounce:0kB free_pcp:540kB local_pcp:108kB free_cma:0kB [ 1914.263233] lowmem_reserve[]: 0 0 0 0 0 [ 1914.277287] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1914.305100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1914.328438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1914.334676] lowmem_reserve[]: 0 0 0 0 0 [ 1914.344525] Node 1 Normal free:918652kB min:53696kB low:67120kB high:80544kB active_anon:169720kB inactive_anon:2585768kB active_file:976kB inactive_file:100kB unevictable:7096kB writepending:16kB present:4194304kB managed:4128256kB mlocked:7096kB kernel_stack:61984kB pagetables:197772kB bounce:0kB free_pcp:1304kB local_pcp:684kB free_cma:0kB [ 1914.382665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1914.406071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1914.417159] device bridge_slave_1 left promiscuous mode [ 1914.422852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1914.430745] lowmem_reserve[]: 0 0 0 0 0 [ 1914.434877] Node 0 DMA: 10*4kB (UME) 20*8kB (UME) 10*16kB (UME) 2*32kB (ME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 1*4096kB (M) = 15272kB [ 1914.452917] device bridge_slave_0 left promiscuous mode [ 1914.459926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1914.492231] Node 0 DMA32: 794*4kB (UME) 1567*8kB (UE) 938*16kB (UE) 725*32kB (UE) 91*64kB (UME) 44*128kB (UME) 11*256kB (M) 9*512kB (M) 2*1024kB (M) 10*2048kB (M) 12*4096kB (M) = 144480kB [ 1914.510523] device veth1_macvtap left promiscuous mode [ 1914.522461] device veth0_macvtap left promiscuous mode [ 1914.543457] device veth1_vlan left promiscuous mode [ 1914.549466] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1914.577055] device veth0_vlan left promiscuous mode [ 1914.582762] Node 1 Normal: 20437*4kB (UM) 14957*8kB (UM) 14430*16kB (UME) 8211*32kB (UME) 2362*64kB (UM) 466*128kB (M) 46*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 918652kB [ 1914.657606] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1914.689674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1914.717846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1914.741787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1914.770984] 40097 total pagecache pages [ 1914.775030] 0 pages in swap cache [ 1914.786349] Swap cache stats: add 0, delete 0, find 0/0 [ 1914.800902] Free swap = 0kB [ 1914.803944] Total swap = 0kB [ 1914.814640] 2097051 pages RAM [ 1914.822114] 0 pages HighMem/MovableOnly [ 1914.836500] 363849 pages reserved [ 1914.839985] 0 pages cma reserved [ 1914.854107] Out of memory (oom_kill_allocating_task): Kill process 7974 (syz-fuzzer) score 0 or sacrifice child [ 1914.876639] Killed process 7982 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:960kB, shmem-rss:0kB 02:01:51 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) mlockall(0x3) mlockall(0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 02:01:52 executing program 3: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a6090000003ca683b03a3ded7eab3a8bb21871ab2e27768937aad503198b748c145fb8a16fa5dbf93c8f44f2614fb749adf06b234586cf61f98b", @ANYRESOCT=r1], 0x58}, 0x1, 0x0, 0x0, 0x4000854}, 0x11) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0x6, 0xa09, {0x0}, {0xee00}, 0x7fffffff, 0x2f9}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000100)={0xed, 0x6, {r3}, {0xee01}, 0xffffffff, 0x10000}) mlockall(0x3) mlockall(0x0) 02:01:52 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) 02:01:52 executing program 1: mlockall(0x7) mlockall(0x3) clock_gettime(0x0, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1917.571499] device hsr_slave_1 left promiscuous mode [ 1917.593516] device hsr_slave_0 left promiscuous mode [ 1917.688040] team0 (unregistering): Port device team_slave_1 removed 02:01:53 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) [ 1917.731135] team0 (unregistering): Port device team_slave_0 removed [ 1917.765951] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1917.813646] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1917.919585] bond0 (unregistering): Released all slaves 02:01:53 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) mlockall(0x3) mlockall(0x6) 02:01:53 executing program 3: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a6090000003ca683b03a3ded7eab3a8bb21871ab2e27768937aad503198b748c145fb8a16fa5dbf93c8f44f2614fb749adf06b234586cf61f98b", @ANYRESOCT=r1], 0x58}, 0x1, 0x0, 0x0, 0x4000854}, 0x11) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0x6, 0xa09, {0x0}, {0xee00}, 0x7fffffff, 0x2f9}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000100)={0xed, 0x6, {r3}, {0xee01}, 0xffffffff, 0x10000}) mlockall(0x3) mlockall(0x0) 02:01:53 executing program 1: mlockall(0x7) mlockall(0x3) clock_gettime(0x0, &(0x7f0000000000)) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1918.352866] systemd[1]: Started Journal Service. 02:01:54 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:01:54 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:01:54 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) mlockall(0x3) mlockall(0x6) [ 1920.072920] IPVS: ftp: loaded support on port[0] = 21 [ 1920.194550] chnl_net:caif_netlink_parms(): no params data found [ 1920.321255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1920.328014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1920.334971] device bridge_slave_0 entered promiscuous mode [ 1920.342674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1920.349603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1920.356906] device bridge_slave_1 entered promiscuous mode [ 1920.381643] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1920.391814] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1920.413397] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1920.421033] team0: Port device team_slave_0 added [ 1920.426783] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1920.435178] team0: Port device team_slave_1 added [ 1920.481327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1920.491809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1920.518086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1920.532789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1920.541035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1920.567809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1920.579304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1920.590377] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1920.613410] device hsr_slave_0 entered promiscuous mode [ 1920.619350] device hsr_slave_1 entered promiscuous mode [ 1920.625311] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1920.632785] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1920.731571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1920.738773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1920.747343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1920.754108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1920.762515] device bridge_slave_1 left promiscuous mode [ 1920.768551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1920.775512] device bridge_slave_0 left promiscuous mode [ 1920.781408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1920.790189] device veth1_macvtap left promiscuous mode [ 1920.795495] device veth0_macvtap left promiscuous mode [ 1920.801219] device veth1_vlan left promiscuous mode [ 1920.806527] device veth0_vlan left promiscuous mode [ 1920.875724] device hsr_slave_1 left promiscuous mode [ 1920.883775] device hsr_slave_0 left promiscuous mode [ 1920.899909] team0 (unregistering): Port device team_slave_1 removed [ 1920.908694] team0 (unregistering): Port device team_slave_0 removed [ 1920.921167] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1920.933939] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1920.961840] bond0 (unregistering): Released all slaves [ 1920.984554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1920.991070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1920.997866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1921.004231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1921.040701] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1921.049482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1921.059308] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1921.068654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1921.075919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1921.083376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.095873] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1921.103600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1921.115075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1921.133482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1921.140370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1921.172007] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1921.182063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1921.208462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1921.214955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1921.232876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1921.242100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1921.266025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1921.277718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1921.290740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1921.299556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1921.310893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1921.323786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1921.335555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1921.343961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1921.358262] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1921.371081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1921.379552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1921.392766] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1921.399682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1921.423115] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1921.435211] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1921.444507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1921.455906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1921.468795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1921.548754] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1921.563042] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1921.570227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1921.578784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1921.630510] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1921.643288] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1921.652248] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1921.666843] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1921.673420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1921.684732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1921.694344] device veth0_vlan entered promiscuous mode [ 1921.706906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1921.714247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1921.728890] device veth1_vlan entered promiscuous mode [ 1921.734957] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1921.751372] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1921.768473] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1921.782733] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1921.790529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1921.800186] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1921.807719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1921.815340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1921.825869] device veth0_macvtap entered promiscuous mode [ 1921.833003] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1921.842344] device veth1_macvtap entered promiscuous mode [ 1921.851730] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1921.863713] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1921.879088] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1921.888643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1921.898644] Bluetooth: hci4 command 0x0409 tx timeout [ 1921.900170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.913022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1921.922802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.932009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1921.942301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.951524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1921.961294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.971559] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1921.978630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1921.986291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1921.994067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1922.002763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1922.010760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1922.021107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1922.031070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1922.040408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1922.051482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1922.060801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1922.070719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1922.079998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1922.089789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1922.099889] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1922.107002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1922.114319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1922.128718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1922.195447] IPVS: ftp: loaded support on port[0] = 21 [ 1922.363587] chnl_net:caif_netlink_parms(): no params data found [ 1922.470979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.478414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1922.485831] device bridge_slave_0 entered promiscuous mode [ 1922.498842] bridge0: port 2(bridge_slave_1) entered blocking state [ 1922.505286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1922.517353] device bridge_slave_1 entered promiscuous mode [ 1922.540724] Bluetooth: hci5 command 0x0409 tx timeout [ 1922.559053] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1922.573794] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1922.614847] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1922.623128] team0: Port device team_slave_0 added [ 1922.634264] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1922.643779] team0: Port device team_slave_1 added [ 1922.682614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1922.693223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1922.726746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1922.744686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1922.752400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1922.784700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1922.804748] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1922.814721] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 02:01:58 executing program 0: mlockall(0x7) mlockall(0x3) fork() r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000000)) sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1922.858914] device hsr_slave_0 entered promiscuous mode [ 1922.865066] device hsr_slave_1 entered promiscuous mode [ 1922.874673] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1922.885130] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1923.051447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1923.058315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1923.064995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1923.072176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1923.132801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1923.148019] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1923.163809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1923.172234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1923.187007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1923.205316] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1923.211795] 8021q: adding VLAN 0 to HW filter on device team0 [ 1923.230644] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1923.242499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1923.261775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1923.271719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1923.278142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1923.295158] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1923.303006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1923.316877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1923.325857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1923.332322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1923.349481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1923.360960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1923.374056] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1923.385321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1923.403152] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1923.412005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1923.424975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1923.433638] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1923.444842] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1923.453551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1923.461962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1923.473025] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1923.482650] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1923.492746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1923.500552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1923.508276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1923.515839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1923.525411] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1923.532081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1923.545044] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1923.553310] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1923.560024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1923.567895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1923.582928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1923.638586] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1923.650186] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1923.657954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1923.665823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1923.692498] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1923.700836] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1923.708228] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1923.718138] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1923.724894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1923.734160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1923.743747] device veth0_vlan entered promiscuous mode [ 1923.749772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1923.757896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1923.768881] device veth1_vlan entered promiscuous mode [ 1923.776018] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1923.785486] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1923.797482] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1923.808163] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1923.815116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1923.823464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1923.831199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1923.839134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1923.850157] device veth0_macvtap entered promiscuous mode [ 1923.856786] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1923.865219] device veth1_macvtap entered promiscuous mode [ 1923.871637] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1923.881413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1923.891859] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1923.901516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1923.911583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1923.922122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1923.931926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1923.941352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1923.951197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1923.960806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1923.970874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1923.976399] Bluetooth: hci4 command 0x041b tx timeout [ 1923.980111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1923.995515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1924.005866] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1924.013300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1924.020774] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1924.028399] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1924.035470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1924.043375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1924.053413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1924.065053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1924.074554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1924.084787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1924.094026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1924.103791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1924.112988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1924.122772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1924.132290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1924.142046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1924.152203] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1924.159209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1924.166690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1924.174447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:01:59 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={0x0, 0x38}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:01:59 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:01:59 executing program 1: mlockall(0x7) mlockall(0x3) clock_gettime(0x7, 0x0) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:01:59 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:01:59 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) mlockall(0x3) mlockall(0x6) 02:01:59 executing program 0: mlockall(0x7) mlockall(0x1) getrusage(0x1, &(0x7f0000000000)) socket$inet(0x2, 0x1, 0x4) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1924.606474] Bluetooth: hci5 command 0x041b tx timeout 02:02:00 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:00 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:00 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x440101, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x1) 02:02:00 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:01 executing program 1: mlockall(0x7) mlockall(0x3) clock_gettime(0x7, 0x0) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:01 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) [ 1926.047054] Bluetooth: hci4 command 0x040f tx timeout 02:02:01 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:01 executing program 0: mlockall(0x7) mlockall(0x7) r0 = socket(0x25, 0x1, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1410, 0x1, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) fork() r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000280)={0x1ff, 0x8, 0xff, 0x6, 0x3, 0x18, 0xe, "c39c89ff95a669b073c190d5dc517a73b37bad16", "db450c41af65149fcda95ee79ae5f1a7b5f74939"}) r3 = socket(0x18, 0xa, 0xffffffff) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1409, 0x100, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4892}, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x1ff}, 0x5) 02:02:01 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a22f95e66c67867ad9ec05123d6fa60ebda861ff74e9a295a385426d04a94929bd52046305fd30551ec56a538e3f403a15c7637cb9a8ff9cbca57be525ba2fa7a8fc400d360eb3737f8094aed737c6938f70a05b0b9b59ad2ab4d5e9ef0063ae398706003524538ea65ef0711b2ae72112abd37da1fddadcf90ba70e1ba1e54fbe744339acaf0e7a9a8df57ab637ccf65b129acf9addaadd7ffc4192e236bcbb692945f903c42957550000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000002c0)=""/171) mlockall(0x3) [ 1926.687070] Bluetooth: hci5 command 0x040f tx timeout 02:02:02 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xf) 02:02:02 executing program 1: mlockall(0x7) mlockall(0x3) clock_gettime(0x7, 0x0) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:02 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/23) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={r1, 0xf23, 0x8000, 0x6, 0xe4, 0xfffff69a, 0x4, 0x5, 0x6, 0x41eb, 0x1, 0x3}) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:02 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:03 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:03 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="dda7375b14f224186fe1b18ba338e585c280d2adfc57c253c4177bedd166370724b71a2e9ddecac97bc11f34362b8053d57c1ffe0388695bce574ae7bfbf005775adbdf641f53f9ac007d8c3085ca7d85ab3b356a13f9ac7195a731758bc455090e772e0fe3f38ae3b4bdd4cccb1e4e929b8e1562c583f06bef9fd5afef8673d28f152d1abf9c7c164916eab91149ad62f450daeb683668b6483bc9f834ffc29e4016dbeff2895ebd848e3ab6ee2b3274d7f9dd7a49ee7e3be86b8311528e4c3a2c7c675"], 0x58}, 0x1, 0x0, 0x0, 0x4054}, 0x10) mlockall(0x3) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x402802) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000340)=""/17) mlockall(0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000300)={0x3, 0x7, 0x6, 0x401, 0x5ff, 0x40, 0x8}) 02:02:03 executing program 1: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:03 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xf) [ 1928.130614] Bluetooth: hci4 command 0x0419 tx timeout [ 1928.766279] Bluetooth: hci5 command 0x0419 tx timeout 02:02:04 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:04 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:04 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) syz_open_dev$dri(&(0x7f0000000200), 0x4d17, 0xc0800) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xf) 02:02:04 executing program 0: mlockall(0x7) mlockall(0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:04 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x676d40, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000200)={0x3, 0xb, 0x1, 0x8, "619015aa410d9f60d983524d72ad37e69272f7f36b4b072bbd0f502302de7c35"}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000005c0)={0x701, 0x3, &(0x7f00000004c0)=[0x400, 0x0, 0x1], &(0x7f0000000500)=[0x3, 0x81], &(0x7f0000000540), &(0x7f0000000580)=[0x4, 0x1], 0x0, 0x19d7}) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000600)=""/196) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRESDEC=r0, @ANYBLOB="1ec2b64edfc283a24ce7ccb235da523b192fea6a6561b61af962c4724356d6dccc1b069fc6720dd3e23124d9a3255edd835a0caee88328c44269391040b86d2707c8547ff512423b09ba1792c277f7f704ee988ae9c3284147f2455bd40eb91b8d176e63dd455b720561e8151dca2438585f2d9c6d2971f52baaf31b5dbb48b225", @ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB="9f0392f3f08739615840e0ccf137ce72fcc5e1bde1daf54a47cd4e09034c653857b32b258aad831562e703f4fcbcb214869ac9345fcf686c00"/68], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000480)={0x600, 0x4, &(0x7f0000000240)=[0x5, 0x4, 0x9, 0x4], &(0x7f0000000280)=[0x7, 0xfff, 0xffffc08a, 0x5, 0x8b, 0x4], &(0x7f00000002c0)=[0x9], &(0x7f0000000300)=[0x4e3bf0d4, 0x85, 0x1, 0x5, 0x1, 0xffff219c, 0x2, 0x6], 0x0, 0xce}) mlockall(0x3) mlockall(0x0) 02:02:04 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/23) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={r1, 0xf23, 0x8000, 0x6, 0xe4, 0xfffff69a, 0x4, 0x5, 0x6, 0x41eb, 0x1, 0x3}) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:05 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:05 executing program 2: mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:06 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:06 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000240)={0x7f83597a68877174, 0x8, &(0x7f0000000200)="e62e934fddf8eda6"}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:02:06 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:07 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:07 executing program 2: mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:07 executing program 0: mlockall(0x7) mlockall(0x3) mlockall(0x1) fork() mlockall(0x4) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:07 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) uname(&(0x7f0000000040)=""/101) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:02:07 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:07 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:07 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:08 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:08 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:08 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:09 executing program 1: mlockall(0x7) mlockall(0x3) clock_gettime(0x7, 0x0) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:09 executing program 2: mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:09 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:09 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) bind$802154_dgram(r0, &(0x7f0000000340)={0x24, @long={0x3, 0x3}}, 0x14) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000080)={0x0, 0x2}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6865d90db84cbc16751cab92020771e17e4b040a5b351efeb39528dd3eaa3ea2f728eef208837ded6bd1acf8ba00aab63c9d804f9db97b9ebf557b4b8b6eca38a9a64c7fa99fc53ce4a5444218e99bca841ff1b69c19fc2876f041924b5bebe3c34e9c503ddab3a5d585a17a2da7a00c416900"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x2, &(0x7f0000000380)=[{0x0}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000280)={r3, &(0x7f00000002c0)=""/93}) 02:02:10 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:10 executing program 0: mlockall(0x7) mlockall(0x3) r0 = fork() mlockall(0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40049}, 0x20000000) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:10 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:10 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)={0x1}) 02:02:10 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:10 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:11 executing program 1: mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:11 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:11 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="d14455f3f060d28e35d35c478a54e1b1e5648be12909600473f418106edd2581f3f1c266fb105f0fb35335c1a487fc463c7938588c34eeab32e2fed353d3294e10b48cbf3ebd43eb7e"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) socket(0x10, 0x0, 0x0) mlockall(0x1) mlockall(0x0) 02:02:12 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={0x0, 0x4}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:12 executing program 1: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:12 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:13 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:13 executing program 0: mlockall(0x7) mlockall(0x3) mlockall(0x5) fork() r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x9, 0x7ff, {r1}, {0xee00}, 0x6, 0x10000}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_sync_file_exit\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r3, 0x0, 0x2, &(0x7f0000000100)='}\x00'}, 0x30) sched_getattr(r1, &(0x7f0000000180)={0x38}, 0x38, 0x0) sched_getattr(r0, 0x0, 0x0, 0x0) 02:02:13 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={0x0, 0x8}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:02:13 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={0x0, 0x4}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:13 executing program 1: mlockall(0x7) mlockall(0x3) r0 = fork() mlockall(0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40049}, 0x20000000) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:14 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:14 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYBLOB="3a5dc0b8b7bb23c13aafd0619afd17093f594aa8a965f16080d65bdba925617499943dfef2572480ed877fadfe17773a218fc300f1a793359c03d3af209986243b90c2504e6ebe31d4401cc1a1681a7ae5b7bae0299960fa28ef10877fc1dc53018e053795e59409e51fcfadbd6cb6da2febb274e248230dacabcbabf5544c0f0bb6501d2be3fd3aaf7e10d3af2f23e62737988f0b7b9b7a15", @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRES16=r1, @ANYRESOCT=r1], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000040)=""/37) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000200)="695685d5cc87f05f41b45902af6a764e21e574cc2ca801d1be725238b0e5287c142a4888e791e73eda5e79e9fc4fc8c3e32046481e870472a98e004a718e227f0d", 0x41}) mlockall(0x0) 02:02:14 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={0x0, 0x4}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:14 executing program 3: mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:14 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x140d, 0x4, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:14 executing program 1: mlockall(0x7) mlockall(0x3) mlockall(0x5) fork() r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x9, 0x7ff, {r1}, {0xee00}, 0x6, 0x10000}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_sync_file_exit\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r3, 0x0, 0x2, &(0x7f0000000100)='}\x00'}, 0x30) sched_getattr(r1, &(0x7f0000000180)={0x38}, 0x38, 0x0) sched_getattr(r0, 0x0, 0x0, 0x0) 02:02:15 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:16 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000280)={r0, 0x4}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:16 executing program 0: mlockall(0x7) mlockall(0xc) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:16 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:02:16 executing program 3: mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:16 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x140d, 0x4, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:17 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x0) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:17 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000280)={r0, 0x4}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:18 executing program 3: mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:18 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x26e400, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={0x0, 0x1}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x4040810) mlockall(0x3) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000002c0)={r4, 0x5, 0x5, 0x40, 0x93cc, 0x3, 0x400, 0x4bf, 0x4, 0x7, 0x1, 0x5}) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000340)=""/127) mlockall(0x0) 02:02:18 executing program 1: mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:19 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000280)={r0, 0x4}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:19 executing program 0: mlockall(0x7) mlockall(0x3) fork() ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x53, 0xff, 0x1, {0x1ff, 0x4c}, {0xc718, 0x8001}, @cond=[{0x101, 0x3, 0x9, 0x400, 0x6, 0xfff}, {0x8000, 0x2, 0x4, 0x3, 0x9, 0x2}]}) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:20 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x0) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:20 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:21 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x416001, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x1405, 0x2, 0x70bd25, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40805) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x400, 0x20300) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{}]}) mlockall(0x3) mlockall(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000003c0)={0x6, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000400)={r3, 0x200}) 02:02:21 executing program 1: mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:21 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) [ 1946.511323] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1946.622516] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1946.656249] CPU: 0 PID: 16413 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1946.664258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1946.673628] Call Trace: [ 1946.676227] dump_stack+0x1b2/0x281 [ 1946.679871] dump_header+0x178/0x82f [ 1946.683587] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1946.688697] ? ___ratelimit+0x2cd/0x530 [ 1946.692676] oom_kill_process.cold+0x10/0xa40 [ 1946.697791] out_of_memory+0xe3e/0x1190 [ 1946.702127] ? oom_killer_disable+0x1c0/0x1c0 [ 1946.706631] ? mutex_trylock+0x152/0x1a0 [ 1946.710792] __alloc_pages_nodemask+0x23e1/0x2720 [ 1946.715654] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1946.720503] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1946.725268] ? __lock_acquire+0x5fc/0x3f20 [ 1946.729517] alloc_pages_vma+0xd2/0x6d0 [ 1946.733496] __handle_mm_fault+0x25fa/0x4620 [ 1946.737941] ? lock_downgrade+0x740/0x740 [ 1946.742099] ? vm_insert_page+0x7c0/0x7c0 [ 1946.746250] ? do_raw_spin_unlock+0x164/0x220 [ 1946.750756] ? mark_held_locks+0xa6/0xf0 [ 1946.754821] handle_mm_fault+0x455/0x9c0 [ 1946.758885] __get_user_pages+0x4e9/0x1270 [ 1946.763132] ? follow_page_mask+0x18a0/0x18a0 [ 1946.767630] ? lock_acquire+0x170/0x3f0 [ 1946.771612] populate_vma_page_range+0x17b/0x210 [ 1946.776370] __mm_populate+0x195/0x2c0 [ 1946.780267] ? populate_vma_page_range+0x210/0x210 [ 1946.785227] ? security_capable+0x88/0xb0 [ 1946.789407] SyS_mlockall+0x3ff/0x520 [ 1946.793483] ? SyS_munlock+0xf0/0xf0 [ 1946.797200] do_syscall_64+0x1d5/0x640 [ 1946.801098] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1946.806286] RIP: 0033:0x4665f9 [ 1946.809470] RSP: 002b:00007f135802f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1946.817176] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1946.824445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1946.831735] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1946.839092] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1946.846360] R13: 00007fff7651e55f R14: 00007f135802f300 R15: 0000000000022000 [ 1947.462951] Mem-Info: [ 1947.465414] active_anon:217035 inactive_anon:1095657 isolated_anon:0 [ 1947.465414] active_file:20 inactive_file:5 isolated_file:0 [ 1947.465414] unevictable:55005 dirty:0 writeback:0 unstable:0 [ 1947.465414] slab_reclaimable:19831 slab_unreclaimable:137406 [ 1947.465414] mapped:62788 shmem:8979 pagetables:57445 bounce:0 [ 1947.465414] free:25157 free_pcp:170 free_cma:0 [ 1947.549123] Node 0 active_anon:731092kB inactive_anon:877428kB active_file:48kB inactive_file:8kB unevictable:162300kB isolated(anon):0kB isolated(file):0kB mapped:237964kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1234944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1947.738427] Node 1 active_anon:137048kB inactive_anon:3505200kB active_file:32kB inactive_file:12kB unevictable:57720kB isolated(anon):0kB isolated(file):0kB mapped:13188kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1947.972309] Node 0 DMA free:11048kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1948.156198] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1948.171667] Node 0 DMA32 free:36404kB min:36200kB low:45248kB high:54296kB active_anon:731072kB inactive_anon:891036kB active_file:420kB inactive_file:496kB unevictable:142140kB writepending:0kB present:3129332kB managed:2788128kB mlocked:142284kB kernel_stack:25600kB pagetables:62912kB bounce:0kB free_pcp:732kB local_pcp:732kB free_cma:0kB [ 1948.254049] lowmem_reserve[]: 0 0 0 0 0 [ 1948.272476] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1948.399704] lowmem_reserve[]: 0 0 0 0 0 [ 1948.425397] Node 1 Normal free:70516kB min:53696kB low:67120kB high:80544kB active_anon:137048kB inactive_anon:3505164kB active_file:16kB inactive_file:56kB unevictable:40452kB writepending:0kB present:4194304kB managed:4128256kB mlocked:40452kB kernel_stack:51520kB pagetables:166648kB bounce:0kB free_pcp:896kB local_pcp:160kB free_cma:0kB 02:02:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1948.624918] lowmem_reserve[]: 0 0 0 0 0 [ 1948.645029] Node 0 DMA: 8*4kB (UE) 11*8kB (UME) 11*16kB (UME) 4*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11048kB [ 1948.748876] Node 0 DMA32: 1017*4kB (UME) 434*8kB (UME) 148*16kB (ME) 199*32kB (UME) 192*64kB (UME) 33*128kB (UME) 18*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 39444kB [ 1948.824188] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1948.888909] Node 1 Normal: 1*4kB (M) 454*8kB (U) 1415*16kB (UE) 855*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53636kB [ 1948.989188] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1949.029361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1949.070442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1949.129498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1949.164274] 16621 total pagecache pages [ 1949.188609] 0 pages in swap cache [ 1949.203427] Swap cache stats: add 0, delete 0, find 0/0 [ 1949.226892] Free swap = 0kB [ 1949.235161] Total swap = 0kB [ 1949.242190] 2097051 pages RAM [ 1949.251502] 0 pages HighMem/MovableOnly [ 1949.259612] 363849 pages reserved [ 1949.264290] 0 pages cma reserved [ 1949.273531] Out of memory (oom_kill_allocating_task): Kill process 16413 (syz-executor.5) score 0 or sacrifice child [ 1949.291812] Killed process 16413 (syz-executor.5) total-vm:93252kB, anon-rss:16984kB, file-rss:40200kB, shmem-rss:0kB [ 1949.381439] oom_reaper: reaped process 16413 (syz-executor.5), now anon-rss:17088kB, file-rss:5380kB, shmem-rss:0kB 02:02:25 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x0) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:25 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:25 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:25 executing program 1: mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:25 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6b2e7a8f97a42d7920c5e4d5693ffd4a1790c82188093c3d1e82cc09b40795cd2156016cb8ced9b3148af4e911b5caa2040b261513d4b8f3c7a203e879df4b1625fdb372b42dd074ceda627fbab85da3bc95c1c314afc1574bb990705486d98a525714e1734def944c0c6bf3bc301d6c3af47d3805a47c24cec685"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 1950.579499] syz-executor.2 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1950.620936] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1950.626095] CPU: 1 PID: 16428 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1950.633983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1950.643430] Call Trace: [ 1950.646030] dump_stack+0x1b2/0x281 [ 1950.649665] dump_header+0x178/0x82f [ 1950.653472] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1950.658576] ? ___ratelimit+0x2cd/0x530 [ 1950.662586] oom_kill_process.cold+0x10/0xa40 [ 1950.667103] out_of_memory+0xe3e/0x1190 [ 1950.671091] ? oom_killer_disable+0x1c0/0x1c0 [ 1950.675588] ? mutex_trylock+0x152/0x1a0 [ 1950.679675] __alloc_pages_nodemask+0x23e1/0x2720 [ 1950.684527] ? _raw_spin_unlock_irq+0x24/0x80 [ 1950.689038] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1950.693933] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1950.698710] ? __lock_acquire+0x5fc/0x3f20 [ 1950.702964] alloc_pages_vma+0xd2/0x6d0 [ 1950.707151] __handle_mm_fault+0x25fa/0x4620 [ 1950.711568] ? lock_downgrade+0x740/0x740 [ 1950.716332] ? vm_insert_page+0x7c0/0x7c0 [ 1950.720480] ? do_raw_spin_unlock+0x164/0x220 [ 1950.724991] ? mark_held_locks+0xa6/0xf0 [ 1950.729071] handle_mm_fault+0x455/0x9c0 [ 1950.733158] __get_user_pages+0x4e9/0x1270 [ 1950.737420] ? follow_page_mask+0x18a0/0x18a0 [ 1950.742288] ? lock_acquire+0x170/0x3f0 [ 1950.746337] populate_vma_page_range+0x17b/0x210 [ 1950.751099] __mm_populate+0x195/0x2c0 [ 1950.755133] ? populate_vma_page_range+0x210/0x210 [ 1950.760474] ? security_capable+0x88/0xb0 [ 1950.765617] SyS_mlockall+0x3ff/0x520 [ 1950.769543] ? SyS_munlock+0xf0/0xf0 [ 1950.773496] do_syscall_64+0x1d5/0x640 [ 1950.777889] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1950.783363] RIP: 0033:0x4665f9 [ 1950.786872] RSP: 002b:00007fe19975c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1950.794967] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1950.804331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1950.811814] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1950.819103] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1950.829837] R13: 00007fffd7040a0f R14: 00007fe19975c300 R15: 0000000000022000 [ 1950.842212] Mem-Info: [ 1950.845557] active_anon:217060 inactive_anon:1102734 isolated_anon:0 [ 1950.845557] active_file:11 inactive_file:0 isolated_file:0 [ 1950.845557] unevictable:47408 dirty:0 writeback:0 unstable:0 [ 1950.845557] slab_reclaimable:19879 slab_unreclaimable:137952 [ 1950.845557] mapped:61653 shmem:8979 pagetables:57481 bounce:0 [ 1950.845557] free:25040 free_pcp:12 free_cma:0 [ 1950.886400] Node 0 active_anon:731172kB inactive_anon:892916kB active_file:36kB inactive_file:0kB unevictable:145008kB isolated(anon):0kB isolated(file):0kB mapped:233868kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1234944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1950.924547] Node 1 active_anon:137068kB inactive_anon:3518020kB active_file:8kB inactive_file:0kB unevictable:44624kB isolated(anon):0kB isolated(file):0kB mapped:12744kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1950.959952] Node 0 DMA free:11048kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1950.993918] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1950.999661] Node 0 DMA32 free:35968kB min:36200kB low:45248kB high:54296kB active_anon:731152kB inactive_anon:888448kB active_file:88kB inactive_file:96kB unevictable:144820kB writepending:0kB present:3129332kB managed:2788128kB mlocked:144888kB kernel_stack:25920kB pagetables:63356kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 1951.035717] lowmem_reserve[]: 0 0 0 0 0 [ 1951.039870] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1951.070742] lowmem_reserve[]: 0 0 0 0 0 [ 1951.074730] Node 1 Normal free:53636kB min:53696kB low:67120kB high:80544kB active_anon:137068kB inactive_anon:3518020kB active_file:0kB inactive_file:4kB unevictable:44624kB writepending:0kB present:4194304kB managed:4128256kB mlocked:44624kB kernel_stack:51392kB pagetables:166484kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1951.112211] lowmem_reserve[]: 0 0 0 0 0 [ 1951.116278] Node 0 DMA: 8*4kB (UE) 11*8kB (UME) 11*16kB (UME) 4*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11048kB [ 1951.132839] Node 0 DMA32: 455*4kB (UME) 342*8kB (UME) 99*16kB (ME) 148*32kB (UME) 211*64kB (UME) 35*128kB (UME) 18*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35516kB [ 1951.148906] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1951.159894] Node 1 Normal: 69*4kB (UM) 393*8kB (UM) 1424*16kB (UE) 859*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53692kB [ 1951.174681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1951.183599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1951.192249] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1951.201196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1951.210701] 18035 total pagecache pages [ 1951.214689] 0 pages in swap cache [ 1951.218533] Swap cache stats: add 0, delete 0, find 0/0 [ 1951.223915] Free swap = 0kB [ 1951.229886] Total swap = 0kB [ 1951.233105] 2097051 pages RAM [ 1951.236261] 0 pages HighMem/MovableOnly [ 1951.240235] 363849 pages reserved [ 1951.243678] 0 pages cma reserved [ 1951.247145] Out of memory (oom_kill_allocating_task): Kill process 16428 (syz-executor.2) score 0 or sacrifice child [ 1951.258625] Killed process 16425 (syz-executor.2) total-vm:93252kB, anon-rss:15864kB, file-rss:39168kB, shmem-rss:0kB [ 1951.280199] oom_reaper: reaped process 16425 (syz-executor.2), now anon-rss:16088kB, file-rss:5376kB, shmem-rss:0kB [ 1951.337175] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1951.369437] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1951.374582] CPU: 0 PID: 16435 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1951.383016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1951.392457] Call Trace: [ 1951.395062] dump_stack+0x1b2/0x281 [ 1951.398848] dump_header+0x178/0x82f [ 1951.402573] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1951.407676] ? ___ratelimit+0x2cd/0x530 [ 1951.411695] oom_kill_process.cold+0x10/0xa40 [ 1951.416214] out_of_memory+0xe3e/0x1190 [ 1951.420197] ? oom_killer_disable+0x1c0/0x1c0 [ 1951.424708] ? mutex_trylock+0x152/0x1a0 [ 1951.428773] __alloc_pages_nodemask+0x23e1/0x2720 [ 1951.433629] ? _raw_spin_unlock_irq+0x24/0x80 [ 1951.438138] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1951.442995] ? __lock_acquire+0x5fc/0x3f20 [ 1951.447243] ? preempt_schedule_common+0x45/0xc0 [ 1951.452011] alloc_pages_vma+0xd2/0x6d0 [ 1951.455988] __handle_mm_fault+0x25fa/0x4620 [ 1951.460429] ? lock_downgrade+0x740/0x740 [ 1951.464576] ? vm_insert_page+0x7c0/0x7c0 [ 1951.468723] ? do_raw_spin_unlock+0x164/0x220 [ 1951.473221] ? mark_held_locks+0xa6/0xf0 [ 1951.477287] handle_mm_fault+0x455/0x9c0 [ 1951.481358] __get_user_pages+0x4e9/0x1270 [ 1951.485600] ? follow_page_mask+0x18a0/0x18a0 [ 1951.490099] ? lock_acquire+0x170/0x3f0 [ 1951.494269] populate_vma_page_range+0x17b/0x210 [ 1951.499059] __mm_populate+0x195/0x2c0 [ 1951.502948] ? populate_vma_page_range+0x210/0x210 [ 1951.507897] ? security_capable+0x88/0xb0 [ 1951.512044] SyS_mlockall+0x3ff/0x520 [ 1951.515854] ? SyS_munlock+0xf0/0xf0 [ 1951.522527] do_syscall_64+0x1d5/0x640 [ 1951.526438] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1951.531622] RIP: 0033:0x4665f9 [ 1951.534801] RSP: 002b:00007f135802f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1951.542502] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1951.549804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1951.557067] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1951.564331] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1951.571595] R13: 00007fff7651e55f R14: 00007f135802f300 R15: 0000000000022000 [ 1951.588159] Mem-Info: [ 1951.594855] active_anon:217058 inactive_anon:1102735 isolated_anon:0 [ 1951.594855] active_file:1050 inactive_file:225 isolated_file:0 [ 1951.594855] unevictable:43697 dirty:0 writeback:0 unstable:0 [ 1951.594855] slab_reclaimable:19882 slab_unreclaimable:137962 [ 1951.594855] mapped:61056 shmem:8979 pagetables:57447 bounce:0 [ 1951.594855] free:27112 free_pcp:352 free_cma:0 [ 1951.745674] Node 0 active_anon:731168kB inactive_anon:892920kB active_file:340kB inactive_file:576kB unevictable:144000kB isolated(anon):0kB isolated(file):128kB mapped:232592kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1234944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1951.836982] Node 1 active_anon:137064kB inactive_anon:3518020kB active_file:368kB inactive_file:344kB unevictable:43348kB isolated(anon):0kB isolated(file):0kB mapped:14548kB dirty:8kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1951.865699] Node 0 DMA free:11048kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1951.892894] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1951.898126] Node 0 DMA32 free:35940kB min:36200kB low:45248kB high:54296kB active_anon:731148kB inactive_anon:888452kB active_file:108kB inactive_file:0kB unevictable:144720kB writepending:0kB present:3129332kB managed:2788128kB mlocked:144720kB kernel_stack:25792kB pagetables:63252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1952.068729] lowmem_reserve[]: 0 0 0 0 0 [ 1952.073390] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1952.142160] lowmem_reserve[]: 0 0 0 0 0 [ 1952.157917] Node 1 Normal free:53356kB min:53696kB low:67120kB high:80544kB active_anon:137064kB inactive_anon:3524020kB active_file:4040kB inactive_file:3996kB unevictable:30780kB writepending:0kB present:4194304kB managed:4128256kB mlocked:30972kB kernel_stack:51360kB pagetables:166488kB bounce:0kB free_pcp:116kB local_pcp:20kB free_cma:0kB 02:02:27 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x0) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) [ 1952.301234] lowmem_reserve[]: 0 0 0 0 0 02:02:27 executing program 0: mlockall(0x7) mlockall(0x3) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000000)={0x3, 0x4}) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1952.321534] Node 0 DMA: 8*4kB (UE) 12*8kB (UME) 11*16kB (UME) 4*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1952.434726] Node 0 DMA32: 584*4kB (UME) 331*8kB (UME) 102*16kB (UME) 148*32kB (UMEH) 217*64kB (UME) 36*128kB (UME) 18*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36504kB [ 1952.530624] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1952.571165] Node 1 Normal: 464*4kB (UME) 46*8kB (ME) 1468*16kB (UME) 867*32kB (UME) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53584kB [ 1952.615298] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1952.637127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1952.658898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1952.686758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1952.718878] 15074 total pagecache pages [ 1952.742946] 0 pages in swap cache [ 1952.751976] Swap cache stats: add 0, delete 0, find 0/0 [ 1952.771240] Free swap = 0kB [ 1952.783896] Total swap = 0kB [ 1952.791014] 2097051 pages RAM [ 1952.807325] 0 pages HighMem/MovableOnly [ 1952.823144] 363849 pages reserved [ 1952.831196] 0 pages cma reserved [ 1952.839438] Out of memory (oom_kill_allocating_task): Kill process 16435 (syz-executor.5) score 0 or sacrifice child [ 1952.850411] Killed process 16431 (syz-executor.5) total-vm:93252kB, anon-rss:8240kB, file-rss:39220kB, shmem-rss:0kB [ 1952.882768] oom_reaper: reaped process 16431 (syz-executor.5), now anon-rss:8504kB, file-rss:5376kB, shmem-rss:0kB [ 1952.903725] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1952.919614] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1952.925066] CPU: 1 PID: 7989 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1952.932996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1952.942659] Call Trace: [ 1952.945263] dump_stack+0x1b2/0x281 [ 1952.949113] dump_header+0x178/0x82f [ 1952.952838] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1952.958039] ? ___ratelimit+0x2cd/0x530 [ 1952.962022] oom_kill_process.cold+0x10/0xa40 [ 1952.966524] out_of_memory+0xe3e/0x1190 [ 1952.970492] ? oom_killer_disable+0x1c0/0x1c0 [ 1952.974986] ? mutex_trylock+0x152/0x1a0 [ 1952.979039] __alloc_pages_nodemask+0x23e1/0x2720 [ 1952.983885] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1952.988731] alloc_pages_current+0x155/0x260 [ 1952.993159] filemap_fault+0x11a1/0x1ad0 [ 1952.997228] ext4_filemap_fault+0x84/0xb0 [ 1953.001385] __do_fault+0xfa/0x380 [ 1953.004928] __handle_mm_fault+0x2497/0x4620 [ 1953.009318] ? vm_insert_page+0x7c0/0x7c0 [ 1953.013452] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1953.017910] ? nanosleep_copyout+0x100/0x100 [ 1953.022329] ? mark_held_locks+0xa6/0xf0 [ 1953.026382] handle_mm_fault+0x455/0x9c0 [ 1953.030449] __do_page_fault+0x549/0xad0 [ 1953.034503] ? spurious_fault+0x640/0x640 [ 1953.038637] ? do_page_fault+0x60/0x500 [ 1953.042602] ? page_fault+0x2f/0x50 [ 1953.046348] page_fault+0x45/0x50 [ 1953.049812] RIP: 1dcac4:0x5 [ 1953.052819] RSP: 553f:00007fffd7040ccc EFLAGS: 00000032 [ 1953.057033] Mem-Info: [ 1953.065629] active_anon:217060 inactive_anon:1102734 isolated_anon:0 [ 1953.065629] active_file:13 inactive_file:12 isolated_file:0 [ 1953.065629] unevictable:46423 dirty:0 writeback:0 unstable:0 [ 1953.065629] slab_reclaimable:19723 slab_unreclaimable:139121 [ 1953.065629] mapped:58716 shmem:8979 pagetables:57442 bounce:0 [ 1953.065629] free:25083 free_pcp:107 free_cma:0 [ 1953.106366] Node 0 active_anon:731176kB inactive_anon:892964kB active_file:40kB inactive_file:40kB unevictable:145524kB isolated(anon):0kB isolated(file):0kB mapped:226240kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1234944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1953.140641] Node 1 active_anon:137064kB inactive_anon:3517972kB active_file:4kB inactive_file:16kB unevictable:40168kB isolated(anon):0kB isolated(file):0kB mapped:8624kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1953.179345] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1953.215508] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1953.220892] Node 0 DMA32 free:35796kB min:36200kB low:45248kB high:54296kB active_anon:731156kB inactive_anon:888496kB active_file:12kB inactive_file:68kB unevictable:145524kB writepending:0kB present:3129332kB managed:2788128kB mlocked:145524kB kernel_stack:25632kB pagetables:63092kB bounce:0kB free_pcp:404kB local_pcp:224kB free_cma:0kB [ 1953.262102] lowmem_reserve[]: 0 0 0 0 0 [ 1953.269677] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1953.300167] lowmem_reserve[]: 0 0 0 0 0 [ 1953.304268] Node 1 Normal free:53656kB min:53696kB low:67120kB high:80544kB active_anon:137064kB inactive_anon:3517972kB active_file:4kB inactive_file:16kB unevictable:40168kB writepending:0kB present:4194304kB managed:4128256kB mlocked:40168kB kernel_stack:51392kB pagetables:166592kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1953.342304] lowmem_reserve[]: 0 0 0 0 0 [ 1953.346404] Node 0 DMA: 8*4kB (UE) 12*8kB (UME) 11*16kB (UME) 4*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1953.364812] Node 0 DMA32: 617*4kB (UME) 407*8kB (UE) 99*16kB (UE) 136*32kB (UMEH) 202*64kB (UME) 36*128kB (UME) 18*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35852kB [ 1953.380971] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1953.392474] Node 1 Normal: 442*4kB (UME) 46*8kB (ME) 1470*16kB (UME) 871*32kB (UME) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53656kB [ 1953.407317] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1953.417325] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1953.426521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1953.436757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1953.445431] 15056 total pagecache pages [ 1953.449490] 0 pages in swap cache [ 1953.452999] Swap cache stats: add 0, delete 0, find 0/0 [ 1953.458778] Free swap = 0kB [ 1953.471212] Total swap = 0kB [ 1953.474618] 2097051 pages RAM [ 1953.478199] 0 pages HighMem/MovableOnly [ 1953.482258] 363849 pages reserved [ 1953.485708] 0 pages cma reserved [ 1953.493605] Out of memory (oom_kill_allocating_task): Kill process 7989 (syz-executor.2) score 0 or sacrifice child [ 1953.516730] Killed process 14502 (syz-executor.2) total-vm:93516kB, anon-rss:36900kB, file-rss:35084kB, shmem-rss:0kB [ 1953.583194] oom_reaper: reaped process 14502 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1953.618418] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1953.634890] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1953.655058] CPU: 1 PID: 7989 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1953.662975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1953.672327] Call Trace: [ 1953.674941] dump_stack+0x1b2/0x281 [ 1953.678578] dump_header+0x178/0x82f [ 1953.682399] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1953.687529] ? ___ratelimit+0x2cd/0x530 [ 1953.691882] oom_kill_process.cold+0x10/0xa40 [ 1953.696434] out_of_memory+0xe3e/0x1190 [ 1953.700440] ? oom_killer_disable+0x1c0/0x1c0 [ 1953.704947] ? mutex_trylock+0x152/0x1a0 [ 1953.709043] __alloc_pages_nodemask+0x23e1/0x2720 [ 1953.713927] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1953.718792] alloc_pages_current+0x155/0x260 [ 1953.723317] filemap_fault+0x11a1/0x1ad0 [ 1953.727390] ext4_filemap_fault+0x84/0xb0 [ 1953.731656] __do_fault+0xfa/0x380 [ 1953.735203] __handle_mm_fault+0x2497/0x4620 [ 1953.739979] ? vm_insert_page+0x7c0/0x7c0 [ 1953.744131] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1953.748550] ? nanosleep_copyout+0x100/0x100 [ 1953.752976] ? mark_held_locks+0xa6/0xf0 [ 1953.757138] handle_mm_fault+0x455/0x9c0 [ 1953.761206] __do_page_fault+0x549/0xad0 [ 1953.765274] ? spurious_fault+0x640/0x640 [ 1953.769431] ? do_page_fault+0x60/0x500 [ 1953.773425] ? page_fault+0x2f/0x50 [ 1953.777049] page_fault+0x45/0x50 [ 1953.780500] RIP: 1dcac4:0x5 [ 1953.783421] RSP: 553f:00007fffd7040ccc EFLAGS: 00000032 [ 1954.427026] Mem-Info: [ 1954.435660] active_anon:217060 inactive_anon:1102993 isolated_anon:0 [ 1954.435660] active_file:296 inactive_file:544 isolated_file:65 [ 1954.435660] unevictable:45143 dirty:0 writeback:0 unstable:0 [ 1954.435660] slab_reclaimable:19708 slab_unreclaimable:139137 [ 1954.435660] mapped:58616 shmem:8979 pagetables:57402 bounce:0 [ 1954.435660] free:25191 free_pcp:186 free_cma:0 [ 1954.506402] Node 0 active_anon:731176kB inactive_anon:893064kB active_file:80kB inactive_file:4kB unevictable:139304kB isolated(anon):0kB isolated(file):0kB mapped:223140kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1234944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1954.535428] Node 1 active_anon:137048kB inactive_anon:3517908kB active_file:20kB inactive_file:64kB unevictable:33916kB isolated(anon):0kB isolated(file):0kB mapped:7744kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1954.586348] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1954.730021] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1954.758496] Node 0 DMA32 free:36324kB min:36200kB low:45248kB high:54296kB active_anon:731132kB inactive_anon:888500kB active_file:944kB inactive_file:2296kB unevictable:141260kB writepending:0kB present:3129332kB managed:2788128kB mlocked:141260kB kernel_stack:25536kB pagetables:62984kB bounce:0kB free_pcp:872kB local_pcp:188kB free_cma:0kB [ 1954.881397] lowmem_reserve[]: 0 0 0 0 0 [ 1954.885497] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1954.914485] lowmem_reserve[]: 0 0 0 0 0 [ 1954.918991] Node 1 Normal free:53956kB min:53696kB low:67120kB high:80544kB active_anon:137048kB inactive_anon:3517908kB active_file:140kB inactive_file:384kB unevictable:36396kB writepending:0kB present:4194304kB managed:4128256kB mlocked:36396kB kernel_stack:51360kB pagetables:166416kB bounce:0kB free_pcp:616kB local_pcp:616kB free_cma:0kB [ 1955.033980] lowmem_reserve[]: 0 0 0 0 0 [ 1955.076185] Node 0 DMA: 8*4kB (UE) 12*8kB (UME) 11*16kB (UME) 4*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1955.148148] Node 0 DMA32: 604*4kB (UME) 554*8kB (UME) 117*16kB (ME) 134*32kB (UE) 190*64kB (UME) 36*128kB (UME) 18*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36432kB [ 1955.201066] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1955.247725] Node 1 Normal: 690*4kB (UME) 8*8kB (UM) 1407*16kB (UME) 876*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53368kB [ 1955.291600] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1955.314078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1955.332358] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1955.341745] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1955.376090] 14127 total pagecache pages [ 1955.388874] 0 pages in swap cache [ 1955.392360] Swap cache stats: add 0, delete 0, find 0/0 [ 1955.444479] Free swap = 0kB [ 1955.455417] Total swap = 0kB [ 1955.465749] 2097051 pages RAM [ 1955.497922] 0 pages HighMem/MovableOnly [ 1955.506922] 363849 pages reserved [ 1955.510490] 0 pages cma reserved [ 1955.513861] Out of memory (oom_kill_allocating_task): Kill process 7989 (syz-executor.2) score 0 or sacrifice child 02:02:30 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:30 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x402040}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008800}, 0x20008084) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), 0xffffffffffffffff) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000001e80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e40)={&(0x7f0000000840)={0x190, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x190}, 0x1, 0x0, 0x0, 0x10000000}, 0x4080) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x8000, 0x800, {0x0}, {}, 0x10001, 0x3efe}) r6 = fork() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x140, r3, 0x30, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40000}, 0x1084) mlockall(0x0) 02:02:30 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) [ 1955.596225] Killed process 14504 (syz-executor.2) total-vm:93516kB, anon-rss:36900kB, file-rss:35084kB, shmem-rss:0kB 02:02:30 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x0) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) [ 1955.673059] oom_reaper: reaped process 14504 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 02:02:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:31 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x10000, 0xfffffff7], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0)) mlockall(0x7) mlockall(0x3) fork() mlockall(0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), 0x4) sched_getattr(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 1956.317661] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1956.350636] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1956.361649] CPU: 0 PID: 16455 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1956.371123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1956.380752] Call Trace: [ 1956.383361] dump_stack+0x1b2/0x281 [ 1956.387113] dump_header+0x178/0x82f [ 1956.391722] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1956.397406] ? ___ratelimit+0x2cd/0x530 [ 1956.401394] oom_kill_process.cold+0x10/0xa40 [ 1956.406035] out_of_memory+0xe3e/0x1190 [ 1956.410345] ? oom_killer_disable+0x1c0/0x1c0 [ 1956.415052] ? mutex_trylock+0x152/0x1a0 [ 1956.421196] __alloc_pages_nodemask+0x23e1/0x2720 [ 1956.426341] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1956.431580] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1956.437261] ? __lock_acquire+0x5fc/0x3f20 [ 1956.443296] alloc_pages_vma+0xd2/0x6d0 [ 1956.448377] __handle_mm_fault+0x25fa/0x4620 [ 1956.454211] ? lock_downgrade+0x740/0x740 [ 1956.458447] ? vm_insert_page+0x7c0/0x7c0 [ 1956.462973] ? do_raw_spin_unlock+0x164/0x220 [ 1956.467867] ? mark_held_locks+0xa6/0xf0 [ 1956.474100] handle_mm_fault+0x455/0x9c0 [ 1956.479352] __get_user_pages+0x4e9/0x1270 [ 1956.483597] ? follow_page_mask+0x18a0/0x18a0 [ 1956.488192] ? lock_acquire+0x170/0x3f0 [ 1956.492795] populate_vma_page_range+0x17b/0x210 [ 1956.498904] __mm_populate+0x195/0x2c0 [ 1956.503646] ? populate_vma_page_range+0x210/0x210 [ 1956.508584] ? security_capable+0x88/0xb0 [ 1956.512852] SyS_mlockall+0x3ff/0x520 [ 1956.516748] ? SyS_munlock+0xf0/0xf0 [ 1956.521608] do_syscall_64+0x1d5/0x640 [ 1956.526772] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1956.533649] RIP: 0033:0x4665f9 [ 1956.537206] RSP: 002b:00007f6714345188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1956.545547] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665f9 [ 1956.553627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1956.579834] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1956.588279] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1956.595813] R13: 00007ffdd2939eaf R14: 00007f6714345300 R15: 0000000000022000 [ 1956.656795] Mem-Info: [ 1956.676308] active_anon:217112 inactive_anon:1102705 isolated_anon:0 [ 1956.676308] active_file:37 inactive_file:27 isolated_file:0 [ 1956.676308] unevictable:45931 dirty:1 writeback:24 unstable:0 [ 1956.676308] slab_reclaimable:19724 slab_unreclaimable:139343 [ 1956.676308] mapped:57530 shmem:8979 pagetables:57375 bounce:0 [ 1956.676308] free:25171 free_pcp:0 free_cma:0 [ 1956.894004] Node 0 active_anon:731320kB inactive_anon:892968kB active_file:60kB inactive_file:60kB unevictable:146168kB isolated(anon):0kB isolated(file):0kB mapped:221104kB dirty:4kB writeback:68kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1234944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1957.040086] Node 1 active_anon:137128kB inactive_anon:3517852kB active_file:24kB inactive_file:120kB unevictable:37884kB isolated(anon):0kB isolated(file):0kB mapped:9308kB dirty:0kB writeback:28kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1957.093914] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1957.123290] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1957.140441] Node 0 DMA32 free:36000kB min:36200kB low:45248kB high:54296kB active_anon:731264kB inactive_anon:888560kB active_file:48kB inactive_file:16kB unevictable:146456kB writepending:12kB present:3129332kB managed:2788128kB mlocked:146456kB kernel_stack:25792kB pagetables:63088kB bounce:0kB free_pcp:324kB local_pcp:208kB free_cma:0kB [ 1957.195937] lowmem_reserve[]: 0 0 0 0 0 [ 1957.204186] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1957.241790] lowmem_reserve[]: 0 0 0 0 0 [ 1957.266530] Node 1 Normal free:53632kB min:53696kB low:67120kB high:80544kB active_anon:137076kB inactive_anon:3517856kB active_file:24kB inactive_file:28kB unevictable:37936kB writepending:0kB present:4194304kB managed:4128256kB mlocked:37936kB kernel_stack:51392kB pagetables:166444kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1957.455921] lowmem_reserve[]: 0 0 0 0 0 [ 1957.509629] Node 0 DMA: 8*4kB (UE) 12*8kB (UME) 11*16kB (UME) 4*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1957.589384] Node 0 DMA32: 575*4kB (UE) 607*8kB (UME) 102*16kB (ME) 122*32kB (UE) 186*64kB (UE) 37*128kB (UME) 18*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35988kB [ 1957.684591] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1957.775938] Node 1 Normal: 34*4kB (U) 477*8kB (UM) 1386*16kB (UE) 861*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53680kB [ 1957.862766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1957.919743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1957.982755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1958.036630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1958.092237] 14024 total pagecache pages [ 1958.114933] 0 pages in swap cache [ 1958.134395] Swap cache stats: add 0, delete 0, find 0/0 [ 1958.165246] Free swap = 0kB [ 1958.186549] Total swap = 0kB [ 1958.205129] 2097051 pages RAM [ 1958.230448] 0 pages HighMem/MovableOnly [ 1958.234637] 363849 pages reserved [ 1958.270208] 0 pages cma reserved [ 1958.273890] Out of memory (oom_kill_allocating_task): Kill process 16455 (syz-executor.3) score 0 or sacrifice child [ 1958.341471] Killed process 16447 (syz-executor.3) total-vm:93384kB, anon-rss:26164kB, file-rss:39236kB, shmem-rss:0kB [ 1958.419700] oom_reaper: reaped process 16447 (syz-executor.3), now anon-rss:26208kB, file-rss:5376kB, shmem-rss:0kB [ 1958.538931] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1958.595593] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1958.612898] CPU: 1 PID: 16454 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1958.622838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1958.636664] Call Trace: [ 1958.639533] dump_stack+0x1b2/0x281 [ 1958.643515] dump_header+0x178/0x82f [ 1958.650827] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1958.657429] ? ___ratelimit+0x2cd/0x530 [ 1958.661529] oom_kill_process.cold+0x10/0xa40 [ 1958.666044] out_of_memory+0xe3e/0x1190 [ 1958.670032] ? oom_killer_disable+0x1c0/0x1c0 [ 1958.674747] ? mutex_trylock+0x152/0x1a0 [ 1958.678812] __alloc_pages_nodemask+0x23e1/0x2720 [ 1958.683686] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1958.688552] alloc_pages_current+0x155/0x260 [ 1958.693059] filemap_fault+0x11a1/0x1ad0 [ 1958.697144] ext4_filemap_fault+0x84/0xb0 [ 1958.701293] __do_fault+0xfa/0x380 [ 1958.704830] __handle_mm_fault+0x2497/0x4620 [ 1958.709241] ? lock_downgrade+0x740/0x740 [ 1958.713664] ? vm_insert_page+0x7c0/0x7c0 [ 1958.717820] ? do_raw_spin_unlock+0x164/0x220 [ 1958.722352] ? mark_held_locks+0xa6/0xf0 [ 1958.726420] handle_mm_fault+0x455/0x9c0 [ 1958.730522] __get_user_pages+0x4e9/0x1270 [ 1958.734769] ? follow_page_mask+0x18a0/0x18a0 [ 1958.739572] populate_vma_page_range+0x17b/0x210 [ 1958.744341] __mm_populate+0x195/0x2c0 [ 1958.748237] ? populate_vma_page_range+0x210/0x210 [ 1958.753190] ? security_capable+0x88/0xb0 [ 1958.757353] SyS_mlockall+0x3ff/0x520 [ 1958.761270] ? SyS_munlock+0xf0/0xf0 [ 1958.764988] do_syscall_64+0x1d5/0x640 [ 1958.768897] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1958.774094] RIP: 0033:0x4665f9 [ 1958.777300] RSP: 002b:00007f135802f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1958.785101] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1958.793783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1958.801067] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1958.808493] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1958.815891] R13: 00007fff7651e55f R14: 00007f135802f300 R15: 0000000000022000 [ 1959.745324] Mem-Info: [ 1959.758708] active_anon:217089 inactive_anon:1109254 isolated_anon:0 [ 1959.758708] active_file:53 inactive_file:253 isolated_file:21 [ 1959.758708] unevictable:38504 dirty:3 writeback:0 unstable:0 [ 1959.758708] slab_reclaimable:19716 slab_unreclaimable:139134 [ 1959.758708] mapped:56850 shmem:8979 pagetables:57366 bounce:0 [ 1959.758708] free:25796 free_pcp:387 free_cma:0 02:02:34 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x0) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:35 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) [ 1959.806343] Node 0 active_anon:731280kB inactive_anon:899364kB active_file:296kB inactive_file:1088kB unevictable:128576kB isolated(anon):0kB isolated(file):84kB mapped:219640kB dirty:12kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1234944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1959.892009] Node 1 active_anon:137076kB inactive_anon:3517852kB active_file:64kB inactive_file:0kB unevictable:25440kB isolated(anon):0kB isolated(file):0kB mapped:7860kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1959.928693] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1960.026197] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1960.031533] Node 0 DMA32 free:48636kB min:36200kB low:45248kB high:54296kB active_anon:731260kB inactive_anon:906188kB active_file:1776kB inactive_file:4696kB unevictable:108544kB writepending:12kB present:3129332kB managed:2788128kB mlocked:108848kB kernel_stack:25568kB pagetables:63088kB bounce:0kB free_pcp:952kB local_pcp:216kB free_cma:0kB 02:02:35 executing program 0: mlockall(0x7) clock_getres(0x7, &(0x7f0000000040)) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:35 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) [ 1960.166993] lowmem_reserve[]: 0 0 0 0 0 [ 1960.171028] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1960.267805] lowmem_reserve[]: 0 0 0 0 0 [ 1960.284699] Node 1 Normal free:71048kB min:53696kB low:67120kB high:80544kB active_anon:137068kB inactive_anon:3517940kB active_file:4604kB inactive_file:28kB unevictable:14832kB writepending:12kB present:4194304kB managed:4128256kB mlocked:14836kB kernel_stack:51264kB pagetables:166120kB bounce:0kB free_pcp:1584kB local_pcp:828kB free_cma:0kB [ 1960.421376] lowmem_reserve[]: 0 0 0 0 0 [ 1960.445501] Node 0 DMA: 8*4kB (UE) 12*8kB (UME) 11*16kB (UME) 4*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1960.520903] Node 0 DMA32: 769*4kB (UME) 416*8kB (UME) 116*16kB (UME) 168*32kB (UME) 194*64kB (UME) 36*128kB (UME) 18*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 37316kB [ 1960.543286] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1960.555395] Node 1 Normal: 35*4kB (UM) 457*8kB (UM) 1401*16kB (UE) 865*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53892kB [ 1960.575265] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1960.585141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1960.600261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1960.613153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1960.629814] 15630 total pagecache pages [ 1960.634658] 0 pages in swap cache [ 1960.642829] Swap cache stats: add 0, delete 0, find 0/0 [ 1960.651695] Free swap = 0kB [ 1960.654816] Total swap = 0kB [ 1960.660512] 2097051 pages RAM [ 1960.663717] 0 pages HighMem/MovableOnly [ 1960.670432] 363849 pages reserved [ 1960.674182] 0 pages cma reserved [ 1960.680446] Out of memory (oom_kill_allocating_task): Kill process 16454 (syz-executor.5) score 0 or sacrifice child [ 1960.692711] Killed process 16454 (syz-executor.5) total-vm:93384kB, anon-rss:28352kB, file-rss:41280kB, shmem-rss:0kB [ 1960.714353] oom_reaper: reaped process 16454 (syz-executor.5), now anon-rss:28352kB, file-rss:8512kB, shmem-rss:0kB [ 1961.115626] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1961.185560] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1961.245538] CPU: 0 PID: 16476 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1961.253480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1961.262860] Call Trace: [ 1961.265472] dump_stack+0x1b2/0x281 [ 1961.269122] dump_header+0x178/0x82f [ 1961.272953] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1961.278072] ? ___ratelimit+0x2cd/0x530 [ 1961.282061] oom_kill_process.cold+0x10/0xa40 [ 1961.287293] out_of_memory+0xe3e/0x1190 [ 1961.291277] ? oom_killer_disable+0x1c0/0x1c0 [ 1961.295775] ? mutex_trylock+0x152/0x1a0 [ 1961.299841] __alloc_pages_nodemask+0x23e1/0x2720 [ 1961.304709] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1961.309564] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1961.314327] ? __lock_acquire+0x5fc/0x3f20 [ 1961.318572] alloc_pages_vma+0xd2/0x6d0 [ 1961.322915] __handle_mm_fault+0x25fa/0x4620 [ 1961.327328] ? lock_downgrade+0x740/0x740 [ 1961.331474] ? vm_insert_page+0x7c0/0x7c0 [ 1961.335976] ? do_raw_spin_unlock+0x164/0x220 [ 1961.340502] ? mark_held_locks+0xa6/0xf0 [ 1961.344596] handle_mm_fault+0x455/0x9c0 [ 1961.348667] __get_user_pages+0x4e9/0x1270 [ 1961.353658] ? follow_page_mask+0x18a0/0x18a0 [ 1961.360258] ? lock_acquire+0x170/0x3f0 [ 1961.364303] populate_vma_page_range+0x17b/0x210 [ 1961.369509] __mm_populate+0x195/0x2c0 [ 1961.373418] ? populate_vma_page_range+0x210/0x210 [ 1961.379071] ? security_capable+0x88/0xb0 [ 1961.383227] SyS_mlockall+0x3ff/0x520 [ 1961.387023] ? SyS_munlock+0xf0/0xf0 [ 1961.390739] do_syscall_64+0x1d5/0x640 [ 1961.394646] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1961.399837] RIP: 0033:0x4665f9 [ 1961.403023] RSP: 002b:00007fbf10d10188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1961.410733] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1961.418088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1961.425364] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1961.432738] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 02:02:36 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:36 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3ed7a7c0452992689b179eef512512c4a95829b11d28aa331ea2bc51c5c1f02640d298fa33d6429f9e8c128ba56da20a9f7b272098ecf7ebe94505f02ce0c9c3e71cec969d0100cfa491e02ca7e38f"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:02:36 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x0) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) [ 1961.440128] R13: 00007ffde002285f R14: 00007fbf10d10300 R15: 0000000000022000 [ 1961.668441] Mem-Info: [ 1961.684637] active_anon:217136 inactive_anon:1109782 isolated_anon:0 [ 1961.684637] active_file:266 inactive_file:258 isolated_file:32 [ 1961.684637] unevictable:37703 dirty:3 writeback:0 unstable:0 [ 1961.684637] slab_reclaimable:19775 slab_unreclaimable:140058 [ 1961.684637] mapped:58255 shmem:8979 pagetables:57425 bounce:0 [ 1961.684637] free:25107 free_pcp:63 free_cma:0 [ 1961.721456] Node 0 active_anon:731512kB inactive_anon:912928kB active_file:144kB inactive_file:0kB unevictable:122260kB isolated(anon):0kB isolated(file):0kB mapped:223908kB dirty:4kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1234944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1961.817337] Node 1 active_anon:137032kB inactive_anon:3526200kB active_file:48kB inactive_file:4kB unevictable:28752kB isolated(anon):0kB isolated(file):0kB mapped:7312kB dirty:8kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1961.942497] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1962.065652] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1962.073144] Node 0 DMA32 free:35704kB min:36200kB low:45248kB high:54296kB active_anon:731440kB inactive_anon:908500kB active_file:48kB inactive_file:48kB unevictable:124096kB writepending:0kB present:3129332kB managed:2788128kB mlocked:124096kB kernel_stack:25888kB pagetables:63400kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1962.110624] lowmem_reserve[]: 0 0 0 0 0 [ 1962.115107] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1962.144684] lowmem_reserve[]: 0 0 0 0 0 [ 1962.148874] Node 1 Normal free:53400kB min:53696kB low:67120kB high:80544kB active_anon:137056kB inactive_anon:3526140kB active_file:4kB inactive_file:4kB unevictable:28800kB writepending:0kB present:4194304kB managed:4128256kB mlocked:28800kB kernel_stack:51424kB pagetables:166268kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1962.181423] lowmem_reserve[]: 0 0 0 0 0 [ 1962.185438] Node 0 DMA: 8*4kB (UE) 12*8kB (UME) 11*16kB (UME) 4*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1962.203701] Node 0 DMA32: 541*4kB (UME) 470*8kB (UME) 104*16kB (UME) 146*32kB (UME) 196*64kB (UME) 36*128kB (UME) 18*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36068kB [ 1962.221900] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1962.232710] Node 1 Normal: 382*4kB (UM) 226*8kB (U) 1399*16kB (UE) 865*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53400kB [ 1962.249201] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1962.258289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1962.271726] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1962.281327] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1962.295466] 14111 total pagecache pages [ 1962.299940] 0 pages in swap cache [ 1962.303733] Swap cache stats: add 0, delete 0, find 0/0 [ 1962.312478] Free swap = 0kB [ 1962.315508] Total swap = 0kB [ 1962.318782] 2097051 pages RAM [ 1962.321884] 0 pages HighMem/MovableOnly [ 1962.325851] 363849 pages reserved [ 1962.333769] 0 pages cma reserved [ 1962.337329] Out of memory (oom_kill_allocating_task): Kill process 16476 (syz-executor.0) score 0 or sacrifice child [ 1962.352783] Killed process 16474 (syz-executor.0) total-vm:93384kB, anon-rss:5584kB, file-rss:39240kB, shmem-rss:0kB [ 1962.374180] oom_reaper: reaped process 16474 (syz-executor.0), now anon-rss:5632kB, file-rss:5376kB, shmem-rss:0kB [ 1962.399317] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1962.456287] in:imklog cpuset=/ mems_allowed=0-1 [ 1962.471429] CPU: 1 PID: 15429 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1962.478928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1962.488283] Call Trace: [ 1962.490876] dump_stack+0x1b2/0x281 [ 1962.494507] dump_header+0x178/0x82f [ 1962.498309] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1962.503444] ? ___ratelimit+0x2cd/0x530 [ 1962.507513] oom_kill_process.cold+0x10/0xa40 [ 1962.512019] out_of_memory+0xe3e/0x1190 [ 1962.516872] ? oom_killer_disable+0x1c0/0x1c0 [ 1962.521371] ? mutex_trylock+0x152/0x1a0 [ 1962.525433] __alloc_pages_nodemask+0x23e1/0x2720 [ 1962.530291] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1962.535151] alloc_pages_current+0x155/0x260 [ 1962.539585] filemap_fault+0x11a1/0x1ad0 [ 1962.543742] ext4_filemap_fault+0x84/0xb0 [ 1962.547890] __do_fault+0xfa/0x380 [ 1962.551433] __handle_mm_fault+0x2497/0x4620 [ 1962.555851] ? vm_insert_page+0x7c0/0x7c0 [ 1962.560039] ? lock_downgrade+0x740/0x740 [ 1962.564197] ? mark_held_locks+0xa6/0xf0 [ 1962.568263] handle_mm_fault+0x455/0x9c0 [ 1962.572330] __do_page_fault+0x549/0xad0 [ 1962.576394] ? spurious_fault+0x640/0x640 [ 1962.580542] ? do_page_fault+0x60/0x500 [ 1962.584536] ? page_fault+0x2f/0x50 [ 1962.588162] page_fault+0x45/0x50 [ 1962.591621] RIP: 1fa0:0x1f9f [ 1962.594629] RSP: 0000:000056252feb29d0 EFLAGS: 7f872dd07da0 [ 1962.686214] Mem-Info: [ 1962.694806] active_anon:217129 inactive_anon:1116827 isolated_anon:0 [ 1962.694806] active_file:76 inactive_file:40 isolated_file:0 [ 1962.694806] unevictable:30762 dirty:0 writeback:0 unstable:0 [ 1962.694806] slab_reclaimable:19789 slab_unreclaimable:140111 [ 1962.694806] mapped:56120 shmem:8979 pagetables:57438 bounce:0 [ 1962.694806] free:25129 free_pcp:325 free_cma:0 [ 1962.914881] Node 0 active_anon:731460kB inactive_anon:913068kB active_file:1280kB inactive_file:1236kB unevictable:122348kB isolated(anon):0kB isolated(file):128kB mapped:222936kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1234944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1962.973929] Node 1 active_anon:137056kB inactive_anon:3526140kB active_file:92kB inactive_file:96kB unevictable:27300kB isolated(anon):0kB isolated(file):0kB mapped:7044kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1963.002439] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1963.029851] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1963.035224] Node 0 DMA32 free:37580kB min:36200kB low:45248kB high:54296kB active_anon:731440kB inactive_anon:908688kB active_file:208kB inactive_file:332kB unevictable:123324kB writepending:8kB present:3129332kB managed:2788128kB mlocked:123372kB kernel_stack:25824kB pagetables:63412kB bounce:0kB free_pcp:1232kB local_pcp:588kB free_cma:0kB [ 1963.115619] lowmem_reserve[]: 0 0 0 0 0 [ 1963.158150] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1963.293677] lowmem_reserve[]: 0 0 0 0 0 [ 1963.308567] Node 1 Normal free:53608kB min:53696kB low:67120kB high:80544kB active_anon:137056kB inactive_anon:3526140kB active_file:0kB inactive_file:12kB unevictable:27392kB writepending:0kB present:4194304kB managed:4128256kB mlocked:27392kB kernel_stack:51392kB pagetables:166260kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1963.469484] lowmem_reserve[]: 0 0 0 0 0 [ 1963.473528] Node 0 DMA: 8*4kB (UE) 12*8kB (UME) 11*16kB (UME) 4*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1963.588481] Node 0 DMA32: 529*4kB (UME) 705*8kB (UME) 100*16kB (UE) 106*32kB (UME) 193*64kB (UME) 36*128kB (UME) 18*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36364kB [ 1963.687864] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1963.745843] Node 1 Normal: 212*4kB (UM) 350*8kB (UE) 1400*16kB (UE) 866*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53760kB [ 1963.836666] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1963.845558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1963.935001] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1964.001681] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1964.049762] 13474 total pagecache pages [ 1964.071095] 0 pages in swap cache [ 1964.093851] Swap cache stats: add 0, delete 0, find 0/0 [ 1964.104836] Free swap = 0kB [ 1964.111342] Total swap = 0kB [ 1964.119286] 2097051 pages RAM [ 1964.127982] 0 pages HighMem/MovableOnly [ 1964.139983] 363849 pages reserved 02:02:39 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) [ 1964.150427] 0 pages cma reserved [ 1964.159529] Out of memory (oom_kill_allocating_task): Kill process 15429 (in:imklog) score 0 or sacrifice child [ 1964.192190] Killed process 15408 (rsyslogd) total-vm:254332kB, anon-rss:884kB, file-rss:0kB, shmem-rss:0kB [ 1964.239605] oom_reaper: reaped process 15408 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 02:02:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1965.313393] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1965.391494] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1965.450446] CPU: 1 PID: 7990 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1965.458323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1965.467675] Call Trace: [ 1965.470270] dump_stack+0x1b2/0x281 [ 1965.473899] dump_header+0x178/0x82f [ 1965.477720] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1965.482821] ? ___ratelimit+0x2cd/0x530 [ 1965.486799] oom_kill_process.cold+0x10/0xa40 [ 1965.491300] out_of_memory+0xe3e/0x1190 [ 1965.495285] ? oom_killer_disable+0x1c0/0x1c0 [ 1965.499780] ? mutex_trylock+0x152/0x1a0 [ 1965.503847] __alloc_pages_nodemask+0x23e1/0x2720 [ 1965.508702] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1965.513555] ? do_raw_spin_unlock+0x164/0x220 [ 1965.518064] ? cache_grow_begin+0x3f/0x700 [ 1965.522344] cache_grow_begin+0x91/0x700 [ 1965.526416] fallback_alloc+0x207/0x2c0 [ 1965.530401] kmem_cache_alloc+0x1e5/0x3c0 [ 1965.534640] getname_flags+0xc8/0x550 [ 1965.539150] SyS_mkdirat+0x83/0x270 [ 1965.542783] ? SyS_mknod+0x30/0x30 [ 1965.546341] ? __do_page_fault+0x159/0xad0 [ 1965.550598] ? do_syscall_64+0x4c/0x640 [ 1965.554571] ? SyS_mkdirat+0x270/0x270 [ 1965.558461] do_syscall_64+0x1d5/0x640 [ 1965.562365] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1965.567552] RIP: 0033:0x465707 [ 1965.570735] RSP: 002b:00007ffdd293a0f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 1965.578438] RAX: ffffffffffffffda RBX: 00007ffdd293a190 RCX: 0000000000465707 [ 1965.585788] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffdd293a190 [ 1965.593050] RBP: 00007ffdd293a16c R08: 0000000000000000 R09: 0000000000000006 [ 1965.600317] R10: 00007ffdd2939e94 R11: 0000000000000202 R12: 000000000204a810 [ 1965.607606] R13: 000000000204a86b R14: 0000000000000002 R15: 00007ffdd293a1d0 [ 1965.669924] Mem-Info: [ 1965.675088] active_anon:216959 inactive_anon:1109804 isolated_anon:0 [ 1965.675088] active_file:26 inactive_file:35 isolated_file:12 [ 1965.675088] unevictable:36517 dirty:0 writeback:0 unstable:0 [ 1965.675088] slab_reclaimable:19868 slab_unreclaimable:140320 [ 1965.675088] mapped:56140 shmem:8979 pagetables:57400 bounce:0 [ 1965.675088] free:25846 free_pcp:701 free_cma:0 [ 1965.756491] Node 0 active_anon:730772kB inactive_anon:912980kB active_file:24kB inactive_file:1612kB unevictable:119080kB isolated(anon):0kB isolated(file):48kB mapped:220572kB dirty:24kB writeback:16kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1234944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1965.787953] Node 1 active_anon:137068kB inactive_anon:3526140kB active_file:16kB inactive_file:312kB unevictable:12668kB isolated(anon):0kB isolated(file):0kB mapped:576kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1965.816675] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1965.845068] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1965.859043] Node 0 DMA32 free:36008kB min:36200kB low:45248kB high:54296kB active_anon:730748kB inactive_anon:908480kB active_file:440kB inactive_file:516kB unevictable:125860kB writepending:76kB present:3129332kB managed:2788128kB mlocked:125792kB kernel_stack:25568kB pagetables:63044kB bounce:0kB free_pcp:684kB local_pcp:332kB free_cma:0kB [ 1965.891398] lowmem_reserve[]: 0 0 0 0 0 [ 1965.896433] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1965.923291] lowmem_reserve[]: 0 0 0 0 0 [ 1965.928957] Node 1 Normal free:61156kB min:53696kB low:67120kB high:80544kB active_anon:137060kB inactive_anon:3525792kB active_file:616kB inactive_file:564kB unevictable:16408kB writepending:0kB present:4194304kB managed:4128256kB mlocked:16324kB kernel_stack:51328kB pagetables:166240kB bounce:0kB free_pcp:820kB local_pcp:188kB free_cma:0kB 02:02:40 executing program 0: mlockall(0x7) mlockall(0xf) mlockall(0x3) fork() r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = fork() sched_getattr(r1, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_getattr(r1, 0x0, 0x41, 0x0) [ 1965.960793] lowmem_reserve[]: 0 0 0 0 0 [ 1965.967102] Node 0 DMA: 8*4kB (UE) 12*8kB (UME) 11*16kB (UME) 4*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1965.998924] Node 0 DMA32: 463*4kB (UME) 742*8kB (UME) 105*16kB (UME) 110*32kB (UME) 188*64kB (UME) 35*128kB (UME) 18*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36156kB [ 1966.079338] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1966.091081] Node 1 Normal: 604*4kB (UME) 242*8kB (UME) 1414*16kB (UME) 874*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54944kB [ 1966.125226] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1966.154139] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1966.183785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1966.253890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1966.265662] 12945 total pagecache pages [ 1966.282994] 0 pages in swap cache [ 1966.308904] Swap cache stats: add 0, delete 0, find 0/0 [ 1966.320070] Free swap = 0kB [ 1966.324465] Total swap = 0kB [ 1966.332729] 2097051 pages RAM [ 1966.336610] 0 pages HighMem/MovableOnly [ 1966.341470] 363849 pages reserved [ 1966.346070] 0 pages cma reserved [ 1966.351310] Out of memory (oom_kill_allocating_task): Kill process 7990 (syz-executor.3) score 0 or sacrifice child [ 1966.365270] Killed process 12606 (syz-executor.3) total-vm:93780kB, anon-rss:37028kB, file-rss:35084kB, shmem-rss:0kB [ 1966.612557] oom_reaper: reaped process 12606 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1967.728883] systemd-cgroups invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1967.777766] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 1967.794438] CPU: 0 PID: 16494 Comm: systemd-cgroups Not tainted 4.14.232-syzkaller #0 [ 1967.802921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1967.812276] Call Trace: [ 1967.814878] dump_stack+0x1b2/0x281 [ 1967.818518] dump_header+0x178/0x82f [ 1967.822238] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1967.827441] ? ___ratelimit+0x2cd/0x530 [ 1967.832398] oom_kill_process.cold+0x10/0xa40 [ 1967.837184] out_of_memory+0xe3e/0x1190 [ 1967.841186] ? oom_killer_disable+0x1c0/0x1c0 [ 1967.845703] ? mutex_trylock+0x152/0x1a0 [ 1967.849800] __alloc_pages_nodemask+0x23e1/0x2720 [ 1967.854667] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1967.859534] alloc_pages_current+0x155/0x260 [ 1967.863958] filemap_fault+0x11a1/0x1ad0 [ 1967.868135] ext4_filemap_fault+0x84/0xb0 [ 1967.872334] __do_fault+0xfa/0x380 [ 1967.875972] __handle_mm_fault+0x2497/0x4620 [ 1967.880393] ? vm_insert_page+0x7c0/0x7c0 [ 1967.884544] ? vm_mmap_pgoff+0x168/0x1a0 [ 1967.888645] ? mark_held_locks+0xa6/0xf0 [ 1967.892717] handle_mm_fault+0x455/0x9c0 [ 1967.896943] __do_page_fault+0x549/0xad0 [ 1967.901015] ? spurious_fault+0x640/0x640 [ 1967.905188] ? do_page_fault+0x60/0x500 [ 1967.909298] ? page_fault+0x2f/0x50 [ 1967.912912] page_fault+0x45/0x50 [ 1967.916362] RIP: 0000:0x7fe1e0944040 [ 1967.920176] RSP: e093c000:00007fe1e0520649 EFLAGS: 7fe1e0941000 [ 1967.921068] Mem-Info: [ 1967.970860] active_anon:216918 inactive_anon:1113299 isolated_anon:0 [ 1967.970860] active_file:9 inactive_file:0 isolated_file:0 [ 1967.970860] unevictable:35144 dirty:0 writeback:7 unstable:0 [ 1967.970860] slab_reclaimable:20026 slab_unreclaimable:139772 [ 1967.970860] mapped:58154 shmem:8979 pagetables:57409 bounce:0 [ 1967.970860] free:25120 free_pcp:0 free_cma:0 [ 1968.054011] Node 0 active_anon:730520kB inactive_anon:932448kB active_file:12kB inactive_file:0kB unevictable:110460kB isolated(anon):0kB isolated(file):16kB mapped:227120kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1234944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1968.086642] Node 1 active_anon:137152kB inactive_anon:3520760kB active_file:76kB inactive_file:36kB unevictable:30116kB isolated(anon):0kB isolated(file):0kB mapped:5500kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1968.114919] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1968.146578] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1968.152121] Node 0 DMA32 free:35812kB min:36200kB low:45248kB high:54296kB active_anon:730500kB inactive_anon:927980kB active_file:24kB inactive_file:4kB unevictable:110460kB writepending:8kB present:3129332kB managed:2788128kB mlocked:110460kB kernel_stack:25664kB pagetables:63172kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1968.183096] lowmem_reserve[]: 0 0 0 0 0 [ 1968.187572] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1968.220546] lowmem_reserve[]: 0 0 0 0 0 [ 1968.224546] Node 1 Normal free:53520kB min:53696kB low:67120kB high:80544kB active_anon:137152kB inactive_anon:3520760kB active_file:68kB inactive_file:0kB unevictable:30116kB writepending:4kB present:4194304kB managed:4128256kB mlocked:30116kB kernel_stack:51296kB pagetables:166380kB bounce:0kB free_pcp:264kB local_pcp:0kB free_cma:0kB [ 1968.254997] lowmem_reserve[]: 0 0 0 0 0 [ 1968.259047] Node 0 DMA: 8*4kB (UE) 12*8kB (UME) 11*16kB (UME) 4*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1968.276144] Node 0 DMA32: 358*4kB (UME) 969*8kB (UME) 106*16kB (UE) 108*32kB (UME) 190*64kB (UME) 25*128kB (UE) 16*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35840kB [ 1968.292773] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1968.303542] Node 1 Normal: 578*4kB (UME) 151*8kB (UE) 1391*16kB (UE) 867*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53520kB [ 1968.320683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1968.339060] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1968.350132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1968.361336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1968.372568] 14442 total pagecache pages [ 1968.378788] 0 pages in swap cache [ 1968.382272] Swap cache stats: add 0, delete 0, find 0/0 [ 1968.389922] Free swap = 0kB [ 1968.392959] Total swap = 0kB [ 1968.400690] 2097051 pages RAM [ 1968.403847] 0 pages HighMem/MovableOnly [ 1968.412215] 363849 pages reserved [ 1968.415682] 0 pages cma reserved [ 1968.421193] Out of memory (oom_kill_allocating_task): Kill process 16494 (systemd-cgroups) score 0 or sacrifice child [ 1968.434758] Killed process 16494 (systemd-cgroups) total-vm:26544kB, anon-rss:136kB, file-rss:0kB, shmem-rss:0kB [ 1968.626638] syz-executor.0 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 1968.640642] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1968.645863] CPU: 0 PID: 16506 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1968.653981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1968.663858] Call Trace: [ 1968.666507] dump_stack+0x1b2/0x281 [ 1968.670119] dump_header+0x178/0x82f [ 1968.673812] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1968.678906] ? ___ratelimit+0x2cd/0x530 [ 1968.682881] oom_kill_process.cold+0x10/0xa40 [ 1968.687377] out_of_memory+0xe3e/0x1190 [ 1968.691374] ? oom_killer_disable+0x1c0/0x1c0 [ 1968.695857] ? mutex_trylock+0x152/0x1a0 [ 1968.699908] __alloc_pages_nodemask+0x23e1/0x2720 [ 1968.704743] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1968.709586] ? page_evictable+0x11e/0x1f0 [ 1968.713815] ? lock_downgrade+0x740/0x740 [ 1968.718643] alloc_pages_vma+0xd2/0x6d0 [ 1968.722656] wp_page_copy+0x1f5/0x25c0 [ 1968.726530] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1968.731636] ? __lock_acquire+0x5fc/0x3f20 [ 1968.735973] do_wp_page+0x245/0x1db0 [ 1968.739684] ? __handle_mm_fault+0x129c/0x4620 [ 1968.744263] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1968.748928] __handle_mm_fault+0x234f/0x4620 [ 1968.753521] ? lock_downgrade+0x740/0x740 [ 1968.757652] ? vm_insert_page+0x7c0/0x7c0 [ 1968.761864] ? do_raw_spin_unlock+0x164/0x220 [ 1968.766391] ? mark_held_locks+0xa6/0xf0 [ 1968.770444] handle_mm_fault+0x455/0x9c0 [ 1968.774520] __get_user_pages+0x4e9/0x1270 [ 1968.778743] ? follow_page_mask+0x18a0/0x18a0 [ 1968.783234] ? lock_acquire+0x170/0x3f0 [ 1968.787207] populate_vma_page_range+0x17b/0x210 [ 1968.791942] __mm_populate+0x195/0x2c0 [ 1968.795808] ? populate_vma_page_range+0x210/0x210 [ 1968.800718] ? security_capable+0x88/0xb0 [ 1968.804859] SyS_mlockall+0x3ff/0x520 [ 1968.808727] ? SyS_munlock+0xf0/0xf0 [ 1968.812521] do_syscall_64+0x1d5/0x640 [ 1968.816391] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1968.821577] RIP: 0033:0x4665f9 [ 1968.824749] RSP: 002b:00007fbf10cef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1968.832443] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665f9 [ 1968.839745] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1968.846997] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1968.854260] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1968.861515] R13: 00007ffde002285f R14: 00007fbf10cef300 R15: 0000000000022000 [ 1968.870117] Mem-Info: [ 1968.872645] active_anon:216884 inactive_anon:1113302 isolated_anon:0 [ 1968.872645] active_file:32 inactive_file:20 isolated_file:0 [ 1968.872645] unevictable:35144 dirty:0 writeback:0 unstable:0 [ 1968.872645] slab_reclaimable:20027 slab_unreclaimable:139769 [ 1968.872645] mapped:58155 shmem:8979 pagetables:57394 bounce:0 [ 1968.872645] free:25142 free_pcp:81 free_cma:0 [ 1968.907602] Node 0 active_anon:730440kB inactive_anon:932448kB active_file:88kB inactive_file:0kB unevictable:110460kB isolated(anon):0kB isolated(file):0kB mapped:227120kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1234944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1968.936185] Node 1 active_anon:137096kB inactive_anon:3520760kB active_file:40kB inactive_file:0kB unevictable:30116kB isolated(anon):0kB isolated(file):0kB mapped:5500kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1968.963804] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1968.990558] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1968.995608] Node 0 DMA32 free:35944kB min:36200kB low:45248kB high:54296kB active_anon:730420kB inactive_anon:927980kB active_file:88kB inactive_file:0kB unevictable:110460kB writepending:0kB present:3129332kB managed:2788128kB mlocked:110460kB kernel_stack:25632kB pagetables:63136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1969.026066] lowmem_reserve[]: 0 0 0 0 0 [ 1969.030711] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1969.056753] lowmem_reserve[]: 0 0 0 0 0 [ 1969.060767] Node 1 Normal free:53604kB min:53696kB low:67120kB high:80544kB active_anon:137096kB inactive_anon:3520760kB active_file:136kB inactive_file:0kB unevictable:30116kB writepending:16kB present:4194304kB managed:4128256kB mlocked:30116kB kernel_stack:51296kB pagetables:166356kB bounce:0kB free_pcp:232kB local_pcp:0kB free_cma:0kB [ 1969.135126] lowmem_reserve[]: 0 0 0 0 0 [ 1969.140542] Node 0 DMA: 8*4kB (UE) 12*8kB (UME) 11*16kB (UME) 4*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1969.159458] Node 0 DMA32: 649*4kB (UME) 1043*8kB (UME) 109*16kB (UME) 116*32kB (UME) 190*64kB (UME) 25*128kB (UE) 16*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 37900kB [ 1969.177679] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1969.191837] Node 1 Normal: 514*4kB (UME) 577*8kB (UME) 1924*16kB (UME) 920*32kB (UME) 12*64kB (ME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 67664kB [ 1969.224506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1969.241862] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1969.251924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1969.262909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1969.273145] 14776 total pagecache pages [ 1969.310636] 0 pages in swap cache [ 1969.326366] Swap cache stats: add 0, delete 0, find 0/0 [ 1969.336859] Free swap = 0kB [ 1969.340788] Total swap = 0kB [ 1969.347602] 2097051 pages RAM [ 1969.353901] 0 pages HighMem/MovableOnly [ 1969.371608] 363849 pages reserved [ 1969.380283] 0 pages cma reserved [ 1969.387387] Out of memory (oom_kill_allocating_task): Kill process 16506 (syz-executor.0) score 0 or sacrifice child [ 1969.400559] Killed process 16506 (syz-executor.0) total-vm:93516kB, anon-rss:36900kB, file-rss:56580kB, shmem-rss:0kB [ 1969.425404] oom_reaper: reaped process 16506 (syz-executor.0), now anon-rss:36900kB, file-rss:21756kB, shmem-rss:0kB 02:02:45 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) mlockall(0x7) mlockall(0x3) fork() 02:02:45 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x0) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:45 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) mlockall(0x6) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000080)=""/37) mlockall(0x0) 02:02:45 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000), 0x81, 0x509801) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x80, 0x7, 0x4, 0x2000, 0x1, {r1, r2/1000+60000}, {0x3, 0x0, 0x6, 0x9, 0x2, 0x4, "28ceddfe"}, 0x40, 0x2, @offset=0x79de, 0x80}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000100)=0x2) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:45 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) [ 1971.186774] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1971.241136] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1971.259354] CPU: 0 PID: 16527 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1971.267265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1971.276639] Call Trace: [ 1971.279274] dump_stack+0x1b2/0x281 [ 1971.282924] dump_header+0x178/0x82f [ 1971.286752] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1971.291881] ? ___ratelimit+0x2cd/0x530 [ 1971.296312] oom_kill_process.cold+0x10/0xa40 [ 1971.300861] out_of_memory+0xe3e/0x1190 [ 1971.305061] ? oom_killer_disable+0x1c0/0x1c0 [ 1971.309563] ? mutex_trylock+0x152/0x1a0 [ 1971.313631] __alloc_pages_nodemask+0x23e1/0x2720 [ 1971.318588] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1971.323437] ? fs_reclaim_release+0xd0/0x110 [ 1971.327885] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1971.332683] ? __lock_acquire+0x5fc/0x3f20 [ 1971.336946] alloc_pages_vma+0xd2/0x6d0 [ 1971.341735] __handle_mm_fault+0x25fa/0x4620 [ 1971.346238] ? lock_downgrade+0x740/0x740 [ 1971.350411] ? vm_insert_page+0x7c0/0x7c0 [ 1971.355171] ? do_raw_spin_unlock+0x164/0x220 [ 1971.359704] ? mark_held_locks+0xa6/0xf0 [ 1971.363785] handle_mm_fault+0x455/0x9c0 [ 1971.367860] __get_user_pages+0x4e9/0x1270 [ 1971.372197] ? follow_page_mask+0x18a0/0x18a0 [ 1971.376796] ? lock_acquire+0x170/0x3f0 [ 1971.380797] populate_vma_page_range+0x17b/0x210 [ 1971.385563] __mm_populate+0x195/0x2c0 [ 1971.389458] ? populate_vma_page_range+0x210/0x210 [ 1971.394390] ? security_capable+0x88/0xb0 [ 1971.398545] SyS_mlockall+0x3ff/0x520 [ 1971.402342] ? SyS_munlock+0xf0/0xf0 [ 1971.406138] do_syscall_64+0x1d5/0x640 [ 1971.410029] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1971.415312] RIP: 0033:0x4665f9 [ 1971.418506] RSP: 002b:00007f6714366188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1971.426353] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1971.434858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1971.442399] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1971.449692] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1971.457750] R13: 00007ffdd2939eaf R14: 00007f6714366300 R15: 0000000000022000 [ 1972.754790] Mem-Info: [ 1972.778613] active_anon:217036 inactive_anon:1107590 isolated_anon:0 [ 1972.778613] active_file:19 inactive_file:0 isolated_file:0 [ 1972.778613] unevictable:39761 dirty:0 writeback:0 unstable:0 [ 1972.778613] slab_reclaimable:20168 slab_unreclaimable:140433 [ 1972.778613] mapped:59212 shmem:8979 pagetables:57462 bounce:0 [ 1972.778613] free:25198 free_pcp:0 free_cma:0 [ 1973.062361] Node 0 active_anon:730644kB inactive_anon:926408kB active_file:100kB inactive_file:16kB unevictable:113384kB isolated(anon):0kB isolated(file):0kB mapped:219116kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1234944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1973.314236] Node 1 active_anon:137500kB inactive_anon:3503952kB active_file:0kB inactive_file:20kB unevictable:45660kB isolated(anon):0kB isolated(file):0kB mapped:17732kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1973.709997] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1973.998000] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1974.004403] Node 0 DMA32 free:36168kB min:36200kB low:45248kB high:54296kB active_anon:730624kB inactive_anon:921940kB active_file:116kB inactive_file:0kB unevictable:113384kB writepending:0kB present:3129332kB managed:2788128kB mlocked:113384kB kernel_stack:25536kB pagetables:62836kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1974.245735] lowmem_reserve[]: 0 0 0 0 0 [ 1974.269833] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1974.301638] lowmem_reserve[]: 0 0 0 0 0 [ 1974.306779] Node 1 Normal free:80624kB min:53696kB low:67120kB high:80544kB active_anon:137728kB inactive_anon:3503916kB active_file:60kB inactive_file:0kB unevictable:17640kB writepending:0kB present:4194304kB managed:4128256kB mlocked:17376kB kernel_stack:51328kB pagetables:166808kB bounce:0kB free_pcp:1108kB local_pcp:448kB free_cma:0kB [ 1974.343367] lowmem_reserve[]: 0 0 0 0 0 [ 1974.355001] Node 0 DMA: 8*4kB (UE) 12*8kB (UME) 11*16kB (UME) 4*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1974.381173] Node 0 DMA32: 1276*4kB (UME) 1372*8kB (UME) 222*16kB (UME) 147*32kB (UME) 201*64kB (UME) 30*128kB (UME) 19*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 47952kB [ 1974.402230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1974.417512] Node 1 Normal: 2426*4kB (UME) 1038*8kB (UME) 1936*16kB (UME) 918*32kB (UME) 33*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 80472kB [ 1974.436080] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1974.447546] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1974.458256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1974.473962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1974.485963] 12509 total pagecache pages [ 1974.492016] 0 pages in swap cache [ 1974.497235] Swap cache stats: add 0, delete 0, find 0/0 [ 1974.513779] Free swap = 0kB [ 1974.521776] Total swap = 0kB [ 1974.528209] 2097051 pages RAM [ 1974.537077] 0 pages HighMem/MovableOnly [ 1974.576206] 363849 pages reserved [ 1974.579707] 0 pages cma reserved [ 1974.583078] Out of memory (oom_kill_allocating_task): Kill process 16527 (syz-executor.3) score 0 or sacrifice child [ 1974.603179] Killed process 16527 (syz-executor.3) total-vm:93252kB, anon-rss:13812kB, file-rss:40196kB, shmem-rss:0kB 02:02:50 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:50 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) mlockall(0x7) mlockall(0x3) fork() 02:02:50 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x2}) mlockall(0x0) 02:02:50 executing program 0: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1008560}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r0}, @GTPA_FLOW={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) mlockall(0x7) mlockall(0x0) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:50 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x0) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) [ 1975.403487] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1975.417336] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1975.496191] CPU: 0 PID: 16538 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1975.504549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1975.514177] Call Trace: [ 1975.516795] dump_stack+0x1b2/0x281 [ 1975.520444] dump_header+0x178/0x82f [ 1975.524283] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1975.529401] ? ___ratelimit+0x2cd/0x530 [ 1975.533396] oom_kill_process.cold+0x10/0xa40 [ 1975.538700] out_of_memory+0xe3e/0x1190 [ 1975.542696] ? oom_killer_disable+0x1c0/0x1c0 [ 1975.547469] ? mutex_trylock+0x152/0x1a0 [ 1975.551821] __alloc_pages_nodemask+0x23e1/0x2720 [ 1975.558602] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1975.563648] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1975.568412] ? __lock_acquire+0x5fc/0x3f20 [ 1975.572659] alloc_pages_vma+0xd2/0x6d0 [ 1975.576738] __handle_mm_fault+0x25fa/0x4620 [ 1975.581246] ? lock_downgrade+0x740/0x740 [ 1975.585770] ? vm_insert_page+0x7c0/0x7c0 [ 1975.590016] ? do_raw_spin_unlock+0x164/0x220 [ 1975.594531] ? mark_held_locks+0xa6/0xf0 [ 1975.600956] handle_mm_fault+0x455/0x9c0 [ 1975.605060] __get_user_pages+0x4e9/0x1270 [ 1975.609317] ? follow_page_mask+0x18a0/0x18a0 [ 1975.613916] ? lock_acquire+0x170/0x3f0 [ 1975.617906] populate_vma_page_range+0x17b/0x210 [ 1975.622684] __mm_populate+0x195/0x2c0 [ 1975.626682] ? populate_vma_page_range+0x210/0x210 [ 1975.640513] ? security_capable+0x88/0xb0 [ 1975.644703] SyS_mlockall+0x3ff/0x520 [ 1975.648667] ? SyS_munlock+0xf0/0xf0 [ 1975.652397] do_syscall_64+0x1d5/0x640 [ 1975.656297] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1975.670730] RIP: 0033:0x4665f9 [ 1975.673923] RSP: 002b:00007f135802f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1975.692168] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1975.699444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1975.706983] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1975.714351] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1975.721626] R13: 00007fff7651e55f R14: 00007f135802f300 R15: 0000000000022000 [ 1976.086729] Mem-Info: [ 1976.099891] active_anon:217160 inactive_anon:1107592 isolated_anon:0 [ 1976.099891] active_file:36 inactive_file:13 isolated_file:0 [ 1976.099891] unevictable:39512 dirty:0 writeback:0 unstable:0 [ 1976.099891] slab_reclaimable:20289 slab_unreclaimable:140423 [ 1976.099891] mapped:58053 shmem:8979 pagetables:57487 bounce:0 [ 1976.099891] free:25026 free_pcp:2 free_cma:0 [ 1976.285215] Node 0 active_anon:730980kB inactive_anon:926404kB active_file:140kB inactive_file:36kB unevictable:112400kB isolated(anon):0kB isolated(file):0kB mapped:217864kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1234944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1976.486813] Node 1 active_anon:137660kB inactive_anon:3503964kB active_file:16kB inactive_file:4kB unevictable:45648kB isolated(anon):0kB isolated(file):0kB mapped:14348kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1976.641281] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1976.802179] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1976.828134] Node 0 DMA32 free:35952kB min:36200kB low:45248kB high:54296kB active_anon:730960kB inactive_anon:921936kB active_file:40kB inactive_file:0kB unevictable:112408kB writepending:0kB present:3129332kB managed:2788128kB mlocked:112408kB kernel_stack:25792kB pagetables:63380kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1977.036020] lowmem_reserve[]: 0 0 0 0 0 [ 1977.062660] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1977.128448] lowmem_reserve[]: 0 0 0 0 0 [ 1977.132539] Node 1 Normal free:53340kB min:53696kB low:67120kB high:80544kB active_anon:137660kB inactive_anon:3504004kB active_file:24kB inactive_file:0kB unevictable:45608kB writepending:0kB present:4194304kB managed:4128256kB mlocked:45608kB kernel_stack:51424kB pagetables:166484kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1977.171303] lowmem_reserve[]: 0 0 0 0 0 [ 1977.175350] Node 0 DMA: 8*4kB (UE) 12*8kB (UME) 11*16kB (UME) 4*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1977.200913] Node 0 DMA32: 3*4kB (UME) 743*8kB (UME) 103*16kB (ME) 133*32kB (UME) 205*64kB (UME) 30*128kB (UME) 19*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35732kB [ 1977.225931] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1977.246158] Node 1 Normal: 783*4kB (UM) 40*8kB (UE) 1392*16kB (UE) 863*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53340kB [ 1977.268942] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1977.282384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1977.295737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1977.309310] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1977.322525] 14325 total pagecache pages [ 1977.331880] 0 pages in swap cache [ 1977.335366] Swap cache stats: add 0, delete 0, find 0/0 [ 1977.345167] Free swap = 0kB [ 1977.352933] Total swap = 0kB [ 1977.355982] 2097051 pages RAM [ 1977.363761] 0 pages HighMem/MovableOnly [ 1977.372904] 363849 pages reserved [ 1977.381097] 0 pages cma reserved [ 1977.384593] Out of memory (oom_kill_allocating_task): Kill process 16538 (syz-executor.5) score 0 or sacrifice child [ 1977.397899] Killed process 16536 (syz-executor.5) total-vm:93252kB, anon-rss:12456kB, file-rss:39220kB, shmem-rss:0kB [ 1977.424513] oom_reaper: reaped process 16536 (syz-executor.5), now anon-rss:12504kB, file-rss:5376kB, shmem-rss:0kB [ 1977.443318] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1977.484909] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1977.490465] CPU: 1 PID: 7973 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1977.497921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1977.507299] Call Trace: [ 1977.509900] dump_stack+0x1b2/0x281 [ 1977.513540] dump_header+0x178/0x82f [ 1977.517288] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1977.522927] ? ___ratelimit+0x2cd/0x530 [ 1977.526964] oom_kill_process.cold+0x10/0xa40 [ 1977.531624] out_of_memory+0xe3e/0x1190 [ 1977.535622] ? oom_killer_disable+0x1c0/0x1c0 [ 1977.540131] ? mutex_trylock+0x152/0x1a0 [ 1977.544203] __alloc_pages_nodemask+0x23e1/0x2720 [ 1977.549210] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1977.554177] alloc_pages_current+0x155/0x260 [ 1977.558601] filemap_fault+0x11a1/0x1ad0 [ 1977.562690] ext4_filemap_fault+0x84/0xb0 [ 1977.566847] __do_fault+0xfa/0x380 [ 1977.570386] __handle_mm_fault+0x2497/0x4620 [ 1977.574787] ? vm_insert_page+0x7c0/0x7c0 [ 1977.578953] ? mark_held_locks+0xa6/0xf0 [ 1977.583099] handle_mm_fault+0x455/0x9c0 [ 1977.587164] __do_page_fault+0x549/0xad0 [ 1977.591226] ? spurious_fault+0x640/0x640 [ 1977.595369] ? do_page_fault+0x60/0x500 [ 1977.599366] ? page_fault+0x2f/0x50 [ 1977.603013] page_fault+0x45/0x50 [ 1977.606455] RIP: acf00:0xc0006d7e60 [ 1977.610085] RSP: 019a:000000c00003bf28 EFLAGS: 00000003 [ 1977.739436] Mem-Info: [ 1977.752538] active_anon:217152 inactive_anon:1107642 isolated_anon:0 [ 1977.752538] active_file:41 inactive_file:24 isolated_file:0 [ 1977.752538] unevictable:37837 dirty:0 writeback:0 unstable:0 [ 1977.752538] slab_reclaimable:20309 slab_unreclaimable:140570 [ 1977.752538] mapped:56206 shmem:8979 pagetables:57431 bounce:0 [ 1977.752538] free:26329 free_pcp:396 free_cma:0 [ 1977.789725] Node 0 active_anon:730948kB inactive_anon:926540kB active_file:36kB inactive_file:132kB unevictable:110896kB isolated(anon):0kB isolated(file):0kB mapped:215144kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1234944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1977.838437] Node 1 active_anon:137644kB inactive_anon:3504040kB active_file:24kB inactive_file:224kB unevictable:41988kB isolated(anon):0kB isolated(file):0kB mapped:9684kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1977.996389] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1978.047685] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1978.054056] Node 0 DMA32 free:36448kB min:36200kB low:45248kB high:54296kB active_anon:730928kB inactive_anon:922080kB active_file:32kB inactive_file:16kB unevictable:113800kB writepending:0kB present:3129332kB managed:2788128kB mlocked:113800kB kernel_stack:25600kB pagetables:63196kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1978.084823] lowmem_reserve[]: 0 0 0 0 0 [ 1978.089081] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1978.117517] lowmem_reserve[]: 0 0 0 0 0 [ 1978.122327] Node 1 Normal free:53892kB min:53696kB low:67120kB high:80544kB active_anon:137644kB inactive_anon:3504056kB active_file:24kB inactive_file:24kB unevictable:44336kB writepending:0kB present:4194304kB managed:4128256kB mlocked:44336kB kernel_stack:51456kB pagetables:166552kB bounce:0kB free_pcp:52kB local_pcp:48kB free_cma:0kB [ 1978.153062] lowmem_reserve[]: 0 0 0 0 0 [ 1978.157185] Node 0 DMA: 8*4kB (UE) 12*8kB (UME) 11*16kB (UME) 4*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1978.188205] Node 0 DMA32: 82*4kB (UME) 898*8kB (UE) 101*16kB (UE) 104*32kB (UME) 204*64kB (UME) 30*128kB (UME) 19*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36264kB [ 1978.246800] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1978.275785] Node 1 Normal: 1605*4kB (UM) 377*8kB (UME) 1675*16kB (UME) 891*32kB (UME) 5*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 65068kB [ 1978.343054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1978.353015] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1978.362956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1978.373116] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1978.383317] 12633 total pagecache pages [ 1978.388298] 0 pages in swap cache [ 1978.406187] Swap cache stats: add 0, delete 0, find 0/0 [ 1978.411812] Free swap = 0kB [ 1978.414929] Total swap = 0kB [ 1978.430065] 2097051 pages RAM [ 1978.433291] 0 pages HighMem/MovableOnly [ 1978.463044] 363849 pages reserved [ 1978.496195] 0 pages cma reserved [ 1978.499596] Out of memory (oom_kill_allocating_task): Kill process 7973 (syz-fuzzer) score 0 or sacrifice child [ 1978.544040] Killed process 15485 (syz-executor.5) total-vm:84924kB, anon-rss:68kB, file-rss:952kB, shmem-rss:0kB 02:02:53 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:53 executing program 0: mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000000)={0x0, 0x1a5}) 02:02:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) mlockall(0x7) mlockall(0x3) fork() 02:02:53 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="b182a4d8c21ab61c59364325d6e4a8be91d5c887704ce69ee036f33f8ac6c94ebd254feb3792440ba54d40196a3e41"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x8, 0x5, 0x80000001, 0x4, 0x1e, 0x5, 0x1f, 0xb20, 0x3], 0x9, 0x800}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @SEG6_ATTR_SECRET={0x4}]}, 0x2c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000040) mlockall(0x3) mlockall(0x0) [ 1978.621411] oom_reaper: reaped process 15485 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 02:02:54 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x0) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:54 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) [ 1979.541799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1979.575713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1979.609281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1979.637008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1979.667987] device bridge_slave_1 left promiscuous mode [ 1979.713545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1979.799478] device bridge_slave_0 left promiscuous mode [ 1979.805401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1979.924515] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1979.986824] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1980.022195] CPU: 1 PID: 7968 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1980.030149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1980.040034] Call Trace: [ 1980.042637] dump_stack+0x1b2/0x281 [ 1980.047252] dump_header+0x178/0x82f [ 1980.051171] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1980.056496] ? ___ratelimit+0x2cd/0x530 [ 1980.060511] oom_kill_process.cold+0x10/0xa40 [ 1980.065047] out_of_memory+0xe3e/0x1190 [ 1980.069040] ? oom_killer_disable+0x1c0/0x1c0 [ 1980.073718] ? mutex_trylock+0x152/0x1a0 [ 1980.077799] __alloc_pages_nodemask+0x23e1/0x2720 [ 1980.082723] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1980.087606] alloc_pages_current+0x155/0x260 [ 1980.092138] filemap_fault+0x11a1/0x1ad0 [ 1980.096791] ext4_filemap_fault+0x84/0xb0 [ 1980.100969] __do_fault+0xfa/0x380 [ 1980.104521] __handle_mm_fault+0x2497/0x4620 [ 1980.108966] ? vm_insert_page+0x7c0/0x7c0 [ 1980.113113] ? free_object+0xe4/0x240 [ 1980.117043] ? mark_held_locks+0xa6/0xf0 [ 1980.121188] handle_mm_fault+0x455/0x9c0 [ 1980.125445] __do_page_fault+0x549/0xad0 [ 1980.129527] ? spurious_fault+0x640/0x640 [ 1980.133693] ? do_page_fault+0x60/0x500 [ 1980.137680] ? page_fault+0x2f/0x50 [ 1980.141325] page_fault+0x45/0x50 [ 1980.144961] RIP: 0000:0x947a7c [ 1980.148794] RSP: 4e20:000000c00003df28 EFLAGS: 0043b6a0 [ 1980.228569] device veth1_macvtap left promiscuous mode [ 1980.268473] device veth0_macvtap left promiscuous mode [ 1980.304224] device veth1_vlan left promiscuous mode [ 1980.335039] device veth0_vlan left promiscuous mode [ 1980.705238] Mem-Info: [ 1980.744472] active_anon:216796 inactive_anon:1114773 isolated_anon:0 [ 1980.744472] active_file:7 inactive_file:0 isolated_file:0 [ 1980.744472] unevictable:41562 dirty:0 writeback:0 unstable:0 [ 1980.744472] slab_reclaimable:20411 slab_unreclaimable:139990 [ 1980.744472] mapped:50923 shmem:8976 pagetables:57514 bounce:0 [ 1980.744472] free:25161 free_pcp:0 free_cma:0 [ 1980.925323] Node 0 active_anon:729672kB inactive_anon:940304kB active_file:20kB inactive_file:0kB unevictable:137204kB isolated(anon):0kB isolated(file):0kB mapped:200864kB dirty:0kB writeback:0kB shmem:27700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1234944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1980.988528] Node 1 active_anon:137512kB inactive_anon:3518788kB active_file:8kB inactive_file:0kB unevictable:29044kB isolated(anon):0kB isolated(file):0kB mapped:2828kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1981.113450] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1981.267918] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1981.290802] Node 0 DMA32 free:35692kB min:36200kB low:45248kB high:54296kB active_anon:729652kB inactive_anon:935836kB active_file:4kB inactive_file:64kB unevictable:137176kB writepending:0kB present:3129332kB managed:2788128kB mlocked:137176kB kernel_stack:25664kB pagetables:63116kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1981.358323] lowmem_reserve[]: 0 0 0 0 0 [ 1981.362653] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1981.459184] lowmem_reserve[]: 0 0 0 0 0 [ 1981.463230] Node 1 Normal free:53656kB min:53696kB low:67120kB high:80544kB active_anon:137512kB inactive_anon:3518788kB active_file:0kB inactive_file:28kB unevictable:29092kB writepending:0kB present:4194304kB managed:4128256kB mlocked:29092kB kernel_stack:51584kB pagetables:166856kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1981.566874] lowmem_reserve[]: 0 0 0 0 0 [ 1981.571007] Node 0 DMA: 9*4kB (UME) 15*8kB (UME) 11*16kB (UME) 3*32kB (UE) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11052kB [ 1981.665023] Node 0 DMA32: 62*4kB (UME) 1170*8kB (UME) 1522*16kB (UE) 72*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36264kB [ 1981.735978] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1981.770536] Node 1 Normal: 990*4kB (UM) 12*8kB (UM) 1368*16kB (UME) 866*32kB (UME) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53784kB [ 1981.816660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1981.839140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1981.876082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1981.907197] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1981.923326] 15924 total pagecache pages [ 1981.927648] 0 pages in swap cache [ 1981.931444] Swap cache stats: add 0, delete 0, find 0/0 [ 1981.960166] Free swap = 0kB [ 1981.970780] Total swap = 0kB [ 1981.990211] 2097051 pages RAM [ 1982.006029] 0 pages HighMem/MovableOnly [ 1982.042979] 363849 pages reserved [ 1982.081431] 0 pages cma reserved [ 1982.084827] Out of memory (oom_kill_allocating_task): Kill process 7968 (syz-fuzzer) score 0 or sacrifice child [ 1982.122835] Killed process 15478 (syz-executor.0) total-vm:84924kB, anon-rss:68kB, file-rss:944kB, shmem-rss:0kB 02:02:57 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x0) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) [ 1982.164751] oom_reaper: reaped process 15478 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 02:02:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) mlockall(0x7) mlockall(0x3) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:57 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) [ 1982.884072] device hsr_slave_1 left promiscuous mode [ 1982.936495] device hsr_slave_0 left promiscuous mode 02:02:58 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x0) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) [ 1982.971429] team0 (unregistering): Port device team_slave_1 removed [ 1983.007056] team0 (unregistering): Port device team_slave_0 removed [ 1983.046517] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1983.063980] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1983.181083] bond0 (unregistering): Released all slaves 02:02:58 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:58 executing program 0: mlockall(0x7) mlockall(0x3) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xd8803, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000040)={'veth1\x00', 0x80000001, 0x7}) fork() r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x3132c0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000180)) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:02:58 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0xf) 02:02:58 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000280)={r0, 0x4}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:02:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) mlockall(0x7) mlockall(0x3) sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1985.048439] IPVS: ftp: loaded support on port[0] = 21 [ 1985.178873] chnl_net:caif_netlink_parms(): no params data found [ 1985.310061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1985.319394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1985.327467] device bridge_slave_0 entered promiscuous mode [ 1985.334432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1985.342247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1985.352384] device bridge_slave_1 entered promiscuous mode [ 1985.376649] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1985.388248] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1985.411455] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1985.418851] team0: Port device team_slave_0 added [ 1985.424611] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1985.434313] team0: Port device team_slave_1 added [ 1985.458333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1985.464995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1985.497007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1985.508196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1985.514444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1985.548037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1985.563572] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1985.571768] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1985.601001] device hsr_slave_0 entered promiscuous mode [ 1985.607346] device hsr_slave_1 entered promiscuous mode [ 1985.615021] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1985.624442] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1985.690159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1985.704174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1985.713088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1985.721428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1985.730858] device bridge_slave_1 left promiscuous mode [ 1985.737624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1985.744911] device bridge_slave_0 left promiscuous mode [ 1985.751236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1985.760536] device veth1_macvtap left promiscuous mode [ 1985.765905] device veth0_macvtap left promiscuous mode [ 1985.772006] device veth1_vlan left promiscuous mode [ 1985.778393] device veth0_vlan left promiscuous mode [ 1985.890707] device hsr_slave_1 left promiscuous mode [ 1985.899899] device hsr_slave_0 left promiscuous mode [ 1985.912442] team0 (unregistering): Port device team_slave_1 removed [ 1985.922571] team0 (unregistering): Port device team_slave_0 removed [ 1985.932409] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1985.942490] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1985.967781] bond0 (unregistering): Released all slaves [ 1986.001081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1986.007487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1986.014076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1986.020610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1986.046961] Bluetooth: hci4 command 0x0409 tx timeout [ 1986.055943] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1986.062297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1986.070701] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1986.080270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1986.088402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1986.095355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1986.106244] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1986.112340] 8021q: adding VLAN 0 to HW filter on device team0 [ 1986.122220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1986.130673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1986.137503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1986.178767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1986.190348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1986.196842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1986.216872] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1986.224674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1986.233832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1986.257485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1986.265140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1986.273919] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1986.280728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1986.288829] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1986.304428] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1986.316061] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1986.323651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1986.332230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1986.347759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1986.432667] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1986.444914] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1986.453346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1986.462919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1986.512126] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1986.519750] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1986.532858] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1986.542825] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1986.555420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1986.564952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1986.579479] device veth0_vlan entered promiscuous mode [ 1986.590248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1986.607723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1986.617217] device veth1_vlan entered promiscuous mode [ 1986.623642] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1986.640426] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1986.654307] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1986.670776] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1986.680826] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1986.693425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1986.701704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1986.710317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1986.721514] device veth0_macvtap entered promiscuous mode [ 1986.733265] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1986.749912] device veth1_macvtap entered promiscuous mode [ 1986.757747] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1986.773307] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1986.784502] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1986.798884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1986.813514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.823842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1986.835415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.845737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1986.855985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.865651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1986.875447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.885524] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1986.892655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1986.900502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1986.908027] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1986.915527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1986.923585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1986.934192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1986.948674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.958629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1986.970761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.980095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1986.989887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.999522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1987.011080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1987.023445] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1987.030756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1987.039903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1987.048548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1987.185746] IPVS: ftp: loaded support on port[0] = 21 [ 1987.408783] chnl_net:caif_netlink_parms(): no params data found [ 1987.531519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1987.544888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1987.553310] device bridge_slave_0 entered promiscuous mode [ 1987.565025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1987.575255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1987.587547] device bridge_slave_1 entered promiscuous mode [ 1987.625111] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1987.639954] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1987.682114] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1987.691434] team0: Port device team_slave_0 added [ 1987.701196] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1987.710186] team0: Port device team_slave_1 added [ 1987.753270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1987.763910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1987.793598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 02:03:03 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:03 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000280)={r0, 0x4}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:03:03 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) mlockall(0x7) mlockall(0x3) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:03:03 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000080)={0x2, 0x25, &(0x7f0000000040)=""/37}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0xb) mlockall(0x0) 02:03:03 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x24}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 1987.812762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1987.819438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1987.886227] Bluetooth: hci5 command 0x0409 tx timeout [ 1987.896288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1987.937125] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1987.981918] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1988.126192] Bluetooth: hci4 command 0x041b tx timeout [ 1988.181332] device hsr_slave_0 entered promiscuous mode [ 1988.214781] device hsr_slave_1 entered promiscuous mode [ 1988.254433] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1988.284381] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1988.821751] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 02:03:04 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000280)={r0, 0x4}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:03:04 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0xf) [ 1989.083149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1989.126532] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1989.167295] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1989.173958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1989.187064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1989.210585] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1989.226226] 8021q: adding VLAN 0 to HW filter on device team0 [ 1989.236904] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1989.267432] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1989.274515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1989.283089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1989.306630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1989.313113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1989.346801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1989.354882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1989.378978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1989.385577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1989.422268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1989.437676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1989.445117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1989.464277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1989.487121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1989.499973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1989.530894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1989.540039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1989.576013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1989.584806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1989.607294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1989.626313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1989.667966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1989.693791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1989.710588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1989.744411] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1989.755391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1989.770604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1989.783973] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1989.800327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1989.839822] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1989.853531] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1989.863809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1989.878124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1989.893223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1989.967074] Bluetooth: hci5 command 0x041b tx timeout [ 1990.169022] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1990.181165] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1990.189478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1990.199696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1990.209837] Bluetooth: hci4 command 0x040f tx timeout [ 1990.280216] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1990.288324] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1990.295342] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1990.314494] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1990.321470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1990.335185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1990.347238] device veth0_vlan entered promiscuous mode [ 1990.357922] device veth1_vlan entered promiscuous mode [ 1990.364055] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1990.371605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1990.379885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1990.388278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1990.398587] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1990.414576] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1990.423814] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1990.432027] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1990.440415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1990.448595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1990.459070] device veth0_macvtap entered promiscuous mode [ 1990.470610] device veth1_macvtap entered promiscuous mode [ 1990.480029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1990.491680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1990.501765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1990.512343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.521895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1990.532485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.542443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1990.552394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.563019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1990.572897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.582301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1990.592561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.604643] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1990.613593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1990.620798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1990.629456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1990.640667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1990.651109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.661082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1990.670975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.680219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1990.690310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.699677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1990.710201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.720450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1990.730851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.742324] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1990.749573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1990.756493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1990.764515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:03:06 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000280)={r1, 0x0, 0x801, 0x4, 0x83, 0x2, 0xfffffffd, 0x7, 0x7, 0x1000, 0x1ff, 0xfffffff8}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0xad20cb6a91668dab, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000080)={0x1}) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:03:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:03:06 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:06 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={0x0, 0x4}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:03:06 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x6, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:06 executing program 0: mlockall(0x7) mlockall(0x3) fork() ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/58) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000200)={0x3, 0xd4, &(0x7f0000000100)="d5733dacfcc16e45c1b4e00b216d7ba1905caba995e9b22444bc8f13471bbd7855371e6695c73e2f3b39a7333246ccdd41afe07f73d51692288bedd2abae3ac69029349eb08927d1e5531e61cd12729affc22677aab52af31c1be13cc57df331ce05061de8722bf24fda16aa04c1824a9a674eeb2d49919f06da819508ae46783120b5ce22bfa786870f42e4f04fac33e0e000dcbaa4368b5c6d0c20a67f2b4c86f4a5e0343e6f699d701cac7363f8c29c3911ee21b321640a23fbe54dd60c0f7937cc4ae06a62c3c11bef2fbc68de0a8a417f2a"}) mlockall(0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x22000, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000240)=""/25) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x56, 0x6, 0x8000, {0x1, 0x44a}, {0x80, 0x2}, @ramp={0xfff, 0x8, {0xfffb, 0x3, 0x7f, 0x9}}}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1992.047206] Bluetooth: hci5 command 0x040f tx timeout [ 1992.286507] Bluetooth: hci4 command 0x0419 tx timeout [ 1992.327569] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1992.344951] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1992.350748] CPU: 1 PID: 17175 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1992.358640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1992.368098] Call Trace: [ 1992.370706] dump_stack+0x1b2/0x281 [ 1992.374349] dump_header+0x178/0x82f [ 1992.378071] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1992.383183] ? ___ratelimit+0x2cd/0x530 [ 1992.387195] oom_kill_process.cold+0x10/0xa40 [ 1992.391735] out_of_memory+0xe3e/0x1190 [ 1992.395729] ? oom_killer_disable+0x1c0/0x1c0 [ 1992.400701] ? mutex_trylock+0x152/0x1a0 [ 1992.404758] __alloc_pages_nodemask+0x23e1/0x2720 [ 1992.409702] ? _raw_spin_unlock_irq+0x24/0x80 [ 1992.414205] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1992.419080] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1992.423869] ? __lock_acquire+0x5fc/0x3f20 [ 1992.428462] alloc_pages_vma+0xd2/0x6d0 [ 1992.432451] __handle_mm_fault+0x25fa/0x4620 [ 1992.436872] ? lock_downgrade+0x740/0x740 [ 1992.441027] ? vm_insert_page+0x7c0/0x7c0 [ 1992.445174] ? do_raw_spin_unlock+0x164/0x220 [ 1992.449663] ? mark_held_locks+0xa6/0xf0 [ 1992.453817] handle_mm_fault+0x455/0x9c0 [ 1992.458010] __get_user_pages+0x4e9/0x1270 [ 1992.462329] ? follow_page_mask+0x18a0/0x18a0 [ 1992.467439] ? lock_acquire+0x170/0x3f0 [ 1992.471437] populate_vma_page_range+0x17b/0x210 [ 1992.476206] __mm_populate+0x195/0x2c0 [ 1992.480089] ? populate_vma_page_range+0x210/0x210 [ 1992.485177] ? security_capable+0x88/0xb0 [ 1992.489405] SyS_mlockall+0x3ff/0x520 [ 1992.493199] ? SyS_munlock+0xf0/0xf0 [ 1992.496926] do_syscall_64+0x1d5/0x640 [ 1992.500817] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1992.506028] RIP: 0033:0x4665f9 [ 1992.509210] RSP: 002b:00007fcbd2a9a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1992.516934] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665f9 [ 1992.524195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1992.531460] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1992.539012] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1992.546285] R13: 00007ffd742a4aef R14: 00007fcbd2a9a300 R15: 0000000000022000 [ 1992.564376] Mem-Info: [ 1992.566913] active_anon:216819 inactive_anon:1092425 isolated_anon:0 [ 1992.566913] active_file:0 inactive_file:9 isolated_file:0 [ 1992.566913] unevictable:53588 dirty:0 writeback:0 unstable:0 [ 1992.566913] slab_reclaimable:19762 slab_unreclaimable:142936 [ 1992.566913] mapped:60271 shmem:8979 pagetables:57103 bounce:0 [ 1992.566913] free:24917 free_pcp:35 free_cma:0 [ 1992.617985] Node 0 active_anon:729736kB inactive_anon:903304kB active_file:0kB inactive_file:32kB unevictable:152684kB isolated(anon):0kB isolated(file):0kB mapped:230740kB dirty:0kB writeback:0kB shmem:27680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1183744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1992.648785] Node 1 active_anon:137540kB inactive_anon:3466396kB active_file:4kB inactive_file:4kB unevictable:61668kB isolated(anon):0kB isolated(file):0kB mapped:10344kB dirty:0kB writeback:0kB shmem:8236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1992.679907] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1992.710529] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1992.715589] Node 0 DMA32 free:35780kB min:36200kB low:45248kB high:54296kB active_anon:729716kB inactive_anon:898836kB active_file:160kB inactive_file:352kB unevictable:152424kB writepending:0kB present:3129332kB managed:2788128kB mlocked:152424kB kernel_stack:25696kB pagetables:63184kB bounce:0kB free_pcp:236kB local_pcp:120kB free_cma:0kB [ 1992.746207] lowmem_reserve[]: 0 0 0 0 0 [ 1992.750741] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1992.777363] lowmem_reserve[]: 0 0 0 0 0 [ 1992.781379] Node 1 Normal free:53004kB min:53696kB low:67120kB high:80544kB active_anon:137540kB inactive_anon:3466396kB active_file:4kB inactive_file:0kB unevictable:61668kB writepending:0kB present:4194304kB managed:4128256kB mlocked:61668kB kernel_stack:51360kB pagetables:165144kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1992.811167] lowmem_reserve[]: 0 0 0 0 0 [ 1992.815208] Node 0 DMA: 9*4kB (UE) 13*8kB (UME) 9*16kB (UME) 5*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11068kB [ 1992.831290] Node 0 DMA32: 698*4kB (UME) 2293*8kB (UMEH) 298*16kB (UMEH) 134*32kB (UME) 45*64kB (UM) 1*128kB (E) 1*256kB (M) 1*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 36016kB [ 1992.848160] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1992.859056] Node 1 Normal: 189*4kB (UME) 35*8kB (UME) 160*16kB (UM) 864*32kB (UME) 14*64kB (M) 109*128kB (UM) 27*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53004kB [ 1992.874699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1992.883656] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1992.892397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1992.901418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1992.910064] 16448 total pagecache pages [ 1992.914060] 0 pages in swap cache [ 1992.917877] Swap cache stats: add 0, delete 0, find 0/0 [ 1992.923245] Free swap = 0kB [ 1992.926541] Total swap = 0kB [ 1992.929561] 2097051 pages RAM [ 1992.932865] 0 pages HighMem/MovableOnly [ 1992.937303] 363849 pages reserved [ 1992.941113] 0 pages cma reserved [ 1992.945071] Out of memory (oom_kill_allocating_task): Kill process 17175 (syz-executor.0) score 0 or sacrifice child [ 1992.956712] Killed process 17171 (syz-executor.0) total-vm:93384kB, anon-rss:15356kB, file-rss:39232kB, shmem-rss:0kB [ 1992.980903] oom_reaper: reaped process 17171 (syz-executor.0), now anon-rss:15604kB, file-rss:5376kB, shmem-rss:0kB 02:03:08 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={0x0, 0x4}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:03:08 executing program 0: mlockall(0x7) mlockall(0x3) fork() r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)=""/117) r1 = fork() r2 = fork() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000180)={0x5, 0x0, {r1}, {r3}, 0x1, 0x7898}) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) r5 = fork() sched_getattr(r5, 0x0, 0x0, 0x0) 02:03:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1994.071430] syz-executor.0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1994.126330] Bluetooth: hci5 command 0x0419 tx timeout [ 1994.202707] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1994.238083] CPU: 0 PID: 17185 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1994.246168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1994.255527] Call Trace: [ 1994.258128] dump_stack+0x1b2/0x281 [ 1994.261767] dump_header+0x178/0x82f [ 1994.265532] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 1994.270638] ? ___ratelimit+0x2cd/0x530 [ 1994.274792] oom_kill_process.cold+0x10/0xa40 [ 1994.279321] out_of_memory+0xe3e/0x1190 [ 1994.283316] ? oom_killer_disable+0x1c0/0x1c0 [ 1994.287822] ? mutex_trylock+0x152/0x1a0 [ 1994.291976] __alloc_pages_nodemask+0x23e1/0x2720 [ 1994.296855] ? futex_wait+0x42f/0x5a0 [ 1994.300672] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1994.305522] ? fs_reclaim_release+0xd0/0x110 [ 1994.309945] ? kmem_cache_alloc_node+0x38b/0x410 [ 1994.314725] copy_process.part.0+0x265/0x71c0 [ 1994.319224] ? do_futex+0x12b/0x1570 [ 1994.322942] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 1994.328155] ? try_to_wake_up+0x706/0x1100 [ 1994.332486] ? futex_exit_release+0x220/0x220 [ 1994.336995] ? __cleanup_sighand+0x40/0x40 [ 1994.341238] ? rwsem_wake+0x1ba/0x280 [ 1994.345046] ? rwsem_optimistic_spin+0x3f0/0x3f0 [ 1994.349809] _do_fork+0x184/0xc80 [ 1994.353273] ? fork_idle+0x270/0x270 [ 1994.357120] ? do_futex+0x1570/0x1570 [ 1994.360945] ? security_capable+0x88/0xb0 [ 1994.365098] ? do_syscall_64+0x4c/0x640 [ 1994.369168] ? kernel_thread+0x40/0x40 [ 1994.373060] do_syscall_64+0x1d5/0x640 [ 1994.376958] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1994.382173] RIP: 0033:0x4665f9 [ 1994.385357] RSP: 002b:00007fcbd2abb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1994.393073] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1994.400352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1994.407625] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1994.414999] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1994.422455] R13: 00007ffd742a4aef R14: 00007fcbd2abb300 R15: 0000000000022000 02:03:10 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0xe6, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:10 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="26c68233caeaf0afd3d5d34cd2bbb6ef4c7d67dcfbfd256a934d2d"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 1994.962977] Mem-Info: [ 1994.965638] active_anon:216873 inactive_anon:1106071 isolated_anon:0 [ 1994.965638] active_file:2505 inactive_file:1220 isolated_file:24 [ 1994.965638] unevictable:25660 dirty:1 writeback:0 unstable:0 [ 1994.965638] slab_reclaimable:19762 slab_unreclaimable:142792 [ 1994.965638] mapped:57289 shmem:8979 pagetables:57128 bounce:0 [ 1994.965638] free:35223 free_pcp:528 free_cma:0 [ 1995.117892] Node 0 active_anon:729764kB inactive_anon:937796kB active_file:3672kB inactive_file:6848kB unevictable:108008kB isolated(anon):0kB isolated(file):128kB mapped:226480kB dirty:24kB writeback:0kB shmem:27680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1185792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1995.232137] Node 1 active_anon:137688kB inactive_anon:3486384kB active_file:60kB inactive_file:84kB unevictable:37328kB isolated(anon):0kB isolated(file):0kB mapped:13096kB dirty:8kB writeback:0kB shmem:8236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1995.320605] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1995.355288] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1995.361006] Node 0 DMA32 free:37928kB min:36200kB low:45248kB high:54296kB active_anon:729744kB inactive_anon:933328kB active_file:500kB inactive_file:340kB unevictable:120356kB writepending:24kB present:3129332kB managed:2788128kB mlocked:120356kB kernel_stack:25536kB pagetables:62852kB bounce:0kB free_pcp:700kB local_pcp:120kB free_cma:0kB [ 1995.412392] lowmem_reserve[]: 0 0 0 0 0 [ 1995.417730] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1995.548377] lowmem_reserve[]: 0 0 0 0 0 [ 1995.562437] Node 1 Normal free:62772kB min:53696kB low:67120kB high:80544kB active_anon:137688kB inactive_anon:3486732kB active_file:620kB inactive_file:620kB unevictable:24632kB writepending:8kB present:4194304kB managed:4128256kB mlocked:25016kB kernel_stack:51456kB pagetables:165412kB bounce:0kB free_pcp:1316kB local_pcp:676kB free_cma:0kB [ 1995.711407] lowmem_reserve[]: 0 0 0 0 0 [ 1995.715513] Node 0 DMA: 9*4kB (UE) 13*8kB (UME) 9*16kB (UME) 5*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11068kB [ 1995.733799] Node 0 DMA32: 607*4kB (UME) 2652*8kB (UME) 416*16kB (UME) 126*32kB (UME) 31*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36316kB [ 1995.749916] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1995.761509] Node 1 Normal: 108*4kB (UME) 74*8kB (UME) 5*16kB (UM) 843*32kB (UME) 81*64kB (M) 109*128kB (UM) 27*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54128kB [ 1995.777723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1995.787851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1995.797491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1995.807782] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1995.842838] 15464 total pagecache pages [ 1995.855200] 0 pages in swap cache [ 1995.865645] Swap cache stats: add 0, delete 0, find 0/0 [ 1995.884277] Free swap = 0kB [ 1995.887991] Total swap = 0kB [ 1995.891015] 2097051 pages RAM [ 1995.894115] 0 pages HighMem/MovableOnly [ 1995.925216] 363849 pages reserved [ 1995.945270] 0 pages cma reserved [ 1995.958212] Out of memory (oom_kill_allocating_task): Kill process 17185 (syz-executor.0) score 0 or sacrifice child [ 1995.990152] Killed process 17183 (syz-executor.0) total-vm:93384kB, anon-rss:24684kB, file-rss:39232kB, shmem-rss:0kB [ 1996.018368] oom_reaper: reaped process 17183 (syz-executor.0), now anon-rss:24700kB, file-rss:5376kB, shmem-rss:0kB [ 1996.260342] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1996.328906] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1996.365113] CPU: 1 PID: 17193 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1996.373930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1996.384734] Call Trace: [ 1996.387355] dump_stack+0x1b2/0x281 [ 1996.390998] dump_header+0x178/0x82f [ 1996.394729] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1996.399842] ? ___ratelimit+0x2cd/0x530 [ 1996.403828] oom_kill_process.cold+0x10/0xa40 [ 1996.408518] out_of_memory+0xe3e/0x1190 [ 1996.412539] ? oom_killer_disable+0x1c0/0x1c0 [ 1996.417053] ? mutex_trylock+0x152/0x1a0 [ 1996.422627] __alloc_pages_nodemask+0x23e1/0x2720 [ 1996.427497] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1996.432363] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1996.437127] ? __lock_acquire+0x5fc/0x3f20 [ 1996.441389] alloc_pages_vma+0xd2/0x6d0 [ 1996.445415] __handle_mm_fault+0x25fa/0x4620 [ 1996.449832] ? lock_downgrade+0x740/0x740 [ 1996.453991] ? vm_insert_page+0x7c0/0x7c0 [ 1996.458149] ? do_raw_spin_unlock+0x164/0x220 [ 1996.462758] ? mark_held_locks+0xa6/0xf0 [ 1996.466841] handle_mm_fault+0x455/0x9c0 [ 1996.470937] __get_user_pages+0x4e9/0x1270 [ 1996.475185] ? follow_page_mask+0x18a0/0x18a0 [ 1996.479688] ? lock_acquire+0x170/0x3f0 [ 1996.483679] populate_vma_page_range+0x17b/0x210 [ 1996.488445] __mm_populate+0x195/0x2c0 [ 1996.492346] ? populate_vma_page_range+0x210/0x210 [ 1996.497285] ? security_capable+0x88/0xb0 [ 1996.501473] SyS_mlockall+0x3ff/0x520 [ 1996.505276] ? SyS_munlock+0xf0/0xf0 [ 1996.508993] do_syscall_64+0x1d5/0x640 [ 1996.512885] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1996.518075] RIP: 0033:0x4665f9 [ 1996.521376] RSP: 002b:00007f0e131bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1996.529177] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1996.536559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1996.543921] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1996.551230] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1996.559380] R13: 00007ffd49ba686f R14: 00007f0e131bd300 R15: 0000000000022000 [ 1996.891582] Mem-Info: [ 1996.894499] active_anon:216868 inactive_anon:1112265 isolated_anon:0 [ 1996.894499] active_file:252 inactive_file:1058 isolated_file:32 [ 1996.894499] unevictable:31074 dirty:0 writeback:0 unstable:0 [ 1996.894499] slab_reclaimable:19762 slab_unreclaimable:142509 [ 1996.894499] mapped:57113 shmem:8979 pagetables:57153 bounce:0 [ 1996.894499] free:26327 free_pcp:417 free_cma:0 02:03:12 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:12 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:12 executing program 0: mlockall(0xc) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000000)=0x3) [ 1997.095571] Node 0 active_anon:729864kB inactive_anon:937908kB active_file:2240kB inactive_file:8424kB unevictable:97728kB isolated(anon):0kB isolated(file):0kB mapped:222572kB dirty:120kB writeback:0kB shmem:27680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1183744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1997.222371] Node 1 active_anon:137680kB inactive_anon:3508096kB active_file:4kB inactive_file:4304kB unevictable:3088kB isolated(anon):0kB isolated(file):0kB mapped:11504kB dirty:0kB writeback:0kB shmem:8236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 02:03:12 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={0x0, 0x4}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:03:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 1997.352050] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1997.475533] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1997.499466] Node 0 DMA32 free:36116kB min:36200kB low:45248kB high:54296kB active_anon:729844kB inactive_anon:933796kB active_file:1648kB inactive_file:1888kB unevictable:118648kB writepending:120kB present:3129332kB managed:2788128kB mlocked:118572kB kernel_stack:25696kB pagetables:63128kB bounce:0kB free_pcp:772kB local_pcp:280kB free_cma:0kB [ 1997.622818] lowmem_reserve[]: 0 0 0 0 0 [ 1997.632820] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1997.791324] lowmem_reserve[]: 0 0 0 0 0 [ 1997.814095] Node 1 Normal free:53408kB min:53696kB low:67120kB high:80544kB active_anon:137756kB inactive_anon:3486484kB active_file:0kB inactive_file:12kB unevictable:35660kB writepending:0kB present:4194304kB managed:4128256kB mlocked:35628kB kernel_stack:51328kB pagetables:165372kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1997.862320] lowmem_reserve[]: 0 0 0 0 0 [ 1997.870113] Node 0 DMA: 9*4kB (UE) 13*8kB (UME) 9*16kB (UME) 5*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11068kB [ 1997.912843] Node 0 DMA32: 518*4kB (UME) 2430*8kB (UME) 486*16kB (UME) 131*32kB (UME) 37*64kB (UME) 2*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36104kB [ 1997.978747] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1998.052777] Node 1 Normal: 85*4kB (UE) 4*8kB (UME) 0*16kB 835*32kB (UME) 89*64kB (M) 109*128kB (UM) 27*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53652kB [ 1998.082557] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1998.093929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1998.112864] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1998.121810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1998.137447] 15474 total pagecache pages [ 1998.141547] 0 pages in swap cache [ 1998.145004] Swap cache stats: add 0, delete 0, find 0/0 [ 1998.154178] Free swap = 0kB [ 1998.159384] Total swap = 0kB [ 1998.162451] 2097051 pages RAM [ 1998.165582] 0 pages HighMem/MovableOnly [ 1998.173881] 363849 pages reserved [ 1998.179526] 0 pages cma reserved [ 1998.182906] Out of memory (oom_kill_allocating_task): Kill process 17193 (syz-executor.5) score 0 or sacrifice child [ 1998.200236] Killed process 17193 (syz-executor.5) total-vm:93252kB, anon-rss:7352kB, file-rss:40196kB, shmem-rss:0kB [ 1998.231709] oom_reaper: reaped process 17193 (syz-executor.5), now anon-rss:7492kB, file-rss:5376kB, shmem-rss:0kB [ 1998.248538] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1998.325710] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1998.350276] CPU: 1 PID: 17207 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1998.358275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1998.367815] Call Trace: [ 1998.370420] dump_stack+0x1b2/0x281 [ 1998.374081] dump_header+0x178/0x82f [ 1998.377820] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1998.383629] ? ___ratelimit+0x2cd/0x530 [ 1998.387647] oom_kill_process.cold+0x10/0xa40 [ 1998.392174] out_of_memory+0xe3e/0x1190 [ 1998.396438] ? oom_killer_disable+0x1c0/0x1c0 [ 1998.400939] ? mutex_trylock+0x152/0x1a0 [ 1998.405005] __alloc_pages_nodemask+0x23e1/0x2720 [ 1998.409882] ? _raw_spin_unlock_irq+0x24/0x80 [ 1998.414409] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1998.419263] ? __lock_acquire+0x5fc/0x3f20 [ 1998.423511] ? preempt_schedule_common+0x45/0xc0 [ 1998.428626] alloc_pages_vma+0xd2/0x6d0 [ 1998.432618] __handle_mm_fault+0x25fa/0x4620 [ 1998.437038] ? lock_downgrade+0x740/0x740 [ 1998.441647] ? vm_insert_page+0x7c0/0x7c0 [ 1998.445800] ? do_raw_spin_unlock+0x164/0x220 [ 1998.450334] ? mark_held_locks+0xa6/0xf0 [ 1998.454404] handle_mm_fault+0x455/0x9c0 [ 1998.458473] __get_user_pages+0x4e9/0x1270 [ 1998.462711] ? follow_page_mask+0x18a0/0x18a0 [ 1998.467301] ? lock_acquire+0x170/0x3f0 [ 1998.471280] populate_vma_page_range+0x17b/0x210 [ 1998.476041] __mm_populate+0x195/0x2c0 [ 1998.479932] ? populate_vma_page_range+0x210/0x210 [ 1998.484864] ? security_capable+0x88/0xb0 [ 1998.489019] SyS_mlockall+0x3ff/0x520 [ 1998.493428] ? SyS_munlock+0xf0/0xf0 [ 1998.497145] do_syscall_64+0x1d5/0x640 [ 1998.501036] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1998.506204] RIP: 0033:0x4665f9 [ 1998.509383] RSP: 002b:00007fb10858f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1998.517166] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1998.524427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1998.531691] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1998.538963] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1998.546501] R13: 00007fff17732d5f R14: 00007fb10858f300 R15: 0000000000022000 [ 1999.098977] Mem-Info: [ 1999.101745] active_anon:216878 inactive_anon:1106074 isolated_anon:0 [ 1999.101745] active_file:30 inactive_file:18 isolated_file:0 [ 1999.101745] unevictable:39958 dirty:0 writeback:0 unstable:0 [ 1999.101745] slab_reclaimable:19754 slab_unreclaimable:142777 [ 1999.101745] mapped:58261 shmem:8979 pagetables:57153 bounce:0 [ 1999.101745] free:25108 free_pcp:0 free_cma:0 [ 1999.181564] Node 0 active_anon:729836kB inactive_anon:937900kB active_file:56kB inactive_file:0kB unevictable:123268kB isolated(anon):0kB isolated(file):0kB mapped:222200kB dirty:0kB writeback:0kB shmem:27680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1185792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1999.371504] Node 1 active_anon:137676kB inactive_anon:3486396kB active_file:20kB inactive_file:0kB unevictable:36564kB isolated(anon):0kB isolated(file):0kB mapped:10844kB dirty:0kB writeback:0kB shmem:8236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1999.399892] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:32kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1999.427434] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1999.432989] Node 0 DMA32 free:36028kB min:36200kB low:45248kB high:54296kB active_anon:729816kB inactive_anon:933432kB active_file:120kB inactive_file:40kB unevictable:123240kB writepending:0kB present:3129332kB managed:2788128kB mlocked:123240kB kernel_stack:25728kB pagetables:63172kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1999.463757] lowmem_reserve[]: 0 0 0 0 0 [ 1999.468246] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1999.609056] lowmem_reserve[]: 0 0 0 0 0 [ 1999.639808] Node 1 Normal free:53400kB min:53696kB low:67120kB high:80544kB active_anon:137676kB inactive_anon:3486396kB active_file:60kB inactive_file:0kB unevictable:36564kB writepending:0kB present:4194304kB managed:4128256kB mlocked:36564kB kernel_stack:51296kB pagetables:165356kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1999.813803] lowmem_reserve[]: 0 0 0 0 0 [ 1999.819363] Node 0 DMA: 11*4kB (UME) 13*8kB (UME) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11076kB [ 1999.850632] Node 0 DMA32: 572*4kB (UME) 2491*8kB (UME) 498*16kB (UME) 123*32kB (UME) 29*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35976kB [ 1999.872224] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1999.894432] Node 1 Normal: 88*4kB (UME) 3*8kB (UME) 2*16kB (UM) 826*32kB (UME) 89*64kB (M) 109*128kB (UM) 27*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53400kB [ 1999.920141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1999.934681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1999.954676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1999.965017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1999.984780] 14454 total pagecache pages [ 1999.990319] 0 pages in swap cache [ 1999.993804] Swap cache stats: add 0, delete 0, find 0/0 [ 2000.009815] Free swap = 0kB [ 2000.012855] Total swap = 0kB [ 2000.015889] 2097051 pages RAM [ 2000.021795] 0 pages HighMem/MovableOnly [ 2000.025766] 363849 pages reserved [ 2000.054043] 0 pages cma reserved [ 2000.072291] Out of memory (oom_kill_allocating_task): Kill process 17207 (syz-executor.1) score 0 or sacrifice child [ 2000.135333] Killed process 17206 (syz-executor.1) total-vm:93252kB, anon-rss:192kB, file-rss:36928kB, shmem-rss:0kB [ 2000.171806] oom_reaper: reaped process 17206 (syz-executor.1), now anon-rss:288kB, file-rss:5384kB, shmem-rss:0kB 02:03:15 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x4080) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) mlockall(0x3) mlockall(0x0) 02:03:15 executing program 0: mlockall(0x7) mlockall(0x3) fork() mlockall(0x3) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:03:15 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:16 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:03:16 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:16 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) [ 2001.533062] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 2001.562946] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2001.568816] CPU: 0 PID: 17212 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 2001.576693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2001.586046] Call Trace: [ 2001.588625] dump_stack+0x1b2/0x281 [ 2001.592257] dump_header+0x178/0x82f [ 2001.596046] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2001.601574] ? ___ratelimit+0x2cd/0x530 [ 2001.605553] oom_kill_process.cold+0x10/0xa40 [ 2001.610320] out_of_memory+0xe3e/0x1190 [ 2001.614324] ? oom_killer_disable+0x1c0/0x1c0 [ 2001.618818] ? mutex_trylock+0x152/0x1a0 [ 2001.622884] __alloc_pages_nodemask+0x23e1/0x2720 [ 2001.627721] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2001.632561] alloc_pages_current+0x155/0x260 [ 2001.637067] filemap_fault+0x11a1/0x1ad0 [ 2001.641125] ext4_filemap_fault+0x84/0xb0 [ 2001.645365] __do_fault+0xfa/0x380 [ 2001.648894] __handle_mm_fault+0x2497/0x4620 [ 2001.653301] ? lock_downgrade+0x740/0x740 [ 2001.657460] ? vm_insert_page+0x7c0/0x7c0 [ 2001.661593] ? do_raw_spin_unlock+0x164/0x220 [ 2001.666084] ? mark_held_locks+0xa6/0xf0 [ 2001.670139] handle_mm_fault+0x455/0x9c0 [ 2001.674229] __get_user_pages+0x4e9/0x1270 [ 2001.678593] ? follow_page_mask+0x18a0/0x18a0 [ 2001.683220] ? lock_acquire+0x170/0x3f0 [ 2001.687325] populate_vma_page_range+0x17b/0x210 [ 2001.692085] __mm_populate+0x195/0x2c0 [ 2001.696224] ? populate_vma_page_range+0x210/0x210 [ 2001.701147] ? security_capable+0x88/0xb0 [ 2001.705370] SyS_mlockall+0x3ff/0x520 [ 2001.709162] ? SyS_munlock+0xf0/0xf0 [ 2001.712872] do_syscall_64+0x1d5/0x640 [ 2001.716757] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2001.722064] RIP: 0033:0x4665f9 [ 2001.725246] RSP: 002b:00007f0e131bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2001.733160] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2001.740424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2001.747716] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 2001.755776] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2001.763049] R13: 00007ffd49ba686f R14: 00007f0e131bd300 R15: 0000000000022000 [ 2001.773172] Mem-Info: [ 2001.775650] active_anon:216884 inactive_anon:1113139 isolated_anon:0 [ 2001.775650] active_file:11 inactive_file:11 isolated_file:6 [ 2001.775650] unevictable:32325 dirty:1 writeback:4 unstable:0 [ 2001.775650] slab_reclaimable:19768 slab_unreclaimable:143019 [ 2001.775650] mapped:57627 shmem:8979 pagetables:57215 bounce:0 [ 2001.775650] free:25218 free_pcp:0 free_cma:0 [ 2001.810614] Node 0 active_anon:730024kB inactive_anon:961036kB active_file:8kB inactive_file:112kB unevictable:98584kB isolated(anon):0kB isolated(file):24kB mapped:215524kB dirty:4kB writeback:4kB shmem:27680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1185792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2001.839869] Node 1 active_anon:137512kB inactive_anon:3491520kB active_file:36kB inactive_file:0kB unevictable:30720kB isolated(anon):0kB isolated(file):0kB mapped:14988kB dirty:0kB writeback:12kB shmem:8236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2001.868077] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2001.898143] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2001.903205] Node 0 DMA32 free:35988kB min:36200kB low:45248kB high:54296kB active_anon:730004kB inactive_anon:956380kB active_file:392kB inactive_file:136kB unevictable:98548kB writepending:8kB present:3129332kB managed:2788128kB mlocked:98320kB kernel_stack:25760kB pagetables:63300kB bounce:0kB free_pcp:240kB local_pcp:0kB free_cma:0kB [ 2001.935462] lowmem_reserve[]: 0 0 0 0 0 [ 2001.939534] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2001.966279] lowmem_reserve[]: 0 0 0 0 0 [ 2001.970253] Node 1 Normal free:53576kB min:53696kB low:67120kB high:80544kB active_anon:137512kB inactive_anon:3491460kB active_file:12kB inactive_file:0kB unevictable:30680kB writepending:12kB present:4194304kB managed:4128256kB mlocked:30372kB kernel_stack:51424kB pagetables:165448kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2002.000805] lowmem_reserve[]: 0 0 0 0 0 [ 2002.004895] Node 0 DMA: 3*4kB (UME) 13*8kB (UME) 8*16kB (UME) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11060kB [ 2002.021537] Node 0 DMA32: 567*4kB (UME) 2324*8kB (UME) 547*16kB (UME) 142*32kB (UME) 35*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36396kB [ 2002.036607] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2002.047943] Node 1 Normal: 57*4kB (UME) 1*8kB (E) 27*16kB (UM) 827*32kB (UME) 92*64kB (M) 109*128kB (UM) 27*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53884kB [ 2002.062786] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2002.071717] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2002.080476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2002.089458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2002.098114] 13782 total pagecache pages [ 2002.102090] 0 pages in swap cache [ 2002.105526] Swap cache stats: add 0, delete 0, find 0/0 [ 2002.111286] Free swap = 0kB [ 2002.114309] Total swap = 0kB [ 2002.117370] 2097051 pages RAM [ 2002.120453] 0 pages HighMem/MovableOnly [ 2002.124407] 363849 pages reserved [ 2002.128123] 0 pages cma reserved [ 2002.131514] Out of memory (oom_kill_allocating_task): Kill process 17212 (syz-executor.5) score 0 or sacrifice child [ 2002.142271] Killed process 17210 (syz-executor.5) total-vm:93384kB, anon-rss:28280kB, file-rss:40768kB, shmem-rss:0kB [ 2002.163060] oom_reaper: reaped process 17210 (syz-executor.5), now anon-rss:28344kB, file-rss:5948kB, shmem-rss:0kB [ 2003.981055] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2004.036456] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2004.041444] CPU: 1 PID: 26709 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 2004.049071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2004.058459] Call Trace: [ 2004.061056] dump_stack+0x1b2/0x281 [ 2004.064691] dump_header+0x178/0x82f [ 2004.068425] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2004.073539] ? ___ratelimit+0x2cd/0x530 [ 2004.077561] oom_kill_process.cold+0x10/0xa40 [ 2004.082706] out_of_memory+0xe3e/0x1190 [ 2004.086717] ? oom_killer_disable+0x1c0/0x1c0 [ 2004.091218] ? mutex_trylock+0x152/0x1a0 [ 2004.095291] __alloc_pages_nodemask+0x23e1/0x2720 [ 2004.100178] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2004.105047] alloc_pages_current+0x155/0x260 [ 2004.109466] filemap_fault+0x11a1/0x1ad0 [ 2004.113545] ext4_filemap_fault+0x84/0xb0 [ 2004.117791] __do_fault+0xfa/0x380 [ 2004.121433] __handle_mm_fault+0x2497/0x4620 [ 2004.125872] ? vm_insert_page+0x7c0/0x7c0 [ 2004.130052] ? setup_sigcontext+0x820/0x820 [ 2004.134563] ? mark_held_locks+0xa6/0xf0 [ 2004.139506] handle_mm_fault+0x455/0x9c0 [ 2004.143753] __do_page_fault+0x549/0xad0 [ 2004.147939] ? spurious_fault+0x640/0x640 [ 2004.152099] ? do_page_fault+0x60/0x500 [ 2004.156074] ? page_fault+0x2f/0x50 [ 2004.159709] page_fault+0x45/0x50 [ 2004.163165] RIP: ffffffff:0x947867 [ 2004.166790] RSP: 0e30:000000c000a5f850 EFLAGS: 000733d7 [ 2004.262160] Mem-Info: [ 2004.270651] active_anon:216883 inactive_anon:1113175 isolated_anon:0 [ 2004.270651] active_file:246 inactive_file:511 isolated_file:0 [ 2004.270651] unevictable:28574 dirty:0 writeback:0 unstable:0 [ 2004.270651] slab_reclaimable:19820 slab_unreclaimable:142987 [ 2004.270651] mapped:56061 shmem:8979 pagetables:57163 bounce:0 [ 2004.270651] free:27921 free_pcp:449 free_cma:0 02:03:18 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:19 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c89ee336ea59817ee4b3013bd721ca410c96cd2b9d2aaaee7aa84b200707ec9e0be08521adeafccff153428e32e7931c7998ee1918cc66a9aa94bdc6845a806b33ecb2c5a3697fa77993af0453c38e58d7d8cf1f830ffea54ab141994128318689f0e59c0417a21ec8fbf15595d0c82d5963e362c444b74e7bfd6153b2eff39ab932fb2010f80c9d0858e439ed2e7f008f48f0890432f849bb129d68a47fe471350f1f859bc8acf3fb4dec5fb5f737838b56e0d494da7792ab3f5483d8cfb61bc469b67c4ad0ac13b3d24006a650ff628bed094"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:03:19 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) [ 2004.307856] Node 0 active_anon:730016kB inactive_anon:961248kB active_file:1008kB inactive_file:2168kB unevictable:90408kB isolated(anon):0kB isolated(file):0kB mapped:213400kB dirty:0kB writeback:0kB shmem:27680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1185792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2004.444693] Node 1 active_anon:137516kB inactive_anon:3494152kB active_file:96kB inactive_file:40kB unevictable:15388kB isolated(anon):0kB isolated(file):0kB mapped:10144kB dirty:0kB writeback:0kB shmem:8236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 02:03:19 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 2004.540595] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2004.611155] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2004.632119] Node 0 DMA32 free:36072kB min:36200kB low:45248kB high:54296kB active_anon:729996kB inactive_anon:956844kB active_file:4388kB inactive_file:4724kB unevictable:86880kB writepending:0kB present:3129332kB managed:2788128kB mlocked:87060kB kernel_stack:25568kB pagetables:62944kB bounce:0kB free_pcp:772kB local_pcp:460kB free_cma:0kB [ 2004.802748] lowmem_reserve[]: 0 0 0 0 0 [ 2004.809792] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2004.843962] lowmem_reserve[]: 0 0 0 0 0 [ 2004.849003] Node 1 Normal free:53440kB min:53696kB low:67120kB high:80544kB active_anon:137516kB inactive_anon:3491624kB active_file:64kB inactive_file:416kB unevictable:29596kB writepending:0kB present:4194304kB managed:4128256kB mlocked:29596kB kernel_stack:51264kB pagetables:165520kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2004.900894] lowmem_reserve[]: 0 0 0 0 0 [ 2004.909141] Node 0 DMA: 4*4kB (UME) 11*8kB (UE) 8*16kB (UME) 5*32kB (UME) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11080kB [ 2004.970540] Node 0 DMA32: 626*4kB (UME) 1991*8kB (UME) 652*16kB (UME) 214*32kB (UME) 38*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38272kB [ 2005.014835] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2005.092670] Node 1 Normal: 5*4kB (U) 648*8kB (ME) 203*16kB (UM) 826*32kB (UM) 97*64kB (M) 109*128kB (UM) 27*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 61956kB [ 2005.149223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2005.160993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2005.173592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2005.218278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2005.228577] 13478 total pagecache pages [ 2005.233729] 0 pages in swap cache [ 2005.239323] Swap cache stats: add 0, delete 0, find 0/0 [ 2005.246022] Free swap = 0kB [ 2005.249938] Total swap = 0kB [ 2005.253419] 2097051 pages RAM [ 2005.257121] 0 pages HighMem/MovableOnly [ 2005.261627] 363849 pages reserved [ 2005.265457] 0 pages cma reserved [ 2005.269171] Out of memory (oom_kill_allocating_task): Kill process 26709 (syz-fuzzer) score 0 or sacrifice child [ 2005.280175] Killed process 16587 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:956kB, shmem-rss:0kB [ 2005.314220] oom_reaper: reaped process 16587 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2005.576495] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2005.662881] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2005.692926] CPU: 1 PID: 17243 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 2005.701075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2005.710879] Call Trace: [ 2005.713488] dump_stack+0x1b2/0x281 [ 2005.717365] dump_header+0x178/0x82f [ 2005.721102] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2005.726364] ? ___ratelimit+0x2cd/0x530 [ 2005.730389] oom_kill_process.cold+0x10/0xa40 [ 2005.735288] out_of_memory+0xe3e/0x1190 [ 2005.739863] ? oom_killer_disable+0x1c0/0x1c0 [ 2005.744537] ? mutex_trylock+0x152/0x1a0 [ 2005.748789] __alloc_pages_nodemask+0x23e1/0x2720 [ 2005.753743] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2005.758861] ? finish_task_switch+0x178/0x610 [ 2005.763581] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 2005.768359] ? __lock_acquire+0x5fc/0x3f20 [ 2005.772608] alloc_pages_vma+0xd2/0x6d0 [ 2005.776588] __handle_mm_fault+0x25fa/0x4620 [ 2005.781586] ? lock_downgrade+0x740/0x740 [ 2005.785848] ? vm_insert_page+0x7c0/0x7c0 [ 2005.791017] ? do_raw_spin_unlock+0x164/0x220 [ 2005.796423] ? mark_held_locks+0xa6/0xf0 [ 2005.800488] handle_mm_fault+0x455/0x9c0 [ 2005.804798] __get_user_pages+0x4e9/0x1270 [ 2005.809370] ? follow_page_mask+0x18a0/0x18a0 [ 2005.814447] ? lock_acquire+0x170/0x3f0 [ 2005.818694] populate_vma_page_range+0x17b/0x210 [ 2005.825537] __mm_populate+0x195/0x2c0 [ 2005.829873] ? populate_vma_page_range+0x210/0x210 [ 2005.836501] ? security_capable+0x88/0xb0 [ 2005.842444] SyS_mlockall+0x3ff/0x520 [ 2005.848574] ? SyS_munlock+0xf0/0xf0 [ 2005.853798] do_syscall_64+0x1d5/0x640 [ 2005.859927] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2005.865922] RIP: 0033:0x4665f9 [ 2005.869301] RSP: 002b:00007fb10856e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2005.877760] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665f9 [ 2005.885794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2005.895693] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 2005.905263] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2005.913186] R13: 00007fff17732d5f R14: 00007fb10856e300 R15: 0000000000022000 [ 2005.921579] Mem-Info: [ 2005.924203] active_anon:216847 inactive_anon:1113126 isolated_anon:0 [ 2005.924203] active_file:0 inactive_file:38 isolated_file:0 [ 2005.924203] unevictable:32374 dirty:0 writeback:0 unstable:0 [ 2005.924203] slab_reclaimable:19899 slab_unreclaimable:143282 [ 2005.924203] mapped:57256 shmem:8979 pagetables:57106 bounce:0 [ 2005.924203] free:25149 free_pcp:0 free_cma:0 [ 2005.960347] Node 0 active_anon:729928kB inactive_anon:961052kB active_file:0kB inactive_file:64kB unevictable:99640kB isolated(anon):0kB isolated(file):0kB mapped:220212kB dirty:0kB writeback:0kB shmem:27680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1185792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2005.989188] Node 1 active_anon:137460kB inactive_anon:3491452kB active_file:0kB inactive_file:88kB unevictable:30352kB isolated(anon):0kB isolated(file):0kB mapped:8812kB dirty:0kB writeback:0kB shmem:8236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2006.017274] Node 0 DMA free:11028kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:0kB inactive_file:12kB unevictable:52kB writepending:0kB present:15992kB managed:15908kB mlocked:52kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2006.045110] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2006.050709] Node 0 DMA32 free:35768kB min:36200kB low:45248kB high:54296kB active_anon:729908kB inactive_anon:956584kB active_file:28kB inactive_file:28kB unevictable:99588kB writepending:0kB present:3129332kB managed:2788128kB mlocked:99588kB kernel_stack:25664kB pagetables:62896kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2006.081761] lowmem_reserve[]: 0 0 0 0 0 [ 2006.085870] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2006.112878] lowmem_reserve[]: 0 0 0 0 0 [ 2006.126048] Node 1 Normal free:53300kB min:53696kB low:67120kB high:80544kB active_anon:137460kB inactive_anon:3491452kB active_file:24kB inactive_file:24kB unevictable:30352kB writepending:0kB present:4194304kB managed:4128256kB mlocked:30352kB kernel_stack:51264kB pagetables:165416kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2006.162469] lowmem_reserve[]: 0 0 0 0 0 [ 2006.167114] Node 0 DMA: 3*4kB (UE) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11028kB [ 2006.188303] Node 0 DMA32: 410*4kB (UME) 1986*8kB (UME) 625*16kB (UME) 184*32kB (UME) 37*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35784kB [ 2006.203880] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2006.214977] Node 1 Normal: 59*4kB (UME) 1*8kB (U) 2*16kB (UM) 811*32kB (UME) 97*64kB (M) 109*128kB (UM) 27*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53300kB [ 2006.230193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2006.239126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2006.250256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2006.259353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2006.268033] 13427 total pagecache pages [ 2006.272106] 0 pages in swap cache [ 2006.275552] Swap cache stats: add 0, delete 0, find 0/0 [ 2006.281051] Free swap = 0kB [ 2006.284185] Total swap = 0kB [ 2006.287273] 2097051 pages RAM [ 2006.290388] 0 pages HighMem/MovableOnly [ 2006.294812] 363849 pages reserved [ 2006.298445] 0 pages cma reserved [ 2006.302077] Out of memory (oom_kill_allocating_task): Kill process 17243 (syz-executor.1) score 0 or sacrifice child [ 2006.312972] Killed process 17241 (syz-executor.1) total-vm:93384kB, anon-rss:2388kB, file-rss:39252kB, shmem-rss:0kB [ 2006.331909] oom_reaper: reaped process 17241 (syz-executor.1), now anon-rss:2532kB, file-rss:5384kB, shmem-rss:0kB [ 2006.366518] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2006.388566] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2006.406220] CPU: 1 PID: 17239 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 2006.414222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2006.423583] Call Trace: [ 2006.426195] dump_stack+0x1b2/0x281 [ 2006.429832] dump_header+0x178/0x82f [ 2006.433558] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2006.438675] ? ___ratelimit+0x2cd/0x530 [ 2006.442689] oom_kill_process.cold+0x10/0xa40 [ 2006.448541] out_of_memory+0xe3e/0x1190 [ 2006.452531] ? oom_killer_disable+0x1c0/0x1c0 [ 2006.457222] ? mutex_trylock+0x152/0x1a0 [ 2006.461297] __alloc_pages_nodemask+0x23e1/0x2720 [ 2006.466172] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2006.471288] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 2006.476075] ? __lock_acquire+0x5fc/0x3f20 [ 2006.480316] alloc_pages_vma+0xd2/0x6d0 [ 2006.484298] __handle_mm_fault+0x25fa/0x4620 [ 2006.488721] ? lock_downgrade+0x740/0x740 [ 2006.492876] ? vm_insert_page+0x7c0/0x7c0 [ 2006.497151] ? do_raw_spin_unlock+0x164/0x220 [ 2006.502206] ? mark_held_locks+0xa6/0xf0 [ 2006.507231] handle_mm_fault+0x455/0x9c0 [ 2006.511333] __get_user_pages+0x4e9/0x1270 [ 2006.515573] ? follow_page_mask+0x18a0/0x18a0 [ 2006.520076] ? lock_acquire+0x170/0x3f0 [ 2006.524159] populate_vma_page_range+0x17b/0x210 [ 2006.529112] __mm_populate+0x195/0x2c0 [ 2006.533031] ? populate_vma_page_range+0x210/0x210 [ 2006.537969] ? security_capable+0x88/0xb0 [ 2006.542145] SyS_mlockall+0x3ff/0x520 [ 2006.546082] ? SyS_munlock+0xf0/0xf0 [ 2006.549910] do_syscall_64+0x1d5/0x640 [ 2006.553824] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2006.559606] RIP: 0033:0x4665f9 [ 2006.563253] RSP: 002b:00007fb48474d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2006.571389] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2006.578677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2006.586125] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 2006.593508] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2006.600809] R13: 00007ffe38b31b3f R14: 00007fb48474d300 R15: 0000000000022000 [ 2006.615678] Mem-Info: [ 2006.619359] active_anon:216847 inactive_anon:1113151 isolated_anon:0 [ 2006.619359] active_file:651 inactive_file:463 isolated_file:32 [ 2006.619359] unevictable:30848 dirty:0 writeback:0 unstable:0 [ 2006.619359] slab_reclaimable:19900 slab_unreclaimable:143282 [ 2006.619359] mapped:47581 shmem:8979 pagetables:57106 bounce:0 [ 2006.619359] free:25498 free_pcp:67 free_cma:0 [ 2006.657841] Node 0 active_anon:729928kB inactive_anon:961152kB active_file:384kB inactive_file:1088kB unevictable:97440kB isolated(anon):0kB isolated(file):128kB mapped:183312kB dirty:0kB writeback:0kB shmem:27680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1185792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2006.694278] Node 1 active_anon:137460kB inactive_anon:3496252kB active_file:476kB inactive_file:320kB unevictable:23952kB isolated(anon):0kB isolated(file):124kB mapped:8412kB dirty:0kB writeback:0kB shmem:8236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2006.722814] Node 0 DMA free:11028kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4468kB active_file:16kB inactive_file:0kB unevictable:52kB writepending:0kB present:15992kB managed:15908kB mlocked:52kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2006.752870] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2006.764602] Node 0 DMA32 free:46820kB min:36200kB low:45248kB high:54296kB active_anon:729908kB inactive_anon:961220kB active_file:280kB inactive_file:292kB unevictable:82788kB writepending:0kB present:3129332kB managed:2788128kB mlocked:82916kB kernel_stack:25600kB pagetables:62896kB bounce:0kB free_pcp:920kB local_pcp:232kB free_cma:0kB [ 2006.795908] lowmem_reserve[]: 0 0 0 0 0 02:03:22 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:22 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:03:22 executing program 0: mlockall(0x7) mlockall(0x3) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) mlockall(0x0) [ 2006.800590] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2006.851133] lowmem_reserve[]: 0 0 0 0 0 [ 2006.894816] Node 1 Normal free:63708kB min:53696kB low:67120kB high:80544kB active_anon:137460kB inactive_anon:3491452kB active_file:364kB inactive_file:0kB unevictable:19384kB writepending:0kB present:4194304kB managed:4128256kB mlocked:19824kB kernel_stack:51200kB pagetables:165416kB bounce:0kB free_pcp:672kB local_pcp:0kB free_cma:0kB 02:03:22 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r0, 0x70b, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44845}, 0x48000) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="601a831b89946e213862c608e896c0cd2da87539287ccb4baf102ad3143d9337126a3b0a576978a40af3ac5579fd22bd250a50a8b621095f682f1727347e88b8b2c7be6c1f0dd2ee121265a8429007307a5c5098b7472fe7dadb8c8ad5a88158501e89d154e02b32ccc1967ab0f432261d239f28d1cb50e30d0c5bf786569d4656dae272278655c6e6b20acd880491c1054b"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 2007.185343] lowmem_reserve[]: 0 0 0 0 0 [ 2007.214956] Node 0 DMA: 9*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11052kB [ 2007.325673] Node 0 DMA32: 19*4kB (UME) 1233*8kB (UME) 1334*16kB (UME) 150*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36084kB [ 2007.406058] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2007.466076] Node 1 Normal: 62*4kB (UME) 3*8kB (M) 75*16kB (ME) 779*32kB (UME) 97*64kB (M) 109*128kB (UM) 27*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53472kB [ 2007.466222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2007.466229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2007.466235] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2007.466242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2007.466246] 19080 total pagecache pages [ 2007.466256] 0 pages in swap cache [ 2007.466261] Swap cache stats: add 0, delete 0, find 0/0 [ 2007.466264] Free swap = 0kB [ 2007.466268] Total swap = 0kB [ 2007.466274] 2097051 pages RAM [ 2007.466278] 0 pages HighMem/MovableOnly [ 2007.466281] 363849 pages reserved [ 2007.466285] 0 pages cma reserved [ 2007.466297] Out of memory (oom_kill_allocating_task): Kill process 17239 (syz-executor.4) score 0 or sacrifice child [ 2007.750017] Killed process 17239 (syz-executor.4) total-vm:93252kB, anon-rss:21664kB, file-rss:40196kB, shmem-rss:0kB [ 2007.771033] oom_reaper: reaped process 17239 (syz-executor.4), now anon-rss:21868kB, file-rss:5376kB, shmem-rss:0kB [ 2007.784867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2007.801859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2007.827334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 02:03:23 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:03:23 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) [ 2007.855656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2007.938497] device bridge_slave_1 left promiscuous mode [ 2007.970056] bridge0: port 2(bridge_slave_1) entered disabled state [ 2008.023555] device bridge_slave_0 left promiscuous mode [ 2008.030483] bridge0: port 1(bridge_slave_0) entered disabled state [ 2008.051686] device veth1_macvtap left promiscuous mode [ 2008.057427] device veth0_macvtap left promiscuous mode [ 2008.062777] device veth1_vlan left promiscuous mode [ 2008.123847] device veth0_vlan left promiscuous mode [ 2008.328407] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2008.342132] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2008.347321] CPU: 0 PID: 14894 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 2008.356073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2008.365460] Call Trace: [ 2008.368417] dump_stack+0x1b2/0x281 [ 2008.372746] dump_header+0x178/0x82f [ 2008.376606] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2008.381721] ? ___ratelimit+0x2cd/0x530 [ 2008.385723] oom_kill_process.cold+0x10/0xa40 [ 2008.390243] out_of_memory+0xe3e/0x1190 [ 2008.394627] ? oom_killer_disable+0x1c0/0x1c0 [ 2008.399256] ? mutex_trylock+0x152/0x1a0 [ 2008.403525] __alloc_pages_nodemask+0x23e1/0x2720 [ 2008.408391] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2008.413267] alloc_pages_current+0x155/0x260 [ 2008.417694] filemap_fault+0x11a1/0x1ad0 [ 2008.421776] ext4_filemap_fault+0x84/0xb0 [ 2008.425961] __do_fault+0xfa/0x380 [ 2008.429518] __handle_mm_fault+0x2497/0x4620 [ 2008.433945] ? vm_insert_page+0x7c0/0x7c0 [ 2008.438742] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 2008.443165] ? nanosleep_copyout+0x100/0x100 [ 2008.447762] ? mark_held_locks+0xa6/0xf0 [ 2008.451839] handle_mm_fault+0x455/0x9c0 [ 2008.456003] __do_page_fault+0x549/0xad0 [ 2008.460332] ? spurious_fault+0x640/0x640 [ 2008.465123] ? do_page_fault+0x60/0x500 [ 2008.469138] ? page_fault+0x2f/0x50 [ 2008.473492] page_fault+0x45/0x50 [ 2008.476951] RIP: 1ea39f: (null) [ 2008.481026] RSP: 0090:00007ffe38b31dfc EFLAGS: 00000032 [ 2008.504146] Mem-Info: [ 2008.559526] active_anon:216818 inactive_anon:1120173 isolated_anon:0 [ 2008.559526] active_file:28 inactive_file:0 isolated_file:0 [ 2008.559526] unevictable:33021 dirty:1 writeback:0 unstable:0 [ 2008.559526] slab_reclaimable:20046 slab_unreclaimable:143903 [ 2008.559526] mapped:47892 shmem:8976 pagetables:57195 bounce:0 [ 2008.559526] free:25165 free_pcp:0 free_cma:0 [ 2008.803662] Node 0 active_anon:730096kB inactive_anon:978324kB active_file:132kB inactive_file:0kB unevictable:114452kB isolated(anon):0kB isolated(file):0kB mapped:184028kB dirty:4kB writeback:0kB shmem:27684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1185792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2009.019791] Node 1 active_anon:137176kB inactive_anon:3502368kB active_file:28kB inactive_file:0kB unevictable:17632kB isolated(anon):0kB isolated(file):0kB mapped:7540kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2009.062946] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4496kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2009.104241] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2009.114106] Node 0 DMA32 free:35788kB min:36200kB low:45248kB high:54296kB active_anon:730076kB inactive_anon:973828kB active_file:0kB inactive_file:124kB unevictable:115544kB writepending:4kB present:3129332kB managed:2788128kB mlocked:115544kB kernel_stack:25856kB pagetables:63164kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2009.152007] lowmem_reserve[]: 0 0 0 0 0 [ 2009.158877] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2009.193519] lowmem_reserve[]: 0 0 0 0 0 [ 2009.198061] Node 1 Normal free:53424kB min:53696kB low:67120kB high:80544kB active_anon:137176kB inactive_anon:3502368kB active_file:0kB inactive_file:16kB unevictable:17632kB writepending:0kB present:4194304kB managed:4128256kB mlocked:17632kB kernel_stack:51264kB pagetables:165504kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2009.235213] lowmem_reserve[]: 0 0 0 0 0 [ 2009.239791] Node 0 DMA: 9*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11052kB [ 2009.264516] Node 0 DMA32: 45*4kB (UM) 1029*8kB (UE) 1360*16kB (UME) 179*32kB (UE) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36028kB [ 2009.288314] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2009.306027] Node 1 Normal: 36*4kB (UM) 10*8kB (UME) 123*16kB (UME) 753*32kB (UME) 98*64kB (M) 109*128kB (UM) 27*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53424kB [ 2009.338505] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2009.354924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2009.369398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2009.384819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2009.397312] 12742 total pagecache pages [ 2009.401850] 0 pages in swap cache [ 2009.405785] Swap cache stats: add 0, delete 0, find 0/0 [ 2009.416857] Free swap = 0kB [ 2009.420260] Total swap = 0kB [ 2009.423629] 2097051 pages RAM [ 2009.432944] 0 pages HighMem/MovableOnly [ 2009.440042] 363849 pages reserved [ 2009.443949] 0 pages cma reserved [ 2009.453529] Out of memory (oom_kill_allocating_task): Kill process 14894 (syz-executor.4) score 0 or sacrifice child [ 2009.467990] Killed process 15220 (syz-executor.4) total-vm:93384kB, anon-rss:36772kB, file-rss:35072kB, shmem-rss:0kB [ 2009.632336] oom_reaper: reaped process 15220 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2010.029073] device hsr_slave_1 left promiscuous mode [ 2010.078188] device hsr_slave_0 left promiscuous mode [ 2010.122810] team0 (unregistering): Port device team_slave_1 removed [ 2010.154242] team0 (unregistering): Port device team_slave_0 removed [ 2010.184229] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2010.215644] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2010.368655] bond0 (unregistering): Released all slaves [ 2010.602015] syz-executor.5 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2010.625129] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2010.636000] CPU: 0 PID: 17278 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 2010.644535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2010.654179] Call Trace: [ 2010.656868] dump_stack+0x1b2/0x281 [ 2010.660760] dump_header+0x178/0x82f [ 2010.665093] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2010.670404] ? ___ratelimit+0x2cd/0x530 [ 2010.674393] oom_kill_process.cold+0x10/0xa40 [ 2010.679199] out_of_memory+0xe3e/0x1190 [ 2010.683218] ? oom_killer_disable+0x1c0/0x1c0 [ 2010.688455] ? mutex_trylock+0x152/0x1a0 [ 2010.693251] __alloc_pages_nodemask+0x23e1/0x2720 [ 2010.698406] ? __lock_acquire+0x5fc/0x3f20 [ 2010.703739] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2010.708680] ? fs_reclaim_release+0xd0/0x110 [ 2010.713986] alloc_pages_current+0x155/0x260 [ 2010.718406] __vmalloc_area_node+0x40a/0x680 [ 2010.722832] ? __vmalloc_node_range+0x150/0x150 [ 2010.727512] ? __get_vm_area_node+0x27d/0x340 [ 2010.732479] __vmalloc_node_range+0xbe/0x150 [ 2010.738669] vmalloc_user+0x47/0xa0 [ 2010.742307] ? kcov_mmap+0x2b/0x120 [ 2010.745958] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2010.750995] kcov_mmap+0x2b/0x120 [ 2010.754458] ? kmem_cache_alloc+0x35f/0x3c0 [ 2010.758814] mmap_region+0xa1a/0x1220 [ 2010.762725] do_mmap+0x5b3/0xcb0 [ 2010.766254] vm_mmap_pgoff+0x14e/0x1a0 [ 2010.770209] ? vma_is_stack_for_current+0xb0/0xb0 [ 2010.775051] ? __fget+0x225/0x360 [ 2010.778514] SyS_mmap_pgoff+0x249/0x510 [ 2010.782497] ? find_mergeable_anon_vma+0x230/0x230 [ 2010.787668] ? do_syscall_64+0x4c/0x640 [ 2010.791764] ? align_vdso_addr+0x250/0x250 [ 2010.796005] do_syscall_64+0x1d5/0x640 [ 2010.799910] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2010.805104] RIP: 0033:0x466642 [ 2010.808315] RSP: 002b:00007ffd22e70ad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2010.816636] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000466642 [ 2010.823911] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000000000000 [ 2010.831215] RBP: 0000000000000000 R08: 00000000000000ef R09: 0000000000000000 [ 2010.838493] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000056c528 [ 2010.845793] R13: 000000000056ca68 R14: 0000000000000000 R15: 00000000000000f0 [ 2011.188045] Mem-Info: [ 2011.190529] active_anon:216868 inactive_anon:1118032 isolated_anon:0 [ 2011.190529] active_file:23 inactive_file:68 isolated_file:28 [ 2011.190529] unevictable:32413 dirty:0 writeback:0 unstable:0 [ 2011.190529] slab_reclaimable:20119 slab_unreclaimable:142739 [ 2011.190529] mapped:54228 shmem:8976 pagetables:57152 bounce:0 [ 2011.190529] free:25121 free_pcp:123 free_cma:0 [ 2011.316916] Node 0 active_anon:730296kB inactive_anon:972252kB active_file:196kB inactive_file:632kB unevictable:111840kB isolated(anon):0kB isolated(file):128kB mapped:201904kB dirty:0kB writeback:0kB shmem:27684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1181696kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2011.466178] Node 1 active_anon:137176kB inactive_anon:3503876kB active_file:0kB inactive_file:3440kB unevictable:9712kB isolated(anon):0kB isolated(file):0kB mapped:15008kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 02:03:26 executing program 1: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:03:26 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) [ 2011.631431] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4496kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 02:03:27 executing program 0: mlockall(0x7) mlockall(0x3) r0 = fork() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r2 = fork() sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x7, 0x3, {r0}, {r1}, 0x2, 0xfffffffffffffff8}) r3 = fork() sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_getattr(r3, 0x0, 0x0, 0x0) 02:03:27 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) [ 2011.700132] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2011.707295] Node 0 DMA32 free:69976kB min:36200kB low:45248kB high:54296kB active_anon:732368kB inactive_anon:968328kB active_file:19148kB inactive_file:6000kB unevictable:51860kB writepending:0kB present:3129332kB managed:2788128kB mlocked:51440kB kernel_stack:25504kB pagetables:63152kB bounce:0kB free_pcp:1080kB local_pcp:708kB free_cma:0kB [ 2011.793482] lowmem_reserve[]: 0 0 0 0 0 02:03:27 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) [ 2011.835876] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2011.948530] lowmem_reserve[]: 0 0 0 0 0 [ 2011.961488] Node 1 Normal free:63832kB min:53696kB low:67120kB high:80544kB active_anon:137176kB inactive_anon:3499876kB active_file:1496kB inactive_file:1392kB unevictable:3012kB writepending:0kB present:4194304kB managed:4128256kB mlocked:2984kB kernel_stack:51200kB pagetables:165196kB bounce:0kB free_pcp:1380kB local_pcp:740kB free_cma:0kB [ 2012.114060] lowmem_reserve[]: 0 0 0 0 0 [ 2012.151894] Node 0 DMA: 10*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 2012.272438] Node 0 DMA32: 1*4kB (M) 602*8kB (U) 1415*16kB (UE) 275*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36260kB [ 2012.299723] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2012.316074] Node 1 Normal: 67*4kB (UME) 211*8kB (M) 240*16kB (ME) 643*32kB (UME) 99*64kB (ME) 110*128kB (UME) 26*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53444kB [ 2012.339225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2012.352027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2012.383172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2012.412484] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2012.477671] 14687 total pagecache pages [ 2012.496087] 0 pages in swap cache [ 2012.499640] Swap cache stats: add 0, delete 0, find 0/0 [ 2012.505021] Free swap = 0kB [ 2012.516443] Total swap = 0kB [ 2012.519498] 2097051 pages RAM [ 2012.522782] 0 pages HighMem/MovableOnly [ 2012.599038] 363849 pages reserved [ 2012.604540] 0 pages cma reserved [ 2012.627743] Out of memory (oom_kill_allocating_task): Kill process 17278 (syz-executor.5) score 0 or sacrifice child [ 2012.661108] Killed process 17278 (syz-executor.5) total-vm:64444kB, anon-rss:64kB, file-rss:956kB, shmem-rss:0kB [ 2012.726469] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2012.751667] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2012.762029] CPU: 0 PID: 17285 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 2012.770364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2012.780070] Call Trace: [ 2012.782727] dump_stack+0x1b2/0x281 [ 2012.786457] dump_header+0x178/0x82f [ 2012.790205] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2012.795336] ? ___ratelimit+0x2cd/0x530 [ 2012.799495] oom_kill_process.cold+0x10/0xa40 [ 2012.803991] out_of_memory+0xe3e/0x1190 [ 2012.807984] ? oom_killer_disable+0x1c0/0x1c0 [ 2012.812488] ? mutex_trylock+0x152/0x1a0 [ 2012.816553] __alloc_pages_nodemask+0x23e1/0x2720 [ 2012.821395] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2012.826360] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 2012.831311] ? __lock_acquire+0x5fc/0x3f20 [ 2012.835569] alloc_pages_vma+0xd2/0x6d0 [ 2012.839727] __handle_mm_fault+0x25fa/0x4620 [ 2012.844150] ? lock_downgrade+0x740/0x740 [ 2012.848296] ? vm_insert_page+0x7c0/0x7c0 [ 2012.852582] ? do_raw_spin_unlock+0x164/0x220 [ 2012.857278] ? mark_held_locks+0xa6/0xf0 [ 2012.861338] handle_mm_fault+0x455/0x9c0 [ 2012.865399] __get_user_pages+0x4e9/0x1270 [ 2012.869652] ? follow_page_mask+0x18a0/0x18a0 [ 2012.874179] ? lock_acquire+0x170/0x3f0 [ 2012.878242] populate_vma_page_range+0x17b/0x210 [ 2012.883008] __mm_populate+0x195/0x2c0 [ 2012.886890] ? populate_vma_page_range+0x210/0x210 [ 2012.891815] ? security_capable+0x88/0xb0 [ 2012.895961] SyS_mlockall+0x3ff/0x520 [ 2012.899745] ? SyS_munlock+0xf0/0xf0 [ 2012.903442] do_syscall_64+0x1d5/0x640 [ 2012.907329] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2012.912521] RIP: 0033:0x4665f9 [ 2012.915726] RSP: 002b:00007f6714366188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2012.923463] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2012.931097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2012.940974] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 2012.948241] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2012.956826] R13: 00007ffdd2939eaf R14: 00007f6714366300 R15: 0000000000022000 [ 2012.973906] Mem-Info: [ 2012.976468] active_anon:216874 inactive_anon:1118044 isolated_anon:0 [ 2012.976468] active_file:9 inactive_file:17 isolated_file:0 [ 2012.976468] unevictable:32146 dirty:0 writeback:14 unstable:0 [ 2012.976468] slab_reclaimable:20187 slab_unreclaimable:142799 [ 2012.976468] mapped:53689 shmem:8976 pagetables:57216 bounce:0 [ 2012.976468] free:24951 free_pcp:21 free_cma:0 [ 2013.019419] Node 0 active_anon:730352kB inactive_anon:972300kB active_file:36kB inactive_file:112kB unevictable:111892kB isolated(anon):0kB isolated(file):0kB mapped:201424kB dirty:0kB writeback:56kB shmem:27684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1181696kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2013.056985] Node 1 active_anon:137144kB inactive_anon:3499876kB active_file:0kB inactive_file:60kB unevictable:16692kB isolated(anon):0kB isolated(file):0kB mapped:13332kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2013.098793] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4496kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2013.137262] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2013.142757] Node 0 DMA32 free:36004kB min:36200kB low:45248kB high:54296kB active_anon:730328kB inactive_anon:967804kB active_file:64kB inactive_file:60kB unevictable:111916kB writepending:0kB present:3129332kB managed:2788128kB mlocked:111916kB kernel_stack:25856kB pagetables:63624kB bounce:0kB free_pcp:200kB local_pcp:84kB free_cma:0kB [ 2013.185394] lowmem_reserve[]: 0 0 0 0 0 [ 2013.189948] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2013.232445] lowmem_reserve[]: 0 0 0 0 0 [ 2013.239638] Node 1 Normal free:53444kB min:53696kB low:67120kB high:80544kB active_anon:137144kB inactive_anon:3499876kB active_file:8kB inactive_file:4kB unevictable:16700kB writepending:0kB present:4194304kB managed:4128256kB mlocked:16700kB kernel_stack:51264kB pagetables:165168kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2013.280318] lowmem_reserve[]: 0 0 0 0 0 [ 2013.284591] Node 0 DMA: 10*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 2013.310810] Node 0 DMA32: 1*4kB (U) 494*8kB (UM) 1417*16kB (UE) 281*32kB (UE) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36004kB [ 2013.335655] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2013.357425] Node 1 Normal: 67*4kB (UME) 211*8kB (M) 240*16kB (ME) 643*32kB (UME) 99*64kB (ME) 110*128kB (UME) 26*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53444kB [ 2013.380722] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2013.390521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2013.406581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2013.421837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2013.433475] 14456 total pagecache pages [ 2013.442727] 0 pages in swap cache [ 2013.449078] Swap cache stats: add 0, delete 0, find 0/0 [ 2013.454966] Free swap = 0kB [ 2013.471859] Total swap = 0kB [ 2013.474948] 2097051 pages RAM [ 2013.484273] 0 pages HighMem/MovableOnly [ 2013.493044] 363849 pages reserved [ 2013.503146] 0 pages cma reserved [ 2013.511113] Out of memory (oom_kill_allocating_task): Kill process 17285 (syz-executor.3) score 0 or sacrifice child [ 2013.528017] Killed process 17284 (syz-executor.3) total-vm:93252kB, anon-rss:20772kB, file-rss:39204kB, shmem-rss:0kB [ 2013.550342] oom_reaper: reaped process 17278 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2014.260083] syz-executor.2 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2014.346831] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2014.365329] CPU: 1 PID: 17292 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 2014.374234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2014.384294] Call Trace: [ 2014.386913] dump_stack+0x1b2/0x281 [ 2014.391370] dump_header+0x178/0x82f [ 2014.395727] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2014.401827] ? ___ratelimit+0x2cd/0x530 [ 2014.406900] oom_kill_process.cold+0x10/0xa40 [ 2014.411646] out_of_memory+0xe3e/0x1190 [ 2014.418947] ? oom_killer_disable+0x1c0/0x1c0 [ 2014.423654] ? mutex_trylock+0x152/0x1a0 [ 2014.427740] __alloc_pages_nodemask+0x23e1/0x2720 [ 2014.432638] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2014.437177] ? finish_task_switch+0x178/0x610 [ 2014.441708] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2014.446574] ? mark_held_locks+0xa6/0xf0 [ 2014.450655] ? retint_kernel+0x2d/0x2d [ 2014.454556] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2014.459337] ? retint_kernel+0x2d/0x2d [ 2014.463251] alloc_pages_vma+0xd2/0x6d0 [ 2014.467333] __handle_mm_fault+0x25fa/0x4620 [ 2014.471776] ? lock_downgrade+0x740/0x740 [ 2014.476124] ? vm_insert_page+0x7c0/0x7c0 [ 2014.480643] ? do_raw_spin_unlock+0x164/0x220 [ 2014.485168] ? mark_held_locks+0xa6/0xf0 [ 2014.489248] handle_mm_fault+0x455/0x9c0 [ 2014.493444] __get_user_pages+0x4e9/0x1270 [ 2014.497720] ? follow_page_mask+0x18a0/0x18a0 [ 2014.502258] ? lock_acquire+0x170/0x3f0 [ 2014.506857] populate_vma_page_range+0x17b/0x210 [ 2014.511637] __mm_populate+0x195/0x2c0 [ 2014.516248] ? populate_vma_page_range+0x210/0x210 [ 2014.521197] ? security_capable+0x88/0xb0 [ 2014.525574] SyS_mlockall+0x3ff/0x520 [ 2014.529395] ? SyS_munlock+0xf0/0xf0 [ 2014.533224] do_syscall_64+0x1d5/0x640 [ 2014.537235] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2014.542529] RIP: 0033:0x4665f9 [ 2014.545879] RSP: 002b:00007fe19973b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2014.554036] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665f9 [ 2014.561413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2014.568814] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 2014.576101] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2014.583384] R13: 00007fffd7040a0f R14: 00007fe19973b300 R15: 0000000000022000 [ 2014.618595] Mem-Info: [ 2014.621678] active_anon:216868 inactive_anon:1118050 isolated_anon:0 [ 2014.621678] active_file:39 inactive_file:5 isolated_file:0 [ 2014.621678] unevictable:35988 dirty:0 writeback:0 unstable:0 [ 2014.621678] slab_reclaimable:20214 slab_unreclaimable:142910 [ 2014.621678] mapped:48582 shmem:8976 pagetables:57194 bounce:0 [ 2014.621678] free:25157 free_pcp:0 free_cma:0 [ 2014.666231] Node 0 active_anon:730328kB inactive_anon:972324kB active_file:192kB inactive_file:0kB unevictable:124976kB isolated(anon):0kB isolated(file):0kB mapped:183688kB dirty:0kB writeback:0kB shmem:27684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1181696kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2014.784660] Node 1 active_anon:137144kB inactive_anon:3503376kB active_file:0kB inactive_file:44kB unevictable:14776kB isolated(anon):0kB isolated(file):0kB mapped:10640kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2014.816049] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4496kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2014.848417] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2014.853596] Node 0 DMA32 free:52468kB min:36200kB low:45248kB high:54296kB active_anon:730308kB inactive_anon:975488kB active_file:488kB inactive_file:1300kB unevictable:97836kB writepending:0kB present:3129332kB managed:2788128kB mlocked:97632kB kernel_stack:25696kB pagetables:63352kB bounce:0kB free_pcp:1300kB local_pcp:676kB free_cma:0kB [ 2014.909999] lowmem_reserve[]: 0 0 0 0 0 [ 2014.919873] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2014.949096] lowmem_reserve[]: 0 0 0 0 0 [ 2014.953162] Node 1 Normal free:61924kB min:53696kB low:67120kB high:80544kB active_anon:137144kB inactive_anon:3503776kB active_file:1676kB inactive_file:844kB unevictable:2676kB writepending:0kB present:4194304kB managed:4128256kB mlocked:2668kB kernel_stack:51200kB pagetables:165164kB bounce:0kB free_pcp:624kB local_pcp:4kB free_cma:0kB [ 2014.986901] lowmem_reserve[]: 0 0 0 0 0 [ 2014.992057] Node 0 DMA: 10*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 2015.012323] Node 0 DMA32: 2125*4kB (UME) 3230*8kB (UME) 1782*16kB (UME) 413*32kB (UME) 32*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 84516kB [ 2015.032672] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2015.049786] Node 1 Normal: 2158*4kB (UME) 695*8kB (UM) 224*16kB (UME) 711*32kB (UME) 99*64kB (ME) 110*128kB (UME) 26*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 67600kB [ 2015.075189] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2015.097996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 02:03:30 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:30 executing program 1: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:03:30 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:03:30 executing program 0: mlockall(0x3) mlockall(0x3) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={0x5, 0x2, 0x7f, 0x7, 0xfffffc00, 0x80000000, 0x7fffffff}) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 2015.114130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2015.125163] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2015.137553] 16245 total pagecache pages [ 2015.141560] 0 pages in swap cache [ 2015.145028] Swap cache stats: add 0, delete 0, find 0/0 [ 2015.153110] Free swap = 0kB [ 2015.158560] Total swap = 0kB [ 2015.162216] 2097051 pages RAM [ 2015.169143] 0 pages HighMem/MovableOnly [ 2015.173143] 363849 pages reserved [ 2015.181517] 0 pages cma reserved [ 2015.184951] Out of memory (oom_kill_allocating_task): Kill process 17292 (syz-executor.2) score 0 or sacrifice child [ 2015.200168] Killed process 17292 (syz-executor.2) total-vm:93384kB, anon-rss:9832kB, file-rss:40200kB, shmem-rss:0kB [ 2015.233987] oom_reaper: reaped process 17292 (syz-executor.2), now anon-rss:9832kB, file-rss:5376kB, shmem-rss:0kB [ 2015.825597] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 2015.846785] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2015.874175] CPU: 0 PID: 17308 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 2015.882531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2015.891988] Call Trace: [ 2015.894585] dump_stack+0x1b2/0x281 [ 2015.898217] dump_header+0x178/0x82f [ 2015.902080] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2015.907202] ? ___ratelimit+0x2cd/0x530 [ 2015.911181] oom_kill_process.cold+0x10/0xa40 [ 2015.915780] out_of_memory+0xe3e/0x1190 [ 2015.919766] ? oom_killer_disable+0x1c0/0x1c0 [ 2015.924265] ? mutex_trylock+0x152/0x1a0 [ 2015.928331] __alloc_pages_nodemask+0x23e1/0x2720 [ 2015.933195] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2015.938062] alloc_pages_current+0x155/0x260 [ 2015.942501] filemap_fault+0x11a1/0x1ad0 [ 2015.946577] ext4_filemap_fault+0x84/0xb0 [ 2015.950937] __do_fault+0xfa/0x380 [ 2015.954665] __handle_mm_fault+0x2497/0x4620 [ 2015.959287] ? lock_downgrade+0x740/0x740 [ 2015.963450] ? vm_insert_page+0x7c0/0x7c0 [ 2015.967657] ? do_raw_spin_unlock+0x164/0x220 [ 2015.972517] ? mark_held_locks+0xa6/0xf0 [ 2015.976592] handle_mm_fault+0x455/0x9c0 [ 2015.980685] __get_user_pages+0x4e9/0x1270 [ 2015.985027] ? follow_page_mask+0x18a0/0x18a0 [ 2015.989541] ? lock_acquire+0x170/0x3f0 [ 2015.993535] populate_vma_page_range+0x17b/0x210 [ 2015.998336] __mm_populate+0x195/0x2c0 [ 2016.002252] ? populate_vma_page_range+0x210/0x210 [ 2016.007192] ? security_capable+0x88/0xb0 [ 2016.011351] SyS_mlockall+0x3ff/0x520 [ 2016.015158] ? SyS_munlock+0xf0/0xf0 [ 2016.018877] do_syscall_64+0x1d5/0x640 [ 2016.022773] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2016.027969] RIP: 0033:0x4665f9 [ 2016.031178] RSP: 002b:00007fcbd2a9a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2016.039413] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665f9 [ 2016.046685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2016.053989] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 2016.061261] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2016.068527] R13: 00007ffd742a4aef R14: 00007fcbd2a9a300 R15: 0000000000022000 [ 2016.101413] Mem-Info: [ 2016.111811] active_anon:216719 inactive_anon:1118030 isolated_anon:0 [ 2016.111811] active_file:24 inactive_file:32 isolated_file:0 [ 2016.111811] unevictable:35945 dirty:0 writeback:0 unstable:0 [ 2016.111811] slab_reclaimable:20319 slab_unreclaimable:143263 [ 2016.111811] mapped:49058 shmem:8975 pagetables:57145 bounce:0 [ 2016.111811] free:25036 free_pcp:14 free_cma:0 [ 2016.259758] Node 0 active_anon:729824kB inactive_anon:972244kB active_file:96kB inactive_file:84kB unevictable:124088kB isolated(anon):0kB isolated(file):0kB mapped:186068kB dirty:0kB writeback:0kB shmem:27680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1179648kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2016.405400] Node 1 active_anon:137052kB inactive_anon:3499876kB active_file:0kB inactive_file:32kB unevictable:19692kB isolated(anon):0kB isolated(file):0kB mapped:10164kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2016.585578] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4496kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2016.746395] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2016.763394] Node 0 DMA32 free:36200kB min:36200kB low:45248kB high:54296kB active_anon:729804kB inactive_anon:967748kB active_file:144kB inactive_file:0kB unevictable:124088kB writepending:0kB present:3129332kB managed:2788128kB mlocked:124088kB kernel_stack:25696kB pagetables:63320kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2016.822068] lowmem_reserve[]: 0 0 0 0 0 [ 2016.843966] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2016.996378] lowmem_reserve[]: 0 0 0 0 0 [ 2017.008755] Node 1 Normal free:52888kB min:53696kB low:67120kB high:80544kB active_anon:137052kB inactive_anon:3499876kB active_file:80kB inactive_file:0kB unevictable:19692kB writepending:0kB present:4194304kB managed:4128256kB mlocked:19692kB kernel_stack:51264kB pagetables:165148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2017.099389] lowmem_reserve[]: 0 0 0 0 0 [ 2017.103685] Node 0 DMA: 10*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 2017.126039] Node 0 DMA32: 1*4kB (U) 393*8kB (U) 1408*16kB (UE) 299*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35244kB [ 2017.153160] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2017.164082] Node 1 Normal: 122*4kB (UME) 6*8kB (UM) 162*16kB (UME) 709*32kB (UME) 99*64kB (ME) 110*128kB (UME) 26*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52888kB [ 2017.184542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2017.194007] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2017.208573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2017.219618] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2017.231229] 13879 total pagecache pages [ 2017.239676] 0 pages in swap cache [ 2017.243179] Swap cache stats: add 0, delete 0, find 0/0 [ 2017.250870] Free swap = 0kB [ 2017.254963] Total swap = 0kB [ 2017.256213] Bluetooth: hci3 command 0x0406 tx timeout [ 2017.261215] 2097051 pages RAM [ 2017.270623] 0 pages HighMem/MovableOnly [ 2017.275076] 363849 pages reserved [ 2017.281241] 0 pages cma reserved [ 2017.284847] Out of memory (oom_kill_allocating_task): Kill process 17308 (syz-executor.0) score 0 or sacrifice child [ 2017.295988] Killed process 17297 (syz-executor.0) total-vm:93384kB, anon-rss:28212kB, file-rss:40316kB, shmem-rss:0kB [ 2017.321233] oom_reaper: reaped process 17297 (syz-executor.0), now anon-rss:28348kB, file-rss:7188kB, shmem-rss:0kB [ 2017.338541] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2017.366172] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2017.371342] CPU: 0 PID: 17307 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 2017.379351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2017.388808] Call Trace: [ 2017.392460] dump_stack+0x1b2/0x281 [ 2017.396099] dump_header+0x178/0x82f [ 2017.399826] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2017.404946] ? ___ratelimit+0x2cd/0x530 [ 2017.410691] oom_kill_process.cold+0x10/0xa40 [ 2017.415333] out_of_memory+0xe3e/0x1190 [ 2017.419326] ? oom_killer_disable+0x1c0/0x1c0 [ 2017.424204] ? mutex_trylock+0x152/0x1a0 [ 2017.428307] __alloc_pages_nodemask+0x23e1/0x2720 [ 2017.433241] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2017.438190] ? fs_reclaim_release+0xd0/0x110 [ 2017.442721] ? __pte_alloc+0x199/0x2c0 [ 2017.449259] ? lock_downgrade+0x740/0x740 [ 2017.453428] alloc_pages_vma+0xd2/0x6d0 [ 2017.457606] __handle_mm_fault+0x25fa/0x4620 [ 2017.462283] ? lock_downgrade+0x740/0x740 [ 2017.467392] ? vm_insert_page+0x7c0/0x7c0 [ 2017.471652] ? do_raw_spin_unlock+0x164/0x220 [ 2017.476169] ? mark_held_locks+0xa6/0xf0 [ 2017.480279] handle_mm_fault+0x455/0x9c0 [ 2017.484486] __get_user_pages+0x4e9/0x1270 [ 2017.488765] ? follow_page_mask+0x18a0/0x18a0 [ 2017.493300] ? lock_acquire+0x170/0x3f0 [ 2017.497398] populate_vma_page_range+0x17b/0x210 [ 2017.502175] __mm_populate+0x195/0x2c0 [ 2017.506118] ? populate_vma_page_range+0x210/0x210 [ 2017.511080] ? security_capable+0x88/0xb0 [ 2017.515253] SyS_mlockall+0x3ff/0x520 [ 2017.519065] ? SyS_munlock+0xf0/0xf0 [ 2017.522795] do_syscall_64+0x1d5/0x640 [ 2017.526794] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2017.532002] RIP: 0033:0x4665f9 [ 2017.535678] RSP: 002b:00007f6714345188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2017.543758] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665f9 [ 2017.551562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2017.559547] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 2017.567671] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2017.575271] R13: 00007ffdd2939eaf R14: 00007f6714345300 R15: 0000000000022000 [ 2017.723746] Mem-Info: [ 2017.728307] active_anon:216719 inactive_anon:1118055 isolated_anon:0 [ 2017.728307] active_file:396 inactive_file:765 isolated_file:0 [ 2017.728307] unevictable:27672 dirty:0 writeback:0 unstable:0 [ 2017.728307] slab_reclaimable:20323 slab_unreclaimable:143232 [ 2017.728307] mapped:47996 shmem:8975 pagetables:57146 bounce:0 [ 2017.728307] free:31682 free_pcp:500 free_cma:0 [ 2017.769403] Node 0 active_anon:729824kB inactive_anon:972344kB active_file:1492kB inactive_file:3212kB unevictable:94696kB isolated(anon):0kB isolated(file):0kB mapped:182348kB dirty:4kB writeback:0kB shmem:27680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1179648kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2017.800080] Node 1 active_anon:137052kB inactive_anon:3499876kB active_file:52kB inactive_file:72kB unevictable:15992kB isolated(anon):0kB isolated(file):0kB mapped:9764kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2017.830222] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4496kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2017.860158] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2017.889251] Node 0 DMA32 free:41272kB min:36200kB low:45248kB high:54296kB active_anon:729804kB inactive_anon:967952kB active_file:948kB inactive_file:4772kB unevictable:112336kB writepending:28kB present:3129332kB managed:2788128kB mlocked:112336kB kernel_stack:25632kB pagetables:63324kB bounce:0kB free_pcp:1228kB local_pcp:860kB free_cma:0kB [ 2017.924649] lowmem_reserve[]: 0 0 0 0 0 [ 2017.931501] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2018.068962] lowmem_reserve[]: 0 0 0 0 0 [ 2018.089502] Node 1 Normal free:53408kB min:53696kB low:67120kB high:80544kB active_anon:137052kB inactive_anon:3499876kB active_file:4kB inactive_file:4kB unevictable:18036kB writepending:0kB present:4194304kB managed:4128256kB mlocked:18036kB kernel_stack:51264kB pagetables:165144kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2018.144750] lowmem_reserve[]: 0 0 0 0 0 [ 2018.149443] Node 0 DMA: 10*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 2018.165714] Node 0 DMA32: 67*4kB (U) 332*8kB (UM) 1449*16kB (UME) 322*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36412kB [ 2018.179918] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2018.191199] Node 1 Normal: 143*4kB (UME) 153*8kB (UM) 158*16kB (ME) 693*32kB (UME) 99*64kB (ME) 110*128kB (UME) 26*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53572kB [ 2018.208741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2018.218619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2018.227679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2018.237056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2018.245768] 13589 total pagecache pages [ 2018.266192] 0 pages in swap cache [ 2018.270064] Swap cache stats: add 0, delete 0, find 0/0 [ 2018.278321] Free swap = 0kB [ 2018.281444] Total swap = 0kB [ 2018.284485] 2097051 pages RAM [ 2018.287670] 0 pages HighMem/MovableOnly [ 2018.291761] 363849 pages reserved [ 2018.295584] 0 pages cma reserved [ 2018.299209] Out of memory (oom_kill_allocating_task): Kill process 17307 (syz-executor.3) score 0 or sacrifice child [ 2018.310079] Killed process 17307 (syz-executor.3) total-vm:93384kB, anon-rss:15860kB, file-rss:40200kB, shmem-rss:0kB [ 2018.332041] oom_reaper: reaped process 17307 (syz-executor.3), now anon-rss:15860kB, file-rss:5376kB, shmem-rss:0kB [ 2020.307459] IPVS: ftp: loaded support on port[0] = 21 [ 2020.479686] chnl_net:caif_netlink_parms(): no params data found [ 2020.704361] bridge0: port 1(bridge_slave_0) entered blocking state [ 2020.711299] bridge0: port 1(bridge_slave_0) entered disabled state [ 2020.720154] device bridge_slave_0 entered promiscuous mode [ 2020.728511] bridge0: port 2(bridge_slave_1) entered blocking state [ 2020.735035] bridge0: port 2(bridge_slave_1) entered disabled state [ 2020.743846] device bridge_slave_1 entered promiscuous mode [ 2020.768677] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2020.778556] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2020.813363] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2020.821045] team0: Port device team_slave_0 added [ 2020.831951] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2020.840047] team0: Port device team_slave_1 added [ 2020.872883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2020.880235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2020.913226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2020.925723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2020.939519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2020.970052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2020.983978] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2020.996976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2021.034808] device hsr_slave_0 entered promiscuous mode [ 2021.040929] device hsr_slave_1 entered promiscuous mode [ 2021.051912] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2021.059994] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2021.194661] bridge0: port 2(bridge_slave_1) entered blocking state [ 2021.201106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2021.207925] bridge0: port 1(bridge_slave_0) entered blocking state [ 2021.214428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2021.271090] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2021.278441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2021.291462] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2021.302487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2021.313938] bridge0: port 1(bridge_slave_0) entered disabled state [ 2021.323057] bridge0: port 2(bridge_slave_1) entered disabled state [ 2021.341183] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2021.350540] 8021q: adding VLAN 0 to HW filter on device team0 [ 2021.362769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2021.374934] bridge0: port 1(bridge_slave_0) entered blocking state [ 2021.381402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2021.412195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2021.421376] bridge0: port 2(bridge_slave_1) entered blocking state [ 2021.427962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2021.440904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2021.462012] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2021.469737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2021.482056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2021.492170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2021.504954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2021.515248] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2021.527049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2021.547522] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2021.565169] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2021.575687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2021.588716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2021.600493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2021.697325] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2021.711862] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2021.720228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2021.733095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2021.784996] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2021.797538] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2021.804409] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2021.819145] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2021.831744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2021.840482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2021.855021] device veth0_vlan entered promiscuous mode [ 2021.863539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2021.875829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2021.888355] device veth1_vlan entered promiscuous mode [ 2021.894347] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2021.913388] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2021.934612] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2021.950038] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2021.960178] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2021.970482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2021.981478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2021.990722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2022.005548] device veth0_macvtap entered promiscuous mode [ 2022.013432] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2022.028667] device veth1_macvtap entered promiscuous mode [ 2022.034988] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2022.051987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2022.067070] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2022.080762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2022.090791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.103882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2022.114125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.128426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2022.140762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.152079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2022.164525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.178443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2022.190191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.203227] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2022.212809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2022.222040] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2022.232011] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2022.242159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2022.252698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2022.265004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2022.280171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.290901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2022.305027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.322799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2022.333411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.347538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2022.360094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.370852] Bluetooth: hci4 command 0x0409 tx timeout [ 2022.383314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2022.393520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.408983] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2022.416033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2022.425989] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2022.439299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2022.964283] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 2022.977628] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2022.982766] CPU: 1 PID: 17560 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 2022.990629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2022.999986] Call Trace: [ 2023.002956] dump_stack+0x1b2/0x281 [ 2023.006575] dump_header+0x178/0x82f [ 2023.010293] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2023.015412] ? ___ratelimit+0x2cd/0x530 [ 2023.019385] oom_kill_process.cold+0x10/0xa40 [ 2023.023895] out_of_memory+0xe3e/0x1190 [ 2023.027872] ? oom_killer_disable+0x1c0/0x1c0 [ 2023.032372] ? mutex_trylock+0x152/0x1a0 [ 2023.036442] __alloc_pages_nodemask+0x23e1/0x2720 [ 2023.041312] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2023.046188] alloc_pages_current+0x155/0x260 [ 2023.051129] filemap_fault+0x11a1/0x1ad0 [ 2023.055220] ext4_filemap_fault+0x84/0xb0 [ 2023.059379] __do_fault+0xfa/0x380 [ 2023.062924] __handle_mm_fault+0x2497/0x4620 [ 2023.068663] ? lock_downgrade+0x740/0x740 [ 2023.072882] ? vm_insert_page+0x7c0/0x7c0 [ 2023.077122] ? do_raw_spin_unlock+0x164/0x220 [ 2023.082629] ? mark_held_locks+0xa6/0xf0 [ 2023.086704] handle_mm_fault+0x455/0x9c0 [ 2023.090919] __get_user_pages+0x4e9/0x1270 [ 2023.095193] ? follow_page_mask+0x18a0/0x18a0 [ 2023.099722] ? lock_acquire+0x170/0x3f0 [ 2023.103688] populate_vma_page_range+0x17b/0x210 [ 2023.108431] __mm_populate+0x195/0x2c0 [ 2023.112326] ? populate_vma_page_range+0x210/0x210 [ 2023.117266] ? security_capable+0x88/0xb0 [ 2023.121415] SyS_mlockall+0x3ff/0x520 [ 2023.128351] ? SyS_munlock+0xf0/0xf0 [ 2023.132062] do_syscall_64+0x1d5/0x640 [ 2023.135988] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2023.142341] RIP: 0033:0x4665f9 [ 2023.145531] RSP: 002b:00007f5cec112188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2023.153315] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2023.160592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2023.167870] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 2023.175162] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2023.182422] R13: 00007fffbcc0165f R14: 00007f5cec112300 R15: 0000000000022000 [ 2023.191957] Mem-Info: [ 2023.194401] active_anon:216902 inactive_anon:1118037 isolated_anon:0 [ 2023.194401] active_file:15 inactive_file:66 isolated_file:0 [ 2023.194401] unevictable:25015 dirty:2 writeback:0 unstable:0 [ 2023.194401] slab_reclaimable:20011 slab_unreclaimable:145284 [ 2023.194401] mapped:58048 shmem:8980 pagetables:57121 bounce:0 [ 2023.194401] free:25336 free_pcp:67 free_cma:0 [ 2023.228955] Node 0 active_anon:730324kB inactive_anon:972272kB active_file:36kB inactive_file:476kB unevictable:75228kB isolated(anon):0kB isolated(file):0kB mapped:209796kB dirty:8kB writeback:0kB shmem:27700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2023.257890] Node 1 active_anon:137284kB inactive_anon:3499876kB active_file:4kB inactive_file:0kB unevictable:24832kB isolated(anon):0kB isolated(file):0kB mapped:22596kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2023.285583] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4496kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2023.312415] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2023.317613] Node 0 DMA32 free:36092kB min:36200kB low:45248kB high:54296kB active_anon:730304kB inactive_anon:967776kB active_file:56kB inactive_file:356kB unevictable:75228kB writepending:8kB present:3129332kB managed:2788128kB mlocked:75228kB kernel_stack:25536kB pagetables:63184kB bounce:0kB free_pcp:704kB local_pcp:0kB free_cma:0kB [ 2023.347802] lowmem_reserve[]: 0 0 0 0 0 [ 2023.351896] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2023.378643] lowmem_reserve[]: 0 0 0 0 0 [ 2023.382815] Node 1 Normal free:53660kB min:53696kB low:67120kB high:80544kB active_anon:137284kB inactive_anon:3499876kB active_file:4kB inactive_file:108kB unevictable:24832kB writepending:0kB present:4194304kB managed:4128256kB mlocked:24832kB kernel_stack:51264kB pagetables:165188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2023.413337] lowmem_reserve[]: 0 0 0 0 0 [ 2023.417500] Node 0 DMA: 10*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 2023.434095] Node 0 DMA32: 797*4kB (UE) 277*8kB (UME) 324*16kB (UME) 550*32kB (UME) 42*64kB (UM) 19*128kB (UM) 6*256kB (M) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 36380kB [ 2023.450291] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2023.461525] Node 1 Normal: 96*4kB (UME) 670*8kB (UM) 10*16kB (UME) 659*32kB (UME) 99*64kB (ME) 110*128kB (UME) 26*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54064kB [ 2023.480964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2023.492770] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2023.505275] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2023.515097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2023.531014] 14180 total pagecache pages [ 2023.535166] 0 pages in swap cache [ 2023.540961] Swap cache stats: add 0, delete 0, find 0/0 [ 2023.546457] Free swap = 0kB [ 2023.549637] Total swap = 0kB [ 2023.552649] 2097051 pages RAM [ 2023.555736] 0 pages HighMem/MovableOnly [ 2023.559791] 363849 pages reserved [ 2023.563244] 0 pages cma reserved [ 2023.566850] Out of memory (oom_kill_allocating_task): Kill process 17560 (syz-executor.5) score 0 or sacrifice child [ 2023.577776] Killed process 17559 (syz-executor.5) total-vm:93384kB, anon-rss:28256kB, file-rss:54972kB, shmem-rss:0kB [ 2023.596016] oom_reaper: reaped process 17559 (syz-executor.5), now anon-rss:28348kB, file-rss:20544kB, shmem-rss:0kB 02:03:39 executing program 0: mlockall(0x7) mlockall(0x3) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) fork() syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sched_getattr(0x0, 0x0, 0x0, 0x0) 02:03:39 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x4}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:03:39 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:39 executing program 1: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:03:39 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000040)) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:03:39 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) [ 2024.446670] Bluetooth: hci4 command 0x041b tx timeout [ 2024.646059] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2024.661558] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2024.679021] CPU: 0 PID: 17567 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 2024.687113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2024.698295] Call Trace: [ 2024.700966] dump_stack+0x1b2/0x281 [ 2024.704595] dump_header+0x178/0x82f [ 2024.708496] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2024.713589] ? ___ratelimit+0x2cd/0x530 [ 2024.718025] oom_kill_process.cold+0x10/0xa40 [ 2024.722616] out_of_memory+0xe3e/0x1190 [ 2024.728006] ? oom_killer_disable+0x1c0/0x1c0 [ 2024.733972] ? mutex_trylock+0x152/0x1a0 [ 2024.738217] __alloc_pages_nodemask+0x23e1/0x2720 [ 2024.743104] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2024.747952] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 2024.753319] ? __lock_acquire+0x5fc/0x3f20 [ 2024.757570] alloc_pages_vma+0xd2/0x6d0 [ 2024.763131] __handle_mm_fault+0x25fa/0x4620 [ 2024.768409] ? lock_downgrade+0x740/0x740 [ 2024.772666] ? vm_insert_page+0x7c0/0x7c0 [ 2024.776902] ? do_raw_spin_unlock+0x164/0x220 [ 2024.781386] ? mark_held_locks+0xa6/0xf0 [ 2024.785471] handle_mm_fault+0x455/0x9c0 [ 2024.790023] __get_user_pages+0x4e9/0x1270 [ 2024.795215] ? follow_page_mask+0x18a0/0x18a0 [ 2024.799700] ? lock_acquire+0x170/0x3f0 [ 2024.803670] populate_vma_page_range+0x17b/0x210 [ 2024.808447] __mm_populate+0x195/0x2c0 [ 2024.812418] ? populate_vma_page_range+0x210/0x210 [ 2024.817363] ? security_capable+0x88/0xb0 [ 2024.821518] SyS_mlockall+0x3ff/0x520 [ 2024.825408] ? SyS_munlock+0xf0/0xf0 [ 2024.830631] do_syscall_64+0x1d5/0x640 [ 2024.834640] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2024.841134] RIP: 0033:0x4665f9 [ 2024.847016] RSP: 002b:00007f5cec112188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2024.855083] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2024.862449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2024.871714] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 2024.879196] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2024.886483] R13: 00007fffbcc0165f R14: 00007f5cec112300 R15: 0000000000022000 [ 2024.897977] Mem-Info: [ 2024.900417] active_anon:217433 inactive_anon:1118055 isolated_anon:0 [ 2024.900417] active_file:0 inactive_file:31 isolated_file:0 [ 2024.900417] unevictable:24279 dirty:2 writeback:1 unstable:0 [ 2024.900417] slab_reclaimable:19932 slab_unreclaimable:145576 [ 2024.900417] mapped:57640 shmem:8980 pagetables:57273 bounce:0 [ 2024.900417] free:24989 free_pcp:31 free_cma:0 [ 2024.936733] Node 0 active_anon:732372kB inactive_anon:972268kB active_file:8kB inactive_file:48kB unevictable:72248kB isolated(anon):0kB isolated(file):0kB mapped:213788kB dirty:8kB writeback:4kB shmem:27700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2024.967895] Node 1 active_anon:137360kB inactive_anon:3499952kB active_file:0kB inactive_file:76kB unevictable:24868kB isolated(anon):0kB isolated(file):0kB mapped:16772kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2024.995859] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4496kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2025.024049] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2025.032063] Node 0 DMA32 free:35796kB min:36200kB low:45248kB high:54296kB active_anon:732352kB inactive_anon:967772kB active_file:108kB inactive_file:48kB unevictable:71960kB writepending:28kB present:3129332kB managed:2788128kB mlocked:71960kB kernel_stack:25760kB pagetables:63352kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 2025.065393] lowmem_reserve[]: 0 0 0 0 0 [ 2025.069613] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2025.099012] lowmem_reserve[]: 0 0 0 0 0 [ 2025.104968] Node 1 Normal free:53208kB min:53696kB low:67120kB high:80544kB active_anon:137340kB inactive_anon:3499952kB active_file:12kB inactive_file:12kB unevictable:24888kB writepending:0kB present:4194304kB managed:4128256kB mlocked:24888kB kernel_stack:51680kB pagetables:165628kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2025.136356] lowmem_reserve[]: 0 0 0 0 0 [ 2025.140446] Node 0 DMA: 10*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 2025.160469] Node 0 DMA32: 811*4kB (UME) 254*8kB (UME) 316*16kB (UME) 532*32kB (UME) 40*64kB (UM) 20*128kB (UM) 7*256kB (M) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 35804kB [ 2025.177847] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2025.190022] Node 1 Normal: 10*4kB (UME) 648*8kB (U) 19*16kB (UME) 644*32kB (UE) 99*64kB (ME) 110*128kB (UME) 26*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53208kB [ 2025.205326] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2025.214316] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2025.222961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2025.236823] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2025.245928] 13725 total pagecache pages [ 2025.253109] 0 pages in swap cache [ 2025.259469] Swap cache stats: add 0, delete 0, find 0/0 [ 2025.264947] Free swap = 0kB [ 2025.270382] Total swap = 0kB [ 2025.273490] 2097051 pages RAM [ 2025.279171] 0 pages HighMem/MovableOnly [ 2025.283227] 363849 pages reserved [ 2025.289670] 0 pages cma reserved [ 2025.293104] Out of memory (oom_kill_allocating_task): Kill process 17567 (syz-executor.5) score 0 or sacrifice child [ 2025.305908] Killed process 17565 (syz-executor.5) total-vm:93384kB, anon-rss:12952kB, file-rss:40196kB, shmem-rss:0kB [ 2025.325653] oom_reaper: reaped process 17565 (syz-executor.5), now anon-rss:13144kB, file-rss:5376kB, shmem-rss:0kB [ 2025.372669] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2025.426229] systemd-journal cpuset=/ mems_allowed=0-1 [ 2025.431470] CPU: 1 PID: 15414 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 2025.439433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2025.448794] Call Trace: [ 2025.451472] dump_stack+0x1b2/0x281 [ 2025.455100] dump_header+0x178/0x82f [ 2025.458820] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2025.464016] ? ___ratelimit+0x2cd/0x530 [ 2025.468973] oom_kill_process.cold+0x10/0xa40 02:03:40 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3, &(0x7f0000000040)=""/3, 0xea, &(0x7f0000000200)=""/234, 0x28, &(0x7f0000000080)=""/40}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="86611c94736c6763f7096547f9b8538b69167b9f5228e4ee2683ce6f34b4d538501bde73341520edfa274d7700e2887900c4966998ac9a040e43adc33b8b2b9f6c2933b482788befc11d16d81c4097f5d662aad7c96ecd870c6de37179b3f9f4d257404777ae37d648c140f4ca7bd9fbb2a2b18808d41478b12b95b25bd48ee42adb62b28a8ac08a65066fc0366f2135df46a61e3b723c7221195aa12e22604173d1fec4a9fe3f55c140780ecf71213a5b650ba0eb1b99994e760e54272ec187acf00ec3b7d9d6e1073e440df4ed0d07f19e4c"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) [ 2025.473683] out_of_memory+0xe3e/0x1190 [ 2025.477669] ? oom_killer_disable+0x1c0/0x1c0 [ 2025.482170] ? mutex_trylock+0x152/0x1a0 [ 2025.486244] __alloc_pages_nodemask+0x23e1/0x2720 [ 2025.491152] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2025.496720] alloc_pages_current+0x155/0x260 [ 2025.501137] filemap_fault+0x11a1/0x1ad0 [ 2025.505215] ext4_filemap_fault+0x84/0xb0 [ 2025.509405] __do_fault+0xfa/0x380 [ 2025.513150] __handle_mm_fault+0x2497/0x4620 [ 2025.517578] ? vm_insert_page+0x7c0/0x7c0 [ 2025.521750] ? mark_held_locks+0xa6/0xf0 [ 2025.525872] handle_mm_fault+0x455/0x9c0 [ 2025.529977] __do_page_fault+0x549/0xad0 [ 2025.534059] ? spurious_fault+0x640/0x640 [ 2025.538222] ? do_page_fault+0x60/0x500 [ 2025.542209] ? page_fault+0x2f/0x50 [ 2025.545880] page_fault+0x45/0x50 [ 2025.549995] RIP: 0001:0xffffffffffffffff [ 2025.554072] RSP: 711d51e0:00007ffc6af0f820 EFLAGS: 7ffc6af0f630 [ 2025.682026] Mem-Info: [ 2025.710041] active_anon:217426 inactive_anon:1118430 isolated_anon:0 [ 2025.710041] active_file:207 inactive_file:499 isolated_file:32 [ 2025.710041] unevictable:20846 dirty:0 writeback:0 unstable:0 [ 2025.710041] slab_reclaimable:19923 slab_unreclaimable:145596 [ 2025.710041] mapped:57065 shmem:8980 pagetables:57273 bounce:0 [ 2025.710041] free:26816 free_pcp:259 free_cma:0 [ 2025.934286] Node 0 active_anon:730292kB inactive_anon:972368kB active_file:176kB inactive_file:112kB unevictable:73696kB isolated(anon):0kB isolated(file):0kB mapped:213888kB dirty:0kB writeback:0kB shmem:27700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2026.107621] Node 1 active_anon:137380kB inactive_anon:3499952kB active_file:4kB inactive_file:4kB unevictable:25824kB isolated(anon):0kB isolated(file):0kB mapped:17836kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2026.176222] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4496kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2026.231667] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2026.237078] Node 0 DMA32 free:39168kB min:36200kB low:45248kB high:54296kB active_anon:730268kB inactive_anon:967892kB active_file:1652kB inactive_file:1020kB unevictable:67292kB writepending:0kB present:3129332kB managed:2788128kB mlocked:67144kB kernel_stack:25664kB pagetables:63188kB bounce:0kB free_pcp:840kB local_pcp:676kB free_cma:0kB [ 2026.269338] lowmem_reserve[]: 0 0 0 0 0 [ 2026.273339] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2026.306178] lowmem_reserve[]: 0 0 0 0 0 [ 2026.310306] Node 1 Normal free:54240kB min:53696kB low:67120kB high:80544kB active_anon:137380kB inactive_anon:3500012kB active_file:284kB inactive_file:508kB unevictable:23808kB writepending:0kB present:4194304kB managed:4128256kB mlocked:23668kB kernel_stack:51520kB pagetables:165552kB bounce:0kB free_pcp:1220kB local_pcp:596kB free_cma:0kB [ 2026.342485] lowmem_reserve[]: 0 0 0 0 0 [ 2026.346536] Node 0 DMA: 10*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 2026.363899] Node 0 DMA32: 1062*4kB (UME) 388*8kB (UME) 222*16kB (UME) 533*32kB (UME) 38*64kB (UM) 18*128kB (UM) 7*256kB (M) 2*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 36536kB [ 2026.380349] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2026.391368] Node 1 Normal: 53*4kB (UE) 751*8kB (UM) 24*16kB (UME) 649*32kB (UE) 84*64kB (ME) 110*128kB (UME) 26*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53484kB [ 2026.406593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2026.415428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2026.424159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2026.433107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2026.441734] 13445 total pagecache pages [ 2026.445816] 0 pages in swap cache [ 2026.449355] Swap cache stats: add 0, delete 0, find 0/0 [ 2026.454714] Free swap = 0kB [ 2026.457776] Total swap = 0kB [ 2026.465170] 2097051 pages RAM [ 2026.468487] 0 pages HighMem/MovableOnly [ 2026.472993] 363849 pages reserved [ 2026.476501] 0 pages cma reserved [ 2026.481071] Out of memory (oom_kill_allocating_task): Kill process 15414 (systemd-journal) score 0 or sacrifice child [ 2026.492316] Killed process 15414 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:0kB, shmem-rss:2756kB [ 2026.505062] oom_reaper: reaped process 15414 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2808kB [ 2026.526424] Bluetooth: hci4 command 0x040f tx timeout [ 2026.549454] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2026.575271] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2026.583083] CPU: 1 PID: 7974 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 2026.592469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2026.603155] Call Trace: [ 2026.605792] dump_stack+0x1b2/0x281 [ 2026.609524] dump_header+0x178/0x82f [ 2026.613364] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2026.618576] ? ___ratelimit+0x2cd/0x530 [ 2026.623263] oom_kill_process.cold+0x10/0xa40 [ 2026.628229] out_of_memory+0xe3e/0x1190 [ 2026.633002] ? oom_killer_disable+0x1c0/0x1c0 [ 2026.637523] ? mutex_trylock+0x152/0x1a0 [ 2026.641628] __alloc_pages_nodemask+0x23e1/0x2720 [ 2026.646519] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2026.651912] alloc_pages_current+0x155/0x260 [ 2026.656315] filemap_fault+0x11a1/0x1ad0 [ 2026.660405] ext4_filemap_fault+0x84/0xb0 [ 2026.664551] __do_fault+0xfa/0x380 [ 2026.668092] __handle_mm_fault+0x2497/0x4620 [ 2026.672495] ? vm_insert_page+0x7c0/0x7c0 [ 2026.676631] ? __might_fault+0x177/0x1b0 [ 2026.680736] ? mark_held_locks+0xa6/0xf0 [ 2026.684797] handle_mm_fault+0x455/0x9c0 [ 2026.688870] __do_page_fault+0x549/0xad0 [ 2026.692943] ? spurious_fault+0x640/0x640 [ 2026.697092] ? do_page_fault+0x60/0x500 [ 2026.701069] ? page_fault+0x2f/0x50 [ 2026.704715] page_fault+0x45/0x50 [ 2026.709375] RIP: 0000:0x947879 [ 2026.712565] RSP: 16d0ac0:000000c0003b39e0 EFLAGS: 000000f1 [ 2026.731954] Mem-Info: [ 2026.742729] active_anon:216800 inactive_anon:1118083 isolated_anon:0 [ 2026.742729] active_file:12 inactive_file:11 isolated_file:0 [ 2026.742729] unevictable:25141 dirty:0 writeback:0 unstable:0 [ 2026.742729] slab_reclaimable:19924 slab_unreclaimable:145356 [ 2026.742729] mapped:56648 shmem:8980 pagetables:57200 bounce:0 [ 2026.742729] free:25136 free_pcp:62 free_cma:0 [ 2026.781600] Node 0 active_anon:729824kB inactive_anon:972380kB active_file:44kB inactive_file:44kB unevictable:74948kB isolated(anon):0kB isolated(file):0kB mapped:210616kB dirty:0kB writeback:0kB shmem:27700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2026.818304] Node 1 active_anon:137376kB inactive_anon:3499952kB active_file:8kB inactive_file:0kB unevictable:25616kB isolated(anon):0kB isolated(file):0kB mapped:15976kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2026.850532] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4496kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2026.889464] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2026.894533] Node 0 DMA32 free:35884kB min:36200kB low:45248kB high:54296kB active_anon:729804kB inactive_anon:967884kB active_file:88kB inactive_file:0kB unevictable:74948kB writepending:0kB present:3129332kB managed:2788128kB mlocked:74948kB kernel_stack:25632kB pagetables:63088kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2026.931133] lowmem_reserve[]: 0 0 0 0 0 [ 2026.935506] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2026.974980] lowmem_reserve[]: 0 0 0 0 0 [ 2026.981714] Node 1 Normal free:53604kB min:53696kB low:67120kB high:80544kB active_anon:137376kB inactive_anon:3499952kB active_file:0kB inactive_file:12kB unevictable:25616kB writepending:0kB present:4194304kB managed:4128256kB mlocked:25616kB kernel_stack:51520kB pagetables:165600kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2027.024356] lowmem_reserve[]: 0 0 0 0 0 [ 2027.046537] Node 0 DMA: 10*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 2027.109271] Node 0 DMA32: 863*4kB (UME) 394*8kB (UME) 226*16kB (UME) 534*32kB (UME) 38*64kB (UM) 18*128kB (UM) 7*256kB (M) 2*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 35884kB [ 2027.180319] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2027.210961] Node 1 Normal: 55*4kB (UME) 762*8kB (UM) 24*16kB (UME) 651*32kB (UE) 84*64kB (ME) 110*128kB (UME) 26*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53644kB [ 2027.345050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2027.410616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2027.470762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2027.565050] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2027.632635] 13425 total pagecache pages [ 2027.663922] 0 pages in swap cache [ 2027.691000] Swap cache stats: add 0, delete 0, find 0/0 [ 2027.740587] Free swap = 0kB [ 2027.753954] Total swap = 0kB [ 2027.775084] 2097051 pages RAM [ 2027.803841] 0 pages HighMem/MovableOnly [ 2027.831495] 363849 pages reserved [ 2027.853955] 0 pages cma reserved [ 2027.883902] Out of memory (oom_kill_allocating_task): Kill process 7974 (syz-fuzzer) score 0 or sacrifice child [ 2027.956283] Killed process 16634 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:652kB, shmem-rss:0kB [ 2028.089746] oom_reaper: reaped process 16634 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2028.187445] systemd-rfkill invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2028.308171] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 2028.313325] CPU: 0 PID: 17316 Comm: systemd-rfkill Not tainted 4.14.232-syzkaller #0 [ 2028.321208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2028.330738] Call Trace: [ 2028.333392] dump_stack+0x1b2/0x281 [ 2028.337128] dump_header+0x178/0x82f [ 2028.340847] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2028.345958] ? ___ratelimit+0x2cd/0x530 [ 2028.349937] oom_kill_process.cold+0x10/0xa40 [ 2028.354449] out_of_memory+0xe3e/0x1190 [ 2028.358433] ? oom_killer_disable+0x1c0/0x1c0 [ 2028.362929] ? mutex_trylock+0x152/0x1a0 [ 2028.366996] __alloc_pages_nodemask+0x23e1/0x2720 [ 2028.371983] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2028.376860] alloc_pages_current+0x155/0x260 [ 2028.381380] filemap_fault+0x11a1/0x1ad0 [ 2028.386100] ext4_filemap_fault+0x84/0xb0 [ 2028.390368] __do_fault+0xfa/0x380 [ 2028.394002] __handle_mm_fault+0x2497/0x4620 [ 2028.398505] ? vm_insert_page+0x7c0/0x7c0 [ 2028.402688] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2028.407712] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2028.412485] ? mark_held_locks+0xa6/0xf0 [ 2028.416559] handle_mm_fault+0x455/0x9c0 [ 2028.420640] __do_page_fault+0x549/0xad0 [ 2028.427157] ? spurious_fault+0x640/0x640 [ 2028.431316] ? do_page_fault+0x60/0x500 [ 2028.435377] ? page_fault+0x2f/0x50 [ 2028.439112] page_fault+0x45/0x50 [ 2028.442589] RIP: 26acde40:0x7f65bda18040 [ 2028.446651] RSP: bda0e4f0:00007ffc26acddc0 EFLAGS: 7f65bb9a3d70 [ 2028.598471] Mem-Info: [ 2028.616164] Bluetooth: hci4 command 0x0419 tx timeout [ 2028.676230] active_anon:216790 inactive_anon:1110508 isolated_anon:0 [ 2028.676230] active_file:39 inactive_file:8 isolated_file:39 [ 2028.676230] unevictable:25241 dirty:0 writeback:0 unstable:0 [ 2028.676230] slab_reclaimable:19921 slab_unreclaimable:145150 [ 2028.676230] mapped:56648 shmem:8980 pagetables:57163 bounce:0 [ 2028.676230] free:31449 free_pcp:491 free_cma:0 [ 2028.775444] Node 0 active_anon:729784kB inactive_anon:967280kB active_file:56kB inactive_file:128kB unevictable:74848kB isolated(anon):0kB isolated(file):156kB mapped:210616kB dirty:0kB writeback:0kB shmem:27700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2028.816219] Node 1 active_anon:137360kB inactive_anon:3431780kB active_file:36kB inactive_file:160kB unevictable:25888kB isolated(anon):0kB isolated(file):0kB mapped:15976kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2028.845514] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4496kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2028.936177] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2028.941329] Node 0 DMA32 free:41144kB min:36200kB low:45248kB high:54296kB active_anon:729712kB inactive_anon:962524kB active_file:60kB inactive_file:96kB unevictable:74644kB writepending:0kB present:3129332kB managed:2788128kB mlocked:74644kB kernel_stack:25504kB pagetables:62856kB bounce:0kB free_pcp:1360kB local_pcp:688kB free_cma:0kB [ 2029.139648] lowmem_reserve[]: 0 0 0 0 0 [ 2029.143692] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2029.191974] lowmem_reserve[]: 0 0 0 0 0 [ 2029.196043] Node 1 Normal free:131600kB min:53696kB low:67120kB high:80544kB active_anon:137360kB inactive_anon:3431652kB active_file:2872kB inactive_file:88kB unevictable:12032kB writepending:8kB present:4194304kB managed:4128256kB mlocked:12044kB kernel_stack:51264kB pagetables:165336kB bounce:0kB free_pcp:1292kB local_pcp:652kB free_cma:0kB [ 2029.230858] lowmem_reserve[]: 0 0 0 0 0 [ 2029.235110] Node 0 DMA: 10*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 2029.255632] Node 0 DMA32: 2428*4kB (UME) 838*8kB (UME) 364*16kB (UME) 546*32kB (UME) 40*64kB (UM) 21*128kB (UM) 8*256kB (M) 4*512kB (UM) 1*1024kB (U) 2*2048kB (M) 0*4096kB = 54176kB [ 2029.276582] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2029.294029] Node 1 Normal: 4570*4kB (UME) 2509*8kB (UM) 802*16kB (UME) 1435*32kB (UME) 218*64kB (ME) 110*128kB (UME) 26*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 131792kB [ 2029.317158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2029.326290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2029.347934] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2029.360511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2029.369211] 13498 total pagecache pages [ 2029.373577] 0 pages in swap cache [ 2029.382472] Swap cache stats: add 0, delete 0, find 0/0 [ 2029.416454] Free swap = 0kB [ 2029.419500] Total swap = 0kB [ 2029.422520] 2097051 pages RAM [ 2029.425625] 0 pages HighMem/MovableOnly [ 2029.471016] 363849 pages reserved [ 2029.474554] 0 pages cma reserved [ 2029.506187] Out of memory (oom_kill_allocating_task): Kill process 17316 (systemd-rfkill) score 0 or sacrifice child [ 2029.536198] Killed process 17316 (systemd-rfkill) total-vm:37800kB, anon-rss:432kB, file-rss:0kB, shmem-rss:0kB [ 2029.548250] oom_reaper: reaped process 17316 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 02:03:45 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:45 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:03:45 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000280)={r0, 0x4}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:03:45 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) 02:03:45 executing program 0: mlockall(0x7) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000040)={0x0, r2}) mlockall(0x4) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) r3 = fork() sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_getattr(r3, &(0x7f0000000080)={0x38}, 0x38, 0x0) [ 2029.785867] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2029.824006] systemd[1]: systemd-rfkill.service: Main process exited, code=killed, status=9/KILL [ 2029.898742] systemd[1]: systemd-rfkill.service: Unit entered failed state. [ 2029.919146] systemd[1]: systemd-rfkill.service: Failed with result 'signal'. [ 2029.998804] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2030.119420] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2030.133707] systemd-cgroups (17591) used greatest stack depth: 24608 bytes left [ 2030.233070] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2030.284556] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2030.329048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2030.335884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2030.352789] systemd[1]: Stopped Journal Service. [ 2030.415045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2030.463459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2030.494857] systemd[1]: Starting Journal Service... [ 2030.540997] device bridge_slave_1 left promiscuous mode [ 2030.579812] bridge0: port 2(bridge_slave_1) entered disabled state [ 2030.626465] device bridge_slave_0 left promiscuous mode [ 2030.670905] bridge0: port 1(bridge_slave_0) entered disabled state [ 2030.731284] device veth1_macvtap left promiscuous mode [ 2030.791527] device veth0_macvtap left promiscuous mode [ 2030.821545] device veth1_vlan left promiscuous mode [ 2030.854050] device veth0_vlan left promiscuous mode 02:03:46 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:46 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) [ 2031.889349] device hsr_slave_1 left promiscuous mode [ 2031.967166] device hsr_slave_0 left promiscuous mode [ 2032.049162] team0 (unregistering): Port device team_slave_1 removed [ 2032.067068] syz-executor.2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2032.133307] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2032.161049] CPU: 0 PID: 17630 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 2032.168963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2032.178372] Call Trace: [ 2032.180974] dump_stack+0x1b2/0x281 [ 2032.184623] dump_header+0x178/0x82f [ 2032.188359] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2032.193505] ? ___ratelimit+0x2cd/0x530 [ 2032.197492] oom_kill_process.cold+0x10/0xa40 [ 2032.202098] out_of_memory+0xe3e/0x1190 [ 2032.206089] ? oom_killer_disable+0x1c0/0x1c0 [ 2032.210682] ? mutex_trylock+0x152/0x1a0 [ 2032.214753] __alloc_pages_nodemask+0x23e1/0x2720 [ 2032.219622] ? ____cache_alloc_node+0xf4/0x1d0 [ 2032.224616] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2032.229598] ? do_raw_spin_unlock+0x164/0x220 [ 2032.234113] ? _raw_spin_unlock+0x29/0x40 [ 2032.238279] ? ____cache_alloc_node+0xf4/0x1d0 [ 2032.243349] ? kmem_cache_alloc_node+0x38b/0x410 [ 2032.248123] copy_process.part.0+0x265/0x71c0 [ 2032.252731] ? __lock_acquire+0x5fc/0x3f20 [ 2032.256980] ? kcov_ioctl+0x4d/0x190 [ 2032.260802] ? lock_acquire+0x170/0x3f0 [ 2032.264791] ? lock_downgrade+0x740/0x740 [ 2032.268956] ? __cleanup_sighand+0x40/0x40 [ 2032.273199] ? kcov_ioctl+0x4d/0x190 [ 2032.276919] ? kcov_mmap+0x120/0x120 [ 2032.280732] ? do_vfs_ioctl+0xe2/0xff0 [ 2032.284722] _do_fork+0x184/0xc80 [ 2032.288196] ? fork_idle+0x270/0x270 [ 2032.292024] ? __fget+0x225/0x360 [ 2032.295483] ? do_vfs_ioctl+0xff0/0xff0 [ 2032.299550] ? security_file_ioctl+0x83/0xb0 [ 2032.303952] ? fput+0xb/0x140 [ 2032.307050] ? do_syscall_64+0x4c/0x640 [ 2032.311126] ? kernel_thread+0x40/0x40 [ 2032.315038] do_syscall_64+0x1d5/0x640 [ 2032.318924] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2032.324208] RIP: 0033:0x4665f9 [ 2032.327446] RSP: 002b:00007fe19971a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2032.335234] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 00000000004665f9 [ 2032.342511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2032.349781] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 2032.357378] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2032.364652] R13: 00007fffd7040a0f R14: 00007fe19971a300 R15: 0000000000022000 [ 2032.373315] team0 (unregistering): Port device team_slave_0 removed [ 2032.396385] Mem-Info: [ 2032.409590] active_anon:216798 inactive_anon:1106222 isolated_anon:0 [ 2032.409590] active_file:33 inactive_file:0 isolated_file:0 [ 2032.409590] unevictable:47115 dirty:1 writeback:0 unstable:0 [ 2032.409590] slab_reclaimable:19907 slab_unreclaimable:143364 [ 2032.409590] mapped:55466 shmem:8976 pagetables:57261 bounce:0 [ 2032.409590] free:25146 free_pcp:8 free_cma:0 [ 2032.487305] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2032.560194] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2032.653138] Node 0 active_anon:729676kB inactive_anon:971436kB active_file:4kB inactive_file:4kB unevictable:104716kB isolated(anon):0kB isolated(file):0kB mapped:199208kB dirty:4kB writeback:0kB shmem:27700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2032.860353] bond0 (unregistering): Released all slaves [ 2032.919830] Node 1 active_anon:137516kB inactive_anon:3453452kB active_file:20kB inactive_file:0kB unevictable:84044kB isolated(anon):0kB isolated(file):0kB mapped:23656kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2033.132763] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4496kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 02:03:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:03:48 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:48 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000200)={0xa0, 0x9, 0x610, 0x98, 0x9, 0x6}) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x11, 0x3, 0x8}, {{}, 0x11, 0x200, 0x670}, {{0x0, 0x2710}, 0x14, 0x8000, 0x7}, {{}, 0x12, 0x7f, 0x3}], 0x60) [ 2033.393102] lowmem_reserve[]: 0 2717 2718 2718 2718 02:03:48 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000280)={r0, 0x4}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) [ 2033.431795] Node 0 DMA32 free:45728kB min:36200kB low:45248kB high:54296kB active_anon:729660kB inactive_anon:967664kB active_file:7464kB inactive_file:10104kB unevictable:66552kB writepending:24kB present:3129332kB managed:2788128kB mlocked:66292kB kernel_stack:25728kB pagetables:63512kB bounce:0kB free_pcp:856kB local_pcp:524kB free_cma:0kB [ 2033.532331] systemd-journald[17617]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2033.639691] lowmem_reserve[]: 0 0 0 0 0 [ 2033.666199] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2033.784984] lowmem_reserve[]: 0 0 0 0 0 [ 2033.795790] Node 1 Normal free:58168kB min:53696kB low:67120kB high:80544kB active_anon:137720kB inactive_anon:3457612kB active_file:1664kB inactive_file:2052kB unevictable:48424kB writepending:152kB present:4194304kB managed:4128256kB mlocked:48436kB kernel_stack:51456kB pagetables:165744kB bounce:0kB free_pcp:840kB local_pcp:644kB free_cma:0kB [ 2033.917824] lowmem_reserve[]: 0 0 0 0 0 [ 2033.935071] Node 0 DMA: 10*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 2033.957922] Node 0 DMA32: 1621*4kB (UME) 949*8kB (UME) 504*16kB (UME) 438*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36220kB [ 2033.983146] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2033.994363] Node 1 Normal: 40*4kB (ME) 50*8kB (UM) 17*16kB (UME) 954*32kB (UME) 123*64kB (ME) 65*128kB (UME) 26*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54208kB [ 2034.030590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2034.043544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2034.060990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2034.073764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2034.101495] 15511 total pagecache pages [ 2034.114492] 0 pages in swap cache [ 2034.122996] Swap cache stats: add 0, delete 0, find 0/0 [ 2034.138948] Free swap = 0kB [ 2034.145343] Total swap = 0kB [ 2034.166009] 2097051 pages RAM [ 2034.195205] 0 pages HighMem/MovableOnly [ 2034.220155] 363849 pages reserved [ 2034.242915] 0 pages cma reserved [ 2034.268281] Out of memory (oom_kill_allocating_task): Kill process 17630 (syz-executor.2) score 0 or sacrifice child [ 2034.330815] Killed process 17630 (syz-executor.2) total-vm:93516kB, anon-rss:368kB, file-rss:36132kB, shmem-rss:0kB [ 2034.427922] oom_reaper: reaped process 17630 (syz-executor.2), now anon-rss:368kB, file-rss:1308kB, shmem-rss:0kB [ 2034.688819] kworker/1:2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=2, oom_score_adj=0 [ 2034.776719] kworker/1:2 cpuset=/ mems_allowed=0-1 [ 2034.818724] CPU: 1 PID: 13736 Comm: kworker/1:2 Not tainted 4.14.232-syzkaller #0 [ 2034.826373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2034.835740] Workqueue: events vhci_open_timeout [ 2034.840406] Call Trace: [ 2034.842996] dump_stack+0x1b2/0x281 [ 2034.846623] dump_header+0x178/0x82f [ 2034.850330] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2034.855429] ? ___ratelimit+0x2cd/0x530 [ 2034.859400] oom_kill_process.cold+0x10/0xa40 [ 2034.863896] ? lock_downgrade+0x740/0x740 [ 2034.868048] out_of_memory+0x2dc/0x1190 [ 2034.872020] ? oom_killer_disable+0x1c0/0x1c0 [ 2034.876508] ? mutex_trylock+0x152/0x1a0 [ 2034.880563] __alloc_pages_nodemask+0x23e1/0x2720 [ 2034.885418] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2034.890258] ? trace_hardirqs_on+0x10/0x10 [ 2034.894495] ? mark_held_locks+0xa6/0xf0 [ 2034.898552] ? cache_grow_begin+0x3f/0x700 [ 2034.902781] cache_grow_begin+0x91/0x700 [ 2034.906844] fallback_alloc+0x207/0x2c0 [ 2034.910817] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 2034.915485] hci_alloc_dev+0x3e/0x1c60 [ 2034.919375] __vhci_create_device+0xe9/0x540 [ 2034.923782] vhci_open_timeout+0x35/0x50 [ 2034.927846] process_one_work+0x793/0x14a0 [ 2034.933236] ? work_busy+0x320/0x320 [ 2034.936970] ? worker_thread+0x158/0xff0 [ 2034.941030] ? _raw_spin_unlock_irq+0x24/0x80 [ 2034.945555] worker_thread+0x5cc/0xff0 [ 2034.949450] ? rescuer_thread+0xc80/0xc80 [ 2034.953614] kthread+0x30d/0x420 [ 2034.956975] ? kthread_create_on_node+0xd0/0xd0 [ 2034.961638] ret_from_fork+0x24/0x30 [ 2035.278231] Mem-Info: [ 2035.280686] active_anon:216911 inactive_anon:1108306 isolated_anon:0 [ 2035.280686] active_file:4 inactive_file:9 isolated_file:0 [ 2035.280686] unevictable:37322 dirty:0 writeback:0 unstable:0 [ 2035.280686] slab_reclaimable:19892 slab_unreclaimable:142781 [ 2035.280686] mapped:56797 shmem:11023 pagetables:57248 bounce:0 [ 2035.280686] free:24953 free_pcp:66 free_cma:0 [ 2035.358266] Node 0 active_anon:729944kB inactive_anon:975320kB active_file:0kB inactive_file:16kB unevictable:92000kB isolated(anon):0kB isolated(file):0kB mapped:198016kB dirty:0kB writeback:0kB shmem:31480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2035.395080] Node 1 active_anon:137700kB inactive_anon:3457904kB active_file:0kB inactive_file:48kB unevictable:57308kB isolated(anon):0kB isolated(file):0kB mapped:29256kB dirty:0kB writeback:0kB shmem:12612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2035.429943] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4496kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2035.465196] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2035.474489] Node 0 DMA32 free:35576kB min:36200kB low:45248kB high:54296kB active_anon:729924kB inactive_anon:970824kB active_file:48kB inactive_file:0kB unevictable:92048kB writepending:0kB present:3129332kB managed:2788128kB mlocked:92048kB kernel_stack:25664kB pagetables:63120kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 2035.518301] lowmem_reserve[]: 0 0 0 0 0 [ 2035.522378] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2035.559220] lowmem_reserve[]: 0 0 0 0 0 [ 2035.563435] Node 1 Normal free:53480kB min:53696kB low:67120kB high:80544kB active_anon:137700kB inactive_anon:3457904kB active_file:0kB inactive_file:48kB unevictable:57380kB writepending:0kB present:4194304kB managed:4128256kB mlocked:57376kB kernel_stack:51456kB pagetables:165760kB bounce:0kB free_pcp:276kB local_pcp:132kB free_cma:0kB [ 2035.604893] lowmem_reserve[]: 0 0 0 0 0 [ 2035.609045] Node 0 DMA: 10*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 2035.635629] Node 0 DMA32: 1569*4kB (UME) 955*8kB (UME) 499*16kB (UME) 438*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35980kB [ 2035.665979] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2035.690877] Node 1 Normal: 24*4kB (UE) 37*8kB (U) 8*16kB (UE) 941*32kB (UME) 123*64kB (ME) 65*128kB (UME) 26*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53480kB [ 2035.713412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2035.740148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2035.762817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2035.790930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2035.815481] 15492 total pagecache pages [ 2035.823610] 0 pages in swap cache [ 2035.841206] Swap cache stats: add 0, delete 0, find 0/0 [ 2035.855939] Free swap = 0kB [ 2035.865158] Total swap = 0kB [ 2035.875916] 2097051 pages RAM [ 2035.885709] 0 pages HighMem/MovableOnly [ 2035.904505] 363849 pages reserved [ 2035.914242] 0 pages cma reserved [ 2035.932650] Out of memory: Kill process 13776 (syz-executor.3) score 1009 or sacrifice child [ 2035.956628] Killed process 13776 (syz-executor.3) total-vm:93648kB, anon-rss:37028kB, file-rss:34780kB, shmem-rss:0kB [ 2036.167052] kworker/1:2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=2, oom_score_adj=0 [ 2036.212944] kworker/1:2 cpuset=/ mems_allowed=0-1 [ 2036.226922] CPU: 1 PID: 13736 Comm: kworker/1:2 Not tainted 4.14.232-syzkaller #0 [ 2036.235177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2036.244642] Workqueue: events vhci_open_timeout [ 2036.249313] Call Trace: [ 2036.251921] dump_stack+0x1b2/0x281 [ 2036.255550] dump_header+0x178/0x82f [ 2036.259264] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2036.264376] ? ___ratelimit+0x2cd/0x530 [ 2036.268352] oom_kill_process.cold+0x10/0xa40 [ 2036.272954] ? lock_downgrade+0x740/0x740 [ 2036.277229] out_of_memory+0x2dc/0x1190 [ 2036.281553] ? oom_killer_disable+0x1c0/0x1c0 [ 2036.286158] ? mutex_trylock+0x152/0x1a0 [ 2036.290839] __alloc_pages_nodemask+0x23e1/0x2720 [ 2036.295741] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2036.303213] ? trace_hardirqs_on+0x10/0x10 [ 2036.307596] ? mark_held_locks+0xa6/0xf0 [ 2036.311692] ? cache_grow_begin+0x3f/0x700 [ 2036.318122] cache_grow_begin+0x91/0x700 [ 2036.322295] fallback_alloc+0x207/0x2c0 [ 2036.326620] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 2036.331398] hci_alloc_dev+0x3e/0x1c60 [ 2036.335282] __vhci_create_device+0xe9/0x540 [ 2036.339694] vhci_open_timeout+0x35/0x50 [ 2036.343762] process_one_work+0x793/0x14a0 [ 2036.347992] ? work_busy+0x320/0x320 [ 2036.351881] ? worker_thread+0x158/0xff0 [ 2036.356646] ? _raw_spin_unlock_irq+0x24/0x80 [ 2036.361154] worker_thread+0x5cc/0xff0 [ 2036.365041] ? rescuer_thread+0xc80/0xc80 [ 2036.369241] kthread+0x30d/0x420 [ 2036.372691] ? kthread_create_on_node+0xd0/0xd0 [ 2036.377449] ret_from_fork+0x24/0x30 [ 2036.385737] Mem-Info: [ 2036.388242] active_anon:216911 inactive_anon:1108290 isolated_anon:0 [ 2036.388242] active_file:3 inactive_file:33 isolated_file:0 [ 2036.388242] unevictable:37788 dirty:0 writeback:0 unstable:0 [ 2036.388242] slab_reclaimable:19892 slab_unreclaimable:142481 [ 2036.388242] mapped:56834 shmem:11023 pagetables:57209 bounce:0 [ 2036.388242] free:25004 free_pcp:161 free_cma:0 [ 2036.426833] Node 0 active_anon:729944kB inactive_anon:975320kB active_file:32kB inactive_file:20kB unevictable:93264kB isolated(anon):0kB isolated(file):0kB mapped:197992kB dirty:0kB writeback:0kB shmem:31480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2036.460427] Node 1 active_anon:137700kB inactive_anon:3457840kB active_file:0kB inactive_file:112kB unevictable:57888kB isolated(anon):0kB isolated(file):0kB mapped:29344kB dirty:0kB writeback:0kB shmem:12612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2036.497900] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4496kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2036.536866] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2036.542332] Node 0 DMA32 free:35760kB min:36200kB low:45248kB high:54296kB active_anon:729924kB inactive_anon:970824kB active_file:32kB inactive_file:20kB unevictable:93072kB writepending:0kB present:3129332kB managed:2788128kB mlocked:93072kB kernel_stack:25600kB pagetables:63120kB bounce:0kB free_pcp:128kB local_pcp:4kB free_cma:0kB [ 2036.580105] lowmem_reserve[]: 0 0 0 0 0 [ 2036.584427] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2036.617227] lowmem_reserve[]: 0 0 0 0 0 [ 2036.621690] Node 1 Normal free:53052kB min:53696kB low:67120kB high:80544kB active_anon:137700kB inactive_anon:3457840kB active_file:112kB inactive_file:56kB unevictable:57984kB writepending:0kB present:4194304kB managed:4128256kB mlocked:57984kB kernel_stack:51232kB pagetables:165604kB bounce:0kB free_pcp:608kB local_pcp:456kB free_cma:0kB [ 2036.659984] lowmem_reserve[]: 0 0 0 0 0 [ 2036.664401] Node 0 DMA: 10*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 2036.688168] Node 0 DMA32: 1286*4kB (U) 1081*8kB (UE) 499*16kB (UE) 439*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35824kB [ 2036.708928] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2036.722551] Node 1 Normal: 105*4kB (UME) 59*8kB (UM) 24*16kB (UME) 908*32kB (UME) 123*64kB (ME) 65*128kB (UME) 26*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53180kB [ 2036.745459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2036.754858] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2036.770663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2036.787441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2036.804613] 15469 total pagecache pages [ 2036.810861] 0 pages in swap cache [ 2036.814341] Swap cache stats: add 0, delete 0, find 0/0 [ 2036.827281] Free swap = 0kB [ 2036.830315] Total swap = 0kB [ 2036.833329] 2097051 pages RAM [ 2036.845023] 0 pages HighMem/MovableOnly [ 2036.851393] 363849 pages reserved [ 2036.855048] 0 pages cma reserved [ 2036.866867] Out of memory: Kill process 13777 (syz-executor.3) score 1009 or sacrifice child [ 2036.875699] Killed process 13777 (syz-executor.3) total-vm:93648kB, anon-rss:37028kB, file-rss:34780kB, shmem-rss:0kB [ 2036.971370] oom_reaper: reaped process 13777 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2036.986470] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2037.011066] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2037.015874] CPU: 0 PID: 7973 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 2037.023541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2037.033230] Call Trace: [ 2037.036167] dump_stack+0x1b2/0x281 [ 2037.040161] dump_header+0x178/0x82f [ 2037.044076] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2037.049494] ? ___ratelimit+0x2cd/0x530 [ 2037.054010] oom_kill_process.cold+0x10/0xa40 [ 2037.058828] out_of_memory+0xe3e/0x1190 [ 2037.062808] ? oom_killer_disable+0x1c0/0x1c0 [ 2037.067325] ? mutex_trylock+0x152/0x1a0 [ 2037.071403] __alloc_pages_nodemask+0x23e1/0x2720 [ 2037.077570] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2037.082702] alloc_pages_current+0x155/0x260 [ 2037.087108] filemap_fault+0x11a1/0x1ad0 [ 2037.091596] ext4_filemap_fault+0x84/0xb0 [ 2037.095776] __do_fault+0xfa/0x380 [ 2037.099318] __handle_mm_fault+0x2497/0x4620 [ 2037.103957] ? vm_insert_page+0x7c0/0x7c0 [ 2037.108297] ? mark_held_locks+0xa6/0xf0 [ 2037.112749] handle_mm_fault+0x455/0x9c0 [ 2037.117475] __do_page_fault+0x549/0xad0 [ 2037.122147] ? spurious_fault+0x640/0x640 [ 2037.127572] ? do_page_fault+0x60/0x500 [ 2037.131850] ? page_fault+0x2f/0x50 [ 2037.136503] page_fault+0x45/0x50 [ 2037.140329] RIP: acf00:0xc000082360 [ 2037.144456] RSP: 03bd:000000c00003be40 EFLAGS: 00000003 [ 2037.147698] Mem-Info: [ 2037.163833] active_anon:216911 inactive_anon:1108272 isolated_anon:0 [ 2037.163833] active_file:1 inactive_file:21 isolated_file:0 [ 2037.163833] unevictable:37823 dirty:0 writeback:0 unstable:0 [ 2037.163833] slab_reclaimable:19891 slab_unreclaimable:142459 [ 2037.163833] mapped:56809 shmem:11023 pagetables:57169 bounce:0 [ 2037.163833] free:25183 free_pcp:77 free_cma:0 [ 2037.244497] Node 0 active_anon:729944kB inactive_anon:975300kB active_file:92kB inactive_file:0kB unevictable:93308kB isolated(anon):0kB isolated(file):0kB mapped:197992kB dirty:0kB writeback:0kB shmem:31480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2037.296218] Node 1 active_anon:137700kB inactive_anon:3457788kB active_file:12kB inactive_file:12kB unevictable:57984kB isolated(anon):0kB isolated(file):0kB mapped:29244kB dirty:0kB writeback:0kB shmem:12612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2037.523514] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4496kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2037.930981] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2038.028657] Node 0 DMA32 free:36136kB min:36200kB low:45248kB high:54296kB active_anon:729924kB inactive_anon:970804kB active_file:68kB inactive_file:36kB unevictable:93308kB writepending:0kB present:3129332kB managed:2788128kB mlocked:93308kB kernel_stack:25568kB pagetables:62960kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2038.094077] lowmem_reserve[]: 0 0 0 0 0 [ 2038.099833] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2038.138914] lowmem_reserve[]: 0 0 0 0 0 [ 2038.146295] Node 1 Normal free:59484kB min:53696kB low:67120kB high:80544kB active_anon:137704kB inactive_anon:3466588kB active_file:512kB inactive_file:12kB unevictable:41856kB writepending:0kB present:4194304kB managed:4128256kB mlocked:41888kB kernel_stack:51232kB pagetables:165604kB bounce:0kB free_pcp:744kB local_pcp:120kB free_cma:0kB [ 2038.205254] lowmem_reserve[]: 0 0 0 0 0 [ 2038.236217] Node 0 DMA: 10*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 2038.272159] Node 0 DMA32: 2124*4kB (UME) 1735*8kB (UME) 618*16kB (UME) 468*32kB (UME) 10*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 47880kB [ 2038.293019] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2038.309957] Node 1 Normal: 2004*4kB (UME) 616*8kB (UM) 189*16kB (UME) 950*32kB (UME) 123*64kB (ME) 65*128kB (UME) 26*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 69216kB [ 2038.376202] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2038.479356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2038.539424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2038.599701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2038.639481] 15697 total pagecache pages [ 2038.644879] 0 pages in swap cache [ 2038.667072] Swap cache stats: add 0, delete 0, find 0/0 [ 2038.672769] Free swap = 0kB [ 2038.676095] Total swap = 0kB [ 2038.788161] 2097051 pages RAM [ 2038.791472] 0 pages HighMem/MovableOnly [ 2038.795591] 363849 pages reserved [ 2038.831505] IPVS: ftp: loaded support on port[0] = 21 [ 2038.856418] 0 pages cma reserved [ 2038.860131] Out of memory (oom_kill_allocating_task): Kill process 7973 (syz-fuzzer) score 0 or sacrifice child [ 2038.881242] Killed process 17625 (syz-executor.0) total-vm:84924kB, anon-rss:68kB, file-rss:960kB, shmem-rss:0kB [ 2038.924040] oom_reaper: reaped process 17625 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 02:03:54 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000280)={r0, 0x4}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:03:54 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:03:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:03:54 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x2) mlockall(0x0) 02:03:54 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) [ 2039.387900] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2039.597583] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2041.189642] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2041.223186] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2041.258342] CPU: 0 PID: 7968 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 2041.265840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2041.275608] Call Trace: [ 2041.278492] dump_stack+0x1b2/0x281 [ 2041.282166] dump_header+0x178/0x82f [ 2041.285894] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2041.291013] ? ___ratelimit+0x2cd/0x530 [ 2041.295115] oom_kill_process.cold+0x10/0xa40 [ 2041.299850] out_of_memory+0xe3e/0x1190 [ 2041.303984] ? oom_killer_disable+0x1c0/0x1c0 [ 2041.308614] ? mutex_trylock+0x152/0x1a0 [ 2041.313009] __alloc_pages_nodemask+0x23e1/0x2720 [ 2041.318568] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2041.323920] alloc_pages_current+0x155/0x260 [ 2041.328350] filemap_fault+0x11a1/0x1ad0 [ 2041.332534] ext4_filemap_fault+0x84/0xb0 [ 2041.336790] __do_fault+0xfa/0x380 [ 2041.340918] __handle_mm_fault+0x2497/0x4620 [ 2041.345703] ? vm_insert_page+0x7c0/0x7c0 [ 2041.351306] ? mark_held_locks+0xa6/0xf0 [ 2041.356159] handle_mm_fault+0x455/0x9c0 [ 2041.360515] __do_page_fault+0x549/0xad0 [ 2041.364765] ? spurious_fault+0x640/0x640 [ 2041.368936] ? do_page_fault+0x60/0x500 [ 2041.372911] ? page_fault+0x2f/0x50 [ 2041.376633] page_fault+0x45/0x50 [ 2041.380137] RIP: 0000:0x947a7c [ 2041.383641] RSP: 0000:000000c00003df28 EFLAGS: 0043b6a0 [ 2041.398512] Mem-Info: [ 2041.415844] active_anon:216882 inactive_anon:1122378 isolated_anon:0 [ 2041.415844] active_file:4 inactive_file:6 isolated_file:0 [ 2041.415844] unevictable:32296 dirty:0 writeback:0 unstable:0 [ 2041.415844] slab_reclaimable:19757 slab_unreclaimable:142855 [ 2041.415844] mapped:49540 shmem:11023 pagetables:57138 bounce:0 [ 2041.415844] free:25148 free_pcp:0 free_cma:0 [ 2041.484865] Node 0 active_anon:729696kB inactive_anon:990196kB active_file:92kB inactive_file:0kB unevictable:86916kB isolated(anon):0kB isolated(file):0kB mapped:188620kB dirty:0kB writeback:0kB shmem:31480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2041.540188] Node 1 active_anon:137832kB inactive_anon:3499316kB active_file:24kB inactive_file:24kB unevictable:42268kB isolated(anon):0kB isolated(file):0kB mapped:9540kB dirty:0kB writeback:0kB shmem:12612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2041.586075] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4496kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2041.656778] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2041.672401] Node 0 DMA32 free:36140kB min:36200kB low:45248kB high:54296kB active_anon:729676kB inactive_anon:985700kB active_file:88kB inactive_file:4kB unevictable:86916kB writepending:0kB present:3129332kB managed:2788128kB mlocked:86916kB kernel_stack:25760kB pagetables:63264kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2041.789060] lowmem_reserve[]: 0 0 0 0 0 [ 2041.793504] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2041.899287] lowmem_reserve[]: 0 0 0 0 0 [ 2041.903700] Node 1 Normal free:53396kB min:53696kB low:67120kB high:80544kB active_anon:137832kB inactive_anon:3499316kB active_file:28kB inactive_file:20kB unevictable:42268kB writepending:0kB present:4194304kB managed:4128256kB mlocked:42268kB kernel_stack:51136kB pagetables:165176kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2042.038878] lowmem_reserve[]: 0 0 0 0 0 [ 2042.065812] Node 0 DMA: 10*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 2042.114903] Node 0 DMA32: 1265*4kB (UME) 920*8kB (UME) 564*16kB (UME) 461*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36196kB [ 2042.130671] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2042.144071] Node 1 Normal: 1723*4kB (UME) 1789*8kB (UM) 88*16kB (UME) 662*32kB (UME) 2*64kB (ME) 24*128kB (UME) 26*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53652kB [ 2042.161130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2042.171984] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2042.196242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2042.256534] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2042.265738] 16759 total pagecache pages [ 2042.329744] 0 pages in swap cache [ 2042.333910] Swap cache stats: add 0, delete 0, find 0/0 [ 2042.345083] Free swap = 0kB [ 2042.355452] Total swap = 0kB [ 2042.358887] 2097051 pages RAM [ 2042.362142] 0 pages HighMem/MovableOnly [ 2042.389717] 363849 pages reserved [ 2042.393625] 0 pages cma reserved [ 2042.409705] Out of memory (oom_kill_allocating_task): Kill process 7968 (syz-fuzzer) score 0 or sacrifice child [ 2042.437775] Killed process 17309 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:532kB, shmem-rss:0kB [ 2042.485711] oom_reaper: reaped process 17309 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2042.584398] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2042.603441] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2042.608865] CPU: 1 PID: 7974 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 2042.617231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2042.628584] Call Trace: [ 2042.631227] dump_stack+0x1b2/0x281 [ 2042.635218] dump_header+0x178/0x82f [ 2042.639411] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2042.645057] ? ___ratelimit+0x2cd/0x530 [ 2042.649233] oom_kill_process.cold+0x10/0xa40 [ 2042.654724] out_of_memory+0xe3e/0x1190 [ 2042.659235] ? oom_killer_disable+0x1c0/0x1c0 [ 2042.664274] ? mutex_trylock+0x152/0x1a0 [ 2042.669147] __alloc_pages_nodemask+0x23e1/0x2720 [ 2042.674408] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2042.679287] alloc_pages_current+0x155/0x260 [ 2042.684062] filemap_fault+0x11a1/0x1ad0 [ 2042.688179] ext4_filemap_fault+0x84/0xb0 [ 2042.692432] __do_fault+0xfa/0x380 [ 2042.696083] __handle_mm_fault+0x2497/0x4620 [ 2042.700997] ? vm_insert_page+0x7c0/0x7c0 [ 2042.705255] ? __might_fault+0x177/0x1b0 [ 2042.709661] ? mark_held_locks+0xa6/0xf0 [ 2042.714360] handle_mm_fault+0x455/0x9c0 [ 2042.718849] __do_page_fault+0x549/0xad0 [ 2042.723107] ? spurious_fault+0x640/0x640 [ 2042.727425] ? do_page_fault+0x60/0x500 [ 2042.731574] ? page_fault+0x2f/0x50 [ 2042.736337] page_fault+0x45/0x50 [ 2042.740264] RIP: b9c540:0x635485 [ 2042.743730] RSP: 9972d0:000000c00042f990 EFLAGS: 00a48738 [ 2042.969710] Mem-Info: [ 2042.989895] active_anon:216881 inactive_anon:1122377 isolated_anon:0 [ 2042.989895] active_file:506 inactive_file:1966 isolated_file:0 [ 2042.989895] unevictable:32142 dirty:0 writeback:0 unstable:0 [ 2042.989895] slab_reclaimable:19681 slab_unreclaimable:142891 [ 2042.989895] mapped:42511 shmem:11023 pagetables:57129 bounce:0 [ 2042.989895] free:31358 free_pcp:371 free_cma:0 [ 2043.076208] Node 0 active_anon:729648kB inactive_anon:990188kB active_file:1980kB inactive_file:7964kB unevictable:86356kB isolated(anon):0kB isolated(file):0kB mapped:160516kB dirty:0kB writeback:0kB shmem:31472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2043.103854] systemd[1]: Started Journal Service. [ 2043.150000] Node 1 active_anon:137828kB inactive_anon:3532216kB active_file:3224kB inactive_file:6112kB unevictable:164kB isolated(anon):0kB isolated(file):0kB mapped:6676kB dirty:0kB writeback:0kB shmem:12612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2043.193193] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4496kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2043.238916] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2043.244934] Node 0 DMA32 free:75472kB min:36200kB low:45248kB high:54296kB active_anon:729696kB inactive_anon:985792kB active_file:15996kB inactive_file:7856kB unevictable:55356kB writepending:48kB present:3129332kB managed:2788128kB mlocked:55384kB kernel_stack:25536kB pagetables:62940kB bounce:0kB free_pcp:876kB local_pcp:240kB free_cma:0kB [ 2043.285004] lowmem_reserve[]: 0 0 0 0 0 [ 2043.292723] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2043.321644] lowmem_reserve[]: 0 0 0 0 0 [ 2043.328125] Node 1 Normal free:86740kB min:53696kB low:67120kB high:80544kB active_anon:137660kB inactive_anon:3499316kB active_file:9140kB inactive_file:120kB unevictable:72kB writepending:0kB present:4194304kB managed:4128256kB mlocked:4kB kernel_stack:51104kB pagetables:165140kB bounce:0kB free_pcp:1400kB local_pcp:704kB free_cma:0kB [ 2043.368360] lowmem_reserve[]: 0 0 0 0 0 [ 2043.372975] Node 0 DMA: 10*4kB (UME) 11*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 2043.395606] Node 0 DMA32: 3516*4kB (UME) 2746*8kB (UME) 1514*16kB (UME) 483*32kB (UME) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 76032kB [ 2043.419229] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2043.433374] Node 1 Normal: 3381*4kB (UME) 2722*8kB (UM) 508*16kB (UME) 906*32kB (UME) 53*64kB (ME) 34*128kB (UME) 26*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 86820kB [ 2043.461416] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2043.472907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2043.488063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2043.498157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2043.509335] 19502 total pagecache pages [ 2043.511535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2043.514251] 0 pages in swap cache [ 2043.530875] Swap cache stats: add 0, delete 0, find 0/0 [ 2043.531037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2043.538131] Free swap = 0kB [ 2043.553703] Total swap = 0kB [ 2043.560091] 2097051 pages RAM [ 2043.566535] 0 pages HighMem/MovableOnly [ 2043.572074] 363849 pages reserved [ 2043.573124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2043.577048] 0 pages cma reserved [ 2043.592336] Out of memory (oom_kill_allocating_task): Kill process 7974 (syz-fuzzer) score 0 or sacrifice child [ 2043.593889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2043.604421] Killed process 14886 (syz-executor.4) total-vm:84924kB, anon-rss:60kB, file-rss:524kB, shmem-rss:0kB [ 2043.640221] device bridge_slave_1 left promiscuous mode [ 2043.659329] oom_reaper: reaped process 14886 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2043.666812] bridge0: port 2(bridge_slave_1) entered disabled state [ 2043.757880] device bridge_slave_0 left promiscuous mode [ 2043.777293] bridge0: port 1(bridge_slave_0) entered disabled state [ 2043.819413] device veth1_macvtap left promiscuous mode [ 2043.854722] device veth0_macvtap left promiscuous mode [ 2043.866819] device veth1_vlan left promiscuous mode [ 2043.874613] device veth0_vlan left promiscuous mode [ 2043.988371] device hsr_slave_1 left promiscuous mode [ 2044.013191] device hsr_slave_0 left promiscuous mode [ 2044.040751] team0 (unregistering): Port device team_slave_1 removed [ 2044.069793] team0 (unregistering): Port device team_slave_0 removed [ 2044.091376] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2044.118865] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2044.174375] bond0 (unregistering): Released all slaves [ 2045.270040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2045.300366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2045.320273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2045.336805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2045.348179] device bridge_slave_1 left promiscuous mode [ 2045.363562] bridge0: port 2(bridge_slave_1) entered disabled state [ 2045.379018] device bridge_slave_0 left promiscuous mode [ 2045.385995] bridge0: port 1(bridge_slave_0) entered disabled state [ 2045.405782] device veth1_macvtap left promiscuous mode [ 2045.414949] device veth0_macvtap left promiscuous mode [ 2045.426643] device veth1_vlan left promiscuous mode [ 2045.434473] device veth0_vlan left promiscuous mode [ 2045.523094] device hsr_slave_1 left promiscuous mode [ 2045.539005] device hsr_slave_0 left promiscuous mode [ 2045.565568] team0 (unregistering): Port device team_slave_1 removed [ 2045.579402] team0 (unregistering): Port device team_slave_0 removed [ 2045.591967] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2045.604594] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2045.630459] bond0 (unregistering): Released all slaves [ 2046.145587] IPVS: ftp: loaded support on port[0] = 21 [ 2046.249720] chnl_net:caif_netlink_parms(): no params data found [ 2046.346982] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.354614] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.363467] device bridge_slave_0 entered promiscuous mode [ 2046.372867] bridge0: port 2(bridge_slave_1) entered blocking state [ 2046.380218] bridge0: port 2(bridge_slave_1) entered disabled state [ 2046.387759] device bridge_slave_1 entered promiscuous mode [ 2046.409050] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2046.419429] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2046.440353] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2046.448653] team0: Port device team_slave_0 added [ 2046.454752] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2046.463306] team0: Port device team_slave_1 added [ 2046.481355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2046.489094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2046.519772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2046.534227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2046.541318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2046.568719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2046.580966] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2046.590153] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2046.611616] device hsr_slave_0 entered promiscuous mode [ 2046.619247] device hsr_slave_1 entered promiscuous mode [ 2046.628041] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2046.636295] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2046.710122] bridge0: port 2(bridge_slave_1) entered blocking state [ 2046.717457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2046.725080] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.732515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2046.763815] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2046.771374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2046.782529] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2046.793129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2046.800742] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.808290] bridge0: port 2(bridge_slave_1) entered disabled state [ 2046.818968] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2046.825664] 8021q: adding VLAN 0 to HW filter on device team0 [ 2046.835817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2046.846087] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.852703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2046.863665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2046.871891] bridge0: port 2(bridge_slave_1) entered blocking state [ 2046.878789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2046.895285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2046.905047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2046.915741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2046.929887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2046.941016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2046.952979] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2046.960375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2046.968431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2046.977099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2046.990344] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2046.998642] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2047.005374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2047.013000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2047.018333] Bluetooth: hci3 command 0x0409 tx timeout [ 2047.025534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2047.082894] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2047.094840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2047.128442] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2047.137407] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2047.145207] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2047.163865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2047.173909] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2047.184622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2047.195100] device veth0_vlan entered promiscuous mode [ 2047.205860] device veth1_vlan entered promiscuous mode [ 2047.213174] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2047.223241] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2047.237820] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2047.249378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2047.257992] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2047.267714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2047.277810] device veth0_macvtap entered promiscuous mode [ 2047.284220] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2047.293488] device veth1_macvtap entered promiscuous mode [ 2047.300821] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2047.310308] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2047.319892] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2047.331010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2047.340386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2047.350793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.360678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2047.371012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.380664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2047.391199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.401630] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2047.409189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2047.417115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2047.425028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2047.435724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2047.445818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.455723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2047.465744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.475605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2047.485592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.495969] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2047.503012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2047.510413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2047.518536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:04:03 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) 02:04:03 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x1405, 0x2, 0x70bd2b, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x42) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000040)={0x0, 0x4}) 02:04:03 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=""/101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x8a, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4b70d77c2e9a0058404f435a4ca7c238634024dcfc5eb0366617d66b4b677c09f0f5725903ff33aa786e331471a51730e57f1a37cd2b7ae17b4bb6417b510f3c2d506015d16ee142008f77fd8e283320b68df5a1f746dc4e1d9d06883ef0bc10"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x10) mlockall(0x3) mlockall(0x6) 02:04:03 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:04:03 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:04:03 executing program 0: mlockall(0x7) mlockall(0x3) mlockall(0x5) mlockall(0x6) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) mlockall(0x4) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x262400, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1d, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="183300e959dfdfad000100000000000000000000000d811000100000", @ANYBLOB="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", @ANYBLOB="00000000000100000765fcff04000000"], &(0x7f0000000040)='syzkaller\x00', 0x200, 0x27, &(0x7f0000000080)=""/39, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x100007, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xb, 0x3580000, 0x8}, 0x10}, 0x78) 02:04:04 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 2049.086332] Bluetooth: hci3 command 0x041b tx timeout 02:04:04 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:04:04 executing program 0: mlockall(0x7) mlockall(0x3) fork() mlockall(0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1406, 0x20, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c841}, 0x8000) clock_gettime(0x5, &(0x7f0000000000)) sched_getattr(0x0, 0x0, 0x0, 0x0) [ 2049.911045] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 2050.010632] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2050.015833] CPU: 1 PID: 18021 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 2050.023742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2050.033116] Call Trace: [ 2050.035727] dump_stack+0x1b2/0x281 [ 2050.039395] dump_header+0x178/0x82f [ 2050.043130] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2050.048479] ? ___ratelimit+0x2cd/0x530 [ 2050.052476] oom_kill_process.cold+0x10/0xa40 [ 2050.056993] out_of_memory+0xe3e/0x1190 [ 2050.061075] ? oom_killer_disable+0x1c0/0x1c0 [ 2050.066085] ? mutex_trylock+0x152/0x1a0 [ 2050.070157] __alloc_pages_nodemask+0x23e1/0x2720 [ 2050.075030] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2050.079905] alloc_pages_current+0x155/0x260 [ 2050.084957] filemap_fault+0x11a1/0x1ad0 [ 2050.089342] ext4_filemap_fault+0x84/0xb0 [ 2050.093940] __do_fault+0xfa/0x380 [ 2050.097592] __handle_mm_fault+0x2497/0x4620 [ 2050.102116] ? lock_downgrade+0x740/0x740 [ 2050.106632] ? vm_insert_page+0x7c0/0x7c0 [ 2050.111178] ? do_raw_spin_unlock+0x164/0x220 [ 2050.115905] ? mark_held_locks+0xa6/0xf0 [ 2050.120305] handle_mm_fault+0x455/0x9c0 [ 2050.124772] __get_user_pages+0x4e9/0x1270 [ 2050.129891] ? follow_page_mask+0x18a0/0x18a0 [ 2050.135262] ? lock_acquire+0x170/0x3f0 [ 2050.139529] populate_vma_page_range+0x17b/0x210 [ 2050.144531] __mm_populate+0x195/0x2c0 [ 2050.149280] ? populate_vma_page_range+0x210/0x210 [ 2050.154640] ? security_capable+0x88/0xb0 [ 2050.159125] SyS_mlockall+0x3ff/0x520 [ 2050.163134] ? SyS_munlock+0xf0/0xf0 [ 2050.166950] do_syscall_64+0x1d5/0x640 [ 2050.170871] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2050.176081] RIP: 0033:0x4665f9 [ 2050.179272] RSP: 002b:00007f6714345188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2050.187728] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665f9 [ 2050.195002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2050.202370] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 2050.209646] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2050.217624] R13: 00007ffdd2939eaf R14: 00007f6714345300 R15: 0000000000022000 [ 2050.226444] Mem-Info: [ 2050.229847] active_anon:216964 inactive_anon:1134352 isolated_anon:0 [ 2050.229847] active_file:10 inactive_file:20 isolated_file:0 [ 2050.229847] unevictable:20504 dirty:0 writeback:0 unstable:0 [ 2050.229847] slab_reclaimable:19299 slab_unreclaimable:142014 [ 2050.229847] mapped:47406 shmem:11020 pagetables:57283 bounce:0 [ 2050.229847] free:25052 free_pcp:32 free_cma:0 [ 2050.265432] Node 0 active_anon:729964kB inactive_anon:1017752kB active_file:0kB inactive_file:68kB unevictable:75644kB isolated(anon):0kB isolated(file):0kB mapped:169952kB dirty:0kB writeback:0kB shmem:31468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2050.295992] Node 1 active_anon:137892kB inactive_anon:3519656kB active_file:40kB inactive_file:12kB unevictable:6372kB isolated(anon):0kB isolated(file):0kB mapped:19672kB dirty:0kB writeback:0kB shmem:12612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2050.326768] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4492kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2050.354549] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2050.381698] Node 0 DMA32 free:36152kB min:36200kB low:45248kB high:54296kB active_anon:729944kB inactive_anon:1013260kB active_file:32kB inactive_file:36kB unevictable:75672kB writepending:0kB present:3129332kB managed:2788128kB mlocked:75672kB kernel_stack:25920kB pagetables:63912kB bounce:0kB free_pcp:132kB local_pcp:8kB free_cma:0kB [ 2050.555150] lowmem_reserve[]: 0 0 0 0 0 [ 2050.576953] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2050.760149] lowmem_reserve[]: 0 0 0 0 0 [ 2050.786598] Node 1 Normal free:52996kB min:53696kB low:67120kB high:80544kB active_anon:137892kB inactive_anon:3519656kB active_file:128kB inactive_file:0kB unevictable:6372kB writepending:0kB present:4194304kB managed:4128256kB mlocked:6372kB kernel_stack:51264kB pagetables:165108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2051.008225] lowmem_reserve[]: 0 0 0 0 0 [ 2051.012691] Node 0 DMA: 9*4kB (UME) 12*8kB (UME) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11060kB [ 2051.035755] Node 0 DMA32: 1446*4kB (UME) 108*8kB (UE) 750*16kB (UME) 541*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36152kB [ 2051.052752] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2051.064905] Node 1 Normal: 1431*4kB (UME) 1413*8kB (UM) 486*16kB (UME) 793*32kB (UME) 42*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52996kB [ 2051.083826] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2051.097669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2051.107692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2051.118528] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2051.133317] 14015 total pagecache pages [ 2051.138198] 0 pages in swap cache [ 2051.142223] Swap cache stats: add 0, delete 0, find 0/0 [ 2051.147669] Free swap = 0kB [ 2051.150715] Total swap = 0kB [ 2051.153774] 2097051 pages RAM [ 2051.196232] Bluetooth: hci3 command 0x040f tx timeout [ 2051.202734] 0 pages HighMem/MovableOnly [ 2051.226017] 363849 pages reserved [ 2051.242987] 0 pages cma reserved [ 2051.262695] Out of memory (oom_kill_allocating_task): Kill process 18021 (syz-executor.3) score 0 or sacrifice child [ 2051.329479] Killed process 18015 (syz-executor.3) total-vm:93384kB, anon-rss:188kB, file-rss:36608kB, shmem-rss:0kB [ 2051.430648] oom_reaper: reaped process 18015 (syz-executor.3), now anon-rss:236kB, file-rss:3648kB, shmem-rss:0kB [ 2051.539775] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2051.625872] systemd-journal cpuset=/ mems_allowed=0-1 [ 2051.654224] CPU: 1 PID: 17617 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 2051.662234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2051.671593] Call Trace: [ 2051.674186] dump_stack+0x1b2/0x281 [ 2051.677815] dump_header+0x178/0x82f [ 2051.681532] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2051.686633] ? ___ratelimit+0x2cd/0x530 [ 2051.690607] oom_kill_process.cold+0x10/0xa40 [ 2051.695115] out_of_memory+0xe3e/0x1190 [ 2051.699096] ? oom_killer_disable+0x1c0/0x1c0 [ 2051.703595] ? mutex_trylock+0x152/0x1a0 [ 2051.707657] __alloc_pages_nodemask+0x23e1/0x2720 [ 2051.712510] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2051.717396] alloc_pages_current+0x155/0x260 [ 2051.721812] filemap_fault+0x11a1/0x1ad0 [ 2051.725882] ext4_filemap_fault+0x84/0xb0 [ 2051.730029] __do_fault+0xfa/0x380 [ 2051.733570] __handle_mm_fault+0x2497/0x4620 [ 2051.738077] ? vm_insert_page+0x7c0/0x7c0 [ 2051.742274] ? mark_held_locks+0xa6/0xf0 [ 2051.746354] handle_mm_fault+0x455/0x9c0 [ 2051.750416] __do_page_fault+0x549/0xad0 [ 2051.754520] ? spurious_fault+0x640/0x640 [ 2051.758668] ? do_page_fault+0x60/0x500 [ 2051.762905] ? page_fault+0x2f/0x50 [ 2051.766531] page_fault+0x45/0x50 [ 2051.770075] RIP: 0001:0xffffffffffffffff [ 2051.774126] RSP: 68a121e0:00007ffdd76fc080 EFLAGS: 7ffdd76fbe90 [ 2052.254378] Mem-Info: [ 2052.281594] active_anon:216964 inactive_anon:1134352 isolated_anon:0 [ 2052.281594] active_file:60 inactive_file:0 isolated_file:0 [ 2052.281594] unevictable:20497 dirty:0 writeback:0 unstable:0 [ 2052.281594] slab_reclaimable:19299 slab_unreclaimable:141960 [ 2052.281594] mapped:47406 shmem:11020 pagetables:57283 bounce:0 [ 2052.281594] free:24974 free_pcp:0 free_cma:0 [ 2052.402669] Node 0 active_anon:729964kB inactive_anon:1017852kB active_file:792kB inactive_file:752kB unevictable:73316kB isolated(anon):0kB isolated(file):0kB mapped:168652kB dirty:0kB writeback:0kB shmem:31468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2052.435206] Node 1 active_anon:137892kB inactive_anon:3519656kB active_file:120kB inactive_file:0kB unevictable:6148kB isolated(anon):0kB isolated(file):0kB mapped:19584kB dirty:0kB writeback:0kB shmem:12612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2052.468949] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4492kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2052.570690] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2052.575769] Node 0 DMA32 free:36452kB min:36200kB low:45248kB high:54296kB active_anon:729944kB inactive_anon:1013360kB active_file:420kB inactive_file:116kB unevictable:73420kB writepending:0kB present:3129332kB managed:2788128kB mlocked:73348kB kernel_stack:25824kB pagetables:63912kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2052.656255] lowmem_reserve[]: 0 0 0 0 0 [ 2052.660372] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2052.736264] lowmem_reserve[]: 0 0 0 0 0 [ 2052.746203] Node 1 Normal free:53656kB min:53696kB low:67120kB high:80544kB active_anon:137892kB inactive_anon:3519656kB active_file:120kB inactive_file:0kB unevictable:6148kB writepending:0kB present:4194304kB managed:4128256kB mlocked:6196kB kernel_stack:51168kB pagetables:165108kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2052.836193] lowmem_reserve[]: 0 0 0 0 0 [ 2052.850461] Node 0 DMA: 9*4kB (UME) 12*8kB (UME) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11060kB [ 2052.936243] Node 0 DMA32: 1214*4kB (UME) 202*8kB (UME) 754*16kB (UME) 549*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36296kB [ 2052.981160] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2053.022427] Node 1 Normal: 2050*4kB (UME) 1443*8kB (UM) 508*16kB (UME) 810*32kB (UME) 42*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56608kB [ 2053.039825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2053.048793] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2053.057500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2053.066448] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2053.077774] 13593 total pagecache pages [ 2053.081758] 0 pages in swap cache [ 2053.085199] Swap cache stats: add 0, delete 0, find 0/0 [ 2053.090706] Free swap = 0kB [ 2053.093719] Total swap = 0kB [ 2053.096814] 2097051 pages RAM [ 2053.099911] 0 pages HighMem/MovableOnly [ 2053.103983] 363849 pages reserved [ 2053.109835] 0 pages cma reserved [ 2053.113204] Out of memory (oom_kill_allocating_task): Kill process 17617 (systemd-journal) score 0 or sacrifice child [ 2053.124311] Killed process 17617 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1632kB [ 2053.246405] Bluetooth: hci3 command 0x0419 tx timeout [ 2054.244732] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2054.323674] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2054.620359] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2054.627549] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2054.635034] systemd[1]: Stopped Journal Service. [ 2054.653028] systemd[1]: Starting Journal Service... 02:04:10 executing program 2: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:04:10 executing program 3: ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x0, "1de82fe7199005625360800f179602995e987bb117f7323d5057a85037a4ed30f7c30b0c708179575a68fdec8083063a7036a93f752928812c9f477c38bd5beb0295b082448394f802409ed4a4fa194237eb003e4417a6dc585750d962993fe6ce68436d055ae178706abcc530369f8f814394e9ff5521f46f2e071a9394cf02"}) mlockall(0x7) mlockall(0x3) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7bb}, 0x80, 0x1ff, 0x5, 0x8, 0x5bf7, 0x9009, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xf) 02:04:10 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) mlockall(0x7) mlockall(0x3) fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 2055.347304] IPVS: ftp: loaded support on port[0] = 21 [ 2056.148130] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 2056.164955] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2056.173317] CPU: 0 PID: 4625 Comm: systemd-udevd Not tainted 4.14.232-syzkaller #0 [ 2056.181036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2056.190506] Call Trace: [ 2056.193114] dump_stack+0x1b2/0x281 [ 2056.196745] dump_header+0x178/0x82f [ 2056.200467] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2056.205764] ? ___ratelimit+0x2cd/0x530 [ 2056.209738] oom_kill_process.cold+0x10/0xa40 [ 2056.214257] ? lock_downgrade+0x740/0x740 [ 2056.218955] out_of_memory+0x2dc/0x1190 [ 2056.222970] ? oom_killer_disable+0x1c0/0x1c0 [ 2056.227833] ? mutex_trylock+0x152/0x1a0 [ 2056.231924] __alloc_pages_nodemask+0x23e1/0x2720 [ 2056.236971] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2056.241989] alloc_pages_current+0x155/0x260 [ 2056.246419] filemap_fault+0x11a1/0x1ad0 [ 2056.250578] ext4_filemap_fault+0x84/0xb0 [ 2056.254721] __do_fault+0xfa/0x380 [ 2056.258248] __handle_mm_fault+0x2497/0x4620 [ 2056.262657] ? vm_insert_page+0x7c0/0x7c0 [ 2056.266799] ? lock_downgrade+0x740/0x740 [ 2056.270940] ? __fdget+0x167/0x1f0 [ 2056.274582] ? mark_held_locks+0xa6/0xf0 [ 2056.278639] handle_mm_fault+0x455/0x9c0 [ 2056.282688] __do_page_fault+0x549/0xad0 [ 2056.286744] ? spurious_fault+0x640/0x640 [ 2056.290884] ? do_page_fault+0x60/0x500 [ 2056.294858] ? page_fault+0x2f/0x50 [ 2056.298467] page_fault+0x45/0x50 [ 2056.301918] RIP: 0000:0x55b55d1ba8c0 [ 2056.305613] RSP: 5d27fae0:00007ffdb3045350 EFLAGS: 55b55d1ba8a0 [ 2056.308756] Mem-Info: [ 2056.317650] active_anon:216781 inactive_anon:1134374 isolated_anon:0 [ 2056.317650] active_file:24 inactive_file:7 isolated_file:0 [ 2056.317650] unevictable:14857 dirty:0 writeback:0 unstable:0 [ 2056.317650] slab_reclaimable:19282 slab_unreclaimable:141800 [ 2056.317650] mapped:51049 shmem:11020 pagetables:57299 bounce:0 [ 2056.317650] free:25040 free_pcp:0 free_cma:0 [ 2056.353925] Node 0 active_anon:729844kB inactive_anon:1017836kB active_file:120kB inactive_file:0kB unevictable:58856kB isolated(anon):0kB isolated(file):0kB mapped:179952kB dirty:0kB writeback:0kB shmem:31468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2056.387778] Node 1 active_anon:137280kB inactive_anon:3519660kB active_file:4kB inactive_file:0kB unevictable:576kB isolated(anon):0kB isolated(file):0kB mapped:24248kB dirty:0kB writeback:0kB shmem:12612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2056.417197] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4492kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2056.447680] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2056.457283] Node 0 DMA32 free:35868kB min:36200kB low:45248kB high:54296kB active_anon:729824kB inactive_anon:1013344kB active_file:120kB inactive_file:0kB unevictable:58856kB writepending:0kB present:3129332kB managed:2788128kB mlocked:58856kB kernel_stack:26048kB pagetables:64152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2056.494154] lowmem_reserve[]: 0 0 0 0 0 [ 2056.498646] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2056.531274] lowmem_reserve[]: 0 0 0 0 0 [ 2056.537062] Node 1 Normal free:53276kB min:53696kB low:67120kB high:80544kB active_anon:137280kB inactive_anon:3519660kB active_file:12kB inactive_file:0kB unevictable:576kB writepending:0kB present:4194304kB managed:4128256kB mlocked:576kB kernel_stack:51104kB pagetables:164932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2056.570490] lowmem_reserve[]: 0 0 0 0 0 [ 2056.574841] Node 0 DMA: 9*4kB (UME) 12*8kB (UME) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11060kB [ 2056.593123] Node 0 DMA32: 1370*4kB (UME) 1153*8kB (UME) 199*16kB (UME) 536*32kB (UME) 12*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36064kB [ 2056.610432] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2056.621404] Node 1 Normal: 2470*4kB (ME) 702*8kB (UM) 522*16kB (UME) 830*32kB (UME) 46*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53480kB [ 2056.638619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2056.648583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2056.663631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2056.673506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2056.690341] 11925 total pagecache pages [ 2056.694380] 0 pages in swap cache [ 2056.698470] Swap cache stats: add 0, delete 0, find 0/0 [ 2056.703840] Free swap = 0kB [ 2056.711176] Total swap = 0kB [ 2056.714244] 2097051 pages RAM [ 2056.717535] 0 pages HighMem/MovableOnly [ 2056.721597] 363849 pages reserved [ 2056.725044] 0 pages cma reserved [ 2056.733261] Out of memory: Kill process 13778 (syz-executor.3) score 1009 or sacrifice child [ 2056.742543] Killed process 13778 (syz-executor.3) total-vm:93648kB, anon-rss:37028kB, file-rss:34680kB, shmem-rss:0kB [ 2056.801342] oom_reaper: reaped process 13778 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2056.820929] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2056.846793] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2056.853045] CPU: 1 PID: 18027 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 2056.861463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2056.871084] Call Trace: [ 2056.873706] dump_stack+0x1b2/0x281 [ 2056.877349] dump_header+0x178/0x82f [ 2056.881520] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2056.886917] ? ___ratelimit+0x2cd/0x530 [ 2056.891088] oom_kill_process.cold+0x10/0xa40 [ 2056.895744] out_of_memory+0xe3e/0x1190 [ 2056.899743] ? oom_killer_disable+0x1c0/0x1c0 [ 2056.904341] ? mutex_trylock+0x152/0x1a0 [ 2056.908454] __alloc_pages_nodemask+0x23e1/0x2720 [ 2056.913324] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2056.918331] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2056.923726] ? mark_held_locks+0xa6/0xf0 [ 2056.927807] ? cache_grow_begin+0x3f/0x700 [ 2056.932162] cache_grow_begin+0x91/0x700 [ 2056.936381] fallback_alloc+0x207/0x2c0 [ 2056.942519] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 2056.947316] ipv6_add_dev.part.0+0x4b8/0xf70 [ 2056.951841] addrconf_notify+0x85d/0x1c20 [ 2056.956005] ? dropmon_net_event+0x254/0x440 [ 2056.960445] ? nf_tables_netdev_init_net+0x140/0x140 [ 2056.965570] ? wait_for_completion_io+0x10/0x10 [ 2056.970352] ? inet6_ifinfo_notify+0x130/0x130 [ 2056.975031] ? ip6mr_device_event+0x174/0x1e0 [ 2056.979628] ? rtnl_is_locked+0x5/0x20 [ 2056.983804] notifier_call_chain+0x108/0x1a0 [ 2056.988266] register_netdevice+0xb98/0xe40 [ 2056.992608] ? netdev_change_features+0xa0/0xa0 [ 2056.997393] ? alloc_netdev_mqs+0x8c0/0xb70 [ 2057.001765] __ip_tunnel_create+0x338/0x4a0 [ 2057.006101] ? lock_acquire+0x170/0x3f0 [ 2057.010261] ? ip_tunnel_xmit+0x33a0/0x33a0 [ 2057.014871] ip_tunnel_init_net+0x247/0x4f0 [ 2057.019215] ? ip_tunnel_add+0x2a0/0x2a0 [ 2057.023645] ? ipgre_tap_exit_net+0x1e0/0x1e0 [ 2057.028195] ops_init+0xaa/0x3e0 [ 2057.032297] setup_net+0x22f/0x530 [ 2057.035846] ? rtnl_net_dumpid_one+0x240/0x240 [ 2057.040453] ? kmem_cache_alloc+0x35f/0x3c0 [ 2057.044911] copy_net_ns+0x19b/0x440 [ 2057.048645] create_new_namespaces+0x375/0x720 [ 2057.053243] unshare_nsproxy_namespaces+0xa1/0x1d0 [ 2057.058197] SyS_unshare+0x308/0x7f0 [ 2057.061915] ? walk_process_tree+0x2a0/0x2a0 [ 2057.067120] ? task_work_run+0xfd/0x190 [ 2057.071108] ? do_syscall_64+0x4c/0x640 [ 2057.077427] ? walk_process_tree+0x2a0/0x2a0 [ 2057.082474] do_syscall_64+0x1d5/0x640 [ 2057.086369] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2057.091655] RIP: 0033:0x467ba7 [ 2057.094863] RSP: 002b:00007ffeddf71c28 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 2057.102933] RAX: ffffffffffffffda RBX: 00007ffeddf72248 RCX: 0000000000467ba7 [ 2057.110423] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000040000000 [ 2057.117698] RBP: 00007ffeddf71ce0 R08: 0000000000000000 R09: 0000000000000000 [ 2057.125001] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000ffffffff [ 2057.134078] R13: 000000000056ca68 R14: 0000000000000000 R15: 00000000000000f8 [ 2057.152020] Mem-Info: [ 2057.154596] active_anon:216781 inactive_anon:1134317 isolated_anon:0 [ 2057.154596] active_file:11 inactive_file:6 isolated_file:16 [ 2057.154596] unevictable:14858 dirty:0 writeback:0 unstable:0 [ 2057.154596] slab_reclaimable:19282 slab_unreclaimable:141800 [ 2057.154596] mapped:51050 shmem:11020 pagetables:57259 bounce:0 [ 2057.154596] free:25128 free_pcp:138 free_cma:0 [ 2057.194097] Node 0 active_anon:729844kB inactive_anon:1017764kB active_file:40kB inactive_file:24kB unevictable:58856kB isolated(anon):0kB isolated(file):64kB mapped:179952kB dirty:0kB writeback:0kB shmem:31468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2057.225633] Node 1 active_anon:137280kB inactive_anon:3519504kB active_file:4kB inactive_file:0kB unevictable:576kB isolated(anon):0kB isolated(file):0kB mapped:24248kB dirty:0kB writeback:0kB shmem:12612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2057.253738] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4492kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2057.281832] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2057.287083] Node 0 DMA32 free:35972kB min:36200kB low:45248kB high:54296kB active_anon:729824kB inactive_anon:1013272kB active_file:40kB inactive_file:24kB unevictable:58856kB writepending:0kB present:3129332kB managed:2788128kB mlocked:58856kB kernel_stack:26016kB pagetables:63992kB bounce:0kB free_pcp:396kB local_pcp:0kB free_cma:0kB [ 2057.318528] lowmem_reserve[]: 0 0 0 0 0 [ 2057.322534] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2057.348661] Bluetooth: hci4 command 0x0409 tx timeout [ 2057.351843] lowmem_reserve[]: 0 0 0 0 0 [ 2057.358623] Node 1 Normal free:53480kB min:53696kB low:67120kB high:80544kB active_anon:137280kB inactive_anon:3519504kB active_file:0kB inactive_file:4kB unevictable:576kB writepending:0kB present:4194304kB managed:4128256kB mlocked:576kB kernel_stack:51104kB pagetables:164932kB bounce:0kB free_pcp:156kB local_pcp:156kB free_cma:0kB [ 2057.389513] lowmem_reserve[]: 0 0 0 0 0 [ 2057.394367] Node 0 DMA: 9*4kB (UME) 12*8kB (UME) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11060kB [ 2057.415674] Node 0 DMA32: 1369*4kB (ME) 1152*8kB (ME) 198*16kB (UME) 534*32kB (UME) 12*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35972kB [ 2057.440459] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2057.457455] Node 1 Normal: 2470*4kB (ME) 702*8kB (UM) 522*16kB (UME) 830*32kB (UME) 46*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53480kB [ 2057.476081] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2057.491903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2057.503509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2057.519199] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2057.530314] 11925 total pagecache pages [ 2057.534303] 0 pages in swap cache [ 2057.541760] Swap cache stats: add 0, delete 0, find 0/0 [ 2057.549575] Free swap = 0kB [ 2057.552876] Total swap = 0kB [ 2057.556052] 2097051 pages RAM [ 2057.563783] 0 pages HighMem/MovableOnly [ 2057.570702] 363849 pages reserved [ 2057.574912] 0 pages cma reserved [ 2057.582816] Out of memory (oom_kill_allocating_task): Kill process 18027 (syz-executor.5) score 0 or sacrifice child [ 2057.610902] Killed process 18027 (syz-executor.5) total-vm:93120kB, anon-rss:80kB, file-rss:34800kB, shmem-rss:0kB [ 2057.663798] oom_reaper: reaped process 18027 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2057.692710] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2057.717197] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2057.722044] CPU: 1 PID: 26709 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 2057.729924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2057.739414] Call Trace: [ 2057.742096] dump_stack+0x1b2/0x281 [ 2057.745740] dump_header+0x178/0x82f [ 2057.749461] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2057.754568] ? ___ratelimit+0x2cd/0x530 [ 2057.758660] oom_kill_process.cold+0x10/0xa40 [ 2057.763188] out_of_memory+0xe3e/0x1190 [ 2057.767180] ? oom_killer_disable+0x1c0/0x1c0 [ 2057.771686] ? mutex_trylock+0x152/0x1a0 [ 2057.775764] __alloc_pages_nodemask+0x23e1/0x2720 [ 2057.780740] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2057.785745] alloc_pages_current+0x155/0x260 [ 2057.790170] filemap_fault+0x11a1/0x1ad0 [ 2057.794248] ext4_filemap_fault+0x84/0xb0 [ 2057.798753] __do_fault+0xfa/0x380 [ 2057.802319] __handle_mm_fault+0x2497/0x4620 [ 2057.806737] ? vm_insert_page+0x7c0/0x7c0 [ 2057.810895] ? mark_held_locks+0xa6/0xf0 [ 2057.814957] handle_mm_fault+0x455/0x9c0 [ 2057.819027] __do_page_fault+0x549/0xad0 [ 2057.823095] ? spurious_fault+0x640/0x640 [ 2057.827260] ? do_page_fault+0x60/0x500 [ 2057.831264] ? page_fault+0x2f/0x50 [ 2057.834997] page_fault+0x45/0x50 [ 2057.838825] RIP: 6e6300:0x1def9e3430b [ 2057.842619] RSP: 03e7:000000c000971e40 EFLAGS: 00000003 [ 2057.859885] Mem-Info: [ 2057.890916] active_anon:216781 inactive_anon:1134317 isolated_anon:0 [ 2057.890916] active_file:17 inactive_file:3 isolated_file:0 [ 2057.890916] unevictable:14858 dirty:0 writeback:0 unstable:0 [ 2057.890916] slab_reclaimable:19282 slab_unreclaimable:141850 [ 2057.890916] mapped:51050 shmem:11020 pagetables:57259 bounce:0 [ 2057.890916] free:25063 free_pcp:170 free_cma:0 [ 2057.943416] Node 0 active_anon:729844kB inactive_anon:1017764kB active_file:0kB inactive_file:80kB unevictable:58856kB isolated(anon):0kB isolated(file):0kB mapped:179952kB dirty:0kB writeback:0kB shmem:31468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2057.994992] Node 1 active_anon:137280kB inactive_anon:3519504kB active_file:0kB inactive_file:32kB unevictable:576kB isolated(anon):0kB isolated(file):0kB mapped:24248kB dirty:0kB writeback:0kB shmem:12612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2058.038535] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4492kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2058.094818] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2058.112447] Node 0 DMA32 free:35504kB min:36200kB low:45248kB high:54296kB active_anon:729772kB inactive_anon:1013272kB active_file:164kB inactive_file:0kB unevictable:58856kB writepending:0kB present:3129332kB managed:2788128kB mlocked:58856kB kernel_stack:25856kB pagetables:63844kB bounce:0kB free_pcp:704kB local_pcp:324kB free_cma:0kB [ 2058.158382] lowmem_reserve[]: 0 0 0 0 0 [ 2058.163044] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2058.204232] lowmem_reserve[]: 0 0 0 0 0 [ 2058.214422] Node 1 Normal free:53480kB min:53696kB low:67120kB high:80544kB active_anon:137276kB inactive_anon:3519504kB active_file:0kB inactive_file:4kB unevictable:576kB writepending:0kB present:4194304kB managed:4128256kB mlocked:576kB kernel_stack:51072kB pagetables:164932kB bounce:0kB free_pcp:164kB local_pcp:4kB free_cma:0kB [ 2058.259136] lowmem_reserve[]: 0 0 0 0 0 [ 2058.263183] Node 0 DMA: 9*4kB (UME) 12*8kB (UME) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11060kB [ 2058.293722] Node 0 DMA32: 1370*4kB (UME) 1152*8kB (ME) 199*16kB (UMEH) 522*32kB (UMEH) 11*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35544kB [ 2058.324295] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2058.346504] Node 1 Normal: 2470*4kB (ME) 701*8kB (UM) 522*16kB (UME) 831*32kB (UME) 46*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53504kB [ 2058.371589] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2058.384364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2058.396984] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2058.405872] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2058.445324] 11925 total pagecache pages [ 2058.449596] 0 pages in swap cache [ 2058.453056] Swap cache stats: add 0, delete 0, find 0/0 [ 2058.471026] Free swap = 0kB [ 2058.474262] Total swap = 0kB [ 2058.483662] 2097051 pages RAM [ 2058.489271] 0 pages HighMem/MovableOnly [ 2058.493253] 363849 pages reserved [ 2058.503005] 0 pages cma reserved [ 2058.508686] Out of memory (oom_kill_allocating_task): Kill process 26709 (syz-fuzzer) score 0 or sacrifice child [ 2058.526021] Killed process 17714 (syz-executor.0) total-vm:84924kB, anon-rss:60kB, file-rss:48kB, shmem-rss:0kB [ 2058.602766] oom_reaper: reaped process 17714 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2058.670381] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2058.696020] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2058.701764] CPU: 1 PID: 7989 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 2058.709567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2058.719272] Call Trace: [ 2058.721916] dump_stack+0x1b2/0x281 [ 2058.725747] dump_header+0x178/0x82f [ 2058.729647] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2058.735038] ? ___ratelimit+0x2cd/0x530 [ 2058.739731] oom_kill_process.cold+0x10/0xa40 [ 2058.744254] out_of_memory+0xe3e/0x1190 [ 2058.748354] ? oom_killer_disable+0x1c0/0x1c0 [ 2058.753025] ? mutex_trylock+0x152/0x1a0 [ 2058.757181] __alloc_pages_nodemask+0x23e1/0x2720 [ 2058.762148] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2058.767005] ? cache_grow_begin+0x3f/0x700 [ 2058.771260] cache_grow_begin+0x91/0x700 [ 2058.775538] fallback_alloc+0x207/0x2c0 [ 2058.779526] kmem_cache_alloc+0x1e5/0x3c0 [ 2058.783692] getname_flags+0xc8/0x550 [ 2058.787932] ? timespec_trunc+0x120/0x120 [ 2058.792094] do_sys_open+0x1ce/0x410 [ 2058.795821] ? filp_open+0x60/0x60 [ 2058.799545] ? __do_page_fault+0x159/0xad0 [ 2058.803871] ? do_syscall_64+0x4c/0x640 [ 2058.808035] ? SyS_open+0x30/0x30 [ 2058.811493] do_syscall_64+0x1d5/0x640 [ 2058.815393] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2058.820584] RIP: 0033:0x466138 [ 2058.823769] RSP: 002b:00007fffd7040bf0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 2058.832888] RAX: ffffffffffffffda RBX: 000000000000558b RCX: 0000000000466138 [ 2058.840249] RDX: 0000000000090800 RSI: 00000000004bebe2 RDI: 00000000ffffff9c [ 2058.847523] RBP: 00007fffd7040ccc R08: 0000000000090800 R09: 00000000004bebe2 [ 2058.855410] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 [ 2058.862790] R13: 00000000001f5e73 R14: 0000000000000002 R15: 00007fffd7040d30 02:04:14 executing program 0: mlockall(0x7) mlockall(0x0) fork() fork() sched_getattr(0x0, 0x0, 0x0, 0x0) [ 2059.096005] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2059.266749] Mem-Info: [ 2059.274519] active_anon:216875 inactive_anon:1127181 isolated_anon:0 [ 2059.274519] active_file:1388 inactive_file:4838 isolated_file:11 [ 2059.274519] unevictable:14295 dirty:28 writeback:0 unstable:0 [ 2059.274519] slab_reclaimable:19307 slab_unreclaimable:142014 [ 2059.274519] mapped:39288 shmem:11020 pagetables:57062 bounce:0 [ 2059.274519] free:36363 free_pcp:553 free_cma:0 [ 2059.317080] systemd-journald[18028]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2059.366959] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2059.406886] Node 0 active_anon:730084kB inactive_anon:1019532kB active_file:4104kB inactive_file:17904kB unevictable:56328kB isolated(anon):0kB isolated(file):44kB mapped:139168kB dirty:108kB writeback:0kB shmem:36468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2059.436763] Node 1 active_anon:137216kB inactive_anon:3494192kB active_file:2348kB inactive_file:1484kB unevictable:552kB isolated(anon):0kB isolated(file):0kB mapped:18884kB dirty:4kB writeback:0kB shmem:12612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2059.466084] Node 0 DMA free:11080kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4472kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2059.493183] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2059.498378] Node 0 DMA32 free:64524kB min:36200kB low:45248kB high:54296kB active_anon:729868kB inactive_anon:1018124kB active_file:4028kB inactive_file:18088kB unevictable:56828kB writepending:108kB present:3129332kB managed:2788128kB mlocked:56828kB kernel_stack:25568kB pagetables:63364kB bounce:0kB free_pcp:1272kB local_pcp:672kB free_cma:0kB [ 2059.531631] lowmem_reserve[]: 0 0 0 0 0 [ 2059.536231] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2059.564711] lowmem_reserve[]: 0 0 0 0 0 [ 2059.572318] Node 1 Normal free:83208kB min:53696kB low:67120kB high:80544kB active_anon:137216kB inactive_anon:3494192kB active_file:2412kB inactive_file:1484kB unevictable:552kB writepending:4kB present:4194304kB managed:4128256kB mlocked:552kB kernel_stack:51040kB pagetables:164772kB bounce:0kB free_pcp:1032kB local_pcp:684kB free_cma:0kB [ 2059.609012] lowmem_reserve[]: 0 0 0 0 0 [ 2059.613030] Node 0 DMA: 14*4kB (UME) 12*8kB (UME) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11080kB [ 2059.668958] Node 0 DMA32: 2874*4kB (UMEH) 2550*8kB (UMEH) 861*16kB (UEH) 477*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 60936kB [ 2059.697002] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2059.716634] Node 1 Normal: 3089*4kB (UME) 2768*8kB (UM) 873*16kB (UME) 996*32kB (UME) 102*64kB (UM) 6*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 87636kB [ 2059.732037] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2059.742160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2059.751018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2059.760264] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2059.769263] 19796 total pagecache pages [ 2059.781700] 0 pages in swap cache [ 2059.785161] Swap cache stats: add 0, delete 0, find 0/0 [ 2059.791080] Free swap = 0kB [ 2059.794267] Total swap = 0kB [ 2059.797710] 2097051 pages RAM [ 2059.800853] 0 pages HighMem/MovableOnly [ 2059.805363] 363849 pages reserved [ 2059.809894] 0 pages cma reserved [ 2059.813276] Out of memory (oom_kill_allocating_task): Kill process 7989 (syz-executor.2) score 0 or sacrifice child [ 2059.838955] systemd[1]: Started Journal Service. [ 2059.895103] Killed process 14506 (syz-executor.2) total-vm:93516kB, anon-rss:36900kB, file-rss:34680kB, shmem-rss:0kB [ 2061.165574] IPVS: ftp: loaded support on port[0] = 21 [ 2061.453132] chnl_net:caif_netlink_parms(): no params data found [ 2061.716841] bridge0: port 1(bridge_slave_0) entered blocking state [ 2061.723314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2061.731348] device bridge_slave_0 entered promiscuous mode [ 2061.743358] bridge0: port 2(bridge_slave_1) entered blocking state [ 2061.752009] bridge0: port 2(bridge_slave_1) entered disabled state [ 2061.760861] device bridge_slave_1 entered promiscuous mode [ 2061.790288] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2061.800069] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2061.819132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2061.825888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2061.836101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2061.843552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2061.852189] device bridge_slave_1 left promiscuous mode [ 2061.858332] bridge0: port 2(bridge_slave_1) entered disabled state [ 2061.865714] device bridge_slave_0 left promiscuous mode [ 2061.873388] bridge0: port 1(bridge_slave_0) entered disabled state [ 2061.883531] device veth1_macvtap left promiscuous mode [ 2061.890195] device veth0_macvtap left promiscuous mode [ 2061.895555] device veth1_vlan left promiscuous mode [ 2061.901943] device veth0_vlan left promiscuous mode [ 2062.012027] device hsr_slave_1 left promiscuous mode [ 2062.022404] device hsr_slave_0 left promiscuous mode [ 2062.043781] team0 (unregistering): Port device team_slave_1 removed [ 2062.061919] team0 (unregistering): Port device team_slave_0 removed [ 2062.072638] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2062.087916] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2062.119379] bond0 (unregistering): Released all slaves [ 2062.151322] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2062.161161] team0: Port device team_slave_0 added [ 2062.171006] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2062.179924] team0: Port device team_slave_1 added [ 2062.207641] Bluetooth: hci3 command 0x0409 tx timeout [ 2062.249172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2062.277985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2062.420411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2062.486747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2062.493316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2062.586199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2062.639499] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2062.678693] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2062.728605] device hsr_slave_0 entered promiscuous mode [ 2062.746499] device hsr_slave_1 entered promiscuous mode [ 2062.760466] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2062.786882] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2063.010579] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2063.054907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2063.083109] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2063.093937] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2063.103504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2063.119135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2063.141260] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2063.148138] 8021q: adding VLAN 0 to HW filter on device team0 [ 2063.173814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2063.186828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2063.197277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2063.205475] bridge0: port 1(bridge_slave_0) entered blocking state [ 2063.212184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2063.249012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2063.257012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2063.264601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2063.273556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2063.281784] bridge0: port 2(bridge_slave_1) entered blocking state [ 2063.288231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2063.302610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2063.311352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2063.325548] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2063.334338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2063.348386] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2063.357011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2063.364887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2063.378856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2063.389849] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2063.399175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2063.410112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2063.425785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2063.439757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2063.450955] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2063.461387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2063.470164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2063.490443] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2063.499470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2063.511467] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2063.521339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2063.529954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2063.546910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2063.650248] IPVS: ftp: loaded support on port[0] = 21 [ 2063.718055] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2063.739738] IPVS: ftp: loaded support on port[0] = 21 [ 2063.757071] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2063.764216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2063.776530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2064.206394] Bluetooth: hci4 command 0x0409 tx timeout [ 2064.286585] Bluetooth: hci5 command 0x0409 tx timeout [ 2064.292083] Bluetooth: hci3 command 0x041b tx timeout [ 2064.333380] chnl_net:caif_netlink_parms(): no params data found [ 2065.718990] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2065.733932] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2066.148508] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2066.172347] chnl_net:caif_netlink_parms(): no params data found [ 2066.213954] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2066.251960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2066.267422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2066.286286] Bluetooth: hci4 command 0x041b tx timeout [ 2066.291016] syz-executor.0: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 2066.304060] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2066.309543] CPU: 1 PID: 18100 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 2066.317870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2066.327244] Call Trace: [ 2066.329942] dump_stack+0x1b2/0x281 [ 2066.333697] warn_alloc.cold+0x96/0x1cc [ 2066.337892] ? zone_watermark_ok_safe+0x220/0x220 [ 2066.342929] ? wake_all_kswapds+0x175/0x360 [ 2066.347268] __alloc_pages_nodemask+0x2127/0x2720 [ 2066.352168] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2066.357195] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 2066.362232] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2066.366278] Bluetooth: hci3 command 0x040f tx timeout [ 2066.367178] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2066.376743] Bluetooth: hci5 command 0x041b tx timeout [ 2066.377647] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2066.388858] ? calc_wheel_index+0xb1/0x1c0 [ 2066.393105] ? cache_alloc_refill+0x2fa/0x350 [ 2066.397617] ? ____cache_alloc_node+0x156/0x1d0 [ 2066.402312] cache_grow_begin+0x91/0x700 [ 2066.406734] fallback_alloc+0x207/0x2c0 [ 2066.410826] __kmalloc+0x213/0x400 [ 2066.414384] ? batadv_hash_new+0xaa/0x270 [ 2066.418552] batadv_hash_new+0xaa/0x270 [ 2066.422533] ? batadv_bla_status_update+0x2b0/0x2b0 [ 2066.427654] batadv_dat_init+0x61/0x170 [ 2066.431627] batadv_mesh_init+0x4a8/0x630 [ 2066.435953] batadv_softif_init_late+0xa26/0xc90 [ 2066.440711] ? batadv_get_strings+0x40/0x40 [ 2066.445030] ? dev_valid_name+0x1a0/0x1a0 [ 2066.449306] ? batadv_get_strings+0x40/0x40 [ 2066.453637] register_netdevice+0x291/0xe40 [ 2066.458051] ? netdev_change_features+0xa0/0xa0 [ 2066.462723] ? rtnl_create_link+0x129/0x890 [ 2066.467059] rtnl_newlink+0x14ff/0x1860 [ 2066.471136] ? rtnl_newlink+0x43d/0x1860 [ 2066.475221] ? mark_held_locks+0xa6/0xf0 [ 2066.479278] ? rtnl_dellink+0x6a0/0x6a0 [ 2066.483269] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2066.488304] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2066.492843] ? rtnl_dellink+0x6a0/0x6a0 [ 2066.497498] rtnetlink_rcv_msg+0x3be/0xb10 [ 2066.501762] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2066.506260] ? __netlink_lookup+0x345/0x5d0 [ 2066.510697] netlink_rcv_skb+0x125/0x390 [ 2066.514760] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2066.519269] ? netlink_ack+0x9a0/0x9a0 [ 2066.524029] netlink_unicast+0x437/0x610 [ 2066.528277] ? netlink_sendskb+0xd0/0xd0 [ 2066.532341] ? __check_object_size+0x179/0x230 [ 2066.536946] netlink_sendmsg+0x62e/0xb80 [ 2066.541023] ? nlmsg_notify+0x170/0x170 [ 2066.545000] ? security_socket_sendmsg+0x83/0xb0 [ 2066.549775] ? nlmsg_notify+0x170/0x170 [ 2066.553841] sock_sendmsg+0xb5/0x100 [ 2066.557564] SyS_sendto+0x1c7/0x2c0 [ 2066.561213] ? SyS_getpeername+0x220/0x220 [ 2066.565445] ? vm_insert_page+0x7c0/0x7c0 [ 2066.569621] ? up_read+0x17/0x30 [ 2066.573612] ? __do_page_fault+0x159/0xad0 [ 2066.577930] ? do_syscall_64+0x4c/0x640 [ 2066.581948] ? SyS_getpeername+0x220/0x220 [ 2066.586175] do_syscall_64+0x1d5/0x640 [ 2066.590160] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2066.595363] RIP: 0033:0x41958c [ 2066.598548] RSP: 002b:00007fffcc7d4320 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2066.606337] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041958c [ 2066.615427] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 2066.622696] RBP: 0000000000000000 R08: 00007fffcc7d4374 R09: 000000000000000c [ 2066.630743] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2066.638004] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 2066.645283] Mem-Info: [ 2066.647709] active_anon:216949 inactive_anon:1129202 isolated_anon:0 [ 2066.647709] active_file:493 inactive_file:700 isolated_file:82 [ 2066.647709] unevictable:13824 dirty:5 writeback:0 unstable:0 [ 2066.647709] slab_reclaimable:18972 slab_unreclaimable:143389 [ 2066.647709] mapped:53627 shmem:13076 pagetables:57001 bounce:0 [ 2066.647709] free:27150 free_pcp:120 free_cma:0 [ 2066.682810] Node 0 active_anon:730432kB inactive_anon:1022736kB active_file:1968kB inactive_file:2796kB unevictable:55296kB isolated(anon):0kB isolated(file):328kB mapped:152028kB dirty:16kB writeback:0kB shmem:39692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2066.712426] Node 1 active_anon:137364kB inactive_anon:3494072kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62480kB dirty:4kB writeback:0kB shmem:12612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2066.739753] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:4472kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2066.766832] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2066.771860] Node 0 DMA32 free:43624kB min:36200kB low:45248kB high:54296kB active_anon:730412kB inactive_anon:1018264kB active_file:2336kB inactive_file:2540kB unevictable:55296kB writepending:16kB present:3129332kB managed:2788128kB mlocked:55296kB kernel_stack:25696kB pagetables:63112kB bounce:0kB free_pcp:480kB local_pcp:120kB free_cma:0kB [ 2066.802433] lowmem_reserve[]: 0 0 0 0 0 [ 2066.807051] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2066.832927] lowmem_reserve[]: 0 0 0 0 0 [ 2066.836932] Node 1 Normal free:53920kB min:53696kB low:67120kB high:80544kB active_anon:137364kB inactive_anon:3494072kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:51072kB pagetables:164780kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2066.866095] lowmem_reserve[]: 0 0 0 0 0 [ 2066.870084] Node 0 DMA: 14*4kB (UME) 9*8kB (UME) 7*16kB (UE) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 2066.885959] Node 0 DMA32: 925*4kB (MEH) 1648*8kB (UMEH) 609*16kB (UMEH) 523*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43364kB [ 2066.899977] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2066.910712] Node 1 Normal: 3046*4kB (UMEH) 979*8kB (UMH) 755*16kB (MEH) 476*32kB (UMEH) 103*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53920kB [ 2066.925542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2066.934396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2066.943073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2066.951920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2066.960489] 14324 total pagecache pages [ 2066.964477] 0 pages in swap cache [ 2066.968005] Swap cache stats: add 0, delete 0, find 0/0 [ 2066.973361] Free swap = 0kB [ 2066.976361] Total swap = 0kB [ 2066.979516] 2097051 pages RAM [ 2066.982616] 0 pages HighMem/MovableOnly [ 2066.986573] 363849 pages reserved [ 2066.990019] 0 pages cma reserved [ 2066.997794] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 2067.007997] ------------[ cut here ]------------ [ 2067.012763] WARNING: CPU: 1 PID: 18100 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 2067.021858] Kernel panic - not syncing: panic_on_warn set ... [ 2067.021858] [ 2067.029310] CPU: 1 PID: 18100 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 2067.037188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2067.046540] Call Trace: [ 2067.049142] dump_stack+0x1b2/0x281 [ 2067.052777] panic+0x1f9/0x42d [ 2067.055966] ? add_taint.cold+0x16/0x16 [ 2067.059937] ? debug_print_object.cold+0xa7/0xdb [ 2067.064703] ? debug_print_object.cold+0xa7/0xdb [ 2067.069624] __warn.cold+0x20/0x44 [ 2067.073223] ? ist_end_non_atomic+0x10/0x10 [ 2067.077652] ? debug_print_object.cold+0xa7/0xdb [ 2067.082423] report_bug+0x208/0x250 [ 2067.086412] do_error_trap+0x195/0x2d0 [ 2067.090301] ? math_error+0x2d0/0x2d0 [ 2067.094102] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2067.099046] invalid_op+0x1b/0x40 [ 2067.102511] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 2067.107969] RSP: 0000:ffff8882272af248 EFLAGS: 00010086 [ 2067.113956] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 2067.121238] RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed1044e55e3f [ 2067.129896] RBP: ffffffff878b6e80 R08: 0000000000000061 R09: 0000000000000001 [ 2067.137840] R10: 0000000000000000 R11: ffff888096dee340 R12: 0000000000000000 [ 2067.145561] R13: 0000000000000000 R14: ffff88809bace4b0 R15: 1ffff11044e55e52 [ 2067.153659] ? debug_print_object.cold+0xa7/0xdb [ 2067.158535] debug_object_assert_init+0x1d3/0x2d0 [ 2067.164240] ? debug_object_active_state+0x330/0x330 [ 2067.169451] ? rtnl_newlink+0x14ff/0x1860 [ 2067.173854] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 2067.178351] ? netlink_rcv_skb+0x125/0x390 [ 2067.182605] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2067.188407] del_timer+0x5d/0xe0 [ 2067.191775] ? process_timeout+0x20/0x20 [ 2067.195956] try_to_grab_pending+0x243/0x610 [ 2067.200464] __cancel_work_timer+0x90/0x460 [ 2067.205456] ? work_on_cpu_safe+0x70/0x70 [ 2067.209745] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 2067.214684] batadv_nc_mesh_free+0x41/0x120 [ 2067.219027] batadv_mesh_free+0x70/0x150 [ 2067.223706] batadv_mesh_init+0x561/0x630 [ 2067.228227] batadv_softif_init_late+0xa26/0xc90 [ 2067.233614] ? batadv_get_strings+0x40/0x40 [ 2067.238654] ? dev_valid_name+0x1a0/0x1a0 [ 2067.243525] ? batadv_get_strings+0x40/0x40 [ 2067.247998] register_netdevice+0x291/0xe40 [ 2067.252528] ? netdev_change_features+0xa0/0xa0 [ 2067.257823] ? rtnl_create_link+0x129/0x890 [ 2067.262511] rtnl_newlink+0x14ff/0x1860 [ 2067.266855] ? rtnl_newlink+0x43d/0x1860 [ 2067.270946] ? mark_held_locks+0xa6/0xf0 [ 2067.275023] ? rtnl_dellink+0x6a0/0x6a0 [ 2067.279001] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2067.285688] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2067.290229] ? rtnl_dellink+0x6a0/0x6a0 [ 2067.294224] rtnetlink_rcv_msg+0x3be/0xb10 [ 2067.298471] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2067.302994] ? __netlink_lookup+0x345/0x5d0 [ 2067.307423] netlink_rcv_skb+0x125/0x390 [ 2067.311584] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2067.316088] ? netlink_ack+0x9a0/0x9a0 [ 2067.320014] netlink_unicast+0x437/0x610 [ 2067.324083] ? netlink_sendskb+0xd0/0xd0 [ 2067.328172] ? __check_object_size+0x179/0x230 [ 2067.332954] netlink_sendmsg+0x62e/0xb80 [ 2067.337174] ? nlmsg_notify+0x170/0x170 [ 2067.341492] ? security_socket_sendmsg+0x83/0xb0 [ 2067.346289] ? nlmsg_notify+0x170/0x170 [ 2067.350274] sock_sendmsg+0xb5/0x100 [ 2067.354190] SyS_sendto+0x1c7/0x2c0 [ 2067.357861] ? SyS_getpeername+0x220/0x220 [ 2067.362396] ? vm_insert_page+0x7c0/0x7c0 [ 2067.366660] ? up_read+0x17/0x30 [ 2067.372033] ? __do_page_fault+0x159/0xad0 [ 2067.376306] ? do_syscall_64+0x4c/0x640 [ 2067.380802] ? SyS_getpeername+0x220/0x220 [ 2067.385051] do_syscall_64+0x1d5/0x640 [ 2067.389297] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2067.394534] RIP: 0033:0x41958c [ 2067.397755] RSP: 002b:00007fffcc7d4320 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2067.407815] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041958c [ 2067.415292] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 2067.423547] RBP: 0000000000000000 R08: 00007fffcc7d4374 R09: 000000000000000c [ 2067.430942] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2067.438234] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 2067.448434] Kernel Offset: disabled [ 2067.452233] Rebooting in 86400 seconds..