0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:25:30 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000020b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:25:30 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd4b, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:25:30 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x1f00}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:25:30 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd40, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2544.434904] IPVS: ftp: loaded support on port[0] = 21 [ 2544.582242] IPVS: ftp: loaded support on port[0] = 21 [ 2544.626910] IPVS: ftp: loaded support on port[0] = 21 22:25:31 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000021b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2544.693253] IPVS: ftp: loaded support on port[0] = 21 22:25:31 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000eb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:25:31 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000fb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:25:31 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000023b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2545.838546] IPVS: ftp: loaded support on port[0] = 21 22:25:32 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000010b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2546.412078] IPVS: ftp: loaded support on port[0] = 21 [ 2546.802503] syz-executor.2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2546.823780] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2546.833171] CPU: 1 PID: 14023 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 2546.841067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2546.850415] Call Trace: [ 2546.852997] dump_stack+0x1fc/0x2ef [ 2546.856617] dump_header+0x15d/0xc3f [ 2546.860324] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2546.865414] ? ___ratelimit+0x319/0x590 [ 2546.869490] oom_kill_process.cold+0x10/0x692 [ 2546.873977] ? check_preemption_disabled+0x41/0x280 [ 2546.878989] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2546.884252] out_of_memory+0x1072/0x1390 [ 2546.888304] ? oom_killer_disable+0x270/0x270 [ 2546.892880] ? mutex_trylock+0x15f/0x1a0 [ 2546.896938] __alloc_pages_nodemask+0x23a2/0x2890 [ 2546.901781] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2546.906611] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2546.911462] ? ____cache_alloc_node+0x156/0x1d0 [ 2546.916118] ? cache_grow_begin+0x64/0x8a0 [ 2546.920353] cache_grow_begin+0xa4/0x8a0 [ 2546.924408] fallback_alloc+0x213/0x2e0 [ 2546.928373] kmem_cache_alloc+0x1e4/0x370 [ 2546.932512] getname_flags+0xce/0x590 [ 2546.936317] user_path_mountpoint_at+0x23/0x40 [ 2546.940886] ksys_umount+0x156/0x1070 [ 2546.944691] ? blkcg_maybe_throttle_current+0x56c/0xc10 [ 2546.950054] ? lock_downgrade+0x720/0x720 [ 2546.954193] ? task_work_run+0x64/0x1c0 [ 2546.958158] ? __detach_mounts+0x470/0x470 [ 2546.962380] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2546.967210] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2546.971691] ? task_work_run+0x126/0x1c0 [ 2546.975740] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2546.981089] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2546.986096] __x64_sys_umount+0x50/0x70 [ 2546.990061] do_syscall_64+0xf9/0x620 [ 2546.993939] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2546.999125] RIP: 0033:0x7f58729bff57 [ 2547.002826] Code: Bad RIP value. [ 2547.006176] RSP: 002b:00007ffcf5abd8d8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 2547.013965] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f58729bff57 [ 2547.021314] RDX: 00007ffcf5abd9a9 RSI: 000000000000000a RDI: 00007ffcf5abd9a0 [ 2547.028584] RBP: 00007ffcf5abd9a0 R08: 00000000ffffffff R09: 00007ffcf5abd770 [ 2547.035838] R10: 00005555565e1903 R11: 0000000000000206 R12: 00007f5872a180bd [ 2547.043093] R13: 00007ffcf5abea60 R14: 00005555565e1810 R15: 00007ffcf5abeaa0 [ 2547.075605] Mem-Info: [ 2547.078380] active_anon:147685 inactive_anon:1285862 isolated_anon:0 [ 2547.078380] active_file:42 inactive_file:434 isolated_file:26 [ 2547.078380] unevictable:0 dirty:2 writeback:1 unstable:0 [ 2547.078380] slab_reclaimable:19600 slab_unreclaimable:127133 [ 2547.078380] mapped:1330169 shmem:1294703 pagetables:16291 bounce:0 [ 2547.078380] free:25362 free_pcp:37 free_cma:0 [ 2547.134679] Node 0 active_anon:529900kB inactive_anon:1409912kB active_file:464kB inactive_file:1500kB unevictable:0kB isolated(anon):0kB isolated(file):76kB mapped:1535520kB dirty:8kB writeback:4kB shmem:1422752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2547.204971] Node 1 active_anon:60840kB inactive_anon:3733536kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3785256kB dirty:0kB writeback:0kB shmem:3756060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2547.242466] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2292kB inactive_anon:2148kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2547.275625] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2547.281712] Node 0 DMA32 free:36648kB min:35996kB low:44992kB high:53988kB active_anon:527608kB inactive_anon:1407764kB active_file:140kB inactive_file:28kB unevictable:0kB writepending:12kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13920kB pagetables:30256kB bounce:0kB free_pcp:1588kB local_pcp:172kB free_cma:0kB [ 2547.327519] lowmem_reserve[]: 0 0 1 1 1 [ 2547.337227] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2547.369922] lowmem_reserve[]: 0 0 0 0 0 [ 2547.374039] Node 1 Normal free:53668kB min:53876kB low:67344kB high:80812kB active_anon:60840kB inactive_anon:3733536kB active_file:4kB inactive_file:204kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:13952kB pagetables:34816kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 2547.410330] lowmem_reserve[]: 0 0 0 0 0 [ 2547.414453] Node 0 DMA: 13*4kB (UMEH) 17*8kB (UMEH) 16*16kB (UEH) 11*32kB (UMH) 5*64kB (MH) 3*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10972kB [ 2547.438324] Node 0 DMA32: 178*4kB (UMEH) 857*8kB (UMH) 520*16kB (UMH) 646*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36560kB [ 2547.464658] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2547.512561] Node 1 Normal: 376*4kB (UME) 277*8kB (UMEH) 113*16kB (UMH) 150*32kB (UMEH) 463*64kB (UMEH) 105*128kB (UME) 17*256kB (UMH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 57752kB [ 2547.564108] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2547.612442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2547.646498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2547.673308] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2547.682227] 1289086 total pagecache pages [ 2547.686455] 0 pages in swap cache [ 2547.691494] Swap cache stats: add 0, delete 0, find 0/0 [ 2547.697173] Free swap = 0kB [ 2547.712654] Total swap = 0kB [ 2547.715692] 2097051 pages RAM [ 2547.725659] 0 pages HighMem/MovableOnly [ 2547.730808] 369649 pages reserved [ 2547.734974] 0 pages cma reserved [ 2547.739130] Out of memory (oom_kill_allocating_task): Kill process 14023 (syz-executor.2) score 0 or sacrifice child [ 2547.753747] Killed process 14023 (syz-executor.2) total-vm:93276kB, anon-rss:384kB, file-rss:34688kB, shmem-rss:0kB [ 2547.787945] oom_reaper: reaped process 14023 (syz-executor.2), now anon-rss:0kB, file-rss:34656kB, shmem-rss:0kB 22:25:34 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000003fb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:25:39 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000011b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:25:39 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x2000}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:25:39 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:25:39 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6ffffff8cb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:25:39 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd4c, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:25:39 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd40, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2553.259063] IPVS: ftp: loaded support on port[0] = 21 [ 2553.408094] IPVS: ftp: loaded support on port[0] = 21 [ 2553.427054] IPVS: ftp: loaded support on port[0] = 21 [ 2553.450180] IPVS: ftp: loaded support on port[0] = 21 22:25:40 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000edc0b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:25:40 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6fffffff5b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2554.035161] IPVS: ftp: loaded support on port[0] = 21 [ 2554.129169] IPVS: ftp: loaded support on port[0] = 21 22:25:40 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6fffffff6b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2554.452320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2554.501646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2554.586282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 22:25:41 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6fffffffeb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2554.674612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2554.772616] device bridge_slave_1 left promiscuous mode [ 2554.819046] bridge0: port 2(bridge_slave_1) entered disabled state [ 2554.949373] device bridge_slave_0 left promiscuous mode [ 2554.981609] bridge0: port 1(bridge_slave_0) entered disabled state [ 2555.128953] device veth1_macvtap left promiscuous mode [ 2555.134391] device veth0_macvtap left promiscuous mode [ 2555.199905] device veth1_vlan left promiscuous mode [ 2555.264947] device veth0_vlan left promiscuous mode 22:25:41 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000fffb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:25:42 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6001fffffb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2561.797879] Bluetooth: hci3: command 0x0409 tx timeout [ 2563.877650] Bluetooth: hci3: command 0x041b tx timeout [ 2564.702272] device hsr_slave_1 left promiscuous mode [ 2564.711382] device hsr_slave_0 left promiscuous mode [ 2564.725185] team0 (unregistering): Port device team_slave_1 removed [ 2564.738456] team0 (unregistering): Port device team_slave_0 removed [ 2564.749801] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2564.760494] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2564.794013] bond0 (unregistering): Released all slaves [ 2564.954489] IPVS: ftp: loaded support on port[0] = 21 [ 2565.410615] chnl_net:caif_netlink_parms(): no params data found [ 2565.793986] bridge0: port 1(bridge_slave_0) entered blocking state [ 2565.837573] bridge0: port 1(bridge_slave_0) entered disabled state [ 2565.852125] device bridge_slave_0 entered promiscuous mode [ 2565.880590] bridge0: port 2(bridge_slave_1) entered blocking state [ 2565.912857] bridge0: port 2(bridge_slave_1) entered disabled state [ 2565.932564] device bridge_slave_1 entered promiscuous mode [ 2565.958494] Bluetooth: hci3: command 0x040f tx timeout [ 2565.983584] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2566.009627] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2566.054167] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2566.073441] team0: Port device team_slave_0 added [ 2566.087583] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2566.108438] team0: Port device team_slave_1 added [ 2566.149257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2566.155524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2566.212619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2566.239568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2566.245833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2566.302664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2566.328737] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2566.336441] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2566.391139] device hsr_slave_0 entered promiscuous mode [ 2566.408007] device hsr_slave_1 entered promiscuous mode [ 2566.428339] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2566.435629] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2566.577199] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2566.705244] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2566.729637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2566.752289] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2566.789698] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2566.796715] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2566.839213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2566.846335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2566.884242] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2566.892348] 8021q: adding VLAN 0 to HW filter on device team0 [ 2566.927548] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2566.953223] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2566.960457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2566.976401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2566.992730] bridge0: port 1(bridge_slave_0) entered blocking state [ 2566.999251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2567.017700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2567.025706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2567.035866] bridge0: port 2(bridge_slave_1) entered blocking state [ 2567.042292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2567.060784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2567.076275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2567.085733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2567.115218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2567.130996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2567.154093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2567.170839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2567.191564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2567.208223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2567.218752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2567.258955] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2567.266725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2567.288291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2567.296111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2567.318035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2567.328844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2567.338285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2567.346021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2567.369060] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2567.376089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2567.440253] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2567.471700] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2567.502462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2567.511152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2567.529627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2567.567882] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2567.606250] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2567.615214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2567.641320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2567.744435] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2567.757158] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2567.773180] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2567.797602] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2567.804241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2567.821178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2567.835148] device veth0_vlan entered promiscuous mode [ 2567.848347] device veth1_vlan entered promiscuous mode [ 2567.854227] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2567.861955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2567.870289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2567.878171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2567.889383] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2567.906732] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2567.916944] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2567.925138] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2567.934362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2567.943412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2567.959163] device veth0_macvtap entered promiscuous mode [ 2567.965721] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2567.980106] device veth1_macvtap entered promiscuous mode [ 2567.995105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2568.006203] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2568.017555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2568.028109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.039336] Bluetooth: hci3: command 0x0419 tx timeout [ 2568.041191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 22:25:54 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x2101}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2568.056632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.066868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2568.077806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.088121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2568.098871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.109261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2568.119858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.148417] IPVS: ftp: loaded support on port[0] = 21 [ 2568.148631] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2568.177452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2568.184895] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2568.193699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2568.209277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2568.250645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2568.260874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.270966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2568.281611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.291406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2568.301782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.311507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2568.321925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.331561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2568.342010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.352744] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2568.360553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2568.381906] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2568.390055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2568.650709] IPVS: ftp: loaded support on port[0] = 21 [ 2568.723318] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2568.731844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2568.752436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2568.773313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2568.794697] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2568.801887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2568.814650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2568.823152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:25:55 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000012b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:25:55 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd4d, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:25:55 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:25:55 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd40, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:25:55 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff67fffffffb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:25:55 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000013b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2569.221890] IPVS: ftp: loaded support on port[0] = 21 [ 2569.290140] IPVS: ftp: loaded support on port[0] = 21 [ 2569.308135] IPVS: ftp: loaded support on port[0] = 21 22:25:56 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff68cffffffb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:25:56 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000014b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:25:57 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6f5ffffffb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:25:57 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000015b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2572.161440] kworker/u4:6 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2572.198909] kworker/u4:6 cpuset=/ mems_allowed=0-1 [ 2572.216309] CPU: 0 PID: 21728 Comm: kworker/u4:6 Not tainted 4.19.211-syzkaller #0 [ 2572.224036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2572.233476] Workqueue: events_unbound call_usermodehelper_exec_work [ 2572.239880] Call Trace: [ 2572.242477] dump_stack+0x1fc/0x2ef [ 2572.246108] dump_header+0x15d/0xc3f [ 2572.249822] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2572.254926] ? ___ratelimit+0x319/0x590 [ 2572.258892] oom_kill_process.cold+0x10/0x692 [ 2572.263377] ? oom_badness.part.0+0x135/0x6e0 [ 2572.267864] ? lock_downgrade+0x720/0x720 [ 2572.272003] ? check_preemption_disabled+0x41/0x280 [ 2572.277018] out_of_memory+0x34d/0x1390 [ 2572.280983] ? oom_killer_disable+0x270/0x270 [ 2572.285468] ? mutex_trylock+0x15f/0x1a0 [ 2572.289526] __alloc_pages_nodemask+0x23a2/0x2890 [ 2572.294370] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2572.299207] ? should_fail+0x142/0x7b0 [ 2572.303081] ? fs_reclaim_release+0xd0/0x110 [ 2572.307479] ? check_preemption_disabled+0x41/0x280 [ 2572.312490] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2572.317528] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2572.322285] copy_process.part.0+0x3cf/0x8260 [ 2572.326769] ? __lock_acquire+0x6de/0x3ff0 [ 2572.330999] ? __lock_acquire+0x6de/0x3ff0 [ 2572.335235] ? umh_complete+0x90/0x90 [ 2572.339204] ? __cleanup_sighand+0x60/0x60 [ 2572.343435] ? mark_held_locks+0xf0/0xf0 [ 2572.347486] ? __lock_acquire+0x6de/0x3ff0 [ 2572.351711] _do_fork+0x22f/0xf30 [ 2572.355148] ? umh_complete+0x90/0x90 [ 2572.358944] ? fork_idle+0x220/0x220 [ 2572.362656] ? lock_acquire+0x170/0x3c0 [ 2572.366621] ? debug_object_deactivate+0xfc/0x2e0 [ 2572.371462] ? trace_hardirqs_off+0x64/0x200 [ 2572.375863] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2572.380969] ? umh_complete+0x90/0x90 [ 2572.384761] kernel_thread+0x2f/0x40 [ 2572.388465] call_usermodehelper_exec_work+0x16d/0x260 [ 2572.393730] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 2572.399262] process_one_work+0x864/0x1570 [ 2572.403760] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2572.408425] worker_thread+0x64c/0x1130 [ 2572.412397] ? process_one_work+0x1570/0x1570 [ 2572.416962] kthread+0x33f/0x460 [ 2572.420311] ? kthread_park+0x180/0x180 [ 2572.424274] ret_from_fork+0x24/0x30 [ 2572.590260] IPVS: ftp: loaded support on port[0] = 21 [ 2573.157184] Bluetooth: hci2: command 0x0406 tx timeout [ 2573.305313] Mem-Info: [ 2573.339566] active_anon:141966 inactive_anon:1288643 isolated_anon:0 [ 2573.339566] active_file:753 inactive_file:1243 isolated_file:96 [ 2573.339566] unevictable:0 dirty:3 writeback:0 unstable:0 [ 2573.339566] slab_reclaimable:19614 slab_unreclaimable:127569 [ 2573.339566] mapped:1334246 shmem:1291751 pagetables:16360 bounce:0 [ 2573.339566] free:25408 free_pcp:882 free_cma:0 22:25:59 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000016b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2573.629356] Node 0 active_anon:518292kB inactive_anon:1414496kB active_file:1556kB inactive_file:1120kB unevictable:0kB isolated(anon):0kB isolated(file):384kB mapped:1550584kB dirty:12kB writeback:0kB shmem:1415356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2573.818966] Node 1 active_anon:49572kB inactive_anon:3740076kB active_file:68kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3782600kB dirty:0kB writeback:0kB shmem:3751648kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2574.066864] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:2224kB inactive_anon:2076kB active_file:0kB inactive_file:40kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2574.252302] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2574.296909] Node 0 DMA32 free:37068kB min:35996kB low:44992kB high:53988kB active_anon:516000kB inactive_anon:1412352kB active_file:1544kB inactive_file:1888kB unevictable:0kB writepending:72kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13664kB pagetables:30096kB bounce:0kB free_pcp:2396kB local_pcp:1456kB free_cma:0kB [ 2574.486776] lowmem_reserve[]: 0 0 1 1 1 [ 2574.490799] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2574.657073] lowmem_reserve[]: 0 0 0 0 0 [ 2574.666235] Node 1 Normal free:57108kB min:53876kB low:67344kB high:80812kB active_anon:49592kB inactive_anon:3740084kB active_file:424kB inactive_file:428kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:13920kB pagetables:35172kB bounce:0kB free_pcp:2768kB local_pcp:1476kB free_cma:0kB [ 2574.886819] lowmem_reserve[]: 0 0 0 0 0 [ 2574.890840] Node 0 DMA: 42*4kB (UMEH) 22*8kB (UMEH) 16*16kB (UEH) 10*32kB (MH) 6*64kB (UMH) 4*128kB (UEH) 2*256kB (EH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11032kB 22:26:01 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000017b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:01 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6f6ffffffb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2574.978807] Node 0 DMA32: 237*4kB (UMEH) 657*8kB (UMEH) 869*16kB (UMH) 708*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42764kB [ 2575.036164] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2575.121235] Node 1 Normal: 231*4kB (UME) 185*8kB (UMEH) 179*16kB (UMH) 151*32kB (UMEH) 452*64kB (UMEH) 106*128kB (ME) 17*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 57460kB [ 2575.213277] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2575.287957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2575.342319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2575.368672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2575.428536] 1291859 total pagecache pages [ 2575.471034] 0 pages in swap cache [ 2575.474910] Swap cache stats: add 0, delete 0, find 0/0 [ 2575.492870] Free swap = 0kB [ 2575.495908] Total swap = 0kB [ 2575.510662] 2097051 pages RAM [ 2575.513793] 0 pages HighMem/MovableOnly [ 2575.530903] 369649 pages reserved [ 2575.534377] 0 pages cma reserved [ 2575.550545] Out of memory: Kill process 15187 (syz-executor.5) score 1006 or sacrifice child 22:26:03 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x2203}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:26:03 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:26:03 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000018b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:03 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6feffffffb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:03 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x2101}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:26:03 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd4e, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2577.172493] IPVS: ftp: loaded support on port[0] = 21 [ 2577.411806] IPVS: ftp: loaded support on port[0] = 21 22:26:04 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600020000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:04 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000019b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2577.532425] IPVS: ftp: loaded support on port[0] = 21 [ 2577.542398] IPVS: ftp: loaded support on port[0] = 21 22:26:04 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600030000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:04 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001ab91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:05 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600040000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2579.199675] syz-executor.2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2579.233718] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2579.280133] CPU: 1 PID: 14912 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 2579.288046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2579.297401] Call Trace: [ 2579.300008] dump_stack+0x1fc/0x2ef [ 2579.303644] dump_header+0x15d/0xc3f [ 2579.307368] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2579.312480] ? ___ratelimit+0x319/0x590 [ 2579.316464] oom_kill_process.cold+0x10/0x692 [ 2579.320967] ? check_preemption_disabled+0x41/0x280 [ 2579.325992] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2579.331277] out_of_memory+0x1072/0x1390 [ 2579.335344] ? oom_killer_disable+0x270/0x270 [ 2579.339850] ? mutex_trylock+0x15f/0x1a0 [ 2579.343926] __alloc_pages_nodemask+0x23a2/0x2890 [ 2579.348896] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2579.353745] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2579.358598] ? mark_held_locks+0xf0/0xf0 [ 2579.362678] ? lock_downgrade+0x720/0x720 [ 2579.366839] ? ____cache_alloc_node+0x156/0x1d0 [ 2579.371606] ? cache_grow_begin+0x64/0x8a0 [ 2579.375863] cache_grow_begin+0xa4/0x8a0 [ 2579.379935] fallback_alloc+0x213/0x2e0 [ 2579.383915] kmem_cache_alloc+0x1e4/0x370 [ 2579.388074] getname_flags+0xce/0x590 [ 2579.392050] do_sys_open+0x26c/0x520 [ 2579.395765] ? filp_open+0x70/0x70 [ 2579.399406] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2579.404794] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2579.409901] ? do_syscall_64+0x21/0x620 [ 2579.413992] do_syscall_64+0xf9/0x620 [ 2579.417806] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2579.423006] RIP: 0033:0x7f9b634ac628 [ 2579.426897] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 2579.445800] RSP: 002b:00007ffffce22440 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 2579.453510] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 00007f9b634ac628 [ 2579.460786] RDX: 0000000000090800 RSI: 00007ffffce23630 RDI: 00000000ffffff9c [ 2579.468056] RBP: 00007ffffce2360c R08: 0000000000090800 R09: 00007ffffce23630 [ 2579.475325] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f9b635060bd [ 2579.482595] R13: 00007ffffce23630 R14: 0000000000000001 R15: 00007ffffce23670 [ 2579.495979] Mem-Info: [ 2579.498568] active_anon:144738 inactive_anon:1288320 isolated_anon:0 [ 2579.498568] active_file:84 inactive_file:84 isolated_file:32 [ 2579.498568] unevictable:0 dirty:1 writeback:11 unstable:0 [ 2579.498568] slab_reclaimable:19715 slab_unreclaimable:127609 [ 2579.498568] mapped:1332433 shmem:1294282 pagetables:16291 bounce:0 [ 2579.498568] free:25256 free_pcp:194 free_cma:0 [ 2579.568228] Node 0 active_anon:520836kB inactive_anon:1404336kB active_file:332kB inactive_file:160kB unevictable:0kB isolated(anon):0kB isolated(file):168kB mapped:1538400kB dirty:4kB writeback:44kB shmem:1408132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2579.597458] Node 1 active_anon:58116kB inactive_anon:3748944kB active_file:4kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3791232kB dirty:0kB writeback:0kB shmem:3768996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2579.630770] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2228kB inactive_anon:2124kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2579.662919] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2579.668110] Node 0 DMA32 free:35996kB min:35996kB low:44992kB high:53988kB active_anon:518608kB inactive_anon:1402256kB active_file:284kB inactive_file:132kB unevictable:0kB writepending:48kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13696kB pagetables:29892kB bounce:0kB free_pcp:1432kB local_pcp:40kB free_cma:0kB [ 2579.716502] lowmem_reserve[]: 0 0 1 1 1 [ 2579.736378] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2579.815479] lowmem_reserve[]: 0 0 0 0 0 [ 2579.820057] Node 1 Normal free:55140kB min:53876kB low:67344kB high:80812kB active_anon:58116kB inactive_anon:3748944kB active_file:4kB inactive_file:404kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14368kB pagetables:35180kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2579.854522] lowmem_reserve[]: 0 0 0 0 0 [ 2579.864545] Node 0 DMA: 28*4kB (UMEH) 22*8kB (UMEH) 16*16kB (UEH) 10*32kB (MH) 6*64kB (UMH) 4*128kB (UEH) 2*256kB (EH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10976kB [ 2579.881273] Node 0 DMA32: 886*4kB (UMEH) 431*8kB (UMEH) 361*16kB (MH) 723*32kB (UMEH) 3*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36096kB [ 2579.895830] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2579.907098] Node 1 Normal: 25*4kB (UME) 119*8kB (UMEH) 334*16kB (UMH) 113*32kB (UMEH) 424*64kB (UMEH) 108*128kB (UME) 17*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 55836kB [ 2579.923864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2579.933378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2579.942523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2579.951553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2579.960305] 1294591 total pagecache pages [ 2579.964535] 0 pages in swap cache [ 2579.971344] Swap cache stats: add 0, delete 0, find 0/0 [ 2579.986368] Free swap = 0kB [ 2579.990006] Total swap = 0kB [ 2579.996853] 2097051 pages RAM [ 2580.000248] 0 pages HighMem/MovableOnly [ 2580.004216] 369649 pages reserved [ 2580.008751] 0 pages cma reserved [ 2580.012132] Out of memory (oom_kill_allocating_task): Kill process 14912 (syz-executor.2) score 0 or sacrifice child [ 2580.056614] Killed process 14912 (syz-executor.2) total-vm:93276kB, anon-rss:384kB, file-rss:34032kB, shmem-rss:0kB [ 2580.075428] oom_reaper: reaped process 14912 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2580.457385] IPVS: ftp: loaded support on port[0] = 21 [ 2581.546970] IPVS: ftp: loaded support on port[0] = 21 22:26:08 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600050000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:16 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600060000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:17 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001bb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:17 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r0, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r2}, 0x18) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:26:17 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x2101}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:26:17 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x2a01}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:26:17 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600070000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:17 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd4f, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2591.091005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2591.098416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2591.108213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2591.114991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2591.124590] device bridge_slave_1 left promiscuous mode [ 2591.133177] bridge0: port 2(bridge_slave_1) entered disabled state [ 2591.142687] device bridge_slave_0 left promiscuous mode [ 2591.148969] bridge0: port 1(bridge_slave_0) entered disabled state [ 2591.177449] device veth1_macvtap left promiscuous mode [ 2591.210542] device veth0_macvtap left promiscuous mode [ 2591.283977] device veth1_vlan left promiscuous mode 22:26:17 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600080000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2591.327027] IPVS: ftp: loaded support on port[0] = 21 [ 2591.331571] IPVS: ftp: loaded support on port[0] = 21 [ 2591.353697] device veth0_vlan left promiscuous mode [ 2591.376060] IPVS: ftp: loaded support on port[0] = 21 [ 2591.402551] IPVS: ftp: loaded support on port[0] = 21 [ 2591.558836] ieee802154 phy0 wpan0: encryption failed: -22 [ 2591.564489] ieee802154 phy1 wpan1: encryption failed: -22 22:26:18 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600090000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:18 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6000a0000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:18 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6000b0000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2592.162493] IPVS: ftp: loaded support on port[0] = 21 [ 2592.256552] IPVS: ftp: loaded support on port[0] = 21 22:26:18 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6000c0000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:19 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600100000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2599.085032] Bluetooth: hci3: command 0x0409 tx timeout [ 2600.303516] device hsr_slave_1 left promiscuous mode [ 2600.311285] device hsr_slave_0 left promiscuous mode [ 2600.329242] team0 (unregistering): Port device team_slave_1 removed [ 2600.340177] team0 (unregistering): Port device team_slave_0 removed [ 2600.351380] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2600.363241] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2600.394820] bond0 (unregistering): Released all slaves [ 2600.480595] IPVS: ftp: loaded support on port[0] = 21 [ 2600.941461] chnl_net:caif_netlink_parms(): no params data found [ 2601.157227] Bluetooth: hci3: command 0x041b tx timeout [ 2601.384863] bridge0: port 1(bridge_slave_0) entered blocking state [ 2601.445097] bridge0: port 1(bridge_slave_0) entered disabled state [ 2601.479966] device bridge_slave_0 entered promiscuous mode [ 2601.511705] bridge0: port 2(bridge_slave_1) entered blocking state [ 2601.555027] bridge0: port 2(bridge_slave_1) entered disabled state [ 2601.604996] device bridge_slave_1 entered promiscuous mode [ 2601.690167] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2601.717219] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2601.817212] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2601.854970] team0: Port device team_slave_0 added [ 2601.860921] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2601.926123] team0: Port device team_slave_1 added [ 2602.044562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2602.084854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2602.208144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2602.268845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2602.299158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2602.434766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2602.476160] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2602.483901] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2602.730797] device hsr_slave_0 entered promiscuous mode [ 2602.775289] device hsr_slave_1 entered promiscuous mode [ 2602.830656] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2602.850512] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2603.234771] Bluetooth: hci3: command 0x040f tx timeout [ 2603.310504] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2603.504845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2603.548379] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2603.611872] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2603.643386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2603.659098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2603.703018] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2603.715187] 8021q: adding VLAN 0 to HW filter on device team0 [ 2603.784963] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2603.815729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2603.836525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2603.891457] bridge0: port 1(bridge_slave_0) entered blocking state [ 2603.897945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2603.959542] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2603.987539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2604.005369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2604.031124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2604.046533] bridge0: port 2(bridge_slave_1) entered blocking state [ 2604.052900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2604.068752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2604.105043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2604.133283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2604.154918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2604.192509] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2604.235215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2604.250457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2604.318149] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2604.342581] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2604.350674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2604.403758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2604.449754] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2604.462753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2604.479645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2604.517545] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2604.537431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2604.566876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2604.628528] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2604.667288] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2604.673580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2604.684937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2604.764727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2604.837459] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2604.879267] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2604.897645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2604.913212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 22:26:31 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r0, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r2}, 0x18) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2605.315448] Bluetooth: hci3: command 0x0419 tx timeout [ 2605.331353] IPVS: ftp: loaded support on port[0] = 21 [ 2605.356141] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2605.410755] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2605.441881] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2605.527943] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2605.540541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2605.563314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2605.603910] device veth0_vlan entered promiscuous mode [ 2605.640868] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2605.648482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2605.691163] device veth1_vlan entered promiscuous mode [ 2605.752204] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2605.796544] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2605.805318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2605.813572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2605.846305] device veth0_macvtap entered promiscuous mode [ 2605.852814] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2605.878082] device veth1_macvtap entered promiscuous mode [ 2605.884847] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2605.897119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2605.907672] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2605.917017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2605.927021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2605.936225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2605.946009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2605.955276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2605.965289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2605.974755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2605.984566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2605.993933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2606.004240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2606.015629] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2606.022635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2606.031201] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2606.042916] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2606.052440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2606.104149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2606.123484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2606.141423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2606.153371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2606.170339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2606.180195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2606.197993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2606.211081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2606.223554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2606.239042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2606.251049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2606.267600] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2606.280002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2606.290788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2606.303335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2607.585249] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2607.609612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2607.661978] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2607.662158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2607.686369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2607.702774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2607.712623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2607.731093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:26:34 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x3603}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:26:34 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600120000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:34 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd50, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:26:34 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001cb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:34 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r0, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r2}, 0x18) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:26:34 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x2101}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2608.275366] IPVS: ftp: loaded support on port[0] = 21 [ 2608.348355] IPVS: ftp: loaded support on port[0] = 21 [ 2608.406002] IPVS: ftp: loaded support on port[0] = 21 22:26:35 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000020b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:35 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600130000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2608.573537] IPVS: ftp: loaded support on port[0] = 21 22:26:35 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000023b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2609.876490] systemd invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2609.963284] systemd cpuset=/ mems_allowed=0-1 [ 2609.971902] CPU: 0 PID: 1 Comm: systemd Not tainted 4.19.211-syzkaller #0 [ 2609.978848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2609.988198] Call Trace: [ 2609.990791] dump_stack+0x1fc/0x2ef [ 2609.994424] dump_header+0x15d/0xc3f [ 2609.998143] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2610.003247] ? ___ratelimit+0x319/0x590 [ 2610.007224] oom_kill_process.cold+0x10/0x692 [ 2610.011720] ? oom_badness.part.0+0x135/0x6e0 [ 2610.016215] ? lock_downgrade+0x720/0x720 [ 2610.020370] ? check_preemption_disabled+0x41/0x280 [ 2610.025388] out_of_memory+0x34d/0x1390 [ 2610.029368] ? oom_killer_disable+0x270/0x270 [ 2610.033956] ? mutex_trylock+0x15f/0x1a0 [ 2610.038021] __alloc_pages_nodemask+0x23a2/0x2890 [ 2610.042891] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2610.047738] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2610.052601] ? ____cache_alloc_node+0x156/0x1d0 [ 2610.057273] ? cache_grow_begin+0x64/0x8a0 [ 2610.061521] cache_grow_begin+0xa4/0x8a0 [ 2610.065590] fallback_alloc+0x213/0x2e0 [ 2610.069572] kmem_cache_alloc+0x1e4/0x370 [ 2610.073727] getname_flags+0xce/0x590 [ 2610.077533] ? task_work_run+0x64/0x1c0 [ 2610.081511] do_sys_open+0x26c/0x520 [ 2610.085228] ? filp_open+0x70/0x70 [ 2610.088779] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2610.094146] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2610.099249] ? do_syscall_64+0x21/0x620 [ 2610.103224] do_syscall_64+0xf9/0x620 [ 2610.107031] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2610.112221] RIP: 0033:0x7fe9b9aff9b1 [ 2610.115933] Code: Bad RIP value. [ 2610.119292] RSP: 002b:00007ffc5122a1a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 2610.127045] RAX: ffffffffffffffda RBX: 000000000000002f RCX: 00007fe9b9aff9b1 [ 2610.134308] RDX: 000056216ba2b010 RSI: 0000000000090800 RDI: 000056216ba2b010 [ 2610.141575] RBP: 00007ffc5122a200 R08: 0000000000000003 R09: 0000000000001010 [ 2610.148845] R10: 000056216b9b1620 R11: 0000000000000202 R12: 000056216ba2b010 [ 2610.156109] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2610.211554] Mem-Info: [ 2610.214183] active_anon:142025 inactive_anon:1292309 isolated_anon:0 [ 2610.214183] active_file:217 inactive_file:377 isolated_file:69 [ 2610.214183] unevictable:0 dirty:2 writeback:0 unstable:0 [ 2610.214183] slab_reclaimable:19872 slab_unreclaimable:125819 [ 2610.214183] mapped:1336790 shmem:1295416 pagetables:16376 bounce:0 [ 2610.214183] free:25066 free_pcp:289 free_cma:0 [ 2610.251195] Node 0 active_anon:518140kB inactive_anon:1413696kB active_file:12kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1541552kB dirty:0kB writeback:0kB shmem:1414552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2610.280040] Node 1 active_anon:49960kB inactive_anon:3755540kB active_file:640kB inactive_file:1416kB unevictable:0kB isolated(anon):0kB isolated(file):212kB mapped:3805608kB dirty:8kB writeback:0kB shmem:3767112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2610.375372] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2180kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2610.434264] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2610.439337] Node 0 DMA32 free:35804kB min:35996kB low:44992kB high:53988kB active_anon:515924kB inactive_anon:1411516kB active_file:112kB inactive_file:356kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13568kB pagetables:29968kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2610.504159] lowmem_reserve[]: 0 0 1 1 1 [ 2610.508181] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2610.610641] lowmem_reserve[]: 0 0 0 0 0 [ 2610.616331] Node 1 Normal free:54492kB min:53876kB low:67344kB high:80812kB active_anon:49960kB inactive_anon:3755540kB active_file:580kB inactive_file:384kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14528kB pagetables:35444kB bounce:0kB free_pcp:1488kB local_pcp:104kB free_cma:0kB [ 2610.682198] lowmem_reserve[]: 0 0 0 0 0 [ 2610.692304] Node 0 DMA: 8*4kB (UMEH) 20*8kB (UMEH) 16*16kB (MEH) 11*32kB (UMH) 7*64kB (UMH) 4*128kB (UEH) 2*256kB (EH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10976kB [ 2610.742871] Node 0 DMA32: 639*4kB (UMEH) 267*8kB (UMEH) 524*16kB (UMEH) 712*32kB (UMEH) 4*64kB (ME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36116kB [ 2610.758842] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2610.770109] Node 1 Normal: 165*4kB (UME) 278*8kB (UMEH) 45*16kB (UMEH) 12*32kB (UMEH) 332*64kB (UMEH) 153*128kB (UME) 30*256kB (UM) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 55060kB [ 2610.786662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2610.795665] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2610.811236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2610.820324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2610.844151] 1296157 total pagecache pages [ 2610.848332] 0 pages in swap cache [ 2610.851818] Swap cache stats: add 0, delete 0, find 0/0 [ 2610.864155] Free swap = 0kB [ 2610.867194] Total swap = 0kB [ 2610.870217] 2097051 pages RAM [ 2610.873317] 0 pages HighMem/MovableOnly [ 2610.878797] 369649 pages reserved [ 2610.882259] 0 pages cma reserved [ 2610.885873] Out of memory: Kill process 12308 (syz-executor.0) score 1006 or sacrifice child [ 2610.904218] Killed process 12308 (syz-executor.0) total-vm:93804kB, anon-rss:436kB, file-rss:34820kB, shmem-rss:11480kB 22:26:38 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600140000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:38 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000003fb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:38 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600150000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:44 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600160000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:46 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6ffffff8cb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:46 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:26:46 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd4b, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2620.294994] IPVS: ftp: loaded support on port[0] = 21 [ 2620.324693] IPVS: ftp: loaded support on port[0] = 21 22:26:46 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd51, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:26:46 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x3700}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:26:47 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600170000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:47 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000edc0b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2620.591847] IPVS: ftp: loaded support on port[0] = 21 [ 2620.660657] IPVS: ftp: loaded support on port[0] = 21 22:26:47 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600180000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:47 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6fffffff5b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:47 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600190000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2621.612185] IPVS: ftp: loaded support on port[0] = 21 [ 2622.550582] IPVS: ftp: loaded support on port[0] = 21 22:26:50 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6fffffff6b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:50 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6001a0000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:54 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6fffffffeb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:54 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:26:54 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x3700}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2627.756832] IPVS: ftp: loaded support on port[0] = 21 [ 2628.001032] IPVS: ftp: loaded support on port[0] = 21 22:26:54 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd52, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:26:54 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6001b0000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:54 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000fffb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:54 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x4300}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2628.229920] IPVS: ftp: loaded support on port[0] = 21 22:26:55 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6001fffffb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2628.375192] IPVS: ftp: loaded support on port[0] = 21 22:26:55 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6001c0000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:55 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6001d0000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:55 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:26:55 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff67fffffffb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2629.077188] IPVS: ftp: loaded support on port[0] = 21 [ 2629.206179] IPVS: ftp: loaded support on port[0] = 21 [ 2629.254802] IPVS: ftp: loaded support on port[0] = 21 22:26:56 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6001e0000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:26:56 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff68cffffffb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2629.827832] syz-executor.2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2629.844131] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2629.849342] CPU: 1 PID: 15760 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 2629.857224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2629.866577] Call Trace: [ 2629.869179] dump_stack+0x1fc/0x2ef [ 2629.872813] dump_header+0x15d/0xc3f [ 2629.876526] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2629.881615] ? ___ratelimit+0x319/0x590 [ 2629.885579] oom_kill_process.cold+0x10/0x692 [ 2629.890065] ? check_preemption_disabled+0x41/0x280 [ 2629.895072] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2629.900337] out_of_memory+0x1072/0x1390 [ 2629.904391] ? oom_killer_disable+0x270/0x270 [ 2629.908875] ? mutex_trylock+0x15f/0x1a0 [ 2629.912928] __alloc_pages_nodemask+0x23a2/0x2890 [ 2629.917782] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2629.922612] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2629.927452] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2629.932027] ? ____cache_alloc_node+0x156/0x1d0 [ 2629.936683] ? cache_grow_begin+0x64/0x8a0 [ 2629.940913] cache_grow_begin+0xa4/0x8a0 [ 2629.944969] fallback_alloc+0x213/0x2e0 [ 2629.948949] kmem_cache_alloc+0x1e4/0x370 [ 2629.953094] getname_flags+0xce/0x590 [ 2629.956885] user_path_mountpoint_at+0x23/0x40 [ 2629.961455] ksys_umount+0x156/0x1070 [ 2629.965248] ? __detach_mounts+0x470/0x470 [ 2629.969467] ? up_read+0x17/0x110 [ 2629.972923] ? __do_page_fault+0x180/0xd60 [ 2629.977153] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2629.982506] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2629.987512] __x64_sys_umount+0x50/0x70 [ 2629.991482] do_syscall_64+0xf9/0x620 [ 2629.995285] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2630.000460] RIP: 0033:0x7f139e184f57 [ 2630.004165] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2630.023054] RSP: 002b:00007ffea729e508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2630.030749] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00007f139e184f57 [ 2630.038349] RDX: 000000000000000c RSI: 000000000000000a RDI: 00007ffea729f690 [ 2630.045603] RBP: 00007ffea729f66c R08: 0000000000000000 R09: 000002a261d02a00 [ 2630.052871] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f139e1dd0bd [ 2630.060134] R13: 00007ffea729f690 R14: 0000000000000001 R15: 00007ffea729f6d0 [ 2630.080315] Mem-Info: [ 2630.082835] active_anon:147729 inactive_anon:1285113 isolated_anon:0 [ 2630.082835] active_file:229 inactive_file:347 isolated_file:41 [ 2630.082835] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2630.082835] slab_reclaimable:20038 slab_unreclaimable:127178 [ 2630.082835] mapped:1329588 shmem:1293961 pagetables:16288 bounce:0 [ 2630.082835] free:25500 free_pcp:57 free_cma:0 [ 2630.121938] Node 0 active_anon:533476kB inactive_anon:1405388kB active_file:1112kB inactive_file:1884kB unevictable:0kB isolated(anon):0kB isolated(file):276kB mapped:1535672kB dirty:0kB writeback:0kB shmem:1421356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2630.157500] Node 1 active_anon:57440kB inactive_anon:3735064kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3783280kB dirty:0kB writeback:0kB shmem:3754488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2630.190025] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2104kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2630.221651] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2630.228274] Node 0 DMA32 free:35940kB min:35996kB low:44992kB high:53988kB active_anon:531208kB inactive_anon:1403284kB active_file:912kB inactive_file:2092kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13472kB pagetables:29872kB bounce:0kB free_pcp:760kB local_pcp:0kB free_cma:0kB [ 2630.266443] lowmem_reserve[]: 0 0 1 1 1 [ 2630.270948] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2630.304442] lowmem_reserve[]: 0 0 0 0 0 [ 2630.308889] Node 1 Normal free:53852kB min:53876kB low:67344kB high:80812kB active_anon:57440kB inactive_anon:3735064kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14624kB pagetables:35188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2630.343071] lowmem_reserve[]: 0 0 0 0 0 [ 2630.347723] Node 0 DMA: 14*4kB (UMEH) 20*8kB (UMEH) 16*16kB (MEH) 11*32kB (UMH) 7*64kB (UMH) 4*128kB (UEH) 2*256kB (EH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11000kB [ 2630.371571] Node 0 DMA32: 37*4kB (UEH) 88*8kB (UH) 907*16kB (UH) 679*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37092kB [ 2630.386110] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2630.397854] Node 1 Normal: 75*4kB (UME) 250*8kB (UMEH) 181*16kB (UMH) 138*32kB (UMEH) 438*64kB (MEH) 103*128kB (UME) 12*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53900kB [ 2630.414210] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2630.423850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2630.432906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2630.446430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2630.455369] 1294272 total pagecache pages [ 2630.461417] 0 pages in swap cache [ 2630.464946] Swap cache stats: add 0, delete 0, find 0/0 [ 2630.470490] Free swap = 0kB [ 2630.475980] Total swap = 0kB [ 2630.479010] 2097051 pages RAM [ 2630.482110] 0 pages HighMem/MovableOnly [ 2630.488458] 369649 pages reserved [ 2630.491924] 0 pages cma reserved [ 2630.497725] Out of memory (oom_kill_allocating_task): Kill process 15760 (syz-executor.2) score 0 or sacrifice child [ 2630.511471] Killed process 15760 (syz-executor.2) total-vm:93276kB, anon-rss:388kB, file-rss:34848kB, shmem-rss:0kB [ 2630.528445] oom_reaper: reaped process 15760 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2630.614935] syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2630.633316] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2630.639651] CPU: 0 PID: 12652 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2630.647536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2630.656888] Call Trace: [ 2630.659482] dump_stack+0x1fc/0x2ef [ 2630.663154] dump_header+0x15d/0xc3f [ 2630.666870] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2630.672000] ? ___ratelimit+0x319/0x590 [ 2630.676069] oom_kill_process.cold+0x10/0x692 [ 2630.680573] ? check_preemption_disabled+0x41/0x280 [ 2630.685598] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2630.690880] out_of_memory+0x1072/0x1390 [ 2630.694950] ? oom_killer_disable+0x270/0x270 [ 2630.699516] ? mutex_trylock+0x15f/0x1a0 [ 2630.703580] __alloc_pages_nodemask+0x23a2/0x2890 [ 2630.708556] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2630.713480] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2630.718328] ? mark_held_locks+0xa6/0xf0 [ 2630.722376] ? ____cache_alloc_node+0x156/0x1d0 [ 2630.727031] ? cache_grow_begin+0x64/0x8a0 [ 2630.731260] cache_grow_begin+0xa4/0x8a0 [ 2630.735321] fallback_alloc+0x213/0x2e0 [ 2630.739287] kmem_cache_alloc_trace+0x1f1/0x380 [ 2630.743965] ? dev_uevent_filter+0xd0/0xd0 [ 2630.748190] kobject_uevent_env+0x236/0x1480 [ 2630.752682] __loop_clr_fd+0x5dd/0xe50 [ 2630.756580] lo_release+0x1ad/0x1f0 [ 2630.760197] ? __loop_clr_fd+0xe50/0xe50 [ 2630.764246] __blkdev_put+0x636/0x870 [ 2630.768037] ? fsync_bdev+0xc0/0xc0 [ 2630.771654] ? blkdev_put+0x85/0x520 [ 2630.775374] deactivate_locked_super+0x94/0x160 [ 2630.780027] deactivate_super+0x174/0x1a0 [ 2630.784162] ? deactivate_locked_super+0x160/0x160 [ 2630.789080] ? dput+0x31/0x640 [ 2630.792262] cleanup_mnt+0x1a8/0x290 [ 2630.795987] task_work_run+0x148/0x1c0 [ 2630.799874] exit_to_usermode_loop+0x251/0x2a0 [ 2630.804443] do_syscall_64+0x538/0x620 [ 2630.808325] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2630.813674] RIP: 0033:0x7efc93abff57 [ 2630.817377] Code: Bad RIP value. [ 2630.820726] RSP: 002b:00007ffeccb38f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2630.828421] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007efc93abff57 [ 2630.835688] RDX: 00007ffeccb3901a RSI: 000000000000000a RDI: 00007ffeccb39010 [ 2630.842957] RBP: 00007ffeccb39010 R08: 00000000ffffffff R09: 00007ffeccb38de0 [ 2630.850214] R10: 0000555555788903 R11: 0000000000000246 R12: 00007efc93b180bd [ 2630.857469] R13: 00007ffeccb3a0d0 R14: 0000555555788810 R15: 00007ffeccb3a110 [ 2630.885853] Mem-Info: [ 2630.888349] active_anon:147729 inactive_anon:1285938 isolated_anon:0 [ 2630.888349] active_file:72 inactive_file:94 isolated_file:0 [ 2630.888349] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2630.888349] slab_reclaimable:20038 slab_unreclaimable:126840 [ 2630.888349] mapped:1330088 shmem:1294786 pagetables:16288 bounce:0 [ 2630.888349] free:25101 free_pcp:324 free_cma:0 [ 2630.927567] Node 0 active_anon:533476kB inactive_anon:1408688kB active_file:184kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):116kB mapped:1536772kB dirty:0kB writeback:0kB shmem:1424656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2630.961383] Node 1 active_anon:57440kB inactive_anon:3735064kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3783280kB dirty:0kB writeback:0kB shmem:3754488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2631.010934] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2104kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2631.057633] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2631.066411] Node 0 DMA32 free:37032kB min:35996kB low:44992kB high:53988kB active_anon:526604kB inactive_anon:1407152kB active_file:0kB inactive_file:1604kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13472kB pagetables:29792kB bounce:0kB free_pcp:1556kB local_pcp:292kB free_cma:0kB [ 2631.126153] lowmem_reserve[]: 0 0 1 1 1 [ 2631.139732] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2631.189314] lowmem_reserve[]: 0 0 0 0 0 [ 2631.195832] Node 1 Normal free:55956kB min:53876kB low:67344kB high:80812kB active_anon:54020kB inactive_anon:3735064kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14272kB pagetables:35184kB bounce:0kB free_pcp:1640kB local_pcp:248kB free_cma:0kB [ 2631.231293] lowmem_reserve[]: 0 0 0 0 0 [ 2631.237651] Node 0 DMA: 25*4kB (UMEH) 20*8kB (UMEH) 16*16kB (MEH) 11*32kB (UMH) 7*64kB (UMH) 4*128kB (UEH) 2*256kB (EH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11044kB [ 2631.260658] Node 0 DMA32: 513*4kB (UMEH) 342*8kB (UMH) 956*16kB (UMH) 679*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41812kB [ 2631.328488] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2631.452063] Node 1 Normal: 173*4kB (UME) 285*8kB (UMEH) 382*16kB (UMH) 182*32kB (UMEH) 446*64kB (UMEH) 102*128kB (ME) 12*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 59580kB [ 2631.633299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2631.642509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2631.817202] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2631.922176] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2632.002745] 1291576 total pagecache pages [ 2632.007009] 0 pages in swap cache [ 2632.010458] Swap cache stats: add 0, delete 0, find 0/0 [ 2632.038551] Free swap = 0kB [ 2632.048321] Total swap = 0kB [ 2632.057981] 2097051 pages RAM [ 2632.067701] 0 pages HighMem/MovableOnly [ 2632.080541] 369649 pages reserved [ 2632.091786] 0 pages cma reserved [ 2632.108847] Out of memory (oom_kill_allocating_task): Kill process 12652 (syz-executor.3) score 0 or sacrifice child [ 2632.173234] Killed process 12652 (syz-executor.3) total-vm:93276kB, anon-rss:388kB, file-rss:34408kB, shmem-rss:0kB [ 2632.205607] oom_reaper: reaped process 12652 (syz-executor.3), now anon-rss:0kB, file-rss:34404kB, shmem-rss:0kB 22:27:03 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2636.691757] IPVS: ftp: loaded support on port[0] = 21 22:27:03 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd53, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:27:03 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600210000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:27:03 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6fffffff5b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2637.367505] IPVS: ftp: loaded support on port[0] = 21 [ 2637.760043] IPVS: ftp: loaded support on port[0] = 21 22:27:05 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x4400}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:27:05 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6f5ffffffb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:27:05 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:27:05 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2638.684418] IPVS: ftp: loaded support on port[0] = 21 [ 2638.702985] IPVS: ftp: loaded support on port[0] = 21 [ 2638.736058] IPVS: ftp: loaded support on port[0] = 21 [ 2639.627235] IPVS: ftp: loaded support on port[0] = 21 [ 2643.409456] IPVS: ftp: loaded support on port[0] = 21 [ 2644.521380] Bluetooth: hci2: command 0x0409 tx timeout [ 2644.589722] syz-executor.2 invoked oom-killer: gfp_mask=0x6082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2644.609572] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2644.614825] CPU: 0 PID: 16828 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 2644.622689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2644.632032] Call Trace: [ 2644.634603] dump_stack+0x1fc/0x2ef [ 2644.638211] dump_header+0x15d/0xc3f [ 2644.642025] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2644.647115] ? ___ratelimit+0x319/0x590 [ 2644.651074] oom_kill_process.cold+0x10/0x692 [ 2644.655557] ? check_preemption_disabled+0x41/0x280 [ 2644.660729] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2644.665987] out_of_memory+0x1072/0x1390 [ 2644.670032] ? oom_killer_disable+0x270/0x270 [ 2644.674620] ? mutex_trylock+0x15f/0x1a0 [ 2644.678669] __alloc_pages_nodemask+0x23a2/0x2890 [ 2644.683502] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2644.688337] ? should_fail+0x142/0x7b0 [ 2644.692222] ? lock_acquire+0x170/0x3c0 [ 2644.696194] ? check_preemption_disabled+0x41/0x280 [ 2644.701243] alloc_pages_current+0x193/0x2a0 [ 2644.705682] __vmalloc_area_node+0x47e/0x780 [ 2644.710121] ? __vmalloc_node_range+0x180/0x180 [ 2644.714779] ? _raw_spin_unlock+0x29/0x40 [ 2644.718912] ? __get_vm_area_node+0x2e2/0x3a0 [ 2644.723404] __vmalloc_node_range+0xed/0x180 [ 2644.727795] ? kcov_mmap+0x2b/0x130 [ 2644.731404] vmalloc_user+0x70/0xe0 [ 2644.735019] ? kcov_mmap+0x2b/0x130 [ 2644.738644] kcov_mmap+0x2b/0x130 [ 2644.742078] ? memset+0x20/0x40 [ 2644.745339] mmap_region+0xc94/0x16b0 [ 2644.749123] ? vm_munmap+0x140/0x140 [ 2644.752819] ? get_unmapped_area+0x294/0x3c0 [ 2644.757208] do_mmap+0x8e8/0x1080 [ 2644.760643] vm_mmap_pgoff+0x197/0x200 [ 2644.764511] ? vma_is_stack_for_current+0xc0/0xc0 [ 2644.769332] ? do_dup2+0x450/0x450 [ 2644.772852] ? __close_fd+0x128/0x200 [ 2644.776635] ksys_mmap_pgoff+0x298/0x5a0 [ 2644.780689] ? find_mergeable_anon_vma+0x260/0x260 [ 2644.785600] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2644.790950] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2644.795956] ? do_syscall_64+0x21/0x620 [ 2644.799912] do_syscall_64+0xf9/0x620 [ 2644.803784] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2644.808954] RIP: 0033:0x7f311a490b32 [ 2644.812647] Code: Bad RIP value. [ 2644.815998] RSP: 002b:00007fff9526ad18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2644.823968] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f311a490b32 [ 2644.831216] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000000000000 [ 2644.839072] RBP: 0000000000000000 R08: 00000000000000f2 R09: 0000000000000000 [ 2644.846331] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f311a5a4bf0 [ 2644.853577] R13: 00007fff9526ae20 R14: 0000000000000000 R15: 00000000000000f3 [ 2644.862378] Mem-Info: [ 2644.864822] active_anon:141889 inactive_anon:1295350 isolated_anon:0 [ 2644.864822] active_file:23 inactive_file:0 isolated_file:0 [ 2644.864822] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2644.864822] slab_reclaimable:19997 slab_unreclaimable:126679 [ 2644.864822] mapped:1335856 shmem:1298435 pagetables:16306 bounce:0 [ 2644.864822] free:25070 free_pcp:0 free_cma:0 [ 2644.899767] Node 0 active_anon:517448kB inactive_anon:1419604kB active_file:116kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1549212kB dirty:0kB writeback:0kB shmem:1420412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2644.928309] Node 1 active_anon:50108kB inactive_anon:3761796kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3794212kB dirty:0kB writeback:0kB shmem:3773328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2644.955946] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2260kB inactive_anon:2168kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2644.982920] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2644.991501] Node 0 DMA32 free:35892kB min:35996kB low:44992kB high:53988kB active_anon:515188kB inactive_anon:1417436kB active_file:68kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13472kB pagetables:29792kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2645.022014] lowmem_reserve[]: 0 0 1 1 1 [ 2645.032652] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2645.115202] lowmem_reserve[]: 0 0 0 0 0 [ 2645.119212] Node 1 Normal free:53852kB min:53876kB low:67344kB high:80812kB active_anon:50108kB inactive_anon:3761796kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14080kB pagetables:35340kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2645.152589] lowmem_reserve[]: 0 0 0 0 0 [ 2645.156595] Node 0 DMA: 7*4kB (MEH) 19*8kB (UMEH) 17*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 3*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10980kB [ 2645.174835] Node 0 DMA32: 1167*4kB (UMEH) 404*8kB (MH) 329*16kB (UMH) 719*32kB (UMEH) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36300kB [ 2645.194849] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2645.208577] Node 1 Normal: 394*4kB (ME) 510*8kB (UMEH) 535*16kB (UMH) 345*32kB (UMEH) 273*64kB (UMEH) 63*128kB (UME) 9*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53096kB [ 2645.224465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2645.233518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2645.242181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2645.251024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2645.259623] 1298446 total pagecache pages [ 2645.263899] 0 pages in swap cache [ 2645.267346] Swap cache stats: add 0, delete 0, find 0/0 [ 2645.272734] Free swap = 0kB [ 2645.275736] Total swap = 0kB [ 2645.278731] 2097051 pages RAM [ 2645.282040] 0 pages HighMem/MovableOnly [ 2645.286010] 369649 pages reserved [ 2645.289438] 0 pages cma reserved [ 2645.292828] Out of memory (oom_kill_allocating_task): Kill process 16828 (syz-executor.2) score 0 or sacrifice child [ 2645.303569] Killed process 16828 (syz-executor.2) total-vm:70744kB, anon-rss:348kB, file-rss:0kB, shmem-rss:0kB [ 2646.596192] Bluetooth: hci2: command 0x041b tx timeout [ 2647.489128] chnl_net:caif_netlink_parms(): no params data found 22:27:14 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd54, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:27:14 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x38a}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:27:14 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2647.899443] IPVS: ftp: loaded support on port[0] = 21 [ 2647.997628] IPVS: ftp: loaded support on port[0] = 21 [ 2648.041879] IPVS: ftp: loaded support on port[0] = 21 [ 2648.431374] IPVS: ftp: loaded support on port[0] = 21 [ 2648.671508] Bluetooth: hci2: command 0x040f tx timeout [ 2650.402021] syz-executor.1 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 2650.415192] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2650.420704] CPU: 1 PID: 17003 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2650.428591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2650.438046] Call Trace: [ 2650.440641] dump_stack+0x1fc/0x2ef [ 2650.444276] dump_header+0x15d/0xc3f [ 2650.447998] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2650.453104] ? ___ratelimit+0x319/0x590 [ 2650.457094] oom_kill_process.cold+0x10/0x692 [ 2650.461598] ? check_preemption_disabled+0x41/0x280 [ 2650.466627] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2650.471911] out_of_memory+0x1072/0x1390 [ 2650.475988] ? oom_killer_disable+0x270/0x270 [ 2650.480489] ? mutex_trylock+0x15f/0x1a0 [ 2650.484561] __alloc_pages_nodemask+0x23a2/0x2890 [ 2650.489425] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2650.494299] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2650.499236] ? mark_held_locks+0xa6/0xf0 [ 2650.503313] ? ____cache_alloc_node+0x156/0x1d0 [ 2650.507983] ? cache_grow_begin+0x64/0x8a0 [ 2650.512224] cache_grow_begin+0xa4/0x8a0 [ 2650.516298] fallback_alloc+0x213/0x2e0 [ 2650.520283] kmem_cache_alloc_trace+0x1f1/0x380 [ 2650.524959] sctp_association_new+0x79/0x1f10 [ 2650.529459] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2650.534655] ? sctp_v4_scope+0x192/0x1b0 [ 2650.538727] __sctp_connect+0x718/0xd00 [ 2650.542723] ? sctp_wfree+0x940/0x940 [ 2650.546529] ? lock_downgrade+0x720/0x720 [ 2650.550678] ? lock_acquire+0x170/0x3c0 [ 2650.554779] ? __might_fault+0xef/0x1d0 [ 2650.558766] ? _copy_from_user+0xd2/0x130 [ 2650.562915] ? security_sctp_bind_connect+0x8f/0xc0 [ 2650.567934] __sctp_setsockopt_connectx+0x132/0x1c0 [ 2650.572958] sctp_setsockopt+0x2a01/0x4b40 [ 2650.577196] ? check_preemption_disabled+0x41/0x280 [ 2650.582227] ? sctp_setsockopt_paddr_thresholds+0x3f0/0x3f0 [ 2650.587946] ? aa_sk_perm+0x534/0x930 [ 2650.591755] ? aa_af_perm+0x230/0x230 [ 2650.595571] __sys_setsockopt+0x14d/0x240 [ 2650.599730] ? kernel_accept+0x310/0x310 [ 2650.603803] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2650.609180] __x64_sys_setsockopt+0xba/0x150 [ 2650.613577] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2650.618149] do_syscall_64+0xf9/0x620 [ 2650.621945] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2650.627135] RIP: 0033:0x7f51bcdceae9 [ 2650.630923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2650.649897] RSP: 002b:00007f51ba323188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2650.657590] RAX: ffffffffffffffda RBX: 00007f51bcee2020 RCX: 00007f51bcdceae9 [ 2650.664851] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000005 [ 2650.672159] RBP: 00007f51bce28f25 R08: 0000000000000010 R09: 0000000000000000 [ 2650.679418] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000000 [ 2650.686685] R13: 00007fffcefe06ef R14: 00007f51ba323300 R15: 0000000000022000 [ 2650.699226] Mem-Info: [ 2650.710792] active_anon:144748 inactive_anon:1293937 isolated_anon:0 [ 2650.710792] active_file:41 inactive_file:20 isolated_file:7 [ 2650.710792] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2650.710792] slab_reclaimable:20012 slab_unreclaimable:124734 [ 2650.710792] mapped:1335481 shmem:1299891 pagetables:16308 bounce:0 [ 2650.710792] free:25039 free_pcp:130 free_cma:0 [ 2650.745353] Node 0 active_anon:522308kB inactive_anon:1423872kB active_file:156kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:1551752kB dirty:0kB writeback:0kB shmem:1429292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2650.774303] Bluetooth: hci2: command 0x0419 tx timeout [ 2650.774676] Node 1 active_anon:56684kB inactive_anon:3751876kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3790172kB dirty:0kB writeback:0kB shmem:3770272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2650.807620] Node 0 DMA free:10940kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2128kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2650.836128] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2650.841665] Node 0 DMA32 free:35528kB min:35996kB low:44992kB high:53988kB active_anon:520092kB inactive_anon:1421156kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13792kB pagetables:30028kB bounce:0kB free_pcp:520kB local_pcp:0kB free_cma:0kB [ 2650.872724] lowmem_reserve[]: 0 0 1 1 1 [ 2650.876818] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2650.902909] lowmem_reserve[]: 0 0 0 0 0 [ 2650.906888] Node 1 Normal free:53684kB min:53876kB low:67344kB high:80812kB active_anon:56684kB inactive_anon:3751876kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14016kB pagetables:35112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2650.936030] lowmem_reserve[]: 0 0 0 0 0 [ 2650.940002] Node 0 DMA: 29*4kB (UMEH) 19*8kB (UMEH) 17*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10940kB [ 2650.957145] Node 0 DMA32: 154*4kB (UMH) 205*8kB (UMH) 680*16kB (UMH) 699*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35504kB [ 2650.973376] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2650.984515] Node 1 Normal: 75*4kB (UME) 14*8kB (UMEH) 19*16kB (UMH) 79*32kB (UMEH) 565*64kB (UMEH) 97*128kB (UME) 9*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54124kB [ 2651.000645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2651.009554] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2651.018289] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2651.027162] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2651.035828] 1299983 total pagecache pages [ 2651.041471] 0 pages in swap cache [ 2651.044943] Swap cache stats: add 0, delete 0, find 0/0 [ 2651.050307] Free swap = 0kB [ 2651.053455] Total swap = 0kB [ 2651.056532] 2097051 pages RAM [ 2651.059627] 0 pages HighMem/MovableOnly [ 2651.063670] 369649 pages reserved [ 2651.067119] 0 pages cma reserved [ 2651.070482] Out of memory (oom_kill_allocating_task): Kill process 17003 (syz-executor.1) score 0 or sacrifice child [ 2651.084875] Killed process 16962 (syz-executor.1) total-vm:93672kB, anon-rss:428kB, file-rss:34380kB, shmem-rss:11348kB [ 2651.109667] oom_reaper: reaped process 16962 (syz-executor.1), now anon-rss:0kB, file-rss:34684kB, shmem-rss:11480kB [ 2651.158448] systemd-journal invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2651.248918] systemd-journal cpuset=/ mems_allowed=0-1 [ 2651.282757] CPU: 1 PID: 4694 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2651.290664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2651.300020] Call Trace: [ 2651.302613] dump_stack+0x1fc/0x2ef [ 2651.306241] dump_header+0x15d/0xc3f [ 2651.309969] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2651.315068] ? ___ratelimit+0x319/0x590 [ 2651.319038] oom_kill_process.cold+0x10/0x692 [ 2651.323542] ? check_preemption_disabled+0x41/0x280 [ 2651.328560] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2651.333847] out_of_memory+0x1072/0x1390 [ 2651.337920] ? oom_killer_disable+0x270/0x270 [ 2651.342419] ? mutex_trylock+0x15f/0x1a0 [ 2651.346494] __alloc_pages_nodemask+0x23a2/0x2890 [ 2651.351364] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2651.356202] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2651.361155] ? __put_cred+0x1de/0x250 [ 2651.365096] ? do_faccessat+0x64e/0x7a0 [ 2651.369055] ? do_syscall_64+0xf9/0x620 [ 2651.373226] ? kmem_cache_free+0x226/0x260 [ 2651.377458] ? ____cache_alloc_node+0x156/0x1d0 [ 2651.382178] ? cache_grow_begin+0x64/0x8a0 [ 2651.386436] cache_grow_begin+0xa4/0x8a0 [ 2651.390485] fallback_alloc+0x213/0x2e0 [ 2651.394446] kmem_cache_alloc+0x1e4/0x370 [ 2651.398575] getname_flags+0xce/0x590 [ 2651.402406] do_mkdirat+0x8d/0x2d0 [ 2651.405933] ? __ia32_sys_mknod+0x120/0x120 [ 2651.410240] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2651.415591] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2651.420590] ? do_syscall_64+0x21/0x620 [ 2651.424548] do_syscall_64+0xf9/0x620 [ 2651.428334] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2651.433505] RIP: 0033:0x7efe13112687 [ 2651.437201] Code: Bad RIP value. [ 2651.440542] RSP: 002b:00007ffd3cd7d098 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 2651.448231] RAX: ffffffffffffffda RBX: 00007ffd3cd7ffb0 RCX: 00007efe13112687 [ 2651.455480] RDX: 00007efe13b83a00 RSI: 00000000000001ed RDI: 0000555dd025d8a0 [ 2651.462901] RBP: 00007ffd3cd7d0d0 R08: 0000000000000000 R09: 0000000000000000 [ 2651.470149] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 2651.477396] R13: 0000000000000000 R14: 00007ffd3cd7ffb0 R15: 00007ffd3cd7d5c0 [ 2651.489786] Mem-Info: [ 2651.538691] active_anon:144748 inactive_anon:1293956 isolated_anon:0 [ 2651.538691] active_file:57 inactive_file:0 isolated_file:0 [ 2651.538691] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2651.538691] slab_reclaimable:20018 slab_unreclaimable:124723 [ 2651.538691] mapped:1335499 shmem:1299910 pagetables:16309 bounce:0 [ 2651.538691] free:25084 free_pcp:63 free_cma:0 [ 2651.606794] Node 0 active_anon:522308kB inactive_anon:1423948kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1551824kB dirty:0kB writeback:0kB shmem:1429368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2651.689486] Node 1 active_anon:56684kB inactive_anon:3751876kB active_file:108kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3790172kB dirty:0kB writeback:0kB shmem:3770272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2651.720083] Node 0 DMA free:10940kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2128kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2651.829701] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2651.876409] Node 0 DMA32 free:35772kB min:35996kB low:44992kB high:53988kB active_anon:520092kB inactive_anon:1421820kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13792kB pagetables:30032kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 2651.987687] lowmem_reserve[]: 0 0 1 1 1 [ 2652.073615] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2652.127816] lowmem_reserve[]: 0 0 0 0 0 [ 2652.136161] Node 1 Normal free:53204kB min:53876kB low:67344kB high:80812kB active_anon:56664kB inactive_anon:3751876kB active_file:8kB inactive_file:108kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14016kB pagetables:35112kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 2652.169211] lowmem_reserve[]: 0 0 0 0 0 [ 2652.173332] Node 0 DMA: 29*4kB (UMEH) 19*8kB (UMEH) 17*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10940kB [ 2652.189892] Node 0 DMA32: 240*4kB (UMEH) 206*8kB (UMH) 690*16kB (UMEH) 708*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36304kB [ 2652.204008] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2652.215328] Node 1 Normal: 82*4kB (UME) 20*8kB (UMEH) 10*16kB (UMH) 82*32kB (UMEH) 562*64kB (UMEH) 97*128kB (UME) 9*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53960kB [ 2652.230883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2652.241333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2652.249994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2652.282797] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2652.301157] 1299972 total pagecache pages [ 2652.305347] 0 pages in swap cache [ 2652.308795] Swap cache stats: add 0, delete 0, find 0/0 [ 2652.314180] Free swap = 0kB [ 2652.317302] Total swap = 0kB [ 2652.320306] 2097051 pages RAM [ 2652.323448] 0 pages HighMem/MovableOnly [ 2652.327499] 369649 pages reserved [ 2652.330938] 0 pages cma reserved [ 2652.334546] Out of memory (oom_kill_allocating_task): Kill process 4694 (systemd-journal) score 0 or sacrifice child [ 2652.345313] Killed process 4694 (systemd-journal) total-vm:78876kB, anon-rss:528kB, file-rss:0kB, shmem-rss:14016kB [ 2652.359122] oom_reaper: reaped process 4694 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:14016kB [ 2652.496217] syz-executor.0 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2652.571660] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2652.601629] CPU: 0 PID: 29056 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2652.609534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2652.618917] Call Trace: [ 2652.621511] dump_stack+0x1fc/0x2ef [ 2652.625146] dump_header+0x15d/0xc3f [ 2652.628872] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2652.633973] ? ___ratelimit+0x319/0x590 [ 2652.637946] oom_kill_process.cold+0x10/0x692 [ 2652.642451] ? check_preemption_disabled+0x41/0x280 [ 2652.647477] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2652.652757] out_of_memory+0x1072/0x1390 [ 2652.656823] ? oom_killer_disable+0x270/0x270 [ 2652.661349] ? mutex_trylock+0x15f/0x1a0 [ 2652.665413] __alloc_pages_nodemask+0x23a2/0x2890 [ 2652.670268] ? find_get_entry+0x4cd/0x8a0 [ 2652.674430] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2652.679304] alloc_pages_current+0x193/0x2a0 [ 2652.683725] filemap_fault+0x146e/0x2180 [ 2652.687884] ext4_filemap_fault+0x84/0xb0 [ 2652.692036] __do_fault+0x10b/0x4b0 [ 2652.695672] __handle_mm_fault+0x273b/0x41c0 [ 2652.700085] ? vm_insert_page+0x9c0/0x9c0 [ 2652.704249] ? check_preemption_disabled+0x41/0x280 [ 2652.709271] handle_mm_fault+0x436/0xb10 [ 2652.713344] __do_page_fault+0x68e/0xd60 [ 2652.717413] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2652.722522] ? spurious_fault+0x840/0x840 [ 2652.726675] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2652.731525] ? page_fault+0x8/0x30 [ 2652.735086] page_fault+0x1e/0x30 [ 2652.738541] RIP: 0033:0x7fdd7a709f20 [ 2652.742252] Code: Bad RIP value. [ 2652.745609] RSP: 002b:00007fff9cf0cfb8 EFLAGS: 00010217 [ 2652.750966] RAX: 0000000000000000 RBX: 0000000000000bd5 RCX: 00007fdd7a6c5b87 [ 2652.758242] RDX: 0000000040000001 RSI: 00007fff9cf0d01c RDI: 00000000ffffffff [ 2652.765511] RBP: 00007fff9cf0d01c R08: 00007fff9cfae000 R09: 000002a7d3e616f7 [ 2652.772798] R10: 001d4d0346319d20 R11: 0000000000000217 R12: 0000000000000064 [ 2652.780066] R13: 0000000000286a11 R14: 000000000000000f R15: 00007fff9cf0d080 [ 2652.883454] Mem-Info: [ 2652.886036] active_anon:142524 inactive_anon:1293206 isolated_anon:0 [ 2652.886036] active_file:289 inactive_file:329 isolated_file:35 [ 2652.886036] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2652.886036] slab_reclaimable:20019 slab_unreclaimable:124424 [ 2652.886036] mapped:1335315 shmem:1297085 pagetables:16272 bounce:0 [ 2652.886036] free:25248 free_pcp:368 free_cma:0 [ 2652.930870] Node 0 active_anon:520132kB inactive_anon:1420948kB active_file:656kB inactive_file:704kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1544388kB dirty:0kB writeback:0kB shmem:1424768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2652.966767] Node 1 active_anon:49964kB inactive_anon:3751876kB active_file:56kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:3796172kB dirty:0kB writeback:0kB shmem:3763572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2652.993160] ieee802154 phy0 wpan0: encryption failed: -22 [ 2653.000119] ieee802154 phy1 wpan1: encryption failed: -22 [ 2653.054463] Node 0 DMA free:10940kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2128kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2653.102546] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2653.118654] Node 0 DMA32 free:36224kB min:35996kB low:44992kB high:53988kB active_anon:517920kB inactive_anon:1418776kB active_file:724kB inactive_file:1136kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13600kB pagetables:29912kB bounce:0kB free_pcp:424kB local_pcp:240kB free_cma:0kB [ 2653.149538] lowmem_reserve[]: 0 0 1 1 1 [ 2653.171112] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2653.272654] lowmem_reserve[]: 0 0 0 0 0 [ 2653.276675] Node 1 Normal free:55708kB min:53876kB low:67344kB high:80812kB active_anon:49800kB inactive_anon:3751940kB active_file:144kB inactive_file:672kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:13920kB pagetables:35112kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 2653.307801] lowmem_reserve[]: 0 0 0 0 0 [ 2653.312271] Node 0 DMA: 29*4kB (UMEH) 19*8kB (UMEH) 17*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10940kB [ 2653.329201] Node 0 DMA32: 122*4kB (UMH) 339*8kB (UMH) 631*16kB (UMH) 708*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35952kB [ 2653.364759] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2653.414510] Node 1 Normal: 277*4kB (UME) 392*8kB (UMEH) 160*16kB (UMH) 52*32kB (MEH) 517*64kB (UMEH) 97*128kB (UME) 9*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56276kB [ 2653.432064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2653.449285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2653.471384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2653.481385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2653.510026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2653.546337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2653.591076] 1297555 total pagecache pages [ 2653.595251] 0 pages in swap cache [ 2653.635505] Swap cache stats: add 0, delete 0, find 0/0 [ 2653.640890] Free swap = 0kB [ 2653.671120] Total swap = 0kB [ 2653.674166] 2097051 pages RAM [ 2653.677284] 0 pages HighMem/MovableOnly [ 2653.687153] 369649 pages reserved [ 2653.690612] 0 pages cma reserved [ 2653.699772] Out of memory (oom_kill_allocating_task): Kill process 29056 (syz-executor.0) score 0 or sacrifice child [ 2653.722177] Killed process 16742 (syz-executor.0) total-vm:93804kB, anon-rss:432kB, file-rss:34820kB, shmem-rss:11480kB [ 2653.985026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2654.015533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2654.046378] device bridge_slave_1 left promiscuous mode [ 2654.064335] bridge0: port 2(bridge_slave_1) entered disabled state [ 2654.138539] device bridge_slave_0 left promiscuous mode [ 2654.147377] bridge0: port 1(bridge_slave_0) entered disabled state [ 2654.186430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2654.208857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2654.254015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2654.260759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2654.285277] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2654.316308] device bridge_slave_1 left promiscuous mode [ 2654.326470] bridge0: port 2(bridge_slave_1) entered disabled state [ 2654.373526] device bridge_slave_0 left promiscuous mode [ 2654.379045] bridge0: port 1(bridge_slave_0) entered disabled state [ 2654.396794] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2654.460105] device veth1_macvtap left promiscuous mode [ 2654.474328] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2654.491085] device veth0_macvtap left promiscuous mode [ 2654.504223] device veth1_vlan left promiscuous mode [ 2654.530435] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2654.551291] device veth0_vlan left promiscuous mode [ 2654.585695] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2654.608456] device veth1_macvtap left promiscuous mode [ 2654.614548] device veth0_macvtap left promiscuous mode [ 2654.617873] systemd[1]: Stopped Journal Service. [ 2654.619965] device veth1_vlan left promiscuous mode [ 2654.655748] device veth0_vlan left promiscuous mode [ 2654.720646] systemd[1]: Starting Journal Service... [ 2654.895635] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2654.977057] systemd-journald[17038]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2656.590906] Bluetooth: hci3: command 0x0409 tx timeout [ 2656.923239] systemd-journal invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2656.941278] systemd-journal cpuset=/ mems_allowed=0-1 [ 2656.946492] CPU: 1 PID: 17038 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2656.954449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2656.963804] Call Trace: [ 2656.966396] dump_stack+0x1fc/0x2ef [ 2656.970023] dump_header+0x15d/0xc3f [ 2656.973830] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2656.978933] ? ___ratelimit+0x319/0x590 [ 2656.982910] oom_kill_process.cold+0x10/0x692 [ 2656.987407] ? check_preemption_disabled+0x41/0x280 [ 2656.992458] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2656.997820] out_of_memory+0x1072/0x1390 [ 2657.001887] ? oom_killer_disable+0x270/0x270 [ 2657.006420] ? mutex_trylock+0x15f/0x1a0 [ 2657.010482] __alloc_pages_nodemask+0x23a2/0x2890 [ 2657.015340] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2657.020178] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2657.025015] ? __put_cred+0x1de/0x250 [ 2657.028824] ? do_faccessat+0x64e/0x7a0 [ 2657.032796] ? do_syscall_64+0xf9/0x620 [ 2657.036773] ? kmem_cache_free+0x226/0x260 [ 2657.041012] ? ____cache_alloc_node+0x156/0x1d0 [ 2657.045675] ? cache_grow_begin+0x64/0x8a0 [ 2657.049997] cache_grow_begin+0xa4/0x8a0 [ 2657.054061] fallback_alloc+0x213/0x2e0 [ 2657.058040] kmem_cache_alloc+0x1e4/0x370 [ 2657.062195] getname_flags+0xce/0x590 [ 2657.065994] do_mkdirat+0x8d/0x2d0 [ 2657.069533] ? __ia32_sys_mknod+0x120/0x120 [ 2657.073859] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2657.079223] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2657.084237] ? do_syscall_64+0x21/0x620 [ 2657.088212] do_syscall_64+0xf9/0x620 [ 2657.092014] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2657.097199] RIP: 0033:0x7fd2a6337687 [ 2657.100908] Code: Bad RIP value. [ 2657.104266] RSP: 002b:00007fffbd074f58 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 2657.111968] RAX: ffffffffffffffda RBX: 00007fffbd077f10 RCX: 00007fd2a6337687 [ 2657.119241] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 0000559c09f95d60 [ 2657.126503] RBP: 00007fffbd074f90 R08: 0000559c088763e5 R09: 0000000000000018 [ 2657.133766] R10: 001d6322ff5dedff R11: 0000000000000293 R12: 0000000000000000 [ 2657.141128] R13: 0000000000000001 R14: 0000559c09f95d60 R15: 00007fffbd0755d0 [ 2657.178744] Mem-Info: [ 2657.183575] active_anon:142596 inactive_anon:1292381 isolated_anon:0 [ 2657.183575] active_file:14 inactive_file:576 isolated_file:0 [ 2657.183575] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2657.183575] slab_reclaimable:20078 slab_unreclaimable:124597 [ 2657.183575] mapped:1333168 shmem:1296236 pagetables:16296 bounce:0 [ 2657.183575] free:25733 free_pcp:273 free_cma:0 [ 2657.224271] Node 0 active_anon:520476kB inactive_anon:1422940kB active_file:20kB inactive_file:2264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1546008kB dirty:0kB writeback:0kB shmem:1426828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2657.261237] Node 1 active_anon:49908kB inactive_anon:3746584kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3786664kB dirty:0kB writeback:0kB shmem:3758116kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2657.295335] Node 0 DMA free:10940kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2128kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2657.328595] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2657.334613] Node 0 DMA32 free:36164kB min:35996kB low:44992kB high:53988kB active_anon:518260kB inactive_anon:1420812kB active_file:20kB inactive_file:2264kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13536kB pagetables:29968kB bounce:0kB free_pcp:264kB local_pcp:144kB free_cma:0kB [ 2657.370451] lowmem_reserve[]: 0 0 1 1 1 [ 2657.374527] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2657.406821] lowmem_reserve[]: 0 0 0 0 0 [ 2657.410991] Node 1 Normal free:55824kB min:53876kB low:67344kB high:80812kB active_anon:49908kB inactive_anon:3746584kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14048kB pagetables:35124kB bounce:0kB free_pcp:824kB local_pcp:820kB free_cma:0kB [ 2657.446409] lowmem_reserve[]: 0 0 0 0 0 [ 2657.450417] Node 0 DMA: 29*4kB (UMEH) 19*8kB (UMEH) 17*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10940kB [ 2657.472936] Node 0 DMA32: 23*4kB (UEH) 395*8kB (UMEH) 631*16kB (UMEH) 713*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36164kB [ 2657.488613] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2657.500304] Node 1 Normal: 474*4kB (UM) 723*8kB (UMH) 163*16kB (UMH) 53*32kB (MEH) 455*64kB (UMEH) 97*128kB (UME) 9*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55824kB [ 2657.515912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2657.524846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2657.533509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2657.542433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2657.551088] 1296848 total pagecache pages [ 2657.555236] 0 pages in swap cache [ 2657.558681] Swap cache stats: add 0, delete 0, find 0/0 [ 2657.564101] Free swap = 0kB [ 2657.567125] Total swap = 0kB [ 2657.570142] 2097051 pages RAM [ 2657.573461] 0 pages HighMem/MovableOnly [ 2657.577428] 369649 pages reserved [ 2657.580969] 0 pages cma reserved [ 2657.584342] Out of memory (oom_kill_allocating_task): Kill process 17038 (systemd-journal) score 0 or sacrifice child [ 2657.595189] Killed process 17038 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1248kB [ 2657.607324] oom_reaper: reaped process 17038 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1260kB [ 2657.660891] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 2657.819034] systemd[1]: Failed to start Journal Service. [ 2658.671398] Bluetooth: hci3: command 0x041b tx timeout [ 2660.760681] Bluetooth: hci3: command 0x040f tx timeout [ 2662.322797] systemd-journal invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2662.341178] systemd-journal cpuset=/ mems_allowed=0-1 [ 2662.346393] CPU: 0 PID: 17041 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2662.354357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2662.363712] Call Trace: [ 2662.366299] dump_stack+0x1fc/0x2ef [ 2662.369931] dump_header+0x15d/0xc3f [ 2662.373643] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2662.378738] ? ___ratelimit+0x319/0x590 [ 2662.382795] oom_kill_process.cold+0x10/0x692 [ 2662.387289] ? check_preemption_disabled+0x41/0x280 [ 2662.392313] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2662.397586] out_of_memory+0x1072/0x1390 [ 2662.401663] ? oom_killer_disable+0x270/0x270 [ 2662.406170] ? mutex_trylock+0x15f/0x1a0 [ 2662.410247] __alloc_pages_nodemask+0x23a2/0x2890 [ 2662.415117] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2662.419961] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2662.424811] ? __put_seccomp_filter+0xa0/0xa0 [ 2662.429324] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2662.434515] ? ____cache_alloc_node+0x156/0x1d0 [ 2662.439177] ? cache_grow_begin+0x64/0x8a0 [ 2662.443439] cache_grow_begin+0xa4/0x8a0 [ 2662.447518] fallback_alloc+0x213/0x2e0 [ 2662.451502] kmem_cache_alloc+0x1e4/0x370 [ 2662.455745] getname_flags+0xce/0x590 [ 2662.459547] do_sys_open+0x26c/0x520 [ 2662.463263] ? filp_open+0x70/0x70 [ 2662.466812] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2662.472176] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2662.477193] ? do_syscall_64+0x21/0x620 [ 2662.481170] do_syscall_64+0xf9/0x620 [ 2662.484973] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2662.490155] RIP: 0033:0x7f704b3f1840 [ 2662.493863] Code: Bad RIP value. [ 2662.497223] RSP: 002b:00007ffd4d2d3d58 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2662.504928] RAX: ffffffffffffffda RBX: 00007ffd4d2d4060 RCX: 00007f704b3f1840 [ 2662.512196] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055e792597e20 [ 2662.519462] RBP: 0000000000000005 R08: 000000000000c0c1 R09: 00000000ffffffff [ 2662.526750] R10: 00007ffd4d2d4080 R11: 0000000000000246 R12: 00000000ffffffff [ 2662.534020] R13: 000055e792594040 R14: 00007ffd4d2d4020 R15: 000055e792597c40 [ 2662.543092] Mem-Info: [ 2662.545885] active_anon:142483 inactive_anon:1292379 isolated_anon:0 [ 2662.545885] active_file:36 inactive_file:20 isolated_file:0 [ 2662.545885] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2662.545885] slab_reclaimable:20071 slab_unreclaimable:124557 [ 2662.545885] mapped:1332468 shmem:1296236 pagetables:16272 bounce:0 [ 2662.545885] free:25814 free_pcp:817 free_cma:0 [ 2662.580788] Node 0 active_anon:520408kB inactive_anon:1422932kB active_file:64kB inactive_file:176kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1543948kB dirty:0kB writeback:0kB shmem:1426828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2662.610530] Node 1 active_anon:49524kB inactive_anon:3746584kB active_file:80kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3785924kB dirty:0kB writeback:0kB shmem:3758116kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2662.644914] Node 0 DMA free:10940kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2128kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2662.680934] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2662.686543] Node 0 DMA32 free:37088kB min:35996kB low:44992kB high:53988kB active_anon:518192kB inactive_anon:1420804kB active_file:228kB inactive_file:1008kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13536kB pagetables:29928kB bounce:0kB free_pcp:1620kB local_pcp:288kB free_cma:0kB [ 2662.724513] lowmem_reserve[]: 0 0 1 1 1 [ 2662.729014] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2662.768318] lowmem_reserve[]: 0 0 0 0 0 [ 2662.778216] Node 1 Normal free:54972kB min:53876kB low:67344kB high:80812kB active_anon:49524kB inactive_anon:3746584kB active_file:0kB inactive_file:428kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14016kB pagetables:35068kB bounce:0kB free_pcp:1156kB local_pcp:808kB free_cma:0kB [ 2662.812933] lowmem_reserve[]: 0 0 0 0 0 [ 2662.816943] Node 0 DMA: 29*4kB (UMEH) 19*8kB (UMEH) 17*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10940kB [ 2662.833620] Bluetooth: hci3: command 0x0419 tx timeout [ 2662.839224] Node 0 DMA32: 30*4kB (UMEH) 598*8kB (UMEH) 580*16kB (UMEH) 711*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36936kB [ 2662.853632] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2662.865002] Node 1 Normal: 343*4kB (M) 850*8kB (UMH) 164*16kB (UMH) 55*32kB (UMEH) 434*64kB (UMEH) 97*128kB (UME) 9*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55052kB [ 2662.880889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2662.889819] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2662.898827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2662.907948] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2662.917166] 1296695 total pagecache pages [ 2662.921699] 0 pages in swap cache [ 2662.925151] Swap cache stats: add 0, delete 0, find 0/0 [ 2662.930862] Free swap = 0kB [ 2662.933874] Total swap = 0kB [ 2662.936887] 2097051 pages RAM [ 2662.939980] 0 pages HighMem/MovableOnly [ 2662.944289] 369649 pages reserved [ 2662.947736] 0 pages cma reserved [ 2662.951571] Out of memory (oom_kill_allocating_task): Kill process 17041 (systemd-journal) score 0 or sacrifice child [ 2662.962699] Killed process 17041 (systemd-journal) total-vm:37900kB, anon-rss:448kB, file-rss:0kB, shmem-rss:0kB [ 2662.974711] oom_reaper: reaped process 17041 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2663.774437] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 2664.163143] systemd[1]: Failed to start Journal Service. [ 2664.193322] systemd[1]: systemd-journald.service: Unit entered failed state. [ 2664.221534] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2664.249549] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2664.362591] systemd[1]: Stopped Journal Service. [ 2664.731400] systemd[1]: Starting Journal Service... [ 2673.288866] device hsr_slave_1 left promiscuous mode [ 2673.307928] device hsr_slave_0 left promiscuous mode [ 2673.333936] team0 (unregistering): Port device team_slave_1 removed [ 2673.352736] team0 (unregistering): Port device team_slave_0 removed [ 2673.371637] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2673.386487] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2673.449144] bond0 (unregistering): Released all slaves [ 2673.497968] device hsr_slave_1 left promiscuous mode [ 2673.506265] device hsr_slave_0 left promiscuous mode [ 2673.524873] team0 (unregistering): Port device team_slave_1 removed [ 2673.534967] team0 (unregistering): Port device team_slave_0 removed [ 2673.546931] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2673.557175] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2673.590613] bond0 (unregistering): Released all slaves [ 2673.865332] IPVS: ftp: loaded support on port[0] = 21 [ 2674.693571] systemd-journald[17044]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2675.192929] chnl_net:caif_netlink_parms(): no params data found [ 2675.901241] bridge0: port 1(bridge_slave_0) entered blocking state [ 2675.909277] bridge0: port 1(bridge_slave_0) entered disabled state [ 2675.969152] device bridge_slave_0 entered promiscuous mode 22:27:42 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x4401}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2676.096677] bridge0: port 2(bridge_slave_1) entered blocking state [ 2676.171096] bridge0: port 2(bridge_slave_1) entered disabled state [ 2676.282214] device bridge_slave_1 entered promiscuous mode [ 2676.347943] IPVS: ftp: loaded support on port[0] = 21 [ 2676.556785] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2676.715888] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2676.976403] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2677.901518] team0: Port device team_slave_0 added [ 2677.941436] bridge0: port 1(bridge_slave_0) entered blocking state [ 2677.948006] bridge0: port 1(bridge_slave_0) entered disabled state [ 2678.035714] device bridge_slave_0 entered promiscuous mode [ 2678.128074] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2678.156390] team0: Port device team_slave_1 added [ 2678.200331] bridge0: port 2(bridge_slave_1) entered blocking state [ 2678.206869] bridge0: port 2(bridge_slave_1) entered disabled state [ 2678.910182] device bridge_slave_1 entered promiscuous mode [ 2680.280948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2680.287217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2680.551056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2680.612040] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2680.690178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2680.696443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2680.879141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2680.931330] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2681.033838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2681.131083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 22:27:48 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd55, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2681.636453] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2681.665065] team0: Port device team_slave_0 added [ 2681.916337] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2681.941564] IPVS: ftp: loaded support on port[0] = 21 [ 2682.083398] team0: Port device team_slave_1 added [ 2682.140431] device hsr_slave_0 entered promiscuous mode [ 2683.025137] systemd-udevd invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 2683.069047] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2683.160290] CPU: 0 PID: 4697 Comm: systemd-udevd Not tainted 4.19.211-syzkaller #0 [ 2683.168195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2683.177541] Call Trace: [ 2683.180131] dump_stack+0x1fc/0x2ef [ 2683.183760] dump_header+0x15d/0xc3f [ 2683.187479] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2683.192609] ? ___ratelimit+0x319/0x590 [ 2683.196588] oom_kill_process.cold+0x10/0x692 [ 2683.201083] ? lock_downgrade+0x720/0x720 [ 2683.205247] ? check_preemption_disabled+0x41/0x280 [ 2683.210278] out_of_memory+0x34d/0x1390 [ 2683.214261] ? oom_killer_disable+0x270/0x270 [ 2683.218760] ? mutex_trylock+0x15f/0x1a0 [ 2683.222834] __alloc_pages_nodemask+0x23a2/0x2890 [ 2683.227695] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2683.232539] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2683.237384] ? __put_seccomp_filter+0xa0/0xa0 [ 2683.241887] ? lock_downgrade+0x720/0x720 [ 2683.246040] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2683.251232] ? ____cache_alloc_node+0x156/0x1d0 [ 2683.255899] ? cache_grow_begin+0x64/0x8a0 [ 2683.260138] cache_grow_begin+0xa4/0x8a0 [ 2683.264202] fallback_alloc+0x213/0x2e0 [ 2683.268194] kmem_cache_alloc+0x1e4/0x370 [ 2683.272365] getname_flags+0xce/0x590 [ 2683.276169] do_sys_open+0x26c/0x520 [ 2683.279887] ? filp_open+0x70/0x70 [ 2683.283432] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2683.288812] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2683.293831] ? do_syscall_64+0x21/0x620 [ 2683.297998] do_syscall_64+0xf9/0x620 [ 2683.301804] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2683.306995] RIP: 0033:0x7f94d8ce36f0 [ 2683.310710] Code: Bad RIP value. [ 2683.314071] RSP: 002b:00007ffe7394f428 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2683.321775] RAX: ffffffffffffffda RBX: 0000564267141e20 RCX: 00007f94d8ce36f0 [ 2683.329044] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 0000564267141b60 [ 2683.336315] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 2683.343586] R10: 0000000000080000 R11: 0000000000000246 R12: 0000564265c0568a [ 2683.350861] R13: 0000000000000001 R14: 000056426712d650 R15: 0000000000000001 [ 2683.362841] Mem-Info: [ 2683.365290] active_anon:142520 inactive_anon:1295783 isolated_anon:0 [ 2683.365290] active_file:113 inactive_file:89 isolated_file:17 [ 2683.365290] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2683.365290] slab_reclaimable:20256 slab_unreclaimable:121912 [ 2683.365290] mapped:1334325 shmem:1299655 pagetables:16277 bounce:0 [ 2683.365290] free:25314 free_pcp:172 free_cma:0 [ 2683.443389] Node 0 active_anon:520584kB inactive_anon:1439040kB active_file:88kB inactive_file:988kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:1555000kB dirty:0kB writeback:0kB shmem:1442996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2683.472568] Node 1 active_anon:49496kB inactive_anon:3744092kB active_file:4kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3782300kB dirty:0kB writeback:0kB shmem:3755624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2683.501585] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2683.558993] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2683.564094] Node 0 DMA32 free:35676kB min:35996kB low:44992kB high:53988kB active_anon:518368kB inactive_anon:1436932kB active_file:124kB inactive_file:516kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13568kB pagetables:30044kB bounce:0kB free_pcp:1280kB local_pcp:216kB free_cma:0kB [ 2683.617166] lowmem_reserve[]: 0 0 1 1 1 [ 2683.621270] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2683.647617] lowmem_reserve[]: 0 0 0 0 0 [ 2683.651648] Node 1 Normal free:53360kB min:53876kB low:67344kB high:80812kB active_anon:49496kB inactive_anon:3744092kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14016kB pagetables:34972kB bounce:0kB free_pcp:128kB local_pcp:76kB free_cma:0kB [ 2683.681173] lowmem_reserve[]: 0 0 0 0 0 [ 2683.685222] Node 0 DMA: 32*4kB (UMEH) 20*8kB (UMEH) 17*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 2683.702255] Node 0 DMA32: 322*4kB (UMH) 621*8kB (UMEH) 620*16kB (UEH) 677*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37840kB [ 2683.716151] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2683.727317] Node 1 Normal: 40*4kB (UM) 545*8kB (UMEH) 394*16kB (UMEH) 133*32kB (UMH) 392*64kB (UMEH) 91*128kB (UME) 9*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54120kB [ 2683.743062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2683.752131] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2683.760949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2683.769929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2683.778498] 1299720 total pagecache pages [ 2683.782664] 0 pages in swap cache [ 2683.786096] Swap cache stats: add 0, delete 0, find 0/0 [ 2683.791462] Free swap = 0kB [ 2683.794473] Total swap = 0kB [ 2683.797475] 2097051 pages RAM [ 2683.800612] 0 pages HighMem/MovableOnly [ 2683.805723] 369649 pages reserved [ 2683.809222] 0 pages cma reserved [ 2683.812581] Out of memory: Kill process 12663 (syz-executor.1) score 1006 or sacrifice child [ 2683.821216] Killed process 12663 (syz-executor.1) total-vm:93540kB, anon-rss:428kB, file-rss:34820kB, shmem-rss:11480kB [ 2684.054703] device hsr_slave_1 entered promiscuous mode [ 2684.198484] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2684.250779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2684.257052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2684.419955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2684.537803] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2684.551171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2684.557475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2684.627012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2684.641932] IPVS: ftp: loaded support on port[0] = 21 [ 2684.743591] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2685.070542] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2685.635653] device hsr_slave_0 entered promiscuous mode [ 2685.703003] device hsr_slave_1 entered promiscuous mode [ 2685.769558] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2685.776966] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 22:27:52 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd56, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2686.483607] IPVS: ftp: loaded support on port[0] = 21 [ 2687.476247] kworker/u4:0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2687.638808] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 2687.643787] CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 4.19.211-syzkaller #0 [ 2687.651141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2687.660500] Workqueue: events_unbound call_usermodehelper_exec_work [ 2687.666909] Call Trace: [ 2687.669499] dump_stack+0x1fc/0x2ef [ 2687.673132] dump_header+0x15d/0xc3f [ 2687.676845] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2687.681954] ? ___ratelimit+0x319/0x590 [ 2687.685935] oom_kill_process.cold+0x10/0x692 [ 2687.690432] ? oom_badness.part.0+0x135/0x6e0 [ 2687.694929] ? lock_downgrade+0x720/0x720 [ 2687.699076] ? check_preemption_disabled+0x41/0x280 [ 2687.704096] out_of_memory+0x34d/0x1390 [ 2687.708075] ? oom_killer_disable+0x270/0x270 [ 2687.712577] ? mutex_trylock+0x15f/0x1a0 [ 2687.716637] __alloc_pages_nodemask+0x23a2/0x2890 [ 2687.721535] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2687.726384] ? should_fail+0x142/0x7b0 [ 2687.730270] ? fs_reclaim_release+0xd0/0x110 [ 2687.734686] ? check_preemption_disabled+0x41/0x280 [ 2687.739717] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2687.744733] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2687.749495] copy_process.part.0+0x3cf/0x8260 [ 2687.753993] ? __lock_acquire+0x6de/0x3ff0 [ 2687.758234] ? __lock_acquire+0x6de/0x3ff0 [ 2687.762472] ? umh_complete+0x90/0x90 [ 2687.766272] ? __cleanup_sighand+0x60/0x60 [ 2687.770508] ? mark_held_locks+0xf0/0xf0 [ 2687.774580] ? __lock_acquire+0x6de/0x3ff0 [ 2687.778820] _do_fork+0x22f/0xf30 [ 2687.782271] ? umh_complete+0x90/0x90 [ 2687.786077] ? fork_idle+0x220/0x220 [ 2687.789790] ? lock_acquire+0x170/0x3c0 [ 2687.793767] ? debug_object_deactivate+0xfc/0x2e0 [ 2687.798610] ? trace_hardirqs_off+0x64/0x200 [ 2687.803047] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2687.808151] ? umh_complete+0x90/0x90 [ 2687.811953] kernel_thread+0x2f/0x40 [ 2687.815669] call_usermodehelper_exec_work+0x16d/0x260 [ 2687.820942] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 2687.826485] process_one_work+0x864/0x1570 [ 2687.830734] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2687.835414] worker_thread+0x64c/0x1130 [ 2687.839400] ? process_one_work+0x1570/0x1570 [ 2687.843891] kthread+0x33f/0x460 [ 2687.847252] ? kthread_park+0x180/0x180 [ 2687.851222] ret_from_fork+0x24/0x30 [ 2687.866965] Mem-Info: [ 2687.903399] active_anon:148318 inactive_anon:1289145 isolated_anon:0 [ 2687.903399] active_file:503 inactive_file:495 isolated_file:32 [ 2687.903399] unevictable:0 dirty:18 writeback:0 unstable:0 [ 2687.903399] slab_reclaimable:20281 slab_unreclaimable:121983 [ 2687.903399] mapped:1328425 shmem:1298718 pagetables:16303 bounce:0 [ 2687.903399] free:25306 free_pcp:319 free_cma:0 [ 2688.271641] Node 0 active_anon:521968kB inactive_anon:1425848kB active_file:1496kB inactive_file:1348kB unevictable:0kB isolated(anon):0kB isolated(file):508kB mapped:1544084kB dirty:32kB writeback:0kB shmem:1431048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2688.448598] Node 1 active_anon:49652kB inactive_anon:3730656kB active_file:912kB inactive_file:2748kB unevictable:0kB isolated(anon):0kB isolated(file):172kB mapped:3771260kB dirty:0kB writeback:0kB shmem:3742308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2688.638208] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2108kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2688.758837] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2688.763897] Node 0 DMA32 free:40132kB min:35996kB low:44992kB high:53988kB active_anon:518904kB inactive_anon:1423740kB active_file:2896kB inactive_file:2696kB unevictable:0kB writepending:32kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13728kB pagetables:30104kB bounce:0kB free_pcp:1532kB local_pcp:868kB free_cma:0kB [ 2688.939663] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2688.986010] lowmem_reserve[]: 0 0 1 1 1 [ 2689.036224] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2689.207607] systemd[1]: Started Journal Service. [ 2689.269408] lowmem_reserve[]: 0 0 0 0 0 [ 2689.273503] Node 1 Normal free:70936kB min:53876kB low:67344kB high:80812kB active_anon:50252kB inactive_anon:3726484kB active_file:988kB inactive_file:784kB unevictable:0kB writepending:60kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14048kB pagetables:34956kB bounce:0kB free_pcp:2340kB local_pcp:1460kB free_cma:0kB [ 2689.395623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2689.479984] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2689.496306] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2689.610557] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2689.616770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2689.641709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2689.674712] lowmem_reserve[]: 0 0 0 0 0 [ 2689.698916] Node 0 DMA: 36*4kB (UMEH) 21*8kB (UMEH) 18*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11000kB [ 2689.803461] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2689.868524] 8021q: adding VLAN 0 to HW filter on device team0 [ 2689.900224] Node 0 DMA32: 1655*4kB (UMEH) 1093*8kB (UMH) 681*16kB (UMEH) 681*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48052kB [ 2689.940095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2689.950168] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2689.957368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2689.989138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2689.997215] bridge0: port 1(bridge_slave_0) entered blocking state [ 2690.003734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2690.028852] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2690.128535] Node 1 Normal: 785*4kB (UM) 796*8kB (UMEH) 844*16kB (UMEH) 257*32kB (UMH) 413*64kB (UMEH) 99*128kB (UME) 9*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 72644kB [ 2690.193774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2690.230752] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2690.237793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2690.259442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2690.278675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2690.287536] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2690.310492] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2690.330039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2690.356414] 1290964 total pagecache pages [ 2690.356944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2690.378551] 0 pages in swap cache [ 2690.382026] Swap cache stats: add 0, delete 0, find 0/0 [ 2690.398798] Free swap = 0kB [ 2690.402025] Total swap = 0kB [ 2690.405126] 2097051 pages RAM [ 2690.408218] 0 pages HighMem/MovableOnly [ 2690.409093] bridge0: port 2(bridge_slave_1) entered blocking state [ 2690.418567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2690.489992] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2690.497609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2690.518627] 369649 pages reserved [ 2690.522097] 0 pages cma reserved [ 2690.525547] Out of memory: Kill process 7114 (syz-executor.0) score 1006 or sacrifice child [ 2690.535870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2690.559142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2690.567114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2690.633544] Killed process 7114 (syz-executor.0) total-vm:93672kB, anon-rss:428kB, file-rss:34820kB, shmem-rss:11480kB [ 2690.645097] FAULT_INJECTION: forcing a failure. [ 2690.645097] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2690.657951] CPU: 1 PID: 7114 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2690.665757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2690.675107] Call Trace: [ 2690.677696] dump_stack+0x1fc/0x2ef [ 2690.681327] should_fail.cold+0xa/0xf [ 2690.685136] ? setup_fault_attr+0x200/0x200 [ 2690.689459] ? mark_held_locks+0xf0/0xf0 [ 2690.693517] ? __save_stack_trace+0x72/0x190 [ 2690.697927] __alloc_pages_nodemask+0x239/0x2890 [ 2690.702681] ? __lock_acquire+0x6de/0x3ff0 [ 2690.706918] ? __lock_acquire+0x6de/0x3ff0 [ 2690.711159] ? debug_check_no_obj_freed+0x201/0x490 [ 2690.716176] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2690.721029] ? mark_held_locks+0xf0/0xf0 [ 2690.725082] ? lock_downgrade+0x720/0x720 [ 2690.729309] ? lock_acquire+0x170/0x3c0 [ 2690.733292] ? debug_check_no_obj_freed+0xb5/0x490 [ 2690.738227] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2690.742813] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2690.747914] ? debug_check_no_obj_freed+0x201/0x490 [ 2690.752936] ? unmap_page_range+0x1616/0x2c50 [ 2690.757435] alloc_pages_current+0x193/0x2a0 [ 2690.761841] __get_free_pages+0x8/0x40 [ 2690.765730] __tlb_remove_page_size+0x2a2/0x470 [ 2690.770401] unmap_page_range+0x14e7/0x2c50 [ 2690.774739] ? vm_normal_page_pmd+0x4c0/0x4c0 [ 2690.779243] __oom_reap_task_mm+0x1ce/0x350 [ 2690.783656] ? oom_kill_process+0x1c0/0x1c0 [ 2690.787979] ? kmem_cache_free+0x7f/0x260 [ 2690.792127] ? get_signal+0x3f0/0x1f70 [ 2690.796021] ? debug_check_no_obj_freed+0x201/0x490 [ 2690.801042] exit_mmap+0x42f/0x530 [ 2690.804588] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 2690.809869] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2690.814970] ? debug_check_no_obj_freed+0x201/0x490 [ 2690.819986] ? check_preemption_disabled+0x41/0x280 [ 2690.825002] ? __khugepaged_exit+0x2a6/0x3e0 [ 2690.829410] ? __khugepaged_exit+0x2a6/0x3e0 [ 2690.833815] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2690.838833] ? kmem_cache_free+0x226/0x260 [ 2690.843072] ? __khugepaged_exit+0x2c7/0x3e0 [ 2690.847484] mmput+0x14e/0x4a0 [ 2690.850684] do_exit+0xaec/0x2be0 [ 2690.854134] ? __lock_acquire+0x6de/0x3ff0 [ 2690.858362] ? mm_update_next_owner+0x650/0x650 [ 2690.863030] ? get_signal+0x388/0x1f70 [ 2690.866920] ? lock_downgrade+0x720/0x720 [ 2690.871068] ? lock_acquire+0x170/0x3c0 [ 2690.875192] do_group_exit+0x125/0x310 [ 2690.879080] get_signal+0x3f2/0x1f70 [ 2690.882795] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 2690.887736] do_signal+0x8f/0x1670 [ 2690.891293] ? _raw_spin_unlock_irq+0x24/0x80 [ 2690.895796] ? setup_sigcontext+0x820/0x820 [ 2690.900123] ? __pollwait+0x430/0x430 [ 2690.903919] ? sigprocmask+0xee/0x350 [ 2690.907722] ? __se_sys_rt_sigtimedwait+0x1f0/0x1f0 [ 2690.912751] ? __se_sys_ppoll+0x278/0x330 [ 2690.916901] ? __se_sys_poll+0x3f0/0x3f0 [ 2690.920988] ? ksys_write+0x1c8/0x2a0 [ 2690.924800] ? exit_to_usermode_loop+0x36/0x2a0 [ 2690.929471] exit_to_usermode_loop+0x204/0x2a0 [ 2690.934057] do_syscall_64+0x538/0x620 [ 2690.937945] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2690.943133] RIP: 0033:0x7fdd7a70bae9 [ 2690.946839] Code: Bad RIP value. [ 2690.950198] RSP: 002b:00007fdd77c81188 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 2690.957900] RAX: fffffffffffffdfe RBX: 00007fdd7a81ef60 RCX: 00007fdd7a70bae9 [ 2690.965163] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000200001c0 [ 2690.972608] RBP: 00007fdd77c811d0 R08: 0000000000000008 R09: 0000000000000000 [ 2690.979871] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 2690.987138] R13: 00007fff9cf0cd6f R14: 00007fdd77c81300 R15: 0000000000022000 [ 2690.997988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2691.047675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2691.059218] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2691.065299] 8021q: adding VLAN 0 to HW filter on device team0 [ 2691.099174] oom_reaper: reaped process 7114 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:11480kB [ 2691.112593] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2691.121964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2691.136056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2691.192012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2691.222629] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2691.259024] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2691.266314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2691.349106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2691.356833] bridge0: port 1(bridge_slave_0) entered blocking state [ 2691.363285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2691.508854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2691.516934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2691.624128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2691.661194] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2691.669247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2691.676531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2691.779098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2691.786806] bridge0: port 2(bridge_slave_1) entered blocking state [ 2691.793271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2691.870113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2691.877914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2691.972761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2692.009465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2692.019146] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2692.027690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2692.043614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2692.079284] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2692.088280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2692.138665] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2692.149267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2692.157384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2692.230494] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2692.291059] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2692.299546] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2692.307237] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2692.369119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2692.394615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2692.459523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2692.466316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2692.592557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2692.624045] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2692.653859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2692.676409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2692.753703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2692.814578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2692.893755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2692.921028] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2692.927226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2693.070492] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2693.154458] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2693.218650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2693.226387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2693.287689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2693.465371] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2693.516728] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2693.581147] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2693.618436] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2693.625914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2693.669120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2693.677151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2693.799165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2694.083760] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2694.129962] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2694.145714] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2694.192523] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2694.259250] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2694.266345] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2694.301881] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2694.311204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2694.320108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2694.329023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2694.336344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2694.347645] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2694.357283] device veth0_vlan entered promiscuous mode [ 2694.365061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2694.373943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2694.384981] device veth0_vlan entered promiscuous mode [ 2694.434605] device veth1_vlan entered promiscuous mode [ 2694.463938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2694.496185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2694.530484] device veth1_vlan entered promiscuous mode [ 2694.536718] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2694.638600] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2694.651343] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2694.677084] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2694.699842] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2694.720251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2694.727674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2694.769241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2694.830375] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2694.839741] device veth0_macvtap entered promiscuous mode [ 2694.846287] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2694.914946] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2694.945987] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2694.969837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2695.030467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2695.051790] device veth0_macvtap entered promiscuous mode [ 2695.081245] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2695.089384] device veth1_macvtap entered promiscuous mode [ 2695.095828] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2695.143615] device veth1_macvtap entered promiscuous mode [ 2695.180445] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2695.214181] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2695.226696] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2695.254157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2695.293948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2695.311621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2695.331138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.354596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2695.364877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.375470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2695.385765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.395453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2695.405538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.416518] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2695.425683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2695.452252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2695.488886] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2695.496434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2695.516169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2695.525978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2695.539211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2695.550464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.561790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2695.573315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.586899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2695.611518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.643670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2695.681255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.705994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2695.716626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.728398] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2695.735420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2695.763909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2695.778947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2695.787295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2695.797214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.806793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2695.816916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.827217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2695.838370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.850631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2695.865313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.878560] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2695.885913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2695.897930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2695.908244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.917367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2695.928595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.937715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2695.947507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.957418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2695.967345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.976612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2695.986469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.996687] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2696.004087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2696.011759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2696.019969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2696.027870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2696.036437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2696.506440] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2696.551900] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2696.573942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2696.584415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2696.626760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2696.636914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2696.656407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2696.686639] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2696.718940] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2696.733521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2696.745647] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2696.754369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2696.779755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2696.787533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2696.794120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2696.802134] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:28:03 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x4701}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:03 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x38a}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:03 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd57, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:03 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600230000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:03 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:28:03 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6f6ffffffb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:03 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000300b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:04 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6feffffffb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2697.473428] IPVS: ftp: loaded support on port[0] = 21 [ 2697.500570] IPVS: ftp: loaded support on port[0] = 21 [ 2697.513476] IPVS: ftp: loaded support on port[0] = 21 [ 2697.537370] IPVS: ftp: loaded support on port[0] = 21 22:28:04 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000500b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:04 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600020000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:04 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000600b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2698.245793] IPVS: ftp: loaded support on port[0] = 21 22:28:05 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600030000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:05 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000700b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2698.759782] IPVS: ftp: loaded support on port[0] = 21 22:28:05 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:28:05 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600040000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2699.831796] IPVS: ftp: loaded support on port[0] = 21 22:28:09 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000900b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:09 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x4701}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:09 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd58, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:09 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x4800}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:09 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600050000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:09 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2703.404547] IPVS: ftp: loaded support on port[0] = 21 22:28:10 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000a00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2703.436767] IPVS: ftp: loaded support on port[0] = 21 [ 2703.486860] IPVS: ftp: loaded support on port[0] = 21 22:28:10 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600060000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2703.640030] IPVS: ftp: loaded support on port[0] = 21 22:28:10 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000b00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:10 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600070000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:10 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000c00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2704.572504] IPVS: ftp: loaded support on port[0] = 21 22:28:11 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600080000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2705.306980] IPVS: ftp: loaded support on port[0] = 21 [ 2705.838077] syz-executor.1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2705.860172] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2705.873622] CPU: 1 PID: 17908 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2705.881517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2705.890867] Call Trace: [ 2705.893463] dump_stack+0x1fc/0x2ef [ 2705.897099] dump_header+0x15d/0xc3f [ 2705.900820] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2705.905925] ? ___ratelimit+0x319/0x590 [ 2705.909910] oom_kill_process.cold+0x10/0x692 [ 2705.914409] ? check_preemption_disabled+0x41/0x280 [ 2705.919433] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2705.924816] out_of_memory+0x1072/0x1390 [ 2705.928890] ? oom_killer_disable+0x270/0x270 [ 2705.933388] ? mutex_trylock+0x15f/0x1a0 [ 2705.937444] __alloc_pages_nodemask+0x23a2/0x2890 [ 2705.942285] ? check_preemption_disabled+0x41/0x280 [ 2705.947297] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2705.952128] ? mem_cgroup_from_task+0x120/0x120 [ 2705.956784] ? should_fail+0x142/0x7b0 [ 2705.960656] ? fs_reclaim_release+0xd0/0x110 [ 2705.965065] ? check_preemption_disabled+0x41/0x280 [ 2705.970074] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2705.975106] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2705.979856] copy_process.part.0+0x3cf/0x8260 [ 2705.984340] ? _raw_spin_unlock+0x29/0x40 [ 2705.988474] ? do_anonymous_page+0x704/0x1be0 [ 2705.992960] ? __pte_alloc+0x340/0x340 [ 2705.996834] ? mark_held_locks+0xf0/0xf0 [ 2706.000891] ? __cleanup_sighand+0x60/0x60 [ 2706.005109] ? do_mmap+0x59c/0x1080 [ 2706.008731] ? vm_insert_page+0x9c0/0x9c0 [ 2706.012873] ? __do_page_fault+0x6d1/0xd60 [ 2706.017096] _do_fork+0x22f/0xf30 [ 2706.020544] ? fork_idle+0x220/0x220 [ 2706.024244] ? up_read+0x17/0x110 [ 2706.027686] ? __do_page_fault+0x180/0xd60 [ 2706.031911] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2706.037264] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2706.042271] ? do_syscall_64+0x21/0x620 [ 2706.046234] do_syscall_64+0xf9/0x620 [ 2706.050027] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2706.055200] RIP: 0033:0x7f51bcdcff11 [ 2706.058898] Code: Bad RIP value. [ 2706.062259] RSP: 002b:00007fffcefe0638 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2706.069956] RAX: ffffffffffffffda RBX: 00007f51ba323700 RCX: 00007f51bcdcff11 [ 2706.077206] RDX: 00007f51ba3239d0 RSI: 00007f51ba3232f0 RDI: 00000000003d0f00 [ 2706.084457] RBP: 00007fffcefe0870 R08: 00007f51ba323700 R09: 00007f51ba323700 [ 2706.091713] R10: 00007f51ba3239d0 R11: 0000000000000206 R12: 00007fffcefe06ee [ 2706.099050] R13: 00007fffcefe06ef R14: 00007f51ba323300 R15: 0000000000022000 [ 2706.209269] Mem-Info: [ 2706.212032] active_anon:148498 inactive_anon:1286769 isolated_anon:0 [ 2706.212032] active_file:89 inactive_file:59 isolated_file:4 [ 2706.212032] unevictable:0 dirty:2 writeback:2 unstable:0 [ 2706.212032] slab_reclaimable:20156 slab_unreclaimable:124793 [ 2706.212032] mapped:1325343 shmem:1296389 pagetables:16307 bounce:0 [ 2706.212032] free:25155 free_pcp:535 free_cma:0 [ 2706.272042] Node 0 active_anon:528084kB inactive_anon:1408160kB active_file:36kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1523752kB dirty:4kB writeback:0kB shmem:1419388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2706.307263] Node 1 active_anon:65908kB inactive_anon:3738916kB active_file:120kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:3777220kB dirty:4kB writeback:8kB shmem:3766168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2706.339708] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2706.366942] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2706.372039] Node 0 DMA32 free:35868kB min:35996kB low:44992kB high:53988kB active_anon:525868kB inactive_anon:1406064kB active_file:156kB inactive_file:148kB unevictable:0kB writepending:4kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13632kB pagetables:30012kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2706.432099] lowmem_reserve[]: 0 0 1 1 1 [ 2706.440592] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2706.472359] lowmem_reserve[]: 0 0 0 0 0 [ 2706.476543] Node 1 Normal free:54604kB min:53876kB low:67344kB high:80812kB active_anon:65908kB inactive_anon:3738916kB active_file:256kB inactive_file:0kB unevictable:0kB writepending:12kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14560kB pagetables:35124kB bounce:0kB free_pcp:420kB local_pcp:92kB free_cma:0kB [ 2706.511257] lowmem_reserve[]: 0 0 0 0 0 [ 2706.515452] Node 0 DMA: 28*4kB (UMEH) 22*8kB (UMEH) 18*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10976kB [ 2706.545187] Node 0 DMA32: 463*4kB (UMEH) 1366*8kB (UMEH) 270*16kB (UMEH) 607*32kB (UMEH) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36652kB [ 2706.597792] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2706.609157] Node 1 Normal: 290*4kB (UM) 119*8kB (UMEH) 47*16kB (UMEH) 24*32kB (UMH) 367*64kB (UMEH) 174*128kB (UME) 24*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55536kB [ 2706.625351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2706.634624] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2706.644797] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2706.654060] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2706.662840] 1296705 total pagecache pages [ 2706.667093] 0 pages in swap cache [ 2706.687755] Swap cache stats: add 0, delete 0, find 0/0 [ 2706.693138] Free swap = 0kB [ 2706.696153] Total swap = 0kB [ 2706.706716] 2097051 pages RAM [ 2706.709924] 0 pages HighMem/MovableOnly [ 2706.713890] 369649 pages reserved [ 2706.717386] 0 pages cma reserved [ 2706.720755] Out of memory (oom_kill_allocating_task): Kill process 17908 (syz-executor.1) score 0 or sacrifice child [ 2706.731506] Killed process 17908 (syz-executor.1) total-vm:93540kB, anon-rss:380kB, file-rss:33928kB, shmem-rss:11480kB [ 2706.744597] oom_reaper: reaped process 17908 (syz-executor.1), now anon-rss:0kB, file-rss:33924kB, shmem-rss:11480kB [ 2707.323989] kworker/u4:0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2707.351485] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 2707.419271] CPU: 1 PID: 18018 Comm: kworker/u4:0 Not tainted 4.19.211-syzkaller #0 [ 2707.426999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2707.436355] Call Trace: [ 2707.438951] dump_stack+0x1fc/0x2ef [ 2707.442602] dump_header+0x15d/0xc3f [ 2707.446317] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2707.451433] ? ___ratelimit+0x319/0x590 [ 2707.455503] oom_kill_process.cold+0x10/0x692 [ 2707.460003] ? oom_badness.part.0+0x135/0x6e0 [ 2707.464515] ? lock_downgrade+0x720/0x720 [ 2707.468673] ? check_preemption_disabled+0x41/0x280 [ 2707.473700] out_of_memory+0x34d/0x1390 [ 2707.477683] ? oom_killer_disable+0x270/0x270 [ 2707.482186] ? mutex_trylock+0x15f/0x1a0 [ 2707.486253] __alloc_pages_nodemask+0x23a2/0x2890 [ 2707.491110] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2707.495946] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2707.500776] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2707.505356] ? ____cache_alloc_node+0x156/0x1d0 [ 2707.510010] ? cache_grow_begin+0x64/0x8a0 [ 2707.514233] cache_grow_begin+0xa4/0x8a0 [ 2707.518284] fallback_alloc+0x213/0x2e0 [ 2707.522248] kmem_cache_alloc+0x1e4/0x370 [ 2707.526390] getname_kernel+0x4e/0x370 [ 2707.530279] call_usermodehelper_exec_async+0x500/0x6a0 [ 2707.535627] ? umh_complete+0x90/0x90 [ 2707.539503] ret_from_fork+0x24/0x30 22:28:14 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001200b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2708.397218] Mem-Info: [ 2708.399690] active_anon:142629 inactive_anon:1287211 isolated_anon:0 [ 2708.399690] active_file:1149 inactive_file:769 isolated_file:60 [ 2708.399690] unevictable:0 dirty:13 writeback:0 unstable:0 [ 2708.399690] slab_reclaimable:20128 slab_unreclaimable:125397 [ 2708.399690] mapped:1327413 shmem:1291087 pagetables:16259 bounce:0 [ 2708.399690] free:27732 free_pcp:1215 free_cma:0 [ 2708.542024] Node 0 active_anon:520700kB inactive_anon:1408676kB active_file:2172kB inactive_file:1412kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1526828kB dirty:28kB writeback:0kB shmem:1412648kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2708.847374] Node 1 active_anon:49616kB inactive_anon:3740168kB active_file:1516kB inactive_file:1408kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:3781124kB dirty:24kB writeback:0kB shmem:3751700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2708.876516] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2708.904870] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2708.947239] Node 0 DMA32 free:43188kB min:35996kB low:44992kB high:53988kB active_anon:518484kB inactive_anon:1406580kB active_file:980kB inactive_file:1772kB unevictable:0kB writepending:128kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13632kB pagetables:30064kB bounce:0kB free_pcp:2372kB local_pcp:956kB free_cma:0kB [ 2709.157319] lowmem_reserve[]: 0 0 1 1 1 [ 2709.161334] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2709.467268] lowmem_reserve[]: 0 0 0 0 0 [ 2709.471289] Node 1 Normal free:59640kB min:53876kB low:67344kB high:80812kB active_anon:49576kB inactive_anon:3740168kB active_file:1424kB inactive_file:1368kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14080kB pagetables:34880kB bounce:0kB free_pcp:2896kB local_pcp:1496kB free_cma:0kB [ 2709.827144] lowmem_reserve[]: 0 0 0 0 0 [ 2709.831162] Node 0 DMA: 28*4kB (UMEH) 22*8kB (UMEH) 18*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10976kB [ 2710.105928] Node 0 DMA32: 1454*4kB (UMEH) 1682*8kB (UMEH) 341*16kB (UMEH) 613*32kB (UMEH) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44472kB [ 2710.317094] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2710.457231] Node 1 Normal: 376*4kB (UM) 582*8kB (UMEH) 331*16kB (UMEH) 113*32kB (UMH) 340*64kB (UMEH) 142*128kB (UME) 24*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 61152kB [ 2710.617087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2710.625952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2710.777211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2710.786103] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2710.881854] 1291333 total pagecache pages [ 2710.886034] 0 pages in swap cache [ 2710.941242] Swap cache stats: add 0, delete 0, find 0/0 [ 2710.946629] Free swap = 0kB [ 2711.007072] Total swap = 0kB [ 2711.017758] 2097051 pages RAM [ 2711.047081] 0 pages HighMem/MovableOnly [ 2711.051185] 369649 pages reserved [ 2711.054633] 0 pages cma reserved [ 2711.097258] Out of memory: Kill process 7285 (syz-executor.0) score 1006 or sacrifice child [ 2711.105823] Killed process 7285 (syz-executor.0) total-vm:93804kB, anon-rss:432kB, file-rss:34820kB, shmem-rss:11476kB 22:28:20 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x4701}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2714.442306] ieee802154 phy0 wpan0: encryption failed: -22 [ 2714.448062] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.650632] IPVS: ftp: loaded support on port[0] = 21 22:28:21 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd59, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2715.353582] IPVS: ftp: loaded support on port[0] = 21 [ 2715.932399] IPVS: ftp: loaded support on port[0] = 21 22:28:23 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x4801}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:23 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001300b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:23 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd5a, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:23 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x4701}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:23 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:28:23 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600090000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2716.565701] IPVS: ftp: loaded support on port[0] = 21 [ 2716.578879] IPVS: ftp: loaded support on port[0] = 21 [ 2716.607346] IPVS: ftp: loaded support on port[0] = 21 [ 2716.740735] IPVS: ftp: loaded support on port[0] = 21 22:28:23 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6000a0000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:23 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001400b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:23 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001500b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:24 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6000b0000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2717.878009] IPVS: ftp: loaded support on port[0] = 21 [ 2718.072836] IPVS: ftp: loaded support on port[0] = 21 [ 2718.659587] syz-executor.5: page allocation failure: order:4, mode:0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 2718.681392] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2718.696552] CPU: 0 PID: 18331 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2718.704453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2718.713815] Call Trace: [ 2718.716413] dump_stack+0x1fc/0x2ef [ 2718.720051] warn_alloc.cold+0x7b/0x18f [ 2718.724056] ? zone_watermark_ok_safe+0x260/0x260 [ 2718.728921] ? __zone_watermark_ok+0x300/0x300 [ 2718.733543] __alloc_pages_nodemask+0x232f/0x2890 [ 2718.738405] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2718.743410] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2718.748241] ? lock_downgrade+0x720/0x720 [ 2718.752383] ? __nf_register_net_hook+0x215/0x480 [ 2718.757306] ? mark_held_locks+0xa6/0xf0 [ 2718.761360] ? ____cache_alloc_node+0x156/0x1d0 [ 2718.766015] ? cache_grow_begin+0x64/0x8a0 [ 2718.770238] cache_grow_begin+0xa4/0x8a0 [ 2718.774311] fallback_alloc+0x213/0x2e0 [ 2718.778285] kmem_cache_alloc_trace+0x1f1/0x380 [ 2718.782939] ? can_notifier+0x330/0x330 [ 2718.786911] can_pernet_init+0x6a/0x3b0 [ 2718.790871] ? ebt_nat_in+0x70/0x70 [ 2718.794481] ? can_notifier+0x330/0x330 [ 2718.798442] ops_init+0xb3/0x410 [ 2718.801796] setup_net+0x2c2/0x720 [ 2718.805341] ? rtnl_net_dumpid_one+0x250/0x250 [ 2718.809916] copy_net_ns+0x1f7/0x340 [ 2718.813638] create_new_namespaces+0x3f6/0x7b0 [ 2718.818210] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2718.823130] ksys_unshare+0x36c/0x9a0 [ 2718.826933] ? __se_sys_futex+0x28f/0x3b0 [ 2718.831067] ? walk_process_tree+0x2c0/0x2c0 [ 2718.835471] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2718.840823] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2718.845830] __x64_sys_unshare+0x2d/0x40 [ 2718.849885] do_syscall_64+0xf9/0x620 [ 2718.853677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2718.858863] RIP: 0033:0x7f51a23daae9 [ 2718.862581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2718.881899] RSP: 002b:00007f519f90e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2718.889594] RAX: ffffffffffffffda RBX: 00007f51a24ee0e0 RCX: 00007f51a23daae9 [ 2718.896846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 2718.904112] RBP: 00007f51a2434f25 R08: 0000000000000000 R09: 0000000000000000 [ 2718.911364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2718.918619] R13: 00007fff6ff4393f R14: 00007f519f90e300 R15: 0000000000022000 [ 2719.403639] systemd-udevd invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2719.487630] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2719.522620] CPU: 0 PID: 18271 Comm: systemd-udevd Not tainted 4.19.211-syzkaller #0 [ 2719.530438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2719.539792] Call Trace: [ 2719.542385] dump_stack+0x1fc/0x2ef [ 2719.546107] dump_header+0x15d/0xc3f [ 2719.549825] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2719.554928] ? ___ratelimit+0x319/0x590 [ 2719.558908] oom_kill_process.cold+0x10/0x692 [ 2719.563404] ? check_preemption_disabled+0x41/0x280 [ 2719.568425] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2719.573717] out_of_memory+0x1072/0x1390 [ 2719.577788] ? oom_killer_disable+0x270/0x270 [ 2719.582285] ? mutex_trylock+0x15f/0x1a0 [ 2719.586349] __alloc_pages_nodemask+0x23a2/0x2890 [ 2719.591205] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2719.596042] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2719.600881] ? __put_seccomp_filter+0xa0/0xa0 [ 2719.605370] ? mark_held_locks+0xf0/0xf0 [ 2719.609443] ? ____cache_alloc_node+0x156/0x1d0 [ 2719.614108] ? cache_grow_begin+0x64/0x8a0 [ 2719.618345] cache_grow_begin+0xa4/0x8a0 [ 2719.622411] fallback_alloc+0x213/0x2e0 [ 2719.626389] kmem_cache_alloc+0x1e4/0x370 [ 2719.630543] getname_flags+0xce/0x590 [ 2719.634346] ? syscall_trace_enter+0x3b7/0xd60 [ 2719.638931] do_symlinkat+0x86/0x2c0 [ 2719.642665] ? __ia32_sys_unlink+0x50/0x50 [ 2719.646895] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2719.652256] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2719.657280] ? do_syscall_64+0x21/0x620 [ 2719.660159] Mem-Info: [ 2719.661248] do_syscall_64+0xf9/0x620 [ 2719.663669] active_anon:148502 inactive_anon:1283736 isolated_anon:0 [ 2719.663669] active_file:166 inactive_file:186 isolated_file:29 [ 2719.663669] unevictable:0 dirty:8 writeback:0 unstable:0 [ 2719.663669] slab_reclaimable:19932 slab_unreclaimable:128299 [ 2719.663669] mapped:1322555 shmem:1293343 pagetables:16300 bounce:0 [ 2719.663669] free:24977 free_pcp:262 free_cma:0 [ 2719.667433] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2719.667445] RIP: 0033:0x7f94d8ce5027 [ 2719.667477] Code: Bad RIP value. [ 2719.702297] Node 0 active_anon:522696kB inactive_anon:1407216kB active_file:720kB inactive_file:712kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:1524408kB dirty:0kB writeback:0kB shmem:1413476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2719.707423] RSP: 002b:00007ffe7394e838 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 2719.707436] RAX: ffffffffffffffda RBX: 000056426713c710 RCX: 00007f94d8ce5027 [ 2719.707444] RDX: 0000000000000000 RSI: 00007ffe7394e840 RDI: 0000564267140fd0 [ 2719.707454] RBP: 000000000000361a R08: 00000000000001c0 R09: 0000000000000015 [ 2719.711170] Node 1 active_anon:71312kB inactive_anon:3727728kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:3765812kB dirty:32kB writeback:0kB shmem:3759896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2719.714497] R10: 00007ffe7394e840 R11: 0000000000000206 R12: 00007ffe7394e840 [ 2719.743501] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2719.750711] R13: 000056426713c710 R14: 0000000000000003 R15: 000000000000000e [ 2719.982805] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2719.990934] Node 0 DMA32 free:36052kB min:35996kB low:44992kB high:53988kB active_anon:520480kB inactive_anon:1405128kB active_file:236kB inactive_file:424kB unevictable:0kB writepending:8kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13472kB pagetables:29520kB bounce:0kB free_pcp:1452kB local_pcp:204kB free_cma:0kB [ 2720.020203] Mem-Info: [ 2720.023430] active_anon:148502 inactive_anon:1283749 isolated_anon:0 [ 2720.023430] active_file:0 inactive_file:36 isolated_file:29 [ 2720.023430] unevictable:0 dirty:0 writeback:11 unstable:0 [ 2720.023430] slab_reclaimable:19932 slab_unreclaimable:128299 [ 2720.023430] mapped:1322195 shmem:1293367 pagetables:16302 bounce:0 [ 2720.023430] free:25220 free_pcp:374 free_cma:0 [ 2720.060490] lowmem_reserve[]: 0 0 1 1 1 [ 2720.064593] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2720.093493] Node 0 active_anon:522696kB inactive_anon:1407224kB active_file:140kB inactive_file:276kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:1523068kB dirty:0kB writeback:0kB shmem:1413484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2720.146433] lowmem_reserve[]: 0 0 0 0 0 [ 2720.150446] Node 1 Normal free:56576kB min:53876kB low:67344kB high:80812kB active_anon:67112kB inactive_anon:3727772kB active_file:16kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14432kB pagetables:35596kB bounce:0kB free_pcp:1448kB local_pcp:1448kB free_cma:0kB [ 2720.207030] Node 1 active_anon:64912kB inactive_anon:3727772kB active_file:16kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3765816kB dirty:0kB writeback:0kB shmem:3753584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2720.222805] lowmem_reserve[]: 0 0 0 0 0 [ 2720.239033] Node 0 DMA: 29*4kB (UMEH) 22*8kB (UMEH) 18*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10980kB [ 2720.256230] Node 0 DMA32: 1927*4kB (UMEH) 1320*8kB (UMEH) 261*16kB (UMEH) 456*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37036kB [ 2720.290931] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2720.312861] Node 1 Normal: 1098*4kB (UM) 262*8kB (UMH) 171*16kB (UMEH) 149*32kB (UMH) 381*64kB (UMEH) 133*128kB (UME) 24*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 61544kB [ 2720.355115] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2720.376784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2720.406436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2720.415158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2720.424148] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2720.436443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2720.445165] 1290617 total pagecache pages [ 2720.445649] Node 0 DMA32 free:37340kB min:35996kB low:44992kB high:53988kB active_anon:519472kB inactive_anon:1405128kB active_file:304kB inactive_file:576kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13440kB pagetables:29520kB bounce:0kB free_pcp:2004kB local_pcp:640kB free_cma:0kB [ 2720.466424] 0 pages in swap cache [ 2720.496734] Swap cache stats: add 0, delete 0, find 0/0 [ 2720.502117] Free swap = 0kB [ 2720.505132] Total swap = 0kB [ 2720.526400] 2097051 pages RAM [ 2720.529524] 0 pages HighMem/MovableOnly [ 2720.533490] 369649 pages reserved [ 2720.536201] lowmem_reserve[]: 0 0 1 1 1 [ 2720.546411] 0 pages cma reserved [ 2720.547197] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2720.582838] lowmem_reserve[]: 0 0 0 0 0 [ 2720.587433] Node 1 Normal free:61756kB min:53876kB low:67344kB high:80812kB active_anon:61064kB inactive_anon:3727772kB active_file:16kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14432kB pagetables:35596kB bounce:0kB free_pcp:2856kB local_pcp:1468kB free_cma:0kB [ 2720.625496] lowmem_reserve[]: 0 0 0 0 0 [ 2720.630092] Node 0 DMA: 29*4kB (UMEH) 22*8kB (UMEH) 18*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10980kB [ 2720.652822] Node 0 DMA32: 1896*4kB (UMEH) 1367*8kB (UMEH) 261*16kB (UMEH) 456*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37288kB [ 2720.674231] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2720.685443] Node 1 Normal: 1098*4kB (UM) 303*8kB (UMH) 172*16kB (UMEH) 149*32kB (UMH) 381*64kB (UMEH) 133*128kB (UME) 24*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 61888kB [ 2720.707773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2720.721106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2720.732543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2720.821000] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2720.841197] 1291141 total pagecache pages [ 2720.845371] 0 pages in swap cache [ 2720.856518] Swap cache stats: add 0, delete 0, find 0/0 [ 2720.866468] Free swap = 0kB [ 2720.876399] Total swap = 0kB [ 2720.879470] 2097051 pages RAM [ 2720.896949] 0 pages HighMem/MovableOnly [ 2720.900935] 369649 pages reserved [ 2720.949959] 0 pages cma reserved [ 2720.961461] Out of memory (oom_kill_allocating_task): Kill process 18271 (systemd-udevd) score 0 or sacrifice child [ 2720.992678] Killed process 18271 (systemd-udevd) total-vm:43796kB, anon-rss:1180kB, file-rss:0kB, shmem-rss:0kB [ 2721.047460] oom_reaper: reaped process 18271 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 22:28:28 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6000c0000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:28 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6000d0000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:29 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x4a00}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:29 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6000e0000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:29 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd5b, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2723.212673] IPVS: ftp: loaded support on port[0] = 21 [ 2723.362803] IPVS: ftp: loaded support on port[0] = 21 [ 2724.330195] kworker/u4:5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2724.381330] kworker/u4:5 cpuset=/ mems_allowed=0-1 [ 2724.396938] CPU: 1 PID: 4427 Comm: kworker/u4:5 Not tainted 4.19.211-syzkaller #0 [ 2724.404582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2724.413948] Workqueue: events_unbound call_usermodehelper_exec_work [ 2724.420353] Call Trace: [ 2724.423220] dump_stack+0x1fc/0x2ef [ 2724.426853] dump_header+0x15d/0xc3f [ 2724.430588] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2724.435694] ? ___ratelimit+0x319/0x590 [ 2724.439678] oom_kill_process.cold+0x10/0x692 [ 2724.444181] ? lock_downgrade+0x720/0x720 [ 2724.448418] ? check_preemption_disabled+0x41/0x280 [ 2724.453440] out_of_memory+0x34d/0x1390 [ 2724.457432] ? oom_killer_disable+0x270/0x270 [ 2724.461946] ? mutex_trylock+0x15f/0x1a0 [ 2724.466017] __alloc_pages_nodemask+0x23a2/0x2890 [ 2724.470886] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2724.475731] ? fprop_fraction_percpu+0x250/0x420 [ 2724.480590] ? should_fail+0x142/0x7b0 [ 2724.484481] ? fs_reclaim_release+0xd0/0x110 [ 2724.488899] ? check_preemption_disabled+0x41/0x280 [ 2724.493931] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2724.498952] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2724.503699] copy_process.part.0+0x3cf/0x8260 [ 2724.508196] ? __lock_acquire+0x6de/0x3ff0 [ 2724.512431] ? __lock_acquire+0x6de/0x3ff0 [ 2724.516676] ? umh_complete+0x90/0x90 [ 2724.520470] ? __cleanup_sighand+0x60/0x60 [ 2724.524700] ? mark_held_locks+0xf0/0xf0 [ 2724.528757] ? __lock_acquire+0x6de/0x3ff0 [ 2724.532992] _do_fork+0x22f/0xf30 [ 2724.536440] ? umh_complete+0x90/0x90 [ 2724.540238] ? fork_idle+0x220/0x220 [ 2724.543941] ? lock_acquire+0x170/0x3c0 [ 2724.547917] ? debug_object_deactivate+0xfc/0x2e0 [ 2724.552752] ? trace_hardirqs_off+0x64/0x200 [ 2724.557153] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2724.562250] ? umh_complete+0x90/0x90 [ 2724.566041] kernel_thread+0x2f/0x40 [ 2724.569759] call_usermodehelper_exec_work+0x16d/0x260 [ 2724.575033] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 2724.580580] process_one_work+0x864/0x1570 [ 2724.584805] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2724.589474] worker_thread+0x64c/0x1130 [ 2724.593457] ? process_one_work+0x1570/0x1570 [ 2724.597937] kthread+0x33f/0x460 [ 2724.601294] ? kthread_park+0x180/0x180 [ 2724.605254] ret_from_fork+0x24/0x30 [ 2724.881878] Mem-Info: [ 2724.884408] active_anon:142616 inactive_anon:1287152 isolated_anon:0 [ 2724.884408] active_file:63 inactive_file:47 isolated_file:26 [ 2724.884408] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2724.884408] slab_reclaimable:19904 slab_unreclaimable:130823 [ 2724.884408] mapped:1325686 shmem:1291028 pagetables:16212 bounce:0 [ 2724.884408] free:25572 free_pcp:85 free_cma:0 [ 2724.924852] Node 0 active_anon:520316kB inactive_anon:1412924kB active_file:180kB inactive_file:148kB unevictable:0kB isolated(anon):0kB isolated(file):104kB mapped:1528776kB dirty:0kB writeback:0kB shmem:1416896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2724.959959] Node 1 active_anon:50148kB inactive_anon:3735684kB active_file:72kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3773968kB dirty:0kB writeback:0kB shmem:3747216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2725.062904] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2725.205357] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2725.227320] Node 0 DMA32 free:35784kB min:35996kB low:44992kB high:53988kB active_anon:518108kB inactive_anon:1410864kB active_file:592kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13376kB pagetables:29500kB bounce:0kB free_pcp:2128kB local_pcp:1152kB free_cma:0kB [ 2725.291778] lowmem_reserve[]: 0 0 1 1 1 [ 2725.298410] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2725.326916] lowmem_reserve[]: 0 0 0 0 0 [ 2725.331097] Node 1 Normal free:55568kB min:53876kB low:67344kB high:80812kB active_anon:50148kB inactive_anon:3735760kB active_file:108kB inactive_file:88kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14208kB pagetables:35260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2725.365404] lowmem_reserve[]: 0 0 0 0 0 [ 2725.369763] Node 0 DMA: 29*4kB (UMEH) 22*8kB (UMEH) 18*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10980kB [ 2725.387002] Node 0 DMA32: 1176*4kB (UMEH) 1748*8kB (UMEH) 272*16kB (UMEH) 445*32kB (UMEH) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37408kB [ 2725.402251] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2725.413688] Node 1 Normal: 795*4kB (UME) 663*8kB (UMH) 347*16kB (UMH) 170*32kB (UMEH) 362*64kB (UMH) 97*128kB (UMH) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55316kB [ 2725.430494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2725.439689] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2725.449090] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2725.458203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2725.467161] 1291110 total pagecache pages [ 2725.471474] 0 pages in swap cache [ 2725.475026] Swap cache stats: add 0, delete 0, find 0/0 [ 2725.484661] Free swap = 0kB [ 2725.487873] Total swap = 0kB [ 2725.491018] 2097051 pages RAM [ 2725.494239] 0 pages HighMem/MovableOnly [ 2725.500404] 369649 pages reserved [ 2725.503978] 0 pages cma reserved [ 2725.507532] Out of memory: Kill process 18223 (syz-executor.1) score 1006 or sacrifice child [ 2725.517193] Killed process 18226 (syz-executor.1) total-vm:93672kB, anon-rss:432kB, file-rss:34820kB, shmem-rss:11480kB [ 2725.529103] oom_reaper: reaped process 18226 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:11480kB [ 2725.719596] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 2725.768903] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2725.790285] CPU: 0 PID: 18399 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2725.798191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2725.807547] Call Trace: [ 2725.810143] dump_stack+0x1fc/0x2ef [ 2725.813782] dump_header+0x15d/0xc3f [ 2725.817509] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2725.822613] ? ___ratelimit+0x319/0x590 [ 2725.826596] oom_kill_process.cold+0x10/0x692 [ 2725.831097] ? check_preemption_disabled+0x41/0x280 [ 2725.836119] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2725.841401] out_of_memory+0x1072/0x1390 [ 2725.845500] ? oom_killer_disable+0x270/0x270 [ 2725.850004] ? mutex_trylock+0x15f/0x1a0 [ 2725.854065] __alloc_pages_nodemask+0x23a2/0x2890 [ 2725.858910] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2725.863743] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2725.868489] ? rcu_nmi_exit+0xb3/0x180 [ 2725.872375] cache_grow_begin+0xa4/0x8a0 [ 2725.876427] fallback_alloc+0x213/0x2e0 [ 2725.880394] kmem_cache_alloc_trace+0x1f1/0x380 [ 2725.885068] kobject_uevent_env+0x236/0x1480 [ 2725.889465] ? dev_uevent_filter+0x3c/0xd0 [ 2725.893688] ? kernfs_get.part.0+0x62/0x80 [ 2725.897914] net_rx_queue_update_kobjects+0xf2/0x450 [ 2725.903009] ? kset_register+0x181/0x1e0 [ 2725.907061] netdev_register_kobject+0x279/0x430 [ 2725.911823] register_netdevice+0xb46/0x10f0 [ 2725.916224] ? unregister_netdev+0x20/0x20 [ 2725.920446] ? alloc_netdev_mqs+0x9ca/0xd50 [ 2725.924759] __ip_tunnel_create+0x398/0x580 [ 2725.929068] ? ip_tunnel_xmit+0x3850/0x3850 [ 2725.933380] ? check_preemption_disabled+0x41/0x280 [ 2725.938384] ? check_preemption_disabled+0x41/0x280 [ 2725.943392] ip_tunnel_init_net+0x330/0x990 [ 2725.947715] ? ip_tunnel_add+0x2d0/0x2d0 [ 2725.951767] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2725.956782] ? ipip_exit_batch_net+0x20/0x20 [ 2725.961182] ops_init+0xb3/0x410 [ 2725.964538] setup_net+0x2c2/0x720 [ 2725.968067] ? rtnl_net_dumpid_one+0x250/0x250 [ 2725.972644] copy_net_ns+0x1f7/0x340 [ 2725.976355] create_new_namespaces+0x3f6/0x7b0 [ 2725.980931] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2725.985849] ksys_unshare+0x36c/0x9a0 [ 2725.989639] ? __se_sys_futex+0x28f/0x3b0 [ 2725.993775] ? walk_process_tree+0x2c0/0x2c0 [ 2725.998191] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2726.003542] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2726.008549] __x64_sys_unshare+0x2d/0x40 [ 2726.012594] do_syscall_64+0xf9/0x620 [ 2726.016385] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2726.021635] RIP: 0033:0x7fdd7a70bae9 [ 2726.025335] Code: Bad RIP value. [ 2726.028684] RSP: 002b:00007fdd77c81188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2726.036377] RAX: ffffffffffffffda RBX: 00007fdd7a81ef60 RCX: 00007fdd7a70bae9 [ 2726.043632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 2726.050887] RBP: 00007fdd7a765f25 R08: 0000000000000000 R09: 0000000000000000 [ 2726.058229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2726.065480] R13: 00007fff9cf0cd6f R14: 00007fdd77c81300 R15: 0000000000022000 [ 2726.142941] Mem-Info: [ 2726.145714] active_anon:142593 inactive_anon:1287180 isolated_anon:0 [ 2726.145714] active_file:364 inactive_file:416 isolated_file:32 [ 2726.145714] unevictable:0 dirty:3 writeback:0 unstable:0 [ 2726.145714] slab_reclaimable:19892 slab_unreclaimable:130617 [ 2726.145714] mapped:1326311 shmem:1291056 pagetables:16213 bounce:0 [ 2726.145714] free:25072 free_pcp:276 free_cma:0 [ 2726.186585] Node 0 active_anon:520304kB inactive_anon:1412960kB active_file:512kB inactive_file:704kB unevictable:0kB isolated(anon):0kB isolated(file):124kB mapped:1529908kB dirty:12kB writeback:0kB shmem:1416932kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2726.226831] Node 1 active_anon:50068kB inactive_anon:3735760kB active_file:84kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3774036kB dirty:0kB writeback:0kB shmem:3747292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2726.255610] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2726.283990] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2726.289828] Node 0 DMA32 free:35996kB min:35996kB low:44992kB high:53988kB active_anon:518088kB inactive_anon:1410864kB active_file:544kB inactive_file:468kB unevictable:0kB writepending:4kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13376kB pagetables:29500kB bounce:0kB free_pcp:1368kB local_pcp:464kB free_cma:0kB [ 2726.334745] lowmem_reserve[]: 0 0 1 1 1 [ 2726.343861] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2726.385808] lowmem_reserve[]: 0 0 0 0 0 [ 2726.391754] Node 1 Normal free:54964kB min:53876kB low:67344kB high:80812kB active_anon:50068kB inactive_anon:3735760kB active_file:52kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14208kB pagetables:35260kB bounce:0kB free_pcp:300kB local_pcp:124kB free_cma:0kB [ 2726.450332] lowmem_reserve[]: 0 0 0 0 0 [ 2726.455047] Node 0 DMA: 29*4kB (UMEH) 22*8kB (UMEH) 18*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10980kB [ 2726.472498] Node 0 DMA32: 1010*4kB (UMEH) 1683*8kB (UMEH) 276*16kB (UMEH) 445*32kB (UMEH) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36288kB [ 2726.488431] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2726.511274] Node 1 Normal: 395*4kB (UME) 663*8kB (UMH) 350*16kB (UMH) 172*32kB (UMEH) 362*64kB (UMH) 97*128kB (UMH) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53828kB [ 2726.532756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2726.542246] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2726.557326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2726.601433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2726.638386] 1291439 total pagecache pages [ 2726.642722] 0 pages in swap cache [ 2726.646530] Swap cache stats: add 0, delete 0, find 0/0 [ 2726.652142] Free swap = 0kB [ 2726.655441] Total swap = 0kB [ 2726.659222] 2097051 pages RAM [ 2726.662524] 0 pages HighMem/MovableOnly [ 2726.671947] 369649 pages reserved [ 2726.676579] 0 pages cma reserved [ 2726.680657] Out of memory (oom_kill_allocating_task): Kill process 18399 (syz-executor.0) score 0 or sacrifice child [ 2726.698303] Killed process 18396 (syz-executor.0) total-vm:93540kB, anon-rss:372kB, file-rss:33944kB, shmem-rss:11480kB [ 2726.737094] oom_reaper: reaped process 18396 (syz-executor.0), now anon-rss:0kB, file-rss:33940kB, shmem-rss:11480kB [ 2726.872581] kworker/u4:10 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2726.960884] kworker/u4:10 cpuset=/ mems_allowed=0-1 [ 2726.970356] CPU: 1 PID: 22526 Comm: kworker/u4:10 Not tainted 4.19.211-syzkaller #0 [ 2726.978198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2726.987567] Workqueue: events_unbound call_usermodehelper_exec_work [ 2726.994063] Call Trace: [ 2726.996662] dump_stack+0x1fc/0x2ef [ 2727.000306] dump_header+0x15d/0xc3f [ 2727.004030] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2727.009220] ? ___ratelimit+0x319/0x590 [ 2727.013203] oom_kill_process.cold+0x10/0x692 [ 2727.017698] ? oom_badness.part.0+0x135/0x6e0 [ 2727.022193] ? lock_downgrade+0x720/0x720 [ 2727.026351] ? check_preemption_disabled+0x41/0x280 [ 2727.031382] out_of_memory+0x34d/0x1390 [ 2727.035457] ? oom_killer_disable+0x270/0x270 [ 2727.039958] ? mutex_trylock+0x15f/0x1a0 [ 2727.044027] __alloc_pages_nodemask+0x23a2/0x2890 [ 2727.048889] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2727.053739] ? should_fail+0x142/0x7b0 [ 2727.057629] ? fs_reclaim_release+0xd0/0x110 [ 2727.062051] ? check_preemption_disabled+0x41/0x280 [ 2727.067076] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2727.072092] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2727.076853] copy_process.part.0+0x3cf/0x8260 [ 2727.081358] ? __lock_acquire+0x6de/0x3ff0 [ 2727.085596] ? mark_held_locks+0xf0/0xf0 [ 2727.089669] ? umh_complete+0x90/0x90 [ 2727.093479] ? __cleanup_sighand+0x60/0x60 [ 2727.097722] ? __update_load_avg_se+0x5ec/0xa00 [ 2727.102399] ? __lock_acquire+0x6de/0x3ff0 [ 2727.106648] _do_fork+0x22f/0xf30 [ 2727.110101] ? umh_complete+0x90/0x90 [ 2727.113905] ? fork_idle+0x220/0x220 [ 2727.117622] ? lock_downgrade+0x720/0x720 [ 2727.121770] ? lock_downgrade+0x720/0x720 [ 2727.125925] ? trace_hardirqs_off+0x64/0x200 [ 2727.130346] ? umh_complete+0x90/0x90 [ 2727.134150] kernel_thread+0x2f/0x40 [ 2727.137869] call_usermodehelper_exec_work+0x16d/0x260 [ 2727.143162] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 2727.148711] process_one_work+0x864/0x1570 [ 2727.152962] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2727.157646] worker_thread+0x64c/0x1130 [ 2727.161633] ? __kthread_parkme+0x133/0x1e0 [ 2727.165956] ? process_one_work+0x1570/0x1570 [ 2727.170568] kthread+0x33f/0x460 [ 2727.173957] ? kthread_park+0x180/0x180 [ 2727.177942] ret_from_fork+0x24/0x30 [ 2727.554012] Mem-Info: [ 2727.556565] active_anon:143446 inactive_anon:1284330 isolated_anon:0 [ 2727.556565] active_file:35 inactive_file:416 isolated_file:0 [ 2727.556565] unevictable:0 dirty:6 writeback:0 unstable:0 [ 2727.556565] slab_reclaimable:19892 slab_unreclaimable:130186 [ 2727.556565] mapped:1323009 shmem:1289031 pagetables:16213 bounce:0 [ 2727.556565] free:27328 free_pcp:732 free_cma:0 [ 2727.591555] Node 0 active_anon:520296kB inactive_anon:1406960kB active_file:468kB inactive_file:2400kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1524468kB dirty:24kB writeback:0kB shmem:1410932kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2727.696810] Node 1 active_anon:49988kB inactive_anon:3730360kB active_file:72kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3768568kB dirty:0kB writeback:0kB shmem:3741892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2727.830594] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2727.976874] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2727.986003] Node 0 DMA32 free:38284kB min:35996kB low:44992kB high:53988kB active_anon:518080kB inactive_anon:1405320kB active_file:3688kB inactive_file:3388kB unevictable:0kB writepending:24kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13504kB pagetables:29500kB bounce:0kB free_pcp:1496kB local_pcp:84kB free_cma:0kB [ 2728.132517] lowmem_reserve[]: 0 0 1 1 1 [ 2728.140552] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2728.200157] lowmem_reserve[]: 0 0 0 0 0 [ 2728.205025] Node 1 Normal free:57476kB min:53876kB low:67344kB high:80812kB active_anon:49988kB inactive_anon:3730300kB active_file:384kB inactive_file:480kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14048kB pagetables:35232kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2728.242999] lowmem_reserve[]: 0 0 0 0 0 [ 2728.248440] Node 0 DMA: 29*4kB (UMEH) 22*8kB (UMEH) 18*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10980kB [ 2728.272681] Node 0 DMA32: 886*4kB (UMEH) 1925*8kB (UMEH) 312*16kB (UMEH) 444*32kB (UMEH) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38272kB [ 2728.293414] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2728.311235] Node 1 Normal: 1898*4kB (UME) 678*8kB (MH) 345*16kB (UMH) 169*32kB (UMEH) 353*64kB (UMH) 84*128kB (MH) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 57544kB [ 2728.396366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2728.415951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 22:28:35 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001600b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2728.439356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2728.495421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 22:28:35 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd59, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:35 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6000f0000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2728.535908] 1285094 total pagecache pages [ 2728.540093] 0 pages in swap cache [ 2728.543542] Swap cache stats: add 0, delete 0, find 0/0 22:28:35 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd5c, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:35 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2728.600972] Free swap = 0kB [ 2728.604023] Total swap = 0kB [ 2728.643154] 2097051 pages RAM [ 2728.686102] 0 pages HighMem/MovableOnly [ 2728.722241] 369649 pages reserved [ 2728.777742] IPVS: ftp: loaded support on port[0] = 21 [ 2728.797640] 0 pages cma reserved 22:28:35 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001700b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2728.846117] Out of memory: Kill process 28657 (syz-executor.0) score 1006 or sacrifice child 22:28:35 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600100000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2728.940469] IPVS: ftp: loaded support on port[0] = 21 [ 2728.954501] IPVS: ftp: loaded support on port[0] = 21 [ 2728.978017] Killed process 28657 (syz-executor.0) total-vm:93672kB, anon-rss:432kB, file-rss:34820kB, shmem-rss:11476kB 22:28:36 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001800b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:36 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600110000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2730.742404] IPVS: ftp: loaded support on port[0] = 21 22:28:43 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001900b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:43 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x4c00}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:43 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:28:43 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600120000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:43 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2737.392091] IPVS: ftp: loaded support on port[0] = 21 22:28:44 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001a00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2737.450888] IPVS: ftp: loaded support on port[0] = 21 [ 2737.509401] IPVS: ftp: loaded support on port[0] = 21 22:28:44 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd5d, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:44 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600130000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:44 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001b00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2738.353765] IPVS: ftp: loaded support on port[0] = 21 [ 2740.912995] IPVS: ftp: loaded support on port[0] = 21 22:28:47 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001c00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:47 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600140000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:47 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x5003}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2741.457265] IPVS: ftp: loaded support on port[0] = 21 22:28:48 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001d00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:48 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600150000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2742.686612] IPVS: ftp: loaded support on port[0] = 21 22:28:52 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001e00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:52 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000240)) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:28:52 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd58, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:52 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600160000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2746.411249] IPVS: ftp: loaded support on port[0] = 21 [ 2746.640052] IPVS: ftp: loaded support on port[0] = 21 22:28:55 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600170000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:55 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd58, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:55 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd5e, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:55 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001f00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:55 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000240)) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:28:55 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x5a03}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:28:55 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600180000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2749.066881] IPVS: ftp: loaded support on port[0] = 21 [ 2749.224042] IPVS: ftp: loaded support on port[0] = 21 [ 2749.239237] IPVS: ftp: loaded support on port[0] = 21 22:28:55 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600002000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2749.307230] IPVS: ftp: loaded support on port[0] = 21 22:28:56 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600190000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:56 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600002100b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:56 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6001a0000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2750.601877] IPVS: ftp: loaded support on port[0] = 21 22:28:59 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6001b0000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:28:59 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600002300b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:29:03 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000240)) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:29:03 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000240)) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:29:03 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x6002}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:29:03 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6001c0000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:29:03 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd5f, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2756.763616] IPVS: ftp: loaded support on port[0] = 21 22:29:03 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600003f00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2756.923325] IPVS: ftp: loaded support on port[0] = 21 [ 2757.099959] IPVS: ftp: loaded support on port[0] = 21 [ 2757.125098] IPVS: ftp: loaded support on port[0] = 21 22:29:03 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600230000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:29:04 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6000fff00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:29:05 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000300b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:29:05 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2758.743108] IPVS: ftp: loaded support on port[0] = 21 22:29:05 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000500b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2758.984339] IPVS: ftp: loaded support on port[0] = 21 [ 2759.669666] IPVS: ftp: loaded support on port[0] = 21 22:29:06 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000ff1e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:29:07 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000200b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:29:10 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000240)) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2764.439546] IPVS: ftp: loaded support on port[0] = 21 22:29:11 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x6800}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:29:11 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd60, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:29:11 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000300b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:29:11 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000600b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:29:11 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2764.851362] IPVS: ftp: loaded support on port[0] = 21 [ 2764.872271] IPVS: ftp: loaded support on port[0] = 21 [ 2765.041079] IPVS: ftp: loaded support on port[0] = 21 22:29:11 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x6002}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:29:11 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000400b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2766.202977] kworker/u4:10 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2766.229796] kworker/u4:10 cpuset=/ mems_allowed=0-1 [ 2766.234956] CPU: 0 PID: 22526 Comm: kworker/u4:10 Not tainted 4.19.211-syzkaller #0 [ 2766.242746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2766.252098] Workqueue: events_unbound call_usermodehelper_exec_work [ 2766.258486] Call Trace: [ 2766.261064] dump_stack+0x1fc/0x2ef [ 2766.264680] dump_header+0x15d/0xc3f [ 2766.268391] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2766.273492] ? ___ratelimit+0x319/0x590 [ 2766.277454] oom_kill_process.cold+0x10/0x692 [ 2766.281952] ? oom_badness.part.0+0x135/0x6e0 [ 2766.286435] ? lock_downgrade+0x720/0x720 [ 2766.290571] ? check_preemption_disabled+0x41/0x280 [ 2766.295589] out_of_memory+0x34d/0x1390 [ 2766.299557] ? oom_killer_disable+0x270/0x270 [ 2766.304049] ? mutex_trylock+0x15f/0x1a0 [ 2766.308103] __alloc_pages_nodemask+0x23a2/0x2890 [ 2766.312943] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2766.317770] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2766.322610] ? mark_held_locks+0xa6/0xf0 [ 2766.326659] ? ____cache_alloc_node+0x156/0x1d0 [ 2766.331312] ? cache_grow_begin+0x64/0x8a0 [ 2766.335552] cache_grow_begin+0xa4/0x8a0 [ 2766.339608] fallback_alloc+0x213/0x2e0 [ 2766.343583] kmem_cache_alloc_node+0xe3/0x3b0 [ 2766.348076] copy_process.part.0+0x1ceb/0x8260 [ 2766.352659] ? __lock_acquire+0x6de/0x3ff0 [ 2766.356895] ? __lock_acquire+0x6de/0x3ff0 [ 2766.361127] ? umh_complete+0x90/0x90 [ 2766.364916] ? __cleanup_sighand+0x60/0x60 [ 2766.369138] ? mark_held_locks+0xf0/0xf0 [ 2766.373200] ? __lock_acquire+0x6de/0x3ff0 [ 2766.377429] _do_fork+0x22f/0xf30 [ 2766.380872] ? umh_complete+0x90/0x90 [ 2766.384672] ? fork_idle+0x220/0x220 [ 2766.388382] ? lock_acquire+0x170/0x3c0 [ 2766.392343] ? debug_object_deactivate+0xfc/0x2e0 [ 2766.397174] ? trace_hardirqs_off+0x64/0x200 [ 2766.401568] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2766.406661] ? umh_complete+0x90/0x90 [ 2766.410446] kernel_thread+0x2f/0x40 [ 2766.414151] call_usermodehelper_exec_work+0x16d/0x260 [ 2766.419412] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 2766.424945] process_one_work+0x864/0x1570 [ 2766.429268] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2766.433929] worker_thread+0x64c/0x1130 [ 2766.437895] ? __kthread_parkme+0x133/0x1e0 [ 2766.442202] ? process_one_work+0x1570/0x1570 [ 2766.446685] kthread+0x33f/0x460 [ 2766.450234] ? kthread_park+0x180/0x180 [ 2766.454199] ret_from_fork+0x24/0x30 [ 2766.526600] Mem-Info: [ 2766.529216] active_anon:142999 inactive_anon:1288307 isolated_anon:0 [ 2766.529216] active_file:196 inactive_file:404 isolated_file:9 [ 2766.529216] unevictable:0 dirty:6 writeback:0 unstable:0 [ 2766.529216] slab_reclaimable:19923 slab_unreclaimable:129089 [ 2766.529216] mapped:1327261 shmem:1292186 pagetables:16280 bounce:0 [ 2766.529216] free:25127 free_pcp:0 free_cma:0 [ 2766.579732] Node 0 active_anon:521552kB inactive_anon:1434652kB active_file:1080kB inactive_file:1268kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:1552260kB dirty:24kB writeback:0kB shmem:1438628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2766.629577] Node 1 active_anon:50444kB inactive_anon:3718576kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3756784kB dirty:0kB writeback:0kB shmem:3730116kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2766.702230] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2766.729666] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2766.762272] Node 0 DMA32 free:35724kB min:35996kB low:44992kB high:53988kB active_anon:519336kB inactive_anon:1432892kB active_file:456kB inactive_file:584kB unevictable:0kB writepending:124kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13472kB pagetables:29872kB bounce:0kB free_pcp:1052kB local_pcp:804kB free_cma:0kB [ 2766.798640] lowmem_reserve[]: 0 0 1 1 1 [ 2766.802858] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2766.862489] lowmem_reserve[]: 0 0 0 0 0 [ 2766.870492] Node 1 Normal free:53828kB min:53876kB low:67344kB high:80812kB active_anon:50444kB inactive_anon:3718576kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14304kB pagetables:35156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2766.911431] lowmem_reserve[]: 0 0 0 0 0 [ 2766.917362] Node 0 DMA: 29*4kB (UMEH) 22*8kB (UMEH) 18*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10980kB [ 2766.946969] Node 0 DMA32: 245*4kB (UMH) 296*8kB (UMH) 968*16kB (UMEH) 568*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37012kB [ 2766.961079] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2766.972461] Node 1 Normal: 445*4kB (UME) 1102*8kB (UMEH) 670*16kB (UMEH) 339*32kB (UMEH) 332*64kB (MH) 2*128kB (H) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53924kB [ 2766.992087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2767.001329] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2767.010158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2767.019213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2767.034555] 1292641 total pagecache pages [ 2767.044205] 0 pages in swap cache [ 2767.053614] Swap cache stats: add 0, delete 0, find 0/0 [ 2767.062042] Free swap = 0kB [ 2767.065695] Total swap = 0kB [ 2767.068840] 2097051 pages RAM [ 2767.072102] 0 pages HighMem/MovableOnly [ 2767.076307] 369649 pages reserved [ 2767.079957] 0 pages cma reserved [ 2767.083619] Out of memory: Kill process 28843 (syz-executor.4) score 1006 or sacrifice child [ 2767.092395] Killed process 28843 (syz-executor.4) total-vm:93540kB, anon-rss:428kB, file-rss:34820kB, shmem-rss:11480kB [ 2767.703865] Bluetooth: hci2: command 0x0406 tx timeout [ 2767.796492] IPVS: ftp: loaded support on port[0] = 21 [ 2768.269762] oom_reaper: reaped process 19411 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:11480kB [ 2768.323986] syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2768.342722] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2768.351210] CPU: 0 PID: 16792 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2768.359191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2768.368544] Call Trace: [ 2768.371141] dump_stack+0x1fc/0x2ef [ 2768.374786] dump_header+0x15d/0xc3f [ 2768.378510] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2768.386570] ? ___ratelimit+0x319/0x590 [ 2768.390555] oom_kill_process.cold+0x10/0x692 [ 2768.395081] ? check_preemption_disabled+0x41/0x280 [ 2768.400114] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2768.405398] out_of_memory+0x1072/0x1390 [ 2768.409495] ? oom_killer_disable+0x270/0x270 [ 2768.413995] ? mutex_trylock+0x15f/0x1a0 [ 2768.418063] __alloc_pages_nodemask+0x23a2/0x2890 [ 2768.422949] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2768.427796] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2768.432642] ? lock_downgrade+0x720/0x720 [ 2768.436794] ? lock_acquire+0x170/0x3c0 [ 2768.440793] ? ____cache_alloc_node+0x156/0x1d0 [ 2768.445495] ? cache_grow_begin+0x64/0x8a0 [ 2768.449740] cache_grow_begin+0xa4/0x8a0 [ 2768.453818] fallback_alloc+0x213/0x2e0 [ 2768.457818] kmem_cache_alloc+0x1e4/0x370 [ 2768.461978] getname_flags+0xce/0x590 [ 2768.465796] ? blkcg_maybe_throttle_current+0x56c/0xc10 [ 2768.471164] do_rmdir+0x97/0x490 [ 2768.474550] ? __ia32_sys_mkdir+0x80/0x80 [ 2768.478701] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2768.483300] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2768.487803] ? task_work_run+0x126/0x1c0 [ 2768.491871] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2768.497240] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2768.502261] ? do_syscall_64+0x21/0x620 [ 2768.506236] do_syscall_64+0xf9/0x620 [ 2768.510041] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2768.515228] RIP: 0033:0x7fc6195ac457 [ 2768.518934] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 54 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2768.537818] RSP: 002b:00007ffe375a3958 EFLAGS: 00000207 ORIG_RAX: 0000000000000054 [ 2768.545508] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fc6195ac457 [ 2768.552865] RDX: 0000000000010780 RSI: 0000000000000000 RDI: 00007ffe375a4b20 [ 2768.560113] RBP: 00007ffe375a3a20 R08: 0000000000000000 R09: 00007fc619692640 [ 2768.567363] R10: 0000000000000231 R11: 0000000000000207 R12: 00007fc6196060bd [ 2768.574625] R13: 00007ffe375a4b20 R14: 0000555555e6d850 R15: 00007ffe375a5c20 [ 2768.623864] Mem-Info: [ 2768.626539] active_anon:143005 inactive_anon:1288111 isolated_anon:0 [ 2768.626539] active_file:83 inactive_file:376 isolated_file:69 [ 2768.626539] unevictable:0 dirty:11 writeback:0 unstable:0 [ 2768.626539] slab_reclaimable:19961 slab_unreclaimable:128697 [ 2768.626539] mapped:1326891 shmem:1292003 pagetables:16303 bounce:0 [ 2768.626539] free:25560 free_pcp:278 free_cma:0 [ 2768.695907] Node 0 active_anon:521480kB inactive_anon:1435788kB active_file:112kB inactive_file:624kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1552372kB dirty:44kB writeback:0kB shmem:1439784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2768.730102] Node 1 active_anon:50540kB inactive_anon:3716656kB active_file:400kB inactive_file:1288kB unevictable:0kB isolated(anon):0kB isolated(file):68kB mapped:3755792kB dirty:0kB writeback:0kB shmem:3728228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2768.764145] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2768.798044] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2768.804166] Node 0 DMA32 free:35992kB min:35996kB low:44992kB high:53988kB active_anon:519264kB inactive_anon:1433692kB active_file:184kB inactive_file:496kB unevictable:0kB writepending:44kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13472kB pagetables:29884kB bounce:0kB free_pcp:732kB local_pcp:248kB free_cma:0kB [ 2768.866111] lowmem_reserve[]: 0 0 1 1 1 [ 2768.879082] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2769.043177] lowmem_reserve[]: 0 0 0 0 0 [ 2769.047205] Node 1 Normal free:54312kB min:53876kB low:67344kB high:80812kB active_anon:50616kB inactive_anon:3718448kB active_file:164kB inactive_file:104kB unevictable:0kB writepending:20kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14240kB pagetables:35240kB bounce:0kB free_pcp:352kB local_pcp:20kB free_cma:0kB [ 2769.077368] lowmem_reserve[]: 0 0 0 0 0 [ 2769.081371] Node 0 DMA: 29*4kB (UMEH) 22*8kB (UMEH) 18*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10980kB [ 2769.099170] Node 0 DMA32: 91*4kB (UH) 223*8kB (UEH) 972*16kB (UEH) 570*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35940kB [ 2769.112872] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2769.123985] Node 1 Normal: 1*4kB (M) 856*8kB (UMEH) 709*16kB (UMEH) 363*32kB (UMEH) 363*64kB (UMEH) 2*128kB (H) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53556kB [ 2769.139382] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2769.148306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2769.157644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2769.166557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2769.175174] 1292991 total pagecache pages [ 2769.179322] 0 pages in swap cache [ 2769.182768] Swap cache stats: add 0, delete 0, find 0/0 [ 2769.188186] Free swap = 0kB [ 2769.191194] Total swap = 0kB [ 2769.194285] 2097051 pages RAM [ 2769.197382] 0 pages HighMem/MovableOnly [ 2769.202693] 369649 pages reserved [ 2769.206254] 0 pages cma reserved [ 2769.209614] Out of memory (oom_kill_allocating_task): Kill process 16792 (syz-executor.3) score 0 or sacrifice child [ 2769.234681] Killed process 16792 (syz-executor.3) total-vm:93276kB, anon-rss:384kB, file-rss:33932kB, shmem-rss:0kB [ 2769.246149] oom_reaper: reaped process 16792 (syz-executor.3), now anon-rss:0kB, file-rss:33908kB, shmem-rss:0kB [ 2769.793508] systemd-udevd invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2769.805561] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2769.810706] CPU: 0 PID: 19429 Comm: systemd-udevd Not tainted 4.19.211-syzkaller #0 [ 2769.818498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2769.827849] Call Trace: [ 2769.830443] dump_stack+0x1fc/0x2ef [ 2769.834073] dump_header+0x15d/0xc3f [ 2769.837789] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2769.842888] ? ___ratelimit+0x319/0x590 [ 2769.846863] oom_kill_process.cold+0x10/0x692 [ 2769.851354] ? check_preemption_disabled+0x41/0x280 [ 2769.856373] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2769.861646] out_of_memory+0x1072/0x1390 [ 2769.865706] ? oom_killer_disable+0x270/0x270 [ 2769.870202] ? mutex_trylock+0x15f/0x1a0 [ 2769.874265] __alloc_pages_nodemask+0x23a2/0x2890 [ 2769.879119] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2769.883955] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2769.888793] ? __bpf_prog_run64+0xd0/0xd0 [ 2769.892965] ? ____cache_alloc_node+0x156/0x1d0 [ 2769.897716] ? cache_grow_begin+0x64/0x8a0 [ 2769.901951] cache_grow_begin+0xa4/0x8a0 [ 2769.906012] fallback_alloc+0x213/0x2e0 [ 2769.909986] kmem_cache_alloc+0x1e4/0x370 [ 2769.914133] getname_flags+0xce/0x590 [ 2769.917934] user_path_at_empty+0x2a/0x50 [ 2769.922079] vfs_statx+0x113/0x210 [ 2769.925613] ? do_readlinkat+0x2f0/0x2f0 [ 2769.929670] ? mnt_set_expiry+0x260/0x260 [ 2769.933818] ? check_preemption_disabled+0x41/0x280 [ 2769.938845] __se_sys_newstat+0x96/0x120 [ 2769.942902] ? __se_sys_lstat+0x120/0x120 [ 2769.947044] ? __secure_computing+0x104/0x360 [ 2769.951536] ? syscall_trace_enter+0x3b7/0xd60 [ 2769.956116] ? syscall_slow_exit_work+0x630/0x630 [ 2769.960960] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2769.966323] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2769.971335] ? do_syscall_64+0x21/0x620 [ 2769.975309] do_syscall_64+0xf9/0x620 [ 2769.979111] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2769.984303] RIP: 0033:0x7f94d8ce3295 [ 2769.988007] Code: Bad RIP value. [ 2769.991362] RSP: 002b:00007ffe7394ecf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2769.999060] RAX: ffffffffffffffda RBX: 000056426713f880 RCX: 00007f94d8ce3295 [ 2770.006332] RDX: 00007ffe7394ed00 RSI: 00007ffe7394ed00 RDI: 00007ffe7394edb0 [ 2770.013695] RBP: 00007ffe7394ee20 R08: 00000000000001c0 R09: 0000000000000015 [ 2770.021741] R10: 00007ffe7394ee00 R11: 0000000000000246 R12: 00007ffe7394ee30 [ 2770.029004] R13: 000056426713f880 R14: 0000000000000003 R15: 000000000000000e [ 2770.041810] Mem-Info: [ 2770.051520] active_anon:143001 inactive_anon:1288716 isolated_anon:0 [ 2770.051520] active_file:128 inactive_file:150 isolated_file:32 [ 2770.051520] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2770.051520] slab_reclaimable:19961 slab_unreclaimable:128705 [ 2770.051520] mapped:1327442 shmem:1292607 pagetables:16282 bounce:0 [ 2770.051520] free:25563 free_pcp:0 free_cma:0 [ 2770.090775] Node 0 active_anon:521404kB inactive_anon:1436128kB active_file:480kB inactive_file:552kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1552792kB dirty:20kB writeback:0kB shmem:1440120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2770.126990] Node 1 active_anon:50600kB inactive_anon:3718736kB active_file:32kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3756976kB dirty:0kB writeback:0kB shmem:3730308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2770.162189] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2770.194239] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2770.199412] Node 0 DMA32 free:36688kB min:35996kB low:44992kB high:53988kB active_anon:519188kB inactive_anon:1434032kB active_file:480kB inactive_file:552kB unevictable:0kB writepending:20kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13472kB pagetables:29880kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2770.235807] lowmem_reserve[]: 0 0 1 1 1 [ 2770.239942] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2770.271458] lowmem_reserve[]: 0 0 0 0 0 [ 2770.277239] Node 1 Normal free:54580kB min:53876kB low:67344kB high:80812kB active_anon:50600kB inactive_anon:3718736kB active_file:32kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14240kB pagetables:35156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2770.311414] lowmem_reserve[]: 0 0 0 0 0 [ 2770.315623] Node 0 DMA: 29*4kB (UMEH) 22*8kB (UMEH) 18*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10980kB [ 2770.337595] Node 0 DMA32: 247*4kB (UMEH) 228*8kB (UMEH) 975*16kB (UMEH) 570*32kB (UEH) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36716kB [ 2770.352279] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2770.364390] Node 1 Normal: 103*4kB (UM) 923*8kB (UMEH) 714*16kB (UMEH) 365*32kB (UMEH) 363*64kB (UMEH) 2*128kB (H) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54644kB [ 2770.380477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2770.389528] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2770.398345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2770.407399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2770.416164] 1292692 total pagecache pages [ 2770.420436] 0 pages in swap cache [ 2770.424122] Swap cache stats: add 0, delete 0, find 0/0 [ 2770.430306] Free swap = 0kB [ 2770.438108] Total swap = 0kB [ 2770.441240] 2097051 pages RAM [ 2770.460402] 0 pages HighMem/MovableOnly [ 2770.516993] 369649 pages reserved [ 2770.523974] 0 pages cma reserved [ 2770.531960] Out of memory (oom_kill_allocating_task): Kill process 19429 (systemd-udevd) score 0 or sacrifice child [ 2770.551929] Killed process 19429 (systemd-udevd) total-vm:43796kB, anon-rss:1188kB, file-rss:0kB, shmem-rss:0kB [ 2770.563441] oom_reaper: reaped process 19429 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2770.667572] oom_reaper: reaped process 19423 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:8232kB [ 2770.724082] syz-executor.2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2770.736849] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2770.742003] CPU: 0 PID: 17021 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 2770.749874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2770.759283] Call Trace: [ 2770.761953] dump_stack+0x1fc/0x2ef [ 2770.765569] dump_header+0x15d/0xc3f [ 2770.769529] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2770.774616] ? ___ratelimit+0x319/0x590 [ 2770.778595] oom_kill_process.cold+0x10/0x692 [ 2770.783079] ? check_preemption_disabled+0x41/0x280 [ 2770.788083] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2770.793343] out_of_memory+0x1072/0x1390 [ 2770.797479] ? oom_killer_disable+0x270/0x270 [ 2770.801970] ? mutex_trylock+0x15f/0x1a0 [ 2770.806015] __alloc_pages_nodemask+0x23a2/0x2890 [ 2770.810926] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2770.815767] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2770.820609] ? ____cache_alloc_node+0x156/0x1d0 [ 2770.825295] ? cache_grow_begin+0x64/0x8a0 [ 2770.829527] cache_grow_begin+0xa4/0x8a0 [ 2770.833679] fallback_alloc+0x213/0x2e0 [ 2770.837651] kmem_cache_alloc+0x1e4/0x370 [ 2770.841787] getname_flags+0xce/0x590 [ 2770.845587] user_path_mountpoint_at+0x23/0x40 [ 2770.850167] ksys_umount+0x156/0x1070 [ 2770.853958] ? __detach_mounts+0x470/0x470 [ 2770.858193] ? up_read+0x17/0x110 [ 2770.861632] ? __do_page_fault+0x180/0xd60 [ 2770.865855] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2770.871206] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2770.876207] __x64_sys_umount+0x50/0x70 [ 2770.880168] do_syscall_64+0xf9/0x620 [ 2770.883956] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2770.889124] RIP: 0033:0x7f5e3fa44f57 [ 2770.892821] Code: Bad RIP value. [ 2770.896164] RSP: 002b:00007ffc77669c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2770.903851] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5e3fa44f57 [ 2770.911102] RDX: 00007ffc7766adb0 RSI: 000000000000000a RDI: 00007ffc7766ae40 [ 2770.918365] RBP: 00007ffc7766ae40 R08: 0000000000000001 R09: 00007ffc7766ac10 [ 2770.925621] R10: 0000555556342903 R11: 0000000000000246 R12: 00007f5e3fa9d0bd [ 2770.932873] R13: 00007ffc7766ae40 R14: 0000555556342810 R15: 00007ffc7766bf40 [ 2770.960153] Mem-Info: [ 2771.005257] active_anon:142916 inactive_anon:1289170 isolated_anon:0 [ 2771.005257] active_file:33 inactive_file:77 isolated_file:12 [ 2771.005257] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2771.005257] slab_reclaimable:19958 slab_unreclaimable:128708 [ 2771.005257] mapped:1327752 shmem:1293047 pagetables:16262 bounce:0 [ 2771.005257] free:25153 free_pcp:286 free_cma:0 [ 2771.045862] Node 0 active_anon:521340kB inactive_anon:1437048kB active_file:28kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:1552824kB dirty:0kB writeback:0kB shmem:1441024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2771.074471] Node 1 active_anon:50324kB inactive_anon:3719632kB active_file:0kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3757984kB dirty:0kB writeback:0kB shmem:3731164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2771.102244] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2771.131322] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2771.136631] Node 0 DMA32 free:35904kB min:35996kB low:44992kB high:53988kB active_anon:519124kB inactive_anon:1434952kB active_file:32kB inactive_file:148kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13472kB pagetables:29884kB bounce:0kB free_pcp:616kB local_pcp:0kB free_cma:0kB [ 2771.167642] lowmem_reserve[]: 0 0 1 1 1 [ 2771.171625] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2771.197757] lowmem_reserve[]: 0 0 0 0 0 [ 2771.201747] Node 1 Normal free:53724kB min:53876kB low:67344kB high:80812kB active_anon:50324kB inactive_anon:3719636kB active_file:100kB inactive_file:108kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14176kB pagetables:35072kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2771.231058] lowmem_reserve[]: 0 0 0 0 0 [ 2771.235118] Node 0 DMA: 29*4kB (UMEH) 22*8kB (UMEH) 18*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10980kB [ 2771.253451] Node 0 DMA32: 264*4kB (UMH) 219*8kB (UMEH) 974*16kB (UMEH) 575*32kB (UMEH) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36856kB [ 2771.268020] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2771.279145] Node 1 Normal: 116*4kB (UM) 851*8kB (UMEH) 714*16kB (UMEH) 365*32kB (UMEH) 364*64kB (UMEH) 2*128kB (H) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54184kB [ 2771.295342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2771.304350] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2771.312977] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2771.321889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2771.330787] 1293092 total pagecache pages [ 2771.335239] 0 pages in swap cache [ 2771.338680] Swap cache stats: add 0, delete 0, find 0/0 [ 2771.344072] Free swap = 0kB [ 2771.347070] Total swap = 0kB [ 2771.351080] 2097051 pages RAM [ 2771.354252] 0 pages HighMem/MovableOnly [ 2771.358214] 369649 pages reserved [ 2771.361642] 0 pages cma reserved [ 2771.366030] Out of memory (oom_kill_allocating_task): Kill process 17021 (syz-executor.2) score 0 or sacrifice child [ 2771.380223] Killed process 17021 (syz-executor.2) total-vm:93276kB, anon-rss:388kB, file-rss:33684kB, shmem-rss:0kB [ 2771.392131] oom_reaper: reaped process 17021 (syz-executor.2), now anon-rss:0kB, file-rss:33680kB, shmem-rss:0kB [ 2771.485401] kworker/u4:12 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2771.499391] kworker/u4:12 cpuset=/ mems_allowed=0-1 [ 2771.505224] CPU: 0 PID: 31324 Comm: kworker/u4:12 Not tainted 4.19.211-syzkaller #0 [ 2771.513029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2771.522398] Workqueue: events_unbound call_usermodehelper_exec_work [ 2771.528780] Call Trace: [ 2771.531353] dump_stack+0x1fc/0x2ef [ 2771.534965] dump_header+0x15d/0xc3f [ 2771.538679] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2771.543761] ? ___ratelimit+0x319/0x590 [ 2771.547718] oom_kill_process.cold+0x10/0x692 [ 2771.552191] ? oom_badness.part.0+0x135/0x6e0 [ 2771.556666] ? lock_downgrade+0x720/0x720 [ 2771.560795] ? check_preemption_disabled+0x41/0x280 [ 2771.565963] out_of_memory+0x34d/0x1390 [ 2771.570010] ? oom_killer_disable+0x270/0x270 [ 2771.574497] ? mutex_trylock+0x15f/0x1a0 [ 2771.578545] __alloc_pages_nodemask+0x23a2/0x2890 [ 2771.583376] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2771.588198] ? should_fail+0x142/0x7b0 [ 2771.592063] ? fs_reclaim_release+0xd0/0x110 [ 2771.596455] ? check_preemption_disabled+0x41/0x280 [ 2771.601453] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2771.606452] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2771.611192] copy_process.part.0+0x3cf/0x8260 [ 2771.615670] ? __lock_acquire+0x6de/0x3ff0 [ 2771.619897] ? __lock_acquire+0x6de/0x3ff0 [ 2771.624112] ? umh_complete+0x90/0x90 [ 2771.627893] ? __cleanup_sighand+0x60/0x60 [ 2771.632106] ? mark_held_locks+0xf0/0xf0 [ 2771.636148] ? __lock_acquire+0x6de/0x3ff0 [ 2771.640369] _do_fork+0x22f/0xf30 [ 2771.643802] ? umh_complete+0x90/0x90 [ 2771.647582] ? fork_idle+0x220/0x220 [ 2771.651275] ? lock_downgrade+0x720/0x720 [ 2771.655415] ? lock_acquire+0x170/0x3c0 [ 2771.659372] ? try_to_wake_up+0x7b/0x1050 [ 2771.663502] ? trace_hardirqs_off+0x64/0x200 [ 2771.667905] ? umh_complete+0x90/0x90 [ 2771.671773] kernel_thread+0x2f/0x40 [ 2771.675469] call_usermodehelper_exec_work+0x16d/0x260 [ 2771.680726] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 2771.686246] process_one_work+0x864/0x1570 [ 2771.690474] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2771.695136] worker_thread+0x64c/0x1130 [ 2771.699102] ? __kthread_parkme+0x133/0x1e0 [ 2771.703770] ? process_one_work+0x1570/0x1570 [ 2771.708263] kthread+0x33f/0x460 [ 2771.711630] ? kthread_park+0x180/0x180 [ 2771.715603] ret_from_fork+0x24/0x30 [ 2771.730301] Mem-Info: [ 2771.732755] active_anon:142893 inactive_anon:1289170 isolated_anon:0 [ 2771.732755] active_file:32 inactive_file:9 isolated_file:0 [ 2771.732755] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2771.732755] slab_reclaimable:19958 slab_unreclaimable:128708 [ 2771.732755] mapped:1327705 shmem:1293047 pagetables:16262 bounce:0 [ 2771.732755] free:25420 free_pcp:156 free_cma:0 [ 2771.769647] Node 0 active_anon:521252kB inactive_anon:1437048kB active_file:224kB inactive_file:408kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1552840kB dirty:0kB writeback:0kB shmem:1441024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2771.804653] Node 1 active_anon:50320kB inactive_anon:3719632kB active_file:104kB inactive_file:408kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3758080kB dirty:0kB writeback:0kB shmem:3731164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2771.837924] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2771.866640] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2771.871680] Node 0 DMA32 free:35500kB min:35996kB low:44992kB high:53988kB active_anon:519036kB inactive_anon:1434952kB active_file:124kB inactive_file:184kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13472kB pagetables:29884kB bounce:0kB free_pcp:556kB local_pcp:248kB free_cma:0kB [ 2771.901307] lowmem_reserve[]: 0 0 1 1 1 [ 2771.905353] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2771.933581] lowmem_reserve[]: 0 0 0 0 0 [ 2771.940613] Node 1 Normal free:53196kB min:53876kB low:67344kB high:80812kB active_anon:50320kB inactive_anon:3719636kB active_file:4kB inactive_file:136kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14176kB pagetables:35072kB bounce:0kB free_pcp:832kB local_pcp:248kB free_cma:0kB [ 2771.978023] lowmem_reserve[]: 0 0 0 0 0 [ 2771.982025] Node 0 DMA: 29*4kB (UMEH) 22*8kB (UMEH) 18*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10980kB [ 2771.998623] Node 0 DMA32: 211*4kB (UMEH) 234*8kB (UMH) 974*16kB (UMEH) 575*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36700kB [ 2772.012965] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2772.025236] Node 1 Normal: 149*4kB (UM) 834*8kB (UMEH) 721*16kB (UMEH) 367*32kB (UMEH) 367*64kB (UMEH) 2*128kB (H) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54548kB [ 2772.040957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2772.050013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2772.064787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2772.079931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2772.091656] 1293210 total pagecache pages [ 2772.102469] 0 pages in swap cache [ 2772.109426] Swap cache stats: add 0, delete 0, find 0/0 [ 2772.126576] Free swap = 0kB [ 2772.130146] Total swap = 0kB [ 2772.137973] 2097051 pages RAM [ 2772.141787] 0 pages HighMem/MovableOnly [ 2772.148762] 369649 pages reserved [ 2772.156764] 0 pages cma reserved [ 2772.160833] Out of memory: Kill process 6517 (syz-executor.0) score 1006 or sacrifice child [ 2772.178322] Killed process 6517 (syz-executor.0) total-vm:93672kB, anon-rss:424kB, file-rss:34820kB, shmem-rss:11480kB [ 2772.293446] oom_reaper: reaped process 19416 (syz-executor.5), now anon-rss:0kB, file-rss:33728kB, shmem-rss:11480kB 22:29:19 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000700b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:29:21 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000500b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:29:21 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000900b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2775.877168] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.882812] ieee802154 phy1 wpan1: encryption failed: -22 [ 2783.371670] IPVS: ftp: loaded support on port[0] = 21 [ 2783.383627] IPVS: ftp: loaded support on port[0] = 21 [ 2784.422988] Bluetooth: hci2: command 0x0409 tx timeout [ 2784.502668] Bluetooth: hci3: command 0x0409 tx timeout 22:29:32 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd61, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2785.829780] IPVS: ftp: loaded support on port[0] = 21 [ 2786.002489] IPVS: ftp: loaded support on port[0] = 21 22:29:33 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x6002}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2786.502061] Bluetooth: hci2: command 0x041b tx timeout [ 2786.582094] Bluetooth: hci3: command 0x041b tx timeout [ 2786.621416] IPVS: ftp: loaded support on port[0] = 21 [ 2788.581865] Bluetooth: hci2: command 0x040f tx timeout [ 2788.661879] Bluetooth: hci3: command 0x040f tx timeout [ 2789.270443] chnl_net:caif_netlink_parms(): no params data found 22:29:36 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:29:36 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x6c00}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2789.925838] IPVS: ftp: loaded support on port[0] = 21 [ 2789.962975] IPVS: ftp: loaded support on port[0] = 21 [ 2790.467884] chnl_net:caif_netlink_parms(): no params data found [ 2790.661817] Bluetooth: hci2: command 0x0419 tx timeout [ 2790.708347] IPVS: ftp: loaded support on port[0] = 21 [ 2790.741730] Bluetooth: hci3: command 0x0419 tx timeout 22:29:38 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x6002}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:29:38 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd62, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2792.374028] IPVS: ftp: loaded support on port[0] = 21 [ 2792.517505] IPVS: ftp: loaded support on port[0] = 21 [ 2792.558542] bridge0: port 1(bridge_slave_0) entered blocking state [ 2792.584866] bridge0: port 1(bridge_slave_0) entered disabled state [ 2792.594086] device bridge_slave_0 entered promiscuous mode [ 2792.609400] bridge0: port 1(bridge_slave_0) entered blocking state [ 2792.620527] bridge0: port 1(bridge_slave_0) entered disabled state [ 2792.655487] device bridge_slave_0 entered promiscuous mode [ 2792.719645] bridge0: port 2(bridge_slave_1) entered blocking state [ 2792.729761] bridge0: port 2(bridge_slave_1) entered disabled state [ 2792.755323] device bridge_slave_1 entered promiscuous mode [ 2792.783208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2792.790039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2792.808060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2792.819706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2792.837813] device bridge_slave_1 left promiscuous mode [ 2792.848004] bridge0: port 2(bridge_slave_1) entered disabled state [ 2792.868952] device bridge_slave_0 left promiscuous mode [ 2792.880371] IPVS: ftp: loaded support on port[0] = 21 [ 2792.889038] bridge0: port 1(bridge_slave_0) entered disabled state [ 2792.929594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2792.975358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2793.001233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2793.016169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2793.034186] device bridge_slave_1 left promiscuous mode [ 2793.048456] bridge0: port 2(bridge_slave_1) entered disabled state [ 2793.070372] device bridge_slave_0 left promiscuous mode [ 2793.082835] bridge0: port 1(bridge_slave_0) entered disabled state [ 2793.111267] device veth1_macvtap left promiscuous mode [ 2793.116999] device veth0_macvtap left promiscuous mode [ 2793.122520] device veth1_vlan left promiscuous mode [ 2793.135081] device veth0_vlan left promiscuous mode [ 2793.146287] device veth1_macvtap left promiscuous mode [ 2793.157824] device veth0_macvtap left promiscuous mode [ 2793.169048] device veth1_vlan left promiscuous mode [ 2793.180098] device veth0_vlan left promiscuous mode [ 2802.732788] device hsr_slave_1 left promiscuous mode [ 2802.740294] device hsr_slave_0 left promiscuous mode [ 2802.757775] team0 (unregistering): Port device team_slave_1 removed [ 2802.767150] team0 (unregistering): Port device team_slave_0 removed [ 2802.777706] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2802.788996] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2802.820997] bond0 (unregistering): Released all slaves [ 2802.866856] device hsr_slave_1 left promiscuous mode [ 2802.874882] device hsr_slave_0 left promiscuous mode [ 2802.892710] team0 (unregistering): Port device team_slave_1 removed [ 2802.903538] team0 (unregistering): Port device team_slave_0 removed [ 2802.914295] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2802.924668] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2802.956749] bond0 (unregistering): Released all slaves [ 2802.969333] bridge0: port 2(bridge_slave_1) entered blocking state [ 2802.977026] bridge0: port 2(bridge_slave_1) entered disabled state [ 2802.989912] device bridge_slave_1 entered promiscuous mode [ 2803.069739] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2803.119503] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2803.141488] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2803.163966] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2803.267568] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2803.302178] team0: Port device team_slave_0 added [ 2803.381324] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2803.389063] team0: Port device team_slave_1 added [ 2803.411519] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2803.419201] team0: Port device team_slave_0 added [ 2803.466469] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2803.482377] team0: Port device team_slave_1 added [ 2803.497833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2803.530981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2803.610794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2803.661815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2803.668087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2803.810821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2803.858305] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2803.911197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2803.917458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2803.990772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2804.031764] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2804.158176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2804.190770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2804.275931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2804.368604] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2804.396890] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2804.464108] device hsr_slave_0 entered promiscuous mode [ 2804.507061] device hsr_slave_1 entered promiscuous mode [ 2804.546956] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2804.596821] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2804.678979] device hsr_slave_0 entered promiscuous mode [ 2804.731222] device hsr_slave_1 entered promiscuous mode [ 2804.776951] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2804.832694] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2805.489960] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2805.507783] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2805.718058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2805.755660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2805.791177] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2805.827324] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2805.843745] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2805.876428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2805.887477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2805.906035] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2805.936611] 8021q: adding VLAN 0 to HW filter on device team0 [ 2805.946335] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2805.960971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2805.968601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2806.006597] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2806.037068] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2806.055752] 8021q: adding VLAN 0 to HW filter on device team0 [ 2806.067781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2806.093980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2806.114803] bridge0: port 1(bridge_slave_0) entered blocking state [ 2806.121238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2806.137415] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2806.149023] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2806.164047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2806.180385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2806.198509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2806.207946] bridge0: port 2(bridge_slave_1) entered blocking state [ 2806.214376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2806.228158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2806.237170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2806.251165] bridge0: port 1(bridge_slave_0) entered blocking state [ 2806.257523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2806.274246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2806.347390] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2806.367974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2806.377423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2806.402046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2806.410060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2806.441169] bridge0: port 2(bridge_slave_1) entered blocking state [ 2806.447588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2806.468023] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2806.479312] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2806.490737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2806.498877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2806.543309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2806.553573] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2806.562140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2806.570884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2806.579772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2806.601838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2806.617037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2806.631371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2806.651540] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2806.677913] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2806.702190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2806.731598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2806.739385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2806.756625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2806.768396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2806.784013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2806.796047] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2806.817543] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2806.843154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2806.854804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2806.880164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2806.923247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2806.943848] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2806.949955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2806.965927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2806.985027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2806.998594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2807.016293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 22:29:53 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x7000}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2807.034348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2807.046573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2807.081717] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2807.110996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2807.125839] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2807.168575] IPVS: ftp: loaded support on port[0] = 21 [ 2807.173834] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2807.175551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:29:53 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2807.211513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2807.223017] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2807.241420] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2807.251591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2807.313395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2807.320245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2807.424937] IPVS: ftp: loaded support on port[0] = 21 [ 2807.573645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2807.661931] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2807.767422] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2807.767568] IPVS: ftp: loaded support on port[0] = 21 [ 2807.792630] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2807.801427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2807.809528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 22:29:54 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x6800}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2807.918847] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2807.952089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2807.960274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2808.159639] IPVS: ftp: loaded support on port[0] = 21 22:29:54 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2808.388014] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2808.420085] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2808.449945] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2808.495863] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2808.505977] IPVS: ftp: loaded support on port[0] = 21 [ 2808.532069] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2808.567318] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2808.753168] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2808.789662] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2808.937856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2808.948104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2808.998384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2809.037952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2809.072703] device veth0_vlan entered promiscuous mode [ 2809.113176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2809.212649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2809.228629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2809.254412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2809.272429] device veth0_vlan entered promiscuous mode [ 2809.290020] device veth1_vlan entered promiscuous mode [ 2809.366563] device veth1_vlan entered promiscuous mode [ 2809.441090] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2809.474619] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2809.506524] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2809.535579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2809.555306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2809.571986] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2809.587727] device veth0_macvtap entered promiscuous mode [ 2809.597058] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2809.614662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2809.631828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2809.659656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2809.683757] device veth0_macvtap entered promiscuous mode [ 2809.695200] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2809.708064] device veth1_macvtap entered promiscuous mode [ 2809.723901] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2809.739712] device veth1_macvtap entered promiscuous mode [ 2809.753855] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2809.772600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2809.794524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2809.828629] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2809.839402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2809.859595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2809.870712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2809.880167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2809.892224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2809.903232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2809.915443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2809.925543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2809.936399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2809.948938] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2809.958529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2809.968829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2809.981446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2809.991501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2810.002169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.012286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2810.023257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.033482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2810.044986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.056086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2810.066888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.079308] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2810.087300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2810.105124] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2810.112966] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2810.122419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2810.136694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2810.147535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2810.157964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2810.173444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2810.204018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2810.219940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.237067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2810.247930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.265271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2810.287698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.318426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2810.352151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.389765] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2810.411027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2810.484226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2810.497811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2810.550066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2810.570535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.579791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2810.610319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.630357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2810.640084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.670324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2810.680085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.713712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2810.740431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.761357] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2810.768301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2810.820508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2810.828637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2811.466310] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2811.530683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2811.566620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2811.586064] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2811.642358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2811.654148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2811.657682] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2811.670239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2811.710524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2811.718847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2811.744288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2811.775937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2811.811665] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2811.850565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2811.857693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2811.911734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:29:58 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000600b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:29:58 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd63, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:29:58 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x7002}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:29:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000a00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:29:59 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000700b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2812.532867] IPVS: ftp: loaded support on port[0] = 21 [ 2812.577733] IPVS: ftp: loaded support on port[0] = 21 22:29:59 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000b00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:29:59 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000800b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:29:59 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000c00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:29:59 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000d00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:00 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd62, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2813.762785] IPVS: ftp: loaded support on port[0] = 21 [ 2814.137162] IPVS: ftp: loaded support on port[0] = 21 22:30:01 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000e00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2814.571289] IPVS: ftp: loaded support on port[0] = 21 [ 2815.060902] syz-executor.5 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 2815.099082] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2815.114264] CPU: 0 PID: 20526 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2815.122190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2815.131547] Call Trace: [ 2815.134144] dump_stack+0x1fc/0x2ef [ 2815.137773] dump_header+0x15d/0xc3f [ 2815.141567] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2815.146660] ? ___ratelimit+0x319/0x590 [ 2815.150625] oom_kill_process.cold+0x10/0x692 [ 2815.155114] ? check_preemption_disabled+0x41/0x280 [ 2815.160133] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2815.165401] out_of_memory+0x1072/0x1390 [ 2815.169543] ? oom_killer_disable+0x270/0x270 [ 2815.174033] ? mutex_trylock+0x15f/0x1a0 [ 2815.178102] __alloc_pages_nodemask+0x23a2/0x2890 [ 2815.182950] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2815.187792] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2815.192648] ? mark_held_locks+0xa6/0xf0 [ 2815.196713] ? ____cache_alloc_node+0x156/0x1d0 [ 2815.201470] ? cache_grow_begin+0x64/0x8a0 [ 2815.205812] cache_grow_begin+0xa4/0x8a0 [ 2815.209888] fallback_alloc+0x213/0x2e0 [ 2815.213863] __kmalloc+0x213/0x3c0 [ 2815.217408] ? ops_init+0xfe/0x410 [ 2815.220936] ops_init+0xfe/0x410 [ 2815.224292] setup_net+0x2c2/0x720 [ 2815.227820] ? rtnl_net_dumpid_one+0x250/0x250 [ 2815.232415] copy_net_ns+0x1f7/0x340 [ 2815.236146] create_new_namespaces+0x3f6/0x7b0 [ 2815.240760] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2815.245690] ksys_unshare+0x36c/0x9a0 [ 2815.249486] ? __se_sys_futex+0x28f/0x3b0 [ 2815.253629] ? walk_process_tree+0x2c0/0x2c0 [ 2815.258208] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2815.263572] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2815.268580] __x64_sys_unshare+0x2d/0x40 [ 2815.272628] do_syscall_64+0xf9/0x620 [ 2815.276434] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2815.281621] RIP: 0033:0x7f51a23daae9 [ 2815.285334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2815.304331] RSP: 002b:00007f519f90e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2815.312038] RAX: ffffffffffffffda RBX: 00007f51a24ee0e0 RCX: 00007f51a23daae9 [ 2815.319384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 2815.326747] RBP: 00007f51a2434f25 R08: 0000000000000000 R09: 0000000000000000 [ 2815.334005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2815.341258] R13: 00007fff6ff4393f R14: 00007f519f90e300 R15: 0000000000022000 [ 2815.789890] Mem-Info: [ 2815.792927] active_anon:142926 inactive_anon:1287859 isolated_anon:0 [ 2815.792927] active_file:96 inactive_file:125 isolated_file:0 [ 2815.792927] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2815.792927] slab_reclaimable:19918 slab_unreclaimable:123840 [ 2815.792927] mapped:1326593 shmem:1291786 pagetables:16379 bounce:0 [ 2815.792927] free:30505 free_pcp:778 free_cma:0 [ 2815.831822] Node 0 active_anon:520816kB inactive_anon:1437664kB active_file:440kB inactive_file:456kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1550688kB dirty:0kB writeback:0kB shmem:1441680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2816.044898] Node 1 active_anon:50800kB inactive_anon:3713756kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3755828kB dirty:8kB writeback:0kB shmem:3725316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2816.108124] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2224kB inactive_anon:2160kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2816.225787] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2816.236839] Node 0 DMA32 free:45844kB min:35996kB low:44992kB high:53988kB active_anon:522080kB inactive_anon:1432060kB active_file:1968kB inactive_file:3608kB unevictable:0kB writepending:44kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13472kB pagetables:29812kB bounce:0kB free_pcp:1784kB local_pcp:1288kB free_cma:0kB [ 2816.323538] lowmem_reserve[]: 0 0 1 1 1 [ 2816.332309] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 22:30:03 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000900b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:03 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2816.476459] lowmem_reserve[]: 0 0 0 0 0 [ 2816.499984] Node 1 Normal free:70712kB min:53876kB low:67344kB high:80812kB active_anon:50768kB inactive_anon:3706896kB active_file:12kB inactive_file:704kB unevictable:0kB writepending:8kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14368kB pagetables:35540kB bounce:0kB free_pcp:612kB local_pcp:188kB free_cma:0kB [ 2816.788595] IPVS: ftp: loaded support on port[0] = 21 [ 2816.826065] lowmem_reserve[]: 0 0 0 0 0 [ 2816.891603] Node 0 DMA: 13*4kB (MEH) 22*8kB (UMEH) 18*16kB (UMEH) 11*32kB (UMH) 6*64kB (UMH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10980kB [ 2817.049770] Node 0 DMA32: 218*4kB (UMH) 49*8kB (UMH) 1095*16kB (UEH) 601*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38016kB [ 2817.181525] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2817.288744] Node 1 Normal: 143*4kB (UME) 669*8kB (UMH) 679*16kB (UMEH) 430*32kB (UMEH) 447*64kB (UMEH) 58*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 66580kB [ 2817.447121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2817.485465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2817.518292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2817.571552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2817.620281] 1295027 total pagecache pages [ 2817.624470] 0 pages in swap cache [ 2817.660408] Swap cache stats: add 0, delete 0, find 0/0 [ 2817.692333] Free swap = 0kB [ 2817.709476] Total swap = 0kB [ 2817.727914] 2097051 pages RAM [ 2817.746247] 0 pages HighMem/MovableOnly [ 2817.769224] 369649 pages reserved [ 2817.786567] 0 pages cma reserved [ 2817.819909] Out of memory (oom_kill_allocating_task): Kill process 20526 (syz-executor.5) score 0 or sacrifice child [ 2817.879881] Killed process 20453 (syz-executor.5) total-vm:93672kB, anon-rss:432kB, file-rss:34796kB, shmem-rss:4kB [ 2817.930157] oom_reaper: reaped process 20453 (syz-executor.5), now anon-rss:0kB, file-rss:34756kB, shmem-rss:4kB 22:30:06 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000f00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:06 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x7400}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:30:06 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:30:06 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:30:06 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000a00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:06 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd64, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2820.158021] IPVS: ftp: loaded support on port[0] = 21 [ 2820.244408] IPVS: ftp: loaded support on port[0] = 21 22:30:06 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001100b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2820.388946] IPVS: ftp: loaded support on port[0] = 21 [ 2820.458181] IPVS: ftp: loaded support on port[0] = 21 22:30:07 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000b00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:07 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000c00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2821.943474] kworker/u4:4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2821.987793] kworker/u4:4 cpuset=/ mems_allowed=0-1 [ 2822.042717] CPU: 1 PID: 4396 Comm: kworker/u4:4 Not tainted 4.19.211-syzkaller #0 [ 2822.050456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2822.059822] Workqueue: events_unbound call_usermodehelper_exec_work [ 2822.066223] Call Trace: [ 2822.068814] dump_stack+0x1fc/0x2ef [ 2822.072451] dump_header+0x15d/0xc3f [ 2822.076172] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2822.081448] ? ___ratelimit+0x319/0x590 [ 2822.085421] oom_kill_process.cold+0x10/0x692 [ 2822.089912] ? oom_badness.part.0+0x135/0x6e0 [ 2822.094393] ? lock_downgrade+0x720/0x720 [ 2822.098530] ? check_preemption_disabled+0x41/0x280 [ 2822.103535] out_of_memory+0x34d/0x1390 [ 2822.107501] ? oom_killer_disable+0x270/0x270 [ 2822.111998] ? mutex_trylock+0x15f/0x1a0 [ 2822.116047] __alloc_pages_nodemask+0x23a2/0x2890 [ 2822.120880] ? ____cache_alloc_node+0xf4/0x1d0 [ 2822.125454] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2822.130292] ? do_raw_spin_unlock+0x171/0x230 [ 2822.134780] ? check_preemption_disabled+0x41/0x280 [ 2822.139788] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2822.144795] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2822.149542] copy_process.part.0+0x3cf/0x8260 [ 2822.154025] ? __lock_acquire+0x6de/0x3ff0 [ 2822.158252] ? __lock_acquire+0x6de/0x3ff0 [ 2822.162473] ? umh_complete+0x90/0x90 [ 2822.166350] ? __cleanup_sighand+0x60/0x60 [ 2822.170573] ? mark_held_locks+0xf0/0xf0 [ 2822.174621] ? __lock_acquire+0x6de/0x3ff0 [ 2822.178858] _do_fork+0x22f/0xf30 [ 2822.182299] ? umh_complete+0x90/0x90 [ 2822.186087] ? fork_idle+0x220/0x220 [ 2822.189789] ? lock_acquire+0x170/0x3c0 [ 2822.193748] ? debug_object_deactivate+0xfc/0x2e0 [ 2822.198580] ? trace_hardirqs_off+0x64/0x200 [ 2822.202977] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2822.208066] ? umh_complete+0x90/0x90 [ 2822.211864] kernel_thread+0x2f/0x40 [ 2822.215577] call_usermodehelper_exec_work+0x16d/0x260 [ 2822.220842] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 2822.226380] process_one_work+0x864/0x1570 [ 2822.230605] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2822.235264] worker_thread+0x64c/0x1130 [ 2822.239233] ? process_one_work+0x1570/0x1570 [ 2822.243714] kthread+0x33f/0x460 [ 2822.247084] ? kthread_park+0x180/0x180 [ 2822.251050] ret_from_fork+0x24/0x30 [ 2822.271854] Mem-Info: [ 2822.274374] active_anon:142724 inactive_anon:1294348 isolated_anon:0 [ 2822.274374] active_file:146 inactive_file:199 isolated_file:40 [ 2822.274374] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2822.274374] slab_reclaimable:19884 slab_unreclaimable:123591 [ 2822.274374] mapped:1333258 shmem:1298239 pagetables:16330 bounce:0 [ 2822.274374] free:25107 free_pcp:71 free_cma:0 [ 2822.313828] Node 0 active_anon:520192kB inactive_anon:1439672kB active_file:96kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1552112kB dirty:0kB writeback:0kB shmem:1443616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2822.348299] Node 1 active_anon:50704kB inactive_anon:3737720kB active_file:16kB inactive_file:168kB unevictable:0kB isolated(anon):0kB isolated(file):160kB mapped:3779920kB dirty:0kB writeback:0kB shmem:3749340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2822.388862] Node 0 DMA free:10928kB min:204kB low:252kB high:300kB active_anon:2224kB inactive_anon:2136kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2822.475974] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2822.487811] Node 0 DMA32 free:35312kB min:35996kB low:44992kB high:53988kB active_anon:517968kB inactive_anon:1437536kB active_file:0kB inactive_file:252kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13344kB pagetables:29464kB bounce:0kB free_pcp:212kB local_pcp:212kB free_cma:0kB [ 2822.558995] lowmem_reserve[]: 0 0 1 1 1 [ 2822.571597] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2822.630272] lowmem_reserve[]: 0 0 0 0 0 [ 2822.638962] Node 1 Normal free:54228kB min:53876kB low:67344kB high:80812kB active_anon:50704kB inactive_anon:3738224kB active_file:700kB inactive_file:332kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14592kB pagetables:35764kB bounce:0kB free_pcp:152kB local_pcp:152kB free_cma:0kB [ 2822.715564] lowmem_reserve[]: 0 0 0 0 0 [ 2822.726151] Node 0 DMA: 16*4kB (UMEH) 22*8kB (UMEH) 18*16kB (UMEH) 11*32kB (UMH) 5*64kB (MH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10928kB [ 2822.752906] Node 0 DMA32: 447*4kB (UMEH) 375*8kB (UMH) 652*16kB (UMH) 615*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34900kB [ 2822.768804] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2822.785254] Node 1 Normal: 137*4kB (UME) 260*8kB (UMH) 196*16kB (UMEH) 273*32kB (UMEH) 493*64kB (UMEH) 80*128kB (UMH) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56548kB [ 2822.833604] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2822.850021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2822.970664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2823.000252] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2823.036843] 1299533 total pagecache pages [ 2823.064604] 0 pages in swap cache [ 2823.086478] Swap cache stats: add 0, delete 0, find 0/0 [ 2823.111711] Free swap = 0kB [ 2823.127631] Total swap = 0kB [ 2823.139070] 2097051 pages RAM [ 2823.182739] 0 pages HighMem/MovableOnly [ 2823.188102] 369649 pages reserved [ 2823.191651] 0 pages cma reserved [ 2823.195022] Out of memory: Kill process 7315 (syz-executor.4) score 1006 or sacrifice child [ 2823.219661] Killed process 7315 (syz-executor.4) total-vm:93540kB, anon-rss:424kB, file-rss:34820kB, shmem-rss:11480kB 22:30:10 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:10 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001200b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:11 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001300b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:22 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001400b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:22 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd65, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:30:22 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:30:22 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001200b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:22 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x7601}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:30:22 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2835.567384] IPVS: ftp: loaded support on port[0] = 21 22:30:22 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001500b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2835.793152] IPVS: ftp: loaded support on port[0] = 21 [ 2835.813697] IPVS: ftp: loaded support on port[0] = 21 [ 2835.893372] IPVS: ftp: loaded support on port[0] = 21 22:30:22 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001300b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2836.226952] IPVS: ftp: loaded support on port[0] = 21 22:30:22 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001600b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:23 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001400b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2837.301695] ieee802154 phy0 wpan0: encryption failed: -22 [ 2837.307319] ieee802154 phy1 wpan1: encryption failed: -22 22:30:24 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001700b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:25 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001800b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:30 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001500b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:30 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x7603}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2843.867330] IPVS: ftp: loaded support on port[0] = 21 [ 2844.792544] IPVS: ftp: loaded support on port[0] = 21 22:30:31 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001900b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:31 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001600b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:31 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd66, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2845.550491] IPVS: ftp: loaded support on port[0] = 21 [ 2846.882171] IPVS: ftp: loaded support on port[0] = 21 22:30:34 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001700b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:34 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd67, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:30:34 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001a00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:34 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:30:34 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x7a00}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:30:34 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2848.074022] IPVS: ftp: loaded support on port[0] = 21 [ 2848.158224] IPVS: ftp: loaded support on port[0] = 21 [ 2848.222503] IPVS: ftp: loaded support on port[0] = 21 [ 2848.231535] IPVS: ftp: loaded support on port[0] = 21 22:30:34 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001b00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:35 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001800b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:35 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001c00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2849.742657] systemd-udevd invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 2849.785677] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2849.816899] CPU: 0 PID: 4697 Comm: systemd-udevd Not tainted 4.19.211-syzkaller #0 [ 2849.824635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2849.833986] Call Trace: [ 2849.836585] dump_stack+0x1fc/0x2ef [ 2849.840221] dump_header+0x15d/0xc3f [ 2849.843941] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2849.849049] ? ___ratelimit+0x319/0x590 [ 2849.853029] oom_kill_process.cold+0x10/0x692 [ 2849.857527] ? oom_badness.part.0+0x135/0x6e0 [ 2849.862032] ? lock_downgrade+0x720/0x720 [ 2849.866183] ? check_preemption_disabled+0x41/0x280 [ 2849.871233] out_of_memory+0x34d/0x1390 [ 2849.875217] ? oom_killer_disable+0x270/0x270 [ 2849.879714] ? mutex_trylock+0x15f/0x1a0 [ 2849.883782] __alloc_pages_nodemask+0x23a2/0x2890 [ 2849.888735] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2849.893578] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2849.898420] ? __bpf_prog_run64+0xd0/0xd0 [ 2849.902586] ? mark_held_locks+0xf0/0xf0 [ 2849.906647] ? ____cache_alloc_node+0x156/0x1d0 [ 2849.911314] ? cache_grow_begin+0x64/0x8a0 [ 2849.915549] cache_grow_begin+0xa4/0x8a0 [ 2849.919624] fallback_alloc+0x213/0x2e0 [ 2849.923601] kmem_cache_alloc+0x1e4/0x370 [ 2849.927749] getname_flags+0xce/0x590 [ 2849.931556] user_path_at_empty+0x2a/0x50 [ 2849.935707] vfs_statx+0x113/0x210 [ 2849.939246] ? do_readlinkat+0x2f0/0x2f0 [ 2849.943313] ? mntput_no_expire+0x119/0xa30 [ 2849.947665] __se_sys_newlstat+0x96/0x120 [ 2849.951808] ? __se_sys_newstat+0x120/0x120 [ 2849.956125] ? __secure_computing+0x104/0x360 [ 2849.960618] ? syscall_trace_enter+0x3b7/0xd60 [ 2849.965203] ? syscall_slow_exit_work+0x630/0x630 [ 2849.970051] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2849.975417] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2849.980434] ? do_syscall_64+0x21/0x620 [ 2849.984410] do_syscall_64+0xf9/0x620 [ 2849.988219] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2849.993493] RIP: 0033:0x7f94d8ce3335 [ 2849.997202] Code: Bad RIP value. [ 2850.000567] RSP: 002b:00007ffe7394ed48 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 2850.008270] RAX: ffffffffffffffda RBX: 00005642671328b0 RCX: 00007f94d8ce3335 [ 2850.015558] RDX: 00007ffe7394ed80 RSI: 00007ffe7394ed80 RDI: 00005642671318b0 [ 2850.022825] RBP: 00007ffe7394ee40 R08: 00007f94d8fa21b8 R09: 0000000000001010 [ 2850.030091] R10: 00007f94d8fa1b58 R11: 0000000000000246 R12: 00005642671318b0 [ 2850.037357] R13: 00005642671318ca R14: 0000564267141565 R15: 000056426714156a [ 2850.364653] Mem-Info: [ 2850.373147] active_anon:142869 inactive_anon:1292409 isolated_anon:0 [ 2850.373147] active_file:58 inactive_file:276 isolated_file:52 [ 2850.373147] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2850.373147] slab_reclaimable:19620 slab_unreclaimable:125442 [ 2850.373147] mapped:1331213 shmem:1296298 pagetables:16369 bounce:0 [ 2850.373147] free:25332 free_pcp:55 free_cma:0 [ 2850.452554] Node 0 active_anon:520344kB inactive_anon:1449180kB active_file:584kB inactive_file:928kB unevictable:0kB isolated(anon):0kB isolated(file):204kB mapped:1562784kB dirty:0kB writeback:0kB shmem:1453124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2850.485104] Node 1 active_anon:51132kB inactive_anon:3720456kB active_file:36kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:3762368kB dirty:0kB writeback:0kB shmem:3732068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2850.517078] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:2224kB inactive_anon:2216kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2850.555870] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2850.582599] Node 0 DMA32 free:36652kB min:35996kB low:44992kB high:53988kB active_anon:518120kB inactive_anon:1446368kB active_file:244kB inactive_file:1000kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13312kB pagetables:29492kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2850.666259] lowmem_reserve[]: 0 0 1 1 1 [ 2850.670402] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2850.697709] lowmem_reserve[]: 0 0 0 0 0 [ 2850.713597] Node 1 Normal free:53636kB min:53876kB low:67344kB high:80812kB active_anon:51132kB inactive_anon:3720256kB active_file:36kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14624kB pagetables:35892kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2850.758615] lowmem_reserve[]: 0 0 0 0 0 [ 2850.762859] Node 0 DMA: 4*4kB (EH) 17*8kB (UMEH) 17*16kB (UMEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10984kB [ 2850.780108] Node 0 DMA32: 81*4kB (UMH) 789*8kB (UMH) 663*16kB (UH) 623*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37180kB [ 2850.794369] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2850.806557] Node 1 Normal: 75*4kB (UME) 53*8kB (UMEH) 224*16kB (UMEH) 414*32kB (UMEH) 453*64kB (UMEH) 59*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54100kB [ 2850.822925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2850.834713] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2850.843597] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2850.852737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2850.862043] 1296564 total pagecache pages [ 2850.866413] 0 pages in swap cache [ 2850.870669] Swap cache stats: add 0, delete 0, find 0/0 [ 2850.876175] Free swap = 0kB [ 2850.879377] Total swap = 0kB [ 2850.882468] 2097051 pages RAM [ 2850.885628] 0 pages HighMem/MovableOnly [ 2850.890886] 369649 pages reserved [ 2850.894396] 0 pages cma reserved [ 2850.897891] Out of memory: Kill process 7633 (syz-executor.4) score 1006 or sacrifice child [ 2850.907218] Killed process 7633 (syz-executor.4) total-vm:93672kB, anon-rss:424kB, file-rss:34820kB, shmem-rss:11480kB 22:30:38 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001900b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:39 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001a00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:39 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600002000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:39 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001b00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:49 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001c00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:50 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:30:50 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd68, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:30:50 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:30:50 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001d00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:50 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x7c02}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:30:50 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600002300b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:50 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001e00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2863.919620] IPVS: ftp: loaded support on port[0] = 21 [ 2864.024713] IPVS: ftp: loaded support on port[0] = 21 [ 2864.032044] IPVS: ftp: loaded support on port[0] = 21 22:30:50 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600003f00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2864.166460] IPVS: ftp: loaded support on port[0] = 21 22:30:51 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600002100b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:51 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff6000fff00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:51 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600002300b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:51 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000200b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2865.207253] IPVS: ftp: loaded support on port[0] = 21 [ 2865.491266] IPVS: ftp: loaded support on port[0] = 21 22:30:56 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000003b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:56 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2870.373599] IPVS: ftp: loaded support on port[0] = 21 22:30:57 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd69, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:30:57 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000005b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:57 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000300b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:57 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x7e00}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:30:57 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:30:57 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000006b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2870.649532] IPVS: ftp: loaded support on port[0] = 21 22:30:57 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000400b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2870.762140] IPVS: ftp: loaded support on port[0] = 21 [ 2870.897106] IPVS: ftp: loaded support on port[0] = 21 22:30:57 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000007b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:57 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000500b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:58 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000009b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:30:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000600b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2871.803408] IPVS: ftp: loaded support on port[0] = 21 22:30:58 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000200b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2872.164623] IPVS: ftp: loaded support on port[0] = 21 22:31:02 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000700b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:02 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000ab91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:02 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2875.655455] IPVS: ftp: loaded support on port[0] = 21 22:31:02 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x80fe}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:31:02 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd6a, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:31:02 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000bb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:02 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000800b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:02 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:31:02 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000900b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2876.273233] IPVS: ftp: loaded support on port[0] = 21 [ 2876.288377] IPVS: ftp: loaded support on port[0] = 21 [ 2876.308326] IPVS: ftp: loaded support on port[0] = 21 22:31:03 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:31:03 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000cb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:03 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000a00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2876.650980] IPVS: ftp: loaded support on port[0] = 21 22:31:03 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000012b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:03 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000b00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2879.210291] IPVS: ftp: loaded support on port[0] = 21 22:31:06 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000013b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:14 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x8300}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2887.740060] IPVS: ftp: loaded support on port[0] = 21 22:31:15 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd6b, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:31:15 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000c00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:15 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:31:15 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000014b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2888.934463] IPVS: ftp: loaded support on port[0] = 21 [ 2889.022175] IPVS: ftp: loaded support on port[0] = 21 [ 2889.093376] IPVS: ftp: loaded support on port[0] = 21 22:31:15 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000d00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2890.486290] print_req_error: I/O error, dev loop2, sector 64 [ 2890.492255] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 22:31:18 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000e00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:18 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:31:18 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000015b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:18 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd6c, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2892.448200] IPVS: ftp: loaded support on port[0] = 21 22:31:19 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000f00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2892.530572] IPVS: ftp: loaded support on port[0] = 21 22:31:19 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000016b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2893.872675] systemd-udevd invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2893.934278] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2893.974038] CPU: 0 PID: 22183 Comm: systemd-udevd Not tainted 4.19.211-syzkaller #0 [ 2893.981946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2893.991383] Call Trace: [ 2893.994024] dump_stack+0x1fc/0x2ef [ 2893.997660] dump_header+0x15d/0xc3f [ 2894.001381] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2894.006487] ? ___ratelimit+0x319/0x590 [ 2894.010470] oom_kill_process.cold+0x10/0x692 [ 2894.014968] ? check_preemption_disabled+0x41/0x280 [ 2894.019989] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2894.025264] out_of_memory+0x1072/0x1390 [ 2894.029414] ? oom_killer_disable+0x270/0x270 [ 2894.033908] ? mutex_trylock+0x15f/0x1a0 [ 2894.038056] __alloc_pages_nodemask+0x23a2/0x2890 [ 2894.042914] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2894.047753] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2894.052592] ? __put_seccomp_filter+0xa0/0xa0 [ 2894.057088] ? lock_downgrade+0x720/0x720 [ 2894.061237] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2894.066425] ? ____cache_alloc_node+0x156/0x1d0 [ 2894.071088] ? cache_grow_begin+0x64/0x8a0 [ 2894.075319] cache_grow_begin+0xa4/0x8a0 [ 2894.079381] fallback_alloc+0x213/0x2e0 [ 2894.083356] kmem_cache_alloc+0x1e4/0x370 [ 2894.087508] getname_flags+0xce/0x590 [ 2894.091312] do_sys_open+0x26c/0x520 [ 2894.095024] ? filp_open+0x70/0x70 [ 2894.098566] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2894.103925] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2894.108942] ? do_syscall_64+0x21/0x620 [ 2894.112914] do_syscall_64+0xf9/0x620 [ 2894.116712] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2894.121896] RIP: 0033:0x7f94d8ce36f0 [ 2894.125611] Code: Bad RIP value. [ 2894.129140] RSP: 002b:00007ffe7394a908 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2894.136858] RAX: ffffffffffffffda RBX: 0000564267141510 RCX: 00007f94d8ce36f0 [ 2894.144138] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 0000564265c05f4c [ 2894.151415] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 2894.158883] R10: 0000000000080000 R11: 0000000000000246 R12: 0000564265c0568a [ 2894.166162] R13: 0000000000000001 R14: 0000000000000000 R15: 000056426712dca0 [ 2894.733447] Mem-Info: [ 2894.742651] active_anon:143101 inactive_anon:1291576 isolated_anon:0 [ 2894.742651] active_file:78 inactive_file:108 isolated_file:38 [ 2894.742651] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2894.742651] slab_reclaimable:19418 slab_unreclaimable:126462 [ 2894.742651] mapped:1330300 shmem:1295456 pagetables:16368 bounce:0 [ 2894.742651] free:25068 free_pcp:396 free_cma:0 [ 2894.783555] Node 0 active_anon:521052kB inactive_anon:1450620kB active_file:0kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1563064kB dirty:0kB writeback:0kB shmem:1454572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2894.817200] Node 1 active_anon:51352kB inactive_anon:3715684kB active_file:176kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):152kB mapped:3757636kB dirty:0kB writeback:0kB shmem:3727252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2894.889553] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2224kB inactive_anon:2208kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2894.969578] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2894.974635] Node 0 DMA32 free:34400kB min:35996kB low:44992kB high:53988kB active_anon:518828kB inactive_anon:1448412kB active_file:28kB inactive_file:224kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13312kB pagetables:29704kB bounce:0kB free_pcp:236kB local_pcp:0kB free_cma:0kB [ 2895.186328] lowmem_reserve[]: 0 0 1 1 1 [ 2895.207756] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2895.320143] lowmem_reserve[]: 0 0 0 0 0 [ 2895.324163] Node 1 Normal free:53792kB min:53876kB low:67344kB high:80812kB active_anon:51356kB inactive_anon:3715684kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14528kB pagetables:35676kB bounce:0kB free_pcp:1892kB local_pcp:1404kB free_cma:0kB [ 2895.354769] lowmem_reserve[]: 0 0 0 0 0 [ 2895.358813] Node 0 DMA: 6*4kB (UMEH) 17*8kB (UMEH) 17*16kB (UMEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10992kB [ 2895.375172] Node 0 DMA32: 24*4kB (MEH) 1116*8kB (UMH) 384*16kB (UMEH) 648*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35904kB [ 2895.389445] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2895.400613] Node 1 Normal: 210*4kB (UME) 21*8kB (UMEH) 149*16kB (UMEH) 346*32kB (UMEH) 504*64kB (MEH) 56*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53888kB [ 2895.418145] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2895.427057] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2895.438412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2895.447554] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2895.471644] 1295579 total pagecache pages [ 2895.475871] 0 pages in swap cache [ 2895.479324] Swap cache stats: add 0, delete 0, find 0/0 [ 2895.484679] Free swap = 0kB [ 2895.487748] Total swap = 0kB [ 2895.490762] 2097051 pages RAM [ 2895.493863] 0 pages HighMem/MovableOnly [ 2895.497884] 369649 pages reserved [ 2895.501328] 0 pages cma reserved [ 2895.504692] Out of memory (oom_kill_allocating_task): Kill process 22183 (systemd-udevd) score 0 or sacrifice child [ 2895.515735] Killed process 22183 (systemd-udevd) total-vm:43796kB, anon-rss:1176kB, file-rss:0kB, shmem-rss:0kB [ 2895.527186] oom_reaper: reaped process 22183 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2895.666036] syz-executor.4 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 2895.714777] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2895.734788] CPU: 1 PID: 22178 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 2895.742691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2895.752059] Call Trace: [ 2895.754651] dump_stack+0x1fc/0x2ef [ 2895.758285] dump_header+0x15d/0xc3f [ 2895.762006] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2895.767111] ? ___ratelimit+0x319/0x590 [ 2895.771089] oom_kill_process.cold+0x10/0x692 [ 2895.775595] ? check_preemption_disabled+0x41/0x280 [ 2895.780621] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2895.785901] out_of_memory+0x1072/0x1390 [ 2895.790056] ? oom_killer_disable+0x270/0x270 [ 2895.794555] ? mutex_trylock+0x15f/0x1a0 [ 2895.798623] __alloc_pages_nodemask+0x23a2/0x2890 [ 2895.803486] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2895.808330] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2895.813193] ? ____cache_alloc_node+0x156/0x1d0 [ 2895.817932] ? cache_grow_begin+0x64/0x8a0 [ 2895.822171] cache_grow_begin+0xa4/0x8a0 [ 2895.826239] fallback_alloc+0x213/0x2e0 [ 2895.830224] kmem_cache_alloc_node+0xe3/0x3b0 [ 2895.834731] copy_process.part.0+0x1ceb/0x8260 [ 2895.839315] ? __handle_mm_fault+0x2bb6/0x41c0 [ 2895.843907] ? lock_downgrade+0x720/0x720 [ 2895.848059] ? up_read+0x17/0x110 [ 2895.851599] ? mark_held_locks+0xf0/0xf0 [ 2895.855677] ? __cleanup_sighand+0x60/0x60 [ 2895.859908] ? do_mmap+0x59c/0x1080 [ 2895.863537] ? vm_insert_page+0x9c0/0x9c0 [ 2895.867697] ? __do_page_fault+0x6d1/0xd60 [ 2895.871957] _do_fork+0x22f/0xf30 [ 2895.875498] ? fork_idle+0x220/0x220 [ 2895.879210] ? up_read+0x17/0x110 [ 2895.882666] ? __do_page_fault+0x180/0xd60 [ 2895.886906] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2895.892284] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2895.897302] ? do_syscall_64+0x21/0x620 [ 2895.901278] do_syscall_64+0xf9/0x620 [ 2895.905078] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2895.910260] RIP: 0033:0x7fc8ddd8ff11 [ 2895.913967] Code: Bad RIP value. [ 2895.917324] RSP: 002b:00007ffcad414b28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2895.925031] RAX: ffffffffffffffda RBX: 00007fc8db2e3700 RCX: 00007fc8ddd8ff11 [ 2895.932379] RDX: 00007fc8db2e39d0 RSI: 00007fc8db2e32f0 RDI: 00000000003d0f00 [ 2895.939644] RBP: 00007ffcad414d60 R08: 00007fc8db2e3700 R09: 00007fc8db2e3700 [ 2895.946907] R10: 00007fc8db2e39d0 R11: 0000000000000206 R12: 00007ffcad414bde [ 2895.954168] R13: 00007ffcad414bdf R14: 00007fc8db2e3300 R15: 0000000000022000 [ 2896.264734] Mem-Info: [ 2896.267191] active_anon:143057 inactive_anon:1291576 isolated_anon:0 [ 2896.267191] active_file:15 inactive_file:14 isolated_file:12 [ 2896.267191] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2896.267191] slab_reclaimable:19418 slab_unreclaimable:126350 [ 2896.267191] mapped:1330138 shmem:1295456 pagetables:16347 bounce:0 [ 2896.267191] free:25571 free_pcp:335 free_cma:0 [ 2896.335457] Node 0 active_anon:520980kB inactive_anon:1450620kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:1563044kB dirty:0kB writeback:0kB shmem:1454572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2896.396913] Node 1 active_anon:51248kB inactive_anon:3715684kB active_file:264kB inactive_file:316kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:3757908kB dirty:0kB writeback:0kB shmem:3727252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2896.464740] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2228kB inactive_anon:2208kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2896.514675] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2896.534678] Node 0 DMA32 free:35892kB min:35996kB low:44992kB high:53988kB active_anon:518752kB inactive_anon:1448412kB active_file:116kB inactive_file:140kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13312kB pagetables:29620kB bounce:0kB free_pcp:752kB local_pcp:0kB free_cma:0kB [ 2896.584840] lowmem_reserve[]: 0 0 1 1 1 [ 2896.588836] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2896.658436] lowmem_reserve[]: 0 0 0 0 0 [ 2896.662447] Node 1 Normal free:55640kB min:53876kB low:67344kB high:80812kB active_anon:51248kB inactive_anon:3715684kB active_file:216kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14464kB pagetables:35676kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2896.693977] lowmem_reserve[]: 0 0 0 0 0 [ 2896.698038] Node 0 DMA: 6*4kB (UMEH) 17*8kB (UMEH) 17*16kB (UMEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10992kB [ 2896.717203] Node 0 DMA32: 90*4kB (UMEH) 1172*8kB (UMH) 390*16kB (UMEH) 650*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36776kB [ 2896.731228] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2896.755249] Node 1 Normal: 489*4kB (UME) 91*8kB (UMEH) 172*16kB (UMEH) 347*32kB (UMEH) 505*64kB (MEH) 56*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56028kB [ 2896.784697] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2896.793587] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2896.803711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2896.822731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2896.836758] 1295494 total pagecache pages [ 2896.840920] 0 pages in swap cache [ 2896.844364] Swap cache stats: add 0, delete 0, find 0/0 [ 2896.879720] Free swap = 0kB [ 2896.884167] Total swap = 0kB [ 2896.894851] 2097051 pages RAM [ 2896.897973] 0 pages HighMem/MovableOnly [ 2896.901949] 369649 pages reserved [ 2896.905446] 0 pages cma reserved [ 2896.908808] Out of memory (oom_kill_allocating_task): Kill process 22178 (syz-executor.4) score 0 or sacrifice child [ 2896.919585] Killed process 22178 (syz-executor.4) total-vm:93540kB, anon-rss:380kB, file-rss:33668kB, shmem-rss:11480kB [ 2896.931385] oom_reaper: reaped process 22178 (syz-executor.4), now anon-rss:0kB, file-rss:33664kB, shmem-rss:11480kB [ 2897.004605] kworker/u4:16 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2897.032313] kworker/u4:16 cpuset=/ mems_allowed=0-1 [ 2897.032341] CPU: 1 PID: 11953 Comm: kworker/u4:16 Not tainted 4.19.211-syzkaller #0 [ 2897.032348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2897.032365] Workqueue: events_unbound call_usermodehelper_exec_work [ 2897.032372] Call Trace: [ 2897.032389] dump_stack+0x1fc/0x2ef [ 2897.032407] dump_header+0x15d/0xc3f [ 2897.032425] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2897.032439] ? ___ratelimit+0x319/0x590 [ 2897.032456] oom_kill_process.cold+0x10/0x692 [ 2897.032473] ? lock_downgrade+0x720/0x720 [ 2897.032491] ? check_preemption_disabled+0x41/0x280 [ 2897.032510] out_of_memory+0x34d/0x1390 [ 2897.032531] ? oom_killer_disable+0x270/0x270 [ 2897.032547] ? mutex_trylock+0x15f/0x1a0 [ 2897.032566] __alloc_pages_nodemask+0x23a2/0x2890 [ 2897.032598] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2897.032611] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2897.032642] ? mark_held_locks+0xa6/0xf0 [ 2897.032655] ? ____cache_alloc_node+0x156/0x1d0 [ 2897.032668] ? cache_grow_begin+0x64/0x8a0 [ 2897.032684] cache_grow_begin+0xa4/0x8a0 [ 2897.032702] fallback_alloc+0x213/0x2e0 [ 2897.032720] kmem_cache_alloc_node+0xe3/0x3b0 [ 2897.032739] copy_process.part.0+0x1ceb/0x8260 [ 2897.032765] ? __lock_acquire+0x6de/0x3ff0 [ 2897.032782] ? umh_complete+0x90/0x90 [ 2897.032799] ? __cleanup_sighand+0x60/0x60 [ 2897.032813] ? mark_held_locks+0xf0/0xf0 [ 2897.032832] ? __lock_acquire+0x6de/0x3ff0 [ 2897.032852] _do_fork+0x22f/0xf30 [ 2897.032865] ? umh_complete+0x90/0x90 [ 2897.032881] ? fork_idle+0x220/0x220 [ 2897.032893] ? lock_acquire+0x170/0x3c0 [ 2897.032904] ? debug_object_deactivate+0xfc/0x2e0 [ 2897.032922] ? trace_hardirqs_off+0x64/0x200 [ 2897.032939] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2897.032952] ? umh_complete+0x90/0x90 [ 2897.032966] kernel_thread+0x2f/0x40 [ 2897.032981] call_usermodehelper_exec_work+0x16d/0x260 [ 2897.032994] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 2897.033015] process_one_work+0x864/0x1570 [ 2897.033035] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2897.033055] worker_thread+0x64c/0x1130 [ 2897.033076] ? __kthread_parkme+0x133/0x1e0 [ 2897.033089] ? process_one_work+0x1570/0x1570 [ 2897.033102] kthread+0x33f/0x460 [ 2897.033114] ? kthread_park+0x180/0x180 [ 2897.033130] ret_from_fork+0x24/0x30 [ 2897.033148] Mem-Info: [ 2897.033178] active_anon:143035 inactive_anon:1291576 isolated_anon:0 [ 2897.033178] active_file:18 inactive_file:59 isolated_file:0 [ 2897.033178] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2897.033178] slab_reclaimable:19406 slab_unreclaimable:126319 [ 2897.033178] mapped:1330139 shmem:1295456 pagetables:16347 bounce:0 [ 2897.033178] free:25518 free_pcp:240 free_cma:0 [ 2897.033209] Node 0 active_anon:520924kB inactive_anon:1450620kB active_file:52kB inactive_file:260kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1563092kB dirty:0kB writeback:0kB shmem:1454572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2897.033235] Node 1 active_anon:51216kB inactive_anon:3715684kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3757464kB dirty:0kB writeback:0kB shmem:3727252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2897.033241] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2228kB inactive_anon:2208kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2897.033270] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2897.033290] Node 0 DMA32 free:35548kB min:35996kB low:44992kB high:53988kB active_anon:518696kB inactive_anon:1448412kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13312kB pagetables:29620kB bounce:0kB free_pcp:728kB local_pcp:480kB free_cma:0kB [ 2897.033321] lowmem_reserve[]: 0 0 1 1 1 [ 2897.033339] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2897.033366] lowmem_reserve[]: 0 0 0 0 0 [ 2897.033385] Node 1 Normal free:55556kB min:53876kB low:67344kB high:80812kB active_anon:51216kB inactive_anon:3715684kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14400kB pagetables:35676kB bounce:0kB free_pcp:232kB local_pcp:40kB free_cma:0kB [ 2897.033416] lowmem_reserve[]: 0 0 0 0 0 [ 2897.033434] Node 0 DMA: 5*4kB (UEH) 16*8kB (UEH) 16*16kB (UMEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10964kB [ 2897.033505] Node 0 DMA32: 9*4kB (MH) 1063*8kB (UH) 389*16kB (UEH) 650*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35564kB [ 2897.033562] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2897.033612] Node 1 Normal: 432*4kB (UME) 92*8kB (UMEH) 172*16kB (UMEH) 346*32kB (UMEH) 504*64kB (MEH) 57*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55840kB [ 2897.033683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2897.033692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2897.033701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2897.033710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2897.033715] 1295658 total pagecache pages [ 2897.033727] 0 pages in swap cache [ 2897.033735] Swap cache stats: add 0, delete 0, find 0/0 [ 2897.033740] Free swap = 0kB [ 2897.033744] Total swap = 0kB [ 2897.033752] 2097051 pages RAM [ 2897.033757] 0 pages HighMem/MovableOnly [ 2897.033761] 369649 pages reserved [ 2897.033766] 0 pages cma reserved [ 2897.033776] Out of memory: Kill process 22044 (syz-executor.1) score 1006 or sacrifice child [ 2897.033810] Killed process 22049 (syz-executor.1) total-vm:93804kB, anon-rss:436kB, file-rss:34820kB, shmem-rss:11480kB [ 2897.034899] oom_reaper: reaped process 22049 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:11480kB [ 2897.058788] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 2897.058797] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2897.058822] CPU: 1 PID: 20518 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 2897.058829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2897.058834] Call Trace: [ 2897.058851] dump_stack+0x1fc/0x2ef [ 2897.058870] dump_header+0x15d/0xc3f [ 2897.058886] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2897.058899] ? ___ratelimit+0x319/0x590 [ 2897.058917] oom_kill_process.cold+0x10/0x692 [ 2897.058934] ? check_preemption_disabled+0x41/0x280 [ 2897.058953] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2897.058969] out_of_memory+0x1072/0x1390 [ 2897.058989] ? oom_killer_disable+0x270/0x270 [ 2897.059005] ? mutex_trylock+0x15f/0x1a0 [ 2897.059022] __alloc_pages_nodemask+0x23a2/0x2890 [ 2897.059043] ? find_get_entry+0x4cd/0x8a0 [ 2897.059067] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2897.059107] alloc_pages_current+0x193/0x2a0 [ 2897.059121] filemap_fault+0x146e/0x2180 [ 2897.059148] ext4_filemap_fault+0x84/0xb0 [ 2897.059162] __do_fault+0x10b/0x4b0 [ 2897.059179] __handle_mm_fault+0x273b/0x41c0 [ 2897.059197] ? vm_insert_page+0x9c0/0x9c0 [ 2897.059226] ? check_preemption_disabled+0x41/0x280 [ 2897.059245] handle_mm_fault+0x436/0xb10 [ 2897.059265] __do_page_fault+0x68e/0xd60 [ 2897.059286] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2897.059300] ? spurious_fault+0x840/0x840 [ 2897.059315] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2897.059332] ? page_fault+0x8/0x30 [ 2897.059346] page_fault+0x1e/0x30 [ 2897.059357] RIP: 0033:0x7fc8ddd2cba0 [ 2897.059369] Code: Bad RIP value. [ 2897.059377] RSP: 002b:00007fc8db303bf8 EFLAGS: 00010203 [ 2897.059386] RAX: 0000000000000000 RBX: 00000002be5741c3 RCX: 00007fc8ddd35a89 [ 2897.059394] RDX: 00007fc8db303c00 RSI: 00007fc8db303d30 RDI: 000000000000000b [ 2897.059402] RBP: 00007fc8ddde8f25 R08: 00007fc8db3041a0 R09: 00007fc8ddde8f25 [ 2897.059409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2897.059417] R13: 00007ffcad414bdf R14: 00007fc8db304300 R15: 0000000000022000 [ 2897.059435] Mem-Info: [ 2897.059465] active_anon:143035 inactive_anon:1291576 isolated_anon:0 [ 2897.059465] active_file:143 inactive_file:190 isolated_file:32 [ 2897.059465] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2897.059465] slab_reclaimable:19406 slab_unreclaimable:126319 [ 2897.059465] mapped:1330389 shmem:1295456 pagetables:16347 bounce:0 [ 2897.059465] free:24987 free_pcp:636 free_cma:0 [ 2897.059491] Node 0 active_anon:520924kB inactive_anon:1450620kB active_file:152kB inactive_file:244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1563292kB dirty:0kB writeback:0kB shmem:1454572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2897.059516] Node 1 active_anon:51216kB inactive_anon:3715684kB active_file:420kB inactive_file:516kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:3758264kB dirty:0kB writeback:0kB shmem:3727252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2897.059521] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2228kB inactive_anon:2208kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2897.059551] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2897.059571] Node 0 DMA32 free:35548kB min:35996kB low:44992kB high:53988kB active_anon:518696kB inactive_anon:1448412kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13312kB pagetables:29620kB bounce:0kB free_pcp:844kB local_pcp:596kB free_cma:0kB [ 2897.059601] lowmem_reserve[]: 0 0 1 1 1 [ 2897.059619] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2897.059647] lowmem_reserve[]: 0 0 0 0 0 [ 2897.059666] Node 1 Normal free:53432kB min:53876kB low:67344kB high:80812kB active_anon:51216kB inactive_anon:3715684kB active_file:20kB inactive_file:668kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14400kB pagetables:35676kB bounce:0kB free_pcp:1700kB local_pcp:1116kB free_cma:0kB [ 2897.059695] lowmem_reserve[]: 0 0 0 0 0 [ 2897.059713] Node 0 DMA: 5*4kB (UEH) 16*8kB (UEH) 16*16kB (UMEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10964kB [ 2897.059787] Node 0 DMA32: 9*4kB (MH) 1063*8kB (UH) 389*16kB (UEH) 650*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35564kB [ 2897.059848] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2897.059900] Node 1 Normal: 35*4kB (UME) 23*8kB (UEH) 164*16kB (UMEH) 346*32kB (UMEH) 504*64kB (MEH) 57*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53572kB [ 2897.059971] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2897.059981] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2897.059991] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2897.060001] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2897.060006] 1295877 total pagecache pages [ 2897.060019] 0 pages in swap cache [ 2897.060027] Swap cache stats: add 0, delete 0, find 0/0 [ 2897.060032] Free swap = 0kB [ 2897.060037] Total swap = 0kB [ 2897.060044] 2097051 pages RAM [ 2897.060049] 0 pages HighMem/MovableOnly [ 2897.060054] 369649 pages reserved [ 2897.060059] 0 pages cma reserved [ 2897.060069] Out of memory (oom_kill_allocating_task): Kill process 20518 (syz-executor.4) score 0 or sacrifice child [ 2897.060097] Killed process 20518 (syz-executor.4) total-vm:93540kB, anon-rss:440kB, file-rss:34328kB, shmem-rss:11480kB [ 2897.065134] oom_reaper: reaped process 20518 (syz-executor.4), now anon-rss:0kB, file-rss:34324kB, shmem-rss:11480kB [ 2897.077879] kworker/u4:6 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2897.077888] kworker/u4:6 cpuset=/ mems_allowed=0-1 [ 2897.077913] CPU: 0 PID: 21728 Comm: kworker/u4:6 Not tainted 4.19.211-syzkaller #0 [ 2897.077920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2897.077936] Workqueue: events_unbound call_usermodehelper_exec_work [ 2897.077943] Call Trace: [ 2897.077960] dump_stack+0x1fc/0x2ef [ 2897.077978] dump_header+0x15d/0xc3f [ 2897.077994] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2897.078007] ? ___ratelimit+0x319/0x590 [ 2897.078024] oom_kill_process.cold+0x10/0x692 [ 2897.078037] ? oom_badness.part.0+0x135/0x6e0 [ 2897.078051] ? lock_downgrade+0x720/0x720 [ 2897.078069] ? check_preemption_disabled+0x41/0x280 [ 2897.078086] out_of_memory+0x34d/0x1390 [ 2897.078106] ? oom_killer_disable+0x270/0x270 [ 2897.078122] ? mutex_trylock+0x15f/0x1a0 [ 2897.078139] __alloc_pages_nodemask+0x23a2/0x2890 [ 2897.078171] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2897.078184] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2897.078214] ? mark_held_locks+0xa6/0xf0 [ 2897.078226] ? ____cache_alloc_node+0x156/0x1d0 [ 2897.078237] ? cache_grow_begin+0x64/0x8a0 [ 2897.078254] cache_grow_begin+0xa4/0x8a0 [ 2897.078273] fallback_alloc+0x213/0x2e0 [ 2897.078292] kmem_cache_alloc_node+0xe3/0x3b0 [ 2897.078312] copy_process.part.0+0x1ceb/0x8260 [ 2897.078330] ? __lock_acquire+0x6de/0x3ff0 [ 2897.078350] ? __lock_acquire+0x6de/0x3ff0 [ 2897.078367] ? umh_complete+0x90/0x90 [ 2897.078385] ? __cleanup_sighand+0x60/0x60 [ 2897.078399] ? mark_held_locks+0xf0/0xf0 [ 2897.078418] ? __lock_acquire+0x6de/0x3ff0 [ 2897.078439] _do_fork+0x22f/0xf30 [ 2897.078452] ? umh_complete+0x90/0x90 [ 2897.078468] ? fork_idle+0x220/0x220 [ 2897.078480] ? lock_acquire+0x170/0x3c0 [ 2897.078491] ? debug_object_deactivate+0xfc/0x2e0 [ 2897.078510] ? trace_hardirqs_off+0x64/0x200 [ 2897.078526] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2897.078541] ? umh_complete+0x90/0x90 [ 2897.078556] kernel_thread+0x2f/0x40 [ 2897.078570] call_usermodehelper_exec_work+0x16d/0x260 [ 2897.078584] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 2897.078604] process_one_work+0x864/0x1570 [ 2897.078626] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2897.078650] worker_thread+0x64c/0x1130 [ 2897.078674] ? process_one_work+0x1570/0x1570 [ 2897.078688] kthread+0x33f/0x460 [ 2897.078705] ? kthread_park+0x180/0x180 [ 2897.078720] ret_from_fork+0x24/0x30 [ 2897.078738] Mem-Info: [ 2897.078767] active_anon:145510 inactive_anon:1289051 isolated_anon:0 [ 2897.078767] active_file:118 inactive_file:184 isolated_file:32 [ 2897.078767] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2897.078767] slab_reclaimable:19406 slab_unreclaimable:126319 [ 2897.078767] mapped:1327814 shmem:1295456 pagetables:16347 bounce:0 [ 2897.078767] free:24982 free_pcp:617 free_cma:0 [ 2897.078792] Node 0 active_anon:527724kB inactive_anon:1443820kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1556092kB dirty:0kB writeback:0kB shmem:1454572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2897.078818] Node 1 active_anon:54316kB inactive_anon:3712384kB active_file:400kB inactive_file:744kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:3755164kB dirty:0kB writeback:0kB shmem:3727252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2897.078823] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2256kB inactive_anon:2180kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2897.078852] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2897.078871] Node 0 DMA32 free:35548kB min:35996kB low:44992kB high:53988kB active_anon:525248kB inactive_anon:1441860kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13312kB pagetables:29620kB bounce:0kB free_pcp:1020kB local_pcp:0kB free_cma:0kB [ 2897.078900] lowmem_reserve[]: 0 0 1 1 1 [ 2897.078919] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2897.078946] lowmem_reserve[]: 0 0 0 0 0 [ 2897.078965] Node 1 Normal free:53412kB min:53876kB low:67344kB high:80812kB active_anon:54240kB inactive_anon:3712660kB active_file:20kB inactive_file:668kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14400kB pagetables:35676kB bounce:0kB free_pcp:1448kB local_pcp:248kB free_cma:0kB [ 2897.078994] lowmem_reserve[]: 0 0 0 0 0 [ 2897.079013] Node 0 DMA: 5*4kB (UEH) 16*8kB (UEH) 16*16kB (UMEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10964kB [ 2897.079087] Node 0 DMA32: 11*4kB (UMH) 1097*8kB (UMH) 389*16kB (UEH) 650*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35844kB [ 2897.079147] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2897.079199] Node 1 Normal: 96*4kB (UE) 24*8kB (UMEH) 147*16kB (UMEH) 346*32kB (UMEH) 504*64kB (MEH) 57*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53552kB [ 2897.079270] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2897.079280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2897.079289] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2897.079299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2897.079304] 1295838 total pagecache pages [ 2897.079317] 0 pages in swap cache [ 2897.079325] Swap cache stats: add 0, delete 0, find 0/0 [ 2897.079329] Free swap = 0kB [ 2897.079334] Total swap = 0kB [ 2897.079341] 2097051 pages RAM [ 2897.079346] 0 pages HighMem/MovableOnly [ 2897.079351] 369649 pages reserved [ 2897.079356] 0 pages cma reserved [ 2897.079365] Out of memory: Kill process 22048 (syz-executor.0) score 1006 or sacrifice child [ 2897.079406] Killed process 22048 (syz-executor.0) total-vm:93672kB, anon-rss:428kB, file-rss:34820kB, shmem-rss:11480kB [ 2898.738373] ieee802154 phy0 wpan0: encryption failed: -22 [ 2898.738412] ieee802154 phy1 wpan1: encryption failed: -22 22:31:27 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000017b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:27 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x8a03}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:31:27 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001000b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2900.976247] IPVS: ftp: loaded support on port[0] = 21 [ 2901.794294] IPVS: ftp: loaded support on port[0] = 21 22:31:31 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x8c02}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:31:31 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:31:31 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000018b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2905.489864] IPVS: ftp: loaded support on port[0] = 21 [ 2905.636915] IPVS: ftp: loaded support on port[0] = 21 [ 2905.934343] Bluetooth: hci2: command 0x0406 tx timeout [ 2905.939844] Bluetooth: hci3: command 0x0406 tx timeout [ 2907.144783] IPVS: ftp: loaded support on port[0] = 21 [ 2908.057891] kworker/u4:0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2908.170410] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 2908.231917] CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 4.19.211-syzkaller #0 [ 2908.239313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2908.248685] Workqueue: events_unbound call_usermodehelper_exec_work [ 2908.255085] Call Trace: [ 2908.257667] dump_stack+0x1fc/0x2ef [ 2908.261286] dump_header+0x15d/0xc3f [ 2908.264991] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2908.270080] ? ___ratelimit+0x319/0x590 [ 2908.274044] oom_kill_process.cold+0x10/0x692 [ 2908.278525] ? lock_downgrade+0x720/0x720 [ 2908.282663] ? check_preemption_disabled+0x41/0x280 [ 2908.287679] out_of_memory+0x34d/0x1390 [ 2908.291657] ? oom_killer_disable+0x270/0x270 [ 2908.296160] ? mutex_trylock+0x15f/0x1a0 [ 2908.300234] __alloc_pages_nodemask+0x23a2/0x2890 [ 2908.305075] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2908.309904] ? should_fail+0x142/0x7b0 [ 2908.313864] ? fs_reclaim_release+0xd0/0x110 [ 2908.318266] ? check_preemption_disabled+0x41/0x280 [ 2908.323276] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2908.328277] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2908.333114] copy_process.part.0+0x3cf/0x8260 [ 2908.337616] ? __lock_acquire+0x6de/0x3ff0 [ 2908.341864] ? mark_held_locks+0xf0/0xf0 [ 2908.346017] ? umh_complete+0x90/0x90 [ 2908.349810] ? __cleanup_sighand+0x60/0x60 [ 2908.354057] ? __update_load_avg_se+0x5ec/0xa00 [ 2908.358721] ? __lock_acquire+0x6de/0x3ff0 [ 2908.362958] _do_fork+0x22f/0xf30 [ 2908.366402] ? umh_complete+0x90/0x90 [ 2908.370194] ? fork_idle+0x220/0x220 [ 2908.373900] ? lock_downgrade+0x720/0x720 [ 2908.378034] ? lock_downgrade+0x720/0x720 [ 2908.382263] ? trace_hardirqs_off+0x64/0x200 [ 2908.386657] ? umh_complete+0x90/0x90 [ 2908.390459] kernel_thread+0x2f/0x40 [ 2908.394169] call_usermodehelper_exec_work+0x16d/0x260 [ 2908.399434] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 2908.404968] process_one_work+0x864/0x1570 [ 2908.409206] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2908.413868] worker_thread+0x64c/0x1130 [ 2908.418042] ? process_one_work+0x1570/0x1570 [ 2908.422538] kthread+0x33f/0x460 [ 2908.425923] ? kthread_park+0x180/0x180 [ 2908.429892] ret_from_fork+0x24/0x30 [ 2908.720144] Mem-Info: [ 2908.722648] active_anon:145747 inactive_anon:1286096 isolated_anon:0 [ 2908.722648] active_file:11 inactive_file:40 isolated_file:24 [ 2908.722648] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2908.722648] slab_reclaimable:19379 slab_unreclaimable:126277 [ 2908.722648] mapped:1324788 shmem:1292742 pagetables:16294 bounce:0 [ 2908.722648] free:28082 free_pcp:731 free_cma:0 [ 2909.117931] Node 0 active_anon:527608kB inactive_anon:1438860kB active_file:984kB inactive_file:3436kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1554284kB dirty:0kB writeback:0kB shmem:1449396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2909.146924] Node 1 active_anon:53368kB inactive_anon:3698492kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3740844kB dirty:0kB writeback:0kB shmem:3712628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2909.194019] Node 0 DMA free:11020kB min:204kB low:252kB high:300kB active_anon:2228kB inactive_anon:2180kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2909.388445] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2909.393591] Node 0 DMA32 free:41660kB min:35996kB low:44992kB high:53988kB active_anon:518528kB inactive_anon:1436848kB active_file:3612kB inactive_file:4508kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13344kB pagetables:29792kB bounce:0kB free_pcp:2736kB local_pcp:1464kB free_cma:0kB [ 2909.681767] lowmem_reserve[]: 0 0 1 1 1 [ 2909.686217] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2909.724139] lowmem_reserve[]: 0 0 0 0 0 [ 2909.728152] Node 1 Normal free:71456kB min:53876kB low:67344kB high:80812kB active_anon:54616kB inactive_anon:3691172kB active_file:704kB inactive_file:708kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14112kB pagetables:35016kB bounce:0kB free_pcp:2560kB local_pcp:1272kB free_cma:0kB [ 2909.861000] lowmem_reserve[]: 0 0 0 0 0 [ 2909.903930] Node 0 DMA: 12*4kB (UMEH) 18*8kB (UMEH) 17*16kB (UMEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11024kB [ 2909.968773] Node 0 DMA32: 1441*4kB (UMEH) 476*8kB (UMEH) 878*16kB (UMEH) 663*32kB (UEH) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44900kB [ 2910.010177] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2910.022119] Node 1 Normal: 1736*4kB (UME) 949*8kB (UMEH) 978*16kB (UMEH) 365*32kB (UMEH) 486*64kB (UMEH) 19*128kB (MH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 75400kB [ 2910.038055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2910.047248] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2910.056425] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2910.066737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2910.114061] 1286954 total pagecache pages [ 2910.118242] 0 pages in swap cache [ 2910.121691] Swap cache stats: add 0, delete 0, find 0/0 [ 2910.163825] Free swap = 0kB [ 2910.166863] Total swap = 0kB [ 2910.169874] 2097051 pages RAM [ 2910.172966] 0 pages HighMem/MovableOnly [ 2910.213837] 369649 pages reserved [ 2910.217315] 0 pages cma reserved [ 2910.220678] Out of memory: Kill process 22316 (syz-executor.5) score 1006 or sacrifice child [ 2910.239608] Killed process 22316 (syz-executor.5) total-vm:93936kB, anon-rss:444kB, file-rss:34820kB, shmem-rss:11476kB 22:31:37 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001100b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:37 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 22:31:37 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:31:37 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000019b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:37 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x9401}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:31:37 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd6d, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2910.593172] IPVS: ftp: loaded support on port[0] = 21 [ 2910.753510] IPVS: ftp: loaded support on port[0] = 21 [ 2910.835846] IPVS: ftp: loaded support on port[0] = 21 [ 2910.874205] IPVS: ftp: loaded support on port[0] = 21 22:31:37 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001200b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:37 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001ab91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:37 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001300b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:38 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001bb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2911.671753] IPVS: ftp: loaded support on port[0] = 21 22:31:38 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001400b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2912.016166] IPVS: ftp: loaded support on port[0] = 21 22:31:38 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001cb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2913.544681] systemd-udevd invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2913.580946] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2913.624435] CPU: 1 PID: 22464 Comm: systemd-udevd Not tainted 4.19.211-syzkaller #0 [ 2913.632267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2913.641625] Call Trace: [ 2913.644222] dump_stack+0x1fc/0x2ef [ 2913.647862] dump_header+0x15d/0xc3f [ 2913.651584] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2913.656690] ? ___ratelimit+0x319/0x590 [ 2913.660674] oom_kill_process.cold+0x10/0x692 [ 2913.665177] ? check_preemption_disabled+0x41/0x280 [ 2913.670207] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2913.675661] out_of_memory+0x1072/0x1390 [ 2913.679735] ? oom_killer_disable+0x270/0x270 [ 2913.684236] ? mutex_trylock+0x15f/0x1a0 [ 2913.688314] __alloc_pages_nodemask+0x23a2/0x2890 [ 2913.693354] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2913.698202] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2913.703051] ? __put_seccomp_filter+0xa0/0xa0 [ 2913.707558] ? lock_downgrade+0x720/0x720 [ 2913.711713] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2913.716920] ? ____cache_alloc_node+0x156/0x1d0 [ 2913.721593] ? cache_grow_begin+0x64/0x8a0 [ 2913.725833] cache_grow_begin+0xa4/0x8a0 [ 2913.729906] fallback_alloc+0x213/0x2e0 [ 2913.733888] kmem_cache_alloc+0x1e4/0x370 [ 2913.738047] getname_flags+0xce/0x590 [ 2913.741857] do_sys_open+0x26c/0x520 [ 2913.745579] ? filp_open+0x70/0x70 [ 2913.749133] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2913.754504] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2913.759529] ? do_syscall_64+0x21/0x620 [ 2913.763512] do_syscall_64+0xf9/0x620 [ 2913.767322] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2913.772629] RIP: 0033:0x7f94d8fb7840 [ 2913.776345] Code: Bad RIP value. [ 2913.779710] RSP: 002b:00007ffe7394a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2913.787440] RAX: ffffffffffffffda RBX: 000056426712ddc0 RCX: 00007f94d8fb7840 [ 2913.795057] RDX: 0000564265c05fe3 RSI: 0000000000080000 RDI: 00005642671312c0 [ 2913.802328] RBP: 0000000000000001 R08: 0000564265c05670 R09: 0000000000000110 [ 2913.809602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2913.816879] R13: 0000000000000000 R14: 0000564267141ab0 R15: 00000000ffffffff 22:31:40 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x9801}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2914.436161] IPVS: ftp: loaded support on port[0] = 21 [ 2914.943772] Mem-Info: [ 2914.946311] active_anon:143216 inactive_anon:1282545 isolated_anon:0 [ 2914.946311] active_file:987 inactive_file:854 isolated_file:0 [ 2914.946311] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2914.946311] slab_reclaimable:19382 slab_unreclaimable:127789 [ 2914.946311] mapped:1322768 shmem:1286412 pagetables:16327 bounce:0 [ 2914.946311] free:30748 free_pcp:1021 free_cma:0 [ 2914.984403] Node 0 active_anon:521008kB inactive_anon:1437184kB active_file:3828kB inactive_file:3376kB unevictable:0kB isolated(anon):0kB isolated(file):84kB mapped:1555932kB dirty:200kB writeback:0kB shmem:1441132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2915.100523] Node 1 active_anon:51712kB inactive_anon:3695176kB active_file:40kB inactive_file:812kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3738080kB dirty:0kB writeback:0kB shmem:3706788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2915.231177] IPVS: ftp: loaded support on port[0] = 21 [ 2915.258696] Node 0 DMA free:11016kB min:204kB low:252kB high:300kB active_anon:2224kB inactive_anon:2148kB active_file:0kB inactive_file:36kB unevictable:0kB writepending:12kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2915.426236] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2915.462785] Node 0 DMA32 free:40280kB min:35996kB low:44992kB high:53988kB active_anon:518784kB inactive_anon:1435036kB active_file:3828kB inactive_file:2780kB unevictable:0kB writepending:188kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13408kB pagetables:29768kB bounce:0kB free_pcp:2276kB local_pcp:1424kB free_cma:0kB [ 2915.651295] lowmem_reserve[]: 0 0 1 1 1 [ 2915.688591] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2915.863562] lowmem_reserve[]: 0 0 0 0 0 [ 2915.867585] Node 1 Normal free:67100kB min:53876kB low:67344kB high:80812kB active_anon:63112kB inactive_anon:3686552kB active_file:40kB inactive_file:716kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14336kB pagetables:35308kB bounce:0kB free_pcp:1408kB local_pcp:520kB free_cma:0kB [ 2915.900241] lowmem_reserve[]: 0 0 0 0 0 [ 2915.907281] Node 0 DMA: 6*4kB (UEH) 22*8kB (UMEH) 16*16kB (MEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11016kB [ 2915.930012] Node 0 DMA32: 509*4kB (UH) 128*8kB (UEH) 814*16kB (UEH) 656*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37076kB [ 2915.950337] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2915.962283] Node 1 Normal: 7*4kB (ME) 611*8kB (UMEH) 1046*16kB (UMEH) 426*32kB (UMEH) 487*64kB (UMEH) 3*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 66836kB [ 2916.003513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2916.012393] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2916.074394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2916.083312] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2916.196975] 1291051 total pagecache pages [ 2916.201149] 0 pages in swap cache [ 2916.243189] Swap cache stats: add 0, delete 0, find 0/0 [ 2916.287523] Free swap = 0kB [ 2916.290569] Total swap = 0kB [ 2916.333533] 2097051 pages RAM [ 2916.337261] 0 pages HighMem/MovableOnly [ 2916.341259] 369649 pages reserved [ 2916.379327] 0 pages cma reserved [ 2916.450443] Out of memory (oom_kill_allocating_task): Kill process 22464 (systemd-udevd) score 0 or sacrifice child [ 2916.497281] Killed process 22464 (systemd-udevd) total-vm:43796kB, anon-rss:1176kB, file-rss:0kB, shmem-rss:0kB [ 2916.546959] oom_reaper: reaped process 22464 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 22:31:44 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 22:31:44 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001500b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:44 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:31:44 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd6e, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:31:44 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001db91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:44 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x9a00}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:31:44 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001600b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2917.795183] IPVS: ftp: loaded support on port[0] = 21 [ 2917.858942] IPVS: ftp: loaded support on port[0] = 21 [ 2917.949232] IPVS: ftp: loaded support on port[0] = 21 [ 2917.971813] IPVS: ftp: loaded support on port[0] = 21 22:31:44 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001eb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:44 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001700b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2920.125360] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2920.170650] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2920.189846] CPU: 1 PID: 22683 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2920.197778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2920.207139] Call Trace: [ 2920.209733] dump_stack+0x1fc/0x2ef [ 2920.213364] dump_header+0x15d/0xc3f [ 2920.217082] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2920.222183] ? ___ratelimit+0x319/0x590 [ 2920.226159] oom_kill_process.cold+0x10/0x692 [ 2920.230661] ? check_preemption_disabled+0x41/0x280 [ 2920.235683] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2920.240964] out_of_memory+0x1072/0x1390 [ 2920.245031] ? oom_killer_disable+0x270/0x270 [ 2920.249718] ? mutex_trylock+0x15f/0x1a0 [ 2920.253795] __alloc_pages_nodemask+0x23a2/0x2890 [ 2920.258666] ? check_preemption_disabled+0x41/0x280 [ 2920.263704] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2920.268762] ? mem_cgroup_from_task+0x120/0x120 [ 2920.273438] ? should_fail+0x142/0x7b0 [ 2920.277328] ? fs_reclaim_release+0xd0/0x110 [ 2920.281744] ? check_preemption_disabled+0x41/0x280 [ 2920.286771] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2920.291815] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2920.296757] copy_process.part.0+0x3cf/0x8260 [ 2920.301263] ? _raw_spin_unlock+0x29/0x40 [ 2920.305399] ? do_anonymous_page+0x704/0x1be0 [ 2920.309882] ? __pte_alloc+0x340/0x340 [ 2920.313755] ? mark_held_locks+0xf0/0xf0 [ 2920.317805] ? __cleanup_sighand+0x60/0x60 [ 2920.322025] ? do_mmap+0x59c/0x1080 [ 2920.325810] ? vm_insert_page+0x9c0/0x9c0 [ 2920.329950] ? __do_page_fault+0x6d1/0xd60 [ 2920.334287] _do_fork+0x22f/0xf30 [ 2920.337817] ? fork_idle+0x220/0x220 [ 2920.341514] ? up_read+0x17/0x110 [ 2920.344950] ? __do_page_fault+0x180/0xd60 [ 2920.349175] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2920.354699] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2920.359943] ? do_syscall_64+0x21/0x620 [ 2920.363999] do_syscall_64+0xf9/0x620 [ 2920.367800] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2920.372985] RIP: 0033:0x7f51a23dbf11 [ 2920.376705] Code: Bad RIP value. [ 2920.380331] RSP: 002b:00007fff6ff43888 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2920.388138] RAX: ffffffffffffffda RBX: 00007f519f92f700 RCX: 00007f51a23dbf11 [ 2920.395394] RDX: 00007f519f92f9d0 RSI: 00007f519f92f2f0 RDI: 00000000003d0f00 [ 2920.402649] RBP: 00007fff6ff43ac0 R08: 00007f519f92f700 R09: 00007f519f92f700 [ 2920.410074] R10: 00007f519f92f9d0 R11: 0000000000000206 R12: 00007fff6ff4393e [ 2920.417328] R13: 00007fff6ff4393f R14: 00007f519f92f300 R15: 0000000000022000 [ 2920.441629] Mem-Info: [ 2920.444691] active_anon:146034 inactive_anon:1288104 isolated_anon:0 [ 2920.444691] active_file:8 inactive_file:81 isolated_file:9 [ 2920.444691] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2920.444691] slab_reclaimable:19436 slab_unreclaimable:127066 [ 2920.444691] mapped:1326826 shmem:1294852 pagetables:16360 bounce:0 [ 2920.444691] free:25375 free_pcp:16 free_cma:0 [ 2920.484163] Node 0 active_anon:523156kB inactive_anon:1442972kB active_file:232kB inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:1555524kB dirty:0kB writeback:0kB shmem:1449108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2920.513716] Node 1 active_anon:60980kB inactive_anon:3709444kB active_file:0kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3751780kB dirty:0kB writeback:0kB shmem:3730300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2920.542306] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2236kB inactive_anon:2212kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2920.606043] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2920.611110] Node 0 DMA32 free:35604kB min:35996kB low:44992kB high:53988kB active_anon:520920kB inactive_anon:1440572kB active_file:224kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13280kB pagetables:29668kB bounce:0kB free_pcp:884kB local_pcp:636kB free_cma:0kB [ 2920.642035] lowmem_reserve[]: 0 0 1 1 1 [ 2920.646174] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2920.673213] lowmem_reserve[]: 0 0 0 0 0 [ 2920.677206] Node 1 Normal free:53824kB min:53876kB low:67344kB high:80812kB active_anon:60980kB inactive_anon:3709156kB active_file:4kB inactive_file:88kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14592kB pagetables:35680kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2920.709250] lowmem_reserve[]: 0 0 0 0 0 [ 2920.713421] Node 0 DMA: 7*4kB (UMEH) 17*8kB (UMEH) 16*16kB (UMEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10980kB [ 2920.738843] Node 0 DMA32: 556*4kB (UH) 473*8kB (UEH) 547*16kB (UEH) 660*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35880kB [ 2920.803985] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2920.838074] Node 1 Normal: 308*4kB (UME) 21*8kB (UMEH) 455*16kB (UMEH) 408*32kB (UMEH) 492*64kB (UMEH) 8*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54248kB [ 2920.891614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2920.912010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2920.931481] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2920.940521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2920.950146] 1294928 total pagecache pages [ 2920.992420] 0 pages in swap cache [ 2921.001124] Swap cache stats: add 0, delete 0, find 0/0 [ 2921.006980] Free swap = 0kB [ 2921.010004] Total swap = 0kB [ 2921.013040] 2097051 pages RAM [ 2921.023486] 0 pages HighMem/MovableOnly [ 2921.027492] 369649 pages reserved [ 2921.030942] 0 pages cma reserved [ 2921.039826] Out of memory (oom_kill_allocating_task): Kill process 22683 (syz-executor.5) score 0 or sacrifice child [ 2921.051044] Killed process 22683 (syz-executor.5) total-vm:93540kB, anon-rss:380kB, file-rss:33992kB, shmem-rss:11348kB [ 2921.063706] oom_reaper: reaped process 22683 (syz-executor.5), now anon-rss:0kB, file-rss:34780kB, shmem-rss:11480kB [ 2921.094579] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2921.111557] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2921.116831] CPU: 0 PID: 22714 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2921.124729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2921.134086] Call Trace: [ 2921.136682] dump_stack+0x1fc/0x2ef [ 2921.140322] dump_header+0x15d/0xc3f [ 2921.144045] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2921.149154] ? ___ratelimit+0x319/0x590 [ 2921.153135] oom_kill_process.cold+0x10/0x692 [ 2921.157636] ? check_preemption_disabled+0x41/0x280 [ 2921.162687] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2921.167995] out_of_memory+0x1072/0x1390 [ 2921.172066] ? oom_killer_disable+0x270/0x270 [ 2921.176748] ? mutex_trylock+0x15f/0x1a0 [ 2921.180816] __alloc_pages_nodemask+0x23a2/0x2890 [ 2921.185683] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2921.190531] ? should_fail+0x142/0x7b0 [ 2921.194422] ? fs_reclaim_release+0xd0/0x110 [ 2921.198848] ? check_preemption_disabled+0x41/0x280 [ 2921.203877] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2921.208908] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2921.213680] copy_process.part.0+0x3cf/0x8260 [ 2921.218185] ? __handle_mm_fault+0x2bb6/0x41c0 [ 2921.222779] ? lock_downgrade+0x720/0x720 [ 2921.226943] ? up_read+0x17/0x110 [ 2921.230404] ? mark_held_locks+0xf0/0xf0 [ 2921.234487] ? __cleanup_sighand+0x60/0x60 [ 2921.238725] ? do_mmap+0x59c/0x1080 [ 2921.242360] ? vm_insert_page+0x9c0/0x9c0 [ 2921.246519] ? __do_page_fault+0x6d1/0xd60 [ 2921.250763] _do_fork+0x22f/0xf30 [ 2921.254246] ? fork_idle+0x220/0x220 [ 2921.257970] ? up_read+0x17/0x110 [ 2921.261424] ? __do_page_fault+0x180/0xd60 [ 2921.265668] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2921.271034] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2921.276051] ? do_syscall_64+0x21/0x620 [ 2921.280039] do_syscall_64+0xf9/0x620 [ 2921.283827] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2921.289023] RIP: 0033:0x7fc877af8f11 [ 2921.292821] Code: Bad RIP value. [ 2921.296175] RSP: 002b:00007ffc967ec568 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2921.304087] RAX: ffffffffffffffda RBX: 00007fc87504c700 RCX: 00007fc877af8f11 [ 2921.311367] RDX: 00007fc87504c9d0 RSI: 00007fc87504c2f0 RDI: 00000000003d0f00 [ 2921.318634] RBP: 00007ffc967ec7a0 R08: 00007fc87504c700 R09: 00007fc87504c700 [ 2921.325993] R10: 00007fc87504c9d0 R11: 0000000000000206 R12: 00007ffc967ec61e [ 2921.333285] R13: 00007ffc967ec61f R14: 00007fc87504c300 R15: 0000000000022000 [ 2921.374165] Mem-Info: [ 2921.376762] active_anon:146036 inactive_anon:1288253 isolated_anon:0 [ 2921.376762] active_file:67 inactive_file:98 isolated_file:30 [ 2921.376762] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2921.376762] slab_reclaimable:19436 slab_unreclaimable:127064 [ 2921.376762] mapped:1326941 shmem:1295001 pagetables:16363 bounce:0 [ 2921.376762] free:25218 free_pcp:165 free_cma:0 [ 2921.411803] Node 0 active_anon:523156kB inactive_anon:1443036kB active_file:128kB inactive_file:148kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:1555484kB dirty:0kB writeback:0kB shmem:1449172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2921.442530] Node 1 active_anon:60988kB inactive_anon:3709976kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3752280kB dirty:0kB writeback:0kB shmem:3730832kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2921.471257] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2236kB inactive_anon:2212kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2921.516714] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2921.521921] Node 0 DMA32 free:35580kB min:35996kB low:44992kB high:53988kB active_anon:520920kB inactive_anon:1440824kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13280kB pagetables:29672kB bounce:0kB free_pcp:224kB local_pcp:0kB free_cma:0kB [ 2921.553340] lowmem_reserve[]: 0 0 1 1 1 [ 2921.557527] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2921.590016] lowmem_reserve[]: 0 0 0 0 0 [ 2921.594934] Node 1 Normal free:53804kB min:53876kB low:67344kB high:80812kB active_anon:60988kB inactive_anon:3709976kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14560kB pagetables:35688kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2921.634392] lowmem_reserve[]: 0 0 0 0 0 [ 2921.638619] Node 0 DMA: 7*4kB (UMEH) 17*8kB (UMEH) 16*16kB (UMEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10980kB [ 2921.660076] Node 0 DMA32: 587*4kB (UMEH) 476*8kB (UMEH) 547*16kB (UEH) 660*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36028kB [ 2921.680085] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2921.691435] Node 1 Normal: 257*4kB (UME) 14*8kB (UMEH) 459*16kB (UMEH) 408*32kB (UMEH) 493*64kB (UMEH) 8*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54116kB [ 2921.717323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2921.728232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2921.740447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2921.751468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2921.768900] 1295140 total pagecache pages [ 2921.777652] 0 pages in swap cache [ 2921.781264] Swap cache stats: add 0, delete 0, find 0/0 [ 2921.791577] Free swap = 0kB [ 2921.797328] Total swap = 0kB [ 2921.800503] 2097051 pages RAM [ 2921.806526] 0 pages HighMem/MovableOnly [ 2921.810633] 369649 pages reserved [ 2921.816783] 0 pages cma reserved [ 2921.820289] Out of memory (oom_kill_allocating_task): Kill process 22714 (syz-executor.3) score 0 or sacrifice child [ 2921.834934] Killed process 22714 (syz-executor.3) total-vm:93540kB, anon-rss:432kB, file-rss:34816kB, shmem-rss:0kB [ 2921.849430] oom_reaper: reaped process 22714 (syz-executor.3), now anon-rss:0kB, file-rss:34812kB, shmem-rss:0kB [ 2922.004710] syz-executor.0 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 2922.017456] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2922.022579] CPU: 0 PID: 22775 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2922.030534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2922.039875] Call Trace: [ 2922.042458] dump_stack+0x1fc/0x2ef [ 2922.046086] dump_header+0x15d/0xc3f [ 2922.049797] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2922.054899] ? ___ratelimit+0x319/0x590 [ 2922.058882] oom_kill_process.cold+0x10/0x692 [ 2922.063378] ? check_preemption_disabled+0x41/0x280 [ 2922.068410] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2922.073772] out_of_memory+0x1072/0x1390 [ 2922.077846] ? oom_killer_disable+0x270/0x270 [ 2922.082355] ? mutex_trylock+0x15f/0x1a0 [ 2922.086424] __alloc_pages_nodemask+0x23a2/0x2890 [ 2922.091287] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2922.096150] ? mark_held_locks+0xf0/0xf0 [ 2922.100224] ? unwind_next_frame+0xeee/0x1400 [ 2922.104723] ? __save_stack_trace+0x72/0x190 [ 2922.109129] ? deref_stack_reg+0x134/0x1d0 [ 2922.113361] ? get_reg+0x176/0x1f0 [ 2922.116989] alloc_pages_vma+0xf2/0x780 [ 2922.120973] shmem_alloc_page+0x11c/0x1f0 [ 2922.125120] ? shmem_swapin+0x220/0x220 [ 2922.129151] ? find_get_pages_range_tag+0xc50/0xc50 [ 2922.134176] shmem_alloc_and_acct_page+0x15a/0x850 [ 2922.139112] ? mark_held_locks+0xf0/0xf0 [ 2922.143179] shmem_getpage_gfp+0x4e9/0x37f0 [ 2922.147525] ? shmem_alloc_and_acct_page+0x850/0x850 [ 2922.152715] ? lock_downgrade+0x720/0x720 [ 2922.156877] ? check_preemption_disabled+0x41/0x280 [ 2922.161906] shmem_fault+0x206/0x6b0 [ 2922.165630] ? shmem_read_mapping_page_gfp+0x170/0x170 [ 2922.170912] ? generic_file_mmap+0x160/0x160 [ 2922.175427] __do_fault+0x10b/0x4b0 [ 2922.179062] __handle_mm_fault+0x273b/0x41c0 [ 2922.183480] ? vm_insert_page+0x9c0/0x9c0 [ 2922.187743] ? __schedule+0x88f/0x2040 [ 2922.191645] ? check_preemption_disabled+0x41/0x280 [ 2922.196671] handle_mm_fault+0x436/0xb10 [ 2922.200743] __get_user_pages+0x6f0/0x1710 [ 2922.204991] ? follow_page_mask+0x1d00/0x1d00 [ 2922.209489] ? migrate_swap_stop+0x900/0x900 [ 2922.213909] ? __init_rwsem+0x150/0x150 [ 2922.217891] ? memset+0x20/0x40 [ 2922.221183] populate_vma_page_range+0x200/0x290 [ 2922.225945] __mm_populate+0x1ea/0x350 [ 2922.229833] ? populate_vma_page_range+0x290/0x290 [ 2922.234772] vm_mmap_pgoff+0x1e2/0x200 [ 2922.238666] ? vma_is_stack_for_current+0xc0/0xc0 [ 2922.243514] ? blkcg_maybe_throttle_current+0x56c/0xc10 [ 2922.248897] ksys_mmap_pgoff+0x45f/0x5a0 [ 2922.252959] ? find_mergeable_anon_vma+0x260/0x260 [ 2922.257898] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2922.263267] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2922.268287] ? do_syscall_64+0x21/0x620 [ 2922.272273] do_syscall_64+0xf9/0x620 [ 2922.276083] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2922.281384] RIP: 0033:0x7fdd7a70bae9 [ 2922.285450] Code: Bad RIP value. [ 2922.288816] RSP: 002b:00007fdd77c60188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2922.296531] RAX: ffffffffffffffda RBX: 00007fdd7a81f020 RCX: 00007fdd7a70bae9 [ 2922.303802] RDX: 0000000003000002 RSI: 0000000000b36000 RDI: 0000000020000000 [ 2922.311072] RBP: 00007fdd7a765f25 R08: ffffffffffffffff R09: 0000000000000000 [ 2922.318336] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 2922.325597] R13: 00007fff9cf0cd6f R14: 00007fdd77c60300 R15: 0000000000022000 [ 2922.501190] Mem-Info: [ 2922.507411] active_anon:145988 inactive_anon:1288253 isolated_anon:0 [ 2922.507411] active_file:33 inactive_file:17 isolated_file:0 [ 2922.507411] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2922.507411] slab_reclaimable:19436 slab_unreclaimable:127064 [ 2922.507411] mapped:1326915 shmem:1295001 pagetables:16363 bounce:0 [ 2922.507411] free:25154 free_pcp:0 free_cma:0 [ 2922.547759] Node 0 active_anon:523068kB inactive_anon:1443036kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1555448kB dirty:0kB writeback:0kB shmem:1449172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2922.624646] Node 1 active_anon:60884kB inactive_anon:3709976kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3752212kB dirty:0kB writeback:0kB shmem:3730832kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2922.664194] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2236kB inactive_anon:2212kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2922.696569] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2922.701635] Node 0 DMA32 free:35784kB min:35996kB low:44992kB high:53988kB active_anon:520832kB inactive_anon:1440824kB active_file:160kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13280kB pagetables:29672kB bounce:0kB free_pcp:832kB local_pcp:228kB free_cma:0kB [ 2922.756277] lowmem_reserve[]: 0 0 1 1 1 [ 2922.760296] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2922.798401] lowmem_reserve[]: 0 0 0 0 0 [ 2922.802420] Node 1 Normal free:53668kB min:53876kB low:67344kB high:80812kB active_anon:60884kB inactive_anon:3709976kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14464kB pagetables:35688kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2922.833109] lowmem_reserve[]: 0 0 0 0 0 [ 2922.837115] Node 0 DMA: 7*4kB (UMEH) 17*8kB (UMEH) 16*16kB (UMEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10980kB [ 2922.854046] Node 0 DMA32: 840*4kB (UMEH) 479*8kB (UMEH) 547*16kB (UEH) 660*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37064kB [ 2922.872509] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2922.884662] Node 1 Normal: 262*4kB (UME) 14*8kB (UMEH) 459*16kB (UMEH) 409*32kB (UMEH) 493*64kB (UMEH) 8*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54168kB [ 2922.900222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2922.909784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2922.918765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2922.927756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2922.936430] 1295049 total pagecache pages [ 2922.940785] 0 pages in swap cache [ 2922.944532] Swap cache stats: add 0, delete 0, find 0/0 [ 2922.949925] Free swap = 0kB [ 2922.952920] Total swap = 0kB [ 2922.956135] 2097051 pages RAM [ 2922.959220] 0 pages HighMem/MovableOnly [ 2922.963766] 369649 pages reserved [ 2922.967222] 0 pages cma reserved [ 2922.970571] Out of memory (oom_kill_allocating_task): Kill process 22775 (syz-executor.0) score 0 or sacrifice child [ 2922.981524] Killed process 22691 (syz-executor.0) total-vm:93540kB, anon-rss:420kB, file-rss:33940kB, shmem-rss:3824kB [ 2923.014212] IPVS: ftp: loaded support on port[0] = 21 [ 2923.038174] oom_reaper: reaped process 22691 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:3968kB 22:31:51 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:31:51 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001800b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:51 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001fb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2924.948587] IPVS: ftp: loaded support on port[0] = 21 22:31:52 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000020b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2929.107768] kworker/u4:17 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2929.182864] kworker/u4:17 cpuset=/ mems_allowed=0-1 [ 2929.187942] CPU: 0 PID: 22868 Comm: kworker/u4:17 Not tainted 4.19.211-syzkaller #0 [ 2929.195764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2929.205119] Call Trace: [ 2929.207716] dump_stack+0x1fc/0x2ef [ 2929.211346] dump_header+0x15d/0xc3f [ 2929.215066] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2929.220171] ? ___ratelimit+0x319/0x590 [ 2929.224166] oom_kill_process.cold+0x10/0x692 [ 2929.228657] ? oom_badness.part.0+0x135/0x6e0 [ 2929.233165] ? lock_downgrade+0x720/0x720 [ 2929.237337] ? check_preemption_disabled+0x41/0x280 [ 2929.242361] out_of_memory+0x34d/0x1390 [ 2929.246341] ? oom_killer_disable+0x270/0x270 [ 2929.250841] ? mutex_trylock+0x15f/0x1a0 [ 2929.254937] __alloc_pages_nodemask+0x23a2/0x2890 [ 2929.259797] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2929.264640] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2929.269576] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2929.274171] ? ____cache_alloc_node+0x156/0x1d0 [ 2929.278836] ? cache_grow_begin+0x64/0x8a0 [ 2929.283075] cache_grow_begin+0xa4/0x8a0 [ 2929.287148] fallback_alloc+0x213/0x2e0 [ 2929.291124] kmem_cache_alloc+0x1e4/0x370 [ 2929.295279] getname_kernel+0x4e/0x370 [ 2929.299170] call_usermodehelper_exec_async+0x500/0x6a0 [ 2929.304532] ? umh_complete+0x90/0x90 [ 2929.308453] ret_from_fork+0x24/0x30 [ 2929.593622] Mem-Info: [ 2929.596090] active_anon:143099 inactive_anon:1288329 isolated_anon:0 [ 2929.596090] active_file:393 inactive_file:631 isolated_file:83 [ 2929.596090] unevictable:0 dirty:3 writeback:0 unstable:0 [ 2929.596090] slab_reclaimable:19470 slab_unreclaimable:126719 [ 2929.596090] mapped:1327713 shmem:1292193 pagetables:16342 bounce:0 [ 2929.596090] free:26763 free_pcp:902 free_cma:0 [ 2929.643425] Node 0 active_anon:520920kB inactive_anon:1443384kB active_file:1904kB inactive_file:2616kB unevictable:0kB isolated(anon):0kB isolated(file):332kB mapped:1558860kB dirty:12kB writeback:0kB shmem:1447280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2929.812752] Node 1 active_anon:51476kB inactive_anon:3709932kB active_file:68kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3752392kB dirty:0kB writeback:0kB shmem:3721492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2930.005125] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2224kB inactive_anon:2228kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2930.208032] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2930.253595] Node 0 DMA32 free:38508kB min:35996kB low:44992kB high:53988kB active_anon:518724kB inactive_anon:1441056kB active_file:684kB inactive_file:2848kB unevictable:0kB writepending:96kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13376kB pagetables:29572kB bounce:0kB free_pcp:2392kB local_pcp:1036kB free_cma:0kB [ 2930.522515] lowmem_reserve[]: 0 0 1 1 1 [ 2930.526540] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2930.673873] lowmem_reserve[]: 0 0 0 0 0 [ 2930.679350] Node 1 Normal free:58512kB min:53876kB low:67344kB high:80812kB active_anon:51460kB inactive_anon:3709852kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14336kB pagetables:35584kB bounce:0kB free_pcp:1740kB local_pcp:244kB free_cma:0kB [ 2930.942589] lowmem_reserve[]: 0 0 0 0 0 [ 2930.946601] Node 0 DMA: 12*4kB (UMEH) 17*8kB (UMEH) 16*16kB (UMEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11000kB [ 2931.042528] Node 0 DMA32: 183*4kB (UMEH) 881*8kB (UEH) 549*16kB (UEH) 659*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37652kB [ 2931.127985] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2931.252805] Node 1 Normal: 747*4kB (UME) 253*8kB (UMEH) 678*16kB (MEH) 369*32kB (UMEH) 536*64kB (UMEH) 10*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 63252kB [ 2931.312790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2931.350938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 22:31:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001900b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:31:58 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 22:31:58 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:31:58 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd6f, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2931.434276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2931.502651] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2931.525145] 1292301 total pagecache pages [ 2931.535746] 0 pages in swap cache [ 2931.564482] Swap cache stats: add 0, delete 0, find 0/0 [ 2931.627836] Free swap = 0kB [ 2931.643107] IPVS: ftp: loaded support on port[0] = 21 [ 2931.659380] Total swap = 0kB [ 2931.681301] IPVS: ftp: loaded support on port[0] = 21 [ 2931.692466] 2097051 pages RAM [ 2931.734232] IPVS: ftp: loaded support on port[0] = 21 [ 2931.738349] 0 pages HighMem/MovableOnly [ 2931.783887] 369649 pages reserved [ 2931.830037] 0 pages cma reserved [ 2931.870263] Out of memory: Kill process 22645 (syz-executor.5) score 1006 or sacrifice child [ 2931.954690] Killed process 22645 (syz-executor.5) total-vm:93936kB, anon-rss:444kB, file-rss:34820kB, shmem-rss:11476kB [ 2934.045931] syz-executor.0 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 2934.110836] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2934.147154] CPU: 1 PID: 22903 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2934.155070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2934.164422] Call Trace: [ 2934.167014] dump_stack+0x1fc/0x2ef [ 2934.170639] dump_header+0x15d/0xc3f [ 2934.174448] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2934.179554] ? ___ratelimit+0x319/0x590 [ 2934.183528] oom_kill_process.cold+0x10/0x692 [ 2934.188112] ? check_preemption_disabled+0x41/0x280 [ 2934.193141] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2934.198422] out_of_memory+0x1072/0x1390 [ 2934.202494] ? oom_killer_disable+0x270/0x270 [ 2934.206990] ? mutex_trylock+0x15f/0x1a0 [ 2934.211053] __alloc_pages_nodemask+0x23a2/0x2890 [ 2934.215909] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2934.220764] ? mark_held_locks+0xf0/0xf0 [ 2934.224828] alloc_pages_vma+0xf2/0x780 [ 2934.228805] shmem_alloc_page+0x11c/0x1f0 [ 2934.232976] ? shmem_swapin+0x220/0x220 [ 2934.236969] ? find_get_pages_range_tag+0xc50/0xc50 [ 2934.242009] ? mark_held_locks+0xf0/0xf0 [ 2934.246082] shmem_alloc_and_acct_page+0x15a/0x850 [ 2934.251014] ? mark_held_locks+0xf0/0xf0 [ 2934.255074] shmem_getpage_gfp+0x4e9/0x37f0 [ 2934.259413] ? shmem_alloc_and_acct_page+0x850/0x850 [ 2934.264526] ? do_raw_spin_lock+0xcb/0x220 [ 2934.268759] ? lock_downgrade+0x720/0x720 [ 2934.272910] ? check_preemption_disabled+0x41/0x280 [ 2934.277929] shmem_fault+0x206/0x6b0 [ 2934.281653] ? shmem_read_mapping_page_gfp+0x170/0x170 [ 2934.286929] ? __handle_mm_fault+0x319e/0x41c0 [ 2934.291522] ? lock_downgrade+0x720/0x720 [ 2934.295682] __do_fault+0x10b/0x4b0 [ 2934.299305] ? do_raw_spin_unlock+0x171/0x230 [ 2934.303802] __handle_mm_fault+0x273b/0x41c0 [ 2934.308214] ? vm_insert_page+0x9c0/0x9c0 [ 2934.312375] ? check_preemption_disabled+0x41/0x280 [ 2934.317397] handle_mm_fault+0x436/0xb10 [ 2934.321643] __get_user_pages+0x6f0/0x1710 [ 2934.325894] ? follow_page_mask+0x1d00/0x1d00 [ 2934.330388] ? vma_set_page_prot+0x19c/0x250 [ 2934.334846] ? memset+0x20/0x40 [ 2934.338128] populate_vma_page_range+0x200/0x290 [ 2934.342888] __mm_populate+0x1ea/0x350 [ 2934.346775] ? populate_vma_page_range+0x290/0x290 [ 2934.351697] ? do_mmap+0x59c/0x1080 [ 2934.355324] vm_mmap_pgoff+0x1e2/0x200 [ 2934.359210] ? vma_is_stack_for_current+0xc0/0xc0 [ 2934.364046] ? rcu_nmi_exit+0xb3/0x180 [ 2934.367940] ksys_mmap_pgoff+0x45f/0x5a0 [ 2934.371998] ? find_mergeable_anon_vma+0x260/0x260 [ 2934.376923] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2934.382286] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2934.387300] ? do_syscall_64+0x21/0x620 [ 2934.391272] do_syscall_64+0xf9/0x620 [ 2934.395074] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2934.400257] RIP: 0033:0x7fdd7a70bae9 [ 2934.403976] Code: Bad RIP value. [ 2934.407337] RSP: 002b:00007fdd77c81188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2934.415034] RAX: ffffffffffffffda RBX: 00007fdd7a81ef60 RCX: 00007fdd7a70bae9 [ 2934.422293] RDX: 0000000003000002 RSI: 0000000000b36000 RDI: 0000000020000000 [ 2934.429552] RBP: 00007fdd7a765f25 R08: ffffffffffffffff R09: 0000000000000000 [ 2934.436813] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 2934.444074] R13: 00007fff9cf0cd6f R14: 00007fdd77c81300 R15: 0000000000022000 [ 2934.510673] Mem-Info: [ 2934.516452] active_anon:142998 inactive_anon:1290489 isolated_anon:0 [ 2934.516452] active_file:10 inactive_file:29 isolated_file:35 [ 2934.516452] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2934.516452] slab_reclaimable:19472 slab_unreclaimable:127722 [ 2934.516452] mapped:1329272 shmem:1294365 pagetables:16299 bounce:0 [ 2934.516452] free:25607 free_pcp:112 free_cma:0 [ 2934.555534] Node 0 active_anon:521056kB inactive_anon:1453680kB active_file:136kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1566436kB dirty:0kB writeback:0kB shmem:1457624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2934.610646] Node 1 active_anon:50936kB inactive_anon:3708276kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3750652kB dirty:0kB writeback:0kB shmem:3719836kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2934.644426] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2236kB inactive_anon:2224kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2934.685285] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2934.697111] Node 0 DMA32 free:35604kB min:35996kB low:44992kB high:53988kB active_anon:518820kB inactive_anon:1451392kB active_file:152kB inactive_file:396kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13312kB pagetables:29768kB bounce:0kB free_pcp:884kB local_pcp:440kB free_cma:0kB [ 2934.727006] lowmem_reserve[]: 0 0 1 1 1 [ 2934.731152] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2934.757431] lowmem_reserve[]: 0 0 0 0 0 [ 2934.761654] Node 1 Normal free:53668kB min:53876kB low:67344kB high:80812kB active_anon:50936kB inactive_anon:3708276kB active_file:4kB inactive_file:104kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14208kB pagetables:35336kB bounce:0kB free_pcp:304kB local_pcp:248kB free_cma:0kB [ 2934.791348] lowmem_reserve[]: 0 0 0 0 0 [ 2934.817856] Node 0 DMA: 5*4kB (UEH) 16*8kB (UEH) 16*16kB (UMEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10964kB [ 2934.870000] Node 0 DMA32: 455*4kB (UMH) 745*8kB (UMH) 552*16kB (UEH) 659*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37700kB [ 2934.889008] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2934.901182] Node 1 Normal: 208*4kB (UME) 43*8kB (UMEH) 613*16kB (UMEH) 351*32kB (UMEH) 483*64kB (UMEH) 8*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54152kB [ 2934.920199] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2934.929293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2934.940823] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2934.949746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2934.959076] 1294592 total pagecache pages [ 2934.963332] 0 pages in swap cache [ 2934.967552] Swap cache stats: add 0, delete 0, find 0/0 [ 2934.974355] Free swap = 0kB [ 2934.977439] Total swap = 0kB [ 2934.980480] 2097051 pages RAM [ 2934.986077] 0 pages HighMem/MovableOnly [ 2934.990762] 369649 pages reserved [ 2934.999556] 0 pages cma reserved [ 2935.003278] Out of memory (oom_kill_allocating_task): Kill process 22903 (syz-executor.0) score 0 or sacrifice child [ 2935.014373] Killed process 22903 (syz-executor.0) total-vm:93408kB, anon-rss:416kB, file-rss:34824kB, shmem-rss:9236kB [ 2935.025898] oom_reaper: reaped process 22903 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:9272kB 22:32:04 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000021b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:04 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001a00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:04 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x9c01}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:32:04 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2937.646831] IPVS: ftp: loaded support on port[0] = 21 [ 2937.700723] IPVS: ftp: loaded support on port[0] = 21 22:32:04 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001b00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:04 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000023b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:04 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600001c00b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:06 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000003fb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:10 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:32:10 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600002300b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:10 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xa002}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:32:10 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000fffb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:10 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd70, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:32:10 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:32:10 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000002b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2943.951112] IPVS: ftp: loaded support on port[0] = 21 [ 2943.958719] IPVS: ftp: loaded support on port[0] = 21 [ 2944.025401] IPVS: ftp: loaded support on port[0] = 21 [ 2944.144270] IPVS: ftp: loaded support on port[0] = 21 22:32:10 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000003b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:10 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000003b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:11 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000005b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2946.004397] systemd-udevd invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 2946.017423] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2946.023076] CPU: 0 PID: 4697 Comm: systemd-udevd Not tainted 4.19.211-syzkaller #0 [ 2946.031318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2946.040758] Call Trace: [ 2946.043353] dump_stack+0x1fc/0x2ef [ 2946.047007] dump_header+0x15d/0xc3f [ 2946.050753] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2946.055854] ? ___ratelimit+0x319/0x590 [ 2946.059828] oom_kill_process.cold+0x10/0x692 [ 2946.064344] ? oom_badness.part.0+0x135/0x6e0 [ 2946.068838] ? lock_downgrade+0x720/0x720 [ 2946.072986] ? check_preemption_disabled+0x41/0x280 [ 2946.078185] out_of_memory+0x34d/0x1390 [ 2946.082155] ? oom_killer_disable+0x270/0x270 [ 2946.086674] ? mutex_trylock+0x15f/0x1a0 [ 2946.090779] __alloc_pages_nodemask+0x23a2/0x2890 [ 2946.095616] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2946.100440] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2946.105326] ? ____cache_alloc_node+0x156/0x1d0 [ 2946.109993] ? cache_grow_begin+0x64/0x8a0 [ 2946.114241] cache_grow_begin+0xa4/0x8a0 [ 2946.118292] fallback_alloc+0x213/0x2e0 [ 2946.122269] kmem_cache_alloc+0x1e4/0x370 [ 2946.126406] getname_flags+0xce/0x590 [ 2946.130195] ? security_file_permission+0x1c0/0x220 [ 2946.135236] user_path_at_empty+0x2a/0x50 [ 2946.139383] do_readlinkat+0xcd/0x2f0 [ 2946.143170] ? cp_compat_stat+0x930/0x930 [ 2946.147331] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2946.152690] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2946.157787] __x64_sys_readlink+0x74/0xb0 [ 2946.161918] do_syscall_64+0xf9/0x620 [ 2946.165709] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2946.170887] RIP: 0033:0x7f94d8ce5087 [ 2946.174588] Code: Bad RIP value. [ 2946.177952] RSP: 002b:00007ffe7394ef48 EFLAGS: 00000297 ORIG_RAX: 0000000000000059 [ 2946.185662] RAX: ffffffffffffffda RBX: 00007ffe7394efe0 RCX: 00007f94d8ce5087 [ 2946.192928] RDX: 0000000000000200 RSI: 00007ffe7394f0f0 RDI: 00007ffe7394efc0 [ 2946.200193] RBP: 00007ffe7394f548 R08: 0000000000000001 R09: 0000000000000015 [ 2946.207450] R10: 0000000000000064 R11: 0000000000000297 R12: 00007ffe7394f0f0 [ 2946.214703] R13: 000056426712d010 R14: 000056426712d0e0 R15: 00007ffe7394efc0 [ 2946.224380] Mem-Info: [ 2946.228274] active_anon:143175 inactive_anon:1289921 isolated_anon:0 [ 2946.228274] active_file:21 inactive_file:206 isolated_file:0 [ 2946.228274] unevictable:0 dirty:1 writeback:0 unstable:0 [ 2946.228274] slab_reclaimable:19510 slab_unreclaimable:127914 [ 2946.228274] mapped:1328706 shmem:1293814 pagetables:16340 bounce:0 [ 2946.228274] free:25436 free_pcp:132 free_cma:0 [ 2946.352790] Node 0 active_anon:521044kB inactive_anon:1443924kB active_file:140kB inactive_file:172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1556420kB dirty:4kB writeback:0kB shmem:1447872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2946.423048] Node 1 active_anon:51656kB inactive_anon:3715760kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3758004kB dirty:0kB writeback:0kB shmem:3727384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2946.470687] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2228kB inactive_anon:2220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2946.503036] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2946.508169] Node 0 DMA32 free:36708kB min:35996kB low:44992kB high:53988kB active_anon:518816kB inactive_anon:1442208kB active_file:184kB inactive_file:512kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13344kB pagetables:29672kB bounce:0kB free_pcp:260kB local_pcp:32kB free_cma:0kB [ 2946.563353] lowmem_reserve[]: 0 0 1 1 1 [ 2946.567391] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2946.631559] lowmem_reserve[]: 0 0 0 0 0 [ 2946.635587] Node 1 Normal free:53536kB min:53876kB low:67344kB high:80812kB active_anon:51656kB inactive_anon:3715760kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14624kB pagetables:35576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2946.670601] lowmem_reserve[]: 0 0 0 0 0 [ 2946.680692] Node 0 DMA: 7*4kB (UMEH) 17*8kB (UMEH) 15*16kB (MEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10964kB [ 2946.706086] Node 0 DMA32: 656*4kB (UEH) 350*8kB (UMEH) 582*16kB (UMEH) 660*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35856kB [ 2946.727860] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2946.739074] Node 1 Normal: 77*4kB (UME) 89*8kB (UEH) 58*16kB (UMEH) 453*32kB (UMEH) 523*64kB (MEH) 27*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53372kB [ 2946.771503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2946.780368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2946.848720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2946.859226] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2946.868041] 1294098 total pagecache pages [ 2946.872276] 0 pages in swap cache [ 2946.875730] Swap cache stats: add 0, delete 0, find 0/0 [ 2946.881089] Free swap = 0kB [ 2946.884167] Total swap = 0kB [ 2946.887183] 2097051 pages RAM [ 2946.890279] 0 pages HighMem/MovableOnly [ 2946.894679] 369649 pages reserved [ 2946.898132] 0 pages cma reserved [ 2946.901556] Out of memory: Kill process 8254 (syz-executor.4) score 1006 or sacrifice child [ 2946.910082] Killed process 8254 (syz-executor.4) total-vm:93672kB, anon-rss:424kB, file-rss:34820kB, shmem-rss:11480kB [ 2946.936163] oom_reaper: reaped process 8254 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:11480kB 22:32:13 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000004b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2947.324009] IPVS: ftp: loaded support on port[0] = 21 22:32:14 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000005b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:20 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000006b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:20 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:32:20 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000006b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:20 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xa101}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:32:20 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:32:20 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd71, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2954.154213] IPVS: ftp: loaded support on port[0] = 21 [ 2954.195741] IPVS: ftp: loaded support on port[0] = 21 [ 2954.285774] IPVS: ftp: loaded support on port[0] = 21 [ 2954.296518] IPVS: ftp: loaded support on port[0] = 21 22:32:21 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000007b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:21 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000007b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:21 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000008b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:21 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000009b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2955.418973] IPVS: ftp: loaded support on port[0] = 21 [ 2955.539616] IPVS: ftp: loaded support on port[0] = 21 22:32:22 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:32:22 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000009b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2956.086059] IPVS: ftp: loaded support on port[0] = 21 22:32:26 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000ab91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:26 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xa602}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:32:26 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:32:26 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000ab91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:26 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:32:26 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd72, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2960.099568] IPVS: ftp: loaded support on port[0] = 21 [ 2960.158040] IPVS: ftp: loaded support on port[0] = 21 [ 2960.173018] ieee802154 phy0 wpan0: encryption failed: -22 [ 2960.178663] ieee802154 phy1 wpan1: encryption failed: -22 [ 2960.274055] IPVS: ftp: loaded support on port[0] = 21 22:32:26 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000bb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:27 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000bb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2960.425979] IPVS: ftp: loaded support on port[0] = 21 22:32:27 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000cb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:27 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000cb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2961.792278] systemd-udevd invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2961.805980] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2961.833402] CPU: 1 PID: 23524 Comm: systemd-udevd Not tainted 4.19.211-syzkaller #0 [ 2961.841220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2961.850650] Call Trace: [ 2961.853242] dump_stack+0x1fc/0x2ef [ 2961.856876] dump_header+0x15d/0xc3f [ 2961.860581] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2961.865676] ? ___ratelimit+0x319/0x590 [ 2961.869640] oom_kill_process.cold+0x10/0x692 [ 2961.874127] ? check_preemption_disabled+0x41/0x280 [ 2961.879139] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2961.884403] out_of_memory+0x1072/0x1390 [ 2961.888455] ? oom_killer_disable+0x270/0x270 [ 2961.893286] ? mutex_trylock+0x15f/0x1a0 [ 2961.897353] __alloc_pages_nodemask+0x23a2/0x2890 [ 2961.902215] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2961.907048] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2961.911880] ? __bpf_prog_run64+0xd0/0xd0 [ 2961.916130] ? ____cache_alloc_node+0x156/0x1d0 [ 2961.920785] ? cache_grow_begin+0x64/0x8a0 [ 2961.925007] cache_grow_begin+0xa4/0x8a0 [ 2961.929063] fallback_alloc+0x213/0x2e0 [ 2961.933027] kmem_cache_alloc+0x1e4/0x370 [ 2961.937165] getname_flags+0xce/0x590 [ 2961.940954] user_path_at_empty+0x2a/0x50 [ 2961.945091] vfs_statx+0x113/0x210 [ 2961.948631] ? do_readlinkat+0x2f0/0x2f0 [ 2961.952689] ? __schedule+0x88f/0x2040 [ 2961.956562] ? rcu_nmi_exit+0xb3/0x180 [ 2961.960438] __se_sys_newstat+0x96/0x120 [ 2961.964489] ? __se_sys_lstat+0x120/0x120 [ 2961.968625] ? __secure_computing+0x104/0x360 [ 2961.973109] ? syscall_trace_enter+0x3b7/0xd60 [ 2961.977766] ? syscall_slow_exit_work+0x630/0x630 [ 2961.982694] ? do_syscall_64+0x4f/0x620 [ 2961.987004] do_syscall_64+0xf9/0x620 [ 2961.990793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2961.995967] RIP: 0033:0x7f94d8ce3295 [ 2961.999669] Code: Bad RIP value. [ 2962.003113] RSP: 002b:00007ffe7394a9b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2962.010803] RAX: ffffffffffffffda RBX: 0000564267135600 RCX: 00007f94d8ce3295 [ 2962.018064] RDX: 00007ffe7394ae30 RSI: 00007ffe7394ae30 RDI: 00007ffe7394aa30 [ 2962.025324] RBP: 0000564265c0fdfc R08: c0c4080000000000 R09: 0000000000000000 [ 2962.032574] R10: 0000000000000001 R11: 0000000000000246 R12: 0000564267141d40 [ 2962.039832] R13: 00007ffe7394ae30 R14: 00007ffe7394aa30 R15: 000056426712dca0 [ 2962.296914] Mem-Info: [ 2962.299364] active_anon:143187 inactive_anon:1289056 isolated_anon:0 [ 2962.299364] active_file:14 inactive_file:42 isolated_file:20 [ 2962.299364] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2962.299364] slab_reclaimable:19603 slab_unreclaimable:128864 [ 2962.299364] mapped:1327773 shmem:1292944 pagetables:16334 bounce:0 [ 2962.299364] free:25264 free_pcp:4 free_cma:0 [ 2962.337694] Node 0 active_anon:521072kB inactive_anon:1447368kB active_file:0kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:1559932kB dirty:0kB writeback:0kB shmem:1451320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2962.366473] Node 1 active_anon:51676kB inactive_anon:3708856kB active_file:72kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3751160kB dirty:0kB writeback:0kB shmem:3720456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2962.395075] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2240kB inactive_anon:2216kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2962.436534] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2962.441653] Node 0 DMA32 free:36152kB min:35996kB low:44992kB high:53988kB active_anon:518832kB inactive_anon:1445152kB active_file:96kB inactive_file:96kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13280kB pagetables:29692kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 2962.475956] lowmem_reserve[]: 0 0 1 1 1 [ 2962.479940] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2962.508491] lowmem_reserve[]: 0 0 0 0 0 [ 2962.586645] Node 1 Normal free:53924kB min:53876kB low:67344kB high:80812kB active_anon:51676kB inactive_anon:3708856kB active_file:312kB inactive_file:204kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14528kB pagetables:35552kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2962.620661] lowmem_reserve[]: 0 0 0 0 0 [ 2962.625304] Node 0 DMA: 6*4kB (UEH) 17*8kB (UMEH) 16*16kB (UMEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10976kB [ 2962.642292] Node 0 DMA32: 73*4kB (UH) 763*8kB (UH) 490*16kB (UEH) 674*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35804kB [ 2962.656524] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2962.685060] Node 1 Normal: 75*4kB (UME) 93*8kB (UMEH) 149*16kB (UMEH) 442*32kB (UMEH) 550*64kB (MEH) 3*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53156kB [ 2962.712104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2962.721033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2962.729616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2962.738675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2962.747304] 1293191 total pagecache pages [ 2962.752260] 0 pages in swap cache [ 2962.756303] Swap cache stats: add 0, delete 0, find 0/0 [ 2962.762377] Free swap = 0kB [ 2962.767519] Total swap = 0kB [ 2962.772006] 2097051 pages RAM [ 2962.775106] 0 pages HighMem/MovableOnly [ 2962.779157] 369649 pages reserved [ 2962.782686] 0 pages cma reserved [ 2962.786046] Out of memory (oom_kill_allocating_task): Kill process 23524 (systemd-udevd) score 0 or sacrifice child [ 2962.796693] Killed process 23524 (systemd-udevd) total-vm:43796kB, anon-rss:1176kB, file-rss:0kB, shmem-rss:0kB [ 2962.808843] oom_reaper: reaped process 23524 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2962.914198] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2962.964268] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2962.969423] CPU: 0 PID: 23493 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 2962.977301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2962.986649] Call Trace: [ 2962.989240] dump_stack+0x1fc/0x2ef [ 2962.992877] dump_header+0x15d/0xc3f [ 2962.996592] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2963.001694] ? ___ratelimit+0x319/0x590 [ 2963.005773] oom_kill_process.cold+0x10/0x692 [ 2963.010272] ? check_preemption_disabled+0x41/0x280 [ 2963.015291] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2963.020567] out_of_memory+0x1072/0x1390 [ 2963.024632] ? oom_killer_disable+0x270/0x270 [ 2963.029134] ? mutex_trylock+0x15f/0x1a0 [ 2963.033198] __alloc_pages_nodemask+0x23a2/0x2890 [ 2963.038093] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2963.042937] ? should_fail+0x142/0x7b0 [ 2963.046823] ? fs_reclaim_release+0xd0/0x110 [ 2963.051236] ? check_preemption_disabled+0x41/0x280 [ 2963.056253] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2963.061266] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2963.066027] copy_process.part.0+0x3cf/0x8260 [ 2963.070613] ? __handle_mm_fault+0x2bb6/0x41c0 [ 2963.075198] ? lock_downgrade+0x720/0x720 [ 2963.079365] ? up_read+0x17/0x110 [ 2963.082836] ? mark_held_locks+0xf0/0xf0 [ 2963.086901] ? __cleanup_sighand+0x60/0x60 [ 2963.091129] ? do_mmap+0x59c/0x1080 [ 2963.094758] ? vm_insert_page+0x9c0/0x9c0 [ 2963.098909] ? __do_page_fault+0x6d1/0xd60 [ 2963.103147] _do_fork+0x22f/0xf30 [ 2963.106602] ? fork_idle+0x220/0x220 [ 2963.110311] ? up_read+0x17/0x110 [ 2963.113765] ? __do_page_fault+0x180/0xd60 [ 2963.118090] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2963.123453] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2963.128467] ? do_syscall_64+0x21/0x620 [ 2963.132437] do_syscall_64+0xf9/0x620 [ 2963.136242] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2963.141423] RIP: 0033:0x7fc8ddd8ff11 [ 2963.145128] Code: Bad RIP value. [ 2963.148503] RSP: 002b:00007ffcad414b28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2963.156289] RAX: ffffffffffffffda RBX: 00007fc8db2e3700 RCX: 00007fc8ddd8ff11 [ 2963.163554] RDX: 00007fc8db2e39d0 RSI: 00007fc8db2e32f0 RDI: 00000000003d0f00 [ 2963.170902] RBP: 00007ffcad414d60 R08: 00007fc8db2e3700 R09: 00007fc8db2e3700 [ 2963.178164] R10: 00007fc8db2e39d0 R11: 0000000000000206 R12: 00007ffcad414bde [ 2963.185525] R13: 00007ffcad414bdf R14: 00007fc8db2e3300 R15: 0000000000022000 [ 2963.263875] Mem-Info: [ 2963.266343] active_anon:143135 inactive_anon:1289265 isolated_anon:0 [ 2963.266343] active_file:132 inactive_file:145 isolated_file:29 [ 2963.266343] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2963.266343] slab_reclaimable:19603 slab_unreclaimable:128544 [ 2963.266343] mapped:1328224 shmem:1293153 pagetables:16314 bounce:0 [ 2963.266343] free:25138 free_pcp:392 free_cma:0 [ 2963.300846] Node 0 active_anon:521016kB inactive_anon:1447368kB active_file:144kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1560084kB dirty:0kB writeback:0kB shmem:1451320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2963.329788] Node 1 active_anon:51524kB inactive_anon:3709692kB active_file:0kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3751912kB dirty:0kB writeback:0kB shmem:3721292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2963.419282] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2240kB inactive_anon:2216kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2963.482934] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2963.488194] Node 0 DMA32 free:35360kB min:35996kB low:44992kB high:53988kB active_anon:518776kB inactive_anon:1445656kB active_file:548kB inactive_file:472kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13248kB pagetables:29656kB bounce:0kB free_pcp:496kB local_pcp:256kB free_cma:0kB [ 2963.518715] lowmem_reserve[]: 0 0 1 1 1 [ 2963.523417] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2963.559154] lowmem_reserve[]: 0 0 0 0 0 [ 2963.565390] Node 1 Normal free:53716kB min:53876kB low:67344kB high:80812kB active_anon:51524kB inactive_anon:3709692kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14528kB pagetables:35508kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2963.596544] lowmem_reserve[]: 0 0 0 0 0 [ 2963.600848] Node 0 DMA: 6*4kB (UEH) 17*8kB (UMEH) 16*16kB (UMEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10976kB [ 2963.617521] Node 0 DMA32: 43*4kB (UMH) 770*8kB (UMH) 492*16kB (UEH) 677*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35868kB [ 2963.646344] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2963.657521] Node 1 Normal: 167*4kB (UME) 180*8kB (UMEH) 149*16kB (UMEH) 442*32kB (UMEH) 550*64kB (MEH) 4*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54348kB [ 2963.673972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2963.683227] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2963.692070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2963.701086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2963.709641] 1293409 total pagecache pages [ 2963.714497] 0 pages in swap cache [ 2963.718095] Swap cache stats: add 0, delete 0, find 0/0 [ 2963.726089] Free swap = 0kB [ 2963.729142] Total swap = 0kB [ 2963.732815] 2097051 pages RAM [ 2963.736025] 0 pages HighMem/MovableOnly [ 2963.739975] 369649 pages reserved [ 2963.745853] 0 pages cma reserved [ 2963.749226] Out of memory (oom_kill_allocating_task): Kill process 23493 (syz-executor.4) score 0 or sacrifice child [ 2963.759980] Killed process 23493 (syz-executor.4) total-vm:93540kB, anon-rss:380kB, file-rss:33892kB, shmem-rss:11480kB [ 2963.774162] oom_reaper: reaped process 23493 (syz-executor.4), now anon-rss:0kB, file-rss:33888kB, shmem-rss:11480kB [ 2963.942801] syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2963.990069] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2964.006405] CPU: 1 PID: 23558 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2964.014319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2964.023674] Call Trace: [ 2964.026274] dump_stack+0x1fc/0x2ef [ 2964.029913] dump_header+0x15d/0xc3f [ 2964.033635] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2964.038742] ? ___ratelimit+0x319/0x590 [ 2964.042724] oom_kill_process.cold+0x10/0x692 [ 2964.047226] ? check_preemption_disabled+0x41/0x280 [ 2964.052250] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2964.057530] out_of_memory+0x1072/0x1390 [ 2964.061599] ? oom_killer_disable+0x270/0x270 [ 2964.066099] ? mutex_trylock+0x15f/0x1a0 [ 2964.070166] __alloc_pages_nodemask+0x23a2/0x2890 [ 2964.075030] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2964.079870] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2964.084725] ? mark_held_locks+0xf0/0xf0 [ 2964.088781] ? ____cache_alloc_node+0x156/0x1d0 [ 2964.093448] ? cache_grow_begin+0x64/0x8a0 [ 2964.097683] cache_grow_begin+0xa4/0x8a0 [ 2964.101750] fallback_alloc+0x213/0x2e0 [ 2964.105731] kmem_cache_alloc+0x1e4/0x370 [ 2964.109879] getname_flags+0xce/0x590 [ 2964.113691] user_path_at_empty+0x2a/0x50 [ 2964.117838] ksys_chdir+0x84/0x1d0 [ 2964.121373] ? __ia32_sys_access+0x70/0x70 [ 2964.125620] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2964.130998] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2964.136024] __x64_sys_chdir+0x2d/0x40 [ 2964.139916] do_syscall_64+0xf9/0x620 [ 2964.143720] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2964.148906] RIP: 0033:0x7fc877af6c57 [ 2964.152618] Code: Bad RIP value. [ 2964.155976] RSP: 002b:00007ffc967ec868 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 2964.163683] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc877af6c57 [ 2964.170950] RDX: 0000000000000001 RSI: 00007fc877bdcef0 RDI: 00007ffc967ec8f0 [ 2964.178216] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fc877bdcef0 [ 2964.185484] R10: 0000555555e9b400 R11: 0000000000000246 R12: 0000000000000001 [ 2964.192755] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffc967ec930 [ 2964.242001] Mem-Info: [ 2964.244479] active_anon:143135 inactive_anon:1289415 isolated_anon:0 [ 2964.244479] active_file:92 inactive_file:276 isolated_file:28 [ 2964.244479] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2964.244479] slab_reclaimable:19603 slab_unreclaimable:128207 [ 2964.244479] mapped:1328449 shmem:1293303 pagetables:16314 bounce:0 [ 2964.244479] free:25238 free_pcp:500 free_cma:0 [ 2964.293835] Node 0 active_anon:521016kB inactive_anon:1447968kB active_file:284kB inactive_file:360kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1561184kB dirty:0kB writeback:0kB shmem:1451920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2964.350391] Node 1 active_anon:51524kB inactive_anon:3709692kB active_file:84kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3752012kB dirty:0kB writeback:0kB shmem:3721292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2964.393049] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2240kB inactive_anon:2216kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2964.445094] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2964.450151] Node 0 DMA32 free:37628kB min:35996kB low:44992kB high:53988kB active_anon:518776kB inactive_anon:1445656kB active_file:0kB inactive_file:372kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13248kB pagetables:29656kB bounce:0kB free_pcp:644kB local_pcp:200kB free_cma:0kB [ 2964.547630] lowmem_reserve[]: 0 0 1 1 1 [ 2964.569270] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2964.654546] lowmem_reserve[]: 0 0 0 0 0 [ 2964.658848] Node 1 Normal free:53656kB min:53876kB low:67344kB high:80812kB active_anon:51524kB inactive_anon:3709692kB active_file:84kB inactive_file:68kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14336kB pagetables:35508kB bounce:0kB free_pcp:808kB local_pcp:384kB free_cma:0kB [ 2964.689570] lowmem_reserve[]: 0 0 0 0 0 [ 2964.693772] Node 0 DMA: 10*4kB (UMEH) 17*8kB (UMEH) 16*16kB (UMEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10992kB [ 2964.710497] Node 0 DMA32: 9*4kB (MH) 790*8kB (UH) 496*16kB (UEH) 677*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35956kB [ 2964.735071] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2964.759248] Node 1 Normal: 184*4kB (UME) 179*8kB (UMEH) 149*16kB (UMEH) 443*32kB (UMEH) 551*64kB (MEH) 4*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54504kB [ 2964.796914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2964.819488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2964.835862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2964.877640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2964.909161] 1293575 total pagecache pages [ 2964.922401] 0 pages in swap cache [ 2964.925939] Swap cache stats: add 0, delete 0, find 0/0 [ 2964.935304] Free swap = 0kB [ 2964.938397] Total swap = 0kB [ 2964.942322] 2097051 pages RAM [ 2964.945423] 0 pages HighMem/MovableOnly [ 2964.949449] 369649 pages reserved [ 2964.957078] 0 pages cma reserved [ 2964.961988] Out of memory (oom_kill_allocating_task): Kill process 23558 (syz-executor.3) score 0 or sacrifice child [ 2964.979792] Killed process 23558 (syz-executor.3) total-vm:93276kB, anon-rss:384kB, file-rss:34640kB, shmem-rss:0kB [ 2965.046456] oom_reaper: reaped process 23558 (syz-executor.3), now anon-rss:0kB, file-rss:34640kB, shmem-rss:0kB [ 2965.175392] kworker/u4:14 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2965.255174] kworker/u4:14 cpuset=/ mems_allowed=0-1 [ 2965.263926] CPU: 1 PID: 6871 Comm: kworker/u4:14 Not tainted 4.19.211-syzkaller #0 [ 2965.271652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2965.281020] Workqueue: events_unbound call_usermodehelper_exec_work [ 2965.287425] Call Trace: [ 2965.290021] dump_stack+0x1fc/0x2ef [ 2965.293659] dump_header+0x15d/0xc3f [ 2965.297382] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2965.302521] ? ___ratelimit+0x319/0x590 [ 2965.306516] oom_kill_process.cold+0x10/0x692 [ 2965.311038] ? oom_badness.part.0+0x135/0x6e0 [ 2965.315550] ? lock_downgrade+0x720/0x720 [ 2965.319723] ? check_preemption_disabled+0x41/0x280 [ 2965.324753] out_of_memory+0x34d/0x1390 [ 2965.328733] ? oom_killer_disable+0x270/0x270 [ 2965.333310] ? mutex_trylock+0x15f/0x1a0 [ 2965.337367] __alloc_pages_nodemask+0x23a2/0x2890 [ 2965.342204] ? __lock_acquire+0x6de/0x3ff0 [ 2965.346434] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2965.351267] ? should_fail+0x142/0x7b0 [ 2965.355140] ? fs_reclaim_release+0xd0/0x110 [ 2965.359541] ? check_preemption_disabled+0x41/0x280 [ 2965.364560] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2965.369566] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2965.374317] copy_process.part.0+0x3cf/0x8260 [ 2965.378814] ? __lock_acquire+0x6de/0x3ff0 [ 2965.383040] ? __lock_acquire+0x6de/0x3ff0 [ 2965.387264] ? umh_complete+0x90/0x90 [ 2965.391054] ? __cleanup_sighand+0x60/0x60 [ 2965.395275] ? mark_held_locks+0xf0/0xf0 [ 2965.399351] ? __lock_acquire+0x6de/0x3ff0 [ 2965.403590] _do_fork+0x22f/0xf30 [ 2965.407036] ? umh_complete+0x90/0x90 [ 2965.410915] ? fork_idle+0x220/0x220 [ 2965.414660] ? lock_acquire+0x170/0x3c0 [ 2965.418793] ? debug_object_deactivate+0xfc/0x2e0 [ 2965.423640] ? trace_hardirqs_off+0x64/0x200 [ 2965.428043] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2965.433150] ? umh_complete+0x90/0x90 [ 2965.436947] kernel_thread+0x2f/0x40 [ 2965.440668] call_usermodehelper_exec_work+0x16d/0x260 [ 2965.445975] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 2965.451506] process_one_work+0x864/0x1570 [ 2965.455747] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2965.460420] worker_thread+0x64c/0x1130 [ 2965.464405] ? __kthread_parkme+0x133/0x1e0 [ 2965.468712] ? process_one_work+0x1570/0x1570 [ 2965.473190] kthread+0x33f/0x460 [ 2965.476540] ? kthread_park+0x180/0x180 [ 2965.480501] ret_from_fork+0x24/0x30 [ 2965.519355] Mem-Info: [ 2965.522708] active_anon:143117 inactive_anon:1289438 isolated_anon:0 [ 2965.522708] active_file:223 inactive_file:172 isolated_file:32 [ 2965.522708] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2965.522708] slab_reclaimable:19603 slab_unreclaimable:128244 [ 2965.522708] mapped:1328498 shmem:1293326 pagetables:16314 bounce:0 [ 2965.522708] free:25457 free_pcp:238 free_cma:0 [ 2965.565252] Node 0 active_anon:521012kB inactive_anon:1448060kB active_file:228kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1560780kB dirty:0kB writeback:0kB shmem:1452012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2965.596201] Node 1 active_anon:51456kB inactive_anon:3709692kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3751912kB dirty:0kB writeback:0kB shmem:3721292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2965.625966] Node 0 DMA free:10992kB min:204kB low:252kB high:300kB active_anon:2224kB inactive_anon:2216kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2965.653274] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2965.658858] Node 0 DMA32 free:35932kB min:35996kB low:44992kB high:53988kB active_anon:518788kB inactive_anon:1445844kB active_file:548kB inactive_file:452kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13248kB pagetables:29656kB bounce:0kB free_pcp:996kB local_pcp:0kB free_cma:0kB [ 2965.693596] lowmem_reserve[]: 0 0 1 1 1 [ 2965.697594] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2965.723688] lowmem_reserve[]: 0 0 0 0 0 [ 2965.727801] Node 1 Normal free:54060kB min:53876kB low:67344kB high:80812kB active_anon:51456kB inactive_anon:3709692kB active_file:104kB inactive_file:200kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14304kB pagetables:35508kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2965.757657] lowmem_reserve[]: 0 0 0 0 0 [ 2965.761739] Node 0 DMA: 12*4kB (UMEH) 17*8kB (UMEH) 15*16kB (UEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10984kB [ 2965.781691] Node 0 DMA32: 88*4kB (UMH) 1065*8kB (UMH) 495*16kB (UEH) 677*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38456kB [ 2965.796981] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2965.808162] Node 1 Normal: 159*4kB (UME) 146*8kB (UMEH) 149*16kB (UMEH) 441*32kB (UMEH) 551*64kB (MEH) 5*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54204kB [ 2965.824386] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2965.833296] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2965.842001] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2965.851145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2965.859811] 1293617 total pagecache pages [ 2965.864080] 0 pages in swap cache [ 2965.867532] Swap cache stats: add 0, delete 0, find 0/0 [ 2965.873946] Free swap = 0kB [ 2965.876972] Total swap = 0kB [ 2965.879986] 2097051 pages RAM [ 2965.883509] 0 pages HighMem/MovableOnly [ 2965.887477] 369649 pages reserved [ 2965.890996] 0 pages cma reserved [ 2965.894360] Out of memory: Kill process 13210 (syz-executor.4) score 1006 or sacrifice child [ 2965.904058] Killed process 13210 (syz-executor.4) total-vm:93672kB, anon-rss:424kB, file-rss:34820kB, shmem-rss:11480kB 22:32:32 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000010b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:33 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000012b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:34 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000db91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:41 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000013b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:41 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:32:41 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xaa00}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2974.860190] IPVS: ftp: loaded support on port[0] = 21 [ 2974.903900] IPVS: ftp: loaded support on port[0] = 21 [ 2975.707047] IPVS: ftp: loaded support on port[0] = 21 22:32:43 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000014b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:43 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000eb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:43 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd73, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:32:43 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xb400}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:32:43 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:32:43 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 2976.954671] IPVS: ftp: loaded support on port[0] = 21 [ 2977.003773] IPVS: ftp: loaded support on port[0] = 21 [ 2977.155988] IPVS: ftp: loaded support on port[0] = 21 22:32:43 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000015b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:44 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000fb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2977.476700] IPVS: ftp: loaded support on port[0] = 21 22:32:44 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000011b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:44 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000016b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2978.316107] IPVS: ftp: loaded support on port[0] = 21 [ 2978.783238] IPVS: ftp: loaded support on port[0] = 21 22:32:45 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:32:45 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000017b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2979.145681] IPVS: ftp: loaded support on port[0] = 21 22:32:48 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000012b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:49 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000018b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2983.101370] print_req_error: I/O error, dev loop2, sector 64 [ 2983.107253] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 22:32:52 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:32:52 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000013b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:52 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000019b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:52 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xc0fe}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:32:52 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:32:52 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd74, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 2986.099905] IPVS: ftp: loaded support on port[0] = 21 22:32:52 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001ab91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:52 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000014b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2986.159113] IPVS: ftp: loaded support on port[0] = 21 [ 2986.298362] IPVS: ftp: loaded support on port[0] = 21 22:32:53 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001bb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:32:53 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000015b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2986.767313] IPVS: ftp: loaded support on port[0] = 21 [ 2987.814162] syz-executor.0 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 2987.838898] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2987.844244] CPU: 0 PID: 24009 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2987.852133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2987.861488] Call Trace: [ 2987.864090] dump_stack+0x1fc/0x2ef [ 2987.867715] dump_header+0x15d/0xc3f [ 2987.871420] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2987.876509] ? ___ratelimit+0x319/0x590 [ 2987.880471] oom_kill_process.cold+0x10/0x692 [ 2987.884963] ? check_preemption_disabled+0x41/0x280 [ 2987.889979] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2987.895251] out_of_memory+0x1072/0x1390 [ 2987.899308] ? oom_killer_disable+0x270/0x270 [ 2987.903792] ? mutex_trylock+0x15f/0x1a0 [ 2987.907843] __alloc_pages_nodemask+0x23a2/0x2890 [ 2987.912693] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2987.917535] ? mark_held_locks+0xf0/0xf0 [ 2987.921586] alloc_pages_vma+0xf2/0x780 [ 2987.925551] shmem_alloc_page+0x11c/0x1f0 [ 2987.929684] ? shmem_swapin+0x220/0x220 [ 2987.933658] ? find_get_pages_range_tag+0xc50/0xc50 [ 2987.938669] ? mark_held_locks+0xf0/0xf0 [ 2987.942722] shmem_alloc_and_acct_page+0x15a/0x850 [ 2987.947640] ? mark_held_locks+0xf0/0xf0 [ 2987.951779] shmem_getpage_gfp+0x4e9/0x37f0 [ 2987.956119] ? shmem_alloc_and_acct_page+0x850/0x850 [ 2987.961561] ? lock_downgrade+0x720/0x720 [ 2987.965704] ? check_preemption_disabled+0x41/0x280 [ 2987.970708] shmem_fault+0x206/0x6b0 [ 2987.974409] ? shmem_read_mapping_page_gfp+0x170/0x170 [ 2987.979672] ? __handle_mm_fault+0x319e/0x41c0 [ 2987.984258] ? lock_downgrade+0x720/0x720 [ 2987.988393] __do_fault+0x10b/0x4b0 [ 2987.992014] ? do_raw_spin_unlock+0x171/0x230 [ 2987.996505] __handle_mm_fault+0x273b/0x41c0 [ 2988.000915] ? vm_insert_page+0x9c0/0x9c0 [ 2988.005676] ? check_preemption_disabled+0x41/0x280 [ 2988.011118] handle_mm_fault+0x436/0xb10 [ 2988.015179] __get_user_pages+0x6f0/0x1710 [ 2988.019406] ? follow_page_mask+0x1d00/0x1d00 [ 2988.023886] ? vma_set_page_prot+0x19c/0x250 [ 2988.028371] ? memset+0x20/0x40 [ 2988.031639] populate_vma_page_range+0x200/0x290 [ 2988.036381] __mm_populate+0x1ea/0x350 [ 2988.040262] ? populate_vma_page_range+0x290/0x290 [ 2988.045179] ? do_mmap+0x59c/0x1080 [ 2988.048806] vm_mmap_pgoff+0x1e2/0x200 [ 2988.052687] ? vma_is_stack_for_current+0xc0/0xc0 [ 2988.057524] ksys_mmap_pgoff+0x45f/0x5a0 [ 2988.061580] ? find_mergeable_anon_vma+0x260/0x260 [ 2988.066501] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2988.071849] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2988.076852] ? do_syscall_64+0x21/0x620 [ 2988.080812] do_syscall_64+0xf9/0x620 [ 2988.084610] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2988.089785] RIP: 0033:0x7fdd7a70bae9 [ 2988.093485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2988.112368] RSP: 002b:00007fdd77c81188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2988.120060] RAX: ffffffffffffffda RBX: 00007fdd7a81ef60 RCX: 00007fdd7a70bae9 [ 2988.127331] RDX: 0000000003000002 RSI: 0000000000b36000 RDI: 0000000020000000 [ 2988.134584] RBP: 00007fdd7a765f25 R08: ffffffffffffffff R09: 0000000000000000 [ 2988.141860] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 2988.149125] R13: 00007fff9cf0cd6f R14: 00007fdd77c81300 R15: 0000000000022000 [ 2988.359302] Mem-Info: [ 2988.362338] active_anon:143239 inactive_anon:1288740 isolated_anon:0 [ 2988.362338] active_file:35 inactive_file:125 isolated_file:29 [ 2988.362338] unevictable:0 dirty:4 writeback:0 unstable:0 [ 2988.362338] slab_reclaimable:19596 slab_unreclaimable:128722 [ 2988.362338] mapped:1327602 shmem:1292618 pagetables:16385 bounce:0 [ 2988.362338] free:25522 free_pcp:395 free_cma:0 [ 2988.397517] Node 0 active_anon:521068kB inactive_anon:1448140kB active_file:208kB inactive_file:260kB unevictable:0kB isolated(anon):0kB isolated(file):244kB mapped:1561308kB dirty:16kB writeback:0kB shmem:1452084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2988.432761] Node 1 active_anon:51888kB inactive_anon:3706820kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3749200kB dirty:0kB writeback:0kB shmem:3718388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2988.461614] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2224kB inactive_anon:2244kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2988.489650] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2988.495663] Node 0 DMA32 free:36972kB min:35996kB low:44992kB high:53988kB active_anon:518844kB inactive_anon:1445896kB active_file:336kB inactive_file:0kB unevictable:0kB writepending:16kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13344kB pagetables:29892kB bounce:0kB free_pcp:1516kB local_pcp:168kB free_cma:0kB [ 2988.528425] lowmem_reserve[]: 0 0 1 1 1 [ 2988.533057] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2988.564287] lowmem_reserve[]: 0 0 0 0 0 [ 2988.569055] Node 1 Normal free:53648kB min:53876kB low:67344kB high:80812kB active_anon:51888kB inactive_anon:3706820kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14528kB pagetables:35556kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2988.600132] lowmem_reserve[]: 0 0 0 0 0 [ 2988.604815] Node 0 DMA: 6*4kB (UMEH) 17*8kB (UMEH) 15*16kB (UEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 2988.621908] Node 0 DMA32: 399*4kB (UMH) 472*8kB (UMH) 700*16kB (UMH) 688*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38588kB [ 2988.638637] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2988.650612] Node 1 Normal: 82*4kB (UE) 52*8kB (UMH) 12*16kB (UMH) 494*32kB (UMH) 578*64kB (UMH) 2*128kB (MH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53992kB [ 2988.665977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2988.675583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2988.689244] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2988.698589] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2988.707856] 1292924 total pagecache pages [ 2988.712670] 0 pages in swap cache [ 2988.716669] Swap cache stats: add 0, delete 0, find 0/0 [ 2988.723343] Free swap = 0kB [ 2988.726854] Total swap = 0kB [ 2988.736793] 2097051 pages RAM [ 2988.741833] 0 pages HighMem/MovableOnly [ 2988.746337] 369649 pages reserved [ 2988.754462] 0 pages cma reserved [ 2988.758627] Out of memory (oom_kill_allocating_task): Kill process 24009 (syz-executor.0) score 0 or sacrifice child [ 2988.774311] Killed process 24009 (syz-executor.0) total-vm:93408kB, anon-rss:372kB, file-rss:33904kB, shmem-rss:9764kB [ 2988.789161] oom_reaper: reaped process 24009 (syz-executor.0), now anon-rss:0kB, file-rss:34820kB, shmem-rss:9764kB [ 2989.791631] syz-executor.2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2989.808617] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2989.816464] CPU: 0 PID: 24050 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 2989.824366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2989.833802] Call Trace: [ 2989.836396] dump_stack+0x1fc/0x2ef [ 2989.840034] dump_header+0x15d/0xc3f [ 2989.843774] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2989.848966] ? ___ratelimit+0x319/0x590 [ 2989.852957] oom_kill_process.cold+0x10/0x692 [ 2989.857546] ? check_preemption_disabled+0x41/0x280 [ 2989.862663] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2989.867949] out_of_memory+0x1072/0x1390 [ 2989.872008] ? oom_killer_disable+0x270/0x270 [ 2989.876490] ? mutex_trylock+0x15f/0x1a0 [ 2989.880536] __alloc_pages_nodemask+0x23a2/0x2890 [ 2989.885372] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2989.890192] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2989.895019] ? do_symlinkat+0x1b2/0x2c0 [ 2989.899024] ? do_syscall_64+0xf9/0x620 [ 2989.902983] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2989.908339] ? debug_check_no_obj_freed+0x201/0x490 [ 2989.913341] ? ____cache_alloc_node+0x156/0x1d0 [ 2989.918034] ? cache_grow_begin+0x64/0x8a0 [ 2989.922256] cache_grow_begin+0xa4/0x8a0 [ 2989.926321] fallback_alloc+0x213/0x2e0 [ 2989.930279] kmem_cache_alloc+0x1e4/0x370 [ 2989.934450] getname_flags+0xce/0x590 [ 2989.938233] do_symlinkat+0x86/0x2c0 [ 2989.941938] ? __ia32_sys_unlink+0x50/0x50 [ 2989.946158] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2989.951781] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2989.956782] ? do_syscall_64+0x21/0x620 [ 2989.960759] do_syscall_64+0xf9/0x620 [ 2989.964555] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2989.969724] RIP: 0033:0x7fb14a5773f7 [ 2989.973789] Code: Bad RIP value. [ 2989.977139] RSP: 002b:00007ffe2b2e9298 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 2989.984824] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb14a5773f7 [ 2989.992076] RDX: 00007ffe2b2e9373 RSI: 00007fb14a5d1fe7 RDI: 00007ffe2b2e9360 [ 2989.999351] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe2b2e9130 [ 2990.006623] R10: 00007ffe2b2e8fe7 R11: 0000000000000202 R12: 0000000000000001 [ 2990.013886] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffe2b2e9360 [ 2990.024888] Mem-Info: [ 2990.027330] active_anon:143222 inactive_anon:1288742 isolated_anon:0 [ 2990.027330] active_file:22 inactive_file:90 isolated_file:15 [ 2990.027330] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2990.027330] slab_reclaimable:19596 slab_unreclaimable:128701 [ 2990.027330] mapped:1327544 shmem:1292620 pagetables:16385 bounce:0 [ 2990.027330] free:25742 free_pcp:116 free_cma:0 [ 2990.062984] Node 0 active_anon:521084kB inactive_anon:1448148kB active_file:252kB inactive_file:172kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1561128kB dirty:0kB writeback:0kB shmem:1452092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2990.091785] Node 1 active_anon:51808kB inactive_anon:3706820kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3749196kB dirty:0kB writeback:0kB shmem:3718388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2990.120164] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2224kB inactive_anon:2244kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2990.152577] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2990.158282] Node 0 DMA32 free:37784kB min:35996kB low:44992kB high:53988kB active_anon:518860kB inactive_anon:1445904kB active_file:252kB inactive_file:172kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13312kB pagetables:29892kB bounce:0kB free_pcp:416kB local_pcp:16kB free_cma:0kB [ 2990.189810] lowmem_reserve[]: 0 0 1 1 1 [ 2990.196039] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2990.222874] lowmem_reserve[]: 0 0 0 0 0 [ 2990.227527] Node 1 Normal free:54180kB min:53876kB low:67344kB high:80812kB active_anon:51808kB inactive_anon:3706820kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14304kB pagetables:35556kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2990.257412] lowmem_reserve[]: 0 0 0 0 0 [ 2990.262205] Node 0 DMA: 6*4kB (UMEH) 17*8kB (UMEH) 15*16kB (UEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 2990.286168] Node 0 DMA32: 72*4kB (UMH) 462*8kB (UMH) 701*16kB (UMH) 689*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37248kB [ 2990.306193] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2990.318382] Node 1 Normal: 103*4kB (UME) 53*8kB (UMH) 12*16kB (UMH) 497*32kB (UMH) 578*64kB (UMH) 2*128kB (MH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54180kB [ 2990.341995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2990.356864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2990.366320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2990.377922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2990.387358] 1292813 total pagecache pages [ 2990.392369] 0 pages in swap cache [ 2990.396468] Swap cache stats: add 0, delete 0, find 0/0 [ 2990.407219] Free swap = 0kB [ 2990.411328] Total swap = 0kB [ 2990.415545] 2097051 pages RAM [ 2990.420928] 0 pages HighMem/MovableOnly [ 2990.426027] 369649 pages reserved [ 2990.430750] 0 pages cma reserved [ 2990.435442] Out of memory (oom_kill_allocating_task): Kill process 24050 (syz-executor.2) score 0 or sacrifice child [ 2990.455130] Killed process 24050 (syz-executor.2) total-vm:93276kB, anon-rss:384kB, file-rss:34196kB, shmem-rss:0kB [ 2990.479304] oom_reaper: reaped process 24050 (syz-executor.2), now anon-rss:0kB, file-rss:34196kB, shmem-rss:0kB [ 2990.880705] syz-executor.4 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2990.894100] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2990.899522] CPU: 1 PID: 24279 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 2990.907406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2990.916759] Call Trace: [ 2990.919351] dump_stack+0x1fc/0x2ef [ 2990.922980] dump_header+0x15d/0xc3f [ 2990.926699] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2990.931804] ? ___ratelimit+0x319/0x590 [ 2990.935872] oom_kill_process.cold+0x10/0x692 [ 2990.940371] ? check_preemption_disabled+0x41/0x280 [ 2990.945494] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2990.950775] out_of_memory+0x1072/0x1390 [ 2990.954842] ? oom_killer_disable+0x270/0x270 [ 2990.959439] ? mutex_trylock+0x15f/0x1a0 [ 2990.963503] __alloc_pages_nodemask+0x23a2/0x2890 [ 2990.968364] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2990.973204] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2990.978083] ? lock_downgrade+0x720/0x720 [ 2990.982242] ? mark_held_locks+0xf0/0xf0 [ 2990.986304] ? ____cache_alloc_node+0x156/0x1d0 [ 2990.990971] ? cache_grow_begin+0x64/0x8a0 [ 2990.995206] cache_grow_begin+0xa4/0x8a0 [ 2990.999274] fallback_alloc+0x213/0x2e0 [ 2991.003265] kmem_cache_alloc+0x1e4/0x370 [ 2991.007417] getname_flags+0xce/0x590 [ 2991.011219] do_sys_open+0x26c/0x520 [ 2991.014931] ? filp_open+0x70/0x70 [ 2991.018480] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2991.023848] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2991.029130] ? do_syscall_64+0x21/0x620 [ 2991.033141] do_syscall_64+0xf9/0x620 [ 2991.036967] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2991.042149] RIP: 0033:0x7fc8ddd8e628 [ 2991.045858] Code: Bad RIP value. [ 2991.049214] RSP: 002b:00007ffcad414dc0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 2991.056914] RAX: ffffffffffffffda RBX: 0000000000000b01 RCX: 00007fc8ddd8e628 [ 2991.064180] RDX: 0000000000090800 RSI: 00007fc8ddde8161 RDI: 00000000ffffff9c [ 2991.071444] RBP: 00007ffcad414e8c R08: 0000000000090800 R09: 00007fc8ddde8161 [ 2991.078709] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 [ 2991.085977] R13: 00000000002d9102 R14: 0000000000000009 R15: 00007ffcad414ef0 [ 2991.296218] Mem-Info: [ 2991.308583] active_anon:143217 inactive_anon:1288742 isolated_anon:0 [ 2991.308583] active_file:76 inactive_file:83 isolated_file:0 [ 2991.308583] unevictable:0 dirty:1 writeback:0 unstable:0 [ 2991.308583] slab_reclaimable:19596 slab_unreclaimable:128417 [ 2991.308583] mapped:1327602 shmem:1292620 pagetables:16363 bounce:0 [ 2991.308583] free:25643 free_pcp:600 free_cma:0 [ 2991.344150] Node 0 active_anon:521072kB inactive_anon:1448148kB active_file:108kB inactive_file:332kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1560892kB dirty:0kB writeback:4kB shmem:1452092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2991.384698] Node 1 active_anon:51796kB inactive_anon:3706820kB active_file:76kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3749296kB dirty:0kB writeback:0kB shmem:3718388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2991.454985] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2224kB inactive_anon:2244kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 22:32:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000016b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 2991.543239] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2991.548378] Node 0 DMA32 free:37200kB min:35996kB low:44992kB high:53988kB active_anon:518848kB inactive_anon:1445904kB active_file:1320kB inactive_file:1468kB unevictable:0kB writepending:4kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13312kB pagetables:29844kB bounce:0kB free_pcp:1296kB local_pcp:336kB free_cma:0kB [ 2991.585692] lowmem_reserve[]: 0 0 1 1 1 [ 2991.589767] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2991.617142] lowmem_reserve[]: 0 0 0 0 0 [ 2991.689470] Node 1 Normal free:53868kB min:53876kB low:67344kB high:80812kB active_anon:51796kB inactive_anon:3706820kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14240kB pagetables:35516kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2991.923445] lowmem_reserve[]: 0 0 0 0 0 [ 2991.927471] Node 0 DMA: 6*4kB (UMEH) 17*8kB (UMEH) 15*16kB (UEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 2991.950042] Node 0 DMA32: 138*4kB (UMH) 413*8kB (UMH) 694*16kB (UH) 685*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36880kB [ 2991.965550] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2991.978776] Node 1 Normal: 145*4kB (UME) 95*8kB (UMH) 24*16kB (UMH) 501*32kB (UMH) 578*64kB (UMH) 2*128kB (MH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55004kB [ 2991.995564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2992.008213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2992.098945] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2992.219067] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2992.227673] 1292851 total pagecache pages [ 2992.314485] 0 pages in swap cache [ 2992.322145] Swap cache stats: add 0, delete 0, find 0/0 [ 2992.350165] Free swap = 0kB [ 2992.373635] Total swap = 0kB [ 2992.376680] 2097051 pages RAM [ 2992.398001] 0 pages HighMem/MovableOnly [ 2992.469220] 369649 pages reserved [ 2992.488817] 0 pages cma reserved [ 2992.496683] Out of memory (oom_kill_allocating_task): Kill process 24279 (syz-executor.4) score 0 or sacrifice child [ 2992.622852] Killed process 24000 (syz-executor.4) total-vm:93540kB, anon-rss:428kB, file-rss:34820kB, shmem-rss:11480kB [ 2992.706300] oom_reaper: reaped process 24000 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:11480kB 22:33:00 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001cb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:13 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001db91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:13 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:33:13 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xc402}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:33:13 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000017b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:13 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd75, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 3006.543416] IPVS: ftp: loaded support on port[0] = 21 [ 3006.675052] IPVS: ftp: loaded support on port[0] = 21 [ 3006.712897] IPVS: ftp: loaded support on port[0] = 21 [ 3008.611975] IPVS: ftp: loaded support on port[0] = 21 [ 3009.065472] IPVS: ftp: loaded support on port[0] = 21 22:33:22 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001eb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:22 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:33:22 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:33:22 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000018b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:22 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xc900}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:33:22 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd76, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 3016.293124] IPVS: ftp: loaded support on port[0] = 21 [ 3016.363660] IPVS: ftp: loaded support on port[0] = 21 [ 3016.474098] IPVS: ftp: loaded support on port[0] = 21 [ 3016.569008] IPVS: ftp: loaded support on port[0] = 21 22:33:23 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000021b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:23 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000019b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:24 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000023b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:24 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001ab91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3018.275811] IPVS: ftp: loaded support on port[0] = 21 [ 3019.707876] IPVS: ftp: loaded support on port[0] = 21 22:33:26 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000ff1e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:26 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001bb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:26 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b9641d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3021.619372] ieee802154 phy0 wpan0: encryption failed: -22 [ 3021.624983] ieee802154 phy1 wpan1: encryption failed: -22 22:33:38 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001cb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:38 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:33:38 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e6414000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:38 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xce00}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:33:38 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:33:38 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd77, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 3031.644379] IPVS: ftp: loaded support on port[0] = 21 [ 3031.715565] IPVS: ftp: loaded support on port[0] = 21 22:33:38 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000020b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3031.752636] IPVS: ftp: loaded support on port[0] = 21 [ 3031.814378] IPVS: ftp: loaded support on port[0] = 21 22:33:38 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d02000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:38 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000023b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3034.311572] IPVS: ftp: loaded support on port[0] = 21 22:33:41 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d03000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:42 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d04000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:43 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000003fb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:44 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000fffb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:47 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000002b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:47 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d05000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:49 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d06000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:49 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xd200}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 3042.846685] IPVS: ftp: loaded support on port[0] = 21 22:33:49 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd78, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:33:49 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000003b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:49 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:33:49 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d07000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:49 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 3043.261594] IPVS: ftp: loaded support on port[0] = 21 22:33:50 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000004b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3043.517449] IPVS: ftp: loaded support on port[0] = 21 [ 3043.535203] IPVS: ftp: loaded support on port[0] = 21 [ 3043.563240] IPVS: ftp: loaded support on port[0] = 21 22:33:50 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d08000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:50 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000005b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:33:50 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d09000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3044.676980] kworker/u4:12 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3044.703957] kworker/u4:12 cpuset=/ mems_allowed=0-1 [ 3044.718920] CPU: 1 PID: 24810 Comm: kworker/u4:12 Not tainted 4.19.211-syzkaller #0 [ 3044.726741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3044.736091] Call Trace: [ 3044.738687] dump_stack+0x1fc/0x2ef [ 3044.742321] dump_header+0x15d/0xc3f [ 3044.746045] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3044.751150] ? ___ratelimit+0x319/0x590 [ 3044.755131] oom_kill_process.cold+0x10/0x692 [ 3044.759643] ? lock_downgrade+0x720/0x720 [ 3044.763797] ? check_preemption_disabled+0x41/0x280 [ 3044.768819] out_of_memory+0x34d/0x1390 [ 3044.772800] ? oom_killer_disable+0x270/0x270 [ 3044.777307] ? mutex_trylock+0x15f/0x1a0 [ 3044.781373] __alloc_pages_nodemask+0x23a2/0x2890 [ 3044.786239] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3044.791088] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3044.795935] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3044.800542] ? ____cache_alloc_node+0x156/0x1d0 [ 3044.805202] ? cache_grow_begin+0x64/0x8a0 [ 3044.809427] cache_grow_begin+0xa4/0x8a0 [ 3044.813482] fallback_alloc+0x213/0x2e0 [ 3044.817448] kmem_cache_alloc+0x1e4/0x370 [ 3044.821595] getname_kernel+0x4e/0x370 [ 3044.825478] call_usermodehelper_exec_async+0x500/0x6a0 [ 3044.830827] ? umh_complete+0x90/0x90 [ 3044.834613] ret_from_fork+0x24/0x30 [ 3044.871785] Mem-Info: [ 3044.874410] active_anon:146270 inactive_anon:1286610 isolated_anon:0 [ 3044.874410] active_file:90 inactive_file:57 isolated_file:28 [ 3044.874410] unevictable:0 dirty:6 writeback:0 unstable:0 [ 3044.874410] slab_reclaimable:19611 slab_unreclaimable:128398 [ 3044.874410] mapped:1325517 shmem:1293367 pagetables:16377 bounce:0 [ 3044.874410] free:25089 free_pcp:22 free_cma:0 [ 3044.915122] Node 0 active_anon:528452kB inactive_anon:1454708kB active_file:144kB inactive_file:148kB unevictable:0kB isolated(anon):0kB isolated(file):112kB mapped:1567996kB dirty:24kB writeback:0kB shmem:1465144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3044.950045] Node 1 active_anon:56628kB inactive_anon:3691732kB active_file:60kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3734072kB dirty:0kB writeback:0kB shmem:3708324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3044.990999] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2284kB inactive_anon:2172kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3045.026074] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3045.033421] Node 0 DMA32 free:36920kB min:35996kB low:44992kB high:53988kB active_anon:526156kB inactive_anon:1452576kB active_file:140kB inactive_file:792kB unevictable:0kB writepending:32kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:14048kB pagetables:29808kB bounce:0kB free_pcp:452kB local_pcp:184kB free_cma:0kB [ 3045.067612] lowmem_reserve[]: 0 0 1 1 1 [ 3045.072083] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3045.098456] lowmem_reserve[]: 0 0 0 0 0 [ 3045.102764] Node 1 Normal free:53424kB min:53876kB low:67344kB high:80812kB active_anon:56620kB inactive_anon:3691880kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14176kB pagetables:35544kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3045.144703] lowmem_reserve[]: 0 0 0 0 0 [ 3045.150201] Node 0 DMA: 6*4kB (UEH) 19*8kB (UMEH) 15*16kB (UEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10976kB [ 3045.167046] Node 0 DMA32: 8*4kB (H) 183*8kB (UH) 829*16kB (UH) 680*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36520kB [ 3045.180628] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3045.192150] Node 1 Normal: 38*4kB (UM) 31*8kB (UMEH) 546*16kB (UMEH) 464*32kB (UMEH) 458*64kB (UMH) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53424kB [ 3045.207384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3045.216549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3045.232970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3045.244011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3045.253915] 1293494 total pagecache pages [ 3045.339003] 0 pages in swap cache [ 3045.347062] Swap cache stats: add 0, delete 0, find 0/0 [ 3045.361558] Free swap = 0kB [ 3045.367763] Total swap = 0kB [ 3045.370863] 2097051 pages RAM [ 3045.374032] 0 pages HighMem/MovableOnly [ 3045.378107] 369649 pages reserved [ 3045.381619] 0 pages cma reserved [ 3045.385043] Out of memory: Kill process 19756 (syz-executor.0) score 1006 or sacrifice child [ 3045.393813] Killed process 19756 (syz-executor.0) total-vm:93540kB, anon-rss:424kB, file-rss:34820kB, shmem-rss:11480kB [ 3045.434647] kworker/u4:11 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3045.491766] kworker/u4:11 cpuset=/ mems_allowed=0-1 [ 3045.498773] CPU: 0 PID: 29910 Comm: kworker/u4:11 Not tainted 4.19.211-syzkaller #0 [ 3045.506752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3045.516101] Workqueue: events_unbound call_usermodehelper_exec_work [ 3045.522485] Call Trace: [ 3045.525060] dump_stack+0x1fc/0x2ef [ 3045.528675] dump_header+0x15d/0xc3f [ 3045.532375] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3045.537461] ? ___ratelimit+0x319/0x590 [ 3045.541419] oom_kill_process.cold+0x10/0x692 [ 3045.545896] ? oom_badness.part.0+0x135/0x6e0 [ 3045.550373] ? lock_downgrade+0x720/0x720 [ 3045.554507] ? check_preemption_disabled+0x41/0x280 [ 3045.559518] out_of_memory+0x34d/0x1390 [ 3045.563499] ? oom_killer_disable+0x270/0x270 [ 3045.567979] ? mutex_trylock+0x15f/0x1a0 [ 3045.572024] __alloc_pages_nodemask+0x23a2/0x2890 [ 3045.577219] ? mark_held_locks+0xf0/0xf0 [ 3045.581302] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3045.586135] ? should_fail+0x142/0x7b0 [ 3045.590004] ? fs_reclaim_release+0xd0/0x110 [ 3045.594410] ? check_preemption_disabled+0x41/0x280 [ 3045.599418] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3045.604422] ? kmem_cache_alloc_node+0x351/0x3b0 [ 3045.609263] copy_process.part.0+0x3cf/0x8260 [ 3045.613754] ? __lock_acquire+0x6de/0x3ff0 [ 3045.617993] ? __lock_acquire+0x6de/0x3ff0 [ 3045.622214] ? umh_complete+0x90/0x90 [ 3045.626000] ? __cleanup_sighand+0x60/0x60 [ 3045.630224] ? mark_held_locks+0xf0/0xf0 [ 3045.634267] ? __lock_acquire+0x6de/0x3ff0 [ 3045.638485] _do_fork+0x22f/0xf30 [ 3045.641923] ? umh_complete+0x90/0x90 [ 3045.645725] ? fork_idle+0x220/0x220 [ 3045.649426] ? lock_acquire+0x170/0x3c0 [ 3045.653379] ? debug_object_deactivate+0xfc/0x2e0 [ 3045.658203] ? trace_hardirqs_off+0x64/0x200 [ 3045.662594] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3045.667775] ? umh_complete+0x90/0x90 [ 3045.671569] kernel_thread+0x2f/0x40 [ 3045.675274] call_usermodehelper_exec_work+0x16d/0x260 [ 3045.680532] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 3045.686054] process_one_work+0x864/0x1570 [ 3045.690273] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 3045.694942] worker_thread+0x64c/0x1130 [ 3045.698905] ? process_one_work+0x1570/0x1570 [ 3045.703381] kthread+0x33f/0x460 [ 3045.706828] ? kthread_park+0x180/0x180 [ 3045.710792] ret_from_fork+0x24/0x30 [ 3045.739879] Mem-Info: [ 3045.742672] active_anon:146265 inactive_anon:1284332 isolated_anon:0 [ 3045.742672] active_file:0 inactive_file:0 isolated_file:39 [ 3045.742672] unevictable:0 dirty:8 writeback:0 unstable:0 [ 3045.742672] slab_reclaimable:19611 slab_unreclaimable:128108 [ 3045.742672] mapped:1323143 shmem:1291090 pagetables:16361 bounce:0 [ 3045.742672] free:27241 free_pcp:773 free_cma:0 [ 3045.778743] Node 0 active_anon:528440kB inactive_anon:1455948kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1568912kB dirty:32kB writeback:0kB shmem:1466384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3045.807299] Node 1 active_anon:56620kB inactive_anon:3681380kB active_file:104kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3723760kB dirty:0kB writeback:0kB shmem:3697976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3045.835474] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2284kB inactive_anon:2172kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3045.895898] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3045.901477] Node 0 DMA32 free:36396kB min:35996kB low:44992kB high:53988kB active_anon:526156kB inactive_anon:1454088kB active_file:140kB inactive_file:148kB unevictable:0kB writepending:32kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13920kB pagetables:29808kB bounce:0kB free_pcp:1724kB local_pcp:224kB free_cma:0kB [ 3045.947503] lowmem_reserve[]: 0 0 1 1 1 [ 3045.952565] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3046.152407] lowmem_reserve[]: 0 0 0 0 0 [ 3046.182064] Node 1 Normal free:63104kB min:53876kB low:67344kB high:80812kB active_anon:53016kB inactive_anon:3681316kB active_file:88kB inactive_file:2568kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14048kB pagetables:35428kB bounce:0kB free_pcp:1068kB local_pcp:772kB free_cma:0kB [ 3046.284990] lowmem_reserve[]: 0 0 0 0 0 [ 3046.289376] Node 0 DMA: 13*4kB (UMEH) 21*8kB (UMEH) 15*16kB (UEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11020kB [ 3046.306369] Node 0 DMA32: 75*4kB (UH) 433*8kB (UH) 842*16kB (UH) 685*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39156kB [ 3046.333653] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3046.365758] Node 1 Normal: 234*4kB (UM) 195*8kB (UMEH) 663*16kB (UMEH) 531*32kB (UMEH) 479*64kB (UMH) 26*128kB (MH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 64080kB [ 3046.452912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3046.466923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3046.488382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3046.506455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3046.523409] 1290211 total pagecache pages [ 3046.552263] 0 pages in swap cache [ 3046.556876] Swap cache stats: add 0, delete 0, find 0/0 [ 3046.568288] Free swap = 0kB [ 3046.573126] Total swap = 0kB [ 3046.577339] 2097051 pages RAM [ 3046.580558] 0 pages HighMem/MovableOnly [ 3046.584705] 369649 pages reserved [ 3046.594547] 0 pages cma reserved 22:33:53 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d0a000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3046.598160] Out of memory: Kill process 976 (syz-executor.0) score 1006 or sacrifice child [ 3046.611928] Killed process 976 (syz-executor.0) total-vm:93672kB, anon-rss:428kB, file-rss:34820kB, shmem-rss:11476kB 22:33:53 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xd603}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 3046.910632] IPVS: ftp: loaded support on port[0] = 21 22:33:53 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d0b000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3047.286591] IPVS: ftp: loaded support on port[0] = 21 [ 3048.101369] IPVS: ftp: loaded support on port[0] = 21 22:34:00 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d0c000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:00 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd79, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 3054.257539] IPVS: ftp: loaded support on port[0] = 21 22:34:01 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:34:01 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xd800}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 3055.008181] IPVS: ftp: loaded support on port[0] = 21 [ 3055.167775] IPVS: ftp: loaded support on port[0] = 21 [ 3055.239933] IPVS: ftp: loaded support on port[0] = 21 [ 3056.202097] IPVS: ftp: loaded support on port[0] = 21 22:34:03 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000006b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:03 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd7a, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:34:04 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:34:04 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:34:04 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d0d000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:04 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xd803}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 3057.591358] IPVS: ftp: loaded support on port[0] = 21 [ 3057.733699] IPVS: ftp: loaded support on port[0] = 21 [ 3057.798188] IPVS: ftp: loaded support on port[0] = 21 22:34:04 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000007b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:04 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d64000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3058.556745] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3058.608059] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3058.632500] CPU: 1 PID: 19564 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 3058.640406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3058.649758] Call Trace: [ 3058.652354] dump_stack+0x1fc/0x2ef [ 3058.655993] dump_header+0x15d/0xc3f [ 3058.659713] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3058.664815] ? ___ratelimit+0x319/0x590 [ 3058.668795] oom_kill_process.cold+0x10/0x692 [ 3058.673291] ? check_preemption_disabled+0x41/0x280 [ 3058.678312] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3058.683599] out_of_memory+0x1072/0x1390 [ 3058.687672] ? oom_killer_disable+0x270/0x270 [ 3058.692173] ? mutex_trylock+0x15f/0x1a0 [ 3058.696239] __alloc_pages_nodemask+0x23a2/0x2890 [ 3058.701114] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3058.705961] ? should_fail+0x142/0x7b0 [ 3058.709848] ? fs_reclaim_release+0xd0/0x110 [ 3058.714264] ? check_preemption_disabled+0x41/0x280 [ 3058.719296] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3058.724301] ? kmem_cache_alloc_node+0x351/0x3b0 [ 3058.729059] copy_process.part.0+0x3cf/0x8260 [ 3058.733545] ? do_raw_spin_unlock+0x171/0x230 [ 3058.738037] ? _raw_spin_unlock+0x29/0x40 [ 3058.742171] ? do_wp_page+0x2dc/0x2210 [ 3058.746051] ? finish_mkwrite_fault+0x640/0x640 [ 3058.750703] ? __handle_mm_fault+0x15f6/0x41c0 [ 3058.755270] ? mark_held_locks+0xf0/0xf0 [ 3058.759333] ? __cleanup_sighand+0x60/0x60 [ 3058.763579] ? vm_insert_page+0x9c0/0x9c0 [ 3058.767714] ? fsnotify+0x84e/0xe10 [ 3058.771333] ? __do_page_fault+0x6d1/0xd60 [ 3058.775562] _do_fork+0x22f/0xf30 [ 3058.779005] ? fork_idle+0x220/0x220 [ 3058.782706] ? up_read+0x17/0x110 [ 3058.786145] ? __do_page_fault+0x180/0xd60 [ 3058.790370] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3058.795726] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3058.800735] ? do_syscall_64+0x21/0x620 [ 3058.804697] do_syscall_64+0xf9/0x620 [ 3058.808489] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3058.813662] RIP: 0033:0x7fc877af60db [ 3058.817361] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3058.836415] RSP: 002b:00007ffc967ec850 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3058.844115] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc877af60db [ 3058.851378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3058.858646] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555e9b400 [ 3058.865897] R10: 0000555555e9b6d0 R11: 0000000000000246 R12: 0000000000000001 [ 3058.873168] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffc967ec930 [ 3058.882950] Mem-Info: [ 3058.890067] active_anon:143320 inactive_anon:1289426 isolated_anon:0 [ 3058.890067] active_file:195 inactive_file:257 isolated_file:47 [ 3058.890067] unevictable:0 dirty:16 writeback:0 unstable:0 [ 3058.890067] slab_reclaimable:19613 slab_unreclaimable:127915 [ 3058.890067] mapped:1328755 shmem:1293294 pagetables:16348 bounce:0 [ 3058.890067] free:25069 free_pcp:509 free_cma:0 [ 3058.924852] Node 0 active_anon:521912kB inactive_anon:1445600kB active_file:776kB inactive_file:1036kB unevictable:0kB isolated(anon):0kB isolated(file):188kB mapped:1560504kB dirty:72kB writeback:0kB shmem:1449544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3058.953909] Node 1 active_anon:51368kB inactive_anon:3712104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3754516kB dirty:0kB writeback:56kB shmem:3723632kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3058.989849] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2216kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3059.026659] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3059.031850] Node 0 DMA32 free:35456kB min:35996kB low:44992kB high:53988kB active_anon:519780kB inactive_anon:1443460kB active_file:928kB inactive_file:1008kB unevictable:0kB writepending:8kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13760kB pagetables:30072kB bounce:0kB free_pcp:664kB local_pcp:428kB free_cma:0kB [ 3059.068905] lowmem_reserve[]: 0 0 1 1 1 [ 3059.079463] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3059.111539] lowmem_reserve[]: 0 0 0 0 0 [ 3059.115808] Node 1 Normal free:53680kB min:53876kB low:67344kB high:80812kB active_anon:51388kB inactive_anon:3712160kB active_file:12kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14112kB pagetables:35304kB bounce:0kB free_pcp:1356kB local_pcp:1232kB free_cma:0kB [ 3059.155020] lowmem_reserve[]: 0 0 0 0 0 [ 3059.159275] Node 0 DMA: 8*4kB (MEH) 16*8kB (MEH) 16*16kB (UMEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10976kB [ 3059.182962] Node 0 DMA32: 420*4kB (UH) 908*8kB (UEH) 283*16kB (UEH) 687*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35456kB [ 3059.201865] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3059.238954] Node 1 Normal: 139*4kB (UM) 84*8kB (UMEH) 719*16kB (UMEH) 242*32kB (UMEH) 496*64kB (UMH) 22*128kB (MH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55036kB [ 3059.289564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3059.303638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3059.319208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3059.329979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3059.342935] 1293533 total pagecache pages [ 3059.348088] 0 pages in swap cache [ 3059.351706] Swap cache stats: add 0, delete 0, find 0/0 [ 3059.361361] Free swap = 0kB [ 3059.365244] Total swap = 0kB [ 3059.368335] 2097051 pages RAM [ 3059.371499] 0 pages HighMem/MovableOnly [ 3059.382489] 369649 pages reserved [ 3059.386832] 0 pages cma reserved [ 3059.390272] Out of memory (oom_kill_allocating_task): Kill process 19564 (syz-executor.3) score 0 or sacrifice child [ 3059.440197] Killed process 19564 (syz-executor.3) total-vm:93276kB, anon-rss:384kB, file-rss:33732kB, shmem-rss:0kB [ 3059.455961] IPVS: ftp: loaded support on port[0] = 21 [ 3059.482117] oom_reaper: reaped process 19564 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 3059.930053] kworker/u4:11 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3060.001232] kworker/u4:11 cpuset=/ mems_allowed=0-1 [ 3060.014568] CPU: 1 PID: 29910 Comm: kworker/u4:11 Not tainted 4.19.211-syzkaller #0 [ 3060.022381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3060.031744] Workqueue: events_unbound call_usermodehelper_exec_work [ 3060.038185] Call Trace: [ 3060.040780] dump_stack+0x1fc/0x2ef [ 3060.044416] dump_header+0x15d/0xc3f [ 3060.048139] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3060.053236] ? ___ratelimit+0x319/0x590 [ 3060.057204] oom_kill_process.cold+0x10/0x692 [ 3060.061683] ? oom_badness.part.0+0x135/0x6e0 [ 3060.066167] ? lock_downgrade+0x720/0x720 [ 3060.070306] ? check_preemption_disabled+0x41/0x280 [ 3060.075311] out_of_memory+0x34d/0x1390 [ 3060.079277] ? oom_killer_disable+0x270/0x270 [ 3060.083757] ? mutex_trylock+0x15f/0x1a0 [ 3060.087808] __alloc_pages_nodemask+0x23a2/0x2890 [ 3060.092641] ? ____cache_alloc_node+0xf4/0x1d0 [ 3060.097219] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3060.102049] ? do_raw_spin_unlock+0x171/0x230 [ 3060.106547] ? check_preemption_disabled+0x41/0x280 [ 3060.111559] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3060.116562] ? kmem_cache_alloc_node+0x351/0x3b0 [ 3060.121308] copy_process.part.0+0x3cf/0x8260 [ 3060.125801] ? __lock_acquire+0x6de/0x3ff0 [ 3060.130027] ? __lock_acquire+0x6de/0x3ff0 [ 3060.134254] ? umh_complete+0x90/0x90 [ 3060.138043] ? __cleanup_sighand+0x60/0x60 [ 3060.142265] ? mark_held_locks+0xf0/0xf0 [ 3060.146315] ? __lock_acquire+0x6de/0x3ff0 [ 3060.150539] _do_fork+0x22f/0xf30 [ 3060.154066] ? umh_complete+0x90/0x90 [ 3060.157856] ? fork_idle+0x220/0x220 [ 3060.161555] ? lock_acquire+0x170/0x3c0 [ 3060.165528] ? debug_object_deactivate+0xfc/0x2e0 [ 3060.170363] ? trace_hardirqs_off+0x64/0x200 [ 3060.174761] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3060.179850] ? umh_complete+0x90/0x90 [ 3060.183639] kernel_thread+0x2f/0x40 [ 3060.187341] call_usermodehelper_exec_work+0x16d/0x260 [ 3060.192604] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 3060.198135] process_one_work+0x864/0x1570 [ 3060.202379] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 3060.207058] worker_thread+0x64c/0x1130 [ 3060.211030] ? process_one_work+0x1570/0x1570 [ 3060.215510] kthread+0x33f/0x460 [ 3060.218862] ? kthread_park+0x180/0x180 [ 3060.222824] ret_from_fork+0x24/0x30 [ 3060.257993] Mem-Info: [ 3060.260577] active_anon:146195 inactive_anon:1287293 isolated_anon:0 [ 3060.260577] active_file:49 inactive_file:74 isolated_file:38 [ 3060.260577] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3060.260577] slab_reclaimable:19613 slab_unreclaimable:127682 [ 3060.260577] mapped:1326264 shmem:1294042 pagetables:16341 bounce:0 [ 3060.260577] free:25178 free_pcp:72 free_cma:0 [ 3060.299582] Node 0 active_anon:526264kB inactive_anon:1443088kB active_file:192kB inactive_file:268kB unevictable:0kB isolated(anon):0kB isolated(file):152kB mapped:1556592kB dirty:0kB writeback:0kB shmem:1451348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3060.334651] Node 1 active_anon:58516kB inactive_anon:3706084kB active_file:4kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3748464kB dirty:0kB writeback:0kB shmem:3724820kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3060.396233] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2216kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3060.428590] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3060.433644] Node 0 DMA32 free:36000kB min:35996kB low:44992kB high:53988kB active_anon:524048kB inactive_anon:1440572kB active_file:132kB inactive_file:348kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13792kB pagetables:30068kB bounce:0kB free_pcp:744kB local_pcp:0kB free_cma:0kB [ 3060.464735] lowmem_reserve[]: 0 0 1 1 1 [ 3060.468731] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3060.494912] lowmem_reserve[]: 0 0 0 0 0 [ 3060.498910] Node 1 Normal free:53724kB min:53876kB low:67344kB high:80812kB active_anon:58516kB inactive_anon:3706084kB active_file:4kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14112kB pagetables:35204kB bounce:0kB free_pcp:260kB local_pcp:4kB free_cma:0kB [ 3060.529286] lowmem_reserve[]: 0 0 0 0 0 [ 3060.533281] Node 0 DMA: 8*4kB (MEH) 17*8kB (MEH) 16*16kB (UMEH) 10*32kB (UMH) 4*64kB (MH) 4*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10984kB [ 3060.549479] Node 0 DMA32: 376*4kB (UMH) 1024*8kB (UMEH) 308*16kB (UEH) 686*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36576kB [ 3060.563457] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3060.574661] Node 1 Normal: 121*4kB (UM) 23*8kB (UEH) 693*16kB (UMEH) 231*32kB (UMEH) 497*64kB (UMH) 22*128kB (MH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53772kB [ 3060.589765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3060.598925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3060.607634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3060.617476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3060.626122] 1294135 total pagecache pages [ 3060.630407] 0 pages in swap cache [ 3060.634107] Swap cache stats: add 0, delete 0, find 0/0 [ 3060.639522] Free swap = 0kB [ 3060.642535] Total swap = 0kB [ 3060.645974] 2097051 pages RAM [ 3060.649083] 0 pages HighMem/MovableOnly [ 3060.653047] 369649 pages reserved [ 3060.656554] 0 pages cma reserved [ 3060.659923] Out of memory: Kill process 24947 (syz-executor.5) score 1006 or sacrifice child [ 3060.668776] Killed process 24947 (syz-executor.5) total-vm:93936kB, anon-rss:444kB, file-rss:34820kB, shmem-rss:11476kB [ 3060.680270] oom_reaper: reaped process 24947 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:11480kB 22:34:08 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:34:08 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000008b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:08 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000009b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:09 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d1400000400000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3069.797417] IPVS: ftp: loaded support on port[0] = 21 [ 3071.844069] Bluetooth: hci3: command 0x0409 tx timeout [ 3073.933945] Bluetooth: hci3: command 0x041b tx timeout [ 3073.956311] chnl_net:caif_netlink_parms(): no params data found 22:34:20 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xda00}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:34:20 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:34:20 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000ab91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:20 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd7b, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:34:20 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 3074.336656] bridge0: port 1(bridge_slave_0) entered blocking state [ 3074.348345] bridge0: port 1(bridge_slave_0) entered disabled state [ 3074.372952] device bridge_slave_0 entered promiscuous mode [ 3074.465005] IPVS: ftp: loaded support on port[0] = 21 [ 3074.474485] IPVS: ftp: loaded support on port[0] = 21 [ 3074.508970] IPVS: ftp: loaded support on port[0] = 21 22:34:21 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000bb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:21 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000cb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3075.408728] bridge0: port 2(bridge_slave_1) entered blocking state [ 3075.419212] bridge0: port 2(bridge_slave_1) entered disabled state [ 3075.469409] device bridge_slave_1 entered promiscuous mode [ 3076.003866] Bluetooth: hci3: command 0x040f tx timeout [ 3076.128839] systemd-udevd invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 3076.158110] systemd-udevd cpuset=/ mems_allowed=0-1 [ 3076.164758] CPU: 0 PID: 4697 Comm: systemd-udevd Not tainted 4.19.211-syzkaller #0 [ 3076.172478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3076.181833] Call Trace: [ 3076.184429] dump_stack+0x1fc/0x2ef [ 3076.188064] dump_header+0x15d/0xc3f [ 3076.191788] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3076.196894] ? ___ratelimit+0x319/0x590 [ 3076.200888] oom_kill_process.cold+0x10/0x692 [ 3076.205390] ? lock_downgrade+0x720/0x720 [ 3076.209545] ? check_preemption_disabled+0x41/0x280 [ 3076.214573] out_of_memory+0x34d/0x1390 [ 3076.218558] ? oom_killer_disable+0x270/0x270 [ 3076.223062] ? mutex_trylock+0x15f/0x1a0 [ 3076.227130] __alloc_pages_nodemask+0x23a2/0x2890 [ 3076.232012] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3076.236895] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3076.241734] ? __put_seccomp_filter+0xa0/0xa0 [ 3076.246656] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 3076.251857] ? ____cache_alloc_node+0x156/0x1d0 [ 3076.256524] ? cache_grow_begin+0x64/0x8a0 [ 3076.260755] cache_grow_begin+0xa4/0x8a0 [ 3076.264827] fallback_alloc+0x213/0x2e0 [ 3076.268812] kmem_cache_alloc+0x1e4/0x370 [ 3076.272957] getname_flags+0xce/0x590 [ 3076.276752] do_sys_open+0x26c/0x520 [ 3076.280462] ? filp_open+0x70/0x70 [ 3076.284187] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3076.289565] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3076.294570] ? do_syscall_64+0x21/0x620 [ 3076.298555] do_syscall_64+0xf9/0x620 [ 3076.302353] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3076.307573] RIP: 0033:0x7f94d8fb7840 [ 3076.311279] Code: 73 01 c3 48 8b 0d 68 77 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 bb 20 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24 [ 3076.330172] RSP: 002b:00007ffe7394f4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 3076.337874] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f94d8fb7840 [ 3076.345249] RDX: 00000000000001a4 RSI: 0000000000080141 RDI: 0000564265c05369 [ 3076.352514] RBP: 0000564265c05369 R08: c0c0feff00000000 R09: 0000000000000000 [ 3076.359907] R10: be87ff4c6c24d2bd R11: 0000000000000246 R12: 000056426712d010 [ 3076.367177] R13: 00000000fffffffe R14: 0000000000000000 R15: 0000000000000001 [ 3076.381829] Mem-Info: [ 3076.384312] active_anon:142775 inactive_anon:1291342 isolated_anon:0 [ 3076.384312] active_file:192 inactive_file:198 isolated_file:28 [ 3076.384312] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3076.384312] slab_reclaimable:19633 slab_unreclaimable:126689 [ 3076.384312] mapped:1330518 shmem:1295218 pagetables:16374 bounce:0 [ 3076.384312] free:25392 free_pcp:0 free_cma:0 [ 3076.418776] Node 0 active_anon:520916kB inactive_anon:1450720kB active_file:400kB inactive_file:360kB unevictable:0kB isolated(anon):0kB isolated(file):112kB mapped:1564660kB dirty:0kB writeback:0kB shmem:1454668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3076.447433] Node 1 active_anon:50184kB inactive_anon:3714648kB active_file:116kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3757112kB dirty:0kB writeback:0kB shmem:3726204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3076.475455] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2224kB inactive_anon:2188kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3076.506310] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3076.511356] Node 0 DMA32 free:36468kB min:35996kB low:44992kB high:53988kB active_anon:518692kB inactive_anon:1448036kB active_file:400kB inactive_file:716kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13312kB pagetables:29856kB bounce:0kB free_pcp:1068kB local_pcp:0kB free_cma:0kB [ 3076.553923] lowmem_reserve[]: 0 0 1 1 1 [ 3076.558196] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3076.591528] lowmem_reserve[]: 0 0 0 0 0 [ 3076.596386] Node 1 Normal free:54136kB min:53876kB low:67344kB high:80812kB active_anon:50184kB inactive_anon:3714648kB active_file:32kB inactive_file:388kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14496kB pagetables:35548kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3076.690248] lowmem_reserve[]: 0 0 0 0 0 [ 3076.694327] Node 0 DMA: 12*4kB (MEH) 18*8kB (UMEH) 19*16kB (UMEH) 9*32kB (UMH) 5*64kB (UMH) 3*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 3076.716523] Node 0 DMA32: 206*4kB (UMEH) 377*8kB (UMH) 683*16kB (UMEH) 702*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37232kB [ 3076.732930] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3076.751102] Node 1 Normal: 206*4kB (UM) 134*8kB (UMH) 38*16kB (UMH) 383*32kB (UMEH) 566*64kB (UMH) 27*128kB (UMEH) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54696kB [ 3076.775490] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3076.791781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3076.808944] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3076.820045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3076.837791] 1295471 total pagecache pages [ 3076.842164] 0 pages in swap cache [ 3076.849121] Swap cache stats: add 0, delete 0, find 0/0 [ 3076.857937] Free swap = 0kB [ 3076.861021] Total swap = 0kB [ 3076.869810] 2097051 pages RAM [ 3076.876631] 0 pages HighMem/MovableOnly [ 3076.881390] 369649 pages reserved [ 3076.891901] 0 pages cma reserved [ 3076.896038] Out of memory: Kill process 25189 (syz-executor.1) score 1006 or sacrifice child [ 3076.905675] Killed process 25189 (syz-executor.1) total-vm:93540kB, anon-rss:428kB, file-rss:34820kB, shmem-rss:11480kB 22:34:24 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000db91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:24 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 3077.895769] IPVS: ftp: loaded support on port[0] = 21 22:34:24 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000eb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3078.083698] Bluetooth: hci3: command 0x0419 tx timeout 22:34:24 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000000fb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3078.296982] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3078.738695] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3079.091138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3079.111529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3079.135979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3079.142835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3079.160332] device bridge_slave_1 left promiscuous mode [ 3079.165982] bridge0: port 2(bridge_slave_1) entered disabled state [ 3079.180921] device bridge_slave_0 left promiscuous mode [ 3079.186673] bridge0: port 1(bridge_slave_0) entered disabled state [ 3079.204949] device veth1_macvtap left promiscuous mode [ 3079.210395] device veth0_macvtap left promiscuous mode [ 3079.223261] device veth1_vlan left promiscuous mode [ 3079.228440] device veth0_vlan left promiscuous mode [ 3083.045273] ieee802154 phy0 wpan0: encryption failed: -22 [ 3083.050871] ieee802154 phy1 wpan1: encryption failed: -22 [ 3084.369472] device hsr_slave_1 left promiscuous mode [ 3084.377484] device hsr_slave_0 left promiscuous mode [ 3084.396094] team0 (unregistering): Port device team_slave_1 removed [ 3084.407929] team0 (unregistering): Port device team_slave_0 removed [ 3084.420838] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3084.434108] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3084.479123] bond0 (unregistering): Released all slaves [ 3084.506087] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3084.514777] team0: Port device team_slave_0 added [ 3084.562101] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3084.572455] team0: Port device team_slave_1 added [ 3084.596238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3084.602598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3084.628275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3084.656689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3084.663050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3084.690206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3084.701865] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3084.726680] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3084.777725] device hsr_slave_0 entered promiscuous mode [ 3084.784298] device hsr_slave_1 entered promiscuous mode [ 3084.790381] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3084.839319] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3085.475675] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 3085.762943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3085.824879] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3085.874632] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 3085.880959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3085.905525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3085.939662] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3085.952815] 8021q: adding VLAN 0 to HW filter on device team0 [ 3086.004919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 3086.012044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3086.043475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3086.051147] bridge0: port 1(bridge_slave_0) entered blocking state [ 3086.057644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3086.146168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 3086.183200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3086.190618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3086.246271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3086.283477] bridge0: port 2(bridge_slave_1) entered blocking state [ 3086.289852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3086.366291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 3086.409094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3086.425727] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 3086.439356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3086.517802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 3086.602939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3086.612286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3086.703028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3086.713975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 3086.774754] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 3086.853854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3086.861922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3086.913757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3086.921411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3087.024794] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 3087.032431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3087.053500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3087.094172] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3087.100294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3087.168603] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3087.238413] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 3087.283228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3087.290024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3087.368205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3087.617506] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3087.696733] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 3087.753224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3087.761249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3088.061752] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3088.115083] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3088.121925] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3088.187883] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 3088.242957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3088.250681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3088.296451] device veth0_vlan entered promiscuous mode [ 3088.303568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3088.310713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3088.389339] device veth1_vlan entered promiscuous mode [ 3088.423828] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 3088.463644] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 3088.549931] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3088.619859] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 3088.694260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3088.708046] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3088.773503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3088.781590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3088.905086] device veth0_macvtap entered promiscuous mode [ 3088.949625] device veth1_macvtap entered promiscuous mode [ 3089.014783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3089.076546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3089.145334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3089.220829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3089.277576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3089.337525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3089.387598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3089.432681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3089.441929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3089.532680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3089.541836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3089.647583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3089.704277] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3089.711320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3089.802754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3089.810812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3089.885195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3089.923056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3089.932194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3090.047050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3090.109229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3090.148517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3090.158001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3090.167874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3090.177107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3090.186934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3090.197637] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3090.205351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3090.223236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3090.273358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3091.014596] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 3091.045289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3091.052538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3091.068909] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3091.219088] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 3091.261860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3091.296030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3091.355535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:34:38 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000010b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:38 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d14020001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:38 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xdc01}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:34:38 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 3092.267174] IPVS: ftp: loaded support on port[0] = 21 [ 3092.341206] IPVS: ftp: loaded support on port[0] = 21 22:34:39 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd7c, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:34:39 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:34:39 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d14030001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:39 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000011b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3092.816721] IPVS: ftp: loaded support on port[0] = 21 22:34:39 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000012b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3093.003458] IPVS: ftp: loaded support on port[0] = 21 22:34:39 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d14040001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3093.213510] IPVS: ftp: loaded support on port[0] = 21 22:34:40 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000013b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3093.476265] IPVS: ftp: loaded support on port[0] = 21 22:34:40 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d14050001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:40 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xde02}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:34:40 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:34:40 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000014b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:40 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d14060001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3094.102874] IPVS: ftp: loaded support on port[0] = 21 [ 3094.116741] IPVS: ftp: loaded support on port[0] = 21 [ 3096.333953] IPVS: ftp: loaded support on port[0] = 21 22:34:46 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000015b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:46 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:34:46 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d14070001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:46 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd7d, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 3100.530438] IPVS: ftp: loaded support on port[0] = 21 22:34:47 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000016b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3100.629630] IPVS: ftp: loaded support on port[0] = 21 22:34:47 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d14080001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:47 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000017b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:47 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d14090001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:50 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d140a0001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:50 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000018b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:50 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd7e, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:34:50 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:34:50 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xe001}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:34:50 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) [ 3104.145186] IPVS: ftp: loaded support on port[0] = 21 [ 3104.155196] IPVS: ftp: loaded support on port[0] = 21 22:34:50 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d140b0001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3104.242544] IPVS: ftp: loaded support on port[0] = 21 [ 3104.250978] IPVS: ftp: loaded support on port[0] = 21 22:34:51 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000019b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:52 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001ab91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3106.402195] IPVS: ftp: loaded support on port[0] = 21 [ 3106.871570] syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3106.926792] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3106.936318] CPU: 0 PID: 25256 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 3106.944225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3106.953580] Call Trace: [ 3106.956178] dump_stack+0x1fc/0x2ef [ 3106.959816] dump_header+0x15d/0xc3f [ 3106.963535] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3106.968640] ? ___ratelimit+0x319/0x590 [ 3106.972615] oom_kill_process.cold+0x10/0x692 [ 3106.977114] ? check_preemption_disabled+0x41/0x280 [ 3106.982143] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3106.987418] out_of_memory+0x1072/0x1390 [ 3106.991480] ? oom_killer_disable+0x270/0x270 [ 3106.996066] ? mutex_trylock+0x15f/0x1a0 [ 3107.000147] __alloc_pages_nodemask+0x23a2/0x2890 [ 3107.005097] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3107.009957] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3107.014799] ? cp_old_stat+0x740/0x740 [ 3107.018684] ? mntput_no_expire+0x119/0xa30 [ 3107.023020] ? ____cache_alloc_node+0x156/0x1d0 [ 3107.027772] ? cache_grow_begin+0x64/0x8a0 [ 3107.032012] cache_grow_begin+0xa4/0x8a0 [ 3107.036081] fallback_alloc+0x213/0x2e0 [ 3107.040071] kmem_cache_alloc+0x1e4/0x370 [ 3107.044227] getname_flags+0xce/0x590 [ 3107.048051] __x64_sys_unlink+0x31/0x50 [ 3107.052026] do_syscall_64+0xf9/0x620 [ 3107.055839] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3107.061016] RIP: 0033:0x7f8f2336f427 [ 3107.064717] Code: Bad RIP value. [ 3107.068077] RSP: 002b:00007ffda23d63a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 3107.075770] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8f2336f427 [ 3107.083027] RDX: 00007ffda23d63e0 RSI: 00007ffda23d63e0 RDI: 00007ffda23d6470 [ 3107.090281] RBP: 00007ffda23d6470 R08: 0000000000000001 R09: 00007ffda23d6240 [ 3107.097536] R10: 000055555690b853 R11: 0000000000000206 R12: 00007f8f233c90bd [ 3107.104792] R13: 00007ffda23d7530 R14: 000055555690b810 R15: 00007ffda23d7570 [ 3107.160168] Mem-Info: [ 3107.163400] active_anon:145831 inactive_anon:1290215 isolated_anon:0 [ 3107.163400] active_file:176 inactive_file:317 isolated_file:0 [ 3107.163400] unevictable:0 dirty:1 writeback:0 unstable:0 [ 3107.163400] slab_reclaimable:19721 slab_unreclaimable:124537 [ 3107.163400] mapped:1329342 shmem:1296972 pagetables:16447 bounce:0 [ 3107.163400] free:25363 free_pcp:170 free_cma:0 [ 3107.198407] Node 0 active_anon:528160kB inactive_anon:1465888kB active_file:800kB inactive_file:1224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1580292kB dirty:4kB writeback:0kB shmem:1476348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3107.228642] Node 1 active_anon:55164kB inactive_anon:3694972kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3737176kB dirty:0kB writeback:0kB shmem:3711540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3107.260117] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2224kB inactive_anon:2168kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3107.287728] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3107.292912] Node 0 DMA32 free:40304kB min:35996kB low:44992kB high:53988kB active_anon:520896kB inactive_anon:1463720kB active_file:100kB inactive_file:1548kB unevictable:0kB writepending:4kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13792kB pagetables:30404kB bounce:0kB free_pcp:1760kB local_pcp:288kB free_cma:0kB [ 3107.327486] lowmem_reserve[]: 0 0 1 1 1 [ 3107.331712] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3107.357736] lowmem_reserve[]: 0 0 0 0 0 [ 3107.361869] Node 1 Normal free:56688kB min:53876kB low:67344kB high:80812kB active_anon:50264kB inactive_anon:3694972kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14080kB pagetables:35292kB bounce:0kB free_pcp:2468kB local_pcp:1152kB free_cma:0kB [ 3107.431552] lowmem_reserve[]: 0 0 0 0 0 [ 3107.435581] Node 0 DMA: 4*4kB (UEH) 19*8kB (UMEH) 19*16kB (UMEH) 10*32kB (UMH) 5*64kB (UMH) 3*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10968kB 22:34:54 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d140c0001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3107.585178] Node 0 DMA32: 8*4kB (H) 40*8kB (UH) 878*16kB (UH) 682*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36224kB [ 3107.694690] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3107.731083] Node 1 Normal: 1020*4kB (UM) 798*8kB (UMH) 446*16kB (UMH) 304*32kB (MEH) 457*64kB (MH) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56704kB [ 3107.806748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3107.860378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3107.885333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3107.928999] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3107.953333] 1295483 total pagecache pages [ 3107.968911] 0 pages in swap cache [ 3107.979612] Swap cache stats: add 0, delete 0, find 0/0 [ 3107.996093] Free swap = 0kB [ 3108.002688] Total swap = 0kB [ 3108.010172] 2097051 pages RAM [ 3108.045608] 0 pages HighMem/MovableOnly [ 3108.067546] 369649 pages reserved [ 3108.085671] 0 pages cma reserved [ 3108.110785] Out of memory (oom_kill_allocating_task): Kill process 25256 (syz-executor.3) score 0 or sacrifice child [ 3108.128995] Killed process 25256 (syz-executor.3) total-vm:93276kB, anon-rss:384kB, file-rss:34524kB, shmem-rss:0kB 22:34:54 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001bb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:55 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d14100001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:56 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d14120001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:34:56 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff60000001cb91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3114.517500] IPVS: ftp: loaded support on port[0] = 21 [ 3116.001051] Bluetooth: hci3: command 0x0409 tx timeout [ 3116.722503] chnl_net:caif_netlink_parms(): no params data found [ 3117.446260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3117.477204] batman_adv: batadv0: Removing interface: batadv_slave_0 22:35:04 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000023b91e1d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) 22:35:04 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd7f, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 22:35:04 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000034c0)={0x18, 0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 22:35:04 executing program 4: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0x376}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 3117.540436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3117.578187] batman_adv: batadv0: Removing interface: batadv_slave_1 22:35:04 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3f00, 0xe403}], 0x1, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 3117.627539] IPVS: ftp: loaded support on port[0] = 21 [ 3117.627948] device bridge_slave_1 left promiscuous mode [ 3117.638709] bridge0: port 2(bridge_slave_1) entered disabled state [ 3117.673673] device bridge_slave_0 left promiscuous mode [ 3117.687220] bridge0: port 1(bridge_slave_0) entered disabled state [ 3117.748604] device veth1_macvtap left promiscuous mode [ 3117.788753] device veth0_macvtap left promiscuous mode [ 3117.838204] IPVS: ftp: loaded support on port[0] = 21 [ 3117.856382] device veth1_vlan left promiscuous mode [ 3117.876420] IPVS: ftp: loaded support on port[0] = 21 22:35:04 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b9641d14000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3117.890498] device veth0_vlan left promiscuous mode [ 3117.904542] IPVS: ftp: loaded support on port[0] = 21 [ 3118.091043] Bluetooth: hci3: command 0x041b tx timeout 22:35:04 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e6414000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3118.303799] IPVS: ftp: loaded support on port[0] = 21 [ 3118.819546] syz-executor.2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3118.867867] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3118.891755] CPU: 0 PID: 19563 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 3118.899660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3118.909106] Call Trace: [ 3118.911734] dump_stack+0x1fc/0x2ef [ 3118.915374] dump_header+0x15d/0xc3f [ 3118.919094] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3118.924195] ? ___ratelimit+0x319/0x590 [ 3118.928171] oom_kill_process.cold+0x10/0x692 [ 3118.932759] ? check_preemption_disabled+0x41/0x280 [ 3118.937801] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3118.943089] out_of_memory+0x1072/0x1390 [ 3118.947156] ? oom_killer_disable+0x270/0x270 [ 3118.951657] ? mutex_trylock+0x15f/0x1a0 [ 3118.955722] __alloc_pages_nodemask+0x23a2/0x2890 [ 3118.960579] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3118.965418] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3118.970277] ? ____cache_alloc_node+0x156/0x1d0 [ 3118.974945] ? cache_grow_begin+0x64/0x8a0 [ 3118.979207] cache_grow_begin+0xa4/0x8a0 [ 3118.983274] fallback_alloc+0x213/0x2e0 [ 3118.987250] kmem_cache_alloc+0x1e4/0x370 [ 3118.991406] getname_flags+0xce/0x590 [ 3118.995210] user_path_mountpoint_at+0x23/0x40 [ 3118.999791] ksys_umount+0x156/0x1070 [ 3119.003598] ? __detach_mounts+0x470/0x470 [ 3119.007832] ? up_read+0x17/0x110 [ 3119.011285] ? __do_page_fault+0x180/0xd60 [ 3119.015527] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3119.020896] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3119.025918] __x64_sys_umount+0x50/0x70 [ 3119.029894] do_syscall_64+0xf9/0x620 [ 3119.033701] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3119.038888] RIP: 0033:0x7fb14a578f57 [ 3119.042601] Code: Bad RIP value. [ 3119.045961] RSP: 002b:00007ffe2b2e8198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3119.053662] RAX: ffffffffffffffda RBX: 00000000000000dc RCX: 00007fb14a578f57 [ 3119.060924] RDX: 000000000000000c RSI: 000000000000000a RDI: 00007ffe2b2e9320 [ 3119.068190] RBP: 00007ffe2b2e92fc R08: 0000000000000000 R09: 0000031f88b73e68 [ 3119.075457] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb14a5d10bd [ 3119.082722] R13: 00007ffe2b2e9320 R14: 0000000000000001 R15: 00007ffe2b2e9360 [ 3119.120636] Mem-Info: [ 3119.131926] active_anon:145814 inactive_anon:1290931 isolated_anon:0 [ 3119.131926] active_file:22 inactive_file:29 isolated_file:19 [ 3119.131926] unevictable:0 dirty:16 writeback:0 unstable:0 [ 3119.131926] slab_reclaimable:19751 slab_unreclaimable:124478 [ 3119.131926] mapped:1329817 shmem:1297688 pagetables:16449 bounce:0 [ 3119.131926] free:25018 free_pcp:334 free_cma:0 [ 3119.204009] Node 0 active_anon:525016kB inactive_anon:1462116kB active_file:72kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):76kB mapped:1574736kB dirty:64kB writeback:0kB shmem:1469796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3119.242052] Node 1 active_anon:58240kB inactive_anon:3701608kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3744532kB dirty:0kB writeback:0kB shmem:3720956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3119.270016] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2140kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3119.297702] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3119.310208] Node 0 DMA32 free:35540kB min:35996kB low:44992kB high:53988kB active_anon:522800kB inactive_anon:1459676kB active_file:172kB inactive_file:340kB unevictable:0kB writepending:64kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13664kB pagetables:30048kB bounce:0kB free_pcp:1120kB local_pcp:864kB free_cma:0kB [ 3119.346547] lowmem_reserve[]: 0 0 1 1 1 [ 3119.350625] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3119.432311] lowmem_reserve[]: 0 0 0 0 0 [ 3119.436326] Node 1 Normal free:53652kB min:53876kB low:67344kB high:80812kB active_anon:58240kB inactive_anon:3701608kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14336kB pagetables:35656kB bounce:0kB free_pcp:256kB local_pcp:4kB free_cma:0kB [ 3119.465727] lowmem_reserve[]: 0 0 0 0 0 [ 3119.469722] Node 0 DMA: 11*4kB (UMEH) 18*8kB (UMEH) 18*16kB (UMEH) 11*32kB (UMH) 5*64kB (UMH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10876kB [ 3119.486710] Node 0 DMA32: 11*4kB (UH) 79*8kB (UH) 815*16kB (UH) 682*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35540kB [ 3119.509733] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3119.527886] Node 1 Normal: 39*4kB (UME) 29*8kB (UMEH) 603*16kB (UMEH) 477*32kB (UMEH) 447*64kB (MEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53908kB [ 3119.548465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3119.557586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3119.572600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3119.584815] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3119.596556] 1297837 total pagecache pages [ 3119.606688] 0 pages in swap cache [ 3119.610154] Swap cache stats: add 0, delete 0, find 0/0 [ 3119.618592] Free swap = 0kB [ 3119.650300] Total swap = 0kB [ 3119.653403] 2097051 pages RAM [ 3119.656504] 0 pages HighMem/MovableOnly [ 3119.660463] 369649 pages reserved [ 3119.688216] 0 pages cma reserved [ 3119.691933] Out of memory (oom_kill_allocating_task): Kill process 19563 (syz-executor.2) score 0 or sacrifice child [ 3119.706214] Killed process 19563 (syz-executor.2) total-vm:93276kB, anon-rss:384kB, file-rss:33976kB, shmem-rss:0kB [ 3119.717495] oom_reaper: reaped process 19563 (syz-executor.2), now anon-rss:0kB, file-rss:33944kB, shmem-rss:0kB [ 3120.092155] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 3120.160808] Bluetooth: hci3: command 0x040f tx timeout [ 3120.169092] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3120.190878] CPU: 0 PID: 26416 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 3120.198788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3120.208134] Call Trace: [ 3120.210735] dump_stack+0x1fc/0x2ef [ 3120.214354] dump_header+0x15d/0xc3f [ 3120.218057] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3120.223143] ? ___ratelimit+0x319/0x590 [ 3120.227104] oom_kill_process.cold+0x10/0x692 [ 3120.231587] ? check_preemption_disabled+0x41/0x280 [ 3120.236592] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3120.241855] out_of_memory+0x1072/0x1390 [ 3120.245913] ? oom_killer_disable+0x270/0x270 [ 3120.250396] ? mutex_trylock+0x15f/0x1a0 [ 3120.254549] __alloc_pages_nodemask+0x23a2/0x2890 [ 3120.259396] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3120.264229] ? should_fail+0x142/0x7b0 [ 3120.268115] ? fs_reclaim_release+0xd0/0x110 [ 3120.272516] ? check_preemption_disabled+0x41/0x280 [ 3120.277786] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3120.282792] ? kmem_cache_alloc_node+0x351/0x3b0 [ 3120.287540] copy_process.part.0+0x3cf/0x8260 [ 3120.292027] ? __handle_mm_fault+0x2bb6/0x41c0 [ 3120.296606] ? lock_downgrade+0x720/0x720 [ 3120.300743] ? up_read+0x17/0x110 [ 3120.304195] ? mark_held_locks+0xf0/0xf0 [ 3120.308251] ? __cleanup_sighand+0x60/0x60 [ 3120.312469] ? do_mmap+0x59c/0x1080 [ 3120.316097] ? vm_insert_page+0x9c0/0x9c0 [ 3120.320255] ? __do_page_fault+0x6d1/0xd60 [ 3120.324479] _do_fork+0x22f/0xf30 [ 3120.327926] ? fork_idle+0x220/0x220 [ 3120.331628] ? up_read+0x17/0x110 [ 3120.335071] ? __do_page_fault+0x180/0xd60 [ 3120.339297] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3120.344659] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3120.349676] ? do_syscall_64+0x21/0x620 [ 3120.353640] do_syscall_64+0xf9/0x620 [ 3120.357447] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3120.362627] RIP: 0033:0x7f51a23dbf11 [ 3120.366417] Code: Bad RIP value. [ 3120.369783] RSP: 002b:00007fff6ff43888 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3120.377482] RAX: ffffffffffffffda RBX: 00007f519f92f700 RCX: 00007f51a23dbf11 [ 3120.384740] RDX: 00007f519f92f9d0 RSI: 00007f519f92f2f0 RDI: 00000000003d0f00 [ 3120.392086] RBP: 00007fff6ff43ac0 R08: 00007f519f92f700 R09: 00007f519f92f700 [ 3120.399344] R10: 00007f519f92f9d0 R11: 0000000000000206 R12: 00007fff6ff4393e [ 3120.406600] R13: 00007fff6ff4393f R14: 00007f519f92f300 R15: 0000000000022000 [ 3120.454233] Mem-Info: [ 3120.476519] active_anon:145792 inactive_anon:1291183 isolated_anon:0 [ 3120.476519] active_file:21 inactive_file:0 isolated_file:0 [ 3120.476519] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3120.476519] slab_reclaimable:19751 slab_unreclaimable:124484 [ 3120.476519] mapped:1330073 shmem:1297973 pagetables:16426 bounce:0 [ 3120.476519] free:24943 free_pcp:124 free_cma:0 [ 3120.560903] Node 0 active_anon:524948kB inactive_anon:1462668kB active_file:76kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1575216kB dirty:0kB writeback:0kB shmem:1470380kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3120.676607] Node 1 active_anon:58220kB inactive_anon:3702164kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3745076kB dirty:0kB writeback:0kB shmem:3721512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3120.858103] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2140kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3121.019697] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3121.040562] Node 0 DMA32 free:35656kB min:35996kB low:44992kB high:53988kB active_anon:522732kB inactive_anon:1460568kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13664kB pagetables:30048kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3121.125137] lowmem_reserve[]: 0 0 1 1 1 [ 3121.129177] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3121.160805] lowmem_reserve[]: 0 0 0 0 0 [ 3121.164813] Node 1 Normal free:53544kB min:53876kB low:67344kB high:80812kB active_anon:58220kB inactive_anon:3702172kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14304kB pagetables:35564kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3121.200035] lowmem_reserve[]: 0 0 0 0 0 [ 3121.207464] Node 0 DMA: 11*4kB (UMEH) 18*8kB (UMEH) 18*16kB (UMEH) 11*32kB (UMH) 5*64kB (UMH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10876kB [ 3121.229579] Node 0 DMA32: 62*4kB (UMEH) 151*8kB (UMH) 816*16kB (UH) 682*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36336kB [ 3121.260689] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3121.280673] Node 1 Normal: 46*4kB (UME) 30*8kB (UEH) 574*16kB (UMEH) 480*32kB (UMEH) 447*64kB (MEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53576kB [ 3121.311748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3121.330346] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3121.376474] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3121.397873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3121.418245] 1295189 total pagecache pages [ 3121.422493] 0 pages in swap cache [ 3121.425939] Swap cache stats: add 0, delete 0, find 0/0 [ 3121.469080] Free swap = 0kB [ 3121.490868] Total swap = 0kB [ 3121.493911] 2097051 pages RAM [ 3121.497009] 0 pages HighMem/MovableOnly [ 3121.520659] 369649 pages reserved [ 3121.524176] 0 pages cma reserved [ 3121.527632] Out of memory (oom_kill_allocating_task): Kill process 26416 (syz-executor.5) score 0 or sacrifice child [ 3121.559233] Killed process 26416 (syz-executor.5) total-vm:93540kB, anon-rss:380kB, file-rss:33680kB, shmem-rss:11348kB [ 3121.609834] oom_reaper: reaped process 26416 (syz-executor.5), now anon-rss:0kB, file-rss:34756kB, shmem-rss:11480kB [ 3122.240764] Bluetooth: hci3: command 0x0419 tx timeout [ 3126.205142] device hsr_slave_1 left promiscuous mode [ 3126.212836] device hsr_slave_0 left promiscuous mode [ 3126.232488] team0 (unregistering): Port device team_slave_1 removed [ 3126.243237] team0 (unregistering): Port device team_slave_0 removed [ 3126.254335] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3126.265205] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3126.298488] bond0 (unregistering): Released all slaves 22:35:13 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020fffffff600000000b91e1d02000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0x8b800}, {&(0x7f0000000300)="d06fce691c2fc84d5315c8e82a9df311c6b799c20582", 0x16, 0x4}], 0x0, &(0x7f0000000200)={[{@gid}]}) [ 3127.101079] bridge0: port 1(bridge_slave_0) entered blocking state [ 3127.107519] bridge0: port 1(bridge_slave_0) entered disabled state [ 3127.172816] device bridge_slave_0 entered promiscuous mode [ 3127.271434] bridge0: port 2(bridge_slave_1) entered blocking state [ 3127.298263] bridge0: port 2(bridge_slave_1) entered disabled state [ 3127.439584] device bridge_slave_1 entered promiscuous mode [ 3127.636493] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3127.792468] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3127.925888] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3128.006180] team0: Port device team_slave_0 added [ 3128.046819] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3128.108900] team0: Port device team_slave_1 added [ 3128.346738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3128.515428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3128.785466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3129.212194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3129.219759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3129.515571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3129.650272] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3129.657979] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3130.109332] device hsr_slave_0 entered promiscuous mode [ 3130.230338] device hsr_slave_1 entered promiscuous mode [ 3130.282251] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3130.289532] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3131.169863] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 3131.727685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3131.820945] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3131.923945] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 3132.030279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3132.037906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3132.134080] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3132.189987] 8021q: adding VLAN 0 to HW filter on device team0 [ 3132.260845] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 3132.268127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3132.315620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3132.380438] bridge0: port 1(bridge_slave_0) entered blocking state [ 3132.386910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3132.543399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 3132.620284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3132.627610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3132.740603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3132.748417] bridge0: port 2(bridge_slave_1) entered blocking state [ 3132.754818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3132.883242] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 3132.908906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3133.018506] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 3133.035162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3133.083723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 3133.232540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3133.550735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3133.559231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3133.684484] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 3133.773866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3133.820942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3133.833513] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 3133.963815] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 3134.055819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3134.110698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3134.118466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3134.230566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3134.242580] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3134.248700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3134.401609] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3134.491346] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 3134.600743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3134.607609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3134.755505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3134.934306] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3135.093847] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 3135.320043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3135.328184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3135.407567] IPVS: ftp: loaded support on port[0] = 21 [ 3135.969143] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3136.071491] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3136.180651] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3136.644604] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 3136.671289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3136.679012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 22:35:23 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unshare(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x7bd80, 0x0, &(0x7f00000000c0)={[0x95]}, 0x8) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}], 0x4, 0x1000, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 3136.871634] chnl_net:caif_netlink_parms(): no params data found [ 3136.935011] device veth0_vlan entered promiscuous mode [ 3136.951419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3136.958728] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3137.053059] syz-executor.2: page allocation failure: order:5, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 3137.063684] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3137.068974] CPU: 1 PID: 26536 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 3137.076862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3137.086214] Call Trace: [ 3137.088805] dump_stack+0x1fc/0x2ef [ 3137.092524] warn_alloc.cold+0x7b/0x18f [ 3137.096504] ? zone_watermark_ok_safe+0x260/0x260 [ 3137.101355] ? wakeup_kswapd+0x151/0x660 [ 3137.105419] ? __zone_watermark_ok+0x300/0x300 [ 3137.110002] ? wake_all_kswapds+0x143/0x2c0 [ 3137.114329] __alloc_pages_nodemask+0x232f/0x2890 [ 3137.119183] ? batadv_hash_new+0x6f/0x290 [ 3137.123332] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3137.128177] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3137.133105] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3137.137948] ? netlink_sendmsg+0x6c3/0xc50 [ 3137.142181] ? sock_sendmsg+0xc3/0x120 [ 3137.146064] ? __sys_sendto+0x21a/0x320 [ 3137.150040] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3137.155142] ? mod_timer+0x4ef/0x1010 [ 3137.158944] ? ____cache_alloc_node+0x156/0x1d0 [ 3137.163628] cache_grow_begin+0xa4/0x8a0 [ 3137.167692] fallback_alloc+0x213/0x2e0 [ 3137.171698] __kmalloc+0x213/0x3c0 [ 3137.175240] ? batadv_hash_new+0xaa/0x290 [ 3137.179408] batadv_hash_new+0xaa/0x290 [ 3137.183386] ? queue_delayed_work_on+0x122/0x200 [ 3137.188156] batadv_dat_init+0x61/0x190 [ 3137.192129] batadv_mesh_init+0x4d0/0x690 [ 3137.196283] batadv_softif_init_late+0xad7/0xd90 [ 3137.201040] ? batadv_get_strings+0x40/0x40 [ 3137.205368] ? __dev_get_by_name+0x117/0x150 [ 3137.209782] ? batadv_get_strings+0x40/0x40 [ 3137.214280] register_netdevice+0x2dc/0x10f0 [ 3137.218691] ? unregister_netdev+0x20/0x20 [ 3137.222927] ? rtnl_create_link+0x145/0xa40 [ 3137.227257] rtnl_newlink+0x13b5/0x15c0 [ 3137.231237] ? rtnl_getlink+0x620/0x620 [ 3137.235654] ? __lock_acquire+0x6de/0x3ff0 [ 3137.239893] ? mark_held_locks+0xf0/0xf0 [ 3137.243952] ? mark_held_locks+0xf0/0xf0 [ 3137.248012] ? mark_held_locks+0xf0/0xf0 [ 3137.252192] ? __lock_acquire+0x6de/0x3ff0 [ 3137.256471] ? __update_load_avg_se+0x5ec/0xa00 [ 3137.261168] ? mark_held_locks+0xf0/0xf0 [ 3137.265256] ? __lock_acquire+0x6de/0x3ff0 [ 3137.269507] ? mark_held_locks+0xf0/0xf0 [ 3137.273581] ? _raw_spin_unlock_irq+0x24/0x80 [ 3137.278079] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3137.282694] ? mutex_trylock+0x1a0/0x1a0 [ 3137.286772] ? rtnl_getlink+0x620/0x620 [ 3137.290750] rtnetlink_rcv_msg+0x453/0xb80 [ 3137.294990] ? rtnl_calcit.isra.0+0x430/0x430 [ 3137.299486] ? __netlink_lookup+0x3fc/0x730 [ 3137.303809] ? lock_downgrade+0x720/0x720 [ 3137.307953] ? check_preemption_disabled+0x41/0x280 [ 3137.312982] netlink_rcv_skb+0x160/0x440 [ 3137.317144] ? rtnl_calcit.isra.0+0x430/0x430 [ 3137.321647] ? netlink_ack+0xae0/0xae0 [ 3137.325547] netlink_unicast+0x4d5/0x690 [ 3137.329612] ? netlink_sendskb+0x110/0x110 [ 3137.333851] ? _copy_from_iter_full+0x229/0x7c0 [ 3137.338525] ? __phys_addr_symbol+0x2c/0x70 [ 3137.342853] ? __check_object_size+0x17b/0x3e0 [ 3137.347449] netlink_sendmsg+0x6c3/0xc50 [ 3137.351546] ? aa_af_perm+0x230/0x230 [ 3137.355526] ? nlmsg_notify+0x1f0/0x1f0 [ 3137.359510] ? nlmsg_notify+0x1f0/0x1f0 [ 3137.363486] sock_sendmsg+0xc3/0x120 [ 3137.367205] __sys_sendto+0x21a/0x320 [ 3137.371006] ? __ia32_sys_getpeername+0xb0/0xb0 [ 3137.375691] ? lock_downgrade+0x720/0x720 [ 3137.379846] ? up_read+0x17/0x110 [ 3137.383300] ? __do_page_fault+0x180/0xd60 [ 3137.387538] __x64_sys_sendto+0xdd/0x1b0 [ 3137.391604] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3137.396362] do_syscall_64+0xf9/0x620 [ 3137.400174] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3137.405369] RIP: 0033:0x7f730eb528ac [ 3137.409079] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 3137.428073] RSP: 002b:00007ffdb0156960 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3137.435782] RAX: ffffffffffffffda RBX: 00007f730fbeb320 RCX: 00007f730eb528ac [ 3137.443572] RDX: 000000000000003c RSI: 00007f730fbeb370 RDI: 0000000000000003 [ 3137.450842] RBP: 0000000000000000 R08: 00007ffdb01569b4 R09: 000000000000000c [ 3137.458537] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 3137.465797] R13: 00007f730fbeb370 R14: 0000000000000003 R15: 0000000000000000 [ 3137.473061] Mem-Info: [ 3137.475473] active_anon:142825 inactive_anon:1291304 isolated_anon:0 [ 3137.475473] active_file:798 inactive_file:916 isolated_file:48 [ 3137.475473] unevictable:0 dirty:10 writeback:0 unstable:0 [ 3137.475473] slab_reclaimable:19681 slab_unreclaimable:123828 [ 3137.475473] mapped:1331755 shmem:1295176 pagetables:16438 bounce:0 [ 3137.475473] free:26154 free_pcp:768 free_cma:0 [ 3137.509839] Node 0 active_anon:521244kB inactive_anon:1463080kB active_file:1452kB inactive_file:1876kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1581432kB dirty:28kB writeback:0kB shmem:1467032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3137.538636] Node 1 active_anon:50056kB inactive_anon:3702136kB active_file:1740kB inactive_file:1788kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:3745588kB dirty:12kB writeback:0kB shmem:3713672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3137.566994] Node 0 DMA free:10908kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:2140kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3137.593805] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3137.598813] Node 0 DMA32 free:37248kB min:35996kB low:44992kB high:53988kB active_anon:519028kB inactive_anon:1460940kB active_file:1424kB inactive_file:2416kB unevictable:0kB writepending:12kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:13568kB pagetables:30028kB bounce:0kB free_pcp:1004kB local_pcp:1004kB free_cma:0kB [ 3137.629259] lowmem_reserve[]: 0 0 1 1 1 [ 3137.633233] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3137.659078] lowmem_reserve[]: 0 0 0 0 0 [ 3137.663129] Node 1 Normal free:56456kB min:53876kB low:67344kB high:80812kB active_anon:50056kB inactive_anon:3702136kB active_file:1788kB inactive_file:2360kB unevictable:0kB writepending:12kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:14144kB pagetables:35632kB bounce:0kB free_pcp:2068kB local_pcp:748kB free_cma:0kB [ 3137.692972] lowmem_reserve[]: 0 0 0 0 0 [ 3137.696947] Node 0 DMA: 13*4kB (UMEH) 19*8kB (UMEH) 19*16kB (UMEH) 11*32kB (UMH) 5*64kB (UMH) 2*128kB (EH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10908kB [ 3137.713362] Node 0 DMA32: 123*4kB (UEH) 415*8kB (UMH) 718*16kB (U) 694*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37508kB [ 3137.726914] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3137.737931] Node 1 Normal: 348*4kB (UME) 375*8kB (UMEH) 273*16kB (UMEH) 565*32kB (UMEH) 460*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56280kB [ 3137.752782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3137.761775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3137.770506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3137.779344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3137.787899] 1296951 total pagecache pages [ 3137.792033] 0 pages in swap cache [ 3137.795467] Swap cache stats: add 0, delete 0, find 0/0 [ 3137.800810] Free swap = 0kB [ 3137.803820] Total swap = 0kB [ 3137.806923] 2097051 pages RAM [ 3137.810008] 0 pages HighMem/MovableOnly [ 3137.813961] 369649 pages reserved [ 3137.817416] 0 pages cma reserved [ 3137.833277] Bluetooth: hci2: command 0x0409 tx timeout [ 3137.842790] ------------[ cut here ]------------ [ 3137.847572] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 3137.858033] WARNING: CPU: 1 PID: 26536 at lib/debugobjects.c:325 debug_print_object+0x160/0x250 [ 3137.866864] Kernel panic - not syncing: panic_on_warn set ... [ 3137.866864] [ 3137.874221] CPU: 1 PID: 26536 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 3137.882084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3137.891418] Call Trace: [ 3137.893994] dump_stack+0x1fc/0x2ef [ 3137.897613] panic+0x26a/0x50e [ 3137.900807] ? __warn_printk+0xf3/0xf3 [ 3137.904682] ? debug_print_object+0x160/0x250 [ 3137.909165] ? __probe_kernel_read+0x130/0x1b0 [ 3137.913734] ? __warn.cold+0x5/0x5a [ 3137.917347] ? __warn+0xe4/0x200 [ 3137.920699] ? debug_print_object+0x160/0x250 [ 3137.925196] __warn.cold+0x20/0x5a [ 3137.928737] ? debug_print_object+0x160/0x250 [ 3137.933226] report_bug+0x262/0x2b0 [ 3137.936860] do_error_trap+0x1d7/0x310 [ 3137.940749] ? math_error+0x310/0x310 [ 3137.944542] ? irq_work_claim+0xa6/0xc0 [ 3137.948510] ? irq_work_queue+0x29/0x80 [ 3137.952661] ? error_entry+0x72/0xd0 [ 3137.956366] ? trace_hardirqs_off_caller+0x2c/0x210 [ 3137.961373] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3137.966213] invalid_op+0x14/0x20 [ 3137.969660] RIP: 0010:debug_print_object+0x160/0x250 [ 3137.974856] Code: dd 20 f1 b3 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 14 dd 20 f1 b3 88 48 c7 c7 40 e5 b3 88 e8 65 92 7b 04 <0f> 0b 83 05 73 e6 af 07 01 48 83 c4 20 5b 5d 41 5c 41 5d c3 48 89 [ 3137.993754] RSP: 0018:ffff8881dda3ed60 EFLAGS: 00010082 [ 3137.999101] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 3138.006356] RDX: 0000000000000000 RSI: ffffffff814dff01 RDI: ffffed103bb47d9e [ 3138.013609] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 3138.021037] R10: 0000000000000005 R11: ffffffff8c66505b R12: ffffffff89f90a40 [ 3138.028290] R13: ffffffff815313f0 R14: ffff888055961b80 R15: 1ffff1103bb47db7 [ 3138.035554] ? calc_wheel_index+0x230/0x230 [ 3138.039874] ? vprintk_func+0x81/0x180 [ 3138.043761] debug_object_assert_init+0x1f0/0x2e0 [ 3138.048595] ? debug_object_free+0x380/0x380 [ 3138.053000] ? mark_held_locks+0xf0/0xf0 [ 3138.057057] ? batadv_mesh_init+0x5b7/0x690 [ 3138.061372] ? batadv_softif_init_late+0xad7/0xd90 [ 3138.066376] ? register_netdevice+0x2dc/0x10f0 [ 3138.070957] ? rtnl_newlink+0x13b5/0x15c0 [ 3138.075089] ? rtnetlink_rcv_msg+0x453/0xb80 [ 3138.079482] ? netlink_rcv_skb+0x160/0x440 [ 3138.083701] ? netlink_unicast+0x4d5/0x690 [ 3138.087935] del_timer+0x6d/0x100 [ 3138.091465] ? run_timer_softirq+0x670/0x670 [ 3138.095858] ? batadv_tvlv_handler_get+0x314/0x470 [ 3138.100776] ? trace_hardirqs_off+0x64/0x200 [ 3138.105172] try_to_grab_pending+0x2b6/0x6f0 [ 3138.109579] __cancel_work_timer+0xa6/0x590 [ 3138.113888] ? try_to_grab_pending+0x6f0/0x6f0 [ 3138.118461] ? batadv_tvlv_handler_get+0x33b/0x470 [ 3138.123377] ? batadv_tvlv_handler_put+0x40/0x40 [ 3138.128119] ? mark_held_locks+0xa6/0xf0 [ 3138.132172] batadv_nc_mesh_free+0x41/0x120 [ 3138.136481] batadv_mesh_free+0x7d/0x170 [ 3138.140527] batadv_mesh_init+0x5b7/0x690 [ 3138.144662] batadv_softif_init_late+0xad7/0xd90 [ 3138.149429] ? batadv_get_strings+0x40/0x40 [ 3138.153779] ? __dev_get_by_name+0x117/0x150 [ 3138.158180] ? batadv_get_strings+0x40/0x40 [ 3138.162494] register_netdevice+0x2dc/0x10f0 [ 3138.166899] ? unregister_netdev+0x20/0x20 [ 3138.171124] ? rtnl_create_link+0x145/0xa40 [ 3138.175438] rtnl_newlink+0x13b5/0x15c0 [ 3138.179407] ? rtnl_getlink+0x620/0x620 [ 3138.183379] ? __lock_acquire+0x6de/0x3ff0 [ 3138.187608] ? mark_held_locks+0xf0/0xf0 [ 3138.191659] ? mark_held_locks+0xf0/0xf0 [ 3138.195706] ? mark_held_locks+0xf0/0xf0 [ 3138.199755] ? __lock_acquire+0x6de/0x3ff0 [ 3138.203980] ? __update_load_avg_se+0x5ec/0xa00 [ 3138.208634] ? mark_held_locks+0xf0/0xf0 [ 3138.212688] ? __lock_acquire+0x6de/0x3ff0 [ 3138.216918] ? mark_held_locks+0xf0/0xf0 [ 3138.220961] ? _raw_spin_unlock_irq+0x24/0x80 [ 3138.225443] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3138.230048] ? mutex_trylock+0x1a0/0x1a0 [ 3138.234115] ? rtnl_getlink+0x620/0x620 [ 3138.238073] rtnetlink_rcv_msg+0x453/0xb80 [ 3138.242298] ? rtnl_calcit.isra.0+0x430/0x430 [ 3138.246778] ? __netlink_lookup+0x3fc/0x730 [ 3138.251087] ? lock_downgrade+0x720/0x720 [ 3138.255224] ? check_preemption_disabled+0x41/0x280 [ 3138.260232] netlink_rcv_skb+0x160/0x440 [ 3138.264278] ? rtnl_calcit.isra.0+0x430/0x430 [ 3138.268760] ? netlink_ack+0xae0/0xae0 [ 3138.272639] netlink_unicast+0x4d5/0x690 [ 3138.276704] ? netlink_sendskb+0x110/0x110 [ 3138.280931] ? _copy_from_iter_full+0x229/0x7c0 [ 3138.285594] ? __phys_addr_symbol+0x2c/0x70 [ 3138.289909] ? __check_object_size+0x17b/0x3e0 [ 3138.294487] netlink_sendmsg+0x6c3/0xc50 [ 3138.298543] ? aa_af_perm+0x230/0x230 [ 3138.302330] ? nlmsg_notify+0x1f0/0x1f0 [ 3138.306295] ? nlmsg_notify+0x1f0/0x1f0 [ 3138.310268] sock_sendmsg+0xc3/0x120 [ 3138.313968] __sys_sendto+0x21a/0x320 [ 3138.317756] ? __ia32_sys_getpeername+0xb0/0xb0 [ 3138.322440] ? lock_downgrade+0x720/0x720 [ 3138.326592] ? up_read+0x17/0x110 [ 3138.330033] ? __do_page_fault+0x180/0xd60 [ 3138.334264] __x64_sys_sendto+0xdd/0x1b0 [ 3138.338320] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3138.342887] do_syscall_64+0xf9/0x620 [ 3138.346782] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3138.351955] RIP: 0033:0x7f730eb528ac [ 3138.355655] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 3138.374627] RSP: 002b:00007ffdb0156960 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3138.382321] RAX: ffffffffffffffda RBX: 00007f730fbeb320 RCX: 00007f730eb528ac [ 3138.389574] RDX: 000000000000003c RSI: 00007f730fbeb370 RDI: 0000000000000003 [ 3138.396918] RBP: 0000000000000000 R08: 00007ffdb01569b4 R09: 000000000000000c [ 3138.404183] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 3138.411444] R13: 00007f730fbeb370 R14: 0000000000000003 R15: 0000000000000000 [ 3138.419466] Kernel Offset: disabled [ 3138.423094] Rebooting in 86400 seconds..