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", 0x1000}, {&(0x7f00000025c0)="a3f36bde355f845b0e1b8d9d2409a514", 0x10}], 0x2, 0x0, 0x0, 0x40004}, {0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002640)="400f07f190216b8b924578495b52b080066031a1a0969d9208bd2160edef4e7e57d85523dee383fafc6f232d3e12d66c5c199166f03b5c9e5f95ef4c55f6d519bb1d5784a41f69295906aabe652761a58edd24", 0x53}, {&(0x7f00000026c0)="1ee2ed00390f5121a9a34c6e7ca8f2ffca466b493ee92c0ed698a016d5dc0877616723", 0x23}, {&(0x7f0000002700)="4ded077e1a590a4fca179ab7ace1651b79ba925a710d765c0a41d4d0deff745b6dcc9b34e42acd623a8eedb61ae2f31a542b775179a014f01d31b37ed1f8c26644413eb6208f04e1a8", 0x49}, {&(0x7f0000002780)="8a0cdfe020f0a6724041d06e95f71931313a7880718e95e95ca07af22916e9d3b54530923dfae2bef2db608333862d8a9f40946abf2f561eab3a9cb3336e8b62d427c97b482d1c7d0c1d1876467982071b70f45a4d26c22ff1a44161be091346208220d94a529bce8389f75a3e1cf8f73f3b8a469cf26cdb0aa18848346fc21e78341fe9a5c41d0f8c19413a497e4c80", 0x90}, {&(0x7f0000002840)="b05a293c179c8dde9c65df264aaabd3efca924bdb63239d46f8643e1fda36ce52e2de31190d098", 0x27}, {&(0x7f0000002880)="223d422d913e229256bb1ea54815027e083024f970894494248f2d4ed019b4803da790d418be8e61d8b172f5cac0ae01acf70a24729aa24c80b8383816ee93e847791c23cebb8a438dfdd841e9fc1438b7fe17a48b93f98d62967faf9d271fc6ab6996311d80406bab0aaefd1db6993159c711a233f222caa4f33e51a7", 0xfdcc}], 0x6, 0x0, 0x0, 0x240408d0}, {0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000002940)="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", 0x1000}, {&(0x7f0000003940)="956408494069577e5f4330196c349308cdb1b794fc62a839812814e539f5fc86c18ede97749fa595173e4b0a441b971db242e5b7f510d1756bd880f6a27ef48a27bc07dca9041e65f0147f2f59d71e3932f26abd6b848c9d43dce01b47c59b8a41c9297e40b9490d4e47dfc9bb5eac97bf3b57c47382f1d59f8031292186bee8c4d636ca7b9f910387d05d318ac0ad30f065fa01fac8a0383e49616edad60b3ee37a7b78be941b16181631e5ec3b3516107b21b78d80cce11ee0eb2254fbca8c646ea1bcd18f4b23ad56905a1b5481d2471dc203708cd1215fb698ecd102dbd80051e62b9a24d1dc", 0xe8}, {&(0x7f0000003a40)="b17cce1d19da7ea0a37fc3b5d264cc3c1b5ba125a10bd4488d2164aef6c016f3a125ba728b021af6d56c14ac56db56a1da26eca992a4a6c4", 0x38}, {&(0x7f0000003a80)="008820fa056b8cc53ecc848c3d447b8311a8e05fb0c59e552530211cecab8cca33bad4e28b27b4908e7bc8d38a9ac5b633b4e2cd9824e6d957b080f1fc6d2925227a46dd2ff88df7aaab21b12998857e18ff6fad42f066ad38d56ebf1f5a49fd9a4f60350ffc23d6f548310d3b2bbfde7006208d3ed2daaed2b80bd1054e9f20fb9a09dfba531734a997807880b4a8db4ff3aa94dd6a894aeb16fa2e55cae8", 0x9f}, {&(0x7f0000003b40)="7b9c52d7a7d3984406faa4f3ffcef3f766facb9b15bb289e876490c0628bf14c215d5f06d625a88198df56886249ab6d64e037a6f3b82e2dcbfd031d1fc6ef71660cc687f0570791adaeacf822f630635df8b816c8116b8b93f029bb4198c539f26be7ed9b52e411c6037e35129776bc6c8552071e18c273a0f3089276b1017507fa578198ad9a70eb3d44233612a7b76f82f44815717923e0d11dcb041c3493f712e7045979e224613786f9cfd15ea4a35ac269ed897e6c39ff489e372a132f3dbbb8860cfecbeb175376156b1b730527e12bb17b17601c0539eae430dd43611a9fbd97aaf8e805ab768f71", 0xec}, {&(0x7f0000003c40)="3f76e9fa0119b3beeb60a9f6c16ef1e99e3a8a5d99c836e1ab5252f2c84cd96ede6cadc6735e66bc5d1a3dc4209290d17bc7c42b565cc2eb190381658b8802c42f9582cc3adde2638bfb1358151c7e60c38396c624e129cf3fa8ecb4909deca70e52512f1a83bae36bff4f6a7e876d19deb9ed53d36b49e4b2a855f4994812ba24f08a57b8f0772ae563ac2e1959e473d690a537cfd53c319df2419788552b8365414416b323bd4ea64533ca6587e50968cd6323190388fc7c3dd7a689", 0xbd}, {&(0x7f0000003d00)="0fe999ed0df1020c86cb26144a98d05a7f9ea8c64e2e2c5502f97744c32148d3f48fed8056dc322eec0804ff03df9ed547e8b308e042099329f08fd3b09a6492252eb3c4a37101a969f6a7e3b896f6a6041ca5e287f9c35edf9c8a427b3f86f1594b7d7bc446010b4f6a71ac3bc6e629cf137c", 0x73}, {&(0x7f0000003d80)="53aeed6a556984fe0396f209059605052e7bf7eb09d004ab849ccd0f50d6e46e867ae4047cc700f06b710a5861014f6ecc3fc96dfdb69d29dcd823aaa429d6ee1cfeea66a4426a4d7b", 0x49}, {&(0x7f0000003e00)="8588688f93e76b1639165625395edb824f912edd98f8c2c4ba3490620451d8b7c84b2b880469fc9bf55eb64e459dea7207cb070b2b4ffb54f22bed5bb84966618579ec2b6e13906d6792e722a4e9657ad087885fd514d2894a5b27e20f8cc604f1afe566f1a0f6f60109bb7422bddaefe66f190377a31a2a4c273516875645c9ddfc1d51bc2c73fa0d5bd8cccff78a3815b81d1d53250ba17da1b28af59a495ede0ecf11772f98dfe42879a653b62e15030488c311ed23a3e186175639ec50b03f2d2500aa70b326553999614164b192c69d40feed33266d", 0xd8}], 0x9, &(0x7f0000003f80)=[@op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x1c08}, @iv={0x4c, 0x117, 0x2, 0x3c, "aa7919282bc4d4fa1ff62c4404dbe42b7bacebed7bc49e59e969f45e4e8a6e114124f4d61ccf500ec2c8d56e7dec2c54574412e95086fba3f653ef3b"}, @iv={0x60, 0x117, 0x2, 0x4f, "c1ee964f4abf70b35a75960253b459e4361020bce66101dbf9dcc8d9f0d28877008abb777fb763b50c55e61d6b3cc18521988f92378d895fe7f888ff1e059a93d7511de84df5b2af1b20f023a8edf7"}, @op={0x10}], 0xdc, 0x4000001}, {0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000004080)="daf131b5c73a82e57439f2252d3cfc6779280f24a849c27948451c965ae0baf1fef528a3e566b62c80", 0x29}, {&(0x7f00000040c0)="1f702e94d46043fa05d4fef4679265566a0e42a7572ace5033129ad76ddfb798924bb3f60c0e65d0767ebce3335629107a40ca91a0e202c89c8cea9f67cec17a5a61dbeb97e46e91afc3d79111ff32db0ae013a67298f5be807023f5b679453533f9f48b2528719e1cc0bc80cd21366fcd5bf99321b20fa0edb0d87b19fd946578106bc0d9fdf48d29be2ec0f56f88dc1ce8781e7b36f5fcb8261458b84a298100660ff94d7f32b348c5b95e2d9de6b6674a8a8b942a879643", 0xb9}], 0x2, &(0x7f00000041c0)=[@op={0x10}], 0x10, 0x4080}, {0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000004200)="22da226eb9dfa6d2dd89b8de72a65ab1abaf827f34fc633b8ddca9490fab792ba20a942e9c5d6f2a18df1d6c8054372c8caf5d585d0c29424fd9fced0c714ab300d7712c5b07cf6d9ed2d1a3f57fa0a81d74876167b2f8a76f03be073521ccbec668a3c3e28fecf28d4a1cd17212485a2d993d52b8b544c489dff2c5d7f0180defa05b0c4b9fbe39a82b11053b43a3c6d01c08ce46cce0127062b1d9e6086d839724cb266666b422", 0xa8}, {&(0x7f00000042c0)="9ac72d62d7303952ac71243d12d5", 0xe}, {&(0x7f0000004300)="93c1ea6eabedb5bae5d90128b96123dd25ec3a7364c14764250a69b2b99b110f7e4d1799b3ef12a834ed239b0104578782339b1bd2e3bba1ce9d7e7a0e92e7cef7741e9c293ace94", 0x48}], 0x3, 0x0, 0x0, 0x20040080}, {0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f00000043c0)="c508d3b88395a74c962c3a23af0c3aac7b1b9e42e8ff302d17b6ed282c2cbd2f95fdb378c616f47f733dc61f87af7546591ff4fff41cdd2f1a38aa007dbf65c6527004d95c1282d6a3c7cbc694b03b59e4ae6fa986a37c6e13f1ec02650a3d0b9e119bd60c961ab82edfb40e532f51addde8aaf095", 0x75}, {&(0x7f0000004440)="f4d12d5fcfefe0abe3b83e7c29056ccea8fa30de5eb026719a314682fd8847c6c00615e3d7c13374cb84992d90f1ce1d5773527104e44d542705ae628e04b0618265c90dc8a152c94892d87c39b5ef251f167d45d4eed6bdff27322abe07c6f7924cccade49dce5c5fc1b7c1c1d855a3690be82edd4ec381ad1e67be6a62e8f508841539a58f6d526b255a095cfd796ef0b722eb802eaec56ac2c0f9cddb4ef276172da133a859b9de2f6464", 0xac}, {&(0x7f0000004500)="cd13ce1d37b2b7c1e7b72b408c1c4bf9ef855d4a6bddaefde721d301026759a22fd83d12cd6e369e0c9830f9", 0x2c}, {&(0x7f0000004540)="b8dc874f764d46c9ad9f94718a19f3954ff699b6fc80300267ad35b7f1b8438cea51e4bb8e1266b13b7bef2dc1a6dea191915ff5a89e8c2bf7b019828b10201e840d77c56eb840c6621e180a34048a32aa1485866eb8a7ba501f6759ceb5ff03031777840c8fc4bc999219b0e4a12865f4c86f7105241914401103f0bde98175f893ecef3286141abab7d0708ae304a50f337b2a7198d34a04827e0f96c65b8805b77b9a443adb4f72009483c2cb06fd24d264b371cbf48a696e7a24877ee681eab4e254786a4fa5381877245ed209", 0xcf}, {&(0x7f0000004640)="8c2a073f4967967c55e034bcec7e7ac8e9e5b1d8d981553f62c5bd285a14bf188cae9819ff322596186c003f8666c07d34db452200fcac64146ce87d525f1b4e09c2732559817528bb32b3731823c266ac87de28adee31fdaae82fb7ce370b5d8fabdb16c1", 0x65}, {&(0x7f00000046c0)="9ae32db5c2bbd1abc90af5255ef2f14a211d5be723a2f528d4428c02687c1f47cd88b4bba707a0be067189d4c3e4c5ef31022fda4c1abc32f62b9360bf1669777ac3a17ac06e12e9999cd1d514fac023ca416ce7efee44a08d1cce91363a8b55e816f3876c4b6bcf39900e495906bfcf06183d27b72aa65c2bcd0c481f28a39a0542e551cfb65fa6372ec1396c4754b10153a1c133", 0x95}, {&(0x7f0000004780)="cb60994c5826633840aa", 0xa}, {&(0x7f00000047c0)="cf43bcb258d7ebdc17c3f63e0da1f6944122e3d3d1148f279c02025ec983288a4309c79ca2e83ea86d8590bc73755d3d00d4b03456c6c551aec21727d466b658a05192663663a6ceb23a54582097afba44f1d634c9be90e06fd6e929eb744c03c72791bbd917b9c4bfc419699ce6940e65eaaae9dcd7635cfdfe8a7a1bda13b6db7f7c784b90d2cb151cb3b858a1a751f7fe3a7402f2b9d62b92faa722ba7367366ca1ee853efa11fb9158a53b697f1c51ff72df423a5e000caad9a655528c0674fcbb66fbd40e579959a45f1d1b7eb91660f056a849b503aa", 0xd9}], 0x8, &(0x7f0000004900)=[@iv={0x1010, 0x117, 0x2, 0x1000, "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"}, @assoc={0x10, 0x117, 0x4, 0x83}, @iv={0x38, 0x117, 0x2, 0x27, "f19dc7b50b7297f2375ce7900087a0f68cb77a0428c71f767e10bcd8d0e60feb1ede848d117716"}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x1}, @iv={0xb8, 0x117, 0x2, 0xa8, "c4c9e4742fa0f1c667ce5ce9f5b94bb16b9e1c0a7bea2101a9bd3c13b4ec6565f11d686664e3642fdce687f6406932b67dda6c34ebc37a650d0dff64dffd7581782276c3d5cbfd4bd7c7ee5c34daa492e6c9383c85c7bc8fd36b9d9f7a6974764db33c793f88fa301d500a7481a4f7ce367e17cc049852558dbb8b0d6688fdbbd734cb0d2953d04058b91067d9df59c61c2f8a2236a9111291aef1a6b07249ce70d013d16371684a"}, @iv={0x2c, 0x117, 0x2, 0x1b, "52fe138b56a151d9882e5d60610dd68ce22201e9e08740e7ba52e2"}, @iv={0x14, 0x117, 0x2, 0x2, "137b"}], 0x1170, 0x20000000}, {0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000005a80)="f2c6fd5e84d2af1af80c5e2437fe446cd462b1436a853afd4d9851af471a0d607f20d370c6d5fbd6a094b5bb0538f94889bf2865d49f9b0aa5debac27b905e466c5ac6355bc6fd02e0b60d76dd079e58f1089ec1dbb96ed72b4dc1850adccd365e974a2bc8f1082b2cfd7c3ea6a516b7cfe7ade0500c6e57d577e60d4824177c100ed3bd7819ae0fa2f029c42a", 0x8d}, {&(0x7f0000005b40)="980bd2c790bccc96e1b73987a0323b91e5dff3175838b31cb6f3b4e32d2ec6d728ccc6b791a6bb39185a20deeb82878106e1136d6ac58e00ad73c4b6a5f30b915d088ea1db8d8e4549ea95ca1485c599abad3c971e447d588506d41a2731795284bba34726140283ac120aff45e5b673ad92f3e0c0d598ecd1a8985b9caca251040cd873188d40ceea5e2906ad394a242e7f53c8a5cd969b98173ec202e8ba7d2b28499283133b0c4c5821120ea1e544d7c8f3ad0e7146cbd57a8fe93ae5e0856d57f40e5c4c", 0xc6}, {&(0x7f0000005c40)="eb29a469156485e8f28f3eb76870e8dc5414e0fb88ec8a0f2e7e5916e7cf8cb83d74922204994162c677dadfdc4808ff9941ca8177c5094278dc2fa76dd2f9c00e8e46cfa5ac03c842c80eda44a831fbd3d4a2ee05169fc0c2c67b0e98a1e6d234ce211719f1403d36d9c51b70a430ba907d97a2c14e85ccdda801ca9f9f3292933dfcf32bbac82031732c4056f702bc979ed144540ebfcac9fe460b9fe87426bb84ece62cc9cba712772f548c9cff3f8446d50c6e3987b3", 0xb8}, {&(0x7f0000005d00)="4799b5", 0x3}], 0x4, &(0x7f0000005d80)=[@iv={0x90, 0x117, 0x2, 0x7e, "d256b36496baca19c900899c5b2e3dd711aab36f77386e1aa4e021f23969174b31461adf38ffd574a51425edd49909cc608365b4dadc6f426c036b2ec562fea4b272d34c6ab579e10b675dd1171060a2ae8139e79935fac3f166bd802e045cfa09e96caae39e442f11be6f206ef879ca1b4c23018a2b4b7a7ae6eee6b95b"}, @assoc={0x10, 0x117, 0x4, 0x2f}, @iv={0x108, 0x117, 0x2, 0xf6, "a470b3b0cd856c4e6dfe9e0b6603a3c8491cd47fbd58df7ebb3c75370aed8e6c17c4cee34f7274c72ed0c128ea162ad28ac779a7a19ec5bbba3d5e939f9b211a78ae4223bc5867bed5f253d3f3f804e80dedd8baf51e3f047fe5f39fbde1567ebebc9f68db9eb21bad03f2986dc908d510c5b45a6063325894f04069c673b6c8d59a626577a57d168a64b3bbf3379657a80e4a74312543c29daa5660ab0e56b398fc6528c7539148c483cbd6828025ea7729c137f7d3deee83d331f8a7ba9c45db59d413c621ffab460377df24dece0721d952bbfa1dbd9aecd2b0b93a61dbc8598dfed5bff00745b5871495f37521576a1e0ac84280"}, @assoc={0x10, 0x117, 0x4, 0x327379f0}, @iv={0x58, 0x117, 0x2, 0x46, "bb6975a395a23b652b8858180a855b69299fd972ee82b2f2e6919ba5ba0c3932f829949d54686b454ca3b56403753ca47c0b57e19479606f33879fc4f6061b92c713e86c203d"}, @op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10}, @assoc={0x10, 0x117, 0x4, 0x9}], 0x260, 0x40}, {0x0, 0x0, &(0x7f0000006240)=[{&(0x7f0000006000)="6539efee20a48fd436fcb6cc0ded40287233e47979408045d7f706f3a619bc1e12c83d5567082df6a37498a8d15285e42f1f78ec4fabcbe112036997d05d74205ef219f69c0c2321adb33abd12902bdd4db1d5b1867668467ecddf4c280a873644aa0235facd0cc3ebea9fd101fa680d9aeff89807ab76adea37f5ce449f4127f1a97c7fa97b7f373fd63c398bcf664d94c9eac76c8f0bde614b4c669e1514fec7647aa6c02c7581cc744747140fb1953ed1f915ecb8", 0xb6}, {&(0x7f00000060c0)="3a149c04ecd97fc79669ac72f7b3262df1985e51d7ef2f42fa931533acc5eb03d0acb0c68371beb3eb3f71ec0a79806fa5c6fffbb2278884a8c6e7ffa1213cd51f51950b0ae421983fca1c6565bfa5056e16c7809056b0a3f4a507b2ee88de47aac3e49dce152a3f9c066f41f3e722e49cb3c13005ad5cb933e3b603a92cea4e0a336e9a252578dc340785d92865c0ff5107e97cc4fc3202b470d8b33c74fec060cfe7c1042999a65687e5773bd0c8", 0xaf}, {&(0x7f0000006180)="733c68734eaafa73d8d05c33846868002935b4b65b443147a0a6511fa7d32df992799b00ed", 0x25}, {&(0x7f00000061c0)="147c0ea3468bd01f00bc56a6e8cdb9b361f02dc702b13f3acf3ad00dbcb963aa550095403ba2cb1f8e4b8befd6730dd91bef3f73355e6cd4006fb4a514e1a25ec33a70cd721735364de5666ce3a56452fe333e74076b0aec5c11ea6f", 0x5c}], 0x4, 0x0, 0x0, 0x4000}, {0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000006280)="0265263b80a18e2d21512840fbaec3a10487f19b80c7534c034e5d8f534359d6810dcc340c14a76ae1ab2ff9dfc0dc232454d055b5ef35a221020806d08e04da3384b0dc1e2cfcc2", 0x48}], 0x1, 0x0, 0x0, 0x40}], 0xa, 0x20040000) openat$tun(0xffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x201, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000006480)='l2tp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]) [ 2259.864420][T26580] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2259.870083][T26579] IPVS: ftp: loaded support on port[0] = 21 [ 2259.880827][T26582] IPVS: ftp: loaded support on port[0] = 21 [ 2259.892158][T26581] IPVS: ftp: loaded support on port[0] = 21 [ 2259.902753][T26585] IPVS: ftp: loaded support on port[0] = 21 [ 2259.915328][T26592] device bond0 left promiscuous mode 18:51:13 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) [ 2259.935873][T26592] device bond_slave_0 left promiscuous mode [ 2259.950256][T26592] device bond_slave_1 left promiscuous mode [ 2259.960641][T26592] bridge332: port 1(bond0) entered disabled state [ 2259.975895][T26582] syz-executor.1 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2259.993789][T26582] CPU: 1 PID: 26582 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 2260.002518][T26582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2260.012795][T26582] Call Trace: [ 2260.016091][T26582] dump_stack+0x188/0x20d [ 2260.020840][T26582] dump_header+0x10b/0x826 [ 2260.025258][T26582] oom_kill_process.cold+0x10/0x15 [ 2260.030467][T26582] out_of_memory+0x31f/0x12f0 [ 2260.035182][T26582] ? oom_killer_disable+0x270/0x270 [ 2260.040409][T26582] ? mutex_trylock+0x246/0x2c0 [ 2260.045186][T26582] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2260.052810][T26582] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2260.059412][T26582] ? warn_alloc+0x110/0x110 [ 2260.064038][T26582] ? do_fast_syscall_32+0x270/0xe90 [ 2260.069344][T26582] __alloc_pages_nodemask+0x5d9/0x810 [ 2260.075403][T26582] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2260.082184][T26582] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2260.087999][T26582] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2260.093976][T26582] ? do_raw_spin_unlock+0x171/0x260 [ 2260.099168][T26582] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2260.105825][T26582] alloc_pages_current+0xff/0x200 [ 2260.110944][T26582] __vmalloc_node_range+0x478/0x7a0 [ 2260.116237][T26582] ? ebt_register_table+0x1e6/0xc70 [ 2260.121443][T26582] vmalloc+0x67/0x80 [ 2260.125339][T26582] ? ebt_register_table+0x1e6/0xc70 [ 2260.130546][T26582] ebt_register_table+0x1e6/0xc70 [ 2260.135621][T26582] ? ebt_broute+0x700/0x700 [ 2260.141122][T26582] ops_init+0xaf/0x420 [ 2260.145205][T26582] setup_net+0x2de/0x860 [ 2260.149443][T26582] ? ops_init+0x420/0x420 [ 2260.153770][T26582] copy_net_ns+0x293/0x590 [ 2260.158172][T26582] create_new_namespaces+0x3fb/0xb30 [ 2260.163531][T26582] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2260.169396][T26582] ksys_unshare+0x43d/0x8e0 [ 2260.173931][T26582] ? walk_process_tree+0x2c0/0x2c0 [ 2260.179058][T26582] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2260.184958][T26582] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2260.190771][T26582] ? trace_hardirqs_off_caller+0x55/0x230 [ 2260.196506][T26582] __ia32_sys_unshare+0x2c/0x40 [ 2260.201435][T26582] do_fast_syscall_32+0x270/0xe90 [ 2260.206461][T26582] entry_SYSENTER_compat+0x70/0x7f [ 2260.232494][T26582] Mem-Info: [ 2260.235857][T26582] active_anon:320785 inactive_anon:8346 isolated_anon:0 [ 2260.235857][T26582] active_file:2615 inactive_file:5705 isolated_file:0 [ 2260.235857][T26582] unevictable:14 dirty:3 writeback:0 unstable:0 [ 2260.235857][T26582] slab_reclaimable:20133 slab_unreclaimable:401212 [ 2260.235857][T26582] mapped:60545 shmem:8636 pagetables:30694 bounce:0 [ 2260.235857][T26582] free:698660 free_pcp:222 free_cma:0 [ 2260.275509][T26582] Node 0 active_anon:1124128kB inactive_anon:16652kB active_file:0kB inactive_file:20kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217056kB dirty:4kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 991232kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2260.304991][T26592] bridge333: port 1(bond0) entered blocking state [ 2260.314197][T26582] Node 0 DMA free:10276kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2268kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:104kB pagetables:352kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2260.318874][T26592] bridge333: port 1(bond0) entered disabled state [ 2260.349380][T26582] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2260.356665][T26582] Node 0 DMA32 free:115148kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1121860kB inactive_anon:16652kB active_file:0kB inactive_file:20kB unevictable:56kB writepending:4kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:18344kB pagetables:35824kB bounce:0kB free_pcp:888kB local_pcp:608kB free_cma:0kB [ 2260.357830][T26592] device bond0 entered promiscuous mode [ 2260.393658][T26582] lowmem_reserve[]: 0 0 0 0 0 [ 2260.401038][T26582] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2260.401431][T26592] device bond_slave_0 entered promiscuous mode [ 2260.430215][T26582] lowmem_reserve[]: 0 0 0 0 0 [ 2260.442222][T26582] Node 0 DMA: 10*4kB (UM) 12*8kB (UM) 5*16kB (UM) 8*32kB (UE) 3*64kB (UME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10264kB [ 2260.445048][T26592] device bond_slave_1 entered promiscuous mode [ 2260.459625][T26582] Node 0 DMA32: 1821*4kB (UM) 1076*8kB (UME) 667*16kB (UME) 370*32kB (UME) 214*64kB (UME) 109*128kB (ME) 61*256kB (ME) 21*512kB (UM) 0*1024kB 11*2048kB (M) 0*4096kB = 114948kB [ 2260.483525][T26582] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2260.497741][T26582] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2260.515979][T26582] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 18:51:14 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) [ 2260.528004][T26582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2260.553408][T26602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:51:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x300}, 0x0) [ 2260.575320][T26582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2260.624149][T26582] 16956 total pagecache pages [ 2260.640175][T26582] 0 pages in swap cache [ 2260.657028][T26591] IPVS: ftp: loaded support on port[0] = 21 [ 2260.668528][T26587] IPVS: ftp: loaded support on port[0] = 21 [ 2260.681009][T26582] Swap cache stats: add 0, delete 0, find 0/0 [ 2260.694934][T26590] IPVS: ftp: loaded support on port[0] = 21 [ 2260.713009][T26582] Free swap = 0kB 18:51:14 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) [ 2260.729888][T26582] Total swap = 0kB [ 2260.744672][T26582] 1965979 pages RAM [ 2260.752574][T26582] 0 pages HighMem/MovableOnly [ 2260.775211][T26582] 349380 pages reserved [ 2260.788507][T26640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2260.804440][T26582] 0 pages cma reserved [ 2260.815083][T26582] Unreclaimable slab info: [ 2260.831566][T26582] Name Used Total [ 2260.840319][T26582] pid_3 1KB 7KB [ 2260.844408][T26648] device bond0 left promiscuous mode [ 2260.846610][T26582] pid_2 934KB 1121KB [ 2260.852805][T26648] device bond_slave_0 left promiscuous mode [ 2260.866461][T26582] bio-3 0KB 7KB [ 2260.870365][T26648] device bond_slave_1 left promiscuous mode [ 2260.880321][T26582] AF_VSOCK 14KB 16KB [ 2260.884208][T26648] bridge333: port 1(bond0) entered disabled state [ 2260.887258][T26582] batadv_tl_cache 4KB 12KB [ 2260.904310][T26582] SMC 45KB 49KB [ 2260.911134][T26582] TIPC 628KB 643KB [ 2260.917736][T26582] rds_tcp_connection 10KB 11KB [ 2260.930942][T26582] RDS 18KB 18KB [ 2260.937035][T26582] rds_connection 0KB 3KB [ 2260.950357][T26582] SCTPv6 1122KB 1141KB [ 2260.956478][T26582] SCTP 202KB 236KB [ 2260.965640][T26582] sctp_chunk 10KB 15KB [ 2260.973998][T26582] sctp_bind_bucket 0KB 3KB [ 2260.979170][T26648] bridge334: port 1(bond0) entered blocking state [ 2260.986600][T26582] DCCPv6 1333KB 1346KB [ 2260.987775][T26648] bridge334: port 1(bond0) entered disabled state [ 2260.993574][T26582] DCCP 1238KB 1250KB [ 2261.001169][T26648] device bond0 entered promiscuous mode [ 2261.011663][T26648] device bond_slave_0 entered promiscuous mode [ 2261.012330][T26582] L2TP/IPv6 6KB 6KB [ 2261.018750][T26648] device bond_slave_1 entered promiscuous mode [ 2261.034772][T26582] L2TP/IP 23KB 23KB [ 2261.046551][T26582] KCM 17KB 19KB [ 2261.055922][T26582] kcm_mux_cache 7KB 7KB [ 2261.066963][T26582] RXRPC 884KB 884KB [ 2261.076416][T26582] rxrpc_call_jar 5470KB 5471KB [ 2261.086094][T26582] bridge_fdb_cache 74KB 74KB [ 2261.095528][T26582] MPTCPv6 35KB 38KB [ 2261.106713][T26582] fib6_nodes 175KB 184KB [ 2261.116549][T26582] ip6_dst_cache 279KB 423KB [ 2261.126019][T26582] PINGv6 1KB 3KB [ 2261.135638][T26582] RAWv6 4698KB 4700KB 18:51:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x500}, 0x0) [ 2261.139565][T26648] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2261.145764][T26582] UDPLITEv6 19KB 19KB 18:51:15 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) [ 2261.207767][T26582] UDPv6 1083KB 1085KB [ 2261.254153][T26582] TCPv6 1154KB 1169KB [ 2261.288513][T26582] nf_conntrack 12KB 37KB [ 2261.316488][T26582] sd_ext_cdb 0KB 7KB [ 2261.324243][T26658] device bond0 left promiscuous mode [ 2261.338752][T26658] device bond_slave_0 left promiscuous mode [ 2261.346189][T26582] scsi_sense_cache 1056KB 1064KB [ 2261.351604][T26658] device bond_slave_1 left promiscuous mode [ 2261.366589][T26658] bridge334: port 1(bond0) entered disabled state [ 2261.371718][T26582] virtio_scsi_cmd 16KB 16KB [ 2261.402809][T26582] sgpool-128 8KB 8KB [ 2261.422674][T26582] sgpool-64 4KB 12KB [ 2261.443955][T26582] sgpool-32 3KB 15KB [ 2261.461737][T26582] sgpool-16 23KB 26KB [ 2261.469247][T26658] bridge335: port 1(bond0) entered blocking state [ 2261.478006][T26658] bridge335: port 1(bond0) entered disabled state [ 2261.483769][T26582] sgpool-8 41KB 52KB [ 2261.507478][T26582] mqueue_inode_cache 53KB 62KB [ 2261.507730][T26658] device bond0 entered promiscuous mode [ 2261.529023][T26582] f2fs_bio_post_read_ctx 16KB 16KB [ 2261.536768][T26658] device bond_slave_0 entered promiscuous mode [ 2261.548141][T26582] jfs_mp 7KB 7KB [ 2261.554155][T26658] device bond_slave_1 entered promiscuous mode [ 2261.582660][T26661] device bond0 left promiscuous mode [ 2261.587721][T26582] cifs_small_rq 15KB 16KB [ 2261.590101][T26661] device bond_slave_0 left promiscuous mode [ 2261.602707][T26661] device bond_slave_1 left promiscuous mode [ 2261.611296][T26661] bridge335: port 1(bond0) entered disabled state [ 2261.633086][T26582] cifs_request 67KB 67KB [ 2261.647311][T26582] cifs_mpx_ids 0KB 8KB [ 2261.658382][T26582] nfs_commit_data 3KB 7KB [ 2261.698627][T26582] nfs_write_data 34KB 44KB [ 2261.704805][T26582] ext4_system_zone 1KB 7KB [ 2261.733785][T26582] ext4_io_end_vec 11KB 15KB [ 2261.746317][T26582] ext4_bio_post_read_ctx 15KB 15KB [ 2261.773769][T26582] io_kiocb 0KB 3KB [ 2261.783342][T26582] kioctx 21KB 23KB [ 2261.814417][T26582] aio_kiocb 6KB 7KB [ 2261.834934][T26582] userfaultfd_ctx_cache 2KB 4KB [ 2261.860870][T26582] bio-2 1KB 7KB [ 2261.867065][T26582] fasync_cache 1KB 3KB [ 2261.882998][T26582] pid_namespace 4KB 11KB [ 2261.893880][T26582] posix_timers_cache 7KB 11KB [ 2261.905840][T26582] kvm_vcpu 0KB 70KB [ 2261.917169][T26582] kvm_mmu_page_header 58KB 61KB [ 2261.934025][T26582] pte_list_desc 2KB 3KB [ 2261.945536][T26582] x86_emulator 51KB 54KB [ 2261.963927][T26582] x86_fpu 0KB 43KB [ 2261.972756][T26582] rpc_buffers 17KB 25KB [ 2261.987143][T26582] rpc_tasks 2KB 7KB [ 2261.996209][T26582] UNIX 552KB 635KB [ 2262.012380][T26582] UDP-Lite 71KB 73KB [ 2262.025892][T26582] MPTCP 10KB 15KB [ 2262.036547][T26582] tcp_bind_bucket 35KB 40KB [ 2262.054167][T26582] inet_peer_cache 28KB 32KB [ 2262.067135][T26582] ip_fib_trie 24KB 31KB [ 2262.078151][T26582] ip_fib_alias 112KB 134KB [ 2262.095241][T26582] ip_dst_cache 98KB 168KB [ 2262.102396][T26582] PING 12KB 15KB [ 2262.120171][T26582] RAW 2846KB 2859KB [ 2262.126329][T26582] UDP 967KB 973KB [ 2262.164808][T26582] TCP 305KB 346KB [ 2262.177350][T26582] hugetlbfs_inode_cache 6KB 10KB [ 2262.191100][T26582] fscache_cookie_jar 1KB 7KB [ 2262.198042][T26582] bio-1 10KB 15KB [ 2262.216757][T26582] eventpoll_pwq 7KB 35KB [ 2262.228600][T26582] eventpoll_epi 12KB 39KB [ 2262.234726][T26582] inotify_inode_mark 4KB 7KB [ 2262.260735][T26582] request_queue 157KB 157KB [ 2262.267369][T26582] blkdev_ioc 11KB 19KB [ 2262.288609][T26582] bio-0 529KB 548KB [ 2262.294828][T26582] biovec-max 4313KB 4313KB [ 2262.308179][T26582] biovec-64 108KB 149KB [ 2262.314432][T26582] biovec-16 31KB 33KB [ 2262.320592][T26582] bio_integrity_payload 1KB 7KB [ 2262.327290][T26582] khugepaged_mm_slot 289KB 328KB [ 2262.333639][T26582] user_namespace 4KB 7KB [ 2262.340261][T26582] uid_cache 0KB 4KB [ 2262.346599][T26582] dmaengine-unmap-256 2KB 6KB [ 2262.354794][T26582] dmaengine-unmap-128 1KB 3KB [ 2262.363253][T26582] dmaengine-unmap-16 0KB 4KB [ 2262.371066][T26582] dmaengine-unmap-2 0KB 3KB [ 2262.377509][T26582] audit_buffer 0KB 3KB [ 2262.385750][T26582] skbuff_ext_cache 0KB 4KB [ 2262.392815][T26582] skbuff_fclone_cache 469KB 690KB [ 2262.400595][T26582] skbuff_head_cache 25589KB 40593KB [ 2262.406669][T26582] configfs_dir_cache 1KB 8KB [ 2262.413793][T26582] file_lock_cache 4KB 7KB [ 2262.420551][T26582] file_lock_ctx 8KB 11KB [ 2262.426876][T26582] fsnotify_mark_connector 1KB 8KB [ 2262.448659][T26582] net_namespace 3090KB 3119KB [ 2262.454772][T26582] task_delay_info 809KB 957KB [ 2262.469090][T26582] taskstats 606KB 694KB [ 2262.475193][T26582] proc_dir_entry 21149KB 21150KB [ 2262.498586][T26582] pde_opener 9KB 15KB [ 2262.504713][T26582] seq_file 27KB 63KB [ 2262.520824][T26582] sigqueue 0KB 3KB [ 2262.529788][T26582] shmem_inode_cache 10771KB 11355KB [ 2262.535970][T26582] kernfs_iattrs_cache 9KB 15KB [ 2262.543399][T26582] kernfs_node_cache 98153KB 98157KB [ 2262.550279][T26582] mnt_cache 351KB 363KB [ 2262.556362][T26582] filp 4706KB 4785KB [ 2262.563339][T26582] names_cache 53826KB 53826KB [ 2262.570070][T26582] iint_cache 28KB 66KB [ 2262.576144][T26582] lsm_file_cache 874KB 897KB [ 2262.583239][T26582] key_jar 28KB 43KB [ 2262.592784][T26582] uts_namespace 5KB 15KB [ 2262.601512][T26582] nsproxy 128KB 138KB [ 2262.608153][T26582] vm_area_struct 12207KB 13450KB [ 2262.616083][T26582] mm_struct 2392KB 2578KB [ 2262.623464][T26582] fs_cache 568KB 704KB [ 2262.630204][T26582] files_cache 1915KB 2208KB [ 2262.636281][T26582] signal_cache 5434KB 5635KB [ 2262.643348][T26582] sighand_cache 3998KB 4100KB [ 2262.650374][T26582] task_struct 21836KB 21919KB [ 2262.656455][T26582] cred_jar 2169KB 2172KB [ 2262.663478][T26582] anon_vma_chain 3764KB 4433KB [ 2262.672076][T26582] anon_vma 2990KB 3116KB [ 2262.678154][T26582] pid 360KB 461KB [ 2262.691922][T26582] Acpi-Operand 156KB 194KB [ 2262.698124][T26582] Acpi-ParseExt 9KB 11KB [ 2262.705374][T26582] Acpi-Parse 41KB 47KB [ 2262.714046][T26582] Acpi-State 52KB 63KB [ 2262.723571][T26582] Acpi-Namespace 23KB 27KB [ 2262.732324][T26582] shared_policy_node 0KB 3KB [ 2262.740497][T26582] numa_policy 4KB 23KB [ 2262.746680][T26582] trace_event_file 358KB 358KB [ 2262.754820][T26582] ftrace_event_field 491KB 496KB [ 2262.762760][T26582] pool_workqueue 872KB 872KB [ 2262.778566][T26582] vmap_area 1232KB 2346KB [ 2262.784684][T26582] debug_objects_cache 7834KB 7874KB [ 2262.800073][T26582] page->ptl 3347KB 3913KB [ 2262.806283][T26582] kmalloc-4M 4096KB 4096KB [ 2262.829403][T26582] kmalloc-1M 8192KB 8192KB [ 2262.836353][T26582] kmalloc-512k 4096KB 4096KB [ 2262.858835][T26582] kmalloc-256k 221184KB 221184KB [ 2262.864949][T26582] kmalloc-128k 18944KB 19200KB [ 2262.888536][T26582] kmalloc-64k 6656KB 7296KB [ 2262.894990][T26582] kmalloc-32k 48000KB 48000KB [ 2262.903551][T26582] kmalloc-16k 23936KB 23936KB [ 2262.911107][T26582] kmalloc-8k 47600KB 47600KB [ 2262.917188][T26582] kmalloc-4k 279384KB 279496KB [ 2262.924705][T26582] kmalloc-2k 157560KB 157560KB [ 2262.933113][T26582] kmalloc-1k 205432KB 249172KB [ 2262.940459][T26582] kmalloc-512 45821KB 46708KB [ 2262.947102][T26582] kmalloc-256 31985KB 31988KB [ 2262.954802][T26582] kmalloc-128 5455KB 5492KB [ 2262.962015][T26582] kmalloc-96 4366KB 4368KB [ 2262.969227][T26582] kmalloc-64 10460KB 10624KB [ 2262.975911][T26582] kmalloc-32 6747KB 6981KB [ 2262.983392][T26582] kmalloc-192 8227KB 8268KB [ 2262.991032][T26582] kmem_cache 409KB 413KB [ 2263.000745][T26582] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4806,uid=0 [ 2263.017189][T26582] Out of memory: Killed process 4806 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2263.038582][ T1144] oom_reaper: reaped process 4806 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 18:51:18 executing program 5: unshare(0x40000000) 18:51:18 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) 18:51:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x600}, 0x0) 18:51:18 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000000c0)={0x0, 0x38cd}) [ 2264.473041][T26666] IPVS: ftp: loaded support on port[0] = 21 [ 2264.494955][T26668] __nla_validate_parse: 2 callbacks suppressed [ 2264.494964][T26668] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2264.500234][T26671] IPVS: ftp: loaded support on port[0] = 21 18:51:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x70, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @loopback}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff6690}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}]}, 0x70}}, 0x833b5f0442f3c67b) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) 18:51:18 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$UI_END_FF_UPLOAD(r0, 0x406055c9, &(0x7f00000001c0)={0x1, 0x0, {0x54, 0x0, 0x400, {0x1, 0x1}, {0x5, 0x2}, @const={0x401, {0x1, 0x20, 0x0, 0xffff}}}, {0x0, 0x9, 0x8000, {0x1, 0x5}, {0x9, 0x8000}, @cond=[{0x5, 0x0, 0x6, 0x6, 0x3762, 0x1f}, {0xfff, 0x74, 0x5, 0xfa44, 0x100, 0x6}]}}) accept4$alg(r0, 0x0, 0x0, 0x180000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) ioctl$VIDIOC_DQBUF(r2, 0xc0445611, &(0x7f0000000080)={0x5, 0x2, 0x4, 0x200000, 0x80000000, {r4, r5/1000+10000}, {0x3, 0x0, 0x3f, 0x81, 0x3, 0x3f, "a28726e7"}, 0x4, 0x0, @planes=&(0x7f0000000040)={0x1000, 0x9, @fd, 0x8001}, 0x800, 0x0, r6}) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r9, r8, 0x0, 0x5) move_mount(r7, &(0x7f0000000100)='./file0\x00', r8, &(0x7f0000000180)='./file0\x00', 0x35) 18:51:18 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) [ 2264.534612][T26668] bridge336: port 1(bond0) entered blocking state [ 2264.541679][T26668] bridge336: port 1(bond0) entered disabled state [ 2264.551675][T26668] device bond0 entered promiscuous mode [ 2264.557475][T26668] device bond_slave_0 entered promiscuous mode [ 2264.564222][T26668] device bond_slave_1 entered promiscuous mode 18:51:18 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) [ 2264.636319][T26686] IPVS: ftp: loaded support on port[0] = 21 [ 2264.654795][T26683] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2264.696662][T26698] IPVS: ftp: loaded support on port[0] = 21 18:51:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x700}, 0x0) [ 2264.759578][T26686] syz-executor.0 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2264.803386][T26686] CPU: 1 PID: 26686 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0 [ 2264.812503][T26686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2264.822651][T26686] Call Trace: [ 2264.825953][T26686] dump_stack+0x188/0x20d [ 2264.830340][T26686] dump_header+0x10b/0x826 [ 2264.834853][T26686] oom_kill_process.cold+0x10/0x15 [ 2264.839975][T26686] out_of_memory+0x31f/0x12f0 [ 2264.844676][T26686] ? oom_killer_disable+0x270/0x270 [ 2264.849977][T26686] ? mutex_trylock+0x246/0x2c0 [ 2264.854767][T26686] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2264.859844][T26676] IPVS: ftp: loaded support on port[0] = 21 [ 2264.861539][T26686] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2264.861569][T26686] ? warn_alloc+0x110/0x110 [ 2264.861586][T26686] ? do_fast_syscall_32+0x270/0xe90 [ 2264.861609][T26686] __alloc_pages_nodemask+0x5d9/0x810 [ 2264.889444][T26686] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2264.896212][T26686] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2264.902069][T26686] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2264.908062][T26686] ? do_raw_spin_unlock+0x171/0x260 [ 2264.913306][T26686] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2264.919727][T26686] alloc_pages_current+0xff/0x200 [ 2264.924766][T26686] __vmalloc_node_range+0x478/0x7a0 [ 2264.929982][T26686] ? ebt_register_table+0x1e6/0xc70 [ 2264.934465][T26734] IPVS: ftp: loaded support on port[0] = 21 [ 2264.935206][T26686] vmalloc+0x67/0x80 [ 2264.935227][T26686] ? ebt_register_table+0x1e6/0xc70 [ 2264.935243][T26686] ebt_register_table+0x1e6/0xc70 [ 2264.935264][T26686] ? ebt_broute+0x700/0x700 [ 2264.959960][T26686] ops_init+0xaf/0x420 [ 2264.964043][T26686] setup_net+0x2de/0x860 [ 2264.968294][T26686] ? ops_init+0x420/0x420 [ 2264.973052][T26686] copy_net_ns+0x293/0x590 [ 2264.977646][T26686] create_new_namespaces+0x3fb/0xb30 [ 2264.982944][T26686] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2264.988836][T26686] ksys_unshare+0x43d/0x8e0 [ 2264.993356][T26686] ? walk_process_tree+0x2c0/0x2c0 [ 2264.998522][T26686] ? __ia32_sys_clock_gettime32+0x165/0x240 18:51:18 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) [ 2265.004442][T26686] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2265.010279][T26686] ? fput_many+0x2f/0x1a0 [ 2265.014637][T26686] ? trace_hardirqs_off_caller+0x55/0x230 [ 2265.020384][T26686] __ia32_sys_unshare+0x2c/0x40 [ 2265.025444][T26686] do_fast_syscall_32+0x270/0xe90 [ 2265.031531][T26686] entry_SYSENTER_compat+0x70/0x7f [ 2265.042303][T26686] Mem-Info: [ 2265.045966][T26686] active_anon:320765 inactive_anon:8346 isolated_anon:0 [ 2265.045966][T26686] active_file:2619 inactive_file:5723 isolated_file:0 [ 2265.045966][T26686] unevictable:14 dirty:41 writeback:24 unstable:0 [ 2265.045966][T26686] slab_reclaimable:20193 slab_unreclaimable:399594 [ 2265.045966][T26686] mapped:60604 shmem:8636 pagetables:30645 bounce:0 [ 2265.045966][T26686] free:699913 free_pcp:173 free_cma:0 [ 2265.090921][T26686] Node 0 active_anon:1124044kB inactive_anon:16652kB active_file:16kB inactive_file:4kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217060kB dirty:20kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 991232kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2265.122898][T26686] Node 0 DMA free:10268kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2184kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:72kB pagetables:276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2265.154062][T26686] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2265.159873][T26686] Node 0 DMA32 free:116596kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1121860kB inactive_anon:16652kB active_file:16kB inactive_file:4kB unevictable:56kB writepending:20kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:18344kB pagetables:35824kB bounce:0kB free_pcp:696kB local_pcp:444kB free_cma:0kB [ 2265.193253][T26686] lowmem_reserve[]: 0 0 0 0 0 [ 2265.197071][T26735] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2265.197998][T26686] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2265.237107][T26686] lowmem_reserve[]: 0 0 0 0 0 18:51:19 executing program 5: unshare(0x40000000) [ 2265.242191][T26686] Node 0 DMA: 7*4kB (UM) 8*8kB (M) 4*16kB (UM) 10*32kB (UME) 3*64kB (UME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10268kB [ 2265.263007][T26686] Node 0 DMA32: 1821*4kB (UM) 1026*8kB (UME) 644*16kB (UME) 421*32kB (UME) 221*64kB (UME) 112*128kB (UME) 62*256kB (UME) 20*512kB (M) 0*1024kB 11*2048kB (M) 0*4096kB = 116388kB [ 2265.275271][T26732] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2265.290948][T26686] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2265.298008][T26729] device bond0 left promiscuous mode [ 2265.309145][T26729] device bond_slave_0 left promiscuous mode [ 2265.315117][T26686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2265.317006][T26729] device bond_slave_1 left promiscuous mode [ 2265.330779][T26686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2265.339340][T26729] bridge336: port 1(bond0) entered disabled state [ 2265.348090][T26686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2265.353873][T26765] IPVS: ftp: loaded support on port[0] = 21 [ 2265.359611][T26686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2265.378068][T26686] 16978 total pagecache pages [ 2265.383616][T26686] 0 pages in swap cache [ 2265.387899][T26686] Swap cache stats: add 0, delete 0, find 0/0 [ 2265.400620][T26686] Free swap = 0kB [ 2265.404431][T26686] Total swap = 0kB [ 2265.406662][T26701] IPVS: ftp: loaded support on port[0] = 21 [ 2265.412229][T26686] 1965979 pages RAM 18:51:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xa00}, 0x0) 18:51:19 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) [ 2265.448744][T26686] 0 pages HighMem/MovableOnly [ 2265.454192][T26686] 349380 pages reserved [ 2265.483082][T26686] 0 pages cma reserved [ 2265.487277][T26686] Unreclaimable slab info: [ 2265.503629][T26686] Name Used Total [ 2265.513039][T26686] pid_3 1KB 7KB [ 2265.525105][T26686] pid_2 934KB 1121KB [ 2265.537773][T26686] bio-3 0KB 7KB [ 2265.574352][T26686] AF_VSOCK 14KB 16KB [ 2265.581783][T26773] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2265.601814][T26686] batadv_tl_cache 4KB 12KB [ 2265.607932][T26686] SMC 45KB 49KB [ 2265.643094][T26686] TIPC 630KB 643KB [ 2265.659044][T26686] rds_tcp_connection 10KB 11KB [ 2265.671825][T26787] bridge338: port 1(bond0) entered blocking state [ 2265.673490][T26686] RDS 18KB 18KB [ 2265.684006][T26787] bridge338: port 1(bond0) entered disabled state [ 2265.691199][T26686] rds_connection 0KB 3KB [ 2265.691210][T26686] SCTPv6 1147KB 1160KB [ 2265.691219][T26686] SCTP 202KB 236KB [ 2265.691228][T26686] sctp_chunk 9KB 15KB [ 2265.691236][T26686] sctp_bind_bucket 0KB 3KB [ 2265.691255][T26686] DCCPv6 1344KB 1346KB 18:51:19 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) [ 2265.748606][T26787] device bond0 entered promiscuous mode [ 2265.754459][T26787] device bond_slave_0 entered promiscuous mode [ 2265.781774][T26787] device bond_slave_1 entered promiscuous mode 18:51:19 executing program 5: unshare(0x40000000) [ 2265.824171][T26787] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2265.841922][T26686] DCCP 1255KB 1257KB [ 2265.848051][T26686] L2TP/IPv6 6KB 6KB [ 2265.858150][T26773] device bond0 left promiscuous mode [ 2265.867400][T26773] device bond_slave_0 left promiscuous mode [ 2265.888845][T26773] device bond_slave_1 left promiscuous mode [ 2265.906845][T26686] L2TP/IP 23KB 23KB [ 2265.916699][T26773] bridge338: port 1(bond0) entered disabled state [ 2265.932580][T26686] KCM 17KB 19KB [ 2265.951146][T26686] kcm_mux_cache 7KB 7KB [ 2265.968126][T26686] RXRPC 902KB 904KB [ 2265.988314][T26686] rxrpc_call_jar 5545KB 5550KB [ 2266.005690][T26686] bridge_fdb_cache 74KB 74KB [ 2266.032029][T26686] MPTCPv6 35KB 38KB [ 2266.053266][T26686] fib6_nodes 175KB 184KB [ 2266.070860][T26686] ip6_dst_cache 279KB 423KB [ 2266.087794][T26686] PINGv6 1KB 3KB [ 2266.104903][T26686] RAWv6 4730KB 4753KB [ 2266.122734][T26686] UDPLITEv6 19KB 19KB [ 2266.135502][T26686] UDPv6 1098KB 1100KB [ 2266.152696][T26686] TCPv6 1197KB 1200KB [ 2266.169365][T26686] nf_conntrack 11KB 37KB [ 2266.188133][T26686] sd_ext_cdb 0KB 7KB [ 2266.204913][T26686] scsi_sense_cache 1056KB 1064KB [ 2266.223816][T26686] virtio_scsi_cmd 16KB 16KB [ 2266.236623][T26686] sgpool-128 8KB 8KB [ 2266.253624][T26686] sgpool-64 4KB 12KB [ 2266.271486][T26686] sgpool-32 3KB 15KB [ 2266.287978][T26686] sgpool-16 23KB 26KB [ 2266.304854][T26686] sgpool-8 39KB 52KB [ 2266.322766][T26686] mqueue_inode_cache 53KB 62KB [ 2266.336708][T26686] f2fs_bio_post_read_ctx 16KB 16KB [ 2266.354294][T26686] jfs_mp 7KB 7KB [ 2266.371668][T26686] cifs_small_rq 15KB 16KB [ 2266.388214][T26686] cifs_request 67KB 67KB [ 2266.388224][T26686] cifs_mpx_ids 0KB 8KB [ 2266.388254][T26686] nfs_commit_data 3KB 7KB [ 2266.388263][T26686] nfs_write_data 34KB 44KB [ 2266.388299][T26686] ext4_system_zone 1KB 7KB [ 2266.388307][T26686] ext4_io_end_vec 11KB 15KB [ 2266.388320][T26686] ext4_bio_post_read_ctx 15KB 15KB [ 2266.440489][T26686] io_kiocb 0KB 3KB [ 2266.446657][T26686] kioctx 21KB 23KB [ 2266.456336][T26686] aio_kiocb 6KB 7KB [ 2266.464549][T26686] userfaultfd_ctx_cache 2KB 4KB [ 2266.474206][T26686] bio-2 1KB 7KB [ 2266.482682][T26686] fasync_cache 1KB 3KB [ 2266.491975][T26686] pid_namespace 4KB 11KB [ 2266.500284][T26686] posix_timers_cache 7KB 11KB [ 2266.506551][T26686] kvm_vcpu 0KB 70KB [ 2266.517529][T26686] kvm_mmu_page_header 58KB 61KB [ 2266.527085][T26686] pte_list_desc 2KB 3KB [ 2266.543742][T26686] x86_emulator 51KB 54KB [ 2266.560622][T26686] x86_fpu 0KB 43KB [ 2266.576882][T26686] rpc_buffers 17KB 25KB [ 2266.593645][T26686] rpc_tasks 2KB 7KB [ 2266.611528][T26686] UNIX 563KB 635KB [ 2266.627085][T26686] UDP-Lite 71KB 73KB [ 2266.644791][T26686] MPTCP 10KB 15KB [ 2266.661897][T26686] tcp_bind_bucket 40KB 40KB [ 2266.680507][T26686] inet_peer_cache 28KB 32KB [ 2266.695610][T26686] ip_fib_trie 24KB 31KB [ 2266.712590][T26686] ip_fib_alias 112KB 134KB [ 2266.727373][T26686] ip_dst_cache 98KB 168KB [ 2266.744800][T26686] PING 12KB 15KB [ 2266.776309][T26686] RAW 2882KB 2906KB [ 2266.793658][T26686] UDP 981KB 983KB [ 2266.816725][T26686] TCP 305KB 346KB [ 2266.834729][T26686] hugetlbfs_inode_cache 6KB 10KB [ 2266.851109][T26686] fscache_cookie_jar 1KB 7KB [ 2266.865632][T26686] bio-1 10KB 15KB [ 2266.879920][T26686] eventpoll_pwq 7KB 35KB [ 2266.908246][T26686] eventpoll_epi 12KB 39KB [ 2266.931988][T26686] inotify_inode_mark 4KB 7KB [ 2266.953833][T26686] request_queue 157KB 157KB [ 2266.972754][T26686] blkdev_ioc 11KB 19KB [ 2266.979973][T26686] bio-0 437KB 484KB [ 2266.986191][T26686] biovec-max 3468KB 3523KB [ 2266.998200][T26686] biovec-64 108KB 149KB [ 2267.004521][T26686] biovec-16 31KB 33KB [ 2267.015609][T26686] bio_integrity_payload 1KB 7KB [ 2267.023079][T26686] khugepaged_mm_slot 289KB 328KB [ 2267.034630][T26686] user_namespace 4KB 7KB [ 2267.041945][T26686] uid_cache 0KB 4KB [ 2267.051771][T26686] dmaengine-unmap-256 2KB 6KB [ 2267.058701][T26686] dmaengine-unmap-128 1KB 3KB [ 2267.065192][T26686] dmaengine-unmap-16 0KB 4KB [ 2267.076644][T26686] dmaengine-unmap-2 0KB 3KB [ 2267.083139][T26686] audit_buffer 0KB 3KB [ 2267.092754][T26686] skbuff_ext_cache 0KB 4KB [ 2267.100104][T26686] skbuff_fclone_cache 435KB 686KB [ 2267.106458][T26686] skbuff_head_cache 25572KB 40582KB [ 2267.116076][T26686] configfs_dir_cache 1KB 8KB [ 2267.122960][T26686] file_lock_cache 4KB 7KB [ 2267.133253][T26686] file_lock_ctx 8KB 11KB [ 2267.139629][T26686] fsnotify_mark_connector 1KB 8KB [ 2267.146481][T26686] net_namespace 3155KB 3155KB [ 2267.156377][T26686] task_delay_info 800KB 957KB [ 2267.162825][T26686] taskstats 606KB 694KB [ 2267.171581][T26686] proc_dir_entry 21349KB 21363KB [ 2267.177887][T26686] pde_opener 12KB 15KB [ 2267.184206][T26686] seq_file 34KB 63KB [ 2267.192645][T26686] sigqueue 0KB 3KB [ 2267.199087][T26686] shmem_inode_cache 10743KB 11355KB [ 2267.205325][T26686] kernfs_iattrs_cache 9KB 15KB [ 2267.215470][T26686] kernfs_node_cache 98989KB 98992KB [ 2267.221767][T26686] mnt_cache 351KB 363KB [ 2267.227951][T26686] filp 4386KB 4781KB [ 2267.237472][T26686] names_cache 46401KB 46456KB [ 2267.243891][T26686] iint_cache 28KB 66KB [ 2267.253705][T26686] lsm_file_cache 834KB 897KB [ 2267.260252][T26686] key_jar 28KB 43KB [ 2267.266369][T26686] uts_namespace 5KB 15KB [ 2267.275616][T26686] nsproxy 128KB 138KB [ 2267.281982][T26686] vm_area_struct 12158KB 13442KB [ 2267.290604][T26686] mm_struct 2392KB 2578KB [ 2267.296870][T26686] fs_cache 566KB 704KB [ 2267.303133][T26686] files_cache 1915KB 2208KB [ 2267.309431][T26686] signal_cache 5466KB 5635KB [ 2267.315609][T26686] sighand_cache 4007KB 4093KB [ 2267.322114][T26686] task_struct 21977KB 22067KB [ 2267.328372][T26686] cred_jar 2109KB 2172KB [ 2267.334448][T26686] anon_vma_chain 3764KB 4433KB [ 2267.340607][T26686] anon_vma 2989KB 3116KB [ 2267.346675][T26686] pid 360KB 461KB [ 2267.352831][T26686] Acpi-Operand 156KB 194KB [ 2267.358969][T26686] Acpi-ParseExt 9KB 11KB [ 2267.365061][T26686] Acpi-Parse 41KB 47KB [ 2267.371207][T26686] Acpi-State 52KB 63KB [ 2267.377264][T26686] Acpi-Namespace 23KB 27KB [ 2267.383386][T26686] shared_policy_node 0KB 3KB [ 2267.389893][T26686] numa_policy 4KB 23KB [ 2267.396073][T26686] trace_event_file 358KB 358KB [ 2267.404807][T26686] ftrace_event_field 491KB 496KB [ 2267.411142][T26686] pool_workqueue 880KB 880KB [ 2267.417922][T26686] vmap_area 1316KB 2346KB [ 2267.424056][T26686] debug_objects_cache 7861KB 7901KB [ 2267.432154][T26686] page->ptl 3347KB 3913KB [ 2267.438469][T26686] kmalloc-4M 4096KB 4096KB [ 2267.444534][T26686] kmalloc-1M 8192KB 8192KB [ 2267.450855][T26686] kmalloc-512k 4096KB 4096KB [ 2267.456917][T26686] kmalloc-256k 223232KB 224256KB [ 2267.463512][T26686] kmalloc-128k 18944KB 19200KB [ 2267.469761][T26686] kmalloc-64k 6656KB 7296KB [ 2267.475836][T26686] kmalloc-32k 48640KB 48640KB [ 2267.482553][T26686] kmalloc-16k 24288KB 24288KB [ 2267.489803][T26686] kmalloc-8k 48176KB 48176KB [ 2267.495907][T26686] kmalloc-4k 278888KB 278928KB [ 2267.502035][T26686] kmalloc-2k 159576KB 159628KB [ 2267.508159][T26686] kmalloc-1k 205384KB 249156KB [ 2267.514573][T26686] kmalloc-512 46745KB 47096KB [ 2267.520860][T26686] kmalloc-256 32230KB 32248KB [ 2267.526940][T26686] kmalloc-128 5504KB 5524KB [ 2267.533162][T26686] kmalloc-96 4391KB 4392KB [ 2267.539863][T26686] kmalloc-64 10556KB 10636KB [ 2267.546130][T26686] kmalloc-32 6762KB 6981KB [ 2267.552405][T26686] kmalloc-192 8288KB 8292KB [ 2267.558569][T26686] kmem_cache 412KB 413KB [ 2267.564991][T26686] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4795,uid=0 [ 2267.567025][T26799] IPVS: ftp: loaded support on port[0] = 21 [ 2267.579693][T26686] Out of memory: Killed process 4795 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 18:51:21 executing program 4: set_mempolicy(0x0, &(0x7f0000000040)=0x10000103, 0x6) unshare(0x40000000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:51:21 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sync_file_range(r0, 0xfff, 0x3ff, 0x2) unshare(0x40000000) 18:51:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xc00}, 0x0) 18:51:21 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) 18:51:21 executing program 5: set_mempolicy(0x0, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) 18:51:21 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) [ 2267.872838][T26845] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2267.891311][T26846] IPVS: ftp: loaded support on port[0] = 21 [ 2267.918174][T26848] IPVS: ftp: loaded support on port[0] = 21 [ 2267.927699][T26850] IPVS: ftp: loaded support on port[0] = 21 [ 2267.931015][T26854] IPVS: ftp: loaded support on port[0] = 21 [ 2267.952459][T26855] bridge339: port 1(bond0) entered blocking state [ 2267.969451][T26855] bridge339: port 1(bond0) entered disabled state [ 2267.987729][T26855] device bond0 entered promiscuous mode [ 2267.988520][T26848] syz-executor.0 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2268.003223][T26855] device bond_slave_0 entered promiscuous mode [ 2268.014131][T26848] CPU: 1 PID: 26848 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0 [ 2268.015817][T26855] device bond_slave_1 entered promiscuous mode [ 2268.023860][T26848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2268.023866][T26848] Call Trace: [ 2268.023891][T26848] dump_stack+0x188/0x20d [ 2268.023910][T26848] dump_header+0x10b/0x826 [ 2268.023928][T26848] oom_kill_process.cold+0x10/0x15 [ 2268.023942][T26848] out_of_memory+0x31f/0x12f0 [ 2268.023961][T26848] ? oom_killer_disable+0x270/0x270 [ 2268.023976][T26848] ? mutex_trylock+0x246/0x2c0 [ 2268.023992][T26848] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2268.024010][T26848] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2268.024034][T26848] ? warn_alloc+0x110/0x110 [ 2268.024051][T26848] ? do_fast_syscall_32+0x270/0xe90 [ 2268.024073][T26848] __alloc_pages_nodemask+0x5d9/0x810 [ 2268.100835][T26848] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2268.107612][T26848] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2268.113447][T26848] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2268.119438][T26848] ? do_raw_spin_unlock+0x171/0x260 [ 2268.124650][T26848] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2268.131521][T26848] alloc_pages_current+0xff/0x200 [ 2268.136768][T26848] __vmalloc_node_range+0x478/0x7a0 [ 2268.142073][T26848] ? ebt_register_table+0x1e6/0xc70 [ 2268.147282][T26848] vmalloc+0x67/0x80 [ 2268.151212][T26848] ? ebt_register_table+0x1e6/0xc70 [ 2268.156428][T26848] ebt_register_table+0x1e6/0xc70 [ 2268.161474][T26848] ? ebt_broute+0x700/0x700 [ 2268.166028][T26848] ops_init+0xaf/0x420 [ 2268.170215][T26848] setup_net+0x2de/0x860 [ 2268.174470][T26848] ? ops_init+0x420/0x420 [ 2268.178848][T26848] copy_net_ns+0x293/0x590 [ 2268.183306][T26848] create_new_namespaces+0x3fb/0xb30 [ 2268.189057][T26848] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2268.195161][T26848] ksys_unshare+0x43d/0x8e0 [ 2268.199849][T26848] ? walk_process_tree+0x2c0/0x2c0 [ 2268.205245][T26848] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2268.211156][T26848] ? __x64_sys_clock_gettime32+0x240/0x240 18:51:22 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) 18:51:22 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000400)=0x9) r1 = open(&(0x7f0000000040)='./file0\x00', 0x43, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendfile(r3, r2, 0x0, 0x7fffffff) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000240)={0x4, @capture={0x0, 0x0, {0x81, 0x200}, 0x8, 0x10001}}) r4 = openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r6, 0xc07, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20010000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x8, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x40011) unshare(0x40000000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x6, @remote, 0x9418}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x1f, @ipv4={[], [], @broadcast}, 0x5}], 0x98) [ 2268.217108][T26848] ? fput_many+0x2f/0x1a0 [ 2268.221441][T26848] ? trace_hardirqs_off_caller+0x55/0x230 [ 2268.227362][T26848] __ia32_sys_unshare+0x2c/0x40 [ 2268.232444][T26848] do_fast_syscall_32+0x270/0xe90 [ 2268.237669][T26848] entry_SYSENTER_compat+0x70/0x7f [ 2268.267512][T26848] Mem-Info: [ 2268.271095][T26848] active_anon:319692 inactive_anon:8346 isolated_anon:0 [ 2268.271095][T26848] active_file:2618 inactive_file:5745 isolated_file:0 [ 2268.271095][T26848] unevictable:14 dirty:4 writeback:0 unstable:0 [ 2268.271095][T26848] slab_reclaimable:20219 slab_unreclaimable:400295 [ 2268.271095][T26848] mapped:60609 shmem:8636 pagetables:30583 bounce:0 [ 2268.271095][T26848] free:700157 free_pcp:232 free_cma:0 [ 2268.311436][T26848] Node 0 active_anon:1119916kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217060kB dirty:12kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 989184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2268.341620][T26855] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2268.357271][T26845] device bond0 left promiscuous mode [ 2268.366471][T26845] device bond_slave_0 left promiscuous mode [ 2268.376024][T26845] device bond_slave_1 left promiscuous mode [ 2268.382996][T26845] bridge339: port 1(bond0) entered disabled state [ 2268.390663][T26848] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2176kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:72kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2268.421130][T26848] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2268.427505][T26848] Node 0 DMA32 free:116468kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1117740kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB writepending:12kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:18344kB pagetables:35824kB bounce:0kB free_pcp:812kB local_pcp:524kB free_cma:0kB [ 2268.462127][T26848] lowmem_reserve[]: 0 0 0 0 0 [ 2268.468851][T26848] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2268.473512][T26908] IPVS: ftp: loaded support on port[0] = 21 [ 2268.511170][T26848] lowmem_reserve[]: 0 0 0 0 0 [ 2268.516198][T26848] Node 0 DMA: 8*4kB (UM) 10*8kB (UM) 2*16kB (M) 11*32kB (UME) 3*64kB (UME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10288kB [ 2268.533802][T26848] Node 0 DMA32: 1821*4kB (UM) 1028*8kB (UME) 648*16kB (UME) 370*32kB (UME) 212*64kB (UME) 109*128kB (ME) 62*256kB (UME) 21*512kB (UM) 0*1024kB 12*2048kB (UM) 0*4096kB = 116436kB [ 2268.552286][T26848] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2268.564440][T26848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 18:51:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xe00}, 0x0) 18:51:22 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) [ 2268.599469][T26848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2268.609801][T26848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2268.659126][T26848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2268.673393][T26848] 16999 total pagecache pages [ 2268.673594][T26846] IPVS: ftp: loaded support on port[0] = 21 [ 2268.680565][T26848] 0 pages in swap cache [ 2268.693390][T26848] Swap cache stats: add 0, delete 0, find 0/0 [ 2268.699109][T26858] IPVS: ftp: loaded support on port[0] = 21 [ 2268.714468][T26848] Free swap = 0kB [ 2268.726041][T26932] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2268.755017][T26941] bridge340: port 1(bond0) entered blocking state [ 2268.761705][T26848] Total swap = 0kB [ 2268.762536][T26941] bridge340: port 1(bond0) entered disabled state [ 2268.765455][T26848] 1965979 pages RAM [ 2268.765460][T26848] 0 pages HighMem/MovableOnly [ 2268.765464][T26848] 349380 pages reserved [ 2268.765468][T26848] 0 pages cma reserved [ 2268.765475][T26848] Unreclaimable slab info: [ 2268.765480][T26848] Name Used Total [ 2268.766224][T26848] pid_3 1KB 7KB [ 2268.779596][T26941] device bond0 entered promiscuous mode [ 2268.804740][T26848] pid_2 942KB 1121KB [ 2268.808703][T26941] device bond_slave_0 entered promiscuous mode [ 2268.808881][T26941] device bond_slave_1 entered promiscuous mode [ 2268.821822][T26848] bio-3 0KB 7KB 18:51:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x2000}, 0x0) [ 2268.849811][T26941] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2268.862348][T26848] AF_VSOCK 14KB 16KB [ 2268.885769][T26848] batadv_tl_cache 4KB 12KB 18:51:22 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0xf}}, 0x0) [ 2268.904409][T26848] SMC 45KB 49KB [ 2268.924854][T26848] TIPC 633KB 643KB [ 2268.980751][T26848] rds_tcp_connection 10KB 11KB [ 2269.005732][T26961] device bond0 left promiscuous mode [ 2269.014445][T26848] RDS 18KB 18KB [ 2269.024647][T26961] device bond_slave_0 left promiscuous mode [ 2269.036126][T26848] rds_connection 0KB 3KB [ 2269.055900][T26961] device bond_slave_1 left promiscuous mode [ 2269.071634][T26848] SCTPv6 1151KB 1160KB [ 2269.084835][T26961] bridge340: port 1(bond0) entered disabled state [ 2269.089515][T26848] SCTP 202KB 236KB [ 2269.102736][T26848] sctp_chunk 9KB 15KB [ 2269.116711][T26848] sctp_bind_bucket 0KB 3KB [ 2269.128174][T26848] DCCPv6 1359KB 1362KB [ 2269.134257][T26848] DCCP 1265KB 1265KB [ 2269.143991][T26848] L2TP/IPv6 6KB 6KB [ 2269.152624][T26848] L2TP/IP 23KB 23KB [ 2269.162068][T26848] KCM 17KB 19KB [ 2269.168863][T26848] kcm_mux_cache 7KB 7KB [ 2269.175201][T26848] RXRPC 906KB 911KB [ 2269.178143][T26961] bridge341: port 1(bond0) entered blocking state [ 2269.185865][T26848] rxrpc_call_jar 5620KB 5621KB [ 2269.190262][T26961] bridge341: port 1(bond0) entered disabled state [ 2269.194864][T26848] bridge_fdb_cache 74KB 74KB [ 2269.204589][T26961] device bond0 entered promiscuous mode [ 2269.210961][T26848] MPTCPv6 35KB 38KB [ 2269.214239][T26961] device bond_slave_0 entered promiscuous mode [ 2269.220579][T26848] fib6_nodes 175KB 184KB [ 2269.227788][T26961] device bond_slave_1 entered promiscuous mode [ 2269.236342][T26848] ip6_dst_cache 297KB 423KB [ 2269.245412][T26848] PINGv6 1KB 3KB [ 2269.254753][T26848] RAWv6 4800KB 4802KB [ 2269.261568][T26848] UDPLITEv6 19KB 19KB [ 2269.268263][T26848] UDPv6 1108KB 1112KB [ 2269.274500][T26848] TCPv6 1179KB 1212KB [ 2269.280972][T26848] nf_conntrack 11KB 37KB [ 2269.287212][T26848] sd_ext_cdb 0KB 7KB [ 2269.293784][T26848] scsi_sense_cache 1056KB 1064KB [ 2269.308202][T26848] virtio_scsi_cmd 16KB 16KB [ 2269.314451][T26848] sgpool-128 8KB 8KB [ 2269.332003][T26848] sgpool-64 4KB 12KB [ 2269.342265][T26961] device bond0 left promiscuous mode [ 2269.347592][T26961] device bond_slave_0 left promiscuous mode [ 2269.347888][T26848] sgpool-32 3KB 15KB [ 2269.366474][T26961] device bond_slave_1 left promiscuous mode [ 2269.382211][T26848] sgpool-16 21KB 26KB [ 2269.383827][T26961] bridge341: port 1(bond0) entered disabled state [ 2269.396886][T26848] sgpool-8 43KB 52KB [ 2269.421234][T26848] mqueue_inode_cache 53KB 62KB [ 2269.427783][T26848] f2fs_bio_post_read_ctx 16KB 16KB [ 2269.447977][T26848] jfs_mp 7KB 7KB [ 2269.454099][T26848] cifs_small_rq 15KB 16KB [ 2269.484674][T26848] cifs_request 67KB 67KB [ 2269.491082][T26848] cifs_mpx_ids 0KB 8KB [ 2269.497373][T26848] nfs_commit_data 3KB 7KB [ 2269.519570][T26848] nfs_write_data 34KB 44KB [ 2269.535646][T26848] ext4_system_zone 1KB 7KB [ 2269.563432][T26848] ext4_io_end_vec 11KB 15KB [ 2269.585816][T26848] ext4_bio_post_read_ctx 15KB 15KB [ 2269.605649][T26848] io_kiocb 0KB 3KB [ 2269.624335][T26848] kioctx 21KB 23KB [ 2269.645395][T26848] aio_kiocb 6KB 7KB [ 2269.659137][T26848] userfaultfd_ctx_cache 2KB 4KB [ 2269.673067][T26848] bio-2 1KB 7KB [ 2269.688662][T26848] fasync_cache 1KB 3KB [ 2269.703230][T26848] pid_namespace 4KB 11KB [ 2269.719464][T26848] posix_timers_cache 7KB 11KB [ 2269.733015][T26848] kvm_vcpu 0KB 70KB [ 2269.746629][T26848] kvm_mmu_page_header 58KB 61KB [ 2269.761636][T26848] pte_list_desc 2KB 3KB [ 2269.775742][T26848] x86_emulator 51KB 54KB [ 2269.790895][T26848] x86_fpu 0KB 43KB [ 2269.805800][T26848] rpc_buffers 17KB 25KB [ 2269.818714][T26848] rpc_tasks 2KB 7KB [ 2269.833174][T26848] UNIX 583KB 635KB [ 2269.847633][T26848] UDP-Lite 71KB 73KB [ 2269.861253][T26848] MPTCP 10KB 15KB [ 2269.879733][T26848] tcp_bind_bucket 40KB 40KB [ 2269.893137][T26848] inet_peer_cache 28KB 32KB [ 2269.912876][T26848] ip_fib_trie 24KB 31KB [ 2269.927351][T26848] ip_fib_alias 112KB 134KB [ 2269.957389][T26848] ip_dst_cache 102KB 168KB [ 2269.975758][T26848] PING 12KB 15KB [ 2269.994018][T26848] RAW 2915KB 2929KB [ 2270.000561][T26848] UDP 987KB 994KB [ 2270.007144][T26848] TCP 305KB 346KB [ 2270.017947][T26848] hugetlbfs_inode_cache 6KB 10KB [ 2270.024842][T26848] fscache_cookie_jar 1KB 7KB [ 2270.036973][T26848] bio-1 10KB 15KB [ 2270.043586][T26848] eventpoll_pwq 8KB 35KB [ 2270.054168][T26848] eventpoll_epi 15KB 39KB [ 2270.060835][T26848] inotify_inode_mark 4KB 7KB [ 2270.067479][T26848] request_queue 157KB 157KB [ 2270.078305][T26848] blkdev_ioc 11KB 19KB [ 2270.084869][T26848] bio-0 471KB 492KB [ 2270.095225][T26848] biovec-max 3731KB 3731KB [ 2270.101932][T26848] biovec-64 108KB 149KB [ 2270.112442][T26848] biovec-16 31KB 33KB [ 2270.119362][T26848] bio_integrity_payload 1KB 7KB [ 2270.126365][T26848] khugepaged_mm_slot 300KB 328KB [ 2270.136946][T26848] user_namespace 4KB 7KB [ 2270.163399][T26848] uid_cache 0KB 4KB [ 2270.173620][T26848] dmaengine-unmap-256 2KB 6KB [ 2270.179964][T26848] dmaengine-unmap-128 1KB 3KB [ 2270.186306][T26848] dmaengine-unmap-16 0KB 4KB [ 2270.195960][T26848] dmaengine-unmap-2 0KB 3KB [ 2270.204233][T26848] audit_buffer 0KB 3KB [ 2270.213278][T26848] skbuff_ext_cache 0KB 4KB [ 2270.220343][T26848] skbuff_fclone_cache 408KB 660KB [ 2270.226885][T26848] skbuff_head_cache 25648KB 40582KB [ 2270.236656][T26848] configfs_dir_cache 1KB 8KB [ 2270.243673][T26848] file_lock_cache 4KB 7KB [ 2270.252356][T26848] file_lock_ctx 8KB 11KB [ 2270.259281][T26848] fsnotify_mark_connector 1KB 8KB [ 2270.265882][T26848] net_namespace 3169KB 3198KB [ 2270.273387][T26848] task_delay_info 812KB 957KB [ 2270.280760][T26848] taskstats 606KB 694KB [ 2270.287280][T26848] proc_dir_entry 21655KB 21667KB [ 2270.294545][T26848] pde_opener 12KB 15KB [ 2270.301592][T26848] seq_file 34KB 63KB [ 2270.307681][T26848] sigqueue 0KB 3KB [ 2270.318506][T26848] shmem_inode_cache 10760KB 11355KB [ 2270.324737][T26848] kernfs_iattrs_cache 9KB 15KB [ 2270.335364][T26848] kernfs_node_cache 100079KB 100082KB [ 2270.342143][T26848] mnt_cache 351KB 363KB [ 2270.354697][T26848] filp 4266KB 4721KB [ 2270.363299][T26848] names_cache 43634KB 43634KB [ 2270.378107][T26848] iint_cache 28KB 66KB [ 2270.384188][T26848] lsm_file_cache 815KB 897KB [ 2270.393967][T26848] key_jar 27KB 43KB [ 2270.400882][T26848] uts_namespace 5KB 15KB [ 2270.407162][T26848] nsproxy 128KB 138KB [ 2270.414536][T26848] vm_area_struct 12172KB 13442KB [ 2270.421337][T26848] mm_struct 2382KB 2578KB [ 2270.429229][T26848] fs_cache 581KB 704KB [ 2270.436103][T26848] files_cache 1915KB 2208KB [ 2270.443010][T26848] signal_cache 5533KB 5648KB [ 2270.449663][T26848] sighand_cache 4007KB 4093KB [ 2270.455730][T26848] task_struct 22569KB 22569KB [ 2270.463136][T26848] cred_jar 2064KB 2172KB [ 2270.470210][T26848] anon_vma_chain 3764KB 4433KB [ 2270.476407][T26848] anon_vma 2982KB 3116KB [ 2270.484879][T26848] pid 360KB 461KB [ 2270.491514][T26848] Acpi-Operand 156KB 194KB [ 2270.498365][T26848] Acpi-ParseExt 9KB 11KB [ 2270.504573][T26848] Acpi-Parse 41KB 47KB [ 2270.511628][T26848] Acpi-State 52KB 63KB [ 2270.519063][T26848] Acpi-Namespace 23KB 27KB [ 2270.525449][T26848] shared_policy_node 0KB 3KB [ 2270.533267][T26848] numa_policy 4KB 23KB [ 2270.540199][T26848] trace_event_file 358KB 358KB [ 2270.546271][T26848] ftrace_event_field 491KB 496KB [ 2270.553284][T26848] pool_workqueue 890KB 892KB [ 2270.559942][T26848] vmap_area 1384KB 2346KB [ 2270.566128][T26848] debug_objects_cache 7947KB 7986KB [ 2270.575629][T26848] page->ptl 3347KB 3913KB [ 2270.582313][T26848] kmalloc-4M 4096KB 4096KB [ 2270.592347][T26848] kmalloc-1M 8192KB 8192KB [ 2270.599326][T26848] kmalloc-512k 4096KB 4096KB [ 2270.606069][T26848] kmalloc-256k 225792KB 226304KB [ 2270.615933][T26848] kmalloc-128k 18944KB 19200KB [ 2270.623190][T26848] kmalloc-64k 6656KB 7296KB [ 2270.632108][T26848] kmalloc-32k 49344KB 49344KB [ 2270.638930][T26848] kmalloc-16k 24608KB 24608KB [ 2270.645016][T26848] kmalloc-8k 48512KB 48512KB [ 2270.653997][T26848] kmalloc-4k 281456KB 281496KB [ 2270.660906][T26848] kmalloc-2k 161492KB 161544KB [ 2270.666969][T26848] kmalloc-1k 205984KB 249156KB [ 2270.674851][T26848] kmalloc-512 47460KB 47460KB [ 2270.681881][T26848] kmalloc-256 32576KB 32592KB [ 2270.688621][T26848] kmalloc-128 5567KB 5572KB [ 2270.694695][T26848] kmalloc-96 4428KB 4432KB [ 2270.701675][T26848] kmalloc-64 10665KB 10668KB [ 2270.708555][T26848] kmalloc-32 6847KB 7012KB [ 2270.714862][T26848] kmalloc-192 8391KB 8392KB [ 2270.721814][T26848] kmem_cache 417KB 417KB [ 2270.730493][T26909] IPVS: ftp: loaded support on port[0] = 21 [ 2270.736999][T26848] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4780,uid=0 [ 2270.761234][T26848] Out of memory: Killed process 4780 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 18:51:24 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x10}}, 0x0) 18:51:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x3f00}, 0x0) [ 2270.961034][T27011] __nla_validate_parse: 2 callbacks suppressed [ 2270.961043][T27011] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:51:24 executing program 0: set_mempolicy(0x4000, &(0x7f00000000c0)=0x2, 0x82) unshare(0x40000000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @rand_addr=0x40}}}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYBLOB="99000000145c78c5d75e355c0f1a49693d85c1741e3cd680072687deec03e38767c91a02686ac9533a841c431da53a84d3be17672f9395c32088e0e15547a48c9f86b91a7e3488e7f46371fcadc0d59907b66f62fc6b632386ec788d4ded49bca0e10113ae907ec18c19517c15fe328a01eb8349d970be248f84c3dc16ca4ddacac46a6712745b9cab385f188c1b06f0cb7443bf09a180a49d87cb2c13c0c8a0bf1742552ffde3648966bc8220a4c96537"], &(0x7f0000000100)=0xa1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r6, 0x3, 0x0, 0x418, 0x6}, &(0x7f0000000180)=0x14) ioctl$VIDIOC_QBUF(r0, 0xc044560f, &(0x7f0000000040)={0x7ff, 0xb, 0x4, 0x1, 0x260ee624, {0x77359400}, {0x5, 0x0, 0x8, 0x6, 0x6, 0xc5, "b87484f3"}, 0x2, 0x1, @fd=r2, 0x5, 0x0, r4}) openat$vcs(0xffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8200, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0xffff) 18:51:24 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0xc0}}, 0x0) [ 2271.053518][T27016] IPVS: ftp: loaded support on port[0] = 21 [ 2271.059845][T27013] bridge342: port 1(bond0) entered blocking state [ 2271.067494][T27013] bridge342: port 1(bond0) entered disabled state [ 2271.082067][T27013] device bond0 entered promiscuous mode [ 2271.088590][T27013] device bond_slave_0 entered promiscuous mode [ 2271.095441][T27013] device bond_slave_1 entered promiscuous mode [ 2271.212201][T27013] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2271.381446][T27016] IPVS: ftp: loaded support on port[0] = 21 18:51:26 executing program 5: set_mempolicy(0x0, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) 18:51:26 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0xec0}}, 0x0) 18:51:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x4000}, 0x0) [ 2272.630857][T27066] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2272.667091][T27069] IPVS: ftp: loaded support on port[0] = 21 [ 2272.690654][T27070] device bond0 left promiscuous mode [ 2272.696543][T27070] device bond_slave_0 left promiscuous mode [ 2272.708478][T27070] device bond_slave_1 left promiscuous mode [ 2272.714864][T27070] bridge342: port 1(bond0) entered disabled state [ 2272.787907][T27070] bridge343: port 1(bond0) entered blocking state [ 2272.794648][T27070] bridge343: port 1(bond0) entered disabled state [ 2272.806936][T27070] device bond0 entered promiscuous mode [ 2272.813581][T27070] device bond_slave_0 entered promiscuous mode [ 2272.823823][T27070] device bond_slave_1 entered promiscuous mode 18:51:26 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @empty, 0x6}, 0x1c) 18:51:26 executing program 0: set_mempolicy(0x8000, &(0x7f0000000000)=0x10000101, 0x7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000100)=0x40) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) unshare(0x40000000) 18:51:26 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x33fe0}}, 0x0) [ 2272.877261][T27070] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:51:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x4800}, 0x0) [ 2273.023262][T27097] IPVS: ftp: loaded support on port[0] = 21 [ 2273.054881][T27105] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:51:26 executing program 5: set_mempolicy(0x0, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) [ 2273.070037][T27103] IPVS: ftp: loaded support on port[0] = 21 18:51:26 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x20000068}}, 0x0) [ 2273.126179][T27097] syz-executor.1 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2273.173356][T27108] device bond0 left promiscuous mode [ 2273.174704][T27097] CPU: 0 PID: 27097 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 2273.180478][T27108] device bond_slave_0 left promiscuous mode [ 2273.187439][T27097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2273.187445][T27097] Call Trace: [ 2273.187470][T27097] dump_stack+0x188/0x20d [ 2273.187488][T27097] dump_header+0x10b/0x826 [ 2273.187505][T27097] oom_kill_process.cold+0x10/0x15 [ 2273.187520][T27097] out_of_memory+0x31f/0x12f0 [ 2273.187541][T27097] ? oom_killer_disable+0x270/0x270 [ 2273.207211][T27113] IPVS: ftp: loaded support on port[0] = 21 [ 2273.211457][T27097] ? mutex_trylock+0x246/0x2c0 [ 2273.211477][T27097] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2273.211494][T27097] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2273.211518][T27097] ? warn_alloc+0x110/0x110 [ 2273.218389][T27108] device bond_slave_1 left promiscuous mode [ 2273.221019][T27097] ? do_fast_syscall_32+0x270/0xe90 [ 2273.221045][T27097] __alloc_pages_nodemask+0x5d9/0x810 [ 2273.229432][T27108] bridge343: port 1(bond0) entered disabled state [ 2273.230909][T27097] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2273.230927][T27097] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2273.296042][T27097] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2273.302650][T27097] ? do_raw_spin_unlock+0x171/0x260 [ 2273.308486][T27097] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2273.315010][T27097] alloc_pages_current+0xff/0x200 18:51:27 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3ff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x1f, 0x1000, 0x3, 0x80}) [ 2273.320328][T27097] __vmalloc_node_range+0x478/0x7a0 [ 2273.325731][T27097] ? ebt_register_table+0x1e6/0xc70 [ 2273.330947][T27097] vmalloc+0x67/0x80 [ 2273.335560][T27097] ? ebt_register_table+0x1e6/0xc70 [ 2273.340937][T27097] ebt_register_table+0x1e6/0xc70 [ 2273.345998][T27097] ? ebt_broute+0x700/0x700 [ 2273.350529][T27097] ops_init+0xaf/0x420 [ 2273.354638][T27097] setup_net+0x2de/0x860 [ 2273.358896][T27097] ? ops_init+0x420/0x420 [ 2273.363240][T27097] copy_net_ns+0x293/0x590 [ 2273.367756][T27097] create_new_namespaces+0x3fb/0xb30 [ 2273.373056][T27097] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2273.378786][T27097] ksys_unshare+0x43d/0x8e0 [ 2273.383354][T27097] ? walk_process_tree+0x2c0/0x2c0 [ 2273.384417][T27119] IPVS: ftp: loaded support on port[0] = 21 [ 2273.388572][T27097] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2273.388588][T27097] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2273.388604][T27097] ? trace_hardirqs_off_caller+0x55/0x230 [ 2273.388619][T27097] __ia32_sys_unshare+0x2c/0x40 [ 2273.388635][T27097] do_fast_syscall_32+0x270/0xe90 18:51:27 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x7ffff000}}, 0x0) [ 2273.388666][T27097] entry_SYSENTER_compat+0x70/0x7f [ 2273.441437][T27097] Mem-Info: [ 2273.446795][T27097] active_anon:319861 inactive_anon:8346 isolated_anon:0 [ 2273.446795][T27097] active_file:2619 inactive_file:5768 isolated_file:0 [ 2273.446795][T27097] unevictable:14 dirty:30 writeback:25 unstable:0 [ 2273.446795][T27097] slab_reclaimable:20322 slab_unreclaimable:402444 18:51:27 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0xfffffdef}}, 0x0) [ 2273.446795][T27097] mapped:60630 shmem:8636 pagetables:30546 bounce:0 [ 2273.446795][T27097] free:698734 free_pcp:267 free_cma:0 [ 2273.498281][T27097] Node 0 active_anon:1117764kB inactive_anon:16652kB active_file:16kB inactive_file:4kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217060kB dirty:16kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 985088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 18:51:27 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x2}, 0x0) [ 2273.557712][T27108] bridge344: port 1(bond0) entered blocking state [ 2273.565684][T27108] bridge344: port 1(bond0) entered disabled state [ 2273.577360][T27097] Node 0 DMA free:10288kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:72kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2273.616085][T27108] device bond0 entered promiscuous mode [ 2273.624102][T27097] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2273.626216][T27108] device bond_slave_0 entered promiscuous mode [ 2273.631120][T27097] Node 0 DMA32 free:115752kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1117640kB inactive_anon:16652kB active_file:16kB inactive_file:4kB unevictable:56kB writepending:16kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:18312kB pagetables:35724kB bounce:0kB free_pcp:1052kB local_pcp:468kB free_cma:0kB [ 2273.642142][T27108] device bond_slave_1 entered promiscuous mode [ 2273.671620][T27097] lowmem_reserve[]: 0 0 0 0 0 [ 2273.681064][T27097] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2273.720494][T27097] lowmem_reserve[]: 0 0 0 0 0 [ 2273.725622][T27097] Node 0 DMA: 8*4kB (ME) 10*8kB (UM) 4*16kB (UME) 2*32kB (M) 3*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10288kB [ 2273.742605][T27097] Node 0 DMA32: 1822*4kB (UME) 1219*8kB (UME) 638*16kB (UME) 378*32kB (UME) 213*64kB (UME) 113*128kB (UME) 61*256kB (ME) 20*512kB (M) 0*1024kB 11*2048kB (M) 0*4096kB = 115824kB [ 2273.761062][T27097] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2273.783250][T27108] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2273.805322][T27105] device bond0 left promiscuous mode [ 2273.814611][T27105] device bond_slave_0 left promiscuous mode [ 2273.830818][T27105] device bond_slave_1 left promiscuous mode [ 2273.840180][T27097] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2273.841390][T27146] IPVS: ftp: loaded support on port[0] = 21 [ 2273.854779][T27147] IPVS: ftp: loaded support on port[0] = 21 [ 2273.866565][T27105] bridge344: port 1(bond0) entered disabled state [ 2273.890998][T27097] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2273.917876][T27097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2273.929889][T27097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2273.940190][T27097] 17029 total pagecache pages [ 2273.944886][T27097] 0 pages in swap cache [ 2273.950520][T27097] Swap cache stats: add 0, delete 0, find 0/0 [ 2273.957223][T27097] Free swap = 0kB [ 2273.962620][T27097] Total swap = 0kB [ 2273.966430][T27097] 1965979 pages RAM [ 2273.971151][T27097] 0 pages HighMem/MovableOnly [ 2273.976097][T27097] 349380 pages reserved [ 2273.982517][T27097] 0 pages cma reserved [ 2273.986591][T27097] Unreclaimable slab info: 18:51:27 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x3}, 0x0) 18:51:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x4c00}, 0x0) [ 2274.021695][T27097] Name Used Total [ 2274.052476][T27097] pid_3 1KB 7KB [ 2274.072319][T27097] pid_2 951KB 1121KB [ 2274.090873][T27097] bio-3 0KB 7KB [ 2274.097164][T27097] AF_VSOCK 14KB 16KB [ 2274.113970][T27097] batadv_tl_cache 4KB 12KB [ 2274.119750][T27167] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2274.127827][T27097] SMC 45KB 49KB [ 2274.140730][T27097] TIPC 645KB 650KB [ 2274.152738][T27097] rds_tcp_connection 10KB 11KB [ 2274.161416][T27097] RDS 18KB 18KB [ 2274.168991][T27097] rds_connection 0KB 3KB [ 2274.175080][T27097] SCTPv6 1160KB 1160KB [ 2274.189363][T27172] bridge345: port 1(bond0) entered blocking state [ 2274.196806][T27172] bridge345: port 1(bond0) entered disabled state [ 2274.208136][T27097] SCTP 206KB 236KB [ 2274.214240][T27097] sctp_chunk 9KB 15KB [ 2274.231055][T27172] device bond0 entered promiscuous mode [ 2274.236737][T27172] device bond_slave_0 entered promiscuous mode [ 2274.248715][T27097] sctp_bind_bucket 0KB 3KB [ 2274.255782][T27097] DCCPv6 1372KB 1378KB [ 2274.266139][T27097] DCCP 1274KB 1279KB [ 2274.274984][T27172] device bond_slave_1 entered promiscuous mode [ 2274.284963][T27097] L2TP/IPv6 6KB 6KB [ 2274.296694][T27097] L2TP/IP 23KB 23KB [ 2274.307161][T27097] KCM 17KB 19KB [ 2274.315339][T27097] kcm_mux_cache 7KB 7KB [ 2274.325291][T27097] RXRPC 907KB 911KB [ 2274.360583][T27167] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2274.377430][T27097] rxrpc_call_jar 5645KB 5647KB [ 2274.383797][T27097] bridge_fdb_cache 74KB 74KB [ 2274.400147][T27172] device bond0 left promiscuous mode [ 2274.405464][T27172] device bond_slave_0 left promiscuous mode [ 2274.422478][T27172] device bond_slave_1 left promiscuous mode [ 2274.440430][T27097] MPTCPv6 35KB 38KB [ 2274.446536][T27097] fib6_nodes 175KB 184KB [ 2274.471541][T27172] bridge345: port 1(bond0) entered disabled state [ 2274.490803][T27097] ip6_dst_cache 293KB 423KB [ 2274.496990][T27097] PINGv6 1KB 3KB [ 2274.527630][T27097] RAWv6 4852KB 4861KB [ 2274.543807][T27097] UDPLITEv6 19KB 19KB [ 2274.577531][T27097] UDPv6 1116KB 1119KB [ 2274.583635][T27097] TCPv6 1197KB 1225KB [ 2274.600161][T27097] nf_conntrack 10KB 37KB [ 2274.606383][T27097] sd_ext_cdb 0KB 7KB [ 2274.617077][T27097] scsi_sense_cache 1056KB 1064KB [ 2274.624397][T27097] virtio_scsi_cmd 16KB 16KB [ 2274.650729][T27097] sgpool-128 8KB 8KB [ 2274.656830][T27097] sgpool-64 4KB 12KB [ 2274.677397][T27097] sgpool-32 3KB 15KB [ 2274.683501][T27097] sgpool-16 23KB 26KB [ 2274.710849][T27097] sgpool-8 44KB 52KB [ 2274.717218][T27097] mqueue_inode_cache 53KB 62KB [ 2274.754351][T27097] f2fs_bio_post_read_ctx 16KB 16KB [ 2274.762303][T27097] jfs_mp 7KB 7KB [ 2274.790735][T27097] cifs_small_rq 15KB 16KB [ 2274.796836][T27097] cifs_request 67KB 67KB [ 2274.817449][T27097] cifs_mpx_ids 0KB 8KB [ 2274.823577][T27097] nfs_commit_data 3KB 7KB [ 2274.850843][T27097] nfs_write_data 34KB 44KB [ 2274.856977][T27097] ext4_system_zone 1KB 7KB [ 2274.891119][T27097] ext4_io_end_vec 10KB 15KB [ 2274.897218][T27097] ext4_bio_post_read_ctx 15KB 15KB [ 2274.917535][T27097] io_kiocb 0KB 3KB [ 2274.923633][T27097] kioctx 21KB 23KB [ 2274.950816][T27097] aio_kiocb 6KB 7KB [ 2274.956923][T27097] userfaultfd_ctx_cache 2KB 4KB [ 2274.992414][T27097] bio-2 1KB 7KB [ 2274.999480][T27097] fasync_cache 1KB 3KB [ 2275.005577][T27097] pid_namespace 4KB 11KB [ 2275.030663][T27097] posix_timers_cache 7KB 11KB [ 2275.036864][T27097] kvm_vcpu 0KB 70KB [ 2275.066083][T27097] kvm_mmu_page_header 58KB 61KB [ 2275.102407][T27097] pte_list_desc 2KB 3KB [ 2275.120687][T27097] x86_emulator 51KB 54KB [ 2275.126785][T27097] x86_fpu 0KB 43KB [ 2275.147881][T27097] rpc_buffers 17KB 25KB [ 2275.153972][T27097] rpc_tasks 2KB 7KB [ 2275.187341][T27097] UNIX 618KB 635KB [ 2275.193707][T27097] UDP-Lite 71KB 73KB [ 2275.220701][T27097] MPTCP 10KB 15KB [ 2275.226978][T27097] tcp_bind_bucket 40KB 40KB [ 2275.260700][T27097] inet_peer_cache 28KB 32KB [ 2275.270806][T27097] ip_fib_trie 24KB 31KB [ 2275.276899][T27097] ip_fib_alias 112KB 134KB [ 2275.300075][T27097] ip_dst_cache 99KB 168KB [ 2275.306262][T27097] PING 12KB 15KB [ 2275.328044][T27097] RAW 2946KB 2960KB [ 2275.334147][T27097] UDP 1001KB 1001KB [ 2275.360120][T27097] TCP 305KB 346KB [ 2275.366226][T27097] hugetlbfs_inode_cache 6KB 10KB [ 2275.404072][T27097] fscache_cookie_jar 1KB 7KB [ 2275.411902][T27097] bio-1 10KB 15KB [ 2275.440079][T27097] eventpoll_pwq 7KB 35KB [ 2275.446809][T27097] eventpoll_epi 13KB 39KB [ 2275.468694][T27097] inotify_inode_mark 4KB 7KB [ 2275.474891][T27097] request_queue 157KB 157KB [ 2275.504872][T27097] blkdev_ioc 11KB 19KB [ 2275.522524][T27097] bio-0 447KB 480KB [ 2275.538532][T27097] biovec-max 3612KB 3646KB [ 2275.553008][T27097] biovec-64 108KB 149KB [ 2275.567534][T27097] biovec-16 31KB 33KB [ 2275.581647][T27097] bio_integrity_payload 1KB 7KB [ 2275.589956][T27097] khugepaged_mm_slot 300KB 328KB [ 2275.596545][T27097] user_namespace 4KB 7KB [ 2275.603645][T27097] uid_cache 0KB 4KB [ 2275.610128][T27097] dmaengine-unmap-256 2KB 6KB [ 2275.616499][T27097] dmaengine-unmap-128 1KB 3KB [ 2275.622854][T27097] dmaengine-unmap-16 0KB 4KB [ 2275.629086][T27097] dmaengine-unmap-2 0KB 3KB [ 2275.635149][T27097] audit_buffer 0KB 3KB [ 2275.643295][T27097] skbuff_ext_cache 0KB 4KB [ 2275.649644][T27097] skbuff_fclone_cache 458KB 637KB [ 2275.655964][T27097] skbuff_head_cache 26044KB 40582KB [ 2275.662511][T27097] configfs_dir_cache 1KB 8KB [ 2275.668822][T27097] file_lock_cache 4KB 7KB [ 2275.674894][T27097] file_lock_ctx 8KB 11KB [ 2275.682070][T27097] fsnotify_mark_connector 1KB 8KB [ 2275.689368][T27097] net_namespace 3220KB 3220KB [ 2275.695442][T27097] task_delay_info 837KB 957KB [ 2275.702498][T27097] taskstats 606KB 694KB [ 2275.711262][T27097] proc_dir_entry 21801KB 21862KB [ 2275.727331][T27097] pde_opener 11KB 15KB [ 2275.733871][T27097] seq_file 31KB 63KB [ 2275.752018][T27097] shmem_inode_cache 10802KB 11355KB [ 2275.766082][T27097] kernfs_iattrs_cache 9KB 15KB [ 2275.779189][T27097] kernfs_node_cache 100993KB 101003KB [ 2275.796984][T27097] mnt_cache 357KB 363KB [ 2275.803859][T27097] filp 4152KB 4488KB [ 2275.810620][T27097] names_cache 42032KB 42032KB [ 2275.816707][T27097] iint_cache 28KB 66KB [ 2275.823998][T27097] lsm_file_cache 788KB 897KB [ 2275.830695][T27097] key_jar 27KB 43KB [ 2275.837125][T27097] uts_namespace 5KB 15KB [ 2275.844761][T27097] nsproxy 134KB 138KB [ 2275.851545][T27097] vm_area_struct 12235KB 13442KB [ 2275.859358][T27097] mm_struct 2397KB 2578KB [ 2275.865444][T27097] fs_cache 596KB 704KB [ 2275.872462][T27097] files_cache 1940KB 2208KB [ 2275.879679][T27097] signal_cache 5607KB 5661KB [ 2275.885873][T27097] sighand_cache 4007KB 4093KB [ 2275.892910][T27097] task_struct 22550KB 22640KB [ 2275.899668][T27097] cred_jar 1990KB 2112KB [ 2275.905844][T27097] anon_vma_chain 3780KB 4429KB [ 2275.912737][T27097] anon_vma 2978KB 3116KB [ 2275.919731][T27097] pid 376KB 461KB [ 2275.925800][T27097] Acpi-Operand 156KB 194KB [ 2275.932958][T27097] Acpi-ParseExt 9KB 11KB [ 2275.941174][T27097] Acpi-Parse 41KB 47KB [ 2275.948125][T27097] Acpi-State 52KB 63KB [ 2275.954228][T27097] Acpi-Namespace 23KB 27KB [ 2275.961704][T27097] shared_policy_node 0KB 3KB [ 2275.968664][T27097] numa_policy 3KB 23KB [ 2275.974762][T27097] trace_event_file 358KB 358KB [ 2275.982289][T27097] ftrace_event_field 491KB 496KB [ 2275.989145][T27097] pool_workqueue 900KB 900KB [ 2275.995247][T27097] vmap_area 1479KB 2346KB [ 2276.002641][T27097] debug_objects_cache 8017KB 8056KB [ 2276.009677][T27097] page->ptl 3344KB 3913KB [ 2276.015815][T27097] kmalloc-4M 4096KB 4096KB [ 2276.023576][T27097] kmalloc-1M 8192KB 8192KB [ 2276.030639][T27097] kmalloc-512k 4096KB 4096KB [ 2276.036816][T27097] kmalloc-256k 228864KB 229888KB [ 2276.044696][T27097] kmalloc-128k 18944KB 19200KB [ 2276.067235][T27097] kmalloc-64k 6656KB 7296KB [ 2276.073502][T27097] kmalloc-32k 50176KB 50176KB [ 2276.081469][T27097] kmalloc-16k 25024KB 25024KB [ 2276.097347][T27097] kmalloc-8k 49008KB 49056KB [ 2276.103600][T27097] kmalloc-4k 284416KB 284456KB [ 2276.123449][T27097] kmalloc-2k 162920KB 162972KB [ 2276.130796][T27097] kmalloc-1k 209392KB 249156KB [ 2276.136872][T27097] kmalloc-512 47802KB 47972KB [ 2276.145427][T27097] kmalloc-256 32857KB 32880KB [ 2276.152758][T27097] kmalloc-128 5622KB 5624KB [ 2276.161284][T27097] kmalloc-96 4460KB 4460KB [ 2276.168674][T27097] kmalloc-64 10770KB 10792KB [ 2276.174761][T27097] kmalloc-32 6948KB 7115KB [ 2276.183227][T27097] kmalloc-192 8470KB 8496KB [ 2276.195670][T27097] kmem_cache 419KB 421KB [ 2276.210074][T27120] IPVS: ftp: loaded support on port[0] = 21 [ 2276.230520][T27097] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4768,uid=0 [ 2276.271693][T27097] Out of memory: Killed process 4768 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 18:51:30 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) close(r0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000ff2000/0xb000)=nil}) unshare(0x40000000) 18:51:30 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x8}, 0x0) 18:51:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x5865}, 0x0) 18:51:30 executing program 0: pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x7) r0 = openat$zero(0xffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'veth0_to_bond\x00', @random="e96d96faf891"}) unshare(0x40000000) 18:51:30 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0x10400101, 0xfffffff9) unshare(0x40000000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='/dev/ttyS3\x00', r2}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000000)) 18:51:30 executing program 5: set_mempolicy(0x4002, 0x0, 0x2) unshare(0x40000000) [ 2277.228790][T27218] IPVS: ftp: loaded support on port[0] = 21 [ 2277.240219][T27222] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2277.240298][T27219] IPVS: ftp: loaded support on port[0] = 21 [ 2277.266117][T27221] IPVS: ftp: loaded support on port[0] = 21 [ 2277.276591][T27222] bridge346: port 1(bond0) entered blocking state [ 2277.288862][T27225] IPVS: ftp: loaded support on port[0] = 21 [ 2277.311116][T27222] bridge346: port 1(bond0) entered disabled state [ 2277.321146][T27219] syz-executor.0 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2277.329475][T27222] device bond0 entered promiscuous mode [ 2277.342413][T27219] CPU: 0 PID: 27219 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0 [ 2277.343126][T27222] device bond_slave_0 entered promiscuous mode [ 2277.351120][T27219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2277.351126][T27219] Call Trace: [ 2277.351151][T27219] dump_stack+0x188/0x20d 18:51:31 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x600}, 0x0) [ 2277.351171][T27219] dump_header+0x10b/0x826 [ 2277.351187][T27219] oom_kill_process.cold+0x10/0x15 [ 2277.351202][T27219] out_of_memory+0x31f/0x12f0 [ 2277.351221][T27219] ? oom_killer_disable+0x270/0x270 [ 2277.351236][T27219] ? mutex_trylock+0x246/0x2c0 [ 2277.351257][T27219] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2277.351274][T27219] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2277.351296][T27219] ? warn_alloc+0x110/0x110 [ 2277.351314][T27219] ? do_fast_syscall_32+0x270/0xe90 [ 2277.351336][T27219] __alloc_pages_nodemask+0x5d9/0x810 [ 2277.351355][T27219] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2277.351367][T27219] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2277.351387][T27219] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2277.351400][T27219] ? do_raw_spin_unlock+0x171/0x260 [ 2277.351418][T27219] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2277.351433][T27219] alloc_pages_current+0xff/0x200 [ 2277.351451][T27219] __vmalloc_node_range+0x478/0x7a0 [ 2277.351469][T27219] ? ebt_register_table+0x1e6/0xc70 [ 2277.351486][T27219] vmalloc+0x67/0x80 [ 2277.370790][T27222] device bond_slave_1 entered promiscuous mode [ 2277.372696][T27219] ? ebt_register_table+0x1e6/0xc70 [ 2277.372713][T27219] ebt_register_table+0x1e6/0xc70 [ 2277.372737][T27219] ? ebt_broute+0x700/0x700 [ 2277.436042][T27230] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2277.437263][T27219] ops_init+0xaf/0x420 [ 2277.437281][T27219] setup_net+0x2de/0x860 [ 2277.437295][T27219] ? ops_init+0x420/0x420 [ 2277.437315][T27219] copy_net_ns+0x293/0x590 18:51:31 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0xffffff1f}, 0x0) [ 2277.443246][T27222] device bond0 left promiscuous mode [ 2277.449113][T27219] create_new_namespaces+0x3fb/0xb30 [ 2277.449132][T27219] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2277.449147][T27219] ksys_unshare+0x43d/0x8e0 [ 2277.449165][T27219] ? walk_process_tree+0x2c0/0x2c0 [ 2277.461662][T27222] device bond_slave_0 left promiscuous mode [ 2277.465804][T27219] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2277.465819][T27219] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2277.465840][T27219] ? fput_many+0x2f/0x1a0 18:51:31 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) [ 2277.477431][T27222] device bond_slave_1 left promiscuous mode [ 2277.480310][T27219] ? trace_hardirqs_off_caller+0x55/0x230 [ 2277.480331][T27219] __ia32_sys_unshare+0x2c/0x40 [ 2277.480348][T27219] do_fast_syscall_32+0x270/0xe90 [ 2277.480370][T27219] entry_SYSENTER_compat+0x70/0x7f [ 2277.490912][T27222] bridge346: port 1(bond0) entered disabled state [ 2277.511797][T27219] Mem-Info: [ 2277.618774][T27219] active_anon:319328 inactive_anon:8346 isolated_anon:0 [ 2277.618774][T27219] active_file:2616 inactive_file:5792 isolated_file:0 [ 2277.618774][T27219] unevictable:14 dirty:29 writeback:0 unstable:0 [ 2277.618774][T27219] slab_reclaimable:20370 slab_unreclaimable:402761 [ 2277.618774][T27219] mapped:60685 shmem:8636 pagetables:30545 bounce:0 [ 2277.618774][T27219] free:698565 free_pcp:352 free_cma:0 [ 2277.659591][T27219] Node 0 active_anon:1115600kB inactive_anon:16652kB active_file:4kB inactive_file:16kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217060kB dirty:12kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 983040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2277.689719][T27219] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:72kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2277.721664][T27219] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2277.729722][T27219] Node 0 DMA32 free:116340kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1115476kB inactive_anon:16652kB active_file:16kB inactive_file:4kB unevictable:56kB writepending:28kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:18280kB pagetables:35624kB bounce:0kB free_pcp:1408kB local_pcp:764kB free_cma:0kB [ 2277.763372][T27219] lowmem_reserve[]: 0 0 0 0 0 [ 2277.768900][T27219] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2277.802794][T27219] lowmem_reserve[]: 0 0 0 0 0 [ 2277.808813][T27219] Node 0 DMA: 9*4kB (UME) 10*8kB (UM) 3*16kB (ME) 2*32kB (M) 3*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10276kB 18:51:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x6000}, 0x0) 18:51:31 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x2}, 0x0) [ 2277.826388][T27219] Node 0 DMA32: 1821*4kB (ME) 1020*8kB (UME) 624*16kB (ME) 376*32kB (UME) 217*64kB (UME) 114*128kB (UME) 61*256kB (ME) 20*512kB (M) 0*1024kB 10*2048kB (M) 1*4096kB (M) = 116372kB [ 2277.858899][T27219] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2277.904691][T27219] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2277.924954][T27219] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2277.941204][T27277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:51:31 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x3}, 0x0) [ 2277.952849][T27219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2277.963819][T27219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2277.981769][T27219] 17050 total pagecache pages [ 2278.001589][T27219] 0 pages in swap cache [ 2278.006182][T27301] bridge347: port 1(bond0) entered blocking state [ 2278.015594][T27301] bridge347: port 1(bond0) entered disabled state [ 2278.033647][T27219] Swap cache stats: add 0, delete 0, find 0/0 [ 2278.034517][T27229] IPVS: ftp: loaded support on port[0] = 21 18:51:31 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000000)=[0x3, 0xc1a, 0x400, 0xfffffffa], 0x4, 0x3, 0x2fb, 0x401, 0x6, 0x1f, 0x10001, {0x1, 0x6, 0x3, 0x0, 0x80, 0x10, 0x2e, 0x2, 0x400, 0xe49, 0x6, 0x5, 0x7f, 0x4, "6e2f9b7f5ee02057a8d45b3e25d5eb0d5f8440650a20deab88f02aeaf201e894"}}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x8, 0x200000) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000100)={0x20, 0xdc, 0x9}) 18:51:31 executing program 5: set_mempolicy(0x4002, 0x0, 0x2) unshare(0x40000000) [ 2278.059180][T27301] device bond0 entered promiscuous mode [ 2278.067131][T27219] Free swap = 0kB [ 2278.081078][T27219] Total swap = 0kB [ 2278.086171][T27301] device bond_slave_0 entered promiscuous mode [ 2278.092839][T27308] IPVS: ftp: loaded support on port[0] = 21 [ 2278.102942][T27219] 1965979 pages RAM [ 2278.107161][T27301] device bond_slave_1 entered promiscuous mode [ 2278.113658][T27219] 0 pages HighMem/MovableOnly [ 2278.123004][T27219] 349380 pages reserved [ 2278.135333][T27219] 0 pages cma reserved [ 2278.136685][T27313] IPVS: ftp: loaded support on port[0] = 21 [ 2278.144555][T27301] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2278.158252][T27219] Unreclaimable slab info: 18:51:31 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x4}, 0x0) [ 2278.186812][T27219] Name Used Total [ 2278.205806][T27219] pid_3 1KB 7KB [ 2278.215066][T27219] pid_2 951KB 1121KB [ 2278.235154][T27219] bio-3 0KB 7KB [ 2278.245377][T27219] AF_VSOCK 14KB 16KB [ 2278.253388][T27219] batadv_tl_cache 4KB 12KB [ 2278.268031][T27219] SMC 45KB 49KB [ 2278.274277][T27219] TIPC 650KB 650KB [ 2278.303374][T27219] rds_tcp_connection 10KB 11KB [ 2278.322100][T27219] RDS 18KB 18KB [ 2278.329276][T27219] rds_connection 0KB 3KB [ 2278.335402][T27219] SCTPv6 1166KB 1166KB [ 2278.342265][T27219] SCTP 206KB 236KB [ 2278.350245][T27219] sctp_chunk 8KB 11KB [ 2278.356941][T27219] sctp_bind_bucket 0KB 3KB [ 2278.364747][T27219] DCCPv6 1383KB 1393KB [ 2278.371567][T27219] DCCP 1287KB 1294KB [ 2278.378283][T27219] L2TP/IPv6 6KB 6KB [ 2278.384415][T27219] L2TP/IP 23KB 23KB [ 2278.407147][T27219] KCM 17KB 19KB [ 2278.413591][T27219] kcm_mux_cache 7KB 7KB [ 2278.427110][T27219] RXRPC 923KB 924KB [ 2278.441373][T27219] rxrpc_call_jar 5732KB 5733KB [ 2278.455282][T27219] bridge_fdb_cache 74KB 74KB [ 2278.468207][T27219] MPTCPv6 35KB 38KB [ 2278.482204][T27219] fib6_nodes 175KB 184KB [ 2278.503011][T27219] ip6_dst_cache 290KB 423KB [ 2278.521489][T27219] PINGv6 1KB 3KB [ 2278.535843][T27219] RAWv6 4905KB 4907KB [ 2278.552516][T27219] UDPLITEv6 19KB 19KB [ 2278.571175][T27219] UDPv6 1127KB 1127KB [ 2278.587781][T27219] TCPv6 1215KB 1237KB [ 2278.603359][T27219] nf_conntrack 10KB 37KB [ 2278.617138][T27219] sd_ext_cdb 0KB 7KB [ 2278.632758][T27219] scsi_sense_cache 1056KB 1064KB [ 2278.647154][T27219] virtio_scsi_cmd 16KB 16KB [ 2278.661391][T27219] sgpool-128 8KB 8KB [ 2278.677788][T27219] sgpool-64 4KB 12KB [ 2278.693918][T27219] sgpool-32 3KB 15KB [ 2278.710167][T27219] sgpool-16 23KB 26KB [ 2278.725407][T27219] sgpool-8 44KB 52KB [ 2278.741130][T27219] mqueue_inode_cache 53KB 62KB [ 2278.748105][T27219] f2fs_bio_post_read_ctx 16KB 16KB [ 2278.755230][T27219] jfs_mp 7KB 7KB [ 2278.762280][T27219] cifs_small_rq 15KB 16KB [ 2278.769381][T27219] cifs_request 67KB 67KB [ 2278.776337][T27219] cifs_mpx_ids 0KB 8KB [ 2278.783841][T27219] nfs_commit_data 3KB 7KB [ 2278.790961][T27219] nfs_write_data 34KB 44KB [ 2278.797890][T27219] ext4_system_zone 1KB 7KB [ 2278.804540][T27219] ext4_io_end_vec 10KB 15KB [ 2278.811847][T27219] ext4_bio_post_read_ctx 15KB 15KB [ 2278.819197][T27219] io_kiocb 0KB 3KB [ 2278.825827][T27219] kioctx 21KB 23KB [ 2278.839054][T27219] aio_kiocb 6KB 7KB [ 2278.853463][T27219] userfaultfd_ctx_cache 2KB 4KB [ 2278.870330][T27219] bio-2 1KB 7KB [ 2278.884963][T27219] fasync_cache 1KB 3KB [ 2278.901003][T27219] pid_namespace 4KB 11KB [ 2278.917365][T27219] posix_timers_cache 7KB 11KB [ 2278.930431][T27219] kvm_vcpu 0KB 70KB [ 2278.943122][T27219] kvm_mmu_page_header 58KB 61KB [ 2278.956070][T27219] pte_list_desc 2KB 3KB [ 2278.973158][T27219] x86_emulator 51KB 54KB [ 2278.987004][T27219] x86_fpu 0KB 43KB [ 2279.003114][T27219] rpc_buffers 17KB 25KB [ 2279.022595][T27219] rpc_tasks 2KB 7KB [ 2279.042008][T27219] UNIX 625KB 635KB [ 2279.065682][T27219] UDP-Lite 71KB 73KB [ 2279.081805][T27219] MPTCP 10KB 15KB [ 2279.097001][T27219] tcp_bind_bucket 40KB 40KB [ 2279.103110][T27219] inet_peer_cache 28KB 32KB [ 2279.127171][T27219] ip_fib_trie 24KB 31KB [ 2279.133729][T27219] ip_fib_alias 112KB 134KB [ 2279.161007][T27219] ip_dst_cache 99KB 168KB [ 2279.174269][T27219] PING 12KB 15KB [ 2279.184904][T27219] RAW 2978KB 2984KB [ 2279.196292][T27219] UDP 1006KB 1008KB [ 2279.220360][T27219] TCP 305KB 346KB [ 2279.248566][T27219] hugetlbfs_inode_cache 6KB 10KB [ 2279.255647][T27219] fscache_cookie_jar 1KB 7KB [ 2279.270550][T27219] bio-1 10KB 15KB [ 2279.279448][T27219] eventpoll_pwq 7KB 35KB [ 2279.286196][T27219] eventpoll_epi 13KB 39KB [ 2279.293821][T27219] inotify_inode_mark 4KB 7KB [ 2279.300716][T27219] request_queue 157KB 157KB [ 2279.306809][T27219] blkdev_ioc 11KB 19KB [ 2279.313528][T27219] bio-0 412KB 460KB [ 2279.319729][T27219] biovec-max 3153KB 3153KB [ 2279.326135][T27219] biovec-64 108KB 149KB [ 2279.336234][T27219] biovec-16 31KB 33KB [ 2279.342432][T27219] bio_integrity_payload 1KB 7KB [ 2279.349315][T27219] khugepaged_mm_slot 300KB 328KB [ 2279.355668][T27219] user_namespace 4KB 7KB [ 2279.362457][T27219] uid_cache 0KB 4KB [ 2279.368819][T27219] dmaengine-unmap-256 2KB 6KB [ 2279.375479][T27219] dmaengine-unmap-128 1KB 3KB [ 2279.382586][T27219] dmaengine-unmap-16 0KB 4KB [ 2279.388892][T27219] dmaengine-unmap-2 0KB 3KB [ 2279.394987][T27219] audit_buffer 0KB 3KB [ 2279.401381][T27219] skbuff_ext_cache 0KB 4KB [ 2279.427029][T27219] skbuff_fclone_cache 458KB 637KB [ 2279.433737][T27219] skbuff_head_cache 26010KB 40582KB [ 2279.456909][T27219] configfs_dir_cache 1KB 8KB [ 2279.463100][T27219] file_lock_cache 4KB 7KB [ 2279.489473][T27219] file_lock_ctx 8KB 11KB [ 2279.495588][T27219] fsnotify_mark_connector 1KB 8KB [ 2279.505959][T27219] net_namespace 3248KB 3248KB [ 2279.514238][T27219] task_delay_info 837KB 957KB [ 2279.520723][T27219] taskstats 606KB 694KB [ 2279.526829][T27219] proc_dir_entry 22090KB 22125KB [ 2279.535362][T27219] pde_opener 11KB 15KB [ 2279.541840][T27219] seq_file 39KB 63KB [ 2279.550607][T27219] shmem_inode_cache 10802KB 11355KB [ 2279.557469][T27219] kernfs_iattrs_cache 9KB 15KB [ 2279.564235][T27219] kernfs_node_cache 101904KB 101912KB [ 2279.573059][T27219] mnt_cache 357KB 363KB [ 2279.580004][T27219] filp 4115KB 4485KB [ 2279.589824][T27219] names_cache 40753KB 40753KB [ 2279.596133][T27219] iint_cache 28KB 66KB [ 2279.602635][T27219] lsm_file_cache 782KB 897KB [ 2279.611913][T27219] key_jar 27KB 43KB [ 2279.618460][T27219] uts_namespace 5KB 15KB [ 2279.624637][T27219] nsproxy 134KB 138KB [ 2279.633235][T27219] vm_area_struct 12193KB 13434KB [ 2279.639483][T27219] mm_struct 2397KB 2578KB [ 2279.645561][T27219] fs_cache 596KB 704KB [ 2279.653877][T27219] files_cache 1940KB 2208KB [ 2279.660440][T27219] signal_cache 5607KB 5661KB [ 2279.669895][T27219] sighand_cache 4007KB 4093KB [ 2279.676372][T27219] task_struct 22582KB 22666KB [ 2279.682831][T27219] cred_jar 1990KB 2112KB [ 2279.691306][T27219] anon_vma_chain 3780KB 4429KB [ 2279.697855][T27219] anon_vma 2976KB 3116KB [ 2279.704042][T27219] pid 376KB 461KB [ 2279.713586][T27219] Acpi-Operand 156KB 194KB [ 2279.720494][T27219] Acpi-ParseExt 9KB 11KB [ 2279.726572][T27219] Acpi-Parse 41KB 47KB [ 2279.735267][T27219] Acpi-State 52KB 63KB [ 2279.742136][T27219] Acpi-Namespace 23KB 27KB [ 2279.750484][T27219] shared_policy_node 0KB 3KB [ 2279.756669][T27219] numa_policy 3KB 23KB [ 2279.763669][T27219] trace_event_file 358KB 358KB [ 2279.772676][T27219] ftrace_event_field 491KB 496KB [ 2279.779460][T27219] pool_workqueue 908KB 908KB [ 2279.785553][T27219] vmap_area 1564KB 2346KB [ 2279.794097][T27219] debug_objects_cache 8071KB 8111KB [ 2279.801189][T27219] page->ptl 3344KB 3913KB [ 2279.810782][T27219] kmalloc-4M 4096KB 4096KB [ 2279.817537][T27219] kmalloc-1M 8192KB 8192KB [ 2279.823622][T27219] kmalloc-512k 4096KB 4096KB [ 2279.833226][T27219] kmalloc-256k 231936KB 232448KB [ 2279.840085][T27219] kmalloc-128k 18944KB 19200KB [ 2279.846201][T27219] kmalloc-64k 6656KB 7296KB [ 2279.855939][T27219] kmalloc-32k 50432KB 50432KB [ 2279.862744][T27219] kmalloc-16k 25216KB 25216KB [ 2279.872268][T27219] kmalloc-8k 49408KB 49408KB [ 2279.878999][T27219] kmalloc-4k 285352KB 285384KB [ 2279.885079][T27219] kmalloc-2k 164268KB 164320KB [ 2279.894691][T27219] kmalloc-1k 210110KB 249156KB [ 2279.901567][T27219] kmalloc-512 48062KB 48224KB [ 2279.912745][T27219] kmalloc-256 33152KB 33184KB [ 2279.923709][T27219] kmalloc-128 5671KB 5676KB [ 2279.933664][T27219] kmalloc-96 4487KB 4488KB [ 2279.945536][T27219] kmalloc-64 10805KB 10828KB [ 2279.961558][T27219] kmalloc-32 7004KB 7126KB [ 2279.968566][T27219] kmalloc-192 8537KB 8552KB [ 2279.974660][T27219] kmem_cache 426KB 429KB [ 2279.990802][T27219] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4744,uid=0 [ 2279.992924][T27315] IPVS: ftp: loaded support on port[0] = 21 [ 2280.009635][T27219] Out of memory: Killed process 4744 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2280.014104][T27323] IPVS: ftp: loaded support on port[0] = 21 18:51:35 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) getsockname$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) 18:51:35 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x6}, 0x0) 18:51:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x6558}, 0x0) 18:51:35 executing program 5: set_mempolicy(0x4002, 0x0, 0x2) unshare(0x40000000) 18:51:35 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xf8, 0xd, &(0x7f0000000000)="aeba05d0cf616e4d3a84bf9ee980c3acf6549c43bb703ddba0eb7d3c2f614a81198a24c3b6cd64295353793231b460452ab459dc73388c934dea4900f685d0d3650d76c17c00bc4e35647c1eea6a0f35f59978d58591789381075928e907b7e0cdf0bd835f68a69f86181af913876188e9ca72c3291bc6ab2d75157b3a264f92c2302b41fbfb70ee4215edda8151af78dc48ed3a7f82446ed73be1ecebf4eb5ea03dfa6d17495e8e0f1d510288743cefe2302b019c8f6f49157d4e61a7ed5d64de5a1f0600bddfce55f79fce4c9181a2ed2acf7822b241cfd2e68423c8ab8a6d63b74c0d8cbd954f3c8638d311eb837900ca5c6d3ad0dea5", &(0x7f0000000100)=""/13, 0x0, 0x0, 0x92, 0x47, &(0x7f0000000180)="cc47445fa065d69e3a888c42d50fe4960f13aa4045687b3c872337f3301837b7ef1a66a59f8dd6df5bc22e0ebb02ab98dc3f0b3b56a4aa525d84caa91739aa28d5290657d0878884583ea537a0715f4a850221615e731d6d405b6d545019bebff6568a101df8756f1a024ffcfba6d7409f752ea85e00313f3f21286356fbe8a7fcd2c644bea939120aa8bcf9074d8f9af1ea", &(0x7f0000000240)="412898ff09a235fc974a75cc760a8e9bec8bc3a19150c94d27cdf7fd24c7fddbd18812abdb1a6b8a5f70c3ae2c2171bd8a308c4d44a20410667dbcddc1b56a7c4edabf02d6cb74"}, 0x40) 18:51:35 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x4, 0x3, {0xa, 0x4e24, 0x10000, @mcast2, 0x100}}}, 0x32) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x3, &(0x7f0000000140)=0x4, 0x2) modify_ldt$write2(0x11, &(0x7f0000000000)={0x401, 0x20000800, 0x4000, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) unshare(0x40000000) [ 2281.396664][T27381] IPVS: ftp: loaded support on port[0] = 21 [ 2281.412150][T27385] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2281.426490][T27384] IPVS: ftp: loaded support on port[0] = 21 [ 2281.437059][T27386] IPVS: ftp: loaded support on port[0] = 21 [ 2281.451190][T27381] syz-executor.4 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2281.472841][T27389] IPVS: ftp: loaded support on port[0] = 21 [ 2281.481880][T27390] device bond0 left promiscuous mode [ 2281.485282][T27381] CPU: 1 PID: 27381 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 2281.489544][T27390] device bond_slave_0 left promiscuous mode [ 2281.496046][T27381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2281.496051][T27381] Call Trace: [ 2281.496076][T27381] dump_stack+0x188/0x20d [ 2281.496095][T27381] dump_header+0x10b/0x826 [ 2281.496110][T27381] oom_kill_process.cold+0x10/0x15 [ 2281.496130][T27381] out_of_memory+0x31f/0x12f0 [ 2281.517517][T27390] device bond_slave_1 left promiscuous mode [ 2281.519885][T27381] ? oom_killer_disable+0x270/0x270 [ 2281.519904][T27381] ? mutex_trylock+0x246/0x2c0 [ 2281.519918][T27381] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2281.519939][T27381] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2281.525330][T27390] bridge347: port 1(bond0) entered disabled state [ 2281.529548][T27381] ? warn_alloc+0x110/0x110 [ 2281.529569][T27381] ? do_fast_syscall_32+0x270/0xe90 [ 2281.529591][T27381] __alloc_pages_nodemask+0x5d9/0x810 [ 2281.529608][T27381] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2281.529625][T27381] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2281.598492][T27381] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2281.604553][T27381] ? do_raw_spin_unlock+0x171/0x260 [ 2281.609751][T27381] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2281.616145][T27381] alloc_pages_current+0xff/0x200 [ 2281.621262][T27381] __vmalloc_node_range+0x478/0x7a0 [ 2281.626497][T27381] ? ebt_register_table+0x1e6/0xc70 [ 2281.631692][T27381] vmalloc+0x67/0x80 [ 2281.635569][T27381] ? ebt_register_table+0x1e6/0xc70 [ 2281.640749][T27381] ebt_register_table+0x1e6/0xc70 [ 2281.645758][T27381] ? ebt_broute+0x700/0x700 [ 2281.650261][T27381] ops_init+0xaf/0x420 [ 2281.654716][T27381] setup_net+0x2de/0x860 [ 2281.658955][T27381] ? ops_init+0x420/0x420 [ 2281.663388][T27381] copy_net_ns+0x293/0x590 [ 2281.667791][T27381] create_new_namespaces+0x3fb/0xb30 [ 2281.673063][T27381] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2281.678682][T27381] ksys_unshare+0x43d/0x8e0 [ 2281.683167][T27381] ? walk_process_tree+0x2c0/0x2c0 [ 2281.688274][T27381] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2281.694356][T27381] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2281.700369][T27381] ? fput_many+0x2f/0x1a0 [ 2281.704928][T27381] ? trace_hardirqs_off_caller+0x55/0x230 [ 2281.710737][T27381] __ia32_sys_unshare+0x2c/0x40 [ 2281.715587][T27381] do_fast_syscall_32+0x270/0xe90 [ 2281.720633][T27381] entry_SYSENTER_compat+0x70/0x7f [ 2281.742941][T27381] Mem-Info: [ 2281.753802][T27381] active_anon:318802 inactive_anon:8346 isolated_anon:0 [ 2281.753802][T27381] active_file:2618 inactive_file:5811 isolated_file:0 [ 2281.753802][T27381] unevictable:14 dirty:24 writeback:8 unstable:0 [ 2281.753802][T27381] slab_reclaimable:20423 slab_unreclaimable:404743 [ 2281.753802][T27381] mapped:60708 shmem:8636 pagetables:30546 bounce:0 [ 2281.753802][T27381] free:697011 free_pcp:405 free_cma:0 [ 2281.799075][T27381] Node 0 active_anon:1113444kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217060kB dirty:12kB writeback:12kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 980992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2281.831469][T27381] Node 0 DMA free:10276kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:72kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2281.862468][T27381] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2281.866943][T27390] bridge348: port 1(bond0) entered blocking state [ 2281.869199][T27381] Node 0 DMA32 free:116496kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1113320kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB writepending:24kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:18248kB pagetables:35524kB bounce:0kB free_pcp:1620kB local_pcp:692kB free_cma:0kB [ 2281.874713][T27390] bridge348: port 1(bond0) entered disabled state [ 2281.914193][T27381] lowmem_reserve[]: 0 0 0 0 0 [ 2281.915650][T27390] device bond0 entered promiscuous mode 18:51:35 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xa}, 0x0) [ 2281.923579][T27381] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2281.926994][T27390] device bond_slave_0 entered promiscuous mode [ 2281.961772][T27390] device bond_slave_1 entered promiscuous mode [ 2281.962172][T27381] lowmem_reserve[]: 0 0 0 0 0 [ 2281.974565][T27381] Node 0 DMA: 7*4kB (M) 13*8kB (UME) 2*16kB (M) 2*32kB (M) 3*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10276kB [ 2282.012201][T27381] Node 0 DMA32: 1820*4kB (M) 1016*8kB (UM) 610*16kB (UME) 376*32kB (UME) 216*64kB (UME) 109*128kB (ME) 62*256kB (UME) 21*512kB (UM) 0*1024kB 12*2048kB (UM) 0*4096kB = 116176kB [ 2282.038948][T27390] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2282.075077][T27381] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2282.093042][T27381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 18:51:35 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xc}, 0x0) 18:51:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x6800}, 0x0) [ 2282.128779][T27381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2282.164641][T27381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 18:51:36 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140), 0x2) unshare(0x40000000) [ 2282.192517][T27381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2282.211470][T27388] IPVS: ftp: loaded support on port[0] = 21 [ 2282.230388][T27386] IPVS: ftp: loaded support on port[0] = 21 [ 2282.256433][T27381] 17069 total pagecache pages [ 2282.273820][T27393] IPVS: ftp: loaded support on port[0] = 21 [ 2282.275327][T27381] 0 pages in swap cache [ 2282.304761][T27381] Swap cache stats: add 0, delete 0, find 0/0 [ 2282.325469][T27446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2282.331455][T27381] Free swap = 0kB [ 2282.358015][T27381] Total swap = 0kB [ 2282.362400][T27381] 1965979 pages RAM [ 2282.381464][T27381] 0 pages HighMem/MovableOnly [ 2282.383141][T27451] IPVS: ftp: loaded support on port[0] = 21 [ 2282.389639][T27381] 349380 pages reserved [ 2282.407734][T27381] 0 pages cma reserved [ 2282.412938][T27381] Unreclaimable slab info: [ 2282.426547][T27452] device bond0 left promiscuous mode [ 2282.444613][T27452] device bond_slave_0 left promiscuous mode [ 2282.450784][T27381] Name Used Total 18:51:36 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xe}, 0x0) [ 2282.463721][T27452] device bond_slave_1 left promiscuous mode [ 2282.473594][T27452] bridge348: port 1(bond0) entered disabled state [ 2282.488974][T27381] pid_3 1KB 7KB [ 2282.495377][T27381] pid_2 951KB 1121KB [ 2282.511710][T27381] bio-3 0KB 7KB [ 2282.521432][T27381] AF_VSOCK 14KB 16KB [ 2282.531636][T27381] batadv_tl_cache 4KB 12KB [ 2282.540938][T27381] SMC 45KB 49KB [ 2282.547910][T27381] TIPC 663KB 663KB [ 2282.553977][T27381] rds_tcp_connection 10KB 11KB [ 2282.562824][T27381] RDS 18KB 18KB [ 2282.569777][T27452] bridge349: port 1(bond0) entered blocking state [ 2282.580633][T27452] bridge349: port 1(bond0) entered disabled state [ 2282.589157][T27381] rds_connection 0KB 3KB [ 2282.595261][T27381] SCTPv6 1181KB 1185KB [ 2282.606511][T27452] device bond0 entered promiscuous mode [ 2282.613069][T27381] SCTP 204KB 236KB [ 2282.623133][T27452] device bond_slave_0 entered promiscuous mode [ 2282.630140][T27381] sctp_chunk 7KB 7KB [ 2282.636446][T27452] device bond_slave_1 entered promiscuous mode [ 2282.645625][T27381] sctp_bind_bucket 0KB 3KB [ 2282.674118][T27381] DCCPv6 1393KB 1401KB [ 2282.688335][T27381] DCCP 1289KB 1294KB [ 2282.700984][T27381] L2TP/IPv6 6KB 6KB [ 2282.704352][T27452] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2282.710064][T27381] L2TP/IP 23KB 23KB 18:51:36 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xf}, 0x0) [ 2282.737971][T27446] device bond0 left promiscuous mode [ 2282.743398][T27446] device bond_slave_0 left promiscuous mode [ 2282.761646][T27381] KCM 17KB 19KB [ 2282.773581][T27446] device bond_slave_1 left promiscuous mode [ 2282.783130][T27381] kcm_mux_cache 7KB 7KB [ 2282.791029][T27446] bridge349: port 1(bond0) entered disabled state [ 2282.796637][T27381] RXRPC 926KB 931KB [ 2282.803569][T27381] rxrpc_call_jar 5782KB 5782KB [ 2282.815945][T27381] bridge_fdb_cache 74KB 74KB [ 2282.822358][T27381] MPTCPv6 35KB 38KB [ 2282.834406][T27381] fib6_nodes 175KB 184KB [ 2282.840890][T27381] ip6_dst_cache 289KB 423KB [ 2282.853982][T27381] PINGv6 1KB 3KB [ 2282.861675][T27381] RAWv6 4989KB 4991KB [ 2282.872662][T27381] UDPLITEv6 19KB 19KB [ 2282.879619][T27381] UDPv6 1135KB 1135KB [ 2282.885827][T27381] TCPv6 1225KB 1237KB [ 2282.925581][T27381] nf_conntrack 10KB 37KB [ 2282.947332][T27381] sd_ext_cdb 0KB 7KB [ 2282.966419][T27381] scsi_sense_cache 1056KB 1064KB [ 2282.987312][T27381] virtio_scsi_cmd 16KB 16KB [ 2282.994919][T27381] sgpool-128 8KB 8KB [ 2283.010747][T27381] sgpool-64 4KB 12KB [ 2283.020300][T27381] sgpool-32 3KB 15KB [ 2283.027304][T27381] sgpool-16 21KB 26KB [ 2283.033414][T27381] sgpool-8 44KB 52KB [ 2283.046326][T27381] mqueue_inode_cache 53KB 62KB [ 2283.053155][T27381] f2fs_bio_post_read_ctx 16KB 16KB [ 2283.065292][T27381] jfs_mp 7KB 7KB [ 2283.075120][T27381] cifs_small_rq 15KB 16KB [ 2283.087623][T27381] cifs_request 67KB 67KB [ 2283.094281][T27381] cifs_mpx_ids 0KB 8KB [ 2283.105283][T27381] nfs_commit_data 3KB 7KB [ 2283.113737][T27381] nfs_write_data 34KB 44KB [ 2283.123637][T27381] ext4_system_zone 1KB 7KB [ 2283.133478][T27381] ext4_io_end_vec 10KB 15KB [ 2283.142753][T27381] ext4_bio_post_read_ctx 15KB 15KB [ 2283.151875][T27381] io_kiocb 0KB 3KB [ 2283.161222][T27381] kioctx 21KB 23KB [ 2283.169929][T27381] aio_kiocb 6KB 7KB [ 2283.176016][T27381] userfaultfd_ctx_cache 2KB 4KB [ 2283.185262][T27381] bio-2 1KB 7KB [ 2283.193835][T27381] fasync_cache 1KB 3KB [ 2283.203028][T27381] pid_namespace 4KB 11KB [ 2283.211454][T27381] posix_timers_cache 7KB 11KB [ 2283.220888][T27381] kvm_vcpu 0KB 70KB [ 2283.229364][T27381] kvm_mmu_page_header 58KB 61KB [ 2283.235966][T27381] pte_list_desc 2KB 3KB [ 2283.245310][T27381] x86_emulator 51KB 54KB [ 2283.252483][T27381] x86_fpu 0KB 43KB [ 2283.262280][T27381] rpc_buffers 17KB 25KB [ 2283.269377][T27381] rpc_tasks 2KB 7KB [ 2283.275596][T27381] UNIX 625KB 635KB [ 2283.285342][T27381] UDP-Lite 71KB 73KB [ 2283.292097][T27381] MPTCP 10KB 15KB [ 2283.301039][T27381] tcp_bind_bucket 40KB 40KB [ 2283.308953][T27381] inet_peer_cache 28KB 32KB [ 2283.323242][T27381] ip_fib_trie 24KB 31KB [ 2283.330744][T27381] ip_fib_alias 112KB 134KB [ 2283.343631][T27381] ip_dst_cache 99KB 168KB [ 2283.350365][T27381] PING 12KB 15KB [ 2283.359617][T27381] RAW 3021KB 3023KB [ 2283.365943][T27381] UDP 1016KB 1018KB [ 2283.373293][T27381] TCP 305KB 346KB [ 2283.382423][T27381] hugetlbfs_inode_cache 6KB 10KB [ 2283.393452][T27381] fscache_cookie_jar 1KB 7KB [ 2283.403269][T27381] bio-1 10KB 15KB [ 2283.410326][T27381] eventpoll_pwq 7KB 35KB [ 2283.416407][T27381] eventpoll_epi 12KB 39KB [ 2283.425458][T27381] inotify_inode_mark 4KB 7KB [ 2283.432846][T27381] request_queue 157KB 157KB [ 2283.442465][T27381] blkdev_ioc 11KB 19KB [ 2283.449933][T27381] bio-0 425KB 428KB [ 2283.456136][T27381] biovec-max 3417KB 3417KB [ 2283.465743][T27381] biovec-64 108KB 149KB [ 2283.473021][T27381] biovec-16 31KB 33KB [ 2283.482628][T27381] bio_integrity_payload 1KB 7KB [ 2283.490379][T27381] khugepaged_mm_slot 300KB 328KB [ 2283.500139][T27381] user_namespace 4KB 7KB [ 2283.507625][T27381] uid_cache 0KB 4KB [ 2283.513717][T27381] dmaengine-unmap-256 2KB 6KB [ 2283.524845][T27381] dmaengine-unmap-128 1KB 3KB [ 2283.532225][T27381] dmaengine-unmap-16 0KB 4KB [ 2283.541905][T27381] dmaengine-unmap-2 0KB 3KB [ 2283.553007][T27381] audit_buffer 0KB 3KB [ 2283.562426][T27381] skbuff_ext_cache 0KB 4KB [ 2283.569946][T27381] skbuff_fclone_cache 485KB 633KB [ 2283.576232][T27381] skbuff_head_cache 26221KB 40575KB [ 2283.583996][T27381] configfs_dir_cache 1KB 8KB [ 2283.591274][T27381] file_lock_cache 4KB 7KB [ 2283.601551][T27381] file_lock_ctx 8KB 11KB [ 2283.608567][T27381] fsnotify_mark_connector 1KB 8KB [ 2283.615264][T27381] net_namespace 3291KB 3291KB [ 2283.623189][T27381] task_delay_info 837KB 957KB [ 2283.629996][T27381] taskstats 606KB 694KB [ 2283.636303][T27381] proc_dir_entry 22306KB 22327KB [ 2283.644738][T27381] pde_opener 11KB 15KB [ 2283.651898][T27381] seq_file 39KB 63KB [ 2283.658695][T27381] shmem_inode_cache 10802KB 11355KB [ 2283.664858][T27381] kernfs_iattrs_cache 9KB 15KB [ 2283.672708][T27381] kernfs_node_cache 100413KB 100837KB [ 2283.681250][T27381] mnt_cache 357KB 363KB [ 2283.688622][T27381] filp 4216KB 4485KB [ 2283.694710][T27381] names_cache 43558KB 43558KB [ 2283.702221][T27381] iint_cache 28KB 66KB [ 2283.710775][T27381] lsm_file_cache 775KB 897KB [ 2283.717766][T27381] key_jar 27KB 43KB [ 2283.723853][T27381] uts_namespace 5KB 15KB [ 2283.731470][T27381] nsproxy 134KB 138KB [ 2283.738280][T27381] vm_area_struct 12200KB 13426KB [ 2283.744365][T27381] mm_struct 2397KB 2578KB [ 2283.751888][T27381] fs_cache 611KB 704KB [ 2283.758789][T27381] files_cache 1965KB 2208KB [ 2283.766137][T27381] signal_cache 5658KB 5661KB [ 2283.773677][T27381] sighand_cache 4007KB 4093KB [ 2283.780721][T27381] task_struct 23117KB 23117KB [ 2283.788218][T27381] cred_jar 1990KB 2112KB [ 2283.794769][T27381] anon_vma_chain 3780KB 4429KB [ 2283.802041][T27381] anon_vma 2975KB 3116KB [ 2283.809470][T27381] pid 393KB 461KB [ 2283.817220][T27381] Acpi-Operand 156KB 194KB [ 2283.823442][T27381] Acpi-ParseExt 9KB 11KB [ 2283.831786][T27381] Acpi-Parse 41KB 47KB [ 2283.840077][T27381] Acpi-State 52KB 63KB [ 2283.852339][T27381] Acpi-Namespace 23KB 27KB [ 2283.860027][T27381] shared_policy_node 0KB 3KB [ 2283.871342][T27381] numa_policy 3KB 23KB [ 2283.879257][T27381] trace_event_file 358KB 358KB [ 2283.885948][T27381] ftrace_event_field 491KB 496KB [ 2283.895304][T27381] pool_workqueue 916KB 916KB [ 2283.901626][T27381] vmap_area 1631KB 2346KB [ 2283.912332][T27381] debug_objects_cache 8049KB 8157KB [ 2283.919811][T27381] page->ptl 3344KB 3913KB [ 2283.926369][T27381] kmalloc-4M 4096KB 4096KB [ 2283.936066][T27381] kmalloc-1M 8192KB 8192KB [ 2283.942722][T27381] kmalloc-512k 4096KB 4096KB [ 2283.952399][T27381] kmalloc-256k 234496KB 235520KB [ 2283.959227][T27381] kmalloc-128k 18944KB 19200KB [ 2283.965492][T27381] kmalloc-64k 6656KB 7296KB [ 2283.976888][T27381] kmalloc-32k 51200KB 51200KB [ 2283.983218][T27381] kmalloc-16k 25504KB 25504KB [ 2283.991283][T27381] kmalloc-8k 49792KB 49872KB [ 2283.999591][T27381] kmalloc-4k 288016KB 288104KB [ 2284.005847][T27381] kmalloc-2k 163084KB 163136KB [ 2284.013442][T27381] kmalloc-1k 211814KB 249104KB [ 2284.020135][T27381] kmalloc-512 48381KB 48472KB [ 2284.027318][T27381] kmalloc-256 32900KB 33272KB [ 2284.037579][T27381] kmalloc-128 5680KB 5700KB [ 2284.043686][T27381] kmalloc-96 4455KB 4484KB [ 2284.051033][T27381] kmalloc-64 10808KB 10840KB [ 2284.060138][T27381] kmalloc-32 7087KB 7178KB [ 2284.067212][T27381] kmalloc-192 8569KB 8604KB [ 2284.073369][T27381] kmem_cache 427KB 429KB [ 2284.081937][T27381] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4733,uid=0 [ 2284.098717][T27381] Out of memory: Killed process 4733 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2284.123393][ T1144] oom_reaper: reaped process 4733 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2284.139817][ T1144] oom_reaper: reaped process 27381 (syz-executor.4), now anon-rss:0kB, file-rss:34856kB, shmem-rss:0kB [ 2284.262163][ T1144] oom_reaper: reaped process 27393 (syz-executor.0), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 18:51:39 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x10}, 0x0) 18:51:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x6c00}, 0x0) 18:51:39 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140), 0x2) unshare(0x40000000) 18:51:39 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000015000000f1629d96e54712b9b93dfd429d0a3c9b4fa44361d3a4c447d9a6dffe10929c2ca1e8a6b9"], &(0x7f0000000080)=0x39) 18:51:39 executing program 4: set_mempolicy(0x0, &(0x7f0000000000)=0x6, 0xfe) unshare(0x40000000) 18:51:39 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xf4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f00000006c0)) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f0000000000)={0x20, 0xb, 0x15, {0x15, 0xe, "63ef0ed109d0cc25980a85bd0f18a5fed26e69"}}, &(0x7f0000000040)=ANY=[@ANYBLOB="00036f0000006f032ec4bd2e2e63637ba8467fff9220f7734ba1bd008ace54f847cfae82b3b1dcdc9754b7b17084d9774639f4dd1df6a707fd854df7c9e26857d0b0a4271733270aa9b9281cc61d213e3bc4f0d0daa4cf00fcc88f3052b9950a3ebc18144e13393e1e7d177ed150ebcf34686dc991"], &(0x7f00000000c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5c, 0x3, 0xa5}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x3, 0x0, 0x200}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xc0, 0x5, "edf5041e", "3ebd0842"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd7, 0x4, 0x1, 0x7, 0x6b, 0x9, 0x7ffe}}}, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0x16, 0x77, "1c2b43030b0a48b178c57ed1e79a1d0ff8c2c3efdcd2cdfcba6c0dda0d483e74c4df82ca50d5df7a23a7293d53d5c126840f9113273bc16d88548554db1301ed0372f0a560aa8af49e04b17991cf875a546297fb31b43669c922f0726b6cdcd49e182a4288b9d68968481d2c43e5011c302211f27fa625"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x46}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x8, 0x1, [0x0]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000003c0)={0x40, 0x9, 0x1}, &(0x7f0000000400)={0x40, 0xb, 0x2, "6810"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x100}, &(0x7f0000000480)={0x40, 0x13, 0x6, @dev={[], 0x36}}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000500)={0x40, 0x19, 0x2, 'ki'}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000005c0)={0x40, 0x1e, 0x1}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x8}}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) [ 2285.660145][T27548] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2285.678336][T27551] IPVS: ftp: loaded support on port[0] = 21 [ 2285.700567][T27548] bridge350: port 1(bond0) entered blocking state [ 2285.705188][T27549] IPVS: ftp: loaded support on port[0] = 21 [ 2285.717728][T27548] bridge350: port 1(bond0) entered disabled state [ 2285.734878][T27551] syz-executor.1 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2285.750030][T27548] device bond0 entered promiscuous mode [ 2285.757972][T27548] device bond_slave_0 entered promiscuous mode [ 2285.772956][T27559] IPVS: ftp: loaded support on port[0] = 21 [ 2285.779755][T27548] device bond_slave_1 entered promiscuous mode [ 2285.786070][T27551] CPU: 1 PID: 27551 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 2285.794837][T27551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2285.805564][T27551] Call Trace: [ 2285.809499][T27551] dump_stack+0x188/0x20d [ 2285.813944][T27551] dump_header+0x10b/0x826 [ 2285.818398][T27551] oom_kill_process.cold+0x10/0x15 [ 2285.823616][T27551] out_of_memory+0x31f/0x12f0 [ 2285.828316][T27551] ? oom_killer_disable+0x270/0x270 [ 2285.833513][T27551] ? mutex_trylock+0x246/0x2c0 [ 2285.838288][T27551] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2285.845055][T27551] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2285.851682][T27551] ? warn_alloc+0x110/0x110 [ 2285.856192][T27551] ? do_fast_syscall_32+0x270/0xe90 [ 2285.861424][T27551] __alloc_pages_nodemask+0x5d9/0x810 [ 2285.866817][T27551] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2285.873586][T27551] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2285.879411][T27551] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2285.885418][T27551] ? do_raw_spin_unlock+0x171/0x260 [ 2285.890639][T27551] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2285.897206][T27551] alloc_pages_current+0xff/0x200 [ 2285.902422][T27551] __vmalloc_node_range+0x478/0x7a0 [ 2285.908527][T27551] ? ebt_register_table+0x1e6/0xc70 [ 2285.913731][T27551] vmalloc+0x67/0x80 [ 2285.917788][T27551] ? ebt_register_table+0x1e6/0xc70 [ 2285.923017][T27551] ebt_register_table+0x1e6/0xc70 [ 2285.928055][T27551] ? ebt_broute+0x700/0x700 [ 2285.932615][T27551] ops_init+0xaf/0x420 [ 2285.936704][T27551] setup_net+0x2de/0x860 [ 2285.941075][T27551] ? ops_init+0x420/0x420 [ 2285.945630][T27551] copy_net_ns+0x293/0x590 [ 2285.950060][T27551] create_new_namespaces+0x3fb/0xb30 [ 2285.955507][T27551] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2285.961190][T27551] ksys_unshare+0x43d/0x8e0 [ 2285.965779][T27551] ? walk_process_tree+0x2c0/0x2c0 [ 2285.970902][T27551] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2285.976847][T27551] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2285.982675][T27551] ? trace_hardirqs_off_caller+0x55/0x230 [ 2285.988408][T27551] __ia32_sys_unshare+0x2c/0x40 [ 2285.993275][T27551] do_fast_syscall_32+0x270/0xe90 18:51:39 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x60}, 0x0) [ 2285.998342][T27551] entry_SYSENTER_compat+0x70/0x7f [ 2286.016434][T13570] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2286.018375][T27551] Mem-Info: [ 2286.028701][T27551] active_anon:318270 inactive_anon:8346 isolated_anon:0 [ 2286.028701][T27551] active_file:2620 inactive_file:5832 isolated_file:0 [ 2286.028701][T27551] unevictable:14 dirty:10 writeback:0 unstable:0 [ 2286.028701][T27551] slab_reclaimable:20455 slab_unreclaimable:407615 [ 2286.028701][T27551] mapped:60736 shmem:8636 pagetables:30507 bounce:0 [ 2286.028701][T27551] free:694315 free_pcp:348 free_cma:0 [ 2286.069587][T27551] Node 0 active_anon:1111288kB inactive_anon:16652kB active_file:20kB inactive_file:0kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217060kB dirty:0kB writeback:20kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 978944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2286.100569][T27551] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2286.130701][T27561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2286.150560][T27551] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2286.156868][T27551] Node 0 DMA32 free:114528kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1111164kB inactive_anon:16652kB active_file:20kB inactive_file:0kB unevictable:56kB writepending:20kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:18224kB pagetables:35424kB bounce:0kB free_pcp:1392kB local_pcp:620kB free_cma:0kB [ 2286.194056][T27551] lowmem_reserve[]: 0 0 0 0 0 18:51:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x7400}, 0x0) [ 2286.199757][T27551] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2286.241941][T27551] lowmem_reserve[]: 0 0 0 0 0 [ 2286.249106][T27551] Node 0 DMA: 9*4kB (UME) 13*8kB (UM) 2*16kB (M) 2*32kB (M) 3*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10284kB [ 2286.281568][T27599] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:51:40 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xf0}, 0x0) [ 2286.291784][T27551] Node 0 DMA32: 1820*4kB (M) 1014*8kB (UM) 614*16kB (UME) 398*32kB (UME) 213*64kB (UME) 110*128kB (UME) 62*256kB (UME) 21*512kB (UM) 0*1024kB 11*2048kB (UM) 0*4096kB = 114816kB [ 2286.298518][T13570] usb 1-1: Using ep0 maxpacket: 8 [ 2286.323115][T27551] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2286.344898][T27604] device bond0 left promiscuous mode 18:51:40 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140), 0x2) unshare(0x40000000) [ 2286.363361][T27604] device bond_slave_0 left promiscuous mode [ 2286.381413][T27604] device bond_slave_1 left promiscuous mode [ 2286.392300][T27551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 18:51:40 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = openat$uinput(0xffffff9c, &(0x7f0000000480)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000004c0)='/dev/snd/pcmC#D#p\x00', 0x529b51fa, 0x101000) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000500)=0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000e40)=0xe4) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='./file0\x00', r6, r7) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r9, r8, 0x0, 0x7ffff000) statx(r8, &(0x7f0000000540)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)="e43e6936737e28fef44040defbcd4f396c2a92cb76427b335914c218e2828daea94f3151e139a25f758c75a17d038e6b1ec4eee1347bc1277abb4e177bacdec60604e1d889202e195a55942f2295dc34b0311960f3d094f76fec6b598a4036a28d87ecc00796538e04d0db0743d85c4384153b51b48682f8ed53bac56e8461128ca4e2cb59dce33afde8bbc488fa56a56959dafd3799bcc88dccfe4942d41eede6cfd19becdeec39a9c30826c694a8438ae637161c4c0ef2da7d4021158cf7d8b901e97978465b22a95834b9aca5d620a12d0a55e246aad19c785c4f6fe7dd59fabcb7cafa949632b41e7fff0347d2152bb4a2385a", 0xf5}, {&(0x7f0000000080)="823b67bb453154c3745a6eb5ea01ebdd2598bea981d1db59e9f7a93e16f5d7bad33bc044e0c9306f6473daeaf2b373dc9e4b0a426ec9c922e1c78f9046483a35dce3d217fc842bf38b", 0x49}, {&(0x7f0000000280)="fae6727b15c84ddf3b74f94bdbf2ce93c3473cbc35a2aeaab7e432028721806f2a4b994febddec5a69ada66a8e86779362eff5a9b0806cc2b32e264070262ecec1c7f1d3d274fbce7b4d0969b6bddf55d02dfbdf02189e672598b9b54173b6bce61cfcc41ec2913c432d363fefba4e46b5c2c4eeb3320fb49b016d7c7456bb4b74", 0x81}, {&(0x7f0000000100)="e0cb69c688509b644232ed1f2f", 0xd}, {&(0x7f0000000340)="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", 0xff}], 0x5, &(0x7f0000000680)=[@rights={{0x1c, 0x1, 0x1, [r0, r1, r2, r3]}}, @cred={{0x18, 0x1, 0x2, {r4, r6, r10}}}], 0x34, 0x80}, 0x45) [ 2286.417966][T27604] bridge350: port 1(bond0) entered disabled state [ 2286.427298][T27616] IPVS: ftp: loaded support on port[0] = 21 [ 2286.432050][T27551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2286.447400][T27551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2286.460944][T27551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2286.471865][T27551] 17088 total pagecache pages [ 2286.479706][T13570] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2286.483793][T27557] IPVS: ftp: loaded support on port[0] = 21 [ 2286.502124][T27551] 0 pages in swap cache [ 2286.507634][T27618] IPVS: ftp: loaded support on port[0] = 21 [ 2286.514372][T13570] usb 1-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.40 [ 2286.515596][T27551] Swap cache stats: add 0, delete 0, find 0/0 [ 2286.532906][T13570] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2286.549494][T27604] bridge351: port 1(bond0) entered blocking state [ 2286.550062][T13570] usb 1-1: config 0 descriptor?? [ 2286.555962][T27604] bridge351: port 1(bond0) entered disabled state [ 2286.573129][T27604] device bond0 entered promiscuous mode [ 2286.579384][T27551] Free swap = 0kB [ 2286.583208][T27551] Total swap = 0kB [ 2286.616640][T27604] device bond_slave_0 entered promiscuous mode [ 2286.622938][T27604] device bond_slave_1 entered promiscuous mode [ 2286.634090][T13570] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2286.639909][T27551] 1965979 pages RAM [ 2286.645722][T27551] 0 pages HighMem/MovableOnly [ 2286.661414][T27551] 349380 pages reserved [ 2286.670513][T27551] 0 pages cma reserved [ 2286.675017][T27551] Unreclaimable slab info: [ 2286.689874][T27551] Name Used Total [ 2286.704284][T27551] pid_3 1KB 7KB [ 2286.713390][T27551] pid_2 951KB 1121KB 18:51:40 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x300}, 0x0) [ 2286.719686][T27604] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2286.745907][T27551] bio-3 0KB 7KB 18:51:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x7a00}, 0x0) [ 2286.768983][T27551] AF_VSOCK 14KB 16KB [ 2286.788294][T27551] batadv_tl_cache 4KB 12KB [ 2286.795946][T27551] SMC 45KB 49KB [ 2286.810592][T27551] TIPC 672KB 676KB [ 2286.833116][T13570] usb 1-1: USB disconnect, device number 22 [ 2286.851659][T27551] rds_tcp_connection 10KB 11KB 18:51:40 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x600}, 0x0) 18:51:40 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x0) unshare(0x40000000) [ 2286.894812][T27551] RDS 18KB 18KB [ 2286.930039][T27551] rds_connection 0KB 3KB [ 2286.959417][T27660] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2286.974674][T27551] SCTPv6 1179KB 1185KB [ 2286.982422][T27551] SCTP 202KB 232KB [ 2287.010977][T27667] device bond0 left promiscuous mode [ 2287.015843][T27551] sctp_chunk 7KB 7KB [ 2287.017600][T27667] device bond_slave_0 left promiscuous mode [ 2287.024174][T27551] sctp_bind_bucket 0KB 3KB [ 2287.043279][T27551] DCCPv6 1399KB 1409KB [ 2287.051023][T27551] DCCP 1301KB 1308KB [ 2287.062032][T27667] device bond_slave_1 left promiscuous mode [ 2287.064411][T27551] L2TP/IPv6 6KB 6KB [ 2287.069902][T27667] bridge351: port 1(bond0) entered disabled state [ 2287.076998][T27551] L2TP/IP 23KB 23KB [ 2287.090522][T27551] KCM 17KB 19KB [ 2287.098645][T27551] kcm_mux_cache 7KB 7KB [ 2287.104726][T27551] RXRPC 933KB 938KB [ 2287.111920][T27551] rxrpc_call_jar 5817KB 5820KB [ 2287.119895][T27551] bridge_fdb_cache 74KB 74KB [ 2287.128008][T27551] MPTCPv6 35KB 38KB [ 2287.135286][T27551] fib6_nodes 175KB 184KB [ 2287.143003][T27551] ip6_dst_cache 288KB 423KB [ 2287.151927][T27551] PINGv6 1KB 3KB [ 2287.158663][T27551] RAWv6 4978KB 5001KB [ 2287.164736][T27551] UDPLITEv6 19KB 19KB [ 2287.174120][T27551] UDPv6 1145KB 1147KB [ 2287.176321][T27667] bridge352: port 1(bond0) entered blocking state [ 2287.181119][T27551] TCPv6 1252KB 1255KB [ 2287.190729][T27667] bridge352: port 1(bond0) entered disabled state [ 2287.196625][T27551] nf_conntrack 10KB 37KB [ 2287.203771][T27667] device bond0 entered promiscuous mode [ 2287.206876][T27551] sd_ext_cdb 0KB 7KB [ 2287.215090][T27667] device bond_slave_0 entered promiscuous mode [ 2287.225070][T27667] device bond_slave_1 entered promiscuous mode [ 2287.239553][T27551] scsi_sense_cache 1056KB 1064KB [ 2287.278679][T27667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2287.282192][T27551] virtio_scsi_cmd 16KB 16KB [ 2287.331076][T27551] sgpool-128 8KB 8KB [ 2287.345187][T27551] sgpool-64 4KB 12KB [ 2287.354211][T27551] sgpool-32 3KB 15KB [ 2287.362269][T27551] sgpool-16 21KB 26KB [ 2287.372677][T27551] sgpool-8 44KB 52KB [ 2287.379828][T27551] mqueue_inode_cache 53KB 62KB [ 2287.386079][T27551] f2fs_bio_post_read_ctx 16KB 16KB [ 2287.397481][T27551] jfs_mp 7KB 7KB [ 2287.404059][T27551] cifs_small_rq 15KB 16KB [ 2287.414710][T27551] cifs_request 67KB 67KB [ 2287.421455][T27551] cifs_mpx_ids 0KB 8KB [ 2287.431768][T27551] nfs_commit_data 3KB 7KB [ 2287.438773][T27551] nfs_write_data 34KB 44KB [ 2287.445140][T27551] ext4_system_zone 1KB 7KB [ 2287.455804][T27551] ext4_io_end_vec 10KB 15KB [ 2287.462659][T27551] ext4_bio_post_read_ctx 15KB 15KB [ 2287.475445][T27551] io_kiocb 0KB 3KB [ 2287.482729][T27551] kioctx 21KB 23KB [ 2287.492819][T27551] aio_kiocb 6KB 7KB [ 2287.499658][T27551] userfaultfd_ctx_cache 2KB 4KB [ 2287.511043][T27551] bio-2 1KB 7KB [ 2287.518020][T27551] fasync_cache 1KB 3KB [ 2287.524189][T27551] pid_namespace 4KB 11KB [ 2287.534690][T27551] posix_timers_cache 7KB 11KB [ 2287.541689][T27551] kvm_vcpu 0KB 70KB [ 2287.562456][T27551] kvm_mmu_page_header 58KB 61KB [ 2287.570585][T27551] pte_list_desc 2KB 3KB [ 2287.580288][T27551] x86_emulator 51KB 54KB [ 2287.588909][T27551] x86_fpu 0KB 43KB [ 2287.595067][T27551] rpc_buffers 17KB 25KB [ 2287.605030][T27551] rpc_tasks 2KB 7KB [ 2287.612617][T27551] UNIX 625KB 635KB [ 2287.622458][T27551] UDP-Lite 71KB 73KB [ 2287.633685][T27551] MPTCP 10KB 15KB [ 2287.643310][T27551] tcp_bind_bucket 40KB 40KB [ 2287.650779][T27551] inet_peer_cache 28KB 32KB [ 2287.660390][T27551] ip_fib_trie 24KB 31KB [ 2287.667754][T27551] ip_fib_alias 112KB 134KB [ 2287.673902][T27551] ip_dst_cache 103KB 168KB [ 2287.683792][T27551] PING 12KB 15KB [ 2287.691167][T27551] RAW 3050KB 3054KB [ 2287.701099][T27551] UDP 1027KB 1029KB [ 2287.710925][T27551] TCP 302KB 346KB [ 2287.720532][T27551] hugetlbfs_inode_cache 6KB 10KB [ 2287.728352][T27551] fscache_cookie_jar 1KB 7KB [ 2287.734690][T27551] bio-1 10KB 15KB [ 2287.744765][T27551] eventpoll_pwq 10KB 35KB [ 2287.752072][T27551] eventpoll_epi 18KB 39KB [ 2287.762689][T27551] inotify_inode_mark 4KB 7KB [ 2287.770205][T27551] request_queue 157KB 157KB [ 2287.779900][T27551] blkdev_ioc 16KB 19KB [ 2287.787478][T27551] bio-0 489KB 496KB [ 2287.793630][T27551] biovec-max 3939KB 3990KB [ 2287.805835][T27551] biovec-64 111KB 149KB [ 2287.813569][T27551] biovec-16 31KB 33KB [ 2287.823091][T27551] bio_integrity_payload 1KB 7KB [ 2287.830795][T27551] khugepaged_mm_slot 300KB 328KB [ 2287.840663][T27551] user_namespace 4KB 7KB [ 2287.848034][T27551] uid_cache 0KB 4KB [ 2287.854163][T27551] dmaengine-unmap-256 2KB 6KB [ 2287.864222][T27551] dmaengine-unmap-128 1KB 3KB [ 2287.872041][T27551] dmaengine-unmap-16 0KB 4KB [ 2287.881619][T27551] dmaengine-unmap-2 0KB 3KB [ 2287.889098][T27551] audit_buffer 0KB 3KB [ 2287.895400][T27551] skbuff_ext_cache 0KB 4KB [ 2287.905271][T27551] skbuff_fclone_cache 581KB 633KB [ 2287.912852][T27551] skbuff_head_cache 26297KB 40575KB [ 2287.922722][T27551] configfs_dir_cache 1KB 8KB [ 2287.930028][T27551] file_lock_cache 4KB 7KB [ 2287.939519][T27551] file_lock_ctx 8KB 11KB [ 2287.945856][T27551] fsnotify_mark_connector 1KB 8KB [ 2287.954172][T27551] net_namespace 3320KB 3320KB [ 2287.963768][T27551] task_delay_info 849KB 957KB [ 2287.971151][T27551] taskstats 606KB 694KB [ 2287.980162][T27551] proc_dir_entry 22413KB 22425KB [ 2287.987426][T27551] pde_opener 14KB 15KB [ 2287.993881][T27551] seq_file 39KB 63KB [ 2288.002623][T27551] sigqueue 3KB 3KB [ 2288.009710][T27551] shmem_inode_cache 10802KB 11355KB [ 2288.015800][T27551] kernfs_iattrs_cache 9KB 15KB [ 2288.024790][T27551] kernfs_node_cache 101473KB 101473KB [ 2288.032217][T27551] mnt_cache 357KB 363KB [ 2288.040173][T27551] filp 4233KB 4481KB [ 2288.046893][T27551] names_cache 42266KB 42308KB [ 2288.052993][T27551] iint_cache 28KB 66KB [ 2288.059998][T27551] lsm_file_cache 782KB 897KB [ 2288.066893][T27551] key_jar 27KB 43KB [ 2288.073247][T27551] uts_namespace 5KB 15KB [ 2288.081092][T27551] nsproxy 134KB 138KB [ 2288.088276][T27551] vm_area_struct 12277KB 13415KB [ 2288.094353][T27551] mm_struct 2389KB 2578KB [ 2288.101442][T27551] fs_cache 611KB 704KB [ 2288.109577][T27551] files_cache 2016KB 2208KB [ 2288.115858][T27551] signal_cache 5671KB 5733KB [ 2288.126984][T27551] sighand_cache 4007KB 4093KB [ 2288.133078][T27551] task_struct 22872KB 22962KB [ 2288.142014][T27551] cred_jar 2035KB 2112KB [ 2288.149176][T27551] anon_vma_chain 3793KB 4429KB [ 2288.155431][T27551] anon_vma 2982KB 3116KB [ 2288.164038][T27551] pid 402KB 461KB [ 2288.171013][T27551] Acpi-Operand 156KB 194KB [ 2288.179368][T27551] Acpi-ParseExt 9KB 11KB [ 2288.185443][T27551] Acpi-Parse 41KB 47KB [ 2288.192984][T27551] Acpi-State 52KB 63KB [ 2288.201620][T27551] Acpi-Namespace 23KB 27KB [ 2288.208596][T27551] shared_policy_node 0KB 3KB [ 2288.214840][T27551] numa_policy 3KB 23KB [ 2288.225071][T27551] trace_event_file 358KB 358KB [ 2288.231967][T27551] ftrace_event_field 491KB 496KB [ 2288.238878][T27551] pool_workqueue 926KB 928KB [ 2288.245090][T27551] vmap_area 1710KB 2346KB [ 2288.252572][T27551] debug_objects_cache 8089KB 8157KB [ 2288.259445][T27551] page->ptl 3344KB 3913KB [ 2288.265631][T27551] kmalloc-4M 4096KB 4096KB [ 2288.273683][T27551] kmalloc-1M 8192KB 8192KB [ 2288.280640][T27551] kmalloc-512k 4096KB 4096KB [ 2288.287292][T27551] kmalloc-256k 236032KB 237056KB [ 2288.293371][T27551] kmalloc-128k 18944KB 19200KB [ 2288.300807][T27551] kmalloc-64k 6656KB 7296KB [ 2288.307662][T27551] kmalloc-32k 51776KB 51776KB [ 2288.313732][T27551] kmalloc-16k 25728KB 25728KB [ 2288.320834][T27551] kmalloc-8k 50208KB 50208KB [ 2288.327779][T27551] kmalloc-4k 290016KB 290120KB [ 2288.333849][T27551] kmalloc-2k 164056KB 164108KB [ 2288.340767][T27551] kmalloc-1k 213694KB 249088KB [ 2288.347574][T27551] kmalloc-512 48452KB 48668KB [ 2288.353826][T27551] kmalloc-256 33047KB 33268KB [ 2288.361139][T27551] kmalloc-128 5673KB 5700KB [ 2288.367753][T27551] kmalloc-96 4455KB 4484KB [ 2288.373846][T27551] kmalloc-64 10820KB 10856KB [ 2288.381077][T27551] kmalloc-32 7115KB 7189KB [ 2288.387889][T27551] kmalloc-192 8617KB 8632KB [ 2288.394081][T27551] kmem_cache 428KB 429KB [ 2288.401091][T27551] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4714,uid=0 [ 2288.403117][T27665] IPVS: ftp: loaded support on port[0] = 21 [ 2288.417336][T27551] Out of memory: Killed process 4714 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2288.424267][T27560] IPVS: ftp: loaded support on port[0] = 21 [ 2288.448096][T27619] IPVS: ftp: loaded support on port[0] = 21 [ 2288.517609][T27560] syz-executor.0 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2288.540543][T27560] CPU: 1 PID: 27560 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0 [ 2288.549293][T27560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2288.559437][T27560] Call Trace: [ 2288.562731][T27560] dump_stack+0x188/0x20d [ 2288.567112][T27560] dump_header+0x10b/0x826 [ 2288.571563][T27560] oom_kill_process.cold+0x10/0x15 [ 2288.576688][T27560] out_of_memory+0x31f/0x12f0 [ 2288.581375][T27560] ? oom_killer_disable+0x270/0x270 [ 2288.586864][T27560] ? mutex_trylock+0x246/0x2c0 [ 2288.591642][T27560] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2288.598313][T27560] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2288.604902][T27560] ? warn_alloc+0x110/0x110 [ 2288.609412][T27560] ? do_fast_syscall_32+0x270/0xe90 [ 2288.614619][T27560] __alloc_pages_nodemask+0x5d9/0x810 [ 2288.619992][T27560] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2288.626785][T27560] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2288.632606][T27560] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2288.638691][T27560] ? do_raw_spin_unlock+0x171/0x260 [ 2288.643963][T27560] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2288.650476][T27560] alloc_pages_current+0xff/0x200 [ 2288.655514][T27560] __vmalloc_node_range+0x478/0x7a0 [ 2288.660733][T27560] ? ebt_register_table+0x1e6/0xc70 [ 2288.665927][T27560] vmalloc+0x67/0x80 [ 2288.669828][T27560] ? ebt_register_table+0x1e6/0xc70 [ 2288.675043][T27560] ebt_register_table+0x1e6/0xc70 [ 2288.680111][T27560] ? ebt_broute+0x700/0x700 [ 2288.684764][T27560] ops_init+0xaf/0x420 [ 2288.688844][T27560] setup_net+0x2de/0x860 [ 2288.693319][T27560] ? ops_init+0x420/0x420 [ 2288.697659][T27560] copy_net_ns+0x293/0x590 [ 2288.702069][T27560] create_new_namespaces+0x3fb/0xb30 [ 2288.707651][T27560] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2288.713292][T27560] ksys_unshare+0x43d/0x8e0 [ 2288.717818][T27560] ? walk_process_tree+0x2c0/0x2c0 [ 2288.722935][T27560] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2288.728849][T27560] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2288.735004][T27560] ? fput_many+0x2f/0x1a0 [ 2288.740840][T27560] ? trace_hardirqs_off_caller+0x55/0x230 [ 2288.746665][T27560] __ia32_sys_unshare+0x2c/0x40 [ 2288.751543][T27560] do_fast_syscall_32+0x270/0xe90 [ 2288.756575][T27560] entry_SYSENTER_compat+0x70/0x7f [ 2288.788138][T27560] Mem-Info: [ 2288.791317][T27560] active_anon:317693 inactive_anon:8346 isolated_anon:0 [ 2288.791317][T27560] active_file:2747 inactive_file:5803 isolated_file:0 [ 2288.791317][T27560] unevictable:14 dirty:4 writeback:0 unstable:0 [ 2288.791317][T27560] slab_reclaimable:20512 slab_unreclaimable:409899 [ 2288.791317][T27560] mapped:60732 shmem:8636 pagetables:30447 bounce:0 [ 2288.791317][T27560] free:692238 free_pcp:383 free_cma:0 [ 2288.834003][T27560] Node 0 active_anon:1109128kB inactive_anon:16652kB active_file:4kB inactive_file:16kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217060kB dirty:12kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 976896kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2288.863114][T27560] Node 0 DMA free:10288kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2288.893713][T27560] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2288.900956][T27560] Node 0 DMA32 free:116000kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1109004kB inactive_anon:16652kB active_file:4kB inactive_file:16kB unevictable:56kB writepending:12kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:18192kB pagetables:35324kB bounce:0kB free_pcp:1532kB local_pcp:732kB free_cma:0kB [ 2288.934144][T27560] lowmem_reserve[]: 0 0 0 0 0 [ 2288.939834][T27560] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2288.969375][T27560] lowmem_reserve[]: 0 0 0 0 0 [ 2288.974080][T27560] Node 0 DMA: 8*4kB (UM) 16*8kB (UM) 3*16kB (UM) 3*32kB (UM) 2*64kB (ME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10288kB [ 2288.990771][T27560] Node 0 DMA32: 1820*4kB (M) 1008*8kB (M) 610*16kB (UME) 377*32kB (UME) 216*64kB (UME) 111*128kB (UME) 62*256kB (UME) 20*512kB (M) 0*1024kB 12*2048kB (UM) 0*4096kB = 115888kB [ 2289.009691][T27560] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2289.021177][T27560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2289.030834][T27560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2289.040330][T27560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2289.050662][T27560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2289.060120][T27560] 17195 total pagecache pages [ 2289.064832][T27560] 0 pages in swap cache [ 2289.071627][T27560] Swap cache stats: add 0, delete 0, find 0/0 [ 2289.078243][T27560] Free swap = 0kB [ 2289.081979][T27560] Total swap = 0kB [ 2289.085913][T27560] 1965979 pages RAM [ 2289.089796][T27560] 0 pages HighMem/MovableOnly [ 2289.094467][T27560] 349380 pages reserved [ 2289.099118][T27560] 0 pages cma reserved [ 2289.103187][T27560] Unreclaimable slab info: [ 2289.107704][T27560] Name Used Total [ 2289.114870][T27560] pid_3 1KB 7KB [ 2289.122187][T27560] pid_2 951KB 1121KB [ 2289.128573][T27560] bio-3 0KB 7KB [ 2289.134664][T27560] AF_VSOCK 14KB 16KB [ 2289.140827][T27560] batadv_tl_cache 4KB 12KB [ 2289.146981][T27560] SMC 45KB 49KB [ 2289.153054][T27560] TIPC 680KB 682KB [ 2289.159834][T27560] rds_tcp_connection 10KB 11KB [ 2289.166177][T27560] RDS 18KB 18KB [ 2289.172248][T27560] rds_connection 0KB 3KB [ 2289.178385][T27560] SCTPv6 1185KB 1192KB [ 2289.184450][T27560] SCTP 202KB 232KB [ 2289.190785][T27560] sctp_chunk 7KB 7KB [ 2289.197012][T27560] sctp_bind_bucket 0KB 3KB [ 2289.203181][T27560] DCCPv6 1417KB 1425KB [ 2289.209840][T27560] DCCP 1311KB 1316KB [ 2289.216619][T27560] L2TP/IPv6 6KB 6KB [ 2289.222688][T27560] L2TP/IP 23KB 23KB [ 2289.231420][T27560] KCM 17KB 19KB [ 2289.237969][T27560] kcm_mux_cache 7KB 7KB [ 2289.250795][T27560] RXRPC 945KB 951KB [ 2289.257659][T27560] rxrpc_call_jar 5843KB 5868KB [ 2289.263737][T27560] bridge_fdb_cache 74KB 74KB [ 2289.274988][T27560] MPTCPv6 35KB 38KB [ 2289.281859][T27560] fib6_nodes 175KB 184KB [ 2289.292072][T27560] ip6_dst_cache 281KB 423KB [ 2289.298745][T27560] PINGv6 1KB 3KB [ 2289.305344][T27560] RAWv6 4999KB 5022KB [ 2289.317959][T27560] UDPLITEv6 19KB 19KB [ 2289.324057][T27560] UDPv6 1150KB 1158KB [ 2289.333081][T27560] TCPv6 1234KB 1261KB [ 2289.343000][T27560] nf_conntrack 10KB 37KB [ 2289.351725][T27560] sd_ext_cdb 0KB 7KB [ 2289.360560][T27560] scsi_sense_cache 1056KB 1064KB [ 2289.369002][T27560] virtio_scsi_cmd 16KB 16KB [ 2289.375202][T27560] sgpool-128 8KB 8KB [ 2289.384734][T27560] sgpool-64 4KB 12KB [ 2289.393426][T27560] sgpool-32 3KB 15KB [ 2289.401904][T27560] sgpool-16 20KB 26KB [ 2289.410704][T27560] sgpool-8 44KB 52KB [ 2289.419037][T27560] mqueue_inode_cache 53KB 62KB [ 2289.425414][T27560] f2fs_bio_post_read_ctx 16KB 16KB [ 2289.435064][T27560] jfs_mp 7KB 7KB [ 2289.443407][T27560] cifs_small_rq 15KB 16KB [ 2289.453140][T27560] cifs_request 67KB 67KB [ 2289.477632][T27560] cifs_mpx_ids 0KB 8KB [ 2289.483770][T27560] nfs_commit_data 3KB 7KB [ 2289.517768][T27560] nfs_write_data 34KB 44KB [ 2289.524175][T27560] ext4_system_zone 1KB 7KB [ 2289.539374][T27560] ext4_io_end_vec 9KB 15KB [ 2289.552101][T27560] ext4_bio_post_read_ctx 15KB 15KB [ 2289.570999][T27560] io_kiocb 0KB 3KB [ 2289.585055][T27560] kioctx 21KB 23KB [ 2289.599712][T27560] aio_kiocb 6KB 7KB [ 2289.614067][T27560] userfaultfd_ctx_cache 2KB 4KB [ 2289.627392][T27560] bio-2 1KB 7KB [ 2289.641254][T27560] fasync_cache 1KB 3KB [ 2289.653960][T27560] pid_namespace 4KB 11KB [ 2289.666705][T27560] posix_timers_cache 7KB 11KB [ 2289.679592][T27560] kvm_vcpu 0KB 70KB [ 2289.686743][T27560] kvm_mmu_page_header 58KB 61KB [ 2289.693368][T27560] pte_list_desc 2KB 3KB [ 2289.699876][T27560] x86_emulator 51KB 54KB [ 2289.709235][T27560] x86_fpu 0KB 43KB [ 2289.723608][T27560] rpc_buffers 17KB 25KB [ 2289.736082][T27560] rpc_tasks 2KB 7KB [ 2289.748795][T27560] UNIX 620KB 635KB [ 2289.765304][T27560] UDP-Lite 71KB 73KB [ 2289.778343][T27560] MPTCP 10KB 15KB [ 2289.793934][T27560] tcp_bind_bucket 40KB 40KB [ 2289.806904][T27560] inet_peer_cache 28KB 32KB [ 2289.820774][T27560] ip_fib_trie 24KB 31KB [ 2289.827384][T27560] ip_fib_alias 112KB 134KB [ 2289.833544][T27560] ip_dst_cache 102KB 168KB [ 2289.840007][T27560] PING 12KB 15KB [ 2289.846460][T27560] RAW 3031KB 3054KB [ 2289.852607][T27560] UDP 1022KB 1029KB [ 2289.859073][T27560] TCP 299KB 346KB [ 2289.865231][T27560] hugetlbfs_inode_cache 6KB 10KB [ 2289.872747][T27560] fscache_cookie_jar 1KB 7KB [ 2289.880800][T27560] bio-1 10KB 15KB [ 2289.888729][T27560] eventpoll_pwq 10KB 35KB [ 2289.894884][T27560] eventpoll_epi 18KB 39KB [ 2289.903321][T27560] inotify_inode_mark 4KB 7KB [ 2289.911921][T27560] request_queue 157KB 157KB [ 2289.920334][T27560] blkdev_ioc 16KB 19KB [ 2289.928381][T27560] bio-0 466KB 496KB [ 2289.934523][T27560] biovec-max 3714KB 3769KB [ 2289.942761][T27560] biovec-64 111KB 149KB [ 2289.953239][T27560] biovec-16 31KB 33KB [ 2289.973168][T27560] bio_integrity_payload 1KB 7KB [ 2289.989575][T27560] khugepaged_mm_slot 300KB 328KB [ 2290.000808][T27560] user_namespace 4KB 7KB [ 2290.007650][T27560] uid_cache 0KB 4KB [ 2290.013794][T27560] dmaengine-unmap-256 2KB 6KB [ 2290.024206][T27560] dmaengine-unmap-128 1KB 3KB [ 2290.030803][T27560] dmaengine-unmap-16 0KB 4KB [ 2290.040866][T27560] dmaengine-unmap-2 0KB 3KB [ 2290.047458][T27560] audit_buffer 0KB 3KB [ 2290.053645][T27560] skbuff_ext_cache 0KB 4KB [ 2290.063467][T27560] skbuff_fclone_cache 581KB 633KB [ 2290.070161][T27560] skbuff_head_cache 26306KB 40575KB [ 2290.079956][T27560] configfs_dir_cache 1KB 8KB [ 2290.086513][T27560] file_lock_cache 4KB 7KB [ 2290.098200][T27560] file_lock_ctx 8KB 11KB [ 2290.116668][T27560] fsnotify_mark_connector 1KB 8KB [ 2290.134310][T27560] net_namespace 3299KB 3320KB [ 2290.147041][T27560] task_delay_info 849KB 957KB [ 2290.163617][T27560] taskstats 606KB 694KB [ 2290.181744][T27560] proc_dir_entry 22452KB 22470KB [ 2290.193061][T27560] pde_opener 14KB 15KB [ 2290.199608][T27560] seq_file 39KB 63KB [ 2290.205797][T27560] sigqueue 3KB 3KB [ 2290.216186][T27560] shmem_inode_cache 10802KB 11355KB [ 2290.223083][T27560] kernfs_iattrs_cache 9KB 15KB [ 2290.232701][T27560] kernfs_node_cache 101523KB 101554KB [ 2290.240068][T27560] mnt_cache 357KB 363KB [ 2290.251042][T27560] filp 4233KB 4481KB [ 2290.258100][T27560] names_cache 43575KB 43575KB [ 2290.264277][T27560] iint_cache 28KB 66KB [ 2290.273668][T27560] lsm_file_cache 782KB 897KB [ 2290.280663][T27560] key_jar 27KB 43KB [ 2290.290001][T27560] uts_namespace 5KB 15KB [ 2290.296987][T27560] nsproxy 134KB 138KB [ 2290.303130][T27560] vm_area_struct 12228KB 13392KB [ 2290.312486][T27560] mm_struct 2389KB 2578KB [ 2290.319402][T27560] fs_cache 611KB 704KB [ 2290.325543][T27560] files_cache 2016KB 2208KB [ 2290.334832][T27560] signal_cache 5666KB 5733KB [ 2290.341803][T27560] sighand_cache 4007KB 4093KB [ 2290.352523][T27560] task_struct 22563KB 22595KB [ 2290.359459][T27560] cred_jar 2035KB 2112KB [ 2290.367027][T27560] anon_vma_chain 3793KB 4429KB [ 2290.373111][T27560] anon_vma 2982KB 3116KB [ 2290.382984][T27560] pid 402KB 461KB [ 2290.389522][T27560] Acpi-Operand 156KB 194KB [ 2290.402646][T27560] Acpi-ParseExt 9KB 11KB [ 2290.410000][T27560] Acpi-Parse 41KB 47KB [ 2290.420275][T27560] Acpi-State 52KB 63KB [ 2290.427749][T27560] Acpi-Namespace 23KB 27KB [ 2290.433917][T27560] shared_policy_node 0KB 3KB [ 2290.444712][T27560] numa_policy 3KB 23KB [ 2290.451878][T27560] trace_event_file 358KB 358KB [ 2290.462657][T27560] ftrace_event_field 491KB 496KB [ 2290.469731][T27560] pool_workqueue 926KB 928KB [ 2290.479998][T27560] vmap_area 1170KB 2338KB [ 2290.486842][T27560] debug_objects_cache 8106KB 8157KB [ 2290.493103][T27560] page->ptl 3344KB 3913KB [ 2290.504240][T27560] kmalloc-4M 4096KB 4096KB [ 2290.511260][T27560] kmalloc-1M 8192KB 8192KB [ 2290.518322][T27560] kmalloc-512k 4096KB 4096KB [ 2290.524604][T27560] kmalloc-256k 236544KB 237568KB [ 2290.531929][T27560] kmalloc-128k 18944KB 19200KB [ 2290.538914][T27560] kmalloc-64k 6656KB 7296KB [ 2290.538928][T27560] kmalloc-32k 51904KB 52032KB [ 2290.552353][T27560] kmalloc-16k 25760KB 25824KB [ 2290.559343][T27560] kmalloc-8k 50224KB 50304KB [ 2290.565532][T27560] kmalloc-4k 291016KB 291056KB [ 2290.573189][T27560] kmalloc-2k 163904KB 163956KB [ 2290.581384][T27560] kmalloc-1k 213908KB 249084KB [ 2290.588315][T27560] kmalloc-512 48370KB 48604KB [ 2290.594671][T27560] kmalloc-256 33085KB 33300KB [ 2290.602052][T27560] kmalloc-128 5670KB 5700KB [ 2290.608789][T27560] kmalloc-96 4454KB 4484KB [ 2290.614964][T27560] kmalloc-64 10792KB 10856KB [ 2290.622003][T27560] kmalloc-32 7107KB 7189KB [ 2290.628579][T27560] kmalloc-192 8615KB 8636KB [ 2290.634648][T27560] kmem_cache 433KB 437KB [ 2290.642428][T27560] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4704,uid=0 [ 2290.657579][T27560] Out of memory: Killed process 4704 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 18:51:44 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000000)={0x101, 0x1b, &(0x7f0000000180)="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"}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) 18:51:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x8100}, 0x0) 18:51:44 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xa00}, 0x0) 18:51:44 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x1ff, 0xb, 0x800}) unshare(0x40000000) 18:51:44 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x0) unshare(0x40000000) [ 2290.898511][T27763] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2290.927979][T27764] IPVS: ftp: loaded support on port[0] = 21 [ 2290.928632][T27763] device bond0 left promiscuous mode 18:51:44 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xc00}, 0x0) [ 2290.946641][T27760] IPVS: ftp: loaded support on port[0] = 21 [ 2290.954762][T27763] device bond_slave_0 left promiscuous mode [ 2290.970752][T27763] device bond_slave_1 left promiscuous mode [ 2290.990787][T27763] bridge352: port 1(bond0) entered disabled state [ 2290.992015][T27769] IPVS: ftp: loaded support on port[0] = 21 [ 2291.075944][T27763] bridge353: port 1(bond0) entered blocking state [ 2291.082826][T27763] bridge353: port 1(bond0) entered disabled state [ 2291.091887][T27763] device bond0 entered promiscuous mode [ 2291.099070][T27763] device bond_slave_0 entered promiscuous mode [ 2291.106203][T27763] device bond_slave_1 entered promiscuous mode [ 2291.112510][T27760] syz-executor.0 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2291.132243][T27760] CPU: 1 PID: 27760 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0 [ 2291.140970][T27760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2291.151029][T27760] Call Trace: [ 2291.154310][T27760] dump_stack+0x188/0x20d [ 2291.158626][T27760] dump_header+0x10b/0x826 [ 2291.163042][T27760] oom_kill_process.cold+0x10/0x15 [ 2291.168178][T27760] out_of_memory+0x31f/0x12f0 [ 2291.172852][T27760] ? oom_killer_disable+0x270/0x270 [ 2291.178031][T27760] ? mutex_trylock+0x246/0x2c0 [ 2291.182775][T27760] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2291.189532][T27760] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2291.196126][T27760] ? warn_alloc+0x110/0x110 [ 2291.200620][T27760] ? do_fast_syscall_32+0x270/0xe90 [ 2291.205816][T27760] __alloc_pages_nodemask+0x5d9/0x810 [ 2291.211170][T27760] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2291.218256][T27760] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2291.224056][T27760] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2291.230972][T27760] ? do_raw_spin_unlock+0x171/0x260 [ 2291.236149][T27760] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2291.242542][T27760] alloc_pages_current+0xff/0x200 [ 2291.247550][T27760] __vmalloc_node_range+0x478/0x7a0 [ 2291.252730][T27760] ? ebt_register_table+0x1e6/0xc70 [ 2291.257911][T27760] vmalloc+0x67/0x80 [ 2291.261787][T27760] ? ebt_register_table+0x1e6/0xc70 [ 2291.267063][T27760] ebt_register_table+0x1e6/0xc70 [ 2291.272079][T27760] ? ebt_broute+0x700/0x700 [ 2291.277433][T27760] ops_init+0xaf/0x420 [ 2291.281484][T27760] setup_net+0x2de/0x860 [ 2291.285971][T27760] ? ops_init+0x420/0x420 [ 2291.290296][T27760] copy_net_ns+0x293/0x590 [ 2291.294696][T27760] create_new_namespaces+0x3fb/0xb30 [ 2291.300003][T27760] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2291.305641][T27760] ksys_unshare+0x43d/0x8e0 [ 2291.310133][T27760] ? walk_process_tree+0x2c0/0x2c0 [ 2291.315930][T27760] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2291.321840][T27760] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2291.327637][T27760] ? fput_many+0x2f/0x1a0 [ 2291.331953][T27760] ? trace_hardirqs_off_caller+0x55/0x230 [ 2291.337756][T27760] __ia32_sys_unshare+0x2c/0x40 [ 2291.342599][T27760] do_fast_syscall_32+0x270/0xe90 [ 2291.347651][T27760] entry_SYSENTER_compat+0x70/0x7f [ 2291.363241][T27760] Mem-Info: [ 2291.386248][T27760] active_anon:317182 inactive_anon:8346 isolated_anon:0 [ 2291.386248][T27760] active_file:2748 inactive_file:5830 isolated_file:0 [ 2291.386248][T27760] unevictable:14 dirty:1 writeback:25 unstable:0 [ 2291.386248][T27760] slab_reclaimable:20488 slab_unreclaimable:410552 [ 2291.386248][T27760] mapped:60777 shmem:8636 pagetables:30477 bounce:0 [ 2291.386248][T27760] free:691990 free_pcp:362 free_cma:0 18:51:45 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xe00}, 0x0) [ 2291.442877][T27770] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2291.452320][T27760] Node 0 active_anon:1106964kB inactive_anon:16652kB active_file:8kB inactive_file:12kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217060kB dirty:12kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 974848kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2291.578159][T27760] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:300kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2291.616563][T27760] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2291.643772][T27760] Node 0 DMA32 free:116304kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1106840kB inactive_anon:16652kB active_file:8kB inactive_file:12kB unevictable:56kB writepending:12kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:18164kB pagetables:35320kB bounce:0kB free_pcp:1580kB local_pcp:888kB free_cma:0kB [ 2291.682292][T27819] IPVS: ftp: loaded support on port[0] = 21 [ 2291.702069][T27760] lowmem_reserve[]: 0 0 0 0 0 [ 2291.709789][T27760] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2291.744837][T27760] lowmem_reserve[]: 0 0 0 0 0 [ 2291.750534][T27760] Node 0 DMA: 8*4kB (UM) 13*8kB (UME) 4*16kB (UME) 3*32kB (ME) 2*64kB (UM) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10280kB [ 2291.768253][T27760] Node 0 DMA32: 1821*4kB (UM) 1008*8kB (M) 609*16kB (ME) 372*32kB (UME) 212*64kB (UME) 111*128kB (UME) 62*256kB (UME) 20*512kB (M) 1*1024kB (U) 12*2048kB (M) 0*4096kB = 116484kB [ 2291.787048][T27760] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2291.799528][T27760] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2291.813002][T27760] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2291.823138][T27760] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2291.837035][T27760] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2291.847925][T27760] 17220 total pagecache pages [ 2291.852621][T27760] 0 pages in swap cache [ 2291.860508][T27760] Swap cache stats: add 0, delete 0, find 0/0 [ 2291.869723][T27760] Free swap = 0kB [ 2291.873488][T27760] Total swap = 0kB [ 2291.882435][T27760] 1965979 pages RAM [ 2291.887224][T27760] 0 pages HighMem/MovableOnly [ 2291.892000][T27760] 349380 pages reserved [ 2291.899577][T27760] 0 pages cma reserved [ 2291.905204][T27760] Unreclaimable slab info: [ 2291.911146][T27760] Name Used Total [ 2291.919673][T27760] pid_3 1KB 7KB [ 2291.927115][T27760] pid_2 944KB 1121KB [ 2291.933930][T27760] bio-3 0KB 7KB [ 2291.949872][T27760] AF_VSOCK 14KB 16KB [ 2291.967513][T27760] batadv_tl_cache 4KB 12KB [ 2291.973634][T27760] SMC 45KB 49KB [ 2291.997318][T27760] TIPC 680KB 682KB [ 2292.003527][T27760] rds_tcp_connection 10KB 11KB [ 2292.046276][T27760] RDS 18KB 18KB [ 2292.052562][T27760] rds_connection 0KB 3KB [ 2292.086272][T27760] SCTPv6 1190KB 1192KB [ 2292.092819][T27760] SCTP 202KB 232KB [ 2292.115706][T27760] sctp_chunk 7KB 7KB [ 2292.122601][T27760] sctp_bind_bucket 0KB 3KB [ 2292.132699][T27760] DCCPv6 1417KB 1425KB [ 2292.139468][T27760] DCCP 1311KB 1316KB [ 2292.148992][T27760] L2TP/IPv6 6KB 6KB [ 2292.155459][T27760] L2TP/IP 23KB 23KB [ 2292.167093][T27760] KCM 17KB 19KB [ 2292.173550][T27760] kcm_mux_cache 7KB 7KB [ 2292.184480][T27760] RXRPC 945KB 951KB [ 2292.191741][T27760] rxrpc_call_jar 5876KB 5880KB [ 2292.203183][T27760] bridge_fdb_cache 68KB 74KB [ 2292.210606][T27760] MPTCPv6 35KB 38KB [ 2292.222051][T27760] fib6_nodes 175KB 184KB [ 2292.229317][T27760] ip6_dst_cache 280KB 423KB [ 2292.240997][T27760] PINGv6 1KB 3KB [ 2292.248248][T27760] RAWv6 5020KB 5043KB [ 2292.254862][T27760] UDPLITEv6 19KB 19KB [ 2292.266106][T27760] UDPv6 1152KB 1158KB [ 2292.274226][T27760] TCPv6 1246KB 1274KB [ 2292.285406][T27760] nf_conntrack 10KB 37KB [ 2292.293083][T27760] sd_ext_cdb 0KB 7KB [ 2292.304149][T27760] scsi_sense_cache 1056KB 1064KB [ 2292.311463][T27760] virtio_scsi_cmd 16KB 16KB [ 2292.322757][T27760] sgpool-128 8KB 8KB [ 2292.330288][T27760] sgpool-64 4KB 12KB [ 2292.341419][T27760] sgpool-32 3KB 15KB [ 2292.348822][T27760] sgpool-16 20KB 26KB [ 2292.355405][T27760] sgpool-8 46KB 52KB [ 2292.364274][T27760] mqueue_inode_cache 53KB 62KB [ 2292.370906][T27760] f2fs_bio_post_read_ctx 16KB 16KB [ 2292.379854][T27760] jfs_mp 7KB 7KB [ 2292.386393][T27760] cifs_small_rq 15KB 16KB [ 2292.392591][T27760] cifs_request 67KB 67KB [ 2292.401195][T27760] cifs_mpx_ids 0KB 8KB [ 2292.407764][T27760] nfs_commit_data 3KB 7KB [ 2292.414011][T27760] nfs_write_data 34KB 44KB [ 2292.421189][T27760] ext4_system_zone 1KB 7KB [ 2292.428336][T27760] ext4_io_end_vec 11KB 15KB [ 2292.435198][T27760] ext4_bio_post_read_ctx 15KB 15KB [ 2292.442688][T27760] io_kiocb 0KB 3KB [ 2292.450030][T27760] kioctx 21KB 23KB [ 2292.456950][T27760] aio_kiocb 6KB 7KB [ 2292.463302][T27760] userfaultfd_ctx_cache 2KB 4KB [ 2292.470049][T27760] bio-2 1KB 7KB [ 2292.476657][T27760] fasync_cache 1KB 3KB [ 2292.483235][T27760] pid_namespace 4KB 11KB [ 2292.490843][T27760] posix_timers_cache 7KB 11KB [ 2292.498108][T27760] kvm_vcpu 0KB 70KB [ 2292.504828][T27760] kvm_mmu_page_header 58KB 61KB [ 2292.512290][T27760] pte_list_desc 2KB 3KB [ 2292.520454][T27760] x86_emulator 51KB 54KB [ 2292.527174][T27760] x86_fpu 0KB 43KB [ 2292.533248][T27760] rpc_buffers 17KB 25KB [ 2292.540507][T27760] rpc_tasks 2KB 7KB [ 2292.547234][T27760] UNIX 577KB 635KB [ 2292.553750][T27760] UDP-Lite 71KB 73KB [ 2292.560837][T27760] MPTCP 10KB 15KB [ 2292.567490][T27760] tcp_bind_bucket 40KB 40KB [ 2292.573798][T27760] inet_peer_cache 28KB 32KB [ 2292.580701][T27760] ip_fib_trie 24KB 31KB [ 2292.587597][T27760] ip_fib_alias 112KB 134KB [ 2292.593667][T27760] ip_dst_cache 100KB 168KB [ 2292.600545][T27760] PING 12KB 15KB [ 2292.607243][T27760] RAW 3053KB 3070KB [ 2292.613319][T27760] UDP 1025KB 1029KB [ 2292.620710][T27760] TCP 302KB 346KB [ 2292.628127][T27760] hugetlbfs_inode_cache 6KB 10KB [ 2292.634537][T27760] fscache_cookie_jar 1KB 7KB [ 2292.641423][T27760] bio-1 10KB 15KB [ 2292.648080][T27760] eventpoll_pwq 9KB 35KB [ 2292.654151][T27760] eventpoll_epi 16KB 39KB [ 2292.660907][T27760] inotify_inode_mark 4KB 7KB [ 2292.669218][T27760] request_queue 157KB 157KB [ 2292.676430][T27760] blkdev_ioc 12KB 19KB [ 2292.682507][T27760] bio-0 480KB 504KB [ 2292.690143][T27760] biovec-max 3676KB 3782KB [ 2292.696852][T27760] biovec-64 111KB 149KB [ 2292.703096][T27760] biovec-16 31KB 33KB [ 2292.710132][T27760] bio_integrity_payload 1KB 7KB [ 2292.717317][T27760] khugepaged_mm_slot 291KB 328KB [ 2292.723484][T27760] user_namespace 4KB 7KB [ 2292.731032][T27760] uid_cache 0KB 4KB [ 2292.738744][T27760] dmaengine-unmap-256 2KB 6KB [ 2292.745001][T27760] dmaengine-unmap-128 1KB 3KB [ 2292.752046][T27760] dmaengine-unmap-16 0KB 4KB [ 2292.758722][T27760] dmaengine-unmap-2 0KB 3KB [ 2292.765151][T27760] audit_buffer 0KB 3KB [ 2292.772832][T27760] skbuff_ext_cache 0KB 4KB [ 2292.779681][T27760] skbuff_fclone_cache 554KB 633KB [ 2292.786741][T27760] skbuff_head_cache 25833KB 40548KB [ 2292.792818][T27760] configfs_dir_cache 1KB 8KB [ 2292.800787][T27760] file_lock_cache 4KB 7KB [ 2292.807510][T27760] file_lock_ctx 8KB 11KB [ 2292.813684][T27760] fsnotify_mark_connector 1KB 8KB [ 2292.821373][T27760] net_namespace 3327KB 3327KB [ 2292.828503][T27760] task_delay_info 849KB 957KB [ 2292.835094][T27760] taskstats 597KB 691KB [ 2292.846459][T27760] proc_dir_entry 22533KB 22556KB [ 2292.852892][T27760] pde_opener 11KB 15KB [ 2292.859720][T27760] seq_file 33KB 63KB [ 2292.866444][T27760] sigqueue 2KB 3KB [ 2292.872598][T27760] shmem_inode_cache 10788KB 11355KB [ 2292.879552][T27760] kernfs_iattrs_cache 9KB 15KB [ 2292.887451][T27760] kernfs_node_cache 102210KB 102220KB [ 2292.894568][T27760] mnt_cache 359KB 363KB [ 2292.901428][T27760] filp 4216KB 4481KB [ 2292.910892][T27760] names_cache 44425KB 44425KB [ 2292.918279][T27760] iint_cache 28KB 66KB [ 2292.924380][T27760] lsm_file_cache 782KB 897KB [ 2292.931483][T27760] key_jar 27KB 43KB [ 2292.938099][T27760] uts_namespace 5KB 15KB [ 2292.944170][T27760] nsproxy 129KB 138KB [ 2292.951134][T27760] vm_area_struct 12121KB 13365KB [ 2292.958148][T27760] mm_struct 2372KB 2578KB [ 2292.964224][T27760] fs_cache 611KB 704KB [ 2292.971954][T27760] files_cache 2016KB 2208KB [ 2292.978543][T27760] signal_cache 5705KB 5830KB [ 2292.985250][T27760] sighand_cache 4127KB 4162KB [ 2292.992666][T27760] task_struct 22737KB 22769KB [ 2292.999314][T27760] cred_jar 2035KB 2112KB [ 2293.005526][T27760] anon_vma_chain 3788KB 4429KB [ 2293.012378][T27760] anon_vma 2974KB 3116KB [ 2293.019096][T27760] pid 402KB 461KB [ 2293.025259][T27760] Acpi-Operand 156KB 194KB [ 2293.032285][T27760] Acpi-ParseExt 9KB 11KB [ 2293.038901][T27760] Acpi-Parse 41KB 47KB [ 2293.044975][T27760] Acpi-State 52KB 63KB [ 2293.051863][T27760] Acpi-Namespace 23KB 27KB [ 2293.058520][T27760] shared_policy_node 0KB 3KB [ 2293.064990][T27760] numa_policy 1KB 23KB [ 2293.072358][T27760] trace_event_file 358KB 358KB [ 2293.079013][T27760] ftrace_event_field 491KB 496KB [ 2293.085174][T27760] pool_workqueue 936KB 936KB [ 2293.092148][T27760] vmap_area 1187KB 2338KB [ 2293.098876][T27760] debug_objects_cache 8112KB 8157KB [ 2293.105262][T27760] page->ptl 3341KB 3913KB [ 2293.112687][T27760] kmalloc-4M 4096KB 4096KB [ 2293.119506][T27760] kmalloc-1M 8192KB 8192KB [ 2293.126402][T27760] kmalloc-512k 4096KB 4096KB [ 2293.132478][T27760] kmalloc-256k 237056KB 238592KB [ 2293.139472][T27760] kmalloc-128k 18944KB 19200KB [ 2293.146513][T27760] kmalloc-64k 6656KB 7296KB [ 2293.152613][T27760] kmalloc-32k 52352KB 52352KB [ 2293.159624][T27760] kmalloc-16k 25984KB 25984KB [ 2293.166397][T27760] kmalloc-8k 50368KB 50448KB [ 2293.172500][T27760] kmalloc-4k 283536KB 283568KB [ 2293.180274][T27760] kmalloc-2k 164348KB 164400KB [ 2293.187198][T27760] kmalloc-1k 212540KB 249056KB [ 2293.193544][T27760] kmalloc-512 48438KB 48760KB [ 2293.200653][T27760] kmalloc-256 33275KB 33460KB [ 2293.208447][T27760] kmalloc-128 5676KB 5708KB [ 2293.214527][T27760] kmalloc-96 4453KB 4484KB [ 2293.221512][T27760] kmalloc-64 10762KB 10868KB [ 2293.228300][T27760] kmalloc-32 7024KB 7201KB [ 2293.234408][T27760] kmalloc-192 8664KB 8684KB [ 2293.241497][T27760] kmem_cache 433KB 437KB [ 2293.248212][T27760] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4699,uid=0 [ 2293.263246][T27760] Out of memory: Killed process 4699 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2293.283197][ T1144] oom_reaper: reaped process 4699 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 18:51:47 executing program 4: set_mempolicy(0x4002, &(0x7f0000000000)=0x10000104, 0x2) unshare(0x40000000) 18:51:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xf000}, 0x0) 18:51:47 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x0) unshare(0x40000000) 18:51:47 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xf00}, 0x0) 18:51:47 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000280)={0x0, r3, 0x52, 0x9, 0x7fff, 0x800000000}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="00fbc704296ad601a3fe9923d77e3b74126faaeeb55475bf5d0d9fccd04e66ae86b6fbf5c8c4f5b08b0b5cfb89f68be200b57c98bef88e6cfaef4df0486d5b0b49f7c7974d093976bbca49e324f00837408f066dd693c0a2c28d04602be77058972e5d474ae52fd461b23de8efcb2143524e5f406dcb4ad1cee9717003f1e8ab017525480e75f73781fd275ac9a98e6d8938423d6060386fc88bd38fa2493d77a50e9c0201c09807514e27a6991b2805ed1424a7ff2e916c1201502ec8a3ff54279e2e3f4ba4ee"], 0xc7, 0x0) [ 2293.602966][T27945] IPVS: ftp: loaded support on port[0] = 21 [ 2293.611080][T27950] IPVS: ftp: loaded support on port[0] = 21 [ 2293.621701][T27949] IPVS: ftp: loaded support on port[0] = 21 [ 2293.658973][T27949] syz-executor.1 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2293.673060][T27949] CPU: 0 PID: 27949 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 2293.681866][T27949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2293.691918][T27949] Call Trace: [ 2293.695218][T27949] dump_stack+0x188/0x20d [ 2293.699665][T27949] dump_header+0x10b/0x826 [ 2293.704120][T27949] oom_kill_process.cold+0x10/0x15 [ 2293.709241][T27949] out_of_memory+0x31f/0x12f0 [ 2293.713955][T27949] ? oom_killer_disable+0x270/0x270 [ 2293.719171][T27949] ? mutex_trylock+0x246/0x2c0 [ 2293.723941][T27949] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2293.730917][T27949] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2293.737559][T27949] ? warn_alloc+0x110/0x110 [ 2293.742076][T27949] ? do_fast_syscall_32+0x270/0xe90 [ 2293.747465][T27949] __alloc_pages_nodemask+0x5d9/0x810 [ 2293.752852][T27949] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2293.759631][T27949] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2293.765459][T27949] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2293.771552][T27949] ? do_raw_spin_unlock+0x171/0x260 [ 2293.776773][T27949] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2293.783202][T27949] alloc_pages_current+0xff/0x200 [ 2293.788249][T27949] __vmalloc_node_range+0x478/0x7a0 [ 2293.793477][T27949] ? ebt_register_table+0x1e6/0xc70 [ 2293.798801][T27949] vmalloc+0x67/0x80 [ 2293.802970][T27949] ? ebt_register_table+0x1e6/0xc70 [ 2293.808178][T27949] ebt_register_table+0x1e6/0xc70 [ 2293.813307][T27949] ? ebt_broute+0x700/0x700 [ 2293.817810][T27949] ops_init+0xaf/0x420 [ 2293.822138][T27949] setup_net+0x2de/0x860 [ 2293.826405][T27949] ? ops_init+0x420/0x420 [ 2293.830747][T27949] copy_net_ns+0x293/0x590 [ 2293.835193][T27949] create_new_namespaces+0x3fb/0xb30 [ 2293.840507][T27949] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2293.846149][T27949] ksys_unshare+0x43d/0x8e0 [ 2293.850854][T27949] ? walk_process_tree+0x2c0/0x2c0 [ 2293.856117][T27949] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2293.862141][T27949] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2293.868061][T27949] ? trace_hardirqs_off_caller+0x55/0x230 [ 2293.874084][T27949] __ia32_sys_unshare+0x2c/0x40 [ 2293.879047][T27949] do_fast_syscall_32+0x270/0xe90 [ 2293.884202][T27949] entry_SYSENTER_compat+0x70/0x7f [ 2293.904318][T27949] Mem-Info: [ 2293.908925][T27949] active_anon:317161 inactive_anon:8346 isolated_anon:0 [ 2293.908925][T27949] active_file:2750 inactive_file:5849 isolated_file:0 [ 2293.908925][T27949] unevictable:14 dirty:14 writeback:0 unstable:0 [ 2293.908925][T27949] slab_reclaimable:20468 slab_unreclaimable:409483 [ 2293.908925][T27949] mapped:60814 shmem:8636 pagetables:30449 bounce:0 [ 2293.908925][T27949] free:692258 free_pcp:469 free_cma:0 [ 2293.949212][T27947] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2293.984620][T27951] device bond0 left promiscuous mode [ 2293.992581][T27951] device bond_slave_0 left promiscuous mode [ 2294.002846][T27951] device bond_slave_1 left promiscuous mode [ 2294.012149][T27949] Node 0 active_anon:1106864kB inactive_anon:16652kB active_file:16kB inactive_file:4kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217064kB dirty:12kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 974848kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2294.012968][T27951] bridge353: port 1(bond0) entered disabled state [ 2294.085564][T27949] Node 0 DMA free:10280kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2294.155892][T27949] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2294.161699][T27949] Node 0 DMA32 free:116492kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1106740kB inactive_anon:16652kB active_file:16kB inactive_file:4kB unevictable:56kB writepending:12kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:18160kB pagetables:35124kB bounce:0kB free_pcp:1856kB local_pcp:984kB free_cma:0kB [ 2294.205750][T27951] bridge354: port 1(bond0) entered blocking state [ 2294.212240][T27951] bridge354: port 1(bond0) entered disabled state [ 2294.225567][T27949] lowmem_reserve[]: 0 0 0 0 0 [ 2294.226842][T27951] device bond0 entered promiscuous mode [ 2294.230420][T27949] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2294.239158][T27951] device bond_slave_0 entered promiscuous mode [ 2294.266410][T27949] lowmem_reserve[]: 0 0 0 0 0 [ 2294.275708][T27951] device bond_slave_1 entered promiscuous mode [ 2294.278667][T27949] Node 0 DMA: 8*4kB (UM) 15*8kB (UME) 4*16kB (UME) 3*32kB (ME) 2*64kB (UM) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10296kB [ 2294.295266][T27951] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2294.308839][T27949] Node 0 DMA32: 1821*4kB (UM) 1027*8kB (UM) 619*16kB (UME) 368*32kB (UME) 211*64kB (ME) 110*128kB (UME) 61*256kB (ME) 20*512kB (M) 1*1024kB (U) 12*2048kB (M) 0*4096kB = 116220kB [ 2294.326955][T27949] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2294.338813][T27949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2294.348612][T27949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2294.358124][T27949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2294.367881][T27949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2294.377238][T27949] 17237 total pagecache pages [ 2294.381920][T27949] 0 pages in swap cache [ 2294.386991][T27949] Swap cache stats: add 0, delete 0, find 0/0 [ 2294.393088][T27949] Free swap = 0kB [ 2294.397729][T27949] Total swap = 0kB [ 2294.401473][T27949] 1965979 pages RAM [ 2294.405273][T27949] 0 pages HighMem/MovableOnly [ 2294.411229][T27949] 349380 pages reserved [ 2294.415394][T27949] 0 pages cma reserved [ 2294.417603][T27961] IPVS: ftp: loaded support on port[0] = 21 [ 2294.420633][T27949] Unreclaimable slab info: [ 2294.430434][T27949] Name Used Total [ 2294.438035][T27949] pid_3 1KB 7KB [ 2294.444554][T27949] pid_2 944KB 1121KB 18:51:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xf0ffff}, 0x0) 18:51:48 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x3f00}, 0x0) [ 2294.465742][T27949] bio-3 0KB 7KB [ 2294.487045][T27949] AF_VSOCK 14KB 16KB [ 2294.493617][T27949] batadv_tl_cache 4KB 12KB [ 2294.524079][T27949] SMC 45KB 49KB [ 2294.533217][T27970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2294.537446][T27949] TIPC 682KB 682KB [ 2294.550111][T27949] rds_tcp_connection 10KB 11KB [ 2294.557252][T27949] RDS 18KB 18KB [ 2294.563502][T27949] rds_connection 0KB 3KB [ 2294.570632][T27949] SCTPv6 1196KB 1198KB [ 2294.577343][T27949] SCTP 202KB 232KB [ 2294.583513][T27949] sctp_chunk 7KB 7KB [ 2294.590986][T27949] sctp_bind_bucket 0KB 3KB [ 2294.597577][T27949] DCCPv6 1425KB 1433KB [ 2294.603657][T27949] DCCP 1318KB 1323KB [ 2294.610891][T27949] L2TP/IPv6 6KB 6KB [ 2294.617811][T27949] L2TP/IP 23KB 23KB [ 2294.623884][T27949] KCM 17KB 19KB [ 2294.636447][T27949] kcm_mux_cache 7KB 7KB [ 2294.645020][T27979] device bond0 left promiscuous mode [ 2294.651265][T27979] device bond_slave_0 left promiscuous mode [ 2294.658773][T27979] device bond_slave_1 left promiscuous mode [ 2294.659134][T27949] RXRPC 946KB 951KB [ 2294.664978][T27979] bridge354: port 1(bond0) entered disabled state [ 2294.674632][T27949] rxrpc_call_jar 5898KB 5898KB [ 2294.683683][T27949] bridge_fdb_cache 68KB 74KB [ 2294.690648][T27949] MPTCPv6 35KB 38KB [ 2294.697490][T27949] fib6_nodes 175KB 184KB [ 2294.703566][T27949] ip6_dst_cache 280KB 423KB [ 2294.710858][T27949] PINGv6 1KB 3KB [ 2294.717565][T27949] RAWv6 5031KB 5043KB [ 2294.723837][T27949] UDPLITEv6 19KB 19KB [ 2294.731242][T27949] UDPv6 1158KB 1158KB [ 2294.737919][T27949] TCPv6 1252KB 1280KB [ 2294.744434][T27949] nf_conntrack 10KB 37KB [ 2294.752405][T27949] sd_ext_cdb 0KB 7KB [ 2294.756294][T27979] bridge355: port 1(bond0) entered blocking state [ 2294.759418][T27949] scsi_sense_cache 1056KB 1064KB [ 2294.767683][T27979] bridge355: port 1(bond0) entered disabled state [ 2294.773523][T27949] virtio_scsi_cmd 16KB 16KB [ 2294.783632][T27979] device bond0 entered promiscuous mode [ 2294.784486][T27949] sgpool-128 8KB 8KB [ 2294.789750][T27979] device bond_slave_0 entered promiscuous mode [ 2294.796309][T27949] sgpool-64 4KB 12KB [ 2294.805870][T27979] device bond_slave_1 entered promiscuous mode [ 2294.809320][T27949] sgpool-32 3KB 15KB [ 2294.821300][T27949] sgpool-16 20KB 26KB [ 2294.828735][T27949] sgpool-8 46KB 52KB [ 2294.834906][T27949] mqueue_inode_cache 53KB 62KB [ 2294.843438][T27949] f2fs_bio_post_read_ctx 16KB 16KB [ 2294.850747][T27949] jfs_mp 7KB 7KB [ 2294.857465][T27949] cifs_small_rq 15KB 16KB [ 2294.863554][T27949] cifs_request 67KB 67KB [ 2294.871501][T27949] cifs_mpx_ids 0KB 8KB [ 2294.879705][T27949] nfs_commit_data 3KB 7KB [ 2294.888397][T27949] nfs_write_data 34KB 44KB [ 2294.894503][T27949] ext4_system_zone 1KB 7KB [ 2294.901525][T27949] ext4_io_end_vec 11KB 15KB [ 2294.910875][T27949] ext4_bio_post_read_ctx 15KB 15KB [ 2294.917501][T27949] io_kiocb 0KB 3KB 18:51:48 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x5865}, 0x0) [ 2294.923561][T27949] kioctx 21KB 23KB [ 2294.945423][T27949] aio_kiocb 6KB 7KB [ 2294.952470][T27949] userfaultfd_ctx_cache 2KB 4KB [ 2294.961464][T27979] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2294.971151][T27949] bio-2 1KB 7KB [ 2294.977401][T27949] fasync_cache 1KB 3KB [ 2294.983475][T27949] pid_namespace 4KB 11KB [ 2294.991283][T27949] posix_timers_cache 7KB 11KB [ 2294.999563][T27949] kvm_vcpu 0KB 70KB [ 2295.018483][T27949] kvm_mmu_page_header 58KB 61KB [ 2295.036733][T27949] pte_list_desc 2KB 3KB [ 2295.049533][T27949] x86_emulator 51KB 54KB [ 2295.062483][T27949] x86_fpu 0KB 43KB [ 2295.075346][T27949] rpc_buffers 17KB 25KB [ 2295.088505][T27949] rpc_tasks 2KB 7KB [ 2295.094707][T27949] UNIX 554KB 635KB [ 2295.107045][T27949] UDP-Lite 71KB 73KB [ 2295.114175][T27949] MPTCP 10KB 15KB [ 2295.120575][T27949] tcp_bind_bucket 40KB 40KB [ 2295.127017][T27949] inet_peer_cache 28KB 32KB [ 2295.133168][T27949] ip_fib_trie 24KB 31KB [ 2295.140325][T27949] ip_fib_alias 112KB 134KB [ 2295.146751][T27949] ip_dst_cache 100KB 168KB [ 2295.152907][T27949] PING 12KB 15KB [ 2295.159159][T27949] RAW 3053KB 3078KB [ 2295.169522][T27949] UDP 1030KB 1032KB [ 2295.176388][T27949] TCP 302KB 346KB [ 2295.182669][T27949] hugetlbfs_inode_cache 6KB 10KB [ 2295.211055][T27949] fscache_cookie_jar 1KB 7KB [ 2295.219934][T27949] bio-1 10KB 15KB [ 2295.227355][T27949] eventpoll_pwq 9KB 35KB [ 2295.233486][T27949] eventpoll_epi 16KB 39KB [ 2295.241036][T27949] inotify_inode_mark 4KB 7KB [ 2295.247911][T27949] request_queue 157KB 157KB [ 2295.254056][T27949] blkdev_ioc 12KB 19KB [ 2295.261222][T27949] bio-0 471KB 504KB [ 2295.268063][T27949] biovec-max 3523KB 3578KB [ 2295.274214][T27949] biovec-64 111KB 149KB [ 2295.281251][T27949] biovec-16 31KB 33KB [ 2295.288715][T27949] bio_integrity_payload 1KB 7KB [ 2295.299641][T27949] khugepaged_mm_slot 291KB 328KB [ 2295.307159][T27949] user_namespace 4KB 7KB [ 2295.313305][T27949] uid_cache 0KB 4KB [ 2295.324502][T27949] dmaengine-unmap-256 2KB 6KB [ 2295.332658][T27949] dmaengine-unmap-128 1KB 3KB [ 2295.343141][T27949] dmaengine-unmap-16 0KB 4KB [ 2295.350873][T27949] dmaengine-unmap-2 0KB 3KB [ 2295.361303][T27949] audit_buffer 0KB 3KB [ 2295.368051][T27949] skbuff_ext_cache 0KB 4KB [ 2295.374194][T27949] skbuff_fclone_cache 554KB 633KB [ 2295.384853][T27949] skbuff_head_cache 25825KB 40548KB [ 2295.391661][T27949] configfs_dir_cache 1KB 8KB [ 2295.402024][T27949] file_lock_cache 4KB 7KB [ 2295.408768][T27949] file_lock_ctx 8KB 11KB [ 2295.414907][T27949] fsnotify_mark_connector 1KB 8KB [ 2295.426780][T27949] net_namespace 3349KB 3349KB [ 2295.432921][T27949] task_delay_info 849KB 957KB [ 2295.443562][T27949] taskstats 597KB 691KB [ 2295.451331][T27949] proc_dir_entry 22519KB 22571KB [ 2295.460695][T27949] pde_opener 11KB 15KB [ 2295.468599][T27949] seq_file 41KB 63KB [ 2295.474681][T27949] sigqueue 2KB 3KB [ 2295.484534][T27949] shmem_inode_cache 10788KB 11355KB [ 2295.492515][T27949] kernfs_iattrs_cache 9KB 15KB [ 2295.501988][T27949] kernfs_node_cache 102405KB 102405KB [ 2295.509235][T27949] mnt_cache 359KB 363KB [ 2295.516020][T27949] filp 4284KB 4481KB [ 2295.523185][T27949] names_cache 47557KB 47557KB [ 2295.530117][T27949] iint_cache 28KB 66KB [ 2295.537647][T27949] lsm_file_cache 782KB 897KB [ 2295.543929][T27949] key_jar 27KB 43KB [ 2295.550716][T27949] uts_namespace 5KB 15KB [ 2295.557454][T27949] nsproxy 129KB 138KB [ 2295.563520][T27949] vm_area_struct 12100KB 13361KB [ 2295.570087][T27949] mm_struct 2372KB 2578KB [ 2295.576253][T27949] fs_cache 611KB 704KB [ 2295.582744][T27949] files_cache 2016KB 2208KB [ 2295.588986][T27949] signal_cache 5705KB 5830KB [ 2295.596115][T27949] sighand_cache 4167KB 4176KB [ 2295.602274][T27949] task_struct 22795KB 22885KB [ 2295.625257][T27949] cred_jar 2065KB 2112KB [ 2295.631472][T27949] anon_vma_chain 3788KB 4429KB [ 2295.637721][T27949] anon_vma 2974KB 3116KB [ 2295.644056][T27949] pid 402KB 461KB [ 2295.652865][T27949] Acpi-Operand 156KB 194KB [ 2295.661137][T27949] Acpi-ParseExt 9KB 11KB [ 2295.668888][T27949] Acpi-Parse 41KB 47KB [ 2295.674953][T27949] Acpi-State 52KB 63KB [ 2295.682185][T27949] Acpi-Namespace 23KB 27KB [ 2295.689890][T27949] shared_policy_node 0KB 3KB [ 2295.697148][T27949] numa_policy 1KB 23KB [ 2295.703323][T27949] trace_event_file 358KB 358KB [ 2295.712262][T27949] ftrace_event_field 491KB 496KB [ 2295.719423][T27949] pool_workqueue 936KB 936KB [ 2295.727645][T27949] vmap_area 1220KB 2338KB [ 2295.733715][T27949] debug_objects_cache 8112KB 8157KB [ 2295.741668][T27949] page->ptl 3336KB 3913KB [ 2295.749886][T27949] kmalloc-4M 4096KB 4096KB [ 2295.758051][T27949] kmalloc-1M 8192KB 8192KB [ 2295.764437][T27949] kmalloc-512k 4096KB 4096KB [ 2295.774165][T27949] kmalloc-256k 236032KB 237056KB [ 2295.780486][T27949] kmalloc-128k 18944KB 19200KB [ 2295.786647][T27949] kmalloc-64k 6656KB 7296KB [ 2295.792720][T27949] kmalloc-32k 52672KB 52672KB [ 2295.799542][T27949] kmalloc-16k 26112KB 26112KB [ 2295.805832][T27949] kmalloc-8k 50400KB 50480KB [ 2295.812159][T27949] kmalloc-4k 283664KB 283664KB [ 2295.818466][T27949] kmalloc-2k 164388KB 164440KB [ 2295.824666][T27949] kmalloc-1k 212732KB 249056KB [ 2295.831320][T27949] kmalloc-512 48386KB 48672KB [ 2295.837533][T27949] kmalloc-256 33310KB 33436KB [ 2295.843596][T27949] kmalloc-128 5686KB 5716KB [ 2295.849756][T27949] kmalloc-96 4451KB 4484KB [ 2295.855904][T27949] kmalloc-64 10786KB 10856KB [ 2295.862316][T27949] kmalloc-32 7039KB 7201KB [ 2295.870248][T27949] kmalloc-192 8673KB 8692KB [ 2295.877208][T27949] kmem_cache 433KB 437KB [ 2295.883810][T27949] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4673,uid=0 [ 2295.898971][T27949] Out of memory: Killed process 4673 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2295.917413][ T1144] oom_reaper: reaped process 4673 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 18:51:49 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = socket(0xb, 0x80000, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 18:51:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x1000000}, 0x0) 18:51:49 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x6000}, 0x0) [ 2296.184965][T28020] IPVS: ftp: loaded support on port[0] = 21 [ 2296.200909][T28018] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2296.231453][T28020] syz-executor.0 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2296.250880][T28020] CPU: 0 PID: 28020 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0 [ 2296.259605][T28020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2296.269734][T28020] Call Trace: [ 2296.273028][T28020] dump_stack+0x188/0x20d [ 2296.277365][T28020] dump_header+0x10b/0x826 [ 2296.281779][T28020] oom_kill_process.cold+0x10/0x15 [ 2296.286880][T28020] out_of_memory+0x31f/0x12f0 [ 2296.291554][T28020] ? oom_killer_disable+0x270/0x270 [ 2296.296745][T28020] ? mutex_trylock+0x246/0x2c0 [ 2296.301959][T28020] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2296.308678][T28020] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2296.316021][T28020] ? warn_alloc+0x110/0x110 [ 2296.320545][T28020] ? do_fast_syscall_32+0x270/0xe90 [ 2296.326040][T28020] __alloc_pages_nodemask+0x5d9/0x810 [ 2296.331582][T28020] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2296.338394][T28020] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2296.344350][T28020] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2296.350800][T28020] ? do_raw_spin_unlock+0x171/0x260 [ 2296.356815][T28020] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2296.363377][T28020] alloc_pages_current+0xff/0x200 [ 2296.368506][T28020] __vmalloc_node_range+0x478/0x7a0 [ 2296.374673][T28020] ? ebt_register_table+0x1e6/0xc70 [ 2296.380102][T28020] vmalloc+0x67/0x80 [ 2296.383996][T28020] ? ebt_register_table+0x1e6/0xc70 [ 2296.389314][T28020] ebt_register_table+0x1e6/0xc70 [ 2296.394462][T28020] ? ebt_broute+0x700/0x700 [ 2296.398980][T28020] ops_init+0xaf/0x420 [ 2296.403050][T28020] setup_net+0x2de/0x860 [ 2296.407772][T28020] ? ops_init+0x420/0x420 [ 2296.412092][T28020] copy_net_ns+0x293/0x590 [ 2296.416506][T28020] create_new_namespaces+0x3fb/0xb30 [ 2296.421788][T28020] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2296.427498][T28020] ksys_unshare+0x43d/0x8e0 [ 2296.431994][T28020] ? walk_process_tree+0x2c0/0x2c0 [ 2296.437110][T28020] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2296.443026][T28020] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2296.448933][T28020] ? fput_many+0x2f/0x1a0 [ 2296.453253][T28020] ? trace_hardirqs_off_caller+0x55/0x230 [ 2296.459915][T28020] __ia32_sys_unshare+0x2c/0x40 [ 2296.464890][T28020] do_fast_syscall_32+0x270/0xe90 [ 2296.470196][T28020] entry_SYSENTER_compat+0x70/0x7f [ 2296.491114][T28020] Mem-Info: [ 2296.495001][T28020] active_anon:317093 inactive_anon:8346 isolated_anon:0 [ 2296.495001][T28020] active_file:2749 inactive_file:5864 isolated_file:0 [ 2296.495001][T28020] unevictable:14 dirty:21 writeback:0 unstable:0 [ 2296.495001][T28020] slab_reclaimable:20462 slab_unreclaimable:410343 [ 2296.495001][T28020] mapped:60828 shmem:8636 pagetables:30385 bounce:0 [ 2296.495001][T28020] free:691122 free_pcp:527 free_cma:0 [ 2296.538622][T28020] Node 0 active_anon:1106748kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217064kB dirty:20kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 974848kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2296.572066][T28020] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:204kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2296.608221][T28020] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2296.613974][T28020] Node 0 DMA32 free:116228kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1106624kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB writepending:20kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:18100kB pagetables:34976kB bounce:0kB free_pcp:2108kB local_pcp:852kB free_cma:0kB [ 2296.650155][T28020] lowmem_reserve[]: 0 0 0 0 0 [ 2296.654866][T28020] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2296.687821][T28020] lowmem_reserve[]: 0 0 0 0 0 [ 2296.692550][T28020] Node 0 DMA: 7*4kB (M) 10*8kB (ME) 5*16kB (UME) 3*32kB (ME) 2*64kB (UM) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10268kB [ 2296.705391][T28025] device bond0 left promiscuous mode [ 2296.713304][T28020] Node 0 DMA32: 1821*4kB (UM) 1027*8kB (UM) 611*16kB (UME) 399*32kB (UME) 213*64kB (UME) 109*128kB (ME) 61*256kB (ME) 21*512kB (UM) 0*1024kB 10*2048kB (M) 1*4096kB (M) = 116572kB [ 2296.714171][T28025] device bond_slave_0 left promiscuous mode [ 2296.740423][T28025] device bond_slave_1 left promiscuous mode [ 2296.748118][T28025] bridge355: port 1(bond0) entered disabled state [ 2296.759763][T28020] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2296.772004][T28020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2296.786203][T28020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2296.799032][T28020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2296.809875][T28020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2296.823221][T28020] 17261 total pagecache pages [ 2296.830092][T28020] 0 pages in swap cache [ 2296.834340][T28020] Swap cache stats: add 0, delete 0, find 0/0 [ 2296.845979][T28025] bridge356: port 1(bond0) entered blocking state [ 2296.846416][T28020] Free swap = 0kB [ 2296.854217][T28025] bridge356: port 1(bond0) entered disabled state [ 2296.859782][T28020] Total swap = 0kB [ 2296.868315][T28020] 1965979 pages RAM [ 2296.869936][T28025] device bond0 entered promiscuous mode [ 2296.872247][T28020] 0 pages HighMem/MovableOnly [ 2296.887362][T28020] 349380 pages reserved [ 2296.889773][T28025] device bond_slave_0 entered promiscuous mode [ 2296.891605][T28020] 0 pages cma reserved [ 2296.904678][T28020] Unreclaimable slab info: [ 2296.908716][T28025] device bond_slave_1 entered promiscuous mode [ 2296.912200][T28020] Name Used Total [ 2296.924790][T28020] pid_3 1KB 7KB [ 2296.933980][T28020] pid_2 930KB 1113KB 18:51:50 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x6558}, 0x0) [ 2296.940830][T28020] bio-3 0KB 7KB [ 2296.948944][T28020] AF_VSOCK 14KB 16KB [ 2296.958661][T28020] batadv_tl_cache 4KB 12KB [ 2296.966307][T28020] SMC 45KB 49KB [ 2296.972450][T28020] TIPC 682KB 682KB [ 2296.992004][T28020] rds_tcp_connection 10KB 11KB [ 2297.005659][T28020] RDS 18KB 18KB [ 2297.018217][T28020] rds_connection 0KB 3KB [ 2297.028349][T28025] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2297.041854][T28020] SCTPv6 1196KB 1204KB [ 2297.052576][T28020] SCTP 200KB 232KB [ 2297.064315][T28020] sctp_chunk 7KB 7KB [ 2297.081938][T28020] sctp_bind_bucket 0KB 3KB [ 2297.088866][T28020] DCCPv6 1433KB 1441KB [ 2297.095103][T28020] DCCP 1323KB 1330KB [ 2297.106180][T28020] L2TP/IPv6 6KB 6KB [ 2297.112326][T28020] L2TP/IP 23KB 23KB [ 2297.122669][T28020] KCM 17KB 19KB [ 2297.129006][T28018] device bond0 left promiscuous mode [ 2297.134306][T28018] device bond_slave_0 left promiscuous mode [ 2297.145072][T28020] kcm_mux_cache 7KB 7KB [ 2297.159911][T28018] device bond_slave_1 left promiscuous mode [ 2297.168361][T28020] RXRPC 950KB 958KB [ 2297.179624][T28018] bridge356: port 1(bond0) entered disabled state [ 2297.188304][T28020] rxrpc_call_jar 5885KB 5898KB [ 2297.202861][T28020] bridge_fdb_cache 68KB 74KB [ 2297.212220][T28020] MPTCPv6 35KB 38KB [ 2297.221901][T28020] fib6_nodes 175KB 184KB [ 2297.229550][T28020] ip6_dst_cache 279KB 423KB [ 2297.240312][T28020] PINGv6 1KB 3KB [ 2297.251718][T28020] RAWv6 5010KB 5043KB [ 2297.261657][T28020] UDPLITEv6 19KB 19KB [ 2297.270199][T28020] UDPv6 1152KB 1162KB [ 2297.280788][T28020] TCPv6 1252KB 1280KB [ 2297.307315][T28020] nf_conntrack 10KB 37KB [ 2297.313465][T28020] sd_ext_cdb 0KB 7KB [ 2297.323994][T28020] scsi_sense_cache 1056KB 1064KB [ 2297.331765][T28020] virtio_scsi_cmd 16KB 16KB [ 2297.341326][T28020] sgpool-128 8KB 8KB [ 2297.349356][T28020] sgpool-64 4KB 12KB [ 2297.360181][T28020] sgpool-32 3KB 15KB [ 2297.367595][T28020] sgpool-16 20KB 26KB [ 2297.374216][T28020] sgpool-8 46KB 52KB [ 2297.399175][T28020] mqueue_inode_cache 53KB 62KB [ 2297.407125][T28020] f2fs_bio_post_read_ctx 16KB 16KB [ 2297.414400][T28020] jfs_mp 7KB 7KB [ 2297.424945][T28020] cifs_small_rq 15KB 16KB [ 2297.432174][T28020] cifs_request 67KB 67KB [ 2297.442720][T28020] cifs_mpx_ids 0KB 8KB [ 2297.449563][T28020] nfs_commit_data 3KB 7KB [ 2297.458222][T28020] nfs_write_data 34KB 44KB [ 2297.464525][T28020] ext4_system_zone 1KB 7KB [ 2297.471414][T28020] ext4_io_end_vec 13KB 15KB [ 2297.478160][T28020] ext4_bio_post_read_ctx 15KB 15KB [ 2297.484682][T28020] io_kiocb 0KB 3KB [ 2297.491650][T28020] kioctx 21KB 23KB [ 2297.498238][T28020] aio_kiocb 6KB 7KB [ 2297.504311][T28020] userfaultfd_ctx_cache 2KB 4KB [ 2297.512858][T28020] bio-2 1KB 7KB [ 2297.520482][T28020] fasync_cache 1KB 3KB [ 2297.528546][T28020] pid_namespace 4KB 11KB [ 2297.534662][T28020] posix_timers_cache 7KB 11KB [ 2297.541784][T28020] kvm_vcpu 0KB 70KB [ 2297.548545][T28020] kvm_mmu_page_header 58KB 61KB [ 2297.554806][T28020] pte_list_desc 2KB 3KB [ 2297.561789][T28020] x86_emulator 51KB 54KB [ 2297.568939][T28020] x86_fpu 0KB 43KB [ 2297.575026][T28020] rpc_buffers 17KB 25KB [ 2297.582119][T28020] rpc_tasks 2KB 7KB [ 2297.590295][T28020] UNIX 550KB 635KB [ 2297.597678][T28020] UDP-Lite 71KB 73KB [ 2297.603999][T28020] MPTCP 10KB 15KB [ 2297.611465][T28020] tcp_bind_bucket 40KB 40KB [ 2297.619591][T28020] inet_peer_cache 28KB 32KB [ 2297.629572][T28020] ip_fib_trie 24KB 31KB [ 2297.636257][T28020] ip_fib_alias 112KB 134KB [ 2297.642339][T28020] ip_dst_cache 99KB 168KB [ 2297.649711][T28020] PING 12KB 15KB [ 2297.656379][T28020] RAW 3035KB 3085KB [ 2297.662467][T28020] UDP 1022KB 1036KB [ 2297.669709][T28020] TCP 302KB 346KB [ 2297.677398][T28020] hugetlbfs_inode_cache 6KB 10KB [ 2297.683827][T28020] fscache_cookie_jar 1KB 7KB [ 2297.690914][T28020] bio-1 10KB 15KB [ 2297.698093][T28020] eventpoll_pwq 8KB 35KB [ 2297.704335][T28020] eventpoll_epi 15KB 39KB [ 2297.712385][T28020] inotify_inode_mark 4KB 7KB [ 2297.719237][T28020] request_queue 157KB 157KB [ 2297.727346][T28020] blkdev_ioc 12KB 19KB [ 2297.733424][T28020] bio-0 468KB 504KB [ 2297.741338][T28020] biovec-max 3442KB 3497KB [ 2297.748075][T28020] biovec-64 111KB 149KB [ 2297.754184][T28020] biovec-16 31KB 33KB [ 2297.761170][T28020] bio_integrity_payload 1KB 7KB [ 2297.768166][T28020] khugepaged_mm_slot 291KB 328KB [ 2297.774608][T28020] user_namespace 4KB 7KB [ 2297.781725][T28020] uid_cache 0KB 4KB [ 2297.795896][T28020] dmaengine-unmap-256 2KB 6KB [ 2297.802448][T28020] dmaengine-unmap-128 1KB 3KB [ 2297.825662][T28020] dmaengine-unmap-16 0KB 4KB [ 2297.831845][T28020] dmaengine-unmap-2 0KB 3KB [ 2297.845973][T28020] audit_buffer 0KB 3KB [ 2297.852314][T28020] skbuff_ext_cache 0KB 4KB [ 2297.859265][T28020] skbuff_fclone_cache 547KB 633KB [ 2297.866065][T28020] skbuff_head_cache 25800KB 40545KB [ 2297.872950][T28020] configfs_dir_cache 1KB 8KB [ 2297.880111][T28020] file_lock_cache 4KB 7KB [ 2297.886840][T28020] file_lock_ctx 8KB 11KB [ 2297.892919][T28020] fsnotify_mark_connector 1KB 8KB [ 2297.900525][T28020] net_namespace 3306KB 3363KB [ 2297.907247][T28020] task_delay_info 849KB 957KB [ 2297.913500][T28020] taskstats 597KB 691KB [ 2297.920599][T28020] proc_dir_entry 22521KB 22556KB [ 2297.935153][T28020] pde_opener 11KB 15KB [ 2297.941241][T28020] seq_file 41KB 63KB [ 2297.956522][T28020] sigqueue 1KB 3KB [ 2297.962648][T28020] shmem_inode_cache 10788KB 11355KB [ 2297.969691][T28020] kernfs_iattrs_cache 9KB 15KB [ 2297.977399][T28020] kernfs_node_cache 102372KB 102389KB [ 2297.983521][T28020] mnt_cache 359KB 363KB [ 2297.990517][T28020] filp 4318KB 4481KB [ 2297.997199][T28020] names_cache 48692KB 48713KB [ 2298.003277][T28020] iint_cache 28KB 66KB [ 2298.010219][T28020] lsm_file_cache 788KB 897KB [ 2298.016872][T28020] key_jar 27KB 43KB [ 2298.022962][T28020] uts_namespace 5KB 15KB [ 2298.034802][T28020] nsproxy 129KB 138KB [ 2298.041476][T28020] vm_area_struct 12058KB 13353KB [ 2298.048143][T28020] mm_struct 2372KB 2578KB [ 2298.054225][T28020] fs_cache 611KB 704KB [ 2298.062206][T28020] files_cache 2016KB 2208KB [ 2298.085449][T28020] signal_cache 5692KB 5830KB [ 2298.092534][T28020] sighand_cache 4141KB 4176KB [ 2298.099460][T28020] task_struct 22202KB 22293KB [ 2298.106245][T28020] cred_jar 2080KB 2112KB [ 2298.112343][T28020] anon_vma_chain 3774KB 4429KB [ 2298.119281][T28020] anon_vma 2974KB 3116KB [ 2298.126033][T28020] pid 402KB 461KB [ 2298.132194][T28020] Acpi-Operand 156KB 194KB [ 2298.139867][T28020] Acpi-ParseExt 9KB 11KB [ 2298.146981][T28020] Acpi-Parse 41KB 47KB [ 2298.153517][T28020] Acpi-State 52KB 63KB [ 2298.161758][T28020] Acpi-Namespace 23KB 27KB [ 2298.168957][T28020] shared_policy_node 0KB 3KB [ 2298.176438][T28020] numa_policy 1KB 23KB [ 2298.182654][T28020] trace_event_file 358KB 358KB [ 2298.189867][T28020] ftrace_event_field 491KB 496KB [ 2298.196837][T28020] pool_workqueue 936KB 936KB [ 2298.202912][T28020] vmap_area 1243KB 2338KB [ 2298.209891][T28020] debug_objects_cache 8112KB 8157KB [ 2298.216962][T28020] page->ptl 3319KB 3909KB [ 2298.223157][T28020] kmalloc-4M 4096KB 4096KB [ 2298.230123][T28020] kmalloc-1M 8192KB 8192KB [ 2298.236700][T28020] kmalloc-512k 4096KB 4096KB [ 2298.242787][T28020] kmalloc-256k 236032KB 237056KB [ 2298.249686][T28020] kmalloc-128k 18944KB 19200KB [ 2298.256790][T28020] kmalloc-64k 6656KB 7296KB [ 2298.262871][T28020] kmalloc-32k 52160KB 52480KB [ 2298.270020][T28020] kmalloc-16k 25952KB 26112KB [ 2298.277750][T28020] kmalloc-8k 50336KB 50416KB [ 2298.283870][T28020] kmalloc-4k 282408KB 282448KB [ 2298.292620][T28020] kmalloc-2k 164132KB 164184KB [ 2298.299289][T28020] kmalloc-1k 212732KB 249056KB [ 2298.315184][T28020] kmalloc-512 48104KB 48652KB [ 2298.321881][T28020] kmalloc-256 33294KB 33436KB [ 2298.335192][T28020] kmalloc-128 5686KB 5712KB [ 2298.341300][T28020] kmalloc-96 4450KB 4484KB [ 2298.348777][T28020] kmalloc-64 10736KB 10856KB [ 2298.354865][T28020] kmalloc-32 6998KB 7201KB [ 2298.361909][T28020] kmalloc-192 8659KB 8692KB [ 2298.368715][T28020] kmem_cache 433KB 437KB [ 2298.374825][T28020] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=27942,uid=0 [ 2298.376714][T28026] IPVS: ftp: loaded support on port[0] = 21 [ 2298.395787][T28020] Out of memory: Killed process 27945 (syz-executor.5) total-vm:74576kB, anon-rss:2200kB, file-rss:35648kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2298.437262][ T1144] oom_reaper: reaped process 27945 (syz-executor.5), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB 18:51:53 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x8100}, 0x0) 18:51:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x2000000}, 0x0) 18:51:53 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x140) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) 18:51:53 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x0) 18:51:53 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x101) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc2c45512, &(0x7f0000000880)={{0x7, 0x1, 0xffffb77f, 0x80000000, 'syz1\x00', 0x2}, 0x1, [0x5bbe, 0x80, 0xc4, 0x0, 0x20200, 0x6, 0x6, 0x7, 0x7, 0xffffffff, 0x8, 0x0, 0x2, 0x9, 0x6, 0xe00000, 0x8, 0x4, 0x100, 0x6, 0x5, 0x0, 0x4a7d7168, 0x3ff, 0x4, 0x1, 0x6, 0xffffffff, 0x6, 0x6, 0x6, 0x7, 0x1, 0x1, 0xcb2b, 0xfff0000, 0x3, 0x6, 0x80000000, 0x7f9, 0xff, 0xfffffffa, 0xde59, 0x8, 0x2, 0x81, 0x9912, 0x29, 0x7fffffff, 0x1, 0xfffffffd, 0x9, 0x400, 0x2, 0x0, 0x9, 0x8, 0xfffffff7, 0x7, 0x8, 0xfffffff7, 0xfff, 0x16, 0x80000001, 0x10001, 0x100, 0xffffffff, 0x8, 0xa6c4, 0x1, 0x77, 0x80000000, 0x9, 0x7f, 0x5, 0xfffff4a1, 0x7ff, 0x8, 0x9, 0xfffff000, 0x6, 0x400, 0xffffff01, 0x4, 0x8, 0x925, 0x2, 0x7, 0x7fff, 0x0, 0x200, 0x8e, 0xffff3427, 0x2, 0x7, 0x2, 0x1, 0x1, 0x281, 0x5, 0x1ff, 0x7f, 0x0, 0xf4c, 0x7, 0xfff, 0xbf, 0xfff, 0x3, 0x54, 0x101, 0x0, 0x7, 0x9, 0x9, 0x1, 0xfffffeff, 0x8, 0x4800, 0x6, 0x9, 0x4, 0x101, 0x40000000, 0xe6f40000, 0x9, 0x7, 0x2]}) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x1e0, r5, 0x7b3965304bbaf685, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f51d375}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12e563dc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc0fe7fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25ddd255}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a032365}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x3}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xec, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44277fbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f26565}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf6c2c7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1dd8e304}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72027077}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e360f1f}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7565e303}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x296c9317}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb4314c0}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x681c3517}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2adbe2c3}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) unshare(0x40000000) 18:51:53 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x0) [ 2299.798895][T28049] IPVS: ftp: loaded support on port[0] = 21 [ 2299.813245][T28054] syz-executor.4 invoked oom-killer: gfp_mask=0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2299.839590][T28054] CPU: 0 PID: 28054 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 2299.848284][T28054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2299.858321][T28054] Call Trace: [ 2299.861600][T28054] dump_stack+0x188/0x20d [ 2299.865924][T28054] dump_header+0x10b/0x826 [ 2299.870339][T28054] oom_kill_process.cold+0x10/0x15 [ 2299.875440][T28054] out_of_memory+0x31f/0x12f0 [ 2299.880101][T28054] ? oom_killer_disable+0x270/0x270 [ 2299.885280][T28054] ? mutex_trylock+0x246/0x2c0 [ 2299.890119][T28054] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2299.896964][T28054] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2299.903539][T28054] ? warn_alloc+0x110/0x110 [ 2299.908028][T28054] ? do_filp_open+0x192/0x260 [ 2299.912711][T28054] __alloc_pages_nodemask+0x5d9/0x810 [ 2299.918092][T28054] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2299.924858][T28054] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2299.930654][T28054] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2299.936611][T28054] ? do_raw_spin_unlock+0x171/0x260 [ 2299.941801][T28054] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2299.948211][T28054] alloc_pages_current+0xff/0x200 [ 2299.953236][T28054] __vmalloc_node_range+0x478/0x7a0 [ 2299.958428][T28054] ? n_tty_open+0x16/0x170 [ 2299.963343][T28054] vzalloc+0x67/0x80 [ 2299.967254][T28054] ? n_tty_open+0x16/0x170 [ 2299.971651][T28054] n_tty_open+0x16/0x170 [ 2299.975874][T28054] ? n_tty_set_termios+0x1010/0x1010 [ 2299.981151][T28054] tty_ldisc_open.isra.0+0x9b/0x110 [ 2299.986337][T28054] tty_ldisc_setup+0x43/0x100 [ 2299.991000][T28054] tty_init_dev+0x20c/0x460 [ 2299.995484][T28054] ? pty_unix98_install+0x20/0x20 [ 2300.000957][T28054] ptmx_open+0x112/0x360 [ 2300.005190][T28054] ? pty_unix98_install+0x20/0x20 [ 2300.010192][T28054] chrdev_open+0x219/0x5c0 [ 2300.014591][T28054] ? cdev_put.part.0+0x50/0x50 [ 2300.019337][T28054] ? security_file_open+0x84/0x410 [ 2300.024536][T28054] do_dentry_open+0x4ba/0x1290 [ 2300.029279][T28054] ? cdev_put.part.0+0x50/0x50 [ 2300.034022][T28054] ? security_inode_permission+0xc4/0xf0 [ 2300.039639][T28054] ? chown_common+0x550/0x550 [ 2300.044295][T28054] ? inode_permission+0xab/0x500 [ 2300.049302][T28054] path_openat+0x1e59/0x27d0 [ 2300.053875][T28054] ? debug_smp_processor_id+0x2f/0x185 [ 2300.059317][T28054] ? path_lookupat.isra.0+0x530/0x530 [ 2300.064673][T28054] ? lock_release+0x800/0x800 [ 2300.069331][T28054] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2300.076092][T28054] ? lock_downgrade+0x840/0x840 [ 2300.080947][T28054] ? do_raw_spin_lock+0x129/0x2e0 [ 2300.085958][T28054] do_filp_open+0x192/0x260 [ 2300.090440][T28054] ? expand_files+0x44c/0x7c0 [ 2300.095203][T28054] ? may_open_dev+0xf0/0xf0 [ 2300.099702][T28054] ? do_raw_spin_lock+0x129/0x2e0 [ 2300.104795][T28054] ? rwlock_bug.part.0+0x90/0x90 [ 2300.109714][T28054] ? __phys_addr_symbol+0x2c/0x70 [ 2300.114807][T28054] ? __check_object_size+0x171/0x437 [ 2300.120075][T28054] ? _raw_spin_unlock+0x24/0x40 [ 2300.125198][T28054] ? __alloc_fd+0x46d/0x600 [ 2300.129684][T28054] do_sys_openat2+0x585/0x7d0 [ 2300.134651][T28054] ? file_open_root+0x400/0x400 [ 2300.139511][T28054] ? put_old_timespec32+0x100/0x1f0 [ 2300.144715][T28054] ? get_old_timespec32+0x1f0/0x1f0 [ 2300.149914][T28054] do_sys_open+0xc3/0x140 [ 2300.154248][T28054] ? filp_open+0x70/0x70 [ 2300.158472][T28054] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2300.164784][T28054] ? fput_many+0x2f/0x1a0 [ 2300.169098][T28054] ? trace_hardirqs_off_caller+0x55/0x230 [ 2300.175196][T28054] do_fast_syscall_32+0x270/0xe90 [ 2300.180208][T28054] entry_SYSENTER_compat+0x70/0x7f [ 2300.205873][T28051] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2300.231371][T28054] Mem-Info: [ 2300.234658][T28054] active_anon:316098 inactive_anon:8346 isolated_anon:0 [ 2300.234658][T28054] active_file:2750 inactive_file:5890 isolated_file:0 [ 2300.234658][T28054] unevictable:14 dirty:45 writeback:0 unstable:0 18:51:54 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x0) [ 2300.234658][T28054] slab_reclaimable:20431 slab_unreclaimable:410611 [ 2300.234658][T28054] mapped:60851 shmem:8636 pagetables:30436 bounce:0 [ 2300.234658][T28054] free:691788 free_pcp:501 free_cma:0 [ 2300.269999][T28055] bridge357: port 1(bond0) entered blocking state [ 2300.279861][T28054] Node 0 active_anon:1102652kB inactive_anon:16652kB active_file:16kB inactive_file:4kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217064kB dirty:12kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 970752kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2300.298174][T28055] bridge357: port 1(bond0) entered disabled state [ 2300.318065][T28054] Node 0 DMA free:10280kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2300.347292][T28055] device bond0 entered promiscuous mode [ 2300.358049][T28066] IPVS: ftp: loaded support on port[0] = 21 [ 2300.365525][T28055] device bond_slave_0 entered promiscuous mode [ 2300.372077][T28055] device bond_slave_1 entered promiscuous mode [ 2300.387051][T28054] lowmem_reserve[]: 0 2517 2517 2517 2517 18:51:54 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x1ff, 0xb, 0x800}) unshare(0x40000000) [ 2300.400967][T28054] Node 0 DMA32 free:116740kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1102528kB inactive_anon:16652kB active_file:16kB inactive_file:4kB unevictable:56kB writepending:12kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:18096kB pagetables:35024kB bounce:0kB free_pcp:1864kB local_pcp:1112kB free_cma:0kB [ 2300.440526][T28054] lowmem_reserve[]: 0 0 0 0 0 [ 2300.446373][T28054] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2300.493157][T28054] lowmem_reserve[]: 0 0 0 0 0 [ 2300.502248][T28054] Node 0 DMA: 22*4kB (UM) 10*8kB (ME) 4*16kB (UME) 4*32kB (UME) 1*64kB (M) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10280kB [ 2300.520369][T28054] Node 0 DMA32: 1821*4kB (UM) 1047*8kB (UM) 613*16kB (UME) 371*32kB (UME) 212*64kB (UME) 111*128kB (UME) 62*256kB (UME) 20*512kB (M) 1*1024kB (U) 12*2048kB (M) 0*4096kB = 116828kB [ 2300.540679][T28054] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2300.560979][T28055] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2300.585332][T28054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2300.605451][T28054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2300.619150][T28054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2300.633128][T28074] IPVS: ftp: loaded support on port[0] = 21 [ 2300.660746][T28054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2300.679250][T28054] 17285 total pagecache pages [ 2300.684048][T28054] 0 pages in swap cache [ 2300.689244][T28054] Swap cache stats: add 0, delete 0, find 0/0 [ 2300.700228][T28054] Free swap = 0kB [ 2300.703984][T28054] Total swap = 0kB [ 2300.708607][T28054] 1965979 pages RAM [ 2300.712530][T28054] 0 pages HighMem/MovableOnly [ 2300.719687][T28054] 349380 pages reserved [ 2300.724026][T28054] 0 pages cma reserved [ 2300.728522][T28054] Unreclaimable slab info: [ 2300.733303][T28054] Name Used Total [ 2300.743074][T28054] pid_3 1KB 7KB [ 2300.750670][T28054] pid_2 930KB 1113KB [ 2300.757752][T28054] bio-3 0KB 7KB [ 2300.763842][T28054] AF_VSOCK 14KB 16KB [ 2300.787444][T28054] batadv_tl_cache 4KB 12KB [ 2300.793665][T28054] SMC 45KB 49KB [ 2300.804292][T28054] TIPC 679KB 682KB [ 2300.811190][T28054] rds_tcp_connection 10KB 11KB [ 2300.821259][T28054] RDS 18KB 18KB [ 2300.828720][T28054] rds_connection 0KB 3KB [ 2300.838279][T28054] SCTPv6 1196KB 1204KB [ 2300.844501][T28054] SCTP 198KB 232KB [ 2300.851538][T28054] sctp_chunk 7KB 7KB [ 2300.859866][T28054] sctp_bind_bucket 0KB 3KB [ 2300.873748][T28054] DCCPv6 1433KB 1441KB [ 2300.880781][T28054] DCCP 1318KB 1330KB [ 2300.888480][T28054] L2TP/IPv6 6KB 6KB [ 2300.894573][T28054] L2TP/IP 23KB 23KB [ 2300.901602][T28054] KCM 17KB 19KB [ 2300.908660][T28054] kcm_mux_cache 7KB 7KB [ 2300.914734][T28054] RXRPC 948KB 958KB [ 2300.921778][T28054] rxrpc_call_jar 5877KB 5913KB [ 2300.928649][T28054] bridge_fdb_cache 66KB 74KB [ 2300.944953][T28054] MPTCPv6 35KB 38KB 18:51:54 executing program 0: set_mempolicy(0x1, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) 18:51:54 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xf000}, 0x0) 18:51:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x3000000}, 0x0) [ 2300.964941][T28054] fib6_nodes 175KB 184KB [ 2300.971317][T28054] ip6_dst_cache 279KB 423KB [ 2300.986004][T28054] PINGv6 1KB 3KB [ 2300.992106][T28054] RAWv6 4989KB 5043KB [ 2301.036450][T28102] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2301.040993][T28054] UDPLITEv6 19KB 19KB [ 2301.067191][T28054] UDPv6 1150KB 1162KB 18:51:54 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x34000}, 0x0) [ 2301.105410][T28108] device bond0 left promiscuous mode [ 2301.111256][T28054] TCPv6 1252KB 1280KB [ 2301.114047][T28108] device bond_slave_0 left promiscuous mode [ 2301.135615][T28108] device bond_slave_1 left promiscuous mode [ 2301.140809][T28054] nf_conntrack 10KB 37KB [ 2301.162626][T28108] bridge357: port 1(bond0) entered disabled state [ 2301.175579][T28054] sd_ext_cdb 0KB 7KB [ 2301.193338][T28054] scsi_sense_cache 1056KB 1064KB [ 2301.209729][T28054] virtio_scsi_cmd 16KB 16KB [ 2301.224428][T28054] sgpool-128 8KB 8KB [ 2301.249689][T28054] sgpool-64 4KB 12KB [ 2301.263934][T28054] sgpool-32 3KB 15KB [ 2301.274963][T28108] bridge358: port 1(bond0) entered blocking state [ 2301.282734][T28108] bridge358: port 1(bond0) entered disabled state [ 2301.299446][T28054] sgpool-16 23KB 26KB [ 2301.323774][T28108] device bond0 entered promiscuous mode [ 2301.337261][T28054] sgpool-8 39KB 52KB [ 2301.352293][T28108] device bond_slave_0 entered promiscuous mode [ 2301.366726][T28054] mqueue_inode_cache 53KB 62KB [ 2301.378768][T28108] device bond_slave_1 entered promiscuous mode [ 2301.389692][T28054] f2fs_bio_post_read_ctx 16KB 16KB [ 2301.407558][T28054] jfs_mp 7KB 7KB [ 2301.428917][T28054] cifs_small_rq 15KB 16KB [ 2301.439346][T28108] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2301.445863][T28054] cifs_request 67KB 67KB [ 2301.466319][T28102] device bond0 left promiscuous mode [ 2301.472715][T28102] device bond_slave_0 left promiscuous mode 18:51:55 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x400300}, 0x0) [ 2301.486908][T28054] cifs_mpx_ids 0KB 8KB [ 2301.510953][T28102] device bond_slave_1 left promiscuous mode [ 2301.527261][T28054] nfs_commit_data 3KB 7KB [ 2301.543943][T28102] bridge358: port 1(bond0) entered disabled state [ 2301.558233][T28054] nfs_write_data 34KB 44KB [ 2301.572354][T28054] ext4_system_zone 1KB 7KB [ 2301.589190][T28054] ext4_io_end_vec 10KB 15KB [ 2301.606126][T28054] ext4_bio_post_read_ctx 15KB 15KB [ 2301.629032][T28054] io_kiocb 0KB 3KB 18:51:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x4000000}, 0x0) [ 2301.645952][T28054] kioctx 21KB 23KB [ 2301.660148][T28054] aio_kiocb 6KB 7KB [ 2301.700843][T28054] userfaultfd_ctx_cache 2KB 4KB [ 2301.725982][T28054] bio-2 1KB 7KB [ 2301.742500][T28054] fasync_cache 1KB 3KB [ 2301.759779][T28054] pid_namespace 4KB 11KB [ 2301.760114][T28131] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2301.777553][T28054] posix_timers_cache 7KB 11KB [ 2301.796478][T28054] kvm_vcpu 0KB 70KB [ 2301.812403][T28054] kvm_mmu_page_header 58KB 61KB [ 2301.817620][T28132] bridge359: port 1(bond0) entered blocking state [ 2301.828660][T28054] pte_list_desc 2KB 3KB [ 2301.836921][T28132] bridge359: port 1(bond0) entered disabled state [ 2301.845414][T28054] x86_emulator 51KB 54KB [ 2301.859902][T28132] device bond0 entered promiscuous mode [ 2301.862493][T28054] x86_fpu 0KB 43KB [ 2301.873232][T28132] device bond_slave_0 entered promiscuous mode [ 2301.877523][T28054] rpc_buffers 17KB 25KB [ 2301.890183][T28132] device bond_slave_1 entered promiscuous mode [ 2301.897442][T28054] rpc_tasks 2KB 7KB [ 2301.913600][T28054] UNIX 542KB 635KB [ 2301.924253][T28132] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2301.931881][T28054] UDP-Lite 71KB 73KB [ 2301.963618][T28054] MPTCP 10KB 15KB [ 2302.003969][T28054] tcp_bind_bucket 38KB 40KB [ 2302.022417][T28054] inet_peer_cache 28KB 32KB [ 2302.042059][T28054] ip_fib_trie 24KB 31KB [ 2302.055738][T28054] ip_fib_alias 112KB 134KB [ 2302.069664][T28054] ip_dst_cache 98KB 168KB [ 2302.083834][T28054] PING 12KB 15KB [ 2302.099150][T28054] RAW 3034KB 3085KB [ 2302.111985][T28054] UDP 1020KB 1039KB [ 2302.126791][T28054] TCP 305KB 346KB [ 2302.145074][T28054] hugetlbfs_inode_cache 6KB 10KB [ 2302.157260][T28054] fscache_cookie_jar 1KB 7KB [ 2302.163650][T28054] bio-1 10KB 15KB [ 2302.184788][T28054] eventpoll_pwq 7KB 35KB [ 2302.204819][T28054] eventpoll_epi 14KB 39KB [ 2302.224722][T28054] inotify_inode_mark 4KB 7KB [ 2302.231261][T28054] request_queue 157KB 157KB [ 2302.239907][T28054] blkdev_ioc 11KB 19KB [ 2302.258785][T28054] bio-0 310KB 368KB [ 2302.278398][T28054] biovec-max 1738KB 1793KB [ 2302.284515][T28054] biovec-64 111KB 149KB [ 2302.318570][T28054] biovec-16 31KB 33KB [ 2302.325883][T28054] bio_integrity_payload 1KB 7KB [ 2302.332327][T28054] khugepaged_mm_slot 287KB 328KB [ 2302.361643][T28054] user_namespace 4KB 7KB [ 2302.374856][T28054] uid_cache 0KB 4KB [ 2302.394729][T28054] dmaengine-unmap-256 2KB 6KB [ 2302.401789][T28054] dmaengine-unmap-128 1KB 3KB [ 2302.424844][T28054] dmaengine-unmap-16 0KB 4KB [ 2302.431725][T28054] dmaengine-unmap-2 0KB 3KB [ 2302.445827][T28054] audit_buffer 0KB 3KB [ 2302.452663][T28054] skbuff_ext_cache 0KB 4KB [ 2302.463312][T28054] skbuff_fclone_cache 513KB 633KB [ 2302.471958][T28054] skbuff_head_cache 25285KB 40477KB [ 2302.482055][T28054] configfs_dir_cache 1KB 8KB [ 2302.490105][T28054] file_lock_cache 4KB 7KB [ 2302.500572][T28054] file_lock_ctx 8KB 11KB [ 2302.508154][T28054] fsnotify_mark_connector 1KB 8KB [ 2302.520540][T28054] net_namespace 3306KB 3370KB [ 2302.529400][T28054] task_delay_info 849KB 957KB [ 2302.539235][T28054] taskstats 597KB 691KB [ 2302.546134][T28054] proc_dir_entry 22410KB 22477KB [ 2302.552503][T28054] pde_opener 10KB 15KB [ 2302.561722][T28054] seq_file 39KB 63KB [ 2302.568425][T28054] sigqueue 0KB 3KB [ 2302.574514][T28054] shmem_inode_cache 10788KB 11355KB [ 2302.583189][T28054] kernfs_iattrs_cache 9KB 15KB [ 2302.590433][T28054] kernfs_node_cache 102603KB 102613KB [ 2302.599104][T28054] mnt_cache 355KB 363KB [ 2302.605902][T28054] filp 4014KB 4481KB [ 2302.612078][T28054] names_cache 42100KB 42121KB [ 2302.622424][T28054] iint_cache 28KB 66KB [ 2302.630026][T28054] lsm_file_cache 762KB 897KB [ 2302.642202][T28054] key_jar 27KB 43KB [ 2302.649414][T28054] uts_namespace 5KB 15KB [ 2302.677549][T28054] nsproxy 127KB 138KB [ 2302.683658][T28054] vm_area_struct 11926KB 13303KB [ 2302.705427][T28054] mm_struct 2364KB 2578KB [ 2302.711808][T28054] fs_cache 611KB 704KB [ 2302.747764][T28054] files_cache 1890KB 2205KB [ 2302.753952][T28054] signal_cache 5477KB 5811KB [ 2302.777433][T28054] sighand_cache 4148KB 4183KB [ 2302.783578][T28054] task_struct 20966KB 21057KB [ 2302.808004][T28054] cred_jar 1975KB 2112KB [ 2302.829408][T28054] anon_vma_chain 3709KB 4421KB [ 2302.847394][T28054] anon_vma 2974KB 3116KB [ 2302.868053][T28054] pid 402KB 461KB [ 2302.886221][T28054] Acpi-Operand 156KB 194KB [ 2302.904606][T28054] Acpi-ParseExt 9KB 11KB [ 2302.923132][T28054] Acpi-Parse 41KB 47KB [ 2302.942774][T28054] Acpi-State 52KB 63KB [ 2302.961560][T28054] Acpi-Namespace 23KB 27KB [ 2302.982918][T28054] shared_policy_node 0KB 3KB [ 2303.001662][T28054] numa_policy 1KB 23KB [ 2303.021729][T28054] trace_event_file 358KB 358KB [ 2303.040272][T28054] ftrace_event_field 491KB 496KB [ 2303.060361][T28054] pool_workqueue 935KB 936KB [ 2303.075264][T28054] vmap_area 1310KB 2338KB [ 2303.090005][T28054] debug_objects_cache 8254KB 8293KB [ 2303.103077][T28054] page->ptl 3280KB 3909KB [ 2303.121078][T28054] kmalloc-4M 4096KB 4096KB [ 2303.134714][T28054] kmalloc-1M 8192KB 8192KB [ 2303.161727][T28054] kmalloc-512k 4096KB 4096KB [ 2303.180458][T28054] kmalloc-256k 234496KB 235520KB [ 2303.203064][T28054] kmalloc-128k 18944KB 19200KB [ 2303.225756][T28054] kmalloc-64k 6656KB 7296KB [ 2303.246066][T28054] kmalloc-32k 52224KB 52480KB [ 2303.264885][T28054] kmalloc-16k 25952KB 26112KB [ 2303.281139][T28054] kmalloc-8k 50384KB 50432KB [ 2303.298424][T28054] kmalloc-4k 264088KB 264128KB [ 2303.320526][T28054] kmalloc-2k 163508KB 163660KB [ 2303.336849][T28054] kmalloc-1k 210020KB 248692KB [ 2303.352427][T28054] kmalloc-512 47326KB 48608KB [ 2303.368224][T28054] kmalloc-256 33249KB 33404KB [ 2303.382669][T28054] kmalloc-128 5678KB 5712KB [ 2303.403247][T28054] kmalloc-96 4449KB 4484KB [ 2303.422551][T28054] kmalloc-64 10558KB 10852KB [ 2303.441541][T28054] kmalloc-32 6758KB 7193KB [ 2303.456038][T28054] kmalloc-192 8620KB 8692KB [ 2303.471113][T28054] kmem_cache 433KB 437KB [ 2303.489017][T28107] IPVS: ftp: loaded support on port[0] = 21 [ 2303.497334][T28068] IPVS: ftp: loaded support on port[0] = 21 [ 2303.516951][T28054] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4666,uid=0 [ 2303.570822][T28054] Out of memory: Killed process 4666 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 18:51:58 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080)=0x81, 0x4) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) getrusage(0x0, &(0x7f00000000c0)) unshare(0x40000000) 18:51:58 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xf0ffff}, 0x0) 18:51:58 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) unshare(0x40000000) 18:51:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x5000000}, 0x0) 18:51:58 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = socket(0xb, 0x80000, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 18:51:58 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x1000000}, 0x0) [ 2304.564330][T28174] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2304.594953][T28176] IPVS: ftp: loaded support on port[0] = 21 [ 2304.626585][T28181] device bond0 left promiscuous mode [ 2304.637579][T28181] device bond_slave_0 left promiscuous mode [ 2304.650625][T28181] device bond_slave_1 left promiscuous mode [ 2304.666576][T28181] bridge359: port 1(bond0) entered disabled state [ 2304.672423][T28180] IPVS: ftp: loaded support on port[0] = 21 [ 2304.683046][T28185] IPVS: ftp: loaded support on port[0] = 21 [ 2304.764679][T28181] bridge360: port 1(bond0) entered blocking state [ 2304.771645][T28181] bridge360: port 1(bond0) entered disabled state [ 2304.781596][T28181] device bond0 entered promiscuous mode [ 2304.792228][T28181] device bond_slave_0 entered promiscuous mode [ 2304.800083][T28181] device bond_slave_1 entered promiscuous mode [ 2304.867238][T28181] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2305.061899][T28246] IPVS: ftp: loaded support on port[0] = 21 18:51:59 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000104, 0x2) unshare(0x40000000) 18:51:59 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x2000000}, 0x0) 18:51:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x6000000}, 0x0) 18:51:59 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x101) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc2c45512, &(0x7f0000000880)={{0x7, 0x1, 0xffffb77f, 0x80000000, 'syz1\x00', 0x2}, 0x1, [0x5bbe, 0x80, 0xc4, 0x0, 0x20200, 0x6, 0x6, 0x7, 0x7, 0xffffffff, 0x8, 0x0, 0x2, 0x9, 0x6, 0xe00000, 0x8, 0x4, 0x100, 0x6, 0x5, 0x0, 0x4a7d7168, 0x3ff, 0x4, 0x1, 0x6, 0xffffffff, 0x6, 0x6, 0x6, 0x7, 0x1, 0x1, 0xcb2b, 0xfff0000, 0x3, 0x6, 0x80000000, 0x7f9, 0xff, 0xfffffffa, 0xde59, 0x8, 0x2, 0x81, 0x9912, 0x29, 0x7fffffff, 0x1, 0xfffffffd, 0x9, 0x400, 0x2, 0x0, 0x9, 0x8, 0xfffffff7, 0x7, 0x8, 0xfffffff7, 0xfff, 0x16, 0x80000001, 0x10001, 0x100, 0xffffffff, 0x8, 0xa6c4, 0x1, 0x77, 0x80000000, 0x9, 0x7f, 0x5, 0xfffff4a1, 0x7ff, 0x8, 0x9, 0xfffff000, 0x6, 0x400, 0xffffff01, 0x4, 0x8, 0x925, 0x2, 0x7, 0x7fff, 0x0, 0x200, 0x8e, 0xffff3427, 0x2, 0x7, 0x2, 0x1, 0x1, 0x281, 0x5, 0x1ff, 0x7f, 0x0, 0xf4c, 0x7, 0xfff, 0xbf, 0xfff, 0x3, 0x54, 0x101, 0x0, 0x7, 0x9, 0x9, 0x1, 0xfffffeff, 0x8, 0x4800, 0x6, 0x9, 0x4, 0x101, 0x40000000, 0xe6f40000, 0x9, 0x7, 0x2]}) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x1e0, r5, 0x7b3965304bbaf685, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f51d375}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12e563dc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc0fe7fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25ddd255}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a032365}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x3}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xec, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44277fbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f26565}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf6c2c7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1dd8e304}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72027077}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e360f1f}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7565e303}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x296c9317}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb4314c0}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x681c3517}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2adbe2c3}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) unshare(0x40000000) 18:51:59 executing program 4: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r2, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff2a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xbe}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffe01}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x5c}}, 0x80) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x2c040000) 18:51:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x90040, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x1, 0x6, 0x4, 0x0, 0x2}) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) unshare(0x40000000) [ 2305.387718][T28275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:51:59 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x3000000}, 0x0) [ 2305.429678][T28274] IPVS: ftp: loaded support on port[0] = 21 [ 2305.443345][T28283] device bond0 left promiscuous mode 18:51:59 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = openat$snapshot(0xffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x60000, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x3c00, 0x800, 0x0, 0x0, 0x0, 0x9, 0x2, 0x2, {0xffffffff, 0x40, 0x1}, {0x0, 0x7, 0x1}, {0x8000, 0xe85}, {0xa90, 0x32}, 0x2, 0x100, 0x10001, 0x1000, 0x1, 0x0, 0x2, 0x2, 0x2, 0x90, 0x8eb, 0xffff, 0x10, 0x4, 0x1, 0x3}) [ 2305.474611][T28283] device bond_slave_0 left promiscuous mode [ 2305.500094][T28283] device bond_slave_1 left promiscuous mode [ 2305.523378][T28284] IPVS: ftp: loaded support on port[0] = 21 [ 2305.526102][T28283] bridge360: port 1(bond0) entered disabled state [ 2305.556649][T28278] syz-executor.5 invoked oom-killer: gfp_mask=0x100cc0(GFP_USER), order=0, oom_score_adj=1000 [ 2305.583867][T28278] CPU: 0 PID: 28278 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 2305.592923][T28278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2305.599944][T28288] IPVS: ftp: loaded support on port[0] = 21 [ 2305.603105][T28278] Call Trace: [ 2305.603131][T28278] dump_stack+0x188/0x20d [ 2305.603149][T28278] dump_header+0x10b/0x826 [ 2305.603167][T28278] oom_kill_process.cold+0x10/0x15 [ 2305.603184][T28278] out_of_memory+0x31f/0x12f0 [ 2305.603210][T28278] ? oom_killer_disable+0x270/0x270 [ 2305.638829][T28278] ? mutex_trylock+0x246/0x2c0 [ 2305.643696][T28278] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2305.650656][T28278] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2305.657753][T28278] ? warn_alloc+0x110/0x110 [ 2305.662279][T28278] ? iov_iter_get_pages_alloc+0x841/0x1420 [ 2305.668095][T28278] ? lock_acquire+0x1f2/0x8f0 [ 2305.673084][T28278] ? kernel_init_free_pages+0x120/0x120 [ 2305.678647][T28278] __alloc_pages_nodemask+0x5d9/0x810 [ 2305.684204][T28278] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2305.691005][T28278] ? fault_create_debugfs_attr+0x140/0x140 [ 2305.696919][T28278] ? zone_watermark_ok_safe+0x260/0x260 [ 2305.703168][T28278] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2305.709250][T28278] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2305.716031][T28278] alloc_pages_current+0xff/0x200 [ 2305.721076][T28278] ? mark_held_locks+0xe0/0xe0 [ 2305.725842][T28278] push_pipe+0x2af/0x690 [ 2305.730186][T28278] iov_iter_get_pages_alloc+0x8cc/0x1420 [ 2305.735820][T28278] ? iov_iter_for_each_range+0x750/0x750 [ 2305.741451][T28278] ? lock_downgrade+0x840/0x840 [ 2305.746314][T28278] default_file_splice_read+0x1d5/0xa20 [ 2305.751875][T28278] ? entry_SYSENTER_compat+0x70/0x7f [ 2305.757167][T28278] ? iter_file_splice_write+0xb00/0xb00 [ 2305.762720][T28278] ? aa_path_link+0x300/0x300 [ 2305.767394][T28278] ? ____cache_alloc_node+0x3c/0x1d0 [ 2305.772898][T28278] ? lock_acquire+0x1f2/0x8f0 [ 2305.777676][T28278] ? kernel_init_free_pages+0x120/0x120 [ 2305.783242][T28278] ? fsnotify+0x7df/0xb50 [ 2305.787567][T28278] ? fsnotify_parent+0xbf/0x2d0 [ 2305.792417][T28278] ? fsnotify_first_mark+0x200/0x200 [ 2305.797978][T28278] ? __next_zones_zonelist+0x9e/0x160 [ 2305.803663][T28278] ? kasan_unpoison_shadow+0x30/0x40 [ 2305.809437][T28278] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2305.816569][T28278] ? security_file_permission+0x8c/0x470 [ 2305.822483][T28278] ? iter_file_splice_write+0xb00/0xb00 [ 2305.828140][T28278] do_splice_to+0x114/0x160 [ 2305.833102][T28278] splice_direct_to_actor+0x307/0x980 [ 2305.839206][T28278] ? generic_pipe_buf_nosteal+0x10/0x10 [ 2305.844867][T28278] ? do_splice_to+0x160/0x160 [ 2305.849564][T28278] do_splice_direct+0x1b4/0x280 [ 2305.854418][T28278] ? splice_direct_to_actor+0x980/0x980 [ 2305.860091][T28278] do_sendfile+0x555/0xc50 [ 2305.864702][T28278] ? do_compat_pwritev64+0x1b0/0x1b0 [ 2305.869998][T28278] ? put_old_timespec32+0x100/0x1f0 [ 2305.875306][T28278] ? get_old_timespec32+0x1f0/0x1f0 [ 2305.880522][T28278] ? __ia32_sys_futex_time32+0x320/0x494 [ 2305.886341][T28278] ? __ia32_sys_futex_time32+0x32a/0x494 [ 2305.892248][T28278] __ia32_compat_sys_sendfile+0x1e0/0x220 [ 2305.898059][T28278] ? __ia32_sys_sendfile64+0x210/0x210 [ 2305.903615][T28278] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2305.909855][T28278] ? trace_hardirqs_off_caller+0x55/0x230 [ 2305.915595][T28278] do_fast_syscall_32+0x270/0xe90 [ 2305.920628][T28278] entry_SYSENTER_compat+0x70/0x7f [ 2305.937677][T28278] Mem-Info: [ 2305.943084][T28278] active_anon:316080 inactive_anon:8346 isolated_anon:0 [ 2305.943084][T28278] active_file:2750 inactive_file:5914 isolated_file:0 [ 2305.943084][T28278] unevictable:14 dirty:16 writeback:0 unstable:0 [ 2305.943084][T28278] slab_reclaimable:20384 slab_unreclaimable:400162 [ 2305.943084][T28278] mapped:60911 shmem:8636 pagetables:30400 bounce:0 [ 2305.943084][T28278] free:704766 free_pcp:164 free_cma:0 [ 2305.943131][T28283] bridge361: port 1(bond0) entered blocking state [ 2305.990326][T28278] Node 0 active_anon:1102588kB inactive_anon:16652kB active_file:12kB inactive_file:12kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217064kB dirty:16kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 970752kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2306.032152][T28278] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2306.058201][T28290] IPVS: ftp: loaded support on port[0] = 21 [ 2306.070811][T28283] bridge361: port 1(bond0) entered disabled state [ 2306.081093][T28283] device bond0 entered promiscuous mode [ 2306.091674][T28283] device bond_slave_0 entered promiscuous mode [ 2306.099444][T28283] device bond_slave_1 entered promiscuous mode [ 2306.116374][T28278] lowmem_reserve[]: 0 2517 2517 2517 2517 18:51:59 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x4000000}, 0x0) [ 2306.130255][T28278] Node 0 DMA32 free:115964kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1102464kB inactive_anon:16652kB active_file:12kB inactive_file:12kB unevictable:56kB writepending:16kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:18064kB pagetables:34924kB bounce:0kB free_pcp:704kB local_pcp:240kB free_cma:0kB [ 2306.188188][T28278] lowmem_reserve[]: 0 0 0 0 0 [ 2306.193909][T28278] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 18:52:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x7000000}, 0x0) [ 2306.228160][T28283] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2306.239746][T28302] IPVS: ftp: loaded support on port[0] = 21 [ 2306.261552][T28278] lowmem_reserve[]: 0 0 0 0 0 [ 2306.331132][T28278] Node 0 DMA: 21*4kB (UM) 11*8kB (UME) 4*16kB (UME) 4*32kB (UME) 1*64kB (M) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10284kB [ 2306.372882][T28278] Node 0 DMA32: 1968*4kB (M) 1097*8kB (UME) 607*16kB (UME) 402*32kB (UME) 223*64kB (UME) 112*128kB (UME) 64*256kB (UME) 20*512kB (M) 1*1024kB (U) 10*2048kB (M) 0*4096kB = 115960kB [ 2306.401706][T28289] IPVS: ftp: loaded support on port[0] = 21 [ 2306.416404][T28337] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2306.453666][T28278] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2306.475039][T28349] device bond0 left promiscuous mode [ 2306.481403][T28349] device bond_slave_0 left promiscuous mode [ 2306.493996][T28278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 18:52:00 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x6000000}, 0x0) [ 2306.497381][T28349] device bond_slave_1 left promiscuous mode [ 2306.533753][T28278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2306.543239][T28349] bridge361: port 1(bond0) entered disabled state [ 2306.556670][T28278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2306.567051][T28278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2306.577005][T28278] 17303 total pagecache pages [ 2306.582007][T28278] 0 pages in swap cache [ 2306.588337][T28278] Swap cache stats: add 0, delete 0, find 0/0 [ 2306.596612][T28278] Free swap = 0kB [ 2306.600542][T28278] Total swap = 0kB [ 2306.607007][T28278] 1965979 pages RAM [ 2306.611004][T28278] 0 pages HighMem/MovableOnly [ 2306.617712][T28278] 349380 pages reserved [ 2306.622092][T28278] 0 pages cma reserved [ 2306.626410][T28349] bridge362: port 1(bond0) entered blocking state [ 2306.628209][T28278] Unreclaimable slab info: [ 2306.632915][T28349] bridge362: port 1(bond0) entered disabled state [ 2306.639014][T28349] device bond0 entered promiscuous mode [ 2306.649626][T28278] Name Used Total [ 2306.657985][T28278] pid_3 1KB 7KB [ 2306.666283][T28278] pid_2 916KB 1113KB [ 2306.668577][T28349] device bond_slave_0 entered promiscuous mode [ 2306.672700][T28278] bio-3 0KB 7KB [ 2306.687440][T28278] AF_VSOCK 14KB 16KB [ 2306.693750][T28278] batadv_tl_cache 4KB 12KB [ 2306.696797][T28349] device bond_slave_1 entered promiscuous mode [ 2306.701686][T28278] SMC 45KB 49KB [ 2306.713196][T28278] TIPC 680KB 689KB [ 2306.720659][T28278] rds_tcp_connection 10KB 11KB [ 2306.727802][T28278] RDS 18KB 18KB [ 2306.737873][T28278] rds_connection 0KB 3KB [ 2306.749769][T28278] SCTPv6 1198KB 1204KB [ 2306.757850][T28278] SCTP 198KB 232KB [ 2306.765176][T28278] sctp_chunk 7KB 7KB [ 2306.771551][T28278] sctp_bind_bucket 0KB 3KB [ 2306.786859][T28278] DCCPv6 1076KB 1173KB [ 2306.801901][T28278] DCCP 999KB 1089KB [ 2306.815043][T28349] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2306.820882][T28278] L2TP/IPv6 6KB 6KB [ 2306.842256][T28278] L2TP/IP 23KB 23KB [ 2306.862896][T28278] KCM 17KB 19KB [ 2306.874519][T28337] device bond0 left promiscuous mode [ 2306.879832][T28337] device bond_slave_0 left promiscuous mode [ 2306.908021][T28337] device bond_slave_1 left promiscuous mode [ 2306.915482][T28278] kcm_mux_cache 7KB 7KB [ 2306.934909][T28278] RXRPC 951KB 958KB [ 2306.935192][T28337] bridge362: port 1(bond0) entered disabled state [ 2306.959198][T28278] rxrpc_call_jar 5930KB 5932KB [ 2306.979915][T28278] bridge_fdb_cache 66KB 74KB [ 2307.000582][T28278] MPTCPv6 35KB 38KB 18:52:00 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xa000000}, 0x0) [ 2307.021284][T28278] fib6_nodes 175KB 184KB [ 2307.041854][T28278] ip6_dst_cache 279KB 423KB [ 2307.086946][T28278] PINGv6 1KB 3KB [ 2307.119981][T28278] RAWv6 5062KB 5089KB [ 2307.142448][T28278] UDPLITEv6 19KB 19KB [ 2307.163251][T28278] UDPv6 1148KB 1162KB [ 2307.185815][T28278] TCPv6 1264KB 1292KB [ 2307.210946][T28278] nf_conntrack 10KB 37KB [ 2307.225350][T28278] sd_ext_cdb 0KB 7KB [ 2307.239209][T28278] scsi_sense_cache 1056KB 1064KB [ 2307.253952][T28278] virtio_scsi_cmd 16KB 16KB [ 2307.267770][T28278] sgpool-128 8KB 8KB [ 2307.281723][T28278] sgpool-64 4KB 12KB [ 2307.295913][T28278] sgpool-32 3KB 15KB [ 2307.313857][T28278] sgpool-16 26KB 30KB [ 2307.334984][T28278] sgpool-8 35KB 52KB [ 2307.354963][T28278] mqueue_inode_cache 57KB 62KB [ 2307.374446][T28278] f2fs_bio_post_read_ctx 16KB 16KB [ 2307.396951][T28278] jfs_mp 7KB 7KB [ 2307.416385][T28278] cifs_small_rq 15KB 16KB [ 2307.436981][T28278] cifs_request 67KB 67KB [ 2307.456485][T28278] cifs_mpx_ids 0KB 8KB [ 2307.477108][T28278] nfs_commit_data 3KB 7KB [ 2307.496599][T28278] nfs_write_data 34KB 44KB [ 2307.520346][T28278] ext4_system_zone 1KB 7KB [ 2307.540552][T28278] ext4_io_end_vec 9KB 15KB [ 2307.576902][T28278] ext4_bio_post_read_ctx 15KB 15KB [ 2307.597784][T28278] io_kiocb 0KB 3KB [ 2307.617114][T28278] kioctx 21KB 23KB [ 2307.636654][T28278] aio_kiocb 6KB 7KB [ 2307.657225][T28278] userfaultfd_ctx_cache 2KB 4KB [ 2307.678021][T28278] bio-2 1KB 7KB [ 2307.697537][T28278] fasync_cache 1KB 3KB [ 2307.717087][T28278] pid_namespace 8KB 11KB [ 2307.737997][T28278] posix_timers_cache 7KB 11KB [ 2307.757516][T28278] kvm_vcpu 0KB 70KB [ 2307.776851][T28278] kvm_mmu_page_header 58KB 61KB [ 2307.797563][T28278] pte_list_desc 2KB 3KB [ 2307.816970][T28278] x86_emulator 51KB 54KB [ 2307.836551][T28278] x86_fpu 0KB 43KB [ 2307.860149][T28278] rpc_buffers 17KB 25KB [ 2307.879081][T28278] rpc_tasks 2KB 7KB [ 2307.898998][T28278] UNIX 542KB 635KB [ 2307.920020][T28278] UDP-Lite 71KB 73KB [ 2307.931489][T28278] MPTCP 10KB 15KB [ 2307.941563][T28278] tcp_bind_bucket 40KB 40KB [ 2307.955690][T28278] inet_peer_cache 28KB 32KB [ 2307.984201][T28278] ip_fib_trie 24KB 31KB [ 2307.991089][T28278] ip_fib_alias 112KB 134KB [ 2308.024957][T28278] ip_dst_cache 98KB 168KB [ 2308.031092][T28278] PING 12KB 15KB [ 2308.064730][T28278] RAW 3071KB 3109KB [ 2308.071047][T28278] UDP 1030KB 1050KB [ 2308.104175][T28278] TCP 305KB 346KB [ 2308.110450][T28278] hugetlbfs_inode_cache 6KB 10KB [ 2308.136292][T28278] fscache_cookie_jar 1KB 7KB [ 2308.143020][T28278] bio-1 10KB 15KB [ 2308.157751][T28278] eventpoll_pwq 7KB 35KB [ 2308.168690][T28278] eventpoll_epi 13KB 39KB [ 2308.190151][T28278] inotify_inode_mark 4KB 7KB [ 2308.214024][T28278] request_queue 157KB 157KB [ 2308.234515][T28278] blkdev_ioc 11KB 19KB [ 2308.240700][T28278] bio-0 256KB 320KB [ 2308.254251][T28278] biovec-max 1411KB 1513KB [ 2308.260419][T28278] biovec-64 108KB 149KB [ 2308.274159][T28278] biovec-16 31KB 33KB [ 2308.280509][T28278] bio_integrity_payload 1KB 7KB [ 2308.294675][T28278] khugepaged_mm_slot 287KB 328KB [ 2308.300975][T28278] user_namespace 4KB 7KB [ 2308.307134][T28278] uid_cache 0KB 4KB [ 2308.313204][T28278] dmaengine-unmap-256 2KB 6KB [ 2308.319731][T28278] dmaengine-unmap-128 1KB 3KB [ 2308.326156][T28278] dmaengine-unmap-16 0KB 4KB [ 2308.332333][T28278] dmaengine-unmap-2 0KB 3KB [ 2308.340924][T28278] audit_buffer 0KB 3KB [ 2308.347097][T28278] skbuff_ext_cache 0KB 4KB [ 2308.353252][T28278] skbuff_fclone_cache 412KB 622KB [ 2308.359655][T28278] skbuff_head_cache 25049KB 40455KB [ 2308.366043][T28278] configfs_dir_cache 1KB 8KB [ 2308.372212][T28278] file_lock_cache 4KB 7KB [ 2308.378520][T28278] file_lock_ctx 8KB 11KB [ 2308.384678][T28278] fsnotify_mark_connector 1KB 8KB [ 2308.391280][T28278] net_namespace 3356KB 3414KB [ 2308.398089][T28278] task_delay_info 829KB 957KB [ 2308.444172][T28278] taskstats 597KB 691KB [ 2308.450304][T28278] proc_dir_entry 22657KB 22743KB [ 2308.494155][T28278] pde_opener 9KB 15KB [ 2308.500275][T28278] seq_file 36KB 63KB [ 2308.574129][T28278] sigqueue 0KB 3KB [ 2308.580238][T28278] shmem_inode_cache 10738KB 11348KB [ 2308.614179][T28278] kernfs_iattrs_cache 9KB 15KB [ 2308.620711][T28278] kernfs_node_cache 103650KB 103664KB [ 2308.654664][T28278] mnt_cache 355KB 363KB [ 2308.660761][T28278] filp 3660KB 4466KB [ 2308.694170][T28278] names_cache 37221KB 37221KB [ 2308.700301][T28278] iint_cache 28KB 66KB [ 2308.734799][T28278] lsm_file_cache 703KB 897KB [ 2308.740891][T28278] key_jar 27KB 43KB [ 2308.776346][T28278] uts_namespace 13KB 15KB [ 2308.782436][T28278] nsproxy 127KB 138KB [ 2308.816299][T28278] vm_area_struct 11912KB 13268KB [ 2308.822407][T28278] mm_struct 2330KB 2558KB [ 2308.865244][T28278] fs_cache 587KB 704KB [ 2308.871717][T28278] files_cache 1848KB 2190KB [ 2308.916384][T28278] signal_cache 5416KB 5785KB [ 2308.922480][T28278] sighand_cache 4155KB 4190KB [ 2308.956738][T28278] task_struct 21391KB 21391KB [ 2308.963100][T28278] cred_jar 1855KB 2112KB [ 2309.005261][T28278] anon_vma_chain 3696KB 4421KB [ 2309.011766][T28278] anon_vma 2966KB 3116KB [ 2309.056316][T28278] pid 380KB 461KB [ 2309.062530][T28278] Acpi-Operand 156KB 194KB [ 2309.105339][T28278] Acpi-ParseExt 9KB 11KB [ 2309.112478][T28278] Acpi-Parse 41KB 47KB [ 2309.145344][T28278] Acpi-State 52KB 63KB [ 2309.151437][T28278] Acpi-Namespace 23KB 27KB [ 2309.205410][T28278] shared_policy_node 0KB 3KB [ 2309.211838][T28278] numa_policy 6KB 23KB [ 2309.245309][T28278] trace_event_file 358KB 358KB [ 2309.251408][T28278] ftrace_event_field 491KB 496KB [ 2309.285629][T28278] pool_workqueue 948KB 948KB [ 2309.291992][T28278] vmap_area 1411KB 2338KB [ 2309.334132][T28278] debug_objects_cache 8236KB 8301KB [ 2309.340582][T28278] page->ptl 3274KB 3909KB [ 2309.374124][T28278] kmalloc-4M 4096KB 4096KB [ 2309.380270][T28278] kmalloc-1M 8192KB 8192KB [ 2309.414093][T28278] kmalloc-512k 4096KB 4096KB [ 2309.420316][T28278] kmalloc-256k 238592KB 239104KB [ 2309.454066][T28278] kmalloc-128k 18944KB 19200KB [ 2309.460208][T28278] kmalloc-64k 6656KB 7296KB [ 2309.474082][T28278] kmalloc-32k 52992KB 52992KB [ 2309.480175][T28278] kmalloc-16k 26336KB 26400KB [ 2309.514046][T28278] kmalloc-8k 50944KB 50944KB [ 2309.514055][T28278] kmalloc-4k 274248KB 274248KB [ 2309.514063][T28278] kmalloc-2k 165452KB 165504KB [ 2309.514070][T28278] kmalloc-1k 203732KB 244204KB [ 2309.514077][T28278] kmalloc-512 47491KB 48792KB [ 2309.514085][T28278] kmalloc-256 33606KB 33660KB [ 2309.514094][T28278] kmalloc-128 5732KB 5756KB [ 2309.514103][T28278] kmalloc-96 4437KB 4484KB [ 2309.514112][T28278] kmalloc-64 10644KB 10920KB [ 2309.514120][T28278] kmalloc-32 6866KB 7193KB [ 2309.514129][T28278] kmalloc-192 8706KB 8740KB [ 2309.514139][T28278] kmem_cache 438KB 441KB [ 2309.514163][T28278] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4647,uid=0 [ 2309.857345][T28278] Out of memory: Killed process 4647 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2309.937502][ T1144] oom_reaper: reaped process 28278 (syz-executor.5), now anon-rss:0kB, file-rss:34944kB, shmem-rss:0kB 18:52:04 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) unshare(0x40000000) 18:52:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xa000000}, 0x0) 18:52:04 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xc000000}, 0x0) 18:52:04 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000180), 0x1000) unshare(0x40000000) 18:52:04 executing program 5: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x140) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) 18:52:04 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = gettid() tkill(r0, 0x36) waitid(0x0, r0, &(0x7f0000000000), 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [], 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf253100000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x50) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de4283ffaec56d159e567a42767a7b89b65e4841c9695825a4b10dd5cb8b24f84b29ceef0a428124050e273c65dbfb96b053bda211a0aa613e4d66c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58d8b6222d2e21ac715547dff0000000000000000000000000000000025820c9874ab4a1d7499dde60f692672a47457c9f57e9b2b8980b97fd09945c3573c4ab652b933256368318c5b422dab"], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000011c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001180)={&(0x7f00000000c0)={0x4c, 0x0, 0x2, 0x2, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendfile(r2, r1, 0x0, 0x7ffff000) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000001200)) [ 2310.649266][T28418] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2310.696276][T28418] bridge363: port 1(bond0) entered blocking state [ 2310.696589][T28419] IPVS: ftp: loaded support on port[0] = 21 [ 2310.704553][T28418] bridge363: port 1(bond0) entered disabled state [ 2310.726835][T28427] IPVS: ftp: loaded support on port[0] = 21 [ 2310.733077][T28423] IPVS: ftp: loaded support on port[0] = 21 [ 2310.733697][T28418] device bond0 entered promiscuous mode [ 2310.752325][T28428] IPVS: ftp: loaded support on port[0] = 21 [ 2310.773652][T28418] device bond_slave_0 entered promiscuous mode [ 2310.795913][T28427] syz-executor.0 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2310.812815][T28418] device bond_slave_1 entered promiscuous mode [ 2310.840628][T28429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2310.851323][T28427] CPU: 1 PID: 28427 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0 [ 2310.860022][T28427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2310.870203][T28427] Call Trace: [ 2310.873505][T28427] dump_stack+0x188/0x20d [ 2310.877861][T28427] dump_header+0x10b/0x826 [ 2310.882288][T28427] oom_kill_process.cold+0x10/0x15 [ 2310.887513][T28427] out_of_memory+0x31f/0x12f0 [ 2310.892296][T28427] ? oom_killer_disable+0x270/0x270 [ 2310.897533][T28427] ? mutex_trylock+0x246/0x2c0 [ 2310.902305][T28427] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2310.908998][T28427] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2310.915609][T28427] ? warn_alloc+0x110/0x110 [ 2310.920129][T28427] ? do_fast_syscall_32+0x270/0xe90 [ 2310.925347][T28427] __alloc_pages_nodemask+0x5d9/0x810 [ 2310.930764][T28427] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2310.937637][T28427] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2310.943572][T28427] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2310.949561][T28427] ? do_raw_spin_unlock+0x171/0x260 [ 2310.954793][T28427] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2310.961307][T28427] alloc_pages_current+0xff/0x200 [ 2310.966356][T28427] __vmalloc_node_range+0x478/0x7a0 [ 2310.971568][T28427] ? ebt_register_table+0x1e6/0xc70 [ 2310.976771][T28427] vmalloc+0x67/0x80 [ 2310.980672][T28427] ? ebt_register_table+0x1e6/0xc70 [ 2310.985911][T28427] ebt_register_table+0x1e6/0xc70 [ 2310.990944][T28427] ? ebt_broute+0x700/0x700 [ 2310.995483][T28427] ops_init+0xaf/0x420 [ 2310.999597][T28427] setup_net+0x2de/0x860 [ 2311.003850][T28427] ? ops_init+0x420/0x420 [ 2311.008190][T28427] copy_net_ns+0x293/0x590 [ 2311.012610][T28427] create_new_namespaces+0x3fb/0xb30 [ 2311.017913][T28427] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2311.023559][T28427] ksys_unshare+0x43d/0x8e0 [ 2311.028073][T28427] ? walk_process_tree+0x2c0/0x2c0 [ 2311.033213][T28427] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2311.039292][T28427] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2311.045110][T28427] ? trace_hardirqs_off_caller+0x55/0x230 18:52:04 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xe000000}, 0x0) [ 2311.050838][T28427] __ia32_sys_unshare+0x2c/0x40 [ 2311.055692][T28427] do_fast_syscall_32+0x270/0xe90 [ 2311.060724][T28427] entry_SYSENTER_compat+0x70/0x7f [ 2311.089030][T28418] device bond0 left promiscuous mode [ 2311.097376][T28418] device bond_slave_0 left promiscuous mode [ 2311.108281][T28427] Mem-Info: [ 2311.111594][T28427] active_anon:315001 inactive_anon:8346 isolated_anon:0 [ 2311.111594][T28427] active_file:2750 inactive_file:5934 isolated_file:0 [ 2311.111594][T28427] unevictable:14 dirty:25 writeback:0 unstable:0 [ 2311.111594][T28427] slab_reclaimable:20411 slab_unreclaimable:401687 [ 2311.111594][T28427] mapped:60936 shmem:8636 pagetables:30373 bounce:0 [ 2311.111594][T28427] free:703457 free_pcp:626 free_cma:0 [ 2311.119642][T28418] device bond_slave_1 left promiscuous mode [ 2311.152022][T28427] Node 0 active_anon:1098340kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217064kB dirty:20kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2311.186480][T28427] Node 0 DMA free:10288kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2311.217819][T28427] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2311.222662][T28418] bridge363: port 1(bond0) entered disabled state [ 2311.224962][T28427] Node 0 DMA32 free:116648kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1098216kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB writepending:20kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:18032kB pagetables:34824kB bounce:0kB free_pcp:2500kB local_pcp:1272kB free_cma:0kB [ 2311.264296][T28427] lowmem_reserve[]: 0 0 0 0 0 [ 2311.269204][T28427] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2311.300537][T28427] lowmem_reserve[]: 0 0 0 0 0 [ 2311.306263][T28427] Node 0 DMA: 12*4kB (UM) 14*8kB (UME) 7*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10288kB [ 2311.323669][T28427] Node 0 DMA32: 2224*4kB (UME) 1070*8kB (UME) 659*16kB (UME) 378*32kB (UME) 216*64kB (UME) 110*128kB (UME) 63*256kB (UME) 21*512kB (UM) 1*1024kB (U) 10*2048kB (M) 0*4096kB = 116384kB [ 2311.344307][T28427] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2311.356782][T28427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2311.367381][T28427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2311.377740][T28427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2311.388370][T28427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2311.399650][T28427] 17320 total pagecache pages 18:52:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xc000000}, 0x0) [ 2311.412999][T28427] 0 pages in swap cache [ 2311.425717][T28427] Swap cache stats: add 0, delete 0, find 0/0 [ 2311.449174][T28427] Free swap = 0kB [ 2311.452929][T28427] Total swap = 0kB [ 2311.471371][T28427] 1965979 pages RAM [ 2311.500724][T28427] 0 pages HighMem/MovableOnly 18:52:05 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xf000000}, 0x0) 18:52:05 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000180)="1f400be8a2a7f590002f9c323735c309d8b6bdf8e63e2d5a58d8bdc1fb9b2910cdf77f4bdb3d3501ab5a0b86a9595eb13633f866c83b9d50997c452387bddcbbe5b2a88bade9474b4260ed4a36219bb6dd69d2e2eeab4957a00fc1c3a698fb5457599b525bc2e08e35b4d7653d9f66deefa8de2f85cdcecd2eb6090cdd6807ed8976510cc0c22726e740eb517350b7ffb090", 0x92, r0}, 0x64) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) [ 2311.522539][T28427] 349380 pages reserved [ 2311.532688][T28478] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2311.548311][T28427] 0 pages cma reserved [ 2311.563096][T28427] Unreclaimable slab info: 18:52:05 executing program 5: set_mempolicy(0x4002, 0x0, 0x2) unshare(0x40000000) [ 2311.581100][T28427] Name Used Total [ 2311.609923][T28482] bridge364: port 1(bond0) entered blocking state [ 2311.619089][T28427] pid_3 1KB 7KB [ 2311.639131][T28482] bridge364: port 1(bond0) entered disabled state [ 2311.643860][T28427] pid_2 916KB 1113KB [ 2311.664545][T28482] device bond0 entered promiscuous mode [ 2311.667774][T28427] bio-3 0KB 7KB [ 2311.676847][T28482] device bond_slave_0 entered promiscuous mode [ 2311.694538][T28482] device bond_slave_1 entered promiscuous mode [ 2311.696084][T28427] AF_VSOCK 14KB 16KB [ 2311.726878][T28482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:52:05 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x10000000}, 0x0) [ 2311.748905][T28427] batadv_tl_cache 4KB 12KB [ 2311.780191][T28427] SMC 45KB 49KB [ 2311.821849][T28427] TIPC 693KB 702KB [ 2311.840546][T28427] rds_tcp_connection 10KB 11KB [ 2311.859851][T28427] RDS 18KB 18KB [ 2311.879377][T28427] rds_connection 0KB 3KB [ 2311.897757][T28427] SCTPv6 1207KB 1211KB [ 2311.905229][T28427] SCTP 198KB 232KB [ 2311.911842][T28427] sctp_chunk 7KB 7KB [ 2311.922002][T28427] sctp_bind_bucket 0KB 3KB [ 2311.929542][T28427] DCCPv6 1071KB 1173KB [ 2311.939693][T28427] DCCP 994KB 1089KB [ 2311.947339][T28427] L2TP/IPv6 6KB 6KB [ 2311.957872][T28427] L2TP/IP 23KB 23KB [ 2311.966018][T28427] KCM 17KB 19KB [ 2311.972590][T28427] kcm_mux_cache 7KB 7KB [ 2311.982562][T28427] RXRPC 727KB 789KB [ 2311.989999][T28427] rxrpc_call_jar 4356KB 4451KB [ 2312.000031][T28427] bridge_fdb_cache 66KB 74KB [ 2312.007506][T28427] MPTCPv6 35KB 38KB [ 2312.018125][T28427] fib6_nodes 175KB 184KB [ 2312.036888][T28427] ip6_dst_cache 289KB 423KB [ 2312.053249][T28427] PINGv6 1KB 3KB [ 2312.072736][T28427] RAWv6 5073KB 5089KB [ 2312.084638][T28427] UDPLITEv6 19KB 19KB [ 2312.091243][T28427] UDPv6 1003KB 1077KB [ 2312.102350][T28427] TCPv6 1267KB 1292KB [ 2312.111888][T28427] nf_conntrack 10KB 37KB [ 2312.124886][T28427] sd_ext_cdb 0KB 7KB [ 2312.131854][T28427] scsi_sense_cache 1056KB 1064KB [ 2312.147607][T28427] virtio_scsi_cmd 16KB 16KB [ 2312.158104][T28427] sgpool-128 8KB 8KB [ 2312.168798][T28427] sgpool-64 4KB 12KB [ 2312.179329][T28427] sgpool-32 3KB 15KB [ 2312.191796][T28427] sgpool-16 26KB 30KB [ 2312.202477][T28427] sgpool-8 35KB 52KB [ 2312.213224][T28427] mqueue_inode_cache 57KB 62KB [ 2312.226727][T28427] f2fs_bio_post_read_ctx 16KB 16KB [ 2312.237987][T28427] jfs_mp 7KB 7KB [ 2312.248577][T28427] cifs_small_rq 15KB 16KB [ 2312.259229][T28427] cifs_request 67KB 67KB [ 2312.269942][T28427] cifs_mpx_ids 0KB 8KB [ 2312.280834][T28427] nfs_commit_data 3KB 7KB [ 2312.291506][T28427] nfs_write_data 34KB 44KB [ 2312.302792][T28427] ext4_system_zone 1KB 7KB [ 2312.313489][T28427] ext4_io_end_vec 9KB 15KB [ 2312.326697][T28427] ext4_bio_post_read_ctx 15KB 15KB [ 2312.336804][T28427] io_kiocb 0KB 3KB [ 2312.343356][T28427] kioctx 21KB 23KB [ 2312.353490][T28427] aio_kiocb 6KB 7KB [ 2312.362869][T28427] userfaultfd_ctx_cache 2KB 4KB [ 2312.373603][T28427] bio-2 1KB 7KB [ 2312.382921][T28427] fasync_cache 1KB 3KB [ 2312.392304][T28427] pid_namespace 8KB 11KB [ 2312.401611][T28427] posix_timers_cache 7KB 11KB [ 2312.411344][T28427] kvm_vcpu 0KB 70KB [ 2312.422052][T28427] kvm_mmu_page_header 58KB 61KB [ 2312.432326][T28427] pte_list_desc 2KB 3KB [ 2312.442109][T28427] x86_emulator 51KB 54KB [ 2312.451692][T28427] x86_fpu 0KB 43KB [ 2312.461272][T28427] rpc_buffers 17KB 25KB [ 2312.475517][T28427] rpc_tasks 2KB 7KB [ 2312.482080][T28427] UNIX 542KB 635KB [ 2312.492570][T28427] UDP-Lite 71KB 73KB [ 2312.501767][T28427] MPTCP 10KB 15KB [ 2312.511994][T28427] tcp_bind_bucket 40KB 40KB [ 2312.521560][T28427] inet_peer_cache 28KB 32KB [ 2312.531764][T28427] ip_fib_trie 24KB 31KB [ 2312.540685][T28427] ip_fib_alias 112KB 134KB [ 2312.550643][T28427] ip_dst_cache 98KB 168KB [ 2312.559513][T28427] PING 12KB 15KB [ 2312.569493][T28427] RAW 3085KB 3140KB [ 2312.578822][T28427] UDP 1036KB 1060KB [ 2312.589759][T28427] TCP 305KB 346KB [ 2312.598669][T28427] hugetlbfs_inode_cache 6KB 10KB [ 2312.609032][T28427] fscache_cookie_jar 1KB 7KB [ 2312.618090][T28427] bio-1 10KB 15KB [ 2312.628375][T28427] eventpoll_pwq 7KB 35KB [ 2312.637244][T28427] eventpoll_epi 13KB 39KB [ 2312.647545][T28427] inotify_inode_mark 4KB 7KB [ 2312.656579][T28427] request_queue 157KB 157KB [ 2312.663198][T28427] blkdev_ioc 11KB 19KB [ 2312.676958][T28427] bio-0 253KB 320KB [ 2312.683573][T28427] biovec-max 1411KB 1466KB [ 2312.692548][T28427] biovec-64 108KB 149KB [ 2312.702966][T28427] biovec-16 31KB 33KB [ 2312.712595][T28427] bio_integrity_payload 1KB 7KB [ 2312.723455][T28427] khugepaged_mm_slot 287KB 328KB [ 2312.732641][T28427] user_namespace 4KB 7KB [ 2312.743307][T28427] uid_cache 0KB 4KB [ 2312.765433][T28427] dmaengine-unmap-256 2KB 6KB [ 2312.773110][T28427] dmaengine-unmap-128 1KB 3KB [ 2312.787022][T28427] dmaengine-unmap-16 0KB 4KB [ 2312.795667][T28427] dmaengine-unmap-2 0KB 3KB [ 2312.802234][T28427] audit_buffer 0KB 3KB [ 2312.813326][T28427] skbuff_ext_cache 4KB 4KB [ 2312.821316][T28427] skbuff_fclone_cache 385KB 611KB [ 2312.839195][T28427] skbuff_head_cache 25361KB 40455KB [ 2312.847364][T28427] configfs_dir_cache 1KB 8KB [ 2312.858559][T28427] file_lock_cache 4KB 7KB [ 2312.866099][T28427] file_lock_ctx 8KB 11KB [ 2312.872687][T28427] fsnotify_mark_connector 1KB 8KB [ 2312.884738][T28427] net_namespace 3370KB 3435KB [ 2312.891232][T28427] task_delay_info 829KB 957KB [ 2312.902231][T28427] taskstats 597KB 691KB [ 2312.910548][T28427] proc_dir_entry 22609KB 22740KB [ 2312.921075][T28427] pde_opener 9KB 15KB [ 2312.929218][T28427] seq_file 36KB 63KB [ 2312.939670][T28427] sigqueue 1KB 3KB [ 2312.948028][T28427] shmem_inode_cache 10738KB 11348KB [ 2312.959126][T28427] kernfs_iattrs_cache 9KB 15KB [ 2312.968644][T28427] kernfs_node_cache 104035KB 104053KB [ 2312.979137][T28427] mnt_cache 355KB 363KB [ 2312.987362][T28427] filp 3676KB 4466KB [ 2312.997756][T28427] names_cache 35521KB 35534KB [ 2313.006221][T28427] iint_cache 28KB 66KB [ 2313.012796][T28427] lsm_file_cache 703KB 897KB [ 2313.024367][T28427] key_jar 27KB 43KB [ 2313.030919][T28427] uts_namespace 13KB 15KB [ 2313.042056][T28427] nsproxy 127KB 138KB [ 2313.050443][T28427] vm_area_struct 11926KB 13268KB [ 2313.060897][T28427] mm_struct 2327KB 2544KB [ 2313.069623][T28427] fs_cache 563KB 704KB [ 2313.080242][T28427] files_cache 1848KB 2190KB [ 2313.088899][T28427] signal_cache 5434KB 5778KB [ 2313.099430][T28427] sighand_cache 4155KB 4190KB [ 2313.107724][T28427] task_struct 21565KB 21623KB [ 2313.118321][T28427] cred_jar 1855KB 2112KB [ 2313.126700][T28427] anon_vma_chain 3696KB 4421KB [ 2313.133169][T28427] anon_vma 2962KB 3116KB [ 2313.145902][T28427] pid 380KB 461KB [ 2313.152005][T28427] Acpi-Operand 156KB 194KB [ 2313.160870][T28427] Acpi-ParseExt 9KB 11KB [ 2313.169426][T28427] Acpi-Parse 41KB 47KB [ 2313.178671][T28427] Acpi-State 52KB 63KB [ 2313.187276][T28427] Acpi-Namespace 23KB 27KB [ 2313.193449][T28427] shared_policy_node 0KB 3KB [ 2313.202651][T28427] numa_policy 6KB 23KB [ 2313.211272][T28427] trace_event_file 358KB 358KB [ 2313.219886][T28427] ftrace_event_field 491KB 496KB [ 2313.229631][T28427] pool_workqueue 948KB 948KB [ 2313.239269][T28427] vmap_area 1473KB 2338KB [ 2313.247844][T28427] debug_objects_cache 8075KB 8301KB [ 2313.256655][T28427] page->ptl 3274KB 3909KB [ 2313.262770][T28427] kmalloc-4M 4096KB 4096KB [ 2313.271889][T28427] kmalloc-1M 8192KB 8192KB [ 2313.280567][T28427] kmalloc-512k 4096KB 4096KB [ 2313.289541][T28427] kmalloc-256k 239616KB 239616KB [ 2313.298162][T28427] kmalloc-128k 18944KB 19200KB [ 2313.307968][T28427] kmalloc-64k 6656KB 7296KB [ 2313.316670][T28427] kmalloc-32k 53184KB 53184KB [ 2313.322757][T28427] kmalloc-16k 26400KB 26464KB [ 2313.331791][T28427] kmalloc-8k 51040KB 51040KB [ 2313.340599][T28427] kmalloc-4k 278320KB 278352KB [ 2313.349290][T28427] kmalloc-2k 166128KB 166180KB [ 2313.357979][T28427] kmalloc-1k 201662KB 242616KB [ 2313.366741][T28427] kmalloc-512 46811KB 48504KB [ 2313.372832][T28427] kmalloc-256 33463KB 33680KB [ 2313.381931][T28427] kmalloc-128 5752KB 5768KB [ 2313.390823][T28427] kmalloc-96 4435KB 4484KB [ 2313.399887][T28427] kmalloc-64 10573KB 10920KB [ 2313.408514][T28427] kmalloc-32 6900KB 7193KB [ 2313.417197][T28427] kmalloc-192 8713KB 8748KB [ 2313.426889][T28427] kmem_cache 442KB 444KB [ 2313.432988][T28427] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4637,uid=0 [ 2313.435209][T28487] IPVS: ftp: loaded support on port[0] = 21 [ 2313.452234][T28427] Out of memory: Killed process 4637 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2313.455750][T28489] IPVS: ftp: loaded support on port[0] = 21 [ 2313.611669][ T1144] oom_reaper: reaped process 28427 (syz-executor.0), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 2313.721176][ T1144] oom_reaper: reaped process 28487 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 18:52:08 executing program 0: set_mempolicy(0x3, &(0x7f0000000140)=0x10000101, 0x402) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000180)={0x9d0000, 0x0, 0x2, r2, 0x0, &(0x7f0000000100)={0x9b0972, 0x4, [], @p_u16=&(0x7f0000000080)=0x3}}) sendmsg$rds(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/193, 0xc1}, {&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f0000000200)=""/118, 0x76}], 0x3, &(0x7f0000000500)=[@rdma_dest={0x18, 0x114, 0x2, {0x80, 0x9}}], 0x18, 0x800}, 0x488c4) r4 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x497cf30e0120fc18, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r4, 0x80044121, &(0x7f0000000040)) unshare(0x40000000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$VT_DISALLOCATE(r5, 0x5608) 18:52:08 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x3f000000}, 0x0) 18:52:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xe000000}, 0x0) 18:52:08 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) syz_usb_connect$cdc_ecm(0x4, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x1, 0x2, 0x90, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0xd9, {{0xb, 0x24, 0x6, 0x0, 0x0, "2120050686be"}, {0x5, 0x24, 0x0, 0x3b}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0xa8f6, 0x40}, [@obex={0x5, 0x24, 0x15, 0x400}, @obex={0x5, 0x24, 0x15, 0x5}, @mbim={0xc, 0x24, 0x1b, 0xa6, 0x71, 0x44, 0x86, 0x1, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @acm={0x4, 0x24, 0x2, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x20, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0x3f, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x3f, 0xff}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1f, 0xff, 0x3, 0x20}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x4, [{0x75, &(0x7f0000000180)=@string={0x75, 0x3, "49b620904d8234cf476eb5fc31e0e09016a54aaaf592c9a05af03c444db6a1ebea6782560439349e2eaf268593671484314ecc1aae90e7eb04e2ea9dc7659034890dab8b3bd0c960c18e917b259169b4455e214b74d9de73652e9504b692607cc1247a80a5aa7d736ed6c74c4ffe1547a9c0ec"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0x30, &(0x7f0000000240)=@string={0x30, 0x3, "44804c6623ce103e29b2614b4fff16610e75045ac70c86d71dc6992e7c7db91fc10a7b54f03da8c054e7d9233e5d"}}]}) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) 18:52:08 executing program 5: set_mempolicy(0x4002, 0x0, 0x2) unshare(0x40000000) 18:52:08 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x41c080, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@any, 0xb, 0x46, 0x7b9}) tkill(0x0, 0x36) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000e40)=0xe4) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='./file0\x00', r1, r2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000e40)=0xe4) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='./file0\x00', r4, r5) r6 = getegid() getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) setgroups(0x5, &(0x7f0000000340)=[r5, r6, 0xee00, 0x0, r7]) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, r1, r7}, 0xc) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) [ 2314.872751][T28541] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2314.888241][T28543] IPVS: ftp: loaded support on port[0] = 21 [ 2314.895747][T28542] IPVS: ftp: loaded support on port[0] = 21 [ 2314.919351][T28545] IPVS: ftp: loaded support on port[0] = 21 [ 2314.946300][T28550] device bond0 left promiscuous mode [ 2314.955213][T28550] device bond_slave_0 left promiscuous mode [ 2314.962737][T28549] IPVS: ftp: loaded support on port[0] = 21 [ 2314.969515][T28550] device bond_slave_1 left promiscuous mode [ 2314.984335][T28545] syz-executor.1 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2314.995903][T28550] bridge364: port 1(bond0) entered disabled state [ 2315.007973][T28545] CPU: 0 PID: 28545 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 2315.018203][T28545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2315.030085][T28545] Call Trace: [ 2315.033381][T28545] dump_stack+0x188/0x20d [ 2315.037701][T28545] dump_header+0x10b/0x826 [ 2315.042149][T28545] oom_kill_process.cold+0x10/0x15 [ 2315.047270][T28545] out_of_memory+0x31f/0x12f0 [ 2315.051961][T28545] ? oom_killer_disable+0x270/0x270 [ 2315.057168][T28545] ? mutex_trylock+0x246/0x2c0 [ 2315.062050][T28545] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2315.068748][T28545] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2315.075335][T28545] ? warn_alloc+0x110/0x110 [ 2315.079844][T28545] ? do_fast_syscall_32+0x270/0xe90 [ 2315.085059][T28545] __alloc_pages_nodemask+0x5d9/0x810 [ 2315.090470][T28545] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2315.097756][T28545] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2315.103568][T28545] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2315.109629][T28545] ? do_raw_spin_unlock+0x171/0x260 [ 2315.115028][T28545] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2315.121538][T28545] alloc_pages_current+0xff/0x200 [ 2315.126979][T28545] __vmalloc_node_range+0x478/0x7a0 [ 2315.132319][T28545] ? ebt_register_table+0x1e6/0xc70 [ 2315.137655][T28545] vmalloc+0x67/0x80 [ 2315.141649][T28545] ? ebt_register_table+0x1e6/0xc70 [ 2315.146850][T28545] ebt_register_table+0x1e6/0xc70 [ 2315.151868][T28545] ? ebt_broute+0x700/0x700 [ 2315.156585][T28545] ops_init+0xaf/0x420 [ 2315.160707][T28545] setup_net+0x2de/0x860 [ 2315.165065][T28545] ? ops_init+0x420/0x420 [ 2315.169391][T28545] copy_net_ns+0x293/0x590 [ 2315.173927][T28545] create_new_namespaces+0x3fb/0xb30 [ 2315.179362][T28545] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2315.185027][T28545] ksys_unshare+0x43d/0x8e0 [ 2315.189641][T28545] ? walk_process_tree+0x2c0/0x2c0 [ 2315.194832][T28545] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2315.201434][T28545] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2315.207319][T28545] ? trace_hardirqs_off_caller+0x55/0x230 [ 2315.213083][T28545] __ia32_sys_unshare+0x2c/0x40 [ 2315.217947][T28545] do_fast_syscall_32+0x270/0xe90 [ 2315.222993][T28545] entry_SYSENTER_compat+0x70/0x7f [ 2315.233882][T28545] Mem-Info: [ 2315.238646][T28545] active_anon:314994 inactive_anon:8346 isolated_anon:0 [ 2315.238646][T28545] active_file:2750 inactive_file:5955 isolated_file:0 [ 2315.238646][T28545] unevictable:14 dirty:5 writeback:0 unstable:0 [ 2315.238646][T28545] slab_reclaimable:20401 slab_unreclaimable:400419 [ 2315.238646][T28545] mapped:60950 shmem:8636 pagetables:30335 bounce:0 [ 2315.238646][T28545] free:704929 free_pcp:386 free_cma:0 [ 2315.279692][T28545] Node 0 active_anon:1098232kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217064kB dirty:8kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 964608kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2315.308836][T28545] Node 0 DMA free:10276kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2315.340721][T28545] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2315.346613][T28545] Node 0 DMA32 free:116560kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1098108kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB writepending:8kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:18000kB pagetables:34724kB bounce:0kB free_pcp:1544kB local_pcp:968kB free_cma:0kB [ 2315.354034][T28550] bridge365: port 1(bond0) entered blocking state [ 2315.380643][T28545] lowmem_reserve[]: 0 0 0 0 0 [ 2315.392649][T28545] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2315.395600][T28550] bridge365: port 1(bond0) entered disabled state [ 2315.431065][T28545] lowmem_reserve[]: 0 0 0 0 0 [ 2315.435744][T28550] device bond0 entered promiscuous mode [ 2315.437205][T28545] Node 0 DMA: 8*4kB (ME) 11*8kB (UM) 8*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10264kB [ 2315.442096][T28550] device bond_slave_0 entered promiscuous mode [ 2315.460303][T28545] Node 0 DMA32: 2224*4kB (UME) 1156*8kB (UME) 670*16kB (UME) 429*32kB (UME) 224*64kB (UME) 110*128kB (UME) 64*256kB (UME) 20*512kB (M) 1*1024kB (U) 9*2048kB (UM) 0*4096kB = 117088kB [ 2315.468638][T28550] device bond_slave_1 entered promiscuous mode [ 2315.483313][T28545] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2315.501365][T28545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2315.512979][T28545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2315.523618][T28545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2315.535578][T28545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 18:52:09 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x60000000}, 0x0) [ 2315.548279][T28545] 17341 total pagecache pages [ 2315.553259][T28550] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2315.555333][T28545] 0 pages in swap cache [ 2315.573252][T28545] Swap cache stats: add 0, delete 0, find 0/0 [ 2315.581228][T28545] Free swap = 0kB [ 2315.591519][T28545] Total swap = 0kB [ 2315.597897][T28545] 1965979 pages RAM [ 2315.602591][T28545] 0 pages HighMem/MovableOnly [ 2315.613391][T28545] 349380 pages reserved [ 2315.619031][T28545] 0 pages cma reserved [ 2315.628100][T28545] Unreclaimable slab info: [ 2315.633386][T28545] Name Used Total [ 2315.642924][T28545] pid_3 1KB 7KB 18:52:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x10000000}, 0x0) [ 2315.651813][T28545] pid_2 916KB 1113KB [ 2315.659880][T28545] bio-3 0KB 7KB [ 2315.668510][T28545] AF_VSOCK 14KB 16KB [ 2315.710538][T28545] batadv_tl_cache 4KB 12KB [ 2315.747932][T28545] SMC 45KB 49KB [ 2315.768820][T28545] TIPC 692KB 702KB [ 2315.792236][T28622] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:52:09 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x65580000}, 0x0) [ 2315.818355][T28545] rds_tcp_connection 10KB 11KB [ 2315.834595][T28622] device bond0 left promiscuous mode [ 2315.842652][T28622] device bond_slave_0 left promiscuous mode [ 2315.851347][T28622] device bond_slave_1 left promiscuous mode [ 2315.854418][T28545] RDS 18KB 18KB 18:52:09 executing program 5: set_mempolicy(0x4002, 0x0, 0x2) unshare(0x40000000) [ 2315.861040][T28622] bridge365: port 1(bond0) entered disabled state [ 2315.876976][T28545] rds_connection 0KB 3KB [ 2315.889018][T28545] SCTPv6 1211KB 1217KB [ 2315.897599][T28545] SCTP 198KB 232KB [ 2315.909770][T28545] sctp_chunk 7KB 7KB [ 2315.918187][T28545] sctp_bind_bucket 0KB 3KB [ 2315.929286][T28545] DCCPv6 1086KB 1189KB [ 2315.936060][T28545] DCCP 1009KB 1104KB [ 2315.942178][T28545] L2TP/IPv6 6KB 6KB [ 2315.951778][T28545] L2TP/IP 23KB 23KB [ 2315.962554][T28545] KCM 17KB 19KB [ 2315.970519][T28622] bridge366: port 1(bond0) entered blocking state [ 2315.977576][T28545] kcm_mux_cache 7KB 7KB [ 2315.984567][T28622] bridge366: port 1(bond0) entered disabled state [ 2315.992387][T28622] device bond0 entered promiscuous mode [ 2315.998799][T28545] RXRPC 725KB 789KB [ 2316.005267][T28622] device bond_slave_0 entered promiscuous mode [ 2316.005781][T28545] rxrpc_call_jar 4328KB 4413KB 18:52:09 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x81000000}, 0x0) [ 2316.012300][T28622] device bond_slave_1 entered promiscuous mode [ 2316.019638][T28545] bridge_fdb_cache 74KB 74KB [ 2316.032114][T28545] MPTCPv6 35KB 38KB [ 2316.039087][T28545] fib6_nodes 175KB 184KB [ 2316.045864][T28545] ip6_dst_cache 288KB 423KB [ 2316.052238][T28628] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:52:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x20000000}, 0x0) [ 2316.073269][T28545] PINGv6 1KB 3KB [ 2316.079768][T28545] RAWv6 5094KB 5131KB [ 2316.086387][T28545] UDPLITEv6 19KB 19KB [ 2316.092874][T28545] UDPv6 962KB 1057KB [ 2316.099867][T28545] TCPv6 1292KB 1310KB [ 2316.106583][T28545] nf_conntrack 9KB 37KB [ 2316.113934][T28545] sd_ext_cdb 0KB 7KB [ 2316.120477][T28545] scsi_sense_cache 1056KB 1064KB [ 2316.132141][T28635] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2316.137152][T28545] virtio_scsi_cmd 16KB 16KB [ 2316.164453][T28635] device bond0 left promiscuous mode [ 2316.165701][T28545] sgpool-128 8KB 8KB [ 2316.170345][T28635] device bond_slave_0 left promiscuous mode [ 2316.177202][T28545] sgpool-64 4KB 12KB [ 2316.188002][T28635] device bond_slave_1 left promiscuous mode [ 2316.188698][T28545] sgpool-32 3KB 15KB [ 2316.196116][T28635] bridge366: port 1(bond0) entered disabled state [ 2316.204433][T28545] sgpool-16 25KB 30KB [ 2316.215657][T28545] sgpool-8 32KB 52KB [ 2316.222053][T28545] mqueue_inode_cache 56KB 62KB [ 2316.229841][T28545] f2fs_bio_post_read_ctx 16KB 16KB [ 2316.239430][T28545] jfs_mp 7KB 7KB [ 2316.247009][T28545] cifs_small_rq 15KB 16KB [ 2316.253089][T28545] cifs_request 67KB 67KB [ 2316.261742][T28545] cifs_mpx_ids 0KB 8KB [ 2316.269091][T28545] nfs_commit_data 3KB 7KB [ 2316.278873][T28545] nfs_write_data 34KB 44KB [ 2316.286748][T28545] ext4_system_zone 1KB 7KB [ 2316.292837][T28545] ext4_io_end_vec 8KB 15KB [ 2316.293815][T28635] bridge367: port 1(bond0) entered blocking state [ 2316.305527][T28545] ext4_bio_post_read_ctx 15KB 15KB [ 2316.308360][T28635] bridge367: port 1(bond0) entered disabled state [ 2316.315607][T28545] io_kiocb 0KB 3KB [ 2316.324719][T28635] device bond0 entered promiscuous mode [ 2316.330464][T28545] kioctx 21KB 23KB [ 2316.333498][T28635] device bond_slave_0 entered promiscuous mode [ 2316.340390][T28545] aio_kiocb 6KB 7KB [ 2316.346685][T28635] device bond_slave_1 entered promiscuous mode [ 2316.361442][T28545] userfaultfd_ctx_cache 2KB 4KB [ 2316.368998][T28545] bio-2 1KB 7KB [ 2316.373978][T28639] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2316.379832][T28545] fasync_cache 1KB 3KB [ 2316.385862][T28635] device bond0 left promiscuous mode [ 2316.392238][T28545] pid_namespace 5KB 11KB [ 2316.398784][T28635] device bond_slave_0 left promiscuous mode [ 2316.407224][T28545] posix_timers_cache 7KB 11KB [ 2316.409660][T28635] device bond_slave_1 left promiscuous mode [ 2316.416836][T28545] kvm_vcpu 0KB 70KB [ 2316.421869][T28635] bridge367: port 1(bond0) entered disabled state [ 2316.432383][T28545] kvm_mmu_page_header 58KB 61KB [ 2316.440148][T28545] pte_list_desc 2KB 3KB [ 2316.446665][T28545] x86_emulator 51KB 54KB [ 2316.452912][T28545] x86_fpu 0KB 43KB [ 2316.459509][T28545] rpc_buffers 17KB 25KB [ 2316.467086][T28545] rpc_tasks 2KB 7KB [ 2316.473427][T28545] UNIX 503KB 620KB [ 2316.479526][T28545] UDP-Lite 71KB 73KB [ 2316.486095][T28545] MPTCP 10KB 15KB [ 2316.492181][T28545] tcp_bind_bucket 40KB 40KB [ 2316.498333][T28545] inet_peer_cache 28KB 32KB [ 2316.504583][T28545] ip_fib_trie 24KB 31KB [ 2316.510684][T28545] ip_fib_alias 112KB 134KB [ 2316.517161][T28545] ip_dst_cache 102KB 168KB [ 2316.523241][T28545] PING 12KB 15KB [ 2316.529359][T28545] RAW 3114KB 3164KB [ 2316.535597][T28545] UDP 1041KB 1064KB [ 2316.541669][T28545] TCP 305KB 346KB [ 2316.548223][T28545] hugetlbfs_inode_cache 6KB 10KB [ 2316.554742][T28545] fscache_cookie_jar 1KB 7KB [ 2316.560910][T28545] bio-1 10KB 15KB [ 2316.567049][T28545] eventpoll_pwq 7KB 35KB [ 2316.573114][T28545] eventpoll_epi 12KB 39KB [ 2316.581801][T28545] inotify_inode_mark 4KB 7KB [ 2316.590131][T28545] request_queue 157KB 157KB [ 2316.596902][T28545] blkdev_ioc 11KB 19KB [ 2316.603009][T28545] bio-0 247KB 320KB [ 2316.610132][T28545] biovec-max 1530KB 1530KB [ 2316.616893][T28545] biovec-64 108KB 149KB [ 2316.622972][T28545] biovec-16 31KB 33KB [ 2316.629801][T28545] bio_integrity_payload 1KB 7KB [ 2316.636865][T28545] khugepaged_mm_slot 287KB 328KB [ 2316.643035][T28545] user_namespace 4KB 7KB [ 2316.650039][T28545] uid_cache 0KB 4KB [ 2316.657381][T28545] dmaengine-unmap-256 2KB 6KB [ 2316.664262][T28545] dmaengine-unmap-128 1KB 3KB [ 2316.670854][T28545] dmaengine-unmap-16 0KB 4KB [ 2316.678171][T28545] dmaengine-unmap-2 0KB 3KB [ 2316.685933][T28545] audit_buffer 0KB 3KB [ 2316.692041][T28545] skbuff_ext_cache 2KB 4KB [ 2316.699167][T28545] skbuff_fclone_cache 384KB 585KB [ 2316.706051][T28545] skbuff_head_cache 25437KB 40406KB [ 2316.712258][T28545] configfs_dir_cache 1KB 8KB [ 2316.719198][T28545] file_lock_cache 4KB 7KB [ 2316.725977][T28545] file_lock_ctx 8KB 11KB [ 2316.732066][T28545] fsnotify_mark_connector 1KB 8KB [ 2316.739539][T28545] net_namespace 3392KB 3464KB [ 2316.746754][T28545] task_delay_info 810KB 957KB [ 2316.752842][T28545] taskstats 597KB 691KB [ 2316.759841][T28545] proc_dir_entry 22657KB 22792KB [ 2316.766497][T28545] pde_opener 8KB 15KB [ 2316.772581][T28545] seq_file 29KB 63KB [ 2316.779608][T28545] sigqueue 1KB 3KB [ 2316.786272][T28545] shmem_inode_cache 10738KB 11348KB [ 2316.792351][T28545] kernfs_iattrs_cache 9KB 15KB [ 2316.800777][T28545] kernfs_node_cache 104829KB 104831KB [ 2316.808000][T28545] mnt_cache 355KB 363KB [ 2316.814840][T28545] filp 3457KB 4466KB [ 2316.821026][T28545] names_cache 32104KB 32104KB [ 2316.831328][T28545] iint_cache 28KB 66KB [ 2316.838204][T28545] lsm_file_cache 670KB 897KB [ 2316.845088][T28545] key_jar 27KB 43KB [ 2316.851194][T28545] uts_namespace 7KB 15KB [ 2316.858381][T28545] nsproxy 127KB 138KB [ 2316.865099][T28545] vm_area_struct 11919KB 13256KB [ 2316.871171][T28545] mm_struct 2325KB 2538KB [ 2316.878194][T28545] fs_cache 563KB 704KB [ 2316.885017][T28545] files_cache 1848KB 2190KB [ 2316.891088][T28545] signal_cache 5492KB 5778KB [ 2316.898002][T28545] sighand_cache 4155KB 4190KB [ 2316.906761][T28545] task_struct 22022KB 22048KB [ 2316.913107][T28545] cred_jar 1765KB 2112KB [ 2316.920263][T28545] anon_vma_chain 3696KB 4421KB [ 2316.926953][T28545] anon_vma 2960KB 3116KB [ 2316.933034][T28545] pid 380KB 461KB [ 2316.940243][T28545] Acpi-Operand 156KB 194KB [ 2316.946867][T28545] Acpi-ParseExt 9KB 11KB [ 2316.952970][T28545] Acpi-Parse 41KB 47KB [ 2316.960589][T28545] Acpi-State 52KB 63KB [ 2316.967245][T28545] Acpi-Namespace 23KB 27KB [ 2316.973960][T28545] shared_policy_node 0KB 3KB [ 2316.980116][T28545] numa_policy 6KB 23KB [ 2316.987392][T28545] trace_event_file 358KB 358KB [ 2316.994106][T28545] ftrace_event_field 491KB 496KB [ 2317.000459][T28545] pool_workqueue 958KB 960KB [ 2317.007489][T28545] vmap_area 1535KB 2338KB [ 2317.015314][T28545] debug_objects_cache 8061KB 8301KB [ 2317.021820][T28545] page->ptl 3274KB 3909KB [ 2317.029014][T28545] kmalloc-4M 4096KB 4096KB [ 2317.035739][T28545] kmalloc-1M 8192KB 8192KB [ 2317.041802][T28545] kmalloc-512k 4096KB 4096KB [ 2317.048643][T28545] kmalloc-256k 240640KB 241664KB [ 2317.056051][T28545] kmalloc-128k 18944KB 19200KB [ 2317.062159][T28545] kmalloc-64k 6656KB 7296KB [ 2317.069468][T28545] kmalloc-32k 53568KB 53632KB [ 2317.076302][T28545] kmalloc-16k 26624KB 26624KB [ 2317.082366][T28545] kmalloc-8k 51392KB 51392KB [ 2317.089348][T28545] kmalloc-4k 276656KB 276688KB [ 2317.095994][T28545] kmalloc-2k 166876KB 166924KB [ 2317.102073][T28545] kmalloc-1k 203270KB 242580KB [ 2317.109268][T28545] kmalloc-512 47072KB 48500KB [ 2317.116126][T28545] kmalloc-256 33632KB 33868KB [ 2317.122596][T28545] kmalloc-128 5790KB 5808KB [ 2317.131745][T28545] kmalloc-96 4450KB 4484KB [ 2317.138612][T28545] kmalloc-64 10633KB 10928KB [ 2317.145467][T28545] kmalloc-32 6937KB 7193KB [ 2317.151549][T28545] kmalloc-192 8780KB 8808KB [ 2317.158390][T28545] kmem_cache 443KB 444KB [ 2317.165587][T28545] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4621,uid=0 [ 2317.168209][T28557] IPVS: ftp: loaded support on port[0] = 21 [ 2317.181172][T28545] Out of memory: Killed process 4621 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2317.188084][T28630] IPVS: ftp: loaded support on port[0] = 21 [ 2317.215818][T28542] IPVS: ftp: loaded support on port[0] = 21 [ 2317.223886][ T1144] oom_reaper: reaped process 28545 (syz-executor.1), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 2317.308221][ T1144] oom_reaper: reaped process 28542 (syz-executor.4), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB 18:52:11 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000e40)=0xe4) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='./file0\x00', r4, r5) r6 = getegid() getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) setgroups(0x5, &(0x7f0000000340)=[r5, r6, 0xee00, 0x0, r7]) write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, 0x5, {0x0, 0x2, 0x0, {0x6, 0x3, 0x613, 0x6, 0x3, 0x5c, 0x2c9b, 0x3, 0x9, 0x5, 0xff, r2, r7, 0x82, 0x6}}}, 0x78) unshare(0x40000000) 18:52:11 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x88a8ffff}, 0x0) 18:52:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x3f000000}, 0x0) [ 2317.430198][T28698] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2317.459801][T28698] bridge368: port 1(bond0) entered blocking state [ 2317.474340][T28698] bridge368: port 1(bond0) entered disabled state [ 2317.486852][T28698] device bond0 entered promiscuous mode [ 2317.492526][T28705] syz-executor.0 invoked oom-killer: gfp_mask=0x100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2317.510836][T28698] device bond_slave_0 entered promiscuous mode [ 2317.519661][T28698] device bond_slave_1 entered promiscuous mode [ 2317.530116][T28705] CPU: 0 PID: 28705 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0 [ 2317.538848][T28705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2317.548952][T28705] Call Trace: [ 2317.552259][T28705] dump_stack+0x188/0x20d [ 2317.556608][T28705] dump_header+0x10b/0x826 [ 2317.561049][T28705] oom_kill_process.cold+0x10/0x15 [ 2317.566181][T28705] out_of_memory+0x31f/0x12f0 [ 2317.570879][T28705] ? oom_killer_disable+0x270/0x270 [ 2317.576203][T28705] ? mutex_trylock+0x246/0x2c0 [ 2317.581096][T28705] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2317.587808][T28705] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2317.594689][T28705] ? warn_alloc+0x110/0x110 [ 2317.600004][T28705] ? futex_wake+0x153/0x480 [ 2317.604624][T28705] ? perf_trace_lock_acquire+0xf5/0x530 [ 2317.610389][T28705] ? debug_smp_processor_id+0x2f/0x185 [ 2317.616307][T28705] __alloc_pages_nodemask+0x5d9/0x810 [ 2317.621787][T28705] ? perf_trace_lock+0x4c0/0x4c0 [ 2317.626745][T28705] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2317.633649][T28705] ? debug_smp_processor_id+0x2f/0x185 [ 2317.639129][T28705] ? perf_trace_lock_acquire+0xf5/0x530 [ 2317.644720][T28705] ? pmd_val+0x7c/0xf0 [ 2317.648846][T28705] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2317.655273][T28705] alloc_pages_vma+0xd9/0x600 [ 2317.659970][T28705] __handle_mm_fault+0x1f8b/0x3c90 [ 2317.665244][T28705] ? vm_insert_pages+0x6a0/0x6a0 [ 2317.670204][T28705] ? __this_cpu_preempt_check+0x84/0x190 [ 2317.675858][T28705] ? __count_memcg_events+0x7a/0x190 [ 2317.681172][T28705] handle_mm_fault+0x1a5/0x660 [ 2317.685962][T28705] do_page_fault+0x55b/0x13da [ 2317.690660][T28705] page_fault+0x39/0x40 [ 2317.694822][T28705] RIP: 0023:0x8087c5f [ 2317.698826][T28705] Code: 00 81 c4 b0 00 00 00 5b 5e 5f c3 e8 1b 04 00 00 66 90 66 90 66 90 66 90 66 90 90 83 ec 0c 8d 44 24 24 83 ec 08 50 ff 74 24 2c 74 24 2c ff 74 24 2c ff 74 24 2c ff 74 24 2c e8 0c 00 00 00 83 [ 2317.718524][T28705] RSP: 002b:00000000f5d17000 EFLAGS: 00010292 [ 2317.724689][T28705] RAX: 00000000f5d17034 RBX: 000000000819af60 RCX: 00000000bbe4072a [ 2317.732864][T28705] RDX: 00000000f5d17a88 RSI: 0000000008115358 RDI: 00000000f5d170cc [ 2317.740875][T28705] RBP: 00000000f5d17168 R08: 0000000000000000 R09: 0000000000000000 [ 2317.748958][T28705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2317.757064][T28705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2317.824513][T28709] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2318.076870][T28705] Mem-Info: [ 2318.080065][T28705] active_anon:313881 inactive_anon:8346 isolated_anon:0 [ 2318.080065][T28705] active_file:2751 inactive_file:5975 isolated_file:0 [ 2318.080065][T28705] unevictable:14 dirty:10 writeback:0 unstable:0 [ 2318.080065][T28705] slab_reclaimable:20412 slab_unreclaimable:401092 [ 2318.080065][T28705] mapped:60961 shmem:8636 pagetables:30260 bounce:0 [ 2318.080065][T28705] free:705177 free_pcp:251 free_cma:0 [ 2318.128554][T28705] Node 0 active_anon:1094028kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217068kB dirty:12kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 962560kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2318.203309][T28705] Node 0 DMA free:10264kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2318.273342][T28705] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2318.280284][T28705] Node 0 DMA32 free:116752kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1093904kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB writepending:12kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:17972kB pagetables:34624kB bounce:0kB free_pcp:1216kB local_pcp:552kB free_cma:0kB [ 2318.340977][T28705] lowmem_reserve[]: 0 0 0 0 0 [ 2318.363500][T28705] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2318.423672][T28705] lowmem_reserve[]: 0 0 0 0 0 [ 2318.428399][T28705] Node 0 DMA: 8*4kB (ME) 11*8kB (UM) 8*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10264kB [ 2318.450098][T28705] Node 0 DMA32: 1972*4kB (UME) 1041*8kB (UME) 589*16kB (ME) 372*32kB (UME) 221*64kB (UME) 115*128kB (UME) 65*256kB (UME) 21*512kB (UM) 0*1024kB 9*2048kB (UM) 1*4096kB (M) = 116328kB [ 2318.471815][T28705] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2318.484264][T28705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2318.495497][T28705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2318.510462][T28705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2318.522174][T28705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2318.532528][T28705] 17364 total pagecache pages [ 2318.538112][T28705] 0 pages in swap cache [ 2318.542277][T28705] Swap cache stats: add 0, delete 0, find 0/0 [ 2318.550282][T28705] Free swap = 0kB [ 2318.555064][T28705] Total swap = 0kB [ 2318.558828][T28705] 1965979 pages RAM [ 2318.562626][T28705] 0 pages HighMem/MovableOnly [ 2318.568966][T28705] 349380 pages reserved [ 2318.576338][T28705] 0 pages cma reserved [ 2318.580422][T28705] Unreclaimable slab info: [ 2318.586987][T28705] Name Used Total [ 2318.595008][T28705] pid_3 1KB 7KB [ 2318.601097][T28705] pid_2 916KB 1113KB [ 2318.609502][T28705] bio-3 0KB 7KB [ 2318.616654][T28705] AF_VSOCK 14KB 16KB [ 2318.623003][T28705] batadv_tl_cache 4KB 12KB [ 2318.630308][T28705] SMC 45KB 49KB [ 2318.637455][T28705] TIPC 698KB 708KB [ 2318.644309][T28705] rds_tcp_connection 10KB 11KB [ 2318.650476][T28705] RDS 18KB 18KB [ 2318.657778][T28705] rds_connection 0KB 3KB [ 2318.665331][T28705] SCTPv6 930KB 1013KB [ 2318.672152][T28705] SCTP 198KB 232KB [ 2318.679159][T28705] sctp_chunk 7KB 7KB [ 2318.687828][T28705] sctp_bind_bucket 0KB 3KB [ 2318.694731][T28705] DCCPv6 1097KB 1197KB [ 2318.700808][T28705] DCCP 1018KB 1111KB [ 2318.708532][T28705] L2TP/IPv6 6KB 6KB [ 2318.715434][T28705] L2TP/IP 23KB 23KB [ 2318.721724][T28705] KCM 17KB 19KB [ 2318.728809][T28705] kcm_mux_cache 7KB 7KB [ 2318.735662][T28705] RXRPC 725KB 789KB [ 2318.741819][T28705] rxrpc_call_jar 4328KB 4413KB [ 2318.749536][T28705] bridge_fdb_cache 74KB 74KB [ 2318.756209][T28705] MPTCPv6 35KB 38KB [ 2318.762407][T28705] fib6_nodes 175KB 184KB [ 2318.770283][T28705] ip6_dst_cache 288KB 423KB [ 2318.776945][T28705] PINGv6 1KB 3KB [ 2318.783009][T28705] RAWv6 5104KB 5141KB [ 2318.789913][T28705] UDPLITEv6 19KB 19KB [ 2318.797653][T28705] UDPv6 962KB 1057KB [ 2318.804367][T28705] TCPv6 1292KB 1310KB [ 2318.810444][T28705] nf_conntrack 9KB 37KB [ 2318.817580][T28705] sd_ext_cdb 0KB 7KB [ 2318.824407][T28705] scsi_sense_cache 1056KB 1064KB [ 2318.830505][T28705] virtio_scsi_cmd 16KB 16KB [ 2318.837964][T28705] sgpool-128 8KB 8KB [ 2318.844707][T28705] sgpool-64 4KB 12KB [ 2318.850812][T28705] sgpool-32 3KB 15KB [ 2318.857947][T28705] sgpool-16 25KB 30KB [ 2318.864744][T28705] sgpool-8 32KB 52KB [ 2318.870832][T28705] mqueue_inode_cache 56KB 62KB [ 2318.878171][T28705] f2fs_bio_post_read_ctx 16KB 16KB [ 2318.885384][T28705] jfs_mp 7KB 7KB [ 2318.891584][T28705] cifs_small_rq 15KB 16KB [ 2318.898904][T28705] cifs_request 67KB 67KB [ 2318.910629][T28705] cifs_mpx_ids 0KB 8KB [ 2318.917798][T28705] nfs_commit_data 3KB 7KB [ 2318.924455][T28705] nfs_write_data 34KB 44KB [ 2318.930581][T28705] ext4_system_zone 1KB 7KB [ 2318.936749][T28705] ext4_io_end_vec 8KB 15KB [ 2318.942810][T28705] ext4_bio_post_read_ctx 15KB 15KB [ 2318.949454][T28705] io_kiocb 0KB 3KB [ 2318.955683][T28705] kioctx 21KB 23KB [ 2318.961748][T28705] aio_kiocb 6KB 7KB [ 2318.968372][T28705] userfaultfd_ctx_cache 2KB 4KB [ 2318.974891][T28705] bio-2 1KB 7KB [ 2318.980960][T28705] fasync_cache 1KB 3KB [ 2318.987338][T28705] pid_namespace 5KB 11KB [ 2318.993613][T28705] posix_timers_cache 7KB 11KB [ 2318.999839][T28705] kvm_vcpu 0KB 70KB [ 2319.006043][T28705] kvm_mmu_page_header 58KB 61KB [ 2319.012431][T28705] pte_list_desc 2KB 3KB [ 2319.020281][T28705] x86_emulator 51KB 54KB [ 2319.026588][T28705] x86_fpu 0KB 43KB [ 2319.032669][T28705] rpc_buffers 17KB 25KB [ 2319.038807][T28705] rpc_tasks 2KB 7KB [ 2319.044940][T28705] UNIX 503KB 620KB [ 2319.051132][T28705] UDP-Lite 71KB 73KB [ 2319.057519][T28705] MPTCP 10KB 15KB [ 2319.063999][T28705] tcp_bind_bucket 44KB 44KB [ 2319.070565][T28705] inet_peer_cache 28KB 32KB [ 2319.076750][T28705] ip_fib_trie 24KB 31KB [ 2319.082827][T28705] ip_fib_alias 112KB 134KB [ 2319.088967][T28705] ip_dst_cache 102KB 168KB [ 2319.095646][T28705] PING 12KB 15KB [ 2319.101739][T28705] RAW 3114KB 3164KB [ 2319.107919][T28705] UDP 1041KB 1064KB [ 2319.114074][T28705] TCP 305KB 346KB [ 2319.120237][T28705] hugetlbfs_inode_cache 6KB 10KB [ 2319.128326][T28705] fscache_cookie_jar 1KB 7KB [ 2319.134591][T28705] bio-1 10KB 15KB [ 2319.140690][T28705] eventpoll_pwq 7KB 35KB [ 2319.146891][T28705] eventpoll_epi 12KB 39KB [ 2319.152965][T28705] inotify_inode_mark 4KB 7KB [ 2319.159213][T28705] request_queue 157KB 157KB [ 2319.165359][T28705] blkdev_ioc 11KB 19KB [ 2319.171425][T28705] bio-0 247KB 320KB [ 2319.177662][T28705] biovec-max 1440KB 1470KB [ 2319.183813][T28705] biovec-64 108KB 149KB [ 2319.189877][T28705] biovec-16 31KB 33KB [ 2319.196097][T28705] bio_integrity_payload 1KB 7KB [ 2319.202511][T28705] khugepaged_mm_slot 287KB 328KB [ 2319.208995][T28705] user_namespace 4KB 7KB [ 2319.215140][T28705] uid_cache 0KB 4KB [ 2319.221324][T28705] dmaengine-unmap-256 2KB 6KB [ 2319.228034][T28705] dmaengine-unmap-128 1KB 3KB [ 2319.235915][T28705] dmaengine-unmap-16 0KB 4KB [ 2319.242053][T28705] dmaengine-unmap-2 0KB 3KB [ 2319.248317][T28705] audit_buffer 0KB 3KB [ 2319.254462][T28705] skbuff_ext_cache 2KB 4KB [ 2319.260552][T28705] skbuff_fclone_cache 384KB 585KB [ 2319.266870][T28705] skbuff_head_cache 25538KB 40380KB [ 2319.272954][T28705] configfs_dir_cache 1KB 8KB [ 2319.279158][T28705] file_lock_cache 4KB 7KB [ 2319.285313][T28705] file_lock_ctx 8KB 11KB [ 2319.291401][T28705] fsnotify_mark_connector 1KB 8KB [ 2319.298032][T28705] net_namespace 3392KB 3464KB [ 2319.304179][T28705] task_delay_info 810KB 957KB [ 2319.310400][T28705] taskstats 597KB 691KB [ 2319.316670][T28705] proc_dir_entry 21182KB 21843KB [ 2319.322868][T28705] pde_opener 8KB 15KB [ 2319.329011][T28705] seq_file 29KB 63KB [ 2319.335246][T28705] sigqueue 1KB 3KB [ 2319.341690][T28705] shmem_inode_cache 10738KB 11348KB [ 2319.349516][T28705] kernfs_iattrs_cache 9KB 15KB [ 2319.356308][T28705] kernfs_node_cache 105255KB 105270KB [ 2319.362395][T28705] mnt_cache 355KB 363KB [ 2319.368529][T28705] filp 3575KB 4466KB [ 2319.374777][T28705] names_cache 35092KB 35092KB [ 2319.380955][T28705] iint_cache 28KB 66KB [ 2319.387922][T28705] lsm_file_cache 670KB 897KB [ 2319.394097][T28705] key_jar 27KB 43KB [ 2319.400323][T28705] uts_namespace 7KB 15KB [ 2319.406508][T28705] nsproxy 127KB 138KB [ 2319.412804][T28705] vm_area_struct 11919KB 13256KB [ 2319.418952][T28705] mm_struct 2325KB 2538KB [ 2319.425256][T28705] fs_cache 563KB 704KB [ 2319.431335][T28705] files_cache 1848KB 2190KB [ 2319.437465][T28705] signal_cache 5551KB 5778KB [ 2319.443763][T28705] sighand_cache 4155KB 4190KB [ 2319.449846][T28705] task_struct 22035KB 22048KB [ 2319.457657][T28705] cred_jar 1795KB 2112KB [ 2319.464007][T28705] anon_vma_chain 3696KB 4421KB [ 2319.470280][T28705] anon_vma 2960KB 3116KB [ 2319.476468][T28705] pid 380KB 461KB [ 2319.482714][T28705] Acpi-Operand 156KB 194KB [ 2319.489272][T28705] Acpi-ParseExt 9KB 11KB [ 2319.495491][T28705] Acpi-Parse 41KB 47KB [ 2319.501762][T28705] Acpi-State 52KB 63KB [ 2319.507949][T28705] Acpi-Namespace 23KB 27KB [ 2319.514092][T28705] shared_policy_node 0KB 3KB [ 2319.520274][T28705] numa_policy 6KB 23KB [ 2319.526437][T28705] trace_event_file 358KB 358KB [ 2319.532527][T28705] ftrace_event_field 491KB 496KB [ 2319.539450][T28705] pool_workqueue 962KB 964KB [ 2319.546872][T28705] vmap_area 1558KB 2338KB [ 2319.552970][T28705] debug_objects_cache 8029KB 8301KB [ 2319.559473][T28705] page->ptl 3274KB 3909KB [ 2319.566693][T28705] kmalloc-4M 4096KB 4096KB [ 2319.572798][T28705] kmalloc-1M 8192KB 8192KB [ 2319.579173][T28705] kmalloc-512k 4096KB 4096KB [ 2319.585431][T28705] kmalloc-256k 241664KB 242176KB [ 2319.592164][T28705] kmalloc-128k 18944KB 19200KB [ 2319.598358][T28705] kmalloc-64k 6656KB 7296KB [ 2319.604789][T28705] kmalloc-32k 45376KB 45696KB [ 2319.611026][T28705] kmalloc-16k 26752KB 26752KB [ 2319.618113][T28705] kmalloc-8k 49344KB 49568KB [ 2319.624493][T28705] kmalloc-4k 279968KB 279968KB [ 2319.630670][T28705] kmalloc-2k 165600KB 165652KB [ 2319.636875][T28705] kmalloc-1k 202670KB 242020KB [ 2319.642964][T28705] kmalloc-512 46317KB 48296KB [ 2319.649113][T28705] kmalloc-256 33453KB 33868KB [ 2319.655386][T28705] kmalloc-128 5803KB 5820KB [ 2319.661439][T28705] kmalloc-96 4458KB 4492KB [ 2319.667581][T28705] kmalloc-64 10336KB 10924KB [ 2319.675311][T28705] kmalloc-32 6794KB 7193KB [ 2319.681379][T28705] kmalloc-192 8749KB 8836KB [ 2319.687540][T28705] kmem_cache 443KB 444KB [ 2319.693673][T28705] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4605,uid=0 [ 2319.709484][T28705] Out of memory: Killed process 4605 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2319.748608][T28705] syz-executor.0 invoked oom-killer: gfp_mask=0x100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2319.760949][T28705] CPU: 0 PID: 28705 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0 [ 2319.770144][T28705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2319.780376][T28705] Call Trace: [ 2319.783669][T28705] dump_stack+0x188/0x20d [ 2319.788044][T28705] dump_header+0x10b/0x826 [ 2319.792454][T28705] oom_kill_process.cold+0x10/0x15 [ 2319.797662][T28705] out_of_memory+0x31f/0x12f0 [ 2319.802371][T28705] ? oom_killer_disable+0x270/0x270 [ 2319.807563][T28705] ? mutex_trylock+0x246/0x2c0 [ 2319.812675][T28705] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2319.819363][T28705] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2319.825959][T28705] ? warn_alloc+0x110/0x110 [ 2319.830493][T28705] ? futex_wake+0x153/0x480 [ 2319.834992][T28705] ? perf_trace_lock_acquire+0xf5/0x530 [ 2319.840793][T28705] ? debug_smp_processor_id+0x2f/0x185 [ 2319.846268][T28705] __alloc_pages_nodemask+0x5d9/0x810 [ 2319.851629][T28705] ? perf_trace_lock+0x4c0/0x4c0 [ 2319.856592][T28705] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2319.863344][T28705] ? debug_smp_processor_id+0x2f/0x185 [ 2319.868819][T28705] ? perf_trace_lock_acquire+0xf5/0x530 [ 2319.874512][T28705] ? pmd_val+0x7c/0xf0 [ 2319.878585][T28705] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2319.885075][T28705] alloc_pages_vma+0xd9/0x600 [ 2319.889753][T28705] __handle_mm_fault+0x1f8b/0x3c90 [ 2319.894873][T28705] ? vm_insert_pages+0x6a0/0x6a0 [ 2319.899889][T28705] ? __this_cpu_preempt_check+0x84/0x190 [ 2319.905512][T28705] ? __count_memcg_events+0x7a/0x190 [ 2319.910962][T28705] handle_mm_fault+0x1a5/0x660 [ 2319.915738][T28705] do_page_fault+0x55b/0x13da [ 2319.920415][T28705] page_fault+0x39/0x40 [ 2319.924575][T28705] RIP: 0023:0x8087c5f [ 2319.928564][T28705] Code: 00 81 c4 b0 00 00 00 5b 5e 5f c3 e8 1b 04 00 00 66 90 66 90 66 90 66 90 66 90 90 83 ec 0c 8d 44 24 24 83 ec 08 50 ff 74 24 2c 74 24 2c ff 74 24 2c ff 74 24 2c ff 74 24 2c e8 0c 00 00 00 83 [ 2319.948775][T28705] RSP: 002b:00000000f5d17000 EFLAGS: 00010292 [ 2319.954964][T28705] RAX: 00000000f5d17034 RBX: 000000000819af60 RCX: 00000000bbe4072a [ 2319.963078][T28705] RDX: 00000000f5d17a88 RSI: 0000000008115358 RDI: 00000000f5d170cc [ 2319.971282][T28705] RBP: 00000000f5d17168 R08: 0000000000000000 R09: 0000000000000000 [ 2319.979400][T28705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2319.987372][T28705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2320.002478][T28705] Mem-Info: [ 2320.005894][T28705] active_anon:313323 inactive_anon:8346 isolated_anon:0 [ 2320.005894][T28705] active_file:2753 inactive_file:5975 isolated_file:0 [ 2320.005894][T28705] unevictable:14 dirty:31 writeback:0 unstable:0 [ 2320.005894][T28705] slab_reclaimable:20377 slab_unreclaimable:400912 [ 2320.005894][T28705] mapped:60963 shmem:8636 pagetables:30210 bounce:0 [ 2320.005894][T28705] free:705551 free_pcp:612 free_cma:0 [ 2320.044372][T28705] Node 0 active_anon:1091880kB inactive_anon:16652kB active_file:20kB inactive_file:0kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217068kB dirty:12kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 962560kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2320.073122][T28705] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2320.105063][T28705] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2320.111729][T28705] Node 0 DMA32 free:114664kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1091756kB inactive_anon:16652kB active_file:20kB inactive_file:0kB unevictable:56kB writepending:12kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:17940kB pagetables:34476kB bounce:0kB free_pcp:2460kB local_pcp:1068kB free_cma:0kB [ 2320.145618][T28705] lowmem_reserve[]: 0 0 0 0 0 [ 2320.150337][T28705] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2320.180158][T28705] lowmem_reserve[]: 0 0 0 0 0 18:52:14 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x9effffff}, 0x0) 18:52:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x40000000}, 0x0) 18:52:14 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000040)={0xffffff80, 0x3, 0x4, {0x9, @sliced={0x7fff, [0x9, 0x6, 0xcb34, 0x0, 0x6, 0x2, 0x1, 0x333, 0x8, 0x4, 0x5, 0x7000, 0xacd3, 0x8, 0xdbb3, 0x1767, 0x2, 0x9, 0x5, 0x0, 0x7, 0x3, 0x5, 0x3ff, 0x8001, 0x3f, 0xc3d, 0x20, 0x2, 0x1ff, 0x7fff, 0x5, 0x8000, 0x100, 0xae, 0x4, 0x9, 0xb5ae, 0x2, 0x0, 0x8, 0x0, 0x5, 0x1823, 0xf8ca, 0xff, 0x9788, 0x30f8], 0x2}}, 0x1}) 18:52:14 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000440)="b9", 0x1) r2 = inotify_init() r3 = inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0xc0000080) inotify_rm_watch(r2, r3) inotify_rm_watch(r1, r3) inotify_rm_watch(0xffffffffffffffff, r3) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r4, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) set_mempolicy(0x4002, &(0x7f0000000140)=0xa5ba, 0x8) unshare(0x40000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x6, 0x9, 0x7}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r5}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r5}, 0xc) [ 2320.189104][T28705] Node 0 DMA: 10*4kB (UME) 11*8kB (UM) 8*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10272kB [ 2320.242191][T28705] Node 0 DMA32: 1972*4kB (UME) 1041*8kB (UME) 589*16kB (ME) 372*32kB (UME) 214*64kB (UME) 109*128kB (ME) 62*256kB (ME) 21*512kB (UM) 0*1024kB 9*2048kB (M) 1*4096kB (M) = 114344kB [ 2320.244335][T28731] IPVS: ftp: loaded support on port[0] = 21 [ 2320.263109][T28733] IPVS: ftp: loaded support on port[0] = 21 [ 2320.272438][T28732] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:52:14 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xa4cbcaaa}, 0x0) [ 2320.298967][T28705] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2320.325231][T28705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2320.335070][T28705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2320.349947][T28732] device bond0 left promiscuous mode [ 2320.356290][T28732] device bond_slave_0 left promiscuous mode [ 2320.362563][T28705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2320.367501][T28732] device bond_slave_1 left promiscuous mode [ 2320.379169][T28705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2320.381888][T28732] bridge368: port 1(bond0) entered disabled state [ 2320.396033][T28705] 17383 total pagecache pages [ 2320.401769][T28705] 0 pages in swap cache [ 2320.407016][T28705] Swap cache stats: add 0, delete 0, find 0/0 [ 2320.419231][T28705] Free swap = 0kB [ 2320.423235][T28705] Total swap = 0kB [ 2320.427508][T28705] 1965979 pages RAM [ 2320.431371][T28705] 0 pages HighMem/MovableOnly [ 2320.446099][T28705] 349380 pages reserved [ 2320.450285][T28705] 0 pages cma reserved [ 2320.459823][T28705] Unreclaimable slab info: [ 2320.464339][T28705] Name Used Total [ 2320.471193][T28705] pid_3 1KB 7KB [ 2320.480787][T28705] pid_2 916KB 1113KB [ 2320.486970][T28705] bio-3 0KB 7KB [ 2320.497847][T28732] bridge369: port 1(bond0) entered blocking state [ 2320.505012][T28705] AF_VSOCK 14KB 16KB [ 2320.511226][T28705] batadv_tl_cache 4KB 12KB [ 2320.520741][T28732] bridge369: port 1(bond0) entered disabled state [ 2320.521781][T28705] SMC 45KB 49KB [ 2320.534040][T28732] device bond0 entered promiscuous mode [ 2320.539608][T28705] TIPC 698KB 708KB [ 2320.539620][T28705] rds_tcp_connection 10KB 11KB [ 2320.539632][T28705] RDS 18KB 18KB [ 2320.539642][T28705] rds_connection 0KB 3KB [ 2320.539652][T28705] SCTPv6 930KB 1013KB [ 2320.539661][T28705] SCTP 198KB 232KB [ 2320.539671][T28705] sctp_chunk 7KB 7KB [ 2320.539684][T28705] sctp_bind_bucket 0KB 3KB [ 2320.549824][T28732] device bond_slave_0 entered promiscuous mode [ 2320.563291][T28705] DCCPv6 1097KB 1197KB [ 2320.568562][T28732] device bond_slave_1 entered promiscuous mode [ 2320.570437][T28705] DCCP 1018KB 1111KB [ 2320.620366][T28705] L2TP/IPv6 6KB 6KB [ 2320.627728][T28705] L2TP/IP 23KB 23KB [ 2320.634604][T28705] KCM 17KB 19KB [ 2320.641396][T28705] kcm_mux_cache 7KB 7KB [ 2320.651887][T28754] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2320.653117][T28705] RXRPC 725KB 789KB [ 2320.669162][T28705] rxrpc_call_jar 4328KB 4413KB [ 2320.675483][T28705] bridge_fdb_cache 74KB 74KB [ 2320.682098][T28705] MPTCPv6 35KB 38KB [ 2320.688451][T28705] fib6_nodes 175KB 184KB [ 2320.695109][T28705] ip6_dst_cache 288KB 423KB 18:52:14 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xaacacba4}, 0x0) [ 2320.701353][T28705] PINGv6 1KB 3KB [ 2320.707691][T28705] RAWv6 3834KB 3899KB [ 2320.714536][T28705] UDPLITEv6 19KB 19KB [ 2320.720815][T28705] UDPv6 962KB 1057KB [ 2320.727168][T28705] TCPv6 1292KB 1310KB [ 2320.745033][T28705] nf_conntrack 9KB 37KB [ 2320.756233][T28705] sd_ext_cdb 0KB 7KB [ 2320.779089][T28705] scsi_sense_cache 1056KB 1064KB [ 2320.785858][T28705] virtio_scsi_cmd 16KB 16KB [ 2320.792049][T28705] sgpool-128 8KB 8KB [ 2320.799474][T28705] sgpool-64 4KB 12KB [ 2320.806505][T28705] sgpool-32 3KB 15KB [ 2320.814449][T28705] sgpool-16 26KB 30KB [ 2320.820682][T28705] sgpool-8 32KB 52KB [ 2320.829352][T28705] mqueue_inode_cache 56KB 62KB [ 2320.836649][T28705] f2fs_bio_post_read_ctx 16KB 16KB [ 2320.843916][T28705] jfs_mp 7KB 7KB [ 2320.850075][T28705] cifs_small_rq 15KB 16KB [ 2320.857595][T28705] cifs_request 67KB 67KB [ 2320.864682][T28705] cifs_mpx_ids 0KB 8KB [ 2320.870812][T28705] nfs_commit_data 3KB 7KB [ 2320.878002][T28705] nfs_write_data 34KB 44KB [ 2320.884804][T28705] ext4_system_zone 1KB 7KB [ 2320.890878][T28705] ext4_io_end_vec 8KB 15KB [ 2320.898163][T28705] ext4_bio_post_read_ctx 15KB 15KB [ 2320.905281][T28705] io_kiocb 0KB 3KB [ 2320.911363][T28705] kioctx 21KB 23KB [ 2320.919326][T28705] aio_kiocb 6KB 7KB [ 2320.926057][T28705] userfaultfd_ctx_cache 2KB 4KB [ 2320.932495][T28705] bio-2 1KB 7KB [ 2320.939588][T28705] fasync_cache 1KB 3KB [ 2320.946384][T28705] pid_namespace 5KB 11KB [ 2320.952478][T28705] posix_timers_cache 7KB 11KB [ 2320.959951][T28705] kvm_vcpu 0KB 70KB [ 2320.966961][T28705] kvm_mmu_page_header 58KB 61KB [ 2320.973754][T28705] pte_list_desc 2KB 3KB [ 2320.979827][T28705] x86_emulator 51KB 54KB [ 2320.986784][T28705] x86_fpu 0KB 43KB [ 2320.993718][T28705] rpc_buffers 17KB 25KB [ 2320.999793][T28705] rpc_tasks 2KB 7KB [ 2321.005980][T28705] UNIX 503KB 620KB [ 2321.012055][T28705] UDP-Lite 71KB 73KB [ 2321.018176][T28705] MPTCP 10KB 15KB [ 2321.024313][T28705] tcp_bind_bucket 44KB 44KB [ 2321.030386][T28705] inet_peer_cache 28KB 32KB [ 2321.036828][T28705] ip_fib_trie 24KB 31KB [ 2321.044479][T28705] ip_fib_alias 112KB 134KB [ 2321.052137][T28705] ip_dst_cache 102KB 168KB [ 2321.059118][T28705] PING 12KB 15KB [ 2321.067688][T28705] RAW 3126KB 3164KB [ 2321.074212][T28705] UDP 1044KB 1064KB [ 2321.080652][T28705] TCP 305KB 346KB [ 2321.086812][T28705] hugetlbfs_inode_cache 6KB 10KB [ 2321.093274][T28705] fscache_cookie_jar 1KB 7KB [ 2321.099469][T28705] bio-1 10KB 15KB [ 2321.106085][T28705] eventpoll_pwq 7KB 35KB [ 2321.112273][T28705] eventpoll_epi 12KB 39KB [ 2321.119048][T28705] inotify_inode_mark 7KB 7KB [ 2321.126829][T28705] request_queue 157KB 157KB [ 2321.133638][T28705] blkdev_ioc 11KB 19KB [ 2321.140662][T28705] bio-0 262KB 320KB [ 2321.147984][T28705] biovec-max 1708KB 1708KB [ 2321.155041][T28705] biovec-64 108KB 149KB [ 2321.161119][T28705] biovec-16 31KB 33KB [ 2321.169248][T28705] bio_integrity_payload 1KB 7KB [ 2321.176204][T28705] khugepaged_mm_slot 287KB 328KB [ 2321.182555][T28705] user_namespace 4KB 7KB [ 2321.190214][T28705] uid_cache 0KB 4KB [ 2321.197247][T28705] dmaengine-unmap-256 2KB 6KB [ 2321.204449][T28705] dmaengine-unmap-128 1KB 3KB [ 2321.210702][T28705] dmaengine-unmap-16 0KB 4KB [ 2321.217796][T28705] dmaengine-unmap-2 0KB 3KB [ 2321.224584][T28705] audit_buffer 0KB 3KB [ 2321.230695][T28705] skbuff_ext_cache 2KB 4KB [ 2321.237707][T28705] skbuff_fclone_cache 384KB 585KB [ 2321.244597][T28705] skbuff_head_cache 25740KB 40380KB [ 2321.250692][T28705] configfs_dir_cache 1KB 8KB [ 2321.257902][T28705] file_lock_cache 4KB 7KB [ 2321.272923][T28705] file_lock_ctx 8KB 11KB [ 2321.279175][T28705] fsnotify_mark_connector 3KB 8KB [ 2321.286987][T28705] net_namespace 3414KB 3464KB [ 2321.294189][T28705] task_delay_info 810KB 957KB [ 2321.300633][T28705] taskstats 597KB 691KB [ 2321.307877][T28705] proc_dir_entry 20175KB 21112KB [ 2321.314611][T28705] pde_opener 8KB 15KB [ 2321.320692][T28705] seq_file 29KB 63KB [ 2321.327736][T28705] sigqueue 1KB 3KB [ 2321.334592][T28705] shmem_inode_cache 10738KB 11348KB [ 2321.340674][T28705] kernfs_iattrs_cache 9KB 15KB [ 2321.347993][T28705] kernfs_node_cache 105380KB 105382KB [ 2321.355641][T28705] mnt_cache 355KB 363KB [ 2321.361718][T28705] filp 3930KB 4466KB [ 2321.368867][T28705] names_cache 41276KB 41280KB [ 2321.375644][T28705] iint_cache 28KB 66KB [ 2321.381815][T28705] lsm_file_cache 723KB 897KB [ 2321.388995][T28705] key_jar 27KB 43KB [ 2321.403351][T28705] uts_namespace 7KB 15KB [ 2321.409731][T28705] nsproxy 127KB 138KB [ 2321.416929][T28705] vm_area_struct 11919KB 13256KB [ 2321.423754][T28705] mm_struct 2325KB 2538KB [ 2321.429848][T28705] fs_cache 563KB 704KB [ 2321.436936][T28705] files_cache 1848KB 2190KB [ 2321.443686][T28705] signal_cache 5570KB 5778KB [ 2321.449776][T28705] sighand_cache 4155KB 4190KB [ 2321.457056][T28705] task_struct 22357KB 22357KB [ 2321.464269][T28705] cred_jar 1915KB 2112KB [ 2321.470470][T28705] anon_vma_chain 3696KB 4421KB [ 2321.477983][T28705] anon_vma 2960KB 3116KB [ 2321.485071][T28705] pid 380KB 461KB [ 2321.491353][T28705] Acpi-Operand 156KB 194KB [ 2321.498823][T28705] Acpi-ParseExt 9KB 11KB [ 2321.505894][T28705] Acpi-Parse 41KB 47KB [ 2321.512093][T28705] Acpi-State 52KB 63KB [ 2321.520196][T28705] Acpi-Namespace 23KB 27KB [ 2321.527413][T28705] shared_policy_node 0KB 3KB [ 2321.534594][T28705] numa_policy 6KB 23KB [ 2321.540795][T28705] trace_event_file 358KB 358KB [ 2321.548858][T28705] ftrace_event_field 491KB 496KB [ 2321.556027][T28705] pool_workqueue 964KB 964KB [ 2321.562210][T28705] vmap_area 1580KB 2338KB [ 2321.569713][T28705] debug_objects_cache 7979KB 8297KB [ 2321.578942][T28705] page->ptl 3274KB 3909KB [ 2321.587824][T28705] kmalloc-4M 4096KB 4096KB [ 2321.594810][T28705] kmalloc-1M 8192KB 8192KB [ 2321.601195][T28705] kmalloc-512k 4096KB 4096KB [ 2321.608599][T28705] kmalloc-256k 241664KB 242176KB [ 2321.615483][T28705] kmalloc-128k 18944KB 19200KB [ 2321.621624][T28705] kmalloc-64k 6656KB 7296KB [ 2321.629479][T28705] kmalloc-32k 45504KB 45696KB [ 2321.636374][T28705] kmalloc-16k 26816KB 26816KB [ 2321.642501][T28705] kmalloc-8k 45248KB 45472KB [ 2321.649890][T28705] kmalloc-4k 281400KB 281480KB [ 2321.656869][T28705] kmalloc-2k 163816KB 163868KB [ 2321.664583][T28705] kmalloc-1k 202190KB 241488KB [ 2321.671054][T28705] kmalloc-512 45888KB 48212KB [ 2321.678463][T28705] kmalloc-256 32452KB 33324KB [ 2321.685475][T28705] kmalloc-128 5764KB 5820KB [ 2321.691617][T28705] kmalloc-96 4450KB 4492KB [ 2321.699038][T28705] kmalloc-64 10080KB 10916KB [ 2321.706753][T28705] kmalloc-32 6791KB 7193KB [ 2321.713714][T28705] kmalloc-192 8663KB 8836KB [ 2321.719849][T28705] kmem_cache 443KB 444KB [ 2321.727307][T28705] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4591,uid=0 [ 2321.743258][T28705] Out of memory: Killed process 4591 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2321.764860][T28768] IPVS: ftp: loaded support on port[0] = 21 [ 2321.775187][T28734] IPVS: ftp: loaded support on port[0] = 21 [ 2321.827576][ T1144] oom_reaper: reaped process 28734 (syz-executor.4), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 18:52:16 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) unshare(0x40000000) 18:52:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x48000000}, 0x0) 18:52:16 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x0) 18:52:16 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xf0ffffff}, 0x0) 18:52:16 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0xffff, 0x0, 0x9}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) [ 2322.391058][T28797] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2322.417484][T28798] IPVS: ftp: loaded support on port[0] = 21 18:52:16 executing program 0: unshare(0x2000a00) [ 2322.436527][T28802] IPVS: ftp: loaded support on port[0] = 21 [ 2322.466335][T28803] device bond0 left promiscuous mode 18:52:16 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x5e000900) [ 2322.489561][T28803] device bond_slave_0 left promiscuous mode [ 2322.504960][T28803] device bond_slave_1 left promiscuous mode [ 2322.523385][T28803] bridge369: port 1(bond0) entered disabled state 18:52:16 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') move_pages(0x0, 0x3, &(0x7f0000000080)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff5000/0x2000)=nil], &(0x7f00000000c0)=[0x3, 0xffffffff, 0x1, 0x8800000, 0x8, 0xffffcfb7, 0x6, 0xdaad, 0x7], &(0x7f0000000100)=[0x0, 0x0], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000040)={0xe070000, 0xffffffff, 0x41a, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9b0941, 0x6, [], @value=0x2}}) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) [ 2322.623024][T28803] bridge370: port 1(bond0) entered blocking state [ 2322.629909][T28803] bridge370: port 1(bond0) entered disabled state [ 2322.650517][T28803] device bond0 entered promiscuous mode [ 2322.667288][T28803] device bond_slave_0 entered promiscuous mode [ 2322.685483][T28803] device bond_slave_1 entered promiscuous mode [ 2322.687968][T28812] IPVS: ftp: loaded support on port[0] = 21 [ 2322.751421][T28803] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2322.963922][T28812] IPVS: ftp: loaded support on port[0] = 21 18:52:17 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000080)={0x8, 0xfe9, 0x0, 'queue0\x00', 0x813}) connect(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x4, 0x0, {0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}}, 0x80) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) 18:52:17 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xffffa888}, 0x0) 18:52:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x4c000000}, 0x0) 18:52:17 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0xffffffff, 0x8000, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x1001422, 0x4) unshare(0x40000000) 18:52:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x600}, 0x0) 18:52:17 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r1, 0x400, 0x1) r3 = socket(0x1, 0x803, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setparam(0xffffffffffffffff, &(0x7f0000000000)=0x1000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0010000104deda01eeff000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) unshare(0x40000000) [ 2323.557916][T28903] IPVS: ftp: loaded support on port[0] = 21 [ 2323.558332][T28901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2323.600848][T28907] IPVS: ftp: loaded support on port[0] = 21 [ 2323.628356][T28904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:52:17 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xfffff000}, 0x0) [ 2323.662869][T28908] bridge2: port 1(bond0) entered blocking state [ 2323.669190][T28908] bridge2: port 1(bond0) entered disabled state [ 2323.686987][T28905] IPVS: ftp: loaded support on port[0] = 21 [ 2323.698653][T28908] device bond0 entered promiscuous mode [ 2323.711443][T28908] device bond_slave_0 entered promiscuous mode [ 2323.719109][T28908] device bond_slave_1 entered promiscuous mode [ 2323.740674][T28911] device bond0 left promiscuous mode [ 2323.746716][T28911] device bond_slave_0 left promiscuous mode [ 2323.754889][T28911] device bond_slave_1 left promiscuous mode [ 2323.761394][T28911] bridge370: port 1(bond0) entered disabled state 18:52:17 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000040)={0xffffff80, 0x3, 0x4, {0x9, @sliced={0x7fff, [0x9, 0x6, 0xcb34, 0x0, 0x6, 0x2, 0x1, 0x333, 0x8, 0x4, 0x5, 0x7000, 0xacd3, 0x8, 0xdbb3, 0x1767, 0x2, 0x9, 0x5, 0x0, 0x7, 0x3, 0x5, 0x3ff, 0x8001, 0x3f, 0xc3d, 0x20, 0x2, 0x1ff, 0x7fff, 0x5, 0x8000, 0x100, 0xae, 0x4, 0x9, 0xb5ae, 0x2, 0x0, 0x8, 0x0, 0x5, 0x1823, 0xf8ca, 0xff, 0x9788, 0x30f8], 0x2}}, 0x1}) [ 2323.835878][T28923] IPVS: ftp: loaded support on port[0] = 21 [ 2323.843732][T28911] bridge371: port 1(bond0) entered blocking state [ 2323.850207][T28911] bridge371: port 1(bond0) entered disabled state [ 2323.861347][T28911] device bond0 entered promiscuous mode [ 2323.868045][T28911] device bond_slave_0 entered promiscuous mode [ 2323.876414][T28911] device bond_slave_1 entered promiscuous mode 18:52:17 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xffffff7f}, 0x0) [ 2323.927092][T28911] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2323.998489][T28904] device bond0 left promiscuous mode [ 2324.004771][T28904] device bond_slave_0 left promiscuous mode [ 2324.011275][T28904] device bond_slave_1 left promiscuous mode [ 2324.018764][T28904] bridge371: port 1(bond0) entered disabled state 18:52:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x60000000}, 0x0) [ 2324.231156][T28960] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:52:18 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xffffff9e}, 0x0) [ 2324.316387][T28968] bridge372: port 1(bond0) entered blocking state [ 2324.323735][T28968] bridge372: port 1(bond0) entered disabled state [ 2324.333930][T28968] device bond0 entered promiscuous mode [ 2324.339498][T28968] device bond_slave_0 entered promiscuous mode [ 2324.349219][T28968] device bond_slave_1 entered promiscuous mode 18:52:18 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x10028f00) 18:52:18 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) getpeername$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000000)=0x6e) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) truncate(&(0x7f0000000080)='./file0\x00', 0x8) 18:52:18 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xfffffff0}, 0x0) [ 2324.439507][T28968] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2324.464731][T28984] IPVS: ftp: loaded support on port[0] = 21 18:52:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x65580000}, 0x0) 18:52:18 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2324.558185][T29017] IPVS: ftp: loaded support on port[0] = 21 [ 2324.607803][T29029] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2324.608677][T29030] IPVS: ftp: loaded support on port[0] = 21 [ 2324.645394][T29030] syz-executor.4 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2324.667747][T29041] device bond0 left promiscuous mode [ 2324.672612][T29030] CPU: 1 PID: 29030 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 2324.677016][T29041] device bond_slave_0 left promiscuous mode [ 2324.682015][T29030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2324.682021][T29030] Call Trace: [ 2324.682046][T29030] dump_stack+0x188/0x20d [ 2324.682062][T29030] dump_header+0x10b/0x826 [ 2324.682082][T29030] oom_kill_process.cold+0x10/0x15 [ 2324.690736][T29041] device bond_slave_1 left promiscuous mode [ 2324.698445][T29030] out_of_memory+0x31f/0x12f0 [ 2324.698466][T29030] ? oom_killer_disable+0x270/0x270 [ 2324.698482][T29030] ? mutex_trylock+0x246/0x2c0 [ 2324.698497][T29030] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2324.698514][T29030] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2324.698538][T29030] ? warn_alloc+0x110/0x110 [ 2324.698559][T29030] ? do_fast_syscall_32+0x270/0xe90 [ 2324.706746][T29041] bridge372: port 1(bond0) entered disabled state [ 2324.710854][T29030] __alloc_pages_nodemask+0x5d9/0x810 [ 2324.710871][T29030] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2324.710889][T29030] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2324.784073][T29030] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2324.790040][T29030] ? do_raw_spin_unlock+0x171/0x260 [ 2324.795221][T29030] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2324.801621][T29030] alloc_pages_current+0xff/0x200 [ 2324.806627][T29030] __vmalloc_node_range+0x478/0x7a0 [ 2324.811824][T29030] ? ebt_register_table+0x1e6/0xc70 [ 2324.817009][T29030] vmalloc+0x67/0x80 [ 2324.820905][T29030] ? ebt_register_table+0x1e6/0xc70 [ 2324.826100][T29030] ebt_register_table+0x1e6/0xc70 [ 2324.831108][T29030] ? ebt_broute+0x700/0x700 [ 2324.835602][T29030] ops_init+0xaf/0x420 [ 2324.839649][T29030] setup_net+0x2de/0x860 [ 2324.843901][T29030] ? ops_init+0x420/0x420 [ 2324.848212][T29030] copy_net_ns+0x293/0x590 [ 2324.852622][T29030] create_new_namespaces+0x3fb/0xb30 [ 2324.857891][T29030] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2324.863937][T29030] ksys_unshare+0x43d/0x8e0 18:52:18 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) [ 2324.868434][T29030] ? walk_process_tree+0x2c0/0x2c0 [ 2324.873542][T29030] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2324.879412][T29030] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2324.885196][T29030] ? fput_many+0x2f/0x1a0 [ 2324.889506][T29030] ? trace_hardirqs_off_caller+0x55/0x230 [ 2324.899470][T29030] __ia32_sys_unshare+0x2c/0x40 [ 2324.904393][T29030] do_fast_syscall_32+0x270/0xe90 [ 2324.909399][T29030] entry_SYSENTER_compat+0x70/0x7f [ 2324.927490][T29030] Mem-Info: [ 2324.931189][T29030] active_anon:313873 inactive_anon:8346 isolated_anon:0 [ 2324.931189][T29030] active_file:2750 inactive_file:6021 isolated_file:0 [ 2324.931189][T29030] unevictable:14 dirty:95 writeback:0 unstable:0 [ 2324.931189][T29030] slab_reclaimable:20201 slab_unreclaimable:396098 [ 2324.931189][T29030] mapped:61058 shmem:8636 pagetables:30251 bounce:0 [ 2324.931189][T29030] free:710135 free_pcp:228 free_cma:0 [ 2324.976254][T29030] Node 0 active_anon:1093808kB inactive_anon:16652kB active_file:12kB inactive_file:12kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217072kB dirty:20kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 962560kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2324.981498][T29046] IPVS: ftp: loaded support on port[0] = 21 [ 2325.010837][T29030] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2325.049668][T29030] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2325.056734][T29041] bridge373: port 1(bond0) entered blocking state [ 2325.065615][T29030] Node 0 DMA32 free:116704kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1093680kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB writepending:16kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:17904kB pagetables:34424kB bounce:0kB free_pcp:920kB local_pcp:564kB free_cma:0kB [ 2325.079439][T29041] bridge373: port 1(bond0) entered disabled state [ 2325.103666][T29030] lowmem_reserve[]: 0 0 0 0 0 [ 2325.108956][T29041] device bond0 entered promiscuous mode [ 2325.109878][T29030] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2325.116055][T29041] device bond_slave_0 entered promiscuous mode [ 2325.149049][T29030] lowmem_reserve[]: 0 0 0 0 0 [ 2325.151729][T29041] device bond_slave_1 entered promiscuous mode [ 2325.157940][T29030] Node 0 DMA: 7*4kB (UME) 10*8kB (UM) 8*16kB (UME) 4*32kB (UME) 3*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10284kB [ 2325.182982][T29030] Node 0 DMA32: 1962*4kB (UME) 1158*8kB (UME) 768*16kB (UME) 490*32kB (UME) 234*64kB (UME) 117*128kB (UME) 62*256kB (UME) 21*512kB (M) 1*1024kB (U) 7*2048kB (M) 0*4096kB = 117016kB [ 2325.207074][T29030] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2325.220436][T29030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2325.244610][T29030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2325.256465][T29030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2325.271568][T29030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2325.284785][T29030] 17408 total pagecache pages [ 2325.289606][T29030] 0 pages in swap cache [ 2325.295338][T29030] Swap cache stats: add 0, delete 0, find 0/0 [ 2325.301407][T29030] Free swap = 0kB [ 2325.318740][T29030] Total swap = 0kB [ 2325.321262][T29028] IPVS: ftp: loaded support on port[0] = 21 [ 2325.331382][T29030] 1965979 pages RAM [ 2325.346168][T29030] 0 pages HighMem/MovableOnly [ 2325.362419][T29030] 349380 pages reserved [ 2325.379001][T29030] 0 pages cma reserved [ 2325.399250][T29040] IPVS: ftp: loaded support on port[0] = 21 [ 2325.406214][T29030] Unreclaimable slab info: [ 2325.420550][T29030] Name Used Total [ 2325.456771][T29030] pid_3 1KB 7KB [ 2325.492088][T29030] pid_2 916KB 1113KB [ 2325.512099][T29030] bio-3 0KB 7KB [ 2325.532294][T29030] AF_VSOCK 14KB 16KB [ 2325.551182][T29030] batadv_tl_cache 4KB 12KB [ 2325.570443][T29030] SMC 45KB 49KB [ 2325.588818][T29030] TIPC 721KB 728KB [ 2325.599725][T29030] rds_tcp_connection 10KB 11KB [ 2325.615739][T29030] RDS 18KB 18KB [ 2325.622116][T29030] rds_connection 0KB 3KB [ 2325.631253][T29030] SCTPv6 937KB 1020KB [ 2325.646131][T29030] SCTP 198KB 232KB [ 2325.652229][T29030] sctp_chunk 7KB 7KB [ 2325.661224][T29030] sctp_bind_bucket 0KB 3KB [ 2325.678846][T29030] DCCPv6 1128KB 1228KB [ 2325.695893][T29030] DCCP 1043KB 1133KB [ 2325.702124][T29030] L2TP/IPv6 6KB 6KB [ 2325.717806][T29030] L2TP/IP 23KB 23KB [ 2325.724873][T29030] KCM 17KB 19KB [ 2325.731044][T29030] kcm_mux_cache 7KB 7KB [ 2325.746159][T29030] RXRPC 742KB 810KB [ 2325.752258][T29030] rxrpc_call_jar 4342KB 4391KB [ 2325.759684][T29030] bridge_fdb_cache 74KB 74KB [ 2325.774382][T29030] MPTCPv6 35KB 38KB [ 2325.780481][T29030] fib6_nodes 175KB 184KB [ 2325.797100][T29030] ip6_dst_cache 280KB 423KB [ 2325.805389][T29030] PINGv6 1KB 3KB [ 2325.811827][T29030] RAWv6 3790KB 3857KB [ 2325.829125][T29030] UDPLITEv6 19KB 19KB [ 2325.836839][T29030] UDPv6 939KB 1034KB [ 2325.853331][T29030] TCPv6 1338KB 1359KB [ 2325.867701][T29030] nf_conntrack 9KB 37KB [ 2325.883407][T29030] sd_ext_cdb 0KB 7KB [ 2325.897814][T29030] scsi_sense_cache 1056KB 1064KB [ 2325.907880][T29030] virtio_scsi_cmd 16KB 16KB [ 2325.918323][T29030] sgpool-128 8KB 8KB [ 2325.925826][T29030] sgpool-64 4KB 12KB [ 2325.931913][T29030] sgpool-32 3KB 15KB [ 2325.946463][T29030] sgpool-16 26KB 30KB [ 2325.957000][T29030] sgpool-8 25KB 52KB [ 2325.964477][T29030] mqueue_inode_cache 53KB 62KB [ 2325.970669][T29030] f2fs_bio_post_read_ctx 16KB 16KB [ 2325.981275][T29030] jfs_mp 7KB 7KB [ 2325.989300][T29030] cifs_small_rq 15KB 16KB [ 2325.999259][T29030] cifs_request 67KB 67KB [ 2326.006930][T29030] cifs_mpx_ids 0KB 8KB [ 2326.017020][T29030] nfs_commit_data 3KB 7KB [ 2326.024469][T29030] nfs_write_data 34KB 44KB [ 2326.030676][T29030] ext4_system_zone 1KB 7KB [ 2326.041012][T29030] ext4_io_end_vec 7KB 15KB [ 2326.048614][T29030] ext4_bio_post_read_ctx 15KB 15KB [ 2326.058874][T29030] io_kiocb 0KB 3KB [ 2326.066183][T29030] kioctx 21KB 23KB [ 2326.074767][T29030] aio_kiocb 6KB 7KB [ 2326.080973][T29030] userfaultfd_ctx_cache 2KB 4KB [ 2326.088828][T29030] bio-2 1KB 7KB [ 2326.097433][T29030] fasync_cache 5KB 7KB [ 2326.106227][T29030] pid_namespace 4KB 11KB [ 2326.113557][T29030] posix_timers_cache 7KB 11KB [ 2326.119841][T29030] kvm_vcpu 0KB 70KB [ 2326.127152][T29030] kvm_mmu_page_header 58KB 61KB [ 2326.133959][T29030] pte_list_desc 2KB 3KB [ 2326.140037][T29030] x86_emulator 51KB 54KB [ 2326.146980][T29030] x86_fpu 0KB 43KB [ 2326.153705][T29030] rpc_buffers 17KB 25KB [ 2326.160329][T29030] rpc_tasks 2KB 7KB [ 2326.169150][T29030] UNIX 503KB 620KB [ 2326.175808][T29030] UDP-Lite 71KB 73KB [ 2326.181937][T29030] MPTCP 10KB 15KB [ 2326.189247][T29030] tcp_bind_bucket 48KB 48KB [ 2326.195873][T29030] inet_peer_cache 28KB 32KB [ 2326.201953][T29030] ip_fib_trie 24KB 31KB [ 2326.209080][T29030] ip_fib_alias 112KB 134KB [ 2326.215822][T29030] ip_dst_cache 104KB 168KB [ 2326.221901][T29030] PING 12KB 15KB [ 2326.228716][T29030] RAW 3135KB 3195KB [ 2326.235578][T29030] UDP 1048KB 1078KB [ 2326.241834][T29030] TCP 311KB 352KB [ 2326.249030][T29030] hugetlbfs_inode_cache 6KB 10KB [ 2326.256140][T29030] fscache_cookie_jar 1KB 7KB [ 2326.262301][T29030] bio-1 10KB 15KB [ 2326.275731][T29030] eventpoll_pwq 7KB 35KB [ 2326.281852][T29030] eventpoll_epi 12KB 39KB [ 2326.289378][T29030] inotify_inode_mark 5KB 7KB [ 2326.296061][T29030] request_queue 157KB 157KB [ 2326.302178][T29030] blkdev_ioc 11KB 19KB [ 2326.309329][T29030] bio-0 250KB 320KB [ 2326.315844][T29030] biovec-max 1347KB 1377KB [ 2326.321915][T29030] biovec-64 108KB 149KB [ 2326.329163][T29030] biovec-16 31KB 33KB [ 2326.335817][T29030] bio_integrity_payload 1KB 7KB [ 2326.342239][T29030] khugepaged_mm_slot 287KB 328KB [ 2326.349900][T29030] user_namespace 4KB 7KB [ 2326.356608][T29030] uid_cache 0KB 4KB [ 2326.363339][T29030] dmaengine-unmap-256 2KB 6KB [ 2326.369604][T29030] dmaengine-unmap-128 1KB 3KB [ 2326.377072][T29030] dmaengine-unmap-16 0KB 4KB [ 2326.385347][T29030] dmaengine-unmap-2 0KB 3KB [ 2326.391550][T29030] audit_buffer 0KB 3KB [ 2326.398568][T29030] skbuff_ext_cache 0KB 4KB [ 2326.405253][T29030] skbuff_fclone_cache 384KB 585KB [ 2326.411508][T29030] skbuff_head_cache 24973KB 40331KB [ 2326.418410][T29030] configfs_dir_cache 1KB 8KB [ 2326.425288][T29030] file_lock_cache 11KB 11KB [ 2326.431403][T29030] file_lock_ctx 8KB 11KB [ 2326.438400][T29030] fsnotify_mark_connector 2KB 8KB [ 2326.445896][T29030] net_namespace 3421KB 3507KB [ 2326.452083][T29030] task_delay_info 822KB 957KB [ 2326.459030][T29030] taskstats 597KB 691KB [ 2326.465632][T29030] proc_dir_entry 19889KB 20887KB [ 2326.471785][T29030] pde_opener 8KB 15KB [ 2326.478678][T29030] seq_file 23KB 63KB [ 2326.485486][T29030] sigqueue 0KB 3KB [ 2326.491667][T29030] shmem_inode_cache 10738KB 11348KB [ 2326.499796][T29030] kernfs_iattrs_cache 9KB 15KB [ 2326.507241][T29030] kernfs_node_cache 107457KB 107458KB [ 2326.514099][T29030] mnt_cache 355KB 363KB [ 2326.520429][T29030] filp 3676KB 4451KB [ 2326.527606][T29030] names_cache 34425KB 34425KB [ 2326.534415][T29030] iint_cache 28KB 66KB [ 2326.540520][T29030] lsm_file_cache 710KB 897KB [ 2326.548226][T29030] key_jar 27KB 43KB [ 2326.554861][T29030] uts_namespace 5KB 15KB [ 2326.561099][T29030] nsproxy 127KB 138KB [ 2326.568089][T29030] vm_area_struct 11905KB 13245KB [ 2326.574847][T29030] mm_struct 2325KB 2538KB [ 2326.580911][T29030] fs_cache 578KB 704KB [ 2326.588318][T29030] files_cache 1874KB 2190KB [ 2326.595094][T29030] signal_cache 5590KB 5778KB [ 2326.601169][T29030] sighand_cache 4155KB 4190KB [ 2326.609615][T29030] task_struct 22260KB 22260KB [ 2326.616227][T29030] cred_jar 1885KB 2112KB [ 2326.622316][T29030] anon_vma_chain 3696KB 4421KB [ 2326.629376][T29030] anon_vma 2952KB 3116KB [ 2326.636312][T29030] pid 388KB 461KB [ 2326.643053][T29030] Acpi-Operand 156KB 194KB [ 2326.649126][T29030] Acpi-ParseExt 9KB 11KB [ 2326.656017][T29030] Acpi-Parse 41KB 47KB [ 2326.662081][T29030] Acpi-State 52KB 63KB [ 2326.669510][T29030] Acpi-Namespace 23KB 27KB [ 2326.676237][T29030] shared_policy_node 0KB 3KB [ 2326.682982][T29030] numa_policy 6KB 23KB [ 2326.689069][T29030] trace_event_file 358KB 358KB [ 2326.695828][T29030] ftrace_event_field 491KB 496KB [ 2326.702253][T29030] pool_workqueue 990KB 992KB [ 2326.709075][T29030] vmap_area 1111KB 2307KB [ 2326.716777][T29030] debug_objects_cache 7984KB 8297KB [ 2326.723972][T29030] page->ptl 3274KB 3909KB [ 2326.730053][T29030] kmalloc-4M 4096KB 4096KB [ 2326.736943][T29030] kmalloc-1M 8192KB 8192KB [ 2326.744522][T29030] kmalloc-512k 4096KB 4096KB [ 2326.750621][T29030] kmalloc-256k 244736KB 244736KB [ 2326.756753][T29030] kmalloc-128k 18944KB 19200KB [ 2326.763169][T29030] kmalloc-64k 6656KB 7296KB [ 2326.769235][T29030] kmalloc-32k 45888KB 45888KB [ 2326.775374][T29030] kmalloc-16k 27296KB 27360KB [ 2326.781431][T29030] kmalloc-8k 45600KB 45600KB [ 2326.787731][T29030] kmalloc-4k 266088KB 266112KB [ 2326.794063][T29030] kmalloc-2k 164520KB 164568KB [ 2326.800151][T29030] kmalloc-1k 202470KB 241428KB [ 2326.806388][T29030] kmalloc-512 46237KB 48200KB [ 2326.812570][T29030] kmalloc-256 32825KB 33692KB [ 2326.818632][T29030] kmalloc-128 5720KB 5820KB [ 2326.826888][T29030] kmalloc-96 4448KB 4492KB [ 2326.833060][T29030] kmalloc-64 10013KB 10908KB [ 2326.839207][T29030] kmalloc-32 6810KB 7193KB [ 2326.845333][T29030] kmalloc-192 8665KB 8884KB [ 2326.851388][T29030] kmem_cache 447KB 448KB [ 2326.857511][T29030] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=28900,uid=0 [ 2326.872195][T29030] Out of memory: Killed process 28984 (syz-executor.0) total-vm:74972kB, anon-rss:2212kB, file-rss:35700kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2326.890753][ T1144] oom_reaper: reaped process 28984 (syz-executor.0), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 18:52:20 executing program 0: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0x0, r0) set_mempolicy(0x8000, &(0x7f0000000040)=0xfffffffffffffffd, 0x10000) 18:52:20 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0xffffffff}, 0x0) 18:52:20 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7000000, 0x80000) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x5}, 0x9, 0x81, &(0x7f0000000040)="7641b1fd3dc96916a442149e89251b6f0f97e3eb741ffcfc97c9d069619a321a02ac6e48a79fbca39cec3acd6f17de7a7c9e0d52f1320e132eb1cd5d76c8e50e3789feb0ca2eed80cf095f151534eced158a82200d6c80b021706ba57e33af9b1c1aac7849bd1b14e5bb7b7e985a34c81c9b08d3718e7b8a2dc42190457636023dcaecfa535984ce456e7827e3122628f54a42df1a3c46b682b166019f9a29e6865902e6d65011875e4f305575fc2c7c448662b68bc0fb3edd0949316d16d782aa77495db99dd2a2e123aa7c49096ca50cb140b7dea8ca604d6eccafbdd50b5b", 0xe0, 0x5, 0x1, 0x6, 0x20000000, 0x6, &(0x7f0000000180)="50bbc92070e82e94dd8f8341e356c89afd271f7dfae0546a947485ae8b2d5d035ab660c0b0c84911a3b004d20f2211468edac959c0e7230c6cb9446e65b9c5ccfe63f9d510e070ae128629f8eb8fc8f6853a89ae3eafc4317ae18273dd9fd207a1d6452c504a4b2a73090802b92f724c7a5c08ed95c90de3a988b2a9ffb3d14eb505a33345a2b8819474da15634d760093331989c48a6df66af0828256ac81dd33869a4acdc9ef6b39a202c5e7200fbc525eece71bb22d7b07fcadb7f2601722c6e0696877d3502b4216f6318fb152d569ebec4c25317e317f3b0d195cbaa03180431f20ab11aebed86a67e210"}) unshare(0x40000000) 18:52:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x68000000}, 0x0) 18:52:20 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1) r2 = request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)='mime_typevboxnet0.ppp0md5sum}\x00', r1) keyctl$negate(0xd, 0x0, 0xff, r2) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) mknod$loop(&(0x7f0000000340)='./file0\x00', 0x100, 0x0) sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) accept4$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14, 0xfee99e9da35d42fc) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000300)={r5, 0x1, 0x6, @broadcast}, 0x10) 18:52:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0xffffffff) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x4) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)=0x200) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000000)={0x1f, 0xfffffffffffffffa}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000040)) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) getsockopt$inet_int(r6, 0x0, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 2327.069155][T29143] __nla_validate_parse: 1 callbacks suppressed [ 2327.069164][T29143] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2327.074661][T29144] IPVS: ftp: loaded support on port[0] = 21 [ 2327.104314][T29146] IPVS: ftp: loaded support on port[0] = 21 18:52:20 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'batadv_slave_0\x00'}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x2c, 0x17, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x48040) unshare(0x40000000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000180)=0x8001) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000001c0)={0x0, 'veth1_to_bond\x00', {}, 0x3}) [ 2327.141926][T29151] device bond0 left promiscuous mode [ 2327.147613][T29145] IPVS: ftp: loaded support on port[0] = 21 [ 2327.154560][T29151] device bond_slave_0 left promiscuous mode [ 2327.169020][T29151] device bond_slave_1 left promiscuous mode [ 2327.178141][T29151] bridge373: port 1(bond0) entered disabled state [ 2327.209337][T29162] IPVS: ftp: loaded support on port[0] = 21 [ 2327.262888][T29151] bridge374: port 1(bond0) entered blocking state [ 2327.272135][T29151] bridge374: port 1(bond0) entered disabled state [ 2327.280852][T29151] device bond0 entered promiscuous mode [ 2327.289280][T29151] device bond_slave_0 entered promiscuous mode [ 2327.295887][T29151] device bond_slave_1 entered promiscuous mode 18:52:21 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) 18:52:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x6c000000}, 0x0) [ 2327.361617][T29151] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:52:21 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x2}, 0x0) [ 2327.463765][T29199] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:52:21 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x3}, 0x0) 18:52:21 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x4}, 0x0) [ 2327.510256][T29208] device bond0 left promiscuous mode [ 2327.518392][T29208] device bond_slave_0 left promiscuous mode [ 2327.535875][T29208] device bond_slave_1 left promiscuous mode [ 2327.544287][T29208] bridge374: port 1(bond0) entered disabled state 18:52:21 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x6}, 0x0) [ 2327.598481][T29208] bridge375: port 1(bond0) entered blocking state [ 2327.615639][T29208] bridge375: port 1(bond0) entered disabled state [ 2327.630701][T29208] device bond0 entered promiscuous mode [ 2327.637467][T29208] device bond_slave_0 entered promiscuous mode [ 2327.645475][T29208] device bond_slave_1 entered promiscuous mode 18:52:21 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xa}, 0x0) 18:52:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x68000000}, 0x0) [ 2327.726081][T29208] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2327.757466][T29199] device bond0 left promiscuous mode [ 2327.762974][T29199] device bond_slave_0 left promiscuous mode [ 2327.769188][T29199] device bond_slave_1 left promiscuous mode 18:52:21 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xc}, 0x0) [ 2327.797651][T29199] bridge375: port 1(bond0) entered disabled state [ 2327.883127][T29272] IPVS: ftp: loaded support on port[0] = 21 [ 2327.897899][T29160] IPVS: ftp: loaded support on port[0] = 21 [ 2327.975674][T29262] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2328.004060][T29277] device bond0 left promiscuous mode [ 2328.009383][T29277] device bond_slave_0 left promiscuous mode [ 2328.026296][T29163] IPVS: ftp: loaded support on port[0] = 21 [ 2328.036044][T29277] device bond_slave_1 left promiscuous mode [ 2328.043219][T29277] bridge2: port 1(bond0) entered disabled state [ 2328.113374][T29277] bridge3: port 1(bond0) entered blocking state [ 2328.120461][T29277] bridge3: port 1(bond0) entered disabled state [ 2328.129464][T29277] device bond0 entered promiscuous mode [ 2328.138092][T29277] device bond_slave_0 entered promiscuous mode [ 2328.146142][T29277] device bond_slave_1 entered promiscuous mode [ 2329.175733][T11583] tipc: TX() has been purged, node left! [ 2329.265645][T11583] tipc: TX() has been purged, node left! [ 2329.402453][T11583] tipc: TX() has been purged, node left! [ 2329.532887][T11583] tipc: TX() has been purged, node left! [ 2329.632256][T11583] tipc: TX() has been purged, node left! [ 2329.673349][T11583] tipc: TX() has been purged, node left! [ 2329.679448][T11583] tipc: TX() has been purged, node left! [ 2329.834497][T11583] tipc: TX() has been purged, node left! [ 2330.012847][T11583] tipc: TX() has been purged, node left! [ 2330.073523][T11583] tipc: TX() has been purged, node left! [ 2330.222321][T11583] tipc: TX() has been purged, node left! [ 2330.312733][T11583] tipc: TX() has been purged, node left! [ 2330.318796][T11583] tipc: TX() has been purged, node left! [ 2330.330605][T11583] tipc: TX() has been purged, node left! [ 2330.350338][T11583] tipc: TX() has been purged, node left! [ 2330.368772][T11583] tipc: TX() has been purged, node left! [ 2330.563916][T11583] tipc: TX() has been purged, node left! [ 2330.744132][T11583] tipc: TX() has been purged, node left! [ 2330.922217][T11583] tipc: TX() has been purged, node left! [ 2331.102164][T11583] tipc: TX() has been purged, node left! [ 2331.252629][T11583] tipc: TX() has been purged, node left! [ 2331.412234][T11583] tipc: TX() has been purged, node left! 18:52:25 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) signalfd(r0, &(0x7f0000000180)={[0x1f, 0x3ff]}, 0x8) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@any, 0x3, 0x3f, 0x3}) set_mempolicy(0x0, &(0x7f0000000080)=0x200, 0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair(0x15, 0x5, 0x40006, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000004c0)={0x4}, 0x4) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x3ff, 0x10000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @rand_addr=0x40}}}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000100)=0xa1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x58, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x21}, 0x8}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e23, 0x2, @remote, 0x5}]}, &(0x7f00000002c0)=0xc) unshare(0x40000000) 18:52:25 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xe}, 0x0) 18:52:25 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r1, 0x400, 0x1) r3 = socket(0x1, 0x803, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setparam(0xffffffffffffffff, &(0x7f0000000000)=0x1000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0010000104deda01eeff000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) unshare(0x40000000) 18:52:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x711fdedb}, 0x0) 18:52:25 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) set_mempolicy(0x4001, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = socket$inet6(0xa, 0x5, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x39}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x7}, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000000)) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = accept4$unix(r2, &(0x7f00000001c0), &(0x7f0000000100)=0x6e, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000240), &(0x7f0000000280)=0x8) 18:52:25 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = open(&(0x7f0000000000)='.\x00', 0x8000, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0xffffffff, 0x1, 0x5}) [ 2331.571789][T11583] tipc: TX() has been purged, node left! [ 2331.604092][T29467] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:52:25 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xf}, 0x0) [ 2331.622574][T11583] tipc: TX() has been purged, node left! [ 2331.637820][T11583] tipc: TX() has been purged, node left! [ 2331.649213][T29466] IPVS: ftp: loaded support on port[0] = 21 [ 2331.651035][T29467] bridge376: port 1(bond0) entered blocking state [ 2331.667788][T29470] IPVS: ftp: loaded support on port[0] = 21 [ 2331.683020][T29467] bridge376: port 1(bond0) entered disabled state [ 2331.695872][T11583] tipc: TX() has been purged, node left! [ 2331.716553][T29467] device bond0 entered promiscuous mode [ 2331.728704][T29467] device bond_slave_0 entered promiscuous mode [ 2331.737249][T29478] IPVS: ftp: loaded support on port[0] = 21 [ 2331.748011][T11583] tipc: TX() has been purged, node left! [ 2331.754631][T11583] tipc: TX() has been purged, node left! [ 2331.761207][T29467] device bond_slave_1 entered promiscuous mode [ 2331.779959][T11583] tipc: TX() has been purged, node left! [ 2331.780671][T29469] IPVS: ftp: loaded support on port[0] = 21 18:52:25 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x10}, 0x0) [ 2331.829721][T11583] tipc: TX() has been purged, node left! [ 2331.846655][T29479] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2331.856916][T11583] tipc: TX() has been purged, node left! [ 2331.874403][T11583] tipc: TX() has been purged, node left! [ 2331.883425][T11583] tipc: TX() has been purged, node left! [ 2331.894248][T11583] tipc: TX() has been purged, node left! [ 2331.914197][T29467] device bond0 left promiscuous mode [ 2331.919828][T29467] device bond_slave_0 left promiscuous mode 18:52:25 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x60}, 0x0) [ 2331.929397][T11583] tipc: TX() has been purged, node left! [ 2331.935785][T29467] device bond_slave_1 left promiscuous mode [ 2331.943381][T11583] tipc: TX() has been purged, node left! [ 2331.949720][T29467] bridge376: port 1(bond0) entered disabled state [ 2331.957188][T11583] tipc: TX() has been purged, node left! [ 2331.966947][T11583] tipc: TX() has been purged, node left! [ 2331.993119][T11583] tipc: TX() has been purged, node left! [ 2332.006736][T11583] tipc: TX() has been purged, node left! [ 2332.028735][T11583] tipc: TX() has been purged, node left! 18:52:25 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xf0}, 0x0) 18:52:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x74000000}, 0x0) [ 2332.077146][T11583] tipc: TX() has been purged, node left! [ 2332.150138][T11583] tipc: TX() has been purged, node left! 18:52:26 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x300}, 0x0) 18:52:26 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r4, @in={{0x2, 0x0, @rand_addr=0x40}}}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000300)={r4, @in6={{0xa, 0x4e20, 0xfffffff8, @dev={0xfe, 0x80, [], 0x17}, 0x2}}, [0xfffffffffffff715, 0x4, 0x8, 0xedef, 0x5a, 0x4, 0x9, 0x5, 0x400, 0xfffffffffffffffc, 0x400, 0xfff, 0x2, 0x9, 0x4]}, &(0x7f0000000400)=0xfc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000440)={r4, 0x115, "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"}, &(0x7f0000000100)=0x11d) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r4, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r5, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x40, 0xff}, &(0x7f0000000100)=0x88) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x2, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) [ 2332.255822][T29474] IPVS: ftp: loaded support on port[0] = 21 [ 2332.273629][T29559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2332.313172][T11583] tipc: TX() has been purged, node left! [ 2332.326693][T11583] tipc: TX() has been purged, node left! 18:52:26 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x600}, 0x0) [ 2332.386854][T29564] bridge377: port 1(bond0) entered blocking state [ 2332.400023][T29564] bridge377: port 1(bond0) entered disabled state [ 2332.454161][T29469] syz-executor.5 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2332.464891][T29564] device bond0 entered promiscuous mode [ 2332.473053][T11583] tipc: TX() has been purged, node left! [ 2332.484415][T29469] CPU: 0 PID: 29469 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 2332.493116][T29469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2332.496844][T29573] IPVS: ftp: loaded support on port[0] = 21 [ 2332.503181][T29469] Call Trace: [ 2332.503206][T29469] dump_stack+0x188/0x20d [ 2332.503223][T29469] dump_header+0x10b/0x826 [ 2332.503243][T29469] oom_kill_process.cold+0x10/0x15 [ 2332.503263][T29469] out_of_memory+0x31f/0x12f0 [ 2332.516976][T29564] device bond_slave_0 entered promiscuous mode [ 2332.521180][T29469] ? oom_killer_disable+0x270/0x270 [ 2332.521206][T29469] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2332.521231][T29469] ? warn_alloc+0x110/0x110 [ 2332.553349][T29469] ? do_fast_syscall_32+0x270/0xe90 [ 2332.558566][T29469] __alloc_pages_nodemask+0x5d9/0x810 [ 2332.563933][T29469] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2332.570674][T29469] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2332.576548][T29469] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2332.582511][T29469] ? do_raw_spin_unlock+0x171/0x260 [ 2332.587693][T29469] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2332.594124][T29469] alloc_pages_current+0xff/0x200 [ 2332.599143][T29469] __vmalloc_node_range+0x478/0x7a0 [ 2332.604439][T29469] ? ebt_register_table+0x220/0xc70 [ 2332.609703][T29469] vmalloc+0x67/0x80 [ 2332.613579][T29469] ? ebt_register_table+0x220/0xc70 [ 2332.618763][T29469] ebt_register_table+0x220/0xc70 [ 2332.623859][T29469] ? ebt_broute+0x700/0x700 [ 2332.628362][T29469] ops_init+0xaf/0x420 [ 2332.632707][T29469] setup_net+0x2de/0x860 [ 2332.636939][T29469] ? ops_init+0x420/0x420 [ 2332.641338][T29469] copy_net_ns+0x293/0x590 [ 2332.645828][T29469] create_new_namespaces+0x3fb/0xb30 [ 2332.651112][T29469] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2332.656732][T29469] ksys_unshare+0x43d/0x8e0 [ 2332.661270][T29469] ? walk_process_tree+0x2c0/0x2c0 [ 2332.666450][T29469] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2332.672337][T29469] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2332.678123][T29469] ? trace_hardirqs_off_caller+0x55/0x230 [ 2332.683828][T29469] ? trace_hardirqs_off_caller+0x55/0x230 [ 2332.689623][T29469] __ia32_sys_unshare+0x2c/0x40 [ 2332.694499][T29469] do_fast_syscall_32+0x270/0xe90 [ 2332.699509][T29469] entry_SYSENTER_compat+0x70/0x7f [ 2332.705829][T11583] tipc: TX() has been purged, node left! [ 2332.729046][T11583] tipc: TX() has been purged, node left! [ 2332.750382][T11583] tipc: TX() has been purged, node left! [ 2332.764090][T29564] device bond_slave_1 entered promiscuous mode [ 2332.782722][T11583] tipc: TX() has been purged, node left! [ 2332.790537][T11583] tipc: TX() has been purged, node left! [ 2332.799728][T11583] tipc: TX() has been purged, node left! [ 2332.806742][T11583] tipc: TX() has been purged, node left! [ 2332.815663][T11583] tipc: TX() has been purged, node left! [ 2332.822801][T29469] Mem-Info: [ 2332.822978][T11583] tipc: TX() has been purged, node left! [ 2332.833854][T11583] tipc: TX() has been purged, node left! [ 2332.839601][T29469] active_anon:313336 inactive_anon:8346 isolated_anon:0 [ 2332.839601][T29469] active_file:2787 inactive_file:6047 isolated_file:0 [ 2332.839601][T29469] unevictable:14 dirty:11 writeback:2 unstable:0 [ 2332.839601][T29469] slab_reclaimable:20192 slab_unreclaimable:381170 [ 2332.839601][T29469] mapped:61077 shmem:8636 pagetables:30214 bounce:0 [ 2332.839601][T29469] free:723834 free_pcp:212 free_cma:0 [ 2332.880361][T11583] tipc: TX() has been purged, node left! [ 2332.886155][T29564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2332.896950][T11583] tipc: TX() has been purged, node left! [ 2332.904249][T29469] Node 0 active_anon:1091760kB inactive_anon:16652kB active_file:16kB inactive_file:4kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217068kB dirty:20kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2332.934916][T29469] Node 0 DMA free:10288kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2332.966362][T29469] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2332.972958][T29469] Node 0 DMA32 free:116068kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1091632kB inactive_anon:16652kB active_file:16kB inactive_file:4kB unevictable:56kB writepending:20kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:21680kB pagetables:34424kB bounce:0kB free_pcp:832kB local_pcp:368kB free_cma:0kB [ 2333.007947][T29469] lowmem_reserve[]: 0 0 0 0 0 [ 2333.015778][T29469] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2333.057369][T29597] IPVS: ftp: loaded support on port[0] = 21 [ 2333.073346][T11583] tipc: TX() has been purged, node left! [ 2333.079293][T11583] tipc: TX() has been purged, node left! [ 2333.091968][T29469] lowmem_reserve[]: 0 0 0 0 0 [ 2333.096697][T29469] Node 0 DMA: 8*4kB (UME) 10*8kB (UM) 8*16kB (UME) 4*32kB (UME) 3*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10288kB [ 2333.116450][T11583] tipc: TX() has been purged, node left! [ 2333.133668][T11583] tipc: TX() has been purged, node left! [ 2333.144231][T11583] tipc: TX() has been purged, node left! [ 2333.159677][T11583] tipc: TX() has been purged, node left! [ 2333.171474][T29469] Node 0 DMA32: 1933*4kB (ME) 1080*8kB (UM) 568*16kB (UME) 376*32kB (UME) 267*64kB (UME) 141*128kB (UME) 67*256kB (UME) 22*512kB (UM) 1*1024kB (U) 7*2048kB (M) 0*4096kB = 116404kB [ 2333.226198][T29469] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2333.258631][T29469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2333.282020][T29469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2333.311924][T29469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2333.321865][T11583] tipc: TX() has been purged, node left! [ 2333.329810][T29469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2333.340207][T29469] 17473 total pagecache pages [ 2333.345060][T29469] 0 pages in swap cache [ 2333.349349][T29469] Swap cache stats: add 0, delete 0, find 0/0 [ 2333.356043][T29469] Free swap = 0kB [ 2333.359895][T29469] Total swap = 0kB [ 2333.365531][T29469] 1965979 pages RAM [ 2333.369444][T29469] 0 pages HighMem/MovableOnly [ 2333.374265][T29469] 349380 pages reserved [ 2333.378527][T29469] 0 pages cma reserved [ 2333.382834][T29469] Unreclaimable slab info: [ 2333.387358][T29469] Name Used Total [ 2333.394353][T29469] pid_3 1KB 7KB [ 2333.400568][T29469] pid_2 910KB 1113KB [ 2333.406800][T29469] bio-3 0KB 7KB [ 2333.413071][T29469] AF_VSOCK 14KB 16KB [ 2333.419293][T29469] batadv_tl_cache 4KB 12KB [ 2333.426180][T29469] SMC 45KB 49KB [ 2333.432425][T29469] TIPC 750KB 754KB [ 2333.438613][T29469] rds_tcp_connection 10KB 11KB [ 2333.444937][T29469] RDS 18KB 18KB [ 2333.451127][T29469] rds_connection 0KB 3KB [ 2333.457320][T29469] SCTPv6 952KB 1026KB [ 2333.464029][T29469] SCTP 206KB 232KB [ 2333.470236][T29469] sctp_chunk 11KB 11KB [ 2333.478570][T29469] sctp_bind_bucket 1KB 3KB [ 2333.485806][T29469] DCCPv6 1155KB 1252KB [ 2333.492733][T29469] DCCP 1060KB 1148KB [ 2333.493392][T11583] tipc: TX() has been purged, node left! [ 2333.499358][T29469] L2TP/IPv6 6KB 6KB [ 2333.512570][T29469] L2TP/IP 23KB 23KB [ 2333.518744][T29469] KCM 17KB 19KB [ 2333.525810][T29469] kcm_mux_cache 7KB 7KB [ 2333.532467][T29469] RXRPC 750KB 816KB [ 2333.538644][T29469] rxrpc_call_jar 4445KB 4455KB [ 2333.545964][T29469] bridge_fdb_cache 74KB 74KB [ 2333.552667][T29469] MPTCPv6 35KB 38KB [ 2333.558856][T29469] fib6_nodes 175KB 184KB [ 2333.565974][T29469] ip6_dst_cache 279KB 423KB [ 2333.572615][T29469] PINGv6 1KB 3KB [ 2333.578796][T29469] RAWv6 3834KB 3850KB [ 2333.589375][T29469] UDPLITEv6 19KB 19KB [ 2333.596333][T29469] UDPv6 920KB 1019KB [ 2333.603146][T29469] TCPv6 1353KB 1365KB [ 2333.609690][T29469] nf_conntrack 19KB 37KB [ 2333.617325][T29469] sd_ext_cdb 0KB 7KB [ 2333.624300][T29469] scsi_sense_cache 1056KB 1064KB [ 2333.630485][T29469] virtio_scsi_cmd 16KB 16KB [ 2333.637706][T29469] sgpool-128 8KB 8KB [ 2333.644447][T29469] sgpool-64 4KB 12KB [ 2333.651162][T29469] sgpool-32 3KB 15KB [ 2333.657889][T29469] sgpool-16 26KB 30KB [ 2333.664717][T29469] sgpool-8 18KB 52KB [ 2333.672858][T29469] mqueue_inode_cache 53KB 62KB [ 2333.679332][T29469] f2fs_bio_post_read_ctx 16KB 16KB [ 2333.682409][T11583] tipc: TX() has been purged, node left! [ 2333.687366][T29469] jfs_mp 7KB 7KB [ 2333.698735][T29469] cifs_small_rq 15KB 16KB [ 2333.706296][T29469] cifs_request 67KB 67KB [ 2333.712557][T29469] cifs_mpx_ids 0KB 8KB [ 2333.718760][T29469] nfs_commit_data 3KB 7KB [ 2333.725126][T29469] nfs_write_data 34KB 44KB [ 2333.731369][T29469] ext4_system_zone 1KB 7KB [ 2333.737695][T29469] ext4_io_end_vec 8KB 15KB [ 2333.745918][T29469] ext4_bio_post_read_ctx 15KB 15KB [ 2333.753030][T29469] io_kiocb 0KB 3KB [ 2333.759209][T29469] kioctx 21KB 23KB [ 2333.765518][T29469] aio_kiocb 6KB 7KB [ 2333.772145][T29469] userfaultfd_ctx_cache 2KB 4KB [ 2333.778568][T29469] bio-2 1KB 7KB [ 2333.786995][T29469] fasync_cache 2KB 7KB [ 2333.793162][T29469] pid_namespace 4KB 11KB [ 2333.799233][T29469] posix_timers_cache 7KB 11KB [ 2333.805795][T29469] kvm_vcpu 0KB 70KB [ 2333.812278][T29469] kvm_mmu_page_header 58KB 61KB [ 2333.818615][T29469] pte_list_desc 2KB 3KB [ 2333.831755][T29469] x86_emulator 51KB 54KB [ 2333.837852][T29469] x86_fpu 0KB 43KB [ 2333.844058][T29469] rpc_buffers 17KB 25KB [ 2333.850138][T29469] rpc_tasks 2KB 7KB [ 2333.856508][T29469] UNIX 530KB 620KB [ 2333.863272][T11583] tipc: TX() has been purged, node left! [ 2333.868961][T29469] UDP-Lite 71KB 73KB [ 2333.875179][T29469] MPTCP 10KB 15KB [ 2333.881361][T29469] tcp_bind_bucket 46KB 48KB [ 2333.887865][T29469] inet_peer_cache 28KB 32KB [ 2333.894203][T29469] ip_fib_trie 24KB 31KB [ 2333.900532][T29469] ip_fib_alias 112KB 134KB [ 2333.906662][T29469] ip_dst_cache 100KB 168KB [ 2333.912958][T29469] PING 12KB 15KB [ 2333.919028][T29469] RAW 3196KB 3242KB [ 2333.925422][T29469] UDP 1065KB 1092KB [ 2333.931654][T29469] TCP 302KB 352KB [ 2333.937788][T29469] hugetlbfs_inode_cache 6KB 10KB [ 2333.944627][T29469] fscache_cookie_jar 1KB 7KB [ 2333.951561][T29469] bio-1 10KB 15KB [ 2333.957780][T29469] eventpoll_pwq 7KB 35KB [ 2333.964091][T29469] eventpoll_epi 12KB 39KB [ 2333.970177][T29469] inotify_inode_mark 4KB 7KB [ 2333.976990][T29469] request_queue 157KB 157KB [ 2333.983276][T29469] blkdev_ioc 19KB 19KB [ 2333.989343][T29469] bio-0 214KB 312KB [ 2333.995609][T29469] biovec-max 956KB 956KB [ 2334.001745][T29469] biovec-64 108KB 149KB [ 2334.009110][T29469] biovec-16 33KB 33KB [ 2334.015285][T29469] bio_integrity_payload 1KB 7KB [ 2334.022380][T29469] khugepaged_mm_slot 281KB 324KB [ 2334.028542][T29469] user_namespace 4KB 7KB [ 2334.034946][T29469] uid_cache 0KB 4KB [ 2334.041138][T29469] dmaengine-unmap-256 2KB 6KB [ 2334.047615][T29469] dmaengine-unmap-128 1KB 3KB [ 2334.053925][T29469] dmaengine-unmap-16 0KB 4KB [ 2334.060085][T29469] dmaengine-unmap-2 0KB 3KB [ 2334.066228][T29469] audit_buffer 0KB 3KB [ 2334.072384][T29469] skbuff_ext_cache 0KB 4KB [ 2334.078434][T29469] skbuff_fclone_cache 377KB 585KB [ 2334.085343][T29469] skbuff_head_cache 24559KB 40211KB [ 2334.091872][T29469] configfs_dir_cache 1KB 8KB [ 2334.098039][T29469] file_lock_cache 10KB 11KB [ 2334.104280][T11583] tipc: TX() has been purged, node left! [ 2334.109966][T29469] file_lock_ctx 8KB 11KB [ 2334.116108][T29469] fsnotify_mark_connector 2KB 8KB [ 2334.122807][T29469] net_namespace 3493KB 3565KB [ 2334.128870][T29469] task_delay_info 846KB 957KB [ 2334.135178][T29469] taskstats 588KB 680KB [ 2334.141239][T29469] proc_dir_entry 19839KB 20613KB [ 2334.147344][T29469] pde_opener 14KB 15KB [ 2334.153481][T29469] seq_file 27KB 63KB [ 2334.161188][T29469] sigqueue 0KB 3KB [ 2334.167353][T29469] shmem_inode_cache 10724KB 11348KB [ 2334.173515][T29469] kernfs_iattrs_cache 9KB 15KB [ 2334.179765][T29469] kernfs_node_cache 109171KB 109172KB [ 2334.186046][T29469] mnt_cache 355KB 363KB [ 2334.192674][T29469] filp 3001KB 4346KB [ 2334.198769][T29469] names_cache 22410KB 22410KB [ 2334.205092][T29469] iint_cache 37KB 66KB [ 2334.211168][T29469] lsm_file_cache 559KB 897KB [ 2334.217488][T29469] key_jar 34KB 43KB [ 2334.223817][T29469] uts_namespace 5KB 15KB [ 2334.229880][T29469] nsproxy 123KB 138KB [ 2334.236017][T29469] vm_area_struct 11864KB 13190KB [ 2334.243217][T29469] mm_struct 2308KB 2538KB [ 2334.249376][T29469] fs_cache 578KB 704KB [ 2334.255674][T29469] files_cache 1899KB 2190KB [ 2334.262071][T29469] signal_cache 5806KB 5882KB [ 2334.268220][T29469] sighand_cache 4451KB 4481KB [ 2334.274926][T29469] task_struct 22885KB 22943KB [ 2334.281180][T29469] cred_jar 1585KB 2108KB [ 2334.287543][T29469] anon_vma_chain 3684KB 4417KB [ 2334.293857][T29469] anon_vma 2940KB 3116KB [ 2334.299932][T29469] pid 439KB 461KB [ 2334.306496][T29469] Acpi-Operand 156KB 194KB [ 2334.312659][T29469] Acpi-ParseExt 9KB 11KB [ 2334.318935][T29469] Acpi-Parse 41KB 47KB [ 2334.325100][T11583] tipc: TX() has been purged, node left! [ 2334.330779][T29469] Acpi-State 52KB 63KB [ 2334.337094][T29469] Acpi-Namespace 23KB 27KB [ 2334.343412][T29469] shared_policy_node 0KB 3KB [ 2334.349653][T29469] numa_policy 4KB 23KB [ 2334.355966][T29469] trace_event_file 358KB 358KB [ 2334.362252][T29469] ftrace_event_field 491KB 496KB [ 2334.368607][T29469] pool_workqueue 1005KB 1008KB [ 2334.374890][T29469] vmap_area 1308KB 2303KB [ 2334.380962][T29469] debug_objects_cache 8059KB 8297KB [ 2334.387274][T29469] page->ptl 3269KB 3909KB [ 2334.393483][T29469] kmalloc-4M 4096KB 4096KB [ 2334.399706][T29469] kmalloc-1M 8192KB 8192KB [ 2334.405856][T29469] kmalloc-512k 4096KB 4096KB [ 2334.412440][T29469] kmalloc-256k 210432KB 211456KB [ 2334.418638][T29469] kmalloc-128k 18944KB 19200KB [ 2334.424924][T29469] kmalloc-64k 6656KB 7296KB [ 2334.431087][T29469] kmalloc-32k 47104KB 47104KB [ 2334.437378][T29469] kmalloc-16k 27840KB 27840KB [ 2334.443593][T29469] kmalloc-8k 46400KB 46400KB [ 2334.449657][T29469] kmalloc-4k 262520KB 262552KB [ 2334.455780][T29469] kmalloc-2k 164700KB 164752KB [ 2334.461974][T29469] kmalloc-1k 202518KB 241180KB [ 2334.468078][T29469] kmalloc-512 47121KB 48576KB [ 2334.474245][T29469] kmalloc-256 32122KB 33244KB [ 2334.480305][T29469] kmalloc-128 5930KB 5972KB [ 2334.486508][T29469] kmalloc-96 4558KB 4600KB [ 2334.492791][T29469] kmalloc-64 10329KB 10908KB [ 2334.498987][T29469] kmalloc-32 6776KB 7193KB [ 2334.505310][T29469] kmalloc-192 8790KB 8992KB [ 2334.511387][T29469] kmem_cache 451KB 452KB [ 2334.517535][T29469] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4577,uid=0 18:52:28 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2a2, 0x40) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) unshare(0x40000000) 18:52:28 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xa00}, 0x0) [ 2334.535193][T29469] Out of memory: Killed process 4577 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2334.561753][T11583] tipc: TX() has been purged, node left! 18:52:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000000)="c7f6a0c3e3e5f440f2d4ad75d9ec2060ff657d5dadba4d6488a0fb25ee92ed115c5fc43251d9a9f3c8d8d1a989ddeffa9874be561a1ea88b95be7ce2f4c82ad151e14b51004e76413de404a00ce0926a0cf41703b8a845a0cb1b1ccf03f6b3cced46dcf5409194429d54a8bf4024a9", &(0x7f0000000180)=""/251}, 0x1c) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) 18:52:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x7a000000}, 0x0) 18:52:28 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x7331c2, 0x15c) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) r0 = socket(0x29, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={r1, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}, 0xc) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000180)=0x2) set_mempolicy(0x4002, &(0x7f0000000140)=0x80000000, 0x2) unshare(0x40000000) 18:52:28 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ldconfig_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24048010}, 0x1000d) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00e8000c6e728b", @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250800000014000300fe8000000000000000000000000000bb1400060073797a6b616c6c657231000000000000"], 0x3c}}, 0x8800) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xe86}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:groupadd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x74}, 0x1, 0x0, 0x0, 0x841}, 0x0) unshare(0x0) 18:52:28 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xc00}, 0x0) [ 2334.655881][T29646] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2334.674204][T11583] tipc: TX() has been purged, node left! [ 2334.681077][T11583] tipc: TX() has been purged, node left! [ 2334.698195][T29646] device bond0 left promiscuous mode [ 2334.715346][T29648] IPVS: ftp: loaded support on port[0] = 21 [ 2334.721778][T11583] tipc: TX() has been purged, node left! [ 2334.733698][T11583] tipc: TX() has been purged, node left! [ 2334.734712][T29650] IPVS: ftp: loaded support on port[0] = 21 [ 2334.754143][T29646] device bond_slave_0 left promiscuous mode 18:52:28 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de4283ffaec56d159e567a42767a7b89b65e4841c9695825a4b10dd5cb8b24f84b29ceef0a428124050e273c65dbfb96b053bda211a0aa613e4d66c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c21e8b48ccc37a399ce45f49cfc69c913e8356d5a58d8b6222d2e21ac715547dff0000000000000000000000000000000025820c9874ab4a1d7499dde60f692672a47457c9f57e9b2b8980b97fd09945c3573c4ab652b933256368318c5b422dab"], 0x38}}, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) [ 2334.757112][T29655] IPVS: ftp: loaded support on port[0] = 21 [ 2334.767082][T11583] tipc: TX() has been purged, node left! [ 2334.775923][T29646] device bond_slave_1 left promiscuous mode [ 2334.783006][T11583] tipc: TX() has been purged, node left! [ 2334.804015][T29646] bridge377: port 1(bond0) entered disabled state 18:52:28 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xe00}, 0x0) [ 2334.810894][T11583] tipc: TX() has been purged, node left! [ 2334.855199][T11583] tipc: TX() has been purged, node left! [ 2334.884620][T11583] tipc: TX() has been purged, node left! [ 2334.888221][T29662] IPVS: ftp: loaded support on port[0] = 21 [ 2334.911805][T29646] bridge378: port 1(bond0) entered blocking state [ 2334.918777][T11583] tipc: TX() has been purged, node left! [ 2334.920675][T29646] bridge378: port 1(bond0) entered disabled state [ 2334.934265][T11583] tipc: TX() has been purged, node left! [ 2334.947086][T29646] device bond0 entered promiscuous mode 18:52:28 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xf00}, 0x0) [ 2334.971560][T29646] device bond_slave_0 entered promiscuous mode [ 2334.978084][T11583] tipc: TX() has been purged, node left! [ 2334.994072][T29646] device bond_slave_1 entered promiscuous mode [ 2335.006104][T11583] tipc: TX() has been purged, node left! [ 2335.037084][T29650] syz-executor.5 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2335.050548][T11583] tipc: TX() has been purged, node left! [ 2335.053429][T29658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2335.080521][T11583] tipc: TX() has been purged, node left! [ 2335.083481][T29650] CPU: 0 PID: 29650 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 2335.094862][T29650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2335.104936][T29650] Call Trace: [ 2335.108254][T29650] dump_stack+0x188/0x20d [ 2335.112604][T29650] dump_header+0x10b/0x826 [ 2335.117034][T29650] oom_kill_process.cold+0x10/0x15 [ 2335.122169][T29650] out_of_memory+0x31f/0x12f0 [ 2335.126863][T29650] ? oom_killer_disable+0x270/0x270 [ 2335.132070][T29650] ? mutex_trylock+0x246/0x2c0 [ 2335.136868][T29650] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2335.143555][T29650] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2335.150167][T29650] ? warn_alloc+0x110/0x110 [ 2335.154684][T29650] ? do_fast_syscall_32+0x270/0xe90 [ 2335.159942][T29650] __alloc_pages_nodemask+0x5d9/0x810 [ 2335.165344][T29650] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2335.172224][T29650] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2335.178039][T29650] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2335.184022][T29650] ? do_raw_spin_unlock+0x171/0x260 [ 2335.189231][T29650] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2335.195926][T29650] alloc_pages_current+0xff/0x200 [ 2335.204307][T29650] __vmalloc_node_range+0x478/0x7a0 [ 2335.209643][T29650] ? ebt_register_table+0x1e6/0xc70 [ 2335.214846][T29650] vmalloc+0x67/0x80 [ 2335.218757][T29650] ? ebt_register_table+0x1e6/0xc70 [ 2335.224001][T29650] ebt_register_table+0x1e6/0xc70 [ 2335.224211][T29646] device bond0 left promiscuous mode [ 2335.229031][T29650] ? ebt_broute+0x700/0x700 [ 2335.229049][T29650] ops_init+0xaf/0x420 [ 2335.229067][T29650] setup_net+0x2de/0x860 [ 2335.229083][T29650] ? ops_init+0x420/0x420 [ 2335.229106][T29650] copy_net_ns+0x293/0x590 [ 2335.236794][T29646] device bond_slave_0 left promiscuous mode [ 2335.238935][T29650] create_new_namespaces+0x3fb/0xb30 [ 2335.238957][T29650] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2335.238974][T29650] ksys_unshare+0x43d/0x8e0 [ 2335.238993][T29650] ? walk_process_tree+0x2c0/0x2c0 [ 2335.252200][T29646] device bond_slave_1 left promiscuous mode [ 2335.256068][T29650] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2335.256083][T29650] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2335.256100][T29650] ? fput_many+0x2f/0x1a0 [ 2335.256114][T29650] ? trace_hardirqs_off_caller+0x55/0x230 [ 2335.256131][T29650] __ia32_sys_unshare+0x2c/0x40 [ 2335.256153][T29650] do_fast_syscall_32+0x270/0xe90 [ 2335.266645][T29646] bridge378: port 1(bond0) entered disabled state [ 2335.267357][T29650] entry_SYSENTER_compat+0x70/0x7f [ 2335.274966][T29650] Mem-Info: 18:52:29 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x3f00}, 0x0) [ 2335.336998][T29650] active_anon:312323 inactive_anon:8346 isolated_anon:0 [ 2335.336998][T29650] active_file:2786 inactive_file:6069 isolated_file:0 [ 2335.336998][T29650] unevictable:14 dirty:10 writeback:0 unstable:0 [ 2335.336998][T29650] slab_reclaimable:20204 slab_unreclaimable:384165 [ 2335.336998][T29650] mapped:61125 shmem:8636 pagetables:30220 bounce:0 [ 2335.336998][T29650] free:721630 free_pcp:310 free_cma:0 [ 2335.375744][T11583] tipc: TX() has been purged, node left! 18:52:29 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x90) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) [ 2335.377536][T29650] Node 0 active_anon:1087556kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217068kB dirty:20kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 956416kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2335.411210][T11583] tipc: TX() has been purged, node left! [ 2335.419195][T29650] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2335.420068][T11583] tipc: TX() has been purged, node left! [ 2335.459719][T29650] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2335.466248][T11583] tipc: TX() has been purged, node left! [ 2335.483802][T29650] Node 0 DMA32 free:116252kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1087428kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB writepending:0kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:21616kB pagetables:34324kB bounce:0kB free_pcp:1252kB local_pcp:748kB free_cma:0kB [ 2335.523219][T11583] tipc: TX() has been purged, node left! [ 2335.542529][T11583] tipc: TX() has been purged, node left! [ 2335.586240][T11583] tipc: TX() has been purged, node left! [ 2335.593366][T11583] tipc: TX() has been purged, node left! [ 2335.635087][T29650] lowmem_reserve[]: 0 0 0 0 0 [ 2335.649412][T29650] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2335.694961][T29650] lowmem_reserve[]: 0 0 0 0 0 [ 2335.698896][T29665] IPVS: ftp: loaded support on port[0] = 21 [ 2335.700565][T29650] Node 0 DMA: 7*4kB (ME) 11*8kB (UM) 7*16kB (UME) 4*32kB (UME) 3*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10276kB [ 2335.755937][T29650] Node 0 DMA32: 1871*4kB (UME) 1065*8kB (UM) 562*16kB (UME) 376*32kB (UME) 215*64kB (ME) 138*128kB (UME) 67*256kB (UME) 22*512kB (UM) 1*1024kB (U) 9*2048kB (M) 0*4096kB = 116324kB [ 2335.778814][T29650] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2335.792130][T29650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2335.806905][T29650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2335.816986][T29650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2335.830967][T29650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2335.840837][T29650] 17500 total pagecache pages [ 2335.849568][T11583] tipc: TX() has been purged, node left! [ 2335.855816][T29650] 0 pages in swap cache [ 2335.861098][T29650] Swap cache stats: add 0, delete 0, find 0/0 [ 2335.890034][T29650] Free swap = 0kB [ 2335.894913][T29650] Total swap = 0kB [ 2335.899221][T29650] 1965979 pages RAM [ 2335.908119][T29650] 0 pages HighMem/MovableOnly [ 2335.911109][T29724] IPVS: ftp: loaded support on port[0] = 21 [ 2335.914569][T29650] 349380 pages reserved [ 2335.928383][T29650] 0 pages cma reserved [ 2335.933749][T29650] Unreclaimable slab info: [ 2335.939403][T29650] Name Used Total [ 2335.954958][T29650] pid_3 1KB 7KB [ 2335.964984][T29650] pid_2 918KB 1113KB [ 2335.971120][T29650] bio-3 0KB 7KB [ 2335.979328][T29650] AF_VSOCK 14KB 16KB [ 2335.989555][T29650] batadv_tl_cache 4KB 12KB [ 2335.997730][T29650] SMC 45KB 49KB [ 2336.007373][T29650] TIPC 763KB 767KB [ 2336.011613][T11583] tipc: TX() has been purged, node left! [ 2336.017829][T29650] rds_tcp_connection 10KB 11KB [ 2336.030861][T29650] RDS 18KB 18KB [ 2336.039076][T29650] rds_connection 0KB 3KB [ 2336.046740][T29650] SCTPv6 960KB 1032KB [ 2336.055252][T29650] SCTP 206KB 232KB [ 2336.062620][T29650] sctp_chunk 11KB 11KB [ 2336.068727][T29650] sctp_bind_bucket 1KB 3KB [ 2336.076209][T29650] DCCPv6 1152KB 1252KB [ 2336.085899][T29650] DCCP 1070KB 1155KB [ 2336.094706][T29650] L2TP/IPv6 6KB 6KB [ 2336.101169][T29650] L2TP/IP 23KB 23KB [ 2336.108921][T29650] KCM 17KB 19KB [ 2336.120826][T29650] kcm_mux_cache 7KB 7KB [ 2336.127946][T29650] RXRPC 752KB 816KB [ 2336.139565][T29650] rxrpc_call_jar 4483KB 4485KB [ 2336.146655][T29650] bridge_fdb_cache 74KB 74KB [ 2336.159578][T29650] MPTCPv6 35KB 38KB [ 2336.166658][T29650] fib6_nodes 175KB 184KB [ 2336.171622][T11583] tipc: TX() has been purged, node left! [ 2336.179017][T29650] ip6_dst_cache 279KB 423KB [ 2336.186721][T29650] PINGv6 1KB 3KB [ 2336.200526][T29650] RAWv6 3876KB 3878KB [ 2336.207612][T29650] UDPLITEv6 19KB 19KB [ 2336.218799][T29650] UDPv6 943KB 1019KB [ 2336.225686][T29650] TCPv6 1368KB 1372KB [ 2336.236040][T29650] nf_conntrack 19KB 37KB [ 2336.242972][T29650] sd_ext_cdb 0KB 7KB [ 2336.249058][T29650] scsi_sense_cache 1056KB 1064KB [ 2336.259222][T29650] virtio_scsi_cmd 16KB 16KB [ 2336.266257][T29650] sgpool-128 8KB 8KB [ 2336.277714][T29650] sgpool-64 4KB 12KB [ 2336.284443][T29650] sgpool-32 3KB 15KB [ 2336.290862][T29650] sgpool-16 26KB 30KB [ 2336.301318][T29650] sgpool-8 23KB 52KB [ 2336.308022][T29650] mqueue_inode_cache 53KB 62KB [ 2336.319700][T29650] f2fs_bio_post_read_ctx 16KB 16KB [ 2336.327067][T29650] jfs_mp 7KB 7KB [ 2336.332109][T11583] tipc: TX() has been purged, node left! [ 2336.341606][T29650] cifs_small_rq 15KB 16KB [ 2336.348074][T29650] cifs_request 67KB 67KB [ 2336.369599][T29650] cifs_mpx_ids 0KB 8KB [ 2336.387071][T29650] nfs_commit_data 3KB 7KB [ 2336.404204][T29650] nfs_write_data 34KB 44KB [ 2336.410343][T29650] ext4_system_zone 1KB 7KB [ 2336.435284][T29650] ext4_io_end_vec 9KB 15KB [ 2336.448574][T29650] ext4_bio_post_read_ctx 15KB 15KB [ 2336.456338][T29650] io_kiocb 0KB 3KB [ 2336.476033][T29650] kioctx 21KB 23KB [ 2336.489714][T29650] aio_kiocb 6KB 7KB [ 2336.491575][T11583] tipc: TX() has been purged, node left! [ 2336.507030][T29650] userfaultfd_ctx_cache 2KB 4KB [ 2336.525306][T29650] bio-2 1KB 7KB [ 2336.541784][T29650] fasync_cache 2KB 7KB [ 2336.547884][T29650] pid_namespace 4KB 11KB [ 2336.558583][T29650] posix_timers_cache 7KB 11KB [ 2336.575673][T29650] kvm_vcpu 0KB 70KB [ 2336.583321][T29650] kvm_mmu_page_header 58KB 61KB [ 2336.590157][T29650] pte_list_desc 2KB 3KB [ 2336.597632][T29650] x86_emulator 51KB 54KB [ 2336.623983][T29650] x86_fpu 0KB 43KB [ 2336.630331][T29650] rpc_buffers 17KB 25KB [ 2336.661720][T29650] rpc_tasks 2KB 7KB [ 2336.667918][T29650] UNIX 546KB 620KB [ 2336.674192][T11583] tipc: TX() has been purged, node left! [ 2336.682086][T29650] UDP-Lite 71KB 73KB [ 2336.688179][T29650] MPTCP 10KB 15KB [ 2336.697501][T29650] tcp_bind_bucket 46KB 48KB [ 2336.705884][T29650] inet_peer_cache 28KB 32KB [ 2336.714598][T11583] tipc: TX() has been purged, node left! [ 2336.721277][T11583] tipc: TX() has been purged, node left! [ 2336.730723][T29650] ip_fib_trie 24KB 31KB [ 2336.740921][T11583] tipc: TX() has been purged, node left! [ 2336.757948][T29650] ip_fib_alias 112KB 134KB [ 2336.766244][T29650] ip_dst_cache 99KB 168KB [ 2336.774009][T29650] PING 12KB 15KB [ 2336.780732][T29650] RAW 3228KB 3242KB [ 2336.787571][T29650] UDP 1074KB 1095KB [ 2336.795118][T29650] TCP 302KB 352KB [ 2336.801690][T29650] hugetlbfs_inode_cache 6KB 10KB [ 2336.803173][T11583] tipc: TX() has been purged, node left! [ 2336.808108][T29650] fscache_cookie_jar 1KB 7KB [ 2336.808117][T29650] bio-1 10KB 15KB [ 2336.808127][T29650] eventpoll_pwq 7KB 35KB [ 2336.808136][T29650] eventpoll_epi 12KB 39KB [ 2336.808149][T29650] inotify_inode_mark 4KB 7KB [ 2336.849244][T29650] request_queue 157KB 157KB [ 2336.855385][T29650] blkdev_ioc 14KB 19KB [ 2336.864852][T29650] bio-0 286KB 312KB [ 2336.871184][T29650] biovec-max 1959KB 1959KB [ 2336.877747][T29650] biovec-64 108KB 149KB [ 2336.887381][T29650] biovec-16 33KB 33KB [ 2336.893557][T29650] bio_integrity_payload 1KB 7KB [ 2336.899963][T29650] khugepaged_mm_slot 281KB 324KB [ 2336.918044][T29650] user_namespace 4KB 7KB [ 2336.924875][T29650] uid_cache 0KB 4KB [ 2336.934684][T29650] dmaengine-unmap-256 2KB 6KB [ 2336.940979][T29650] dmaengine-unmap-128 1KB 3KB [ 2336.947765][T29650] dmaengine-unmap-16 0KB 4KB [ 2336.958278][T29650] dmaengine-unmap-2 0KB 3KB [ 2336.965152][T29650] audit_buffer 0KB 3KB [ 2336.975898][T29650] skbuff_ext_cache 0KB 4KB [ 2336.983561][T29650] skbuff_fclone_cache 411KB 585KB [ 2336.990098][T29650] skbuff_head_cache 24795KB 40211KB [ 2336.998722][T29650] configfs_dir_cache 1KB 8KB [ 2337.004970][T29650] file_lock_cache 6KB 11KB [ 2337.011047][T29650] file_lock_ctx 8KB 11KB [ 2337.011609][T11583] tipc: TX() has been purged, node left! [ 2337.020083][T29650] fsnotify_mark_connector 1KB 8KB [ 2337.032345][T29650] net_namespace 3536KB 3572KB [ 2337.038736][T29650] task_delay_info 846KB 957KB [ 2337.044871][T29650] taskstats 588KB 680KB [ 2337.050951][T29650] proc_dir_entry 19863KB 20516KB [ 2337.059873][T29650] pde_opener 11KB 15KB [ 2337.066816][T29650] seq_file 24KB 63KB [ 2337.078264][T29650] sigqueue 0KB 3KB [ 2337.084710][T29650] shmem_inode_cache 10724KB 11348KB [ 2337.090874][T29650] kernfs_iattrs_cache 9KB 15KB [ 2337.101773][T29650] kernfs_node_cache 109930KB 109931KB [ 2337.108002][T29650] mnt_cache 355KB 363KB [ 2337.118414][T29650] filp 3390KB 4346KB [ 2337.127306][T29650] names_cache 29512KB 29512KB [ 2337.137618][T29650] iint_cache 30KB 66KB [ 2337.144395][T29650] lsm_file_cache 624KB 897KB [ 2337.150473][T29650] key_jar 33KB 43KB [ 2337.160011][T29650] uts_namespace 5KB 15KB [ 2337.166970][T29650] nsproxy 123KB 138KB [ 2337.175963][T29650] vm_area_struct 11892KB 13190KB [ 2337.183011][T29650] mm_struct 2328KB 2538KB [ 2337.189101][T29650] fs_cache 578KB 704KB [ 2337.191575][T11583] tipc: TX() has been purged, node left! [ 2337.198648][T29650] files_cache 1899KB 2190KB [ 2337.207993][T29650] signal_cache 5806KB 5882KB [ 2337.214557][T29650] sighand_cache 4451KB 4481KB [ 2337.220641][T29650] task_struct 23097KB 23155KB [ 2337.226772][T29650] cred_jar 1705KB 2108KB [ 2337.233104][T29650] anon_vma_chain 3684KB 4417KB [ 2337.239365][T29650] anon_vma 2940KB 3116KB [ 2337.245489][T29650] pid 439KB 461KB [ 2337.253741][T29650] Acpi-Operand 156KB 194KB [ 2337.259843][T29650] Acpi-ParseExt 9KB 11KB [ 2337.266002][T29650] Acpi-Parse 41KB 47KB [ 2337.272180][T29650] Acpi-State 52KB 63KB [ 2337.278271][T29650] Acpi-Namespace 23KB 27KB [ 2337.284602][T29650] shared_policy_node 0KB 3KB [ 2337.291646][T29650] numa_policy 3KB 23KB [ 2337.297730][T29650] trace_event_file 358KB 358KB [ 2337.305292][T29650] ftrace_event_field 491KB 496KB [ 2337.312505][T29650] pool_workqueue 1013KB 1016KB [ 2337.318581][T29650] vmap_area 1364KB 2303KB [ 2337.325564][T29650] debug_objects_cache 8118KB 8297KB [ 2337.332794][T29650] page->ptl 3269KB 3909KB [ 2337.338990][T29650] kmalloc-4M 4096KB 4096KB [ 2337.346131][T29650] kmalloc-1M 8192KB 8192KB [ 2337.352913][T29650] kmalloc-512k 4096KB 4096KB [ 2337.359009][T29650] kmalloc-256k 196608KB 197632KB [ 2337.366081][T29650] kmalloc-128k 18944KB 19200KB [ 2337.372856][T11583] tipc: TX() has been purged, node left! [ 2337.378542][T29650] kmalloc-64k 6656KB 7296KB [ 2337.385617][T29650] kmalloc-32k 47552KB 47552KB [ 2337.392420][T29650] kmalloc-16k 28032KB 28032KB [ 2337.398494][T29650] kmalloc-8k 46672KB 46672KB [ 2337.405565][T29650] kmalloc-4k 269712KB 269744KB [ 2337.412321][T29650] kmalloc-2k 165452KB 165504KB [ 2337.418563][T29650] kmalloc-1k 203886KB 241180KB [ 2337.426488][T29650] kmalloc-512 47238KB 48600KB [ 2337.433258][T29650] kmalloc-256 32385KB 33364KB [ 2337.439458][T29650] kmalloc-128 5979KB 6004KB [ 2337.446507][T29650] kmalloc-96 4594KB 4632KB [ 2337.453521][T29650] kmalloc-64 10387KB 10912KB [ 2337.459875][T29650] kmalloc-32 6864KB 7193KB [ 2337.467364][T29650] kmalloc-192 8823KB 9012KB [ 2337.474547][T29650] kmem_cache 451KB 452KB [ 2337.480793][T29650] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4566,uid=0 [ 2337.482892][T29733] IPVS: ftp: loaded support on port[0] = 21 [ 2337.497019][T29650] Out of memory: Killed process 4566 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2337.534901][ T1144] oom_reaper: reaped process 29650 (syz-executor.5), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 2337.551602][T11583] tipc: TX() has been purged, node left! [ 2337.558165][T11583] tipc: TX() has been purged, node left! [ 2337.568927][ T1144] oom_reaper: reaped process 29724 (syz-executor.1), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 2337.580780][T11583] tipc: TX() has been purged, node left! [ 2337.586976][ T1144] oom_reaper: reaped process 29665 (syz-executor.0), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 2337.598408][T11583] tipc: TX() has been purged, node left! [ 2337.606185][T11583] tipc: TX() has been purged, node left! [ 2337.781514][T11583] tipc: TX() has been purged, node left! [ 2337.788504][T11583] tipc: TX() has been purged, node left! [ 2337.795317][T11583] tipc: TX() has been purged, node left! [ 2337.802907][T11583] tipc: TX() has been purged, node left! [ 2337.809297][T11583] tipc: TX() has been purged, node left! [ 2337.816634][T11583] tipc: TX() has been purged, node left! [ 2337.824026][T11583] tipc: TX() has been purged, node left! [ 2337.830393][T11583] tipc: TX() has been purged, node left! [ 2337.843835][T11583] tipc: TX() has been purged, node left! [ 2337.856587][T11583] tipc: TX() has been purged, node left! [ 2338.051399][T11583] tipc: TX() has been purged, node left! [ 2338.214884][T11583] tipc: TX() has been purged, node left! [ 2338.372094][T11583] tipc: TX() has been purged, node left! [ 2338.541326][T11583] tipc: TX() has been purged, node left! [ 2338.701480][T11583] tipc: TX() has been purged, node left! [ 2338.861460][T11583] tipc: TX() has been purged, node left! 18:52:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000000)="c7f6a0c3e3e5f440f2d4ad75d9ec2060ff657d5dadba4d6488a0fb25ee92ed115c5fc43251d9a9f3c8d8d1a989ddeffa9874be561a1ea88b95be7ce2f4c82ad151e14b51004e76413de404a00ce0926a0cf41703b8a845a0cb1b1ccf03f6b3cced46dcf5409194429d54a8bf4024a9", &(0x7f0000000180)=""/251}, 0x1c) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) 18:52:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x81000000}, 0x0) 18:52:32 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x5865}, 0x0) 18:52:32 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendfile(r0, r1, &(0x7f0000000000), 0xff) unshare(0x40000000) 18:52:32 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000000)=0x2, 0x2) unshare(0x40000000) [ 2339.021531][T11583] tipc: TX() has been purged, node left! [ 2339.067401][T29774] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2339.077711][T11583] tipc: TX() has been purged, node left! [ 2339.086949][T11583] tipc: TX() has been purged, node left! [ 2339.089791][T29774] bridge379: port 1(bond0) entered blocking state [ 2339.108661][T29774] bridge379: port 1(bond0) entered disabled state 18:52:32 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:52:32 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x6000}, 0x0) [ 2339.121075][T29773] IPVS: ftp: loaded support on port[0] = 21 [ 2339.129730][T29774] device bond0 entered promiscuous mode [ 2339.136033][T11583] tipc: TX() has been purged, node left! [ 2339.159702][T29774] device bond_slave_0 entered promiscuous mode [ 2339.176838][T11583] tipc: TX() has been purged, node left! [ 2339.187521][T29774] device bond_slave_1 entered promiscuous mode [ 2339.205453][T11583] tipc: TX() has been purged, node left! [ 2339.226412][T29780] IPVS: ftp: loaded support on port[0] = 21 [ 2339.230838][T29778] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2339.244484][T11583] tipc: TX() has been purged, node left! [ 2339.257318][T29782] IPVS: ftp: loaded support on port[0] = 21 [ 2339.269042][T29774] device bond0 left promiscuous mode 18:52:33 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x6558}, 0x0) [ 2339.280195][T29773] syz-executor.5 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2339.289686][T29786] IPVS: ftp: loaded support on port[0] = 21 [ 2339.296720][T29774] device bond_slave_0 left promiscuous mode [ 2339.310317][T11583] tipc: TX() has been purged, node left! [ 2339.325407][T11583] tipc: TX() has been purged, node left! [ 2339.340185][T29774] device bond_slave_1 left promiscuous mode [ 2339.343181][T29773] CPU: 1 PID: 29773 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 2339.348314][T29774] bridge379: port 1(bond0) entered disabled state [ 2339.354780][T29773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2339.354786][T29773] Call Trace: [ 2339.354811][T29773] dump_stack+0x188/0x20d [ 2339.354829][T29773] dump_header+0x10b/0x826 [ 2339.354845][T29773] oom_kill_process.cold+0x10/0x15 [ 2339.354859][T29773] out_of_memory+0x31f/0x12f0 [ 2339.354879][T29773] ? oom_killer_disable+0x270/0x270 [ 2339.399019][T29773] ? mutex_trylock+0x246/0x2c0 [ 2339.403792][T29773] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2339.410465][T29773] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2339.417408][T29773] ? warn_alloc+0x110/0x110 [ 2339.421917][T29773] ? do_fast_syscall_32+0x270/0xe90 [ 2339.427126][T29773] __alloc_pages_nodemask+0x5d9/0x810 [ 2339.432516][T29773] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2339.439295][T29773] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2339.445188][T29773] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2339.451165][T29773] ? do_raw_spin_unlock+0x171/0x260 [ 2339.456361][T29773] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2339.462881][T29773] alloc_pages_current+0xff/0x200 [ 2339.467906][T29773] __vmalloc_node_range+0x478/0x7a0 [ 2339.473114][T29773] ? ebt_register_table+0x1e6/0xc70 [ 2339.478306][T29773] vmalloc+0x67/0x80 [ 2339.482207][T29773] ? ebt_register_table+0x1e6/0xc70 [ 2339.487485][T29773] ebt_register_table+0x1e6/0xc70 [ 2339.492608][T29773] ? ebt_broute+0x700/0x700 [ 2339.499119][T29773] ops_init+0xaf/0x420 [ 2339.503196][T29773] setup_net+0x2de/0x860 [ 2339.507865][T29773] ? ops_init+0x420/0x420 [ 2339.512195][T29773] copy_net_ns+0x293/0x590 [ 2339.516627][T29773] create_new_namespaces+0x3fb/0xb30 [ 2339.521908][T29773] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2339.527542][T29773] ksys_unshare+0x43d/0x8e0 [ 2339.532045][T29773] ? walk_process_tree+0x2c0/0x2c0 [ 2339.537166][T29773] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2339.543095][T29773] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2339.548889][T29773] ? trace_hardirqs_off_caller+0x55/0x230 [ 2339.554630][T29773] __ia32_sys_unshare+0x2c/0x40 [ 2339.559477][T29773] do_fast_syscall_32+0x270/0xe90 [ 2339.564503][T29773] entry_SYSENTER_compat+0x70/0x7f 18:52:33 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x8100}, 0x0) [ 2339.580473][T29773] Mem-Info: [ 2339.583694][T29773] active_anon:311787 inactive_anon:8346 isolated_anon:0 [ 2339.583694][T29773] active_file:2786 inactive_file:6093 isolated_file:0 [ 2339.583694][T29773] unevictable:14 dirty:7 writeback:0 unstable:0 [ 2339.583694][T29773] slab_reclaimable:20217 slab_unreclaimable:385711 [ 2339.583694][T29773] mapped:61119 shmem:8636 pagetables:30187 bounce:0 [ 2339.583694][T29773] free:721742 free_pcp:378 free_cma:0 [ 2339.622962][T29773] Node 0 active_anon:1085392kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217068kB dirty:8kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2339.652283][T29773] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 18:52:33 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xf000}, 0x0) [ 2339.653379][T11583] tipc: TX() has been purged, node left! [ 2339.683972][T29773] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2339.696155][T11583] tipc: TX() has been purged, node left! 18:52:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x88a8ffff}, 0x0) [ 2339.725491][T11583] tipc: TX() has been purged, node left! [ 2339.736447][T29773] Node 0 DMA32 free:116532kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1085264kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB writepending:12kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:21584kB pagetables:34224kB bounce:0kB free_pcp:1504kB local_pcp:412kB free_cma:0kB [ 2339.769886][T11583] tipc: TX() has been purged, node left! [ 2339.784480][T11583] tipc: TX() has been purged, node left! [ 2339.806367][T11583] tipc: TX() has been purged, node left! [ 2339.821024][T11583] tipc: TX() has been purged, node left! 18:52:33 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x34000}, 0x0) [ 2339.845711][T29815] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2339.852124][T29773] lowmem_reserve[]: 0 0 0 0 0 [ 2339.859779][T29773] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2339.888529][T11583] tipc: TX() has been purged, node left! [ 2339.906076][T11583] tipc: TX() has been purged, node left! [ 2339.908882][T29830] IPVS: ftp: loaded support on port[0] = 21 [ 2339.930488][T11583] tipc: TX() has been purged, node left! [ 2339.936961][T29833] bridge380: port 1(bond0) entered blocking state [ 2339.969195][T11583] tipc: TX() has been purged, node left! [ 2339.974534][T29833] bridge380: port 1(bond0) entered disabled state [ 2339.984994][T29838] IPVS: ftp: loaded support on port[0] = 21 [ 2339.994409][T29833] device bond0 entered promiscuous mode [ 2340.005350][T11583] tipc: TX() has been purged, node left! [ 2340.006739][T29833] device bond_slave_0 entered promiscuous mode [ 2340.016609][T29773] lowmem_reserve[]: 0 0 0 0 0 [ 2340.035094][T11583] tipc: TX() has been purged, node left! [ 2340.044260][T29787] IPVS: ftp: loaded support on port[0] = 21 [ 2340.050479][T11583] tipc: TX() has been purged, node left! [ 2340.060978][T29833] device bond_slave_1 entered promiscuous mode [ 2340.067557][T11583] tipc: TX() has been purged, node left! [ 2340.068365][T29773] Node 0 DMA: 6*4kB (UM) 10*8kB (UM) 7*16kB (UME) 4*32kB (UME) 3*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10264kB [ 2340.091497][T11583] tipc: TX() has been purged, node left! [ 2340.098260][T11583] tipc: TX() has been purged, node left! [ 2340.110132][T11583] tipc: TX() has been purged, node left! [ 2340.116081][T29833] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2340.127174][T11583] tipc: TX() has been purged, node left! [ 2340.140406][T29773] Node 0 DMA32: 1871*4kB (UME) 1181*8kB (UM) 668*16kB (UME) 377*32kB (UME) 215*64kB (ME) 111*128kB (UME) 64*256kB (UME) 22*512kB (UM) 1*1024kB (U) 8*2048kB (M) 1*4096kB (M) = 116804kB [ 2340.159680][T29773] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2340.171919][T29773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2340.184511][T29773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2340.194729][T11583] tipc: TX() has been purged, node left! [ 2340.195285][T29773] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2340.210167][T29773] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2340.231238][T29773] 17523 total pagecache pages [ 2340.235966][T29773] 0 pages in swap cache [ 2340.240136][T29773] Swap cache stats: add 0, delete 0, find 0/0 [ 2340.261264][T29773] Free swap = 0kB [ 2340.265027][T29773] Total swap = 0kB [ 2340.268920][T29773] 1965979 pages RAM [ 2340.281190][T29773] 0 pages HighMem/MovableOnly [ 2340.285921][T29773] 349380 pages reserved [ 2340.290161][T29773] 0 pages cma reserved [ 2340.311279][T29773] Unreclaimable slab info: [ 2340.315735][T29773] Name Used Total [ 2340.334528][T11583] tipc: TX() has been purged, node left! [ 2340.342340][T29773] pid_3 1KB 7KB [ 2340.343017][T11583] tipc: TX() has been purged, node left! [ 2340.348451][T29773] pid_2 918KB 1113KB [ 2340.348490][T29773] bio-3 0KB 7KB [ 2340.380052][T11583] tipc: TX() has been purged, node left! [ 2340.386409][T29773] AF_VSOCK 14KB 16KB [ 2340.411230][T29773] batadv_tl_cache 4KB 12KB [ 2340.417359][T29773] SMC 45KB 49KB [ 2340.451221][T29773] TIPC 767KB 767KB [ 2340.457330][T29773] rds_tcp_connection 10KB 11KB [ 2340.491170][T29773] RDS 18KB 18KB [ 2340.497269][T29773] rds_connection 0KB 3KB [ 2340.531240][T29773] SCTPv6 979KB 1045KB [ 2340.537352][T29773] SCTP 206KB 232KB [ 2340.561173][T11583] tipc: TX() has been purged, node left! [ 2340.571701][T29773] sctp_chunk 10KB 11KB [ 2340.578087][T29773] sctp_bind_bucket 0KB 3KB [ 2340.614996][T29773] DCCPv6 1170KB 1267KB [ 2340.641138][T29773] DCCP 1084KB 1170KB [ 2340.647253][T29773] L2TP/IPv6 6KB 6KB [ 2340.681431][T29773] L2TP/IP 23KB 23KB [ 2340.687526][T29773] KCM 17KB 19KB [ 2340.734466][T29773] kcm_mux_cache 7KB 7KB [ 2340.740923][T29773] RXRPC 771KB 830KB [ 2340.781133][T29773] rxrpc_call_jar 4607KB 4608KB [ 2340.789583][T29773] bridge_fdb_cache 70KB 74KB [ 2340.791123][T11583] tipc: TX() has been purged, node left! [ 2340.834549][T29773] MPTCPv6 35KB 38KB [ 2340.854367][T29773] fib6_nodes 175KB 184KB [ 2340.860461][T29773] ip6_dst_cache 279KB 423KB [ 2340.914882][T29773] PINGv6 1KB 3KB [ 2340.931165][T29773] RAWv6 3949KB 3951KB [ 2340.937266][T29773] UDPLITEv6 19KB 19KB [ 2340.971123][T29773] UDPv6 947KB 1019KB [ 2340.977277][T29773] TCPv6 1368KB 1378KB [ 2341.011105][T29773] nf_conntrack 15KB 37KB [ 2341.017238][T29773] sd_ext_cdb 0KB 7KB [ 2341.034498][T11583] tipc: TX() has been purged, node left! [ 2341.041583][T29773] scsi_sense_cache 1056KB 1064KB [ 2341.048013][T29773] virtio_scsi_cmd 16KB 16KB [ 2341.101094][T29773] sgpool-128 8KB 8KB [ 2341.107198][T29773] sgpool-64 4KB 12KB [ 2341.151141][T29773] sgpool-32 3KB 15KB [ 2341.157239][T29773] sgpool-16 26KB 30KB [ 2341.191084][T29773] sgpool-8 23KB 52KB [ 2341.197270][T29773] mqueue_inode_cache 53KB 62KB [ 2341.222739][T11583] tipc: TX() has been purged, node left! [ 2341.228545][T29773] f2fs_bio_post_read_ctx 16KB 16KB [ 2341.251246][T29773] jfs_mp 7KB 7KB [ 2341.257391][T29773] cifs_small_rq 15KB 16KB [ 2341.291093][T29773] cifs_request 67KB 67KB [ 2341.297282][T29773] cifs_mpx_ids 0KB 8KB [ 2341.341168][T29773] nfs_commit_data 3KB 7KB [ 2341.347314][T29773] nfs_write_data 34KB 44KB [ 2341.391097][T29773] ext4_system_zone 1KB 7KB [ 2341.397827][T29773] ext4_io_end_vec 9KB 15KB [ 2341.451547][T11583] tipc: TX() has been purged, node left! [ 2341.465241][T29773] ext4_bio_post_read_ctx 15KB 15KB [ 2341.491055][T29773] io_kiocb 0KB 3KB [ 2341.497168][T29773] kioctx 21KB 23KB [ 2341.522745][T29773] aio_kiocb 6KB 7KB [ 2341.537559][T29773] userfaultfd_ctx_cache 2KB 4KB [ 2341.571603][T29773] bio-2 1KB 7KB [ 2341.577712][T29773] fasync_cache 1KB 7KB [ 2341.604370][T29773] pid_namespace 4KB 11KB [ 2341.610475][T29773] posix_timers_cache 7KB 11KB [ 2341.631373][T29773] kvm_vcpu 0KB 70KB [ 2341.637473][T29773] kvm_mmu_page_header 58KB 61KB [ 2341.661046][T11583] tipc: TX() has been purged, node left! [ 2341.663900][T29773] pte_list_desc 2KB 3KB [ 2341.691138][T29773] x86_emulator 51KB 54KB [ 2341.697270][T29773] x86_fpu 0KB 43KB [ 2341.741065][T29773] rpc_buffers 17KB 25KB [ 2341.748368][T29773] rpc_tasks 2KB 7KB [ 2341.755355][T29773] UNIX 546KB 620KB [ 2341.764513][T29773] UDP-Lite 71KB 73KB [ 2341.771445][T29773] MPTCP 10KB 15KB [ 2341.778272][T29773] tcp_bind_bucket 45KB 48KB [ 2341.792989][T29773] inet_peer_cache 28KB 32KB [ 2341.808485][T29773] ip_fib_trie 24KB 31KB [ 2341.823067][T29773] ip_fib_alias 112KB 134KB [ 2341.830907][T29773] ip_dst_cache 102KB 168KB [ 2341.838340][T29773] PING 12KB 15KB [ 2341.841024][T11583] tipc: TX() has been purged, node left! [ 2341.849092][T29773] RAW 3271KB 3273KB [ 2341.857156][T29773] UDP 1086KB 1099KB [ 2341.863725][T11583] tipc: TX() has been purged, node left! [ 2341.891226][T29773] TCP 311KB 352KB [ 2341.897333][T29773] hugetlbfs_inode_cache 6KB 10KB [ 2341.918330][T29773] fscache_cookie_jar 1KB 7KB [ 2341.925644][T29773] bio-1 10KB 15KB [ 2341.932655][T29773] eventpoll_pwq 7KB 35KB [ 2341.938945][T29773] eventpoll_epi 12KB 39KB [ 2341.963281][T29773] inotify_inode_mark 4KB 7KB [ 2341.969474][T29773] request_queue 157KB 157KB [ 2341.981246][T29773] blkdev_ioc 13KB 19KB [ 2342.001187][T29773] bio-0 351KB 352KB [ 2342.007292][T29773] biovec-max 2528KB 2584KB [ 2342.021110][T29773] biovec-64 108KB 149KB [ 2342.027227][T29773] biovec-16 33KB 33KB [ 2342.061045][T29773] bio_integrity_payload 1KB 7KB [ 2342.063935][T11583] tipc: TX() has been purged, node left! [ 2342.067495][T29773] khugepaged_mm_slot 281KB 324KB [ 2342.091685][T29773] user_namespace 4KB 7KB [ 2342.097965][T29773] uid_cache 0KB 4KB [ 2342.121389][T29773] dmaengine-unmap-256 2KB 6KB [ 2342.127662][T29773] dmaengine-unmap-128 1KB 3KB [ 2342.151066][T29773] dmaengine-unmap-16 0KB 4KB [ 2342.161046][T29773] dmaengine-unmap-2 0KB 3KB [ 2342.167136][T29773] audit_buffer 0KB 3KB [ 2342.191016][T29773] skbuff_ext_cache 0KB 4KB [ 2342.197136][T29773] skbuff_fclone_cache 570KB 607KB [ 2342.215333][T29773] skbuff_head_cache 25378KB 40211KB [ 2342.224308][T29773] configfs_dir_cache 1KB 8KB [ 2342.233718][T29773] file_lock_cache 5KB 11KB [ 2342.240173][T29773] file_lock_ctx 8KB 11KB [ 2342.249790][T29773] fsnotify_mark_connector 1KB 8KB [ 2342.258729][T29773] net_namespace 3579KB 3579KB [ 2342.273115][T11583] tipc: TX() has been purged, node left! [ 2342.281862][T29773] task_delay_info 846KB 957KB [ 2342.288494][T29773] taskstats 588KB 680KB [ 2342.298026][T29773] proc_dir_entry 20091KB 20505KB [ 2342.306568][T29773] pde_opener 11KB 15KB [ 2342.316068][T29773] seq_file 24KB 63KB [ 2342.326234][T29773] shmem_inode_cache 10724KB 11348KB [ 2342.335759][T29773] kernfs_iattrs_cache 9KB 15KB [ 2342.345410][T29773] kernfs_node_cache 110477KB 110485KB [ 2342.354846][T29773] mnt_cache 355KB 363KB [ 2342.363236][T29773] filp 3423KB 4346KB [ 2342.369802][T29773] names_cache 29962KB 29962KB [ 2342.379424][T29773] iint_cache 29KB 66KB [ 2342.387971][T29773] lsm_file_cache 631KB 897KB [ 2342.397457][T29773] key_jar 33KB 43KB [ 2342.406479][T29773] uts_namespace 5KB 15KB [ 2342.416032][T29773] nsproxy 123KB 138KB [ 2342.423903][T11583] tipc: TX() has been purged, node left! [ 2342.430636][T29773] vm_area_struct 11892KB 13183KB [ 2342.442174][T29773] mm_struct 2328KB 2538KB [ 2342.448649][T29773] fs_cache 578KB 704KB [ 2342.458120][T29773] files_cache 1899KB 2190KB [ 2342.468129][T29773] signal_cache 5767KB 5882KB [ 2342.476243][T29773] sighand_cache 4451KB 4481KB [ 2342.483737][T29773] task_struct 22428KB 22518KB [ 2342.489911][T29773] cred_jar 1750KB 2108KB [ 2342.498034][T29773] anon_vma_chain 3684KB 4417KB [ 2342.505595][T29773] anon_vma 2940KB 3116KB [ 2342.513334][T29773] pid 439KB 461KB [ 2342.519404][T29773] Acpi-Operand 156KB 194KB [ 2342.526601][T29773] Acpi-ParseExt 9KB 11KB [ 2342.534213][T29773] Acpi-Parse 41KB 47KB [ 2342.540453][T29773] Acpi-State 52KB 63KB [ 2342.548828][T29773] Acpi-Namespace 23KB 27KB [ 2342.556963][T29773] shared_policy_node 0KB 3KB [ 2342.564170][T29773] numa_policy 3KB 23KB [ 2342.570401][T29773] trace_event_file 358KB 358KB [ 2342.578517][T29773] ftrace_event_field 491KB 496KB [ 2342.585229][T29773] pool_workqueue 1016KB 1020KB [ 2342.591054][T11583] tipc: TX() has been purged, node left! [ 2342.593644][T29773] vmap_area 1426KB 2303KB [ 2342.603210][T29773] debug_objects_cache 8177KB 8297KB [ 2342.609446][T29773] page->ptl 3269KB 3909KB [ 2342.615631][T29773] kmalloc-4M 4096KB 4096KB [ 2342.621948][T29773] kmalloc-1M 8192KB 8192KB [ 2342.628167][T29773] kmalloc-512k 4096KB 4096KB [ 2342.634303][T29773] kmalloc-256k 185344KB 186368KB [ 2342.640599][T29773] kmalloc-128k 18944KB 19200KB [ 2342.646856][T29773] kmalloc-64k 6656KB 7296KB [ 2342.654047][T29773] kmalloc-32k 48256KB 48256KB [ 2342.660108][T29773] kmalloc-16k 28416KB 28416KB [ 2342.666913][T29773] kmalloc-8k 47232KB 47232KB [ 2342.673697][T29773] kmalloc-4k 275544KB 275584KB [ 2342.679849][T29773] kmalloc-2k 166348KB 166400KB [ 2342.686054][T29773] kmalloc-1k 207726KB 241180KB [ 2342.692421][T29773] kmalloc-512 47133KB 48684KB [ 2342.698600][T29773] kmalloc-256 32699KB 33492KB [ 2342.705085][T29773] kmalloc-128 6025KB 6036KB [ 2342.711250][T29773] kmalloc-96 4622KB 4656KB [ 2342.717311][T29773] kmalloc-64 10415KB 10936KB [ 2342.723430][T29773] kmalloc-32 6941KB 7193KB [ 2342.729520][T29773] kmalloc-192 8850KB 9044KB [ 2342.735732][T29773] kmem_cache 451KB 452KB [ 2342.743238][T29773] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4545,uid=0 [ 2342.780999][T29773] Out of memory: Killed process 4545 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2342.824902][T11583] tipc: TX() has been purged, node left! [ 2342.844916][ T1144] oom_reaper: reaped process 29773 (syz-executor.5), now anon-rss:0kB, file-rss:34888kB, shmem-rss:0kB 18:52:36 executing program 5: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de4283ffaec56d159e567a42767a7b89b65e4841c9695825a4b10dd5cb8b24f84b29ceef0a428124050e273c65dbfb96b053bda211a0aa613e4d66c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58d8b6222d2e21ac715547dff0000000000000000000000000000000025820c9874ab4a1d7499dde60f692672a47457c9f57e9b2b8980b97fd09945c3573c4ab652b933256368318c5b422dab"], 0x38}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@private2={0xfc, 0x2, [], 0x1}, r2}, 0x14) 18:52:36 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x400300}, 0x0) 18:52:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x9effffff}, 0x0) [ 2342.896361][T11583] tipc: TX() has been purged, node left! [ 2342.918877][T11583] tipc: TX() has been purged, node left! [ 2342.969192][T29880] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2342.976155][T29882] IPVS: ftp: loaded support on port[0] = 21 [ 2342.988562][T29880] device bond0 left promiscuous mode [ 2342.994126][T11583] tipc: TX() has been purged, node left! [ 2342.996332][T29880] device bond_slave_0 left promiscuous mode [ 2343.006471][T11583] tipc: TX() has been purged, node left! [ 2343.027525][T29880] device bond_slave_1 left promiscuous mode [ 2343.041702][T29880] bridge380: port 1(bond0) entered disabled state [ 2343.056546][T11583] tipc: TX() has been purged, node left! 18:52:36 executing program 4: set_mempolicy(0x4002, &(0x7f0000000040)=0x7, 0x2) unshare(0x0) r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r0) 18:52:36 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x600000, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) write$P9_RRENAMEAT(r0, &(0x7f0000000000)={0x7, 0x4b, 0x1}, 0x7) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) [ 2343.066873][T29882] syz-executor.5 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2343.091243][T11583] tipc: TX() has been purged, node left! [ 2343.100503][T11583] tipc: TX() has been purged, node left! [ 2343.108711][T29882] CPU: 1 PID: 29882 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 2343.117623][T29882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2343.127734][T29882] Call Trace: [ 2343.131038][T29882] dump_stack+0x188/0x20d [ 2343.135407][T29882] dump_header+0x10b/0x826 [ 2343.139845][T29882] oom_kill_process.cold+0x10/0x15 [ 2343.144974][T29882] out_of_memory+0x31f/0x12f0 [ 2343.149666][T29882] ? oom_killer_disable+0x270/0x270 [ 2343.149769][T29894] IPVS: ftp: loaded support on port[0] = 21 [ 2343.154872][T29882] ? mutex_trylock+0x246/0x2c0 [ 2343.154890][T29882] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2343.154910][T29882] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2343.154934][T29882] ? warn_alloc+0x110/0x110 [ 2343.154958][T29882] ? do_fast_syscall_32+0x270/0xe90 [ 2343.188600][T29882] __alloc_pages_nodemask+0x5d9/0x810 [ 2343.194102][T29882] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2343.201021][T29882] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2343.206815][T29882] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2343.212772][T29882] ? do_raw_spin_unlock+0x171/0x260 [ 2343.218045][T29882] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2343.224452][T29882] alloc_pages_current+0xff/0x200 [ 2343.229456][T29882] __vmalloc_node_range+0x478/0x7a0 [ 2343.234637][T29882] ? ebt_register_table+0x1e6/0xc70 [ 2343.239812][T29882] vmalloc+0x67/0x80 [ 2343.243689][T29882] ? ebt_register_table+0x1e6/0xc70 [ 2343.248876][T29882] ebt_register_table+0x1e6/0xc70 [ 2343.253884][T29882] ? ebt_broute+0x700/0x700 [ 2343.258421][T29882] ops_init+0xaf/0x420 [ 2343.262482][T29882] setup_net+0x2de/0x860 [ 2343.266716][T29882] ? ops_init+0x420/0x420 [ 2343.271029][T29882] copy_net_ns+0x293/0x590 18:52:36 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xf0ffff}, 0x0) 18:52:36 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0xa0201) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000280)={0x8, 0x800, 0x7, 0x400}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x14, r3, 0x917, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x4000040) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r4, @ANYBLOB="d30021f9f5d9a3ab8efbbf0eab97c92120e0d79d6cbd0c38a7f31fffa49483170fbc5b5768c0c06b48f7538114e5b04f93e978cc808c782b57d73495233f04a39b7dae3b3e9c179602ed648172dc", @ANYBLOB="00042abd7000eedbdf25070000000600010007000000050005000068ff22cb0016000800000000000000080018006401010106001a004e22000008001900ffff14aa060002000100000014002000bac64f1d4287cca4fc01000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x20004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x1, 0x80000000}, 0xc) [ 2343.275445][T29882] create_new_namespaces+0x3fb/0xb30 [ 2343.280752][T29882] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2343.286646][T29882] ksys_unshare+0x43d/0x8e0 [ 2343.291155][T29882] ? walk_process_tree+0x2c0/0x2c0 [ 2343.296254][T29882] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2343.302152][T29882] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2343.307946][T29882] ? trace_hardirqs_off_caller+0x55/0x230 [ 2343.313741][T29882] __ia32_sys_unshare+0x2c/0x40 [ 2343.318579][T29882] do_fast_syscall_32+0x270/0xe90 [ 2343.323608][T29882] entry_SYSENTER_compat+0x70/0x7f [ 2343.353838][T11583] tipc: TX() has been purged, node left! [ 2343.360039][T11583] tipc: TX() has been purged, node left! [ 2343.371205][T29880] bridge381: port 1(bond0) entered blocking state [ 2343.383834][T29880] bridge381: port 1(bond0) entered disabled state [ 2343.390236][T29898] IPVS: ftp: loaded support on port[0] = 21 18:52:37 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x1000000}, 0x0) [ 2343.408531][T29880] device bond0 entered promiscuous mode [ 2343.415244][T11583] tipc: TX() has been purged, node left! [ 2343.425877][T11583] tipc: TX() has been purged, node left! 18:52:37 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) write$tun(r2, &(0x7f0000000180)={@void, @val={0x2, 0x0, 0x800, 0x3f6, 0x4, 0xf800}, @ipv6=@icmpv6={0xf, 0x6, "71508f", 0x3ca, 0x3a, 0x0, @remote, @private2, {[@hopopts={0x33, 0xc, [], [@generic={0x81, 0x24, "ec41cc6e9f248df9c8e995170052abd9b7222a6cec5e65a683a286cb6bc2e69e85459c67"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7f, 0x4, [0x1, 0x5, 0x2, 0x8, 0x6, 0x2]}}]}, @dstopts={0xff, 0x31, [], [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x3f}, @pad1, @generic={0x7, 0xb0, "ca8bb01f1d7bf6f27fb8c9d2416811709b1aa8b17c49fe1bdb1c93f0a3302dfc1c46d2df3b3bf360cc4802e0211f143e8ad5a8022a7eb707190154d6401f29c8652e6d1f838f57fc1a4a5527e1531b4c5a2e25db82af6afb2e0627c71731d422b389e863f32c3276b7e9e35e79bafe3ddae2035f273dc1f9f2b6b89682d61ccfdfc6d5e261a1ee5fb42253eb3bf94dc09af146aba8297c69fdd78c7e41646465161f3838d4f1cef438f2c8a92fe25f93"}, @generic={0xf0, 0x5, "70469b56d9"}, @pad1, @generic={0x7f, 0xc0, "da6804208d8831aa50fdd69b122b10825ed52c596b4b8577d4c96ea38ed4bf150d0c323cf5cbd872ee5a5e73c28164985517c02178a21f644b93d5edbf71424c44b3c2f0aa3bb48a157f1e6f2eac4e658101246c64a9c915e397ca30e9ee198ba6c3922873175523530fa5a4e02a80757ac9e092899c00aae3d947643bc788e5e22a164136431e2aac02352597928be03314bbd86bc80ef9f1303be559018f53c2a95bffa91ba5257f06d77b29a8c3ec4dd416231f604ff091d5fe1b40e9155e"}]}, @fragment={0x3a, 0x0, 0x1, 0x0, 0x0, 0xd, 0x64}, @dstopts={0x1d, 0x8, [], [@enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x10, {0x1, 0x2, 0x76, 0x1000, [0x7ff]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @dest_unreach={0x1, 0x2, 0x0, 0x80, [], {0x1, 0x6, "831c90", 0x2836, 0x2, 0x1, @mcast1, @local, [@routing={0x2c, 0x6, 0x31262067528c887f, 0x18, 0x0, [@private1={0xfc, 0x1, [], 0x1}, @local, @empty]}, @hopopts={0x2c, 0x15, [], [@ra={0x5, 0x2, 0x2e}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @generic={0x7, 0x85, "c9260185b99dd0cb3c10ebb640ecc18dcc3f294c0e723af200cecf49ca7e2b17164b54b3757dcd4806e3b7ab6e7a3901341d234466da89fbc6627805bb41cadbf5f0c5cc6ef42a62a936f8f3bb53b6225aea6a3501fd5e34bdac93e56e412cbe3463e3fb82c3b86dfb57644ecf930ac1805f109c87e83451153c4a58f2f48755b21eff999e"}, @hao={0xc9, 0x10, @ipv4={[], [], @broadcast}}, @ra={0x5, 0x2, 0x101}]}, @fragment={0x3a, 0x0, 0x6, 0x1, 0x0, 0x6, 0x68}], "b6a74c95a7a0ab0d5bc77cc1018abfa354c87aaa9287c8c26ad8e413f9bfd5373143a1e54276c8e4b141cb4ed3412e638a28b3c6d46ebac5e7136b1ff76dd873b988f3d224327e0fb38c32123e4f5431ef04"}}}}}, 0x3fc) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) [ 2343.462648][T29880] device bond_slave_0 entered promiscuous mode [ 2343.469771][T11583] tipc: TX() has been purged, node left! [ 2343.488038][T11583] tipc: TX() has been purged, node left! [ 2343.499506][T29880] device bond_slave_1 entered promiscuous mode [ 2343.518464][T11583] tipc: TX() has been purged, node left! [ 2343.532013][T29887] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2343.549407][T29880] device bond0 left promiscuous mode [ 2343.555017][T29880] device bond_slave_0 left promiscuous mode [ 2343.569131][T29880] device bond_slave_1 left promiscuous mode [ 2343.576851][T11583] tipc: TX() has been purged, node left! [ 2343.589744][T29905] IPVS: ftp: loaded support on port[0] = 21 [ 2343.591192][T29880] bridge381: port 1(bond0) entered disabled state [ 2343.607574][T11583] tipc: TX() has been purged, node left! 18:52:37 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x2000000}, 0x0) [ 2343.627425][T11583] tipc: TX() has been purged, node left! [ 2343.658806][T11583] tipc: TX() has been purged, node left! [ 2343.669717][T29882] Mem-Info: 18:52:37 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x3000000}, 0x0) [ 2343.680410][T29882] active_anon:311252 inactive_anon:8346 isolated_anon:0 [ 2343.680410][T29882] active_file:2786 inactive_file:6114 isolated_file:0 [ 2343.680410][T29882] unevictable:14 dirty:6 writeback:0 unstable:0 [ 2343.680410][T29882] slab_reclaimable:20212 slab_unreclaimable:386267 [ 2343.680410][T29882] mapped:61158 shmem:8636 pagetables:30177 bounce:0 [ 2343.680410][T29882] free:721394 free_pcp:359 free_cma:0 [ 2343.726831][T29882] Node 0 active_anon:1083228kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217072kB dirty:12kB writeback:16kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 952320kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2343.756110][T11583] tipc: TX() has been purged, node left! 18:52:37 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x4000000}, 0x0) [ 2343.799562][T11583] tipc: TX() has been purged, node left! [ 2343.800402][T29882] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2343.838555][T11583] tipc: TX() has been purged, node left! [ 2343.841842][T29882] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2343.854992][T11583] tipc: TX() has been purged, node left! [ 2343.877934][T29882] Node 0 DMA32 free:113980kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1083100kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB writepending:28kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:21552kB pagetables:34124kB bounce:0kB free_pcp:1440kB local_pcp:504kB free_cma:0kB [ 2343.934074][T29882] lowmem_reserve[]: 0 0 0 0 0 [ 2343.938802][T29882] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2343.973276][T29882] lowmem_reserve[]: 0 0 0 0 0 [ 2343.977992][T29882] Node 0 DMA: 7*4kB (UM) 12*8kB (UM) 7*16kB (UME) 4*32kB (UME) 3*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10284kB [ 2343.995805][T29882] Node 0 DMA32: 1871*4kB (UME) 1038*8kB (UM) 556*16kB (ME) 374*32kB (ME) 215*64kB (ME) 110*128kB (ME) 62*256kB (UME) 21*512kB (M) 0*1024kB 9*2048kB (M) 1*4096kB (M) = 113644kB [ 2344.016593][T29882] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2344.034406][T29882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2344.047574][T29882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2344.066319][T29882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2344.077500][T29882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2344.080945][T11583] tipc: TX() has been purged, node left! [ 2344.096316][T29882] 17548 total pagecache pages [ 2344.102213][T29882] 0 pages in swap cache [ 2344.106708][T29882] Swap cache stats: add 0, delete 0, find 0/0 [ 2344.118036][T29882] Free swap = 0kB [ 2344.126280][T29882] Total swap = 0kB [ 2344.130019][T29882] 1965979 pages RAM [ 2344.138778][T29882] 0 pages HighMem/MovableOnly [ 2344.144239][T29882] 349380 pages reserved [ 2344.148407][T29882] 0 pages cma reserved [ 2344.158180][T29882] Unreclaimable slab info: [ 2344.163543][T29882] Name Used Total [ 2344.196163][T29882] pid_3 1KB 7KB [ 2344.215029][T29882] pid_2 918KB 1113KB [ 2344.243103][T29882] bio-3 0KB 7KB [ 2344.249347][T29882] AF_VSOCK 14KB 16KB [ 2344.266761][T29882] batadv_tl_cache 4KB 12KB [ 2344.270848][T11583] tipc: TX() has been purged, node left! [ 2344.274588][T29882] SMC 45KB 49KB [ 2344.291447][T29882] TIPC 767KB 767KB [ 2344.297560][T29882] rds_tcp_connection 10KB 11KB [ 2344.307325][T29882] RDS 18KB 18KB [ 2344.317649][T29882] rds_connection 0KB 3KB [ 2344.328111][T29882] SCTPv6 986KB 1051KB [ 2344.337863][T29882] SCTP 206KB 232KB [ 2344.347428][T29882] sctp_chunk 10KB 11KB [ 2344.358286][T29882] sctp_bind_bucket 0KB 3KB [ 2344.377269][T29882] DCCPv6 1170KB 1267KB [ 2344.387647][T29882] DCCP 1084KB 1170KB [ 2344.398291][T29882] L2TP/IPv6 6KB 6KB [ 2344.407770][T29882] L2TP/IP 23KB 23KB [ 2344.417051][T29882] KCM 17KB 19KB [ 2344.429764][T29882] kcm_mux_cache 7KB 7KB [ 2344.434561][T11583] tipc: TX() has been purged, node left! [ 2344.439928][T29882] RXRPC 771KB 830KB [ 2344.455653][T29882] rxrpc_call_jar 4622KB 4623KB [ 2344.470159][T29882] bridge_fdb_cache 70KB 74KB [ 2344.479708][T29882] MPTCPv6 35KB 38KB [ 2344.486183][T29882] fib6_nodes 175KB 184KB [ 2344.496014][T29882] ip6_dst_cache 279KB 423KB [ 2344.504717][T29882] PINGv6 1KB 3KB [ 2344.515270][T29882] RAWv6 3991KB 3993KB [ 2344.521860][T29882] UDPLITEv6 19KB 19KB [ 2344.528180][T29882] UDPv6 949KB 1019KB [ 2344.538868][T29882] TCPv6 1405KB 1408KB [ 2344.545607][T29882] nf_conntrack 15KB 37KB [ 2344.556217][T29882] sd_ext_cdb 0KB 7KB [ 2344.562720][T29882] scsi_sense_cache 1056KB 1064KB [ 2344.568800][T29882] virtio_scsi_cmd 16KB 16KB [ 2344.579163][T29882] sgpool-128 8KB 8KB [ 2344.585971][T29882] sgpool-64 4KB 12KB [ 2344.597569][T29882] sgpool-32 3KB 15KB [ 2344.604676][T29882] sgpool-16 26KB 30KB [ 2344.611310][T11583] tipc: TX() has been purged, node left! [ 2344.617308][T29882] sgpool-8 32KB 52KB [ 2344.627924][T29882] mqueue_inode_cache 53KB 62KB [ 2344.638171][T29882] f2fs_bio_post_read_ctx 16KB 16KB [ 2344.648136][T29882] jfs_mp 7KB 7KB [ 2344.659148][T29882] cifs_small_rq 15KB 16KB [ 2344.667263][T29882] cifs_request 67KB 67KB [ 2344.676964][T29882] cifs_mpx_ids 0KB 8KB [ 2344.684129][T29882] nfs_commit_data 3KB 7KB [ 2344.690213][T29882] nfs_write_data 34KB 44KB [ 2344.700971][T29882] ext4_system_zone 1KB 7KB [ 2344.707158][T29882] ext4_io_end_vec 12KB 15KB [ 2344.714664][T29882] ext4_bio_post_read_ctx 15KB 15KB [ 2344.725062][T29882] io_kiocb 0KB 3KB [ 2344.732625][T29882] kioctx 21KB 23KB [ 2344.738720][T29882] aio_kiocb 6KB 7KB [ 2344.750010][T29882] userfaultfd_ctx_cache 2KB 4KB [ 2344.757369][T29882] bio-2 1KB 7KB [ 2344.767721][T29882] fasync_cache 1KB 7KB [ 2344.770826][T11583] tipc: TX() has been purged, node left! [ 2344.775100][T29882] pid_namespace 4KB 11KB [ 2344.790673][T29882] posix_timers_cache 7KB 11KB [ 2344.797933][T29882] kvm_vcpu 0KB 70KB [ 2344.807510][T29882] kvm_mmu_page_header 58KB 61KB [ 2344.814791][T29882] pte_list_desc 2KB 3KB [ 2344.826181][T29882] x86_emulator 51KB 54KB [ 2344.832967][T29882] x86_fpu 0KB 43KB [ 2344.839136][T29882] rpc_buffers 17KB 25KB [ 2344.849156][T29882] rpc_tasks 2KB 7KB [ 2344.856121][T29882] UNIX 546KB 620KB [ 2344.869056][T29882] UDP-Lite 71KB 73KB [ 2344.876591][T29882] MPTCP 10KB 15KB [ 2344.886410][T29882] tcp_bind_bucket 45KB 48KB [ 2344.893348][T29882] inet_peer_cache 28KB 32KB [ 2344.900184][T29882] ip_fib_trie 24KB 31KB [ 2344.912282][T29882] ip_fib_alias 112KB 134KB [ 2344.918628][T29882] ip_dst_cache 102KB 168KB [ 2344.925515][T29882] PING 12KB 15KB [ 2344.930813][T11583] tipc: TX() has been purged, node left! [ 2344.936587][T29882] RAW 2459KB 2507KB [ 2344.944956][T29882] UDP 903KB 969KB [ 2344.955824][T29882] TCP 311KB 352KB [ 2344.962464][T29882] hugetlbfs_inode_cache 6KB 10KB [ 2344.968879][T29882] fscache_cookie_jar 1KB 7KB [ 2344.979422][T29882] bio-1 10KB 15KB [ 2344.986461][T29882] eventpoll_pwq 7KB 35KB [ 2344.997486][T29882] eventpoll_epi 12KB 39KB [ 2345.004185][T29882] inotify_inode_mark 4KB 7KB [ 2345.010458][T29882] request_queue 157KB 157KB [ 2345.025624][T29882] blkdev_ioc 13KB 19KB [ 2345.033167][T29882] bio-0 449KB 452KB [ 2345.039237][T29882] biovec-max 3514KB 3514KB [ 2345.049445][T29882] biovec-64 108KB 149KB [ 2345.059190][T29882] biovec-16 33KB 33KB [ 2345.069632][T29882] bio_integrity_payload 1KB 7KB [ 2345.084887][T29882] khugepaged_mm_slot 281KB 324KB [ 2345.090748][T11583] tipc: TX() has been purged, node left! [ 2345.093363][T29882] user_namespace 4KB 7KB [ 2345.107820][T29882] uid_cache 0KB 4KB [ 2345.114961][T29882] dmaengine-unmap-256 2KB 6KB [ 2345.125314][T29882] dmaengine-unmap-128 1KB 3KB [ 2345.132892][T29882] dmaengine-unmap-16 0KB 4KB [ 2345.139196][T29882] dmaengine-unmap-2 0KB 3KB [ 2345.152687][T29882] audit_buffer 0KB 3KB [ 2345.158881][T29882] skbuff_ext_cache 0KB 4KB [ 2345.165859][T29882] skbuff_fclone_cache 643KB 645KB [ 2345.177085][T29882] skbuff_head_cache 25901KB 40211KB [ 2345.184132][T29882] configfs_dir_cache 1KB 8KB [ 2345.195564][T29882] file_lock_cache 5KB 11KB [ 2345.202310][T29882] file_lock_ctx 8KB 11KB [ 2345.208652][T29882] fsnotify_mark_connector 1KB 8KB [ 2345.221001][T29882] net_namespace 3615KB 3615KB [ 2345.227579][T29882] task_delay_info 846KB 957KB [ 2345.234512][T29882] taskstats 588KB 680KB [ 2345.240636][T29882] proc_dir_entry 18362KB 18952KB [ 2345.246957][T29882] pde_opener 11KB 15KB [ 2345.251098][T11583] tipc: TX() has been purged, node left! [ 2345.254330][T29882] seq_file 24KB 63KB [ 2345.269979][T29882] shmem_inode_cache 10724KB 11348KB [ 2345.276787][T29882] kernfs_iattrs_cache 9KB 15KB [ 2345.287010][T29882] kernfs_node_cache 110564KB 110601KB [ 2345.294175][T29882] mnt_cache 355KB 363KB [ 2345.307067][T29882] filp 3693KB 4346KB [ 2345.314335][T29882] names_cache 37153KB 37153KB [ 2345.320479][T29882] iint_cache 29KB 66KB [ 2345.332195][T29882] lsm_file_cache 677KB 897KB [ 2345.338405][T29882] key_jar 33KB 43KB [ 2345.345639][T29882] uts_namespace 5KB 15KB [ 2345.356915][T29882] nsproxy 123KB 138KB [ 2345.363939][T29882] vm_area_struct 11864KB 13179KB [ 2345.370046][T29882] mm_struct 2328KB 2538KB [ 2345.380369][T29882] fs_cache 578KB 704KB [ 2345.387365][T29882] files_cache 1899KB 2190KB [ 2345.398726][T29882] signal_cache 5728KB 5882KB [ 2345.405700][T29882] sighand_cache 4451KB 4481KB [ 2345.410752][T11583] tipc: TX() has been purged, node left! [ 2345.417182][T29882] task_struct 22357KB 22357KB [ 2345.424940][T29882] cred_jar 1765KB 2108KB [ 2345.434962][T29882] anon_vma_chain 3684KB 4417KB [ 2345.441870][T29882] anon_vma 2940KB 3116KB [ 2345.447945][T29882] pid 439KB 461KB [ 2345.459356][T29882] Acpi-Operand 156KB 194KB [ 2345.468810][T29882] Acpi-ParseExt 9KB 11KB [ 2345.479932][T29882] Acpi-Parse 41KB 47KB [ 2345.486695][T29882] Acpi-State 52KB 63KB [ 2345.497376][T29882] Acpi-Namespace 23KB 27KB [ 2345.504645][T29882] shared_policy_node 0KB 3KB [ 2345.517206][T29882] numa_policy 3KB 23KB [ 2345.524063][T29882] trace_event_file 358KB 358KB [ 2345.530147][T29882] ftrace_event_field 491KB 496KB [ 2345.549564][T29882] pool_workqueue 1021KB 1024KB [ 2345.560299][T29882] vmap_area 1482KB 2303KB [ 2345.568445][T29882] debug_objects_cache 8177KB 8297KB [ 2345.570796][T11583] tipc: TX() has been purged, node left! [ 2345.582417][T29882] page->ptl 3269KB 3909KB [ 2345.588857][T29882] kmalloc-4M 4096KB 4096KB [ 2345.599579][T29882] kmalloc-1M 8192KB 8192KB [ 2345.606047][T29882] kmalloc-512k 4096KB 4096KB [ 2345.615267][T29882] kmalloc-256k 187392KB 187392KB [ 2345.621609][T29882] kmalloc-128k 18944KB 19200KB [ 2345.627683][T29882] kmalloc-64k 6656KB 7296KB [ 2345.637862][T29882] kmalloc-32k 48384KB 48384KB [ 2345.645266][T29882] kmalloc-16k 28448KB 28448KB [ 2345.652906][T29882] kmalloc-8k 45536KB 45760KB [ 2345.659153][T29882] kmalloc-4k 277872KB 277944KB [ 2345.666922][T29882] kmalloc-2k 160236KB 160388KB [ 2345.674677][T29882] kmalloc-1k 210366KB 240900KB [ 2345.696681][T29882] kmalloc-512 46209KB 48500KB [ 2345.710746][T29882] kmalloc-256 32366KB 33436KB [ 2345.720961][T29882] kmalloc-128 5749KB 6044KB [ 2345.743539][T29882] kmalloc-96 4616KB 4656KB [ 2345.749846][T29882] kmalloc-64 10329KB 10924KB [ 2345.750690][T11583] tipc: TX() has been purged, node left! [ 2345.759611][T29882] kmalloc-32 7001KB 7193KB [ 2345.773617][T29882] kmalloc-192 8714KB 9048KB [ 2345.779710][T29882] kmem_cache 451KB 452KB [ 2345.787974][T29899] IPVS: ftp: loaded support on port[0] = 21 [ 2345.796048][T29907] IPVS: ftp: loaded support on port[0] = 21 [ 2345.798270][T29882] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4536,uid=0 [ 2345.832539][T29882] Out of memory: Killed process 4536 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2345.864487][ T1144] oom_reaper: reaped process 4536 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2345.884357][ T1144] oom_reaper: reaped process 29894 (syz-executor.1), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 2345.897111][ T1144] oom_reaper: reaped process 29905 (syz-executor.4), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB 18:52:39 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:52:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xc3ffffff}, 0x0) 18:52:39 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x6000000}, 0x0) [ 2345.914473][T11583] tipc: TX() has been purged, node left! [ 2345.921246][T11583] tipc: TX() has been purged, node left! [ 2345.928205][T11583] tipc: TX() has been purged, node left! [ 2345.937957][ T1144] oom_reaper: reaped process 29899 (syz-executor.0), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB [ 2345.951192][T11583] tipc: TX() has been purged, node left! [ 2345.998583][T29949] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2346.014503][T29953] IPVS: ftp: loaded support on port[0] = 21 [ 2346.021564][T11583] tipc: TX() has been purged, node left! [ 2346.027576][T11583] tipc: TX() has been purged, node left! 18:52:39 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xa000000}, 0x0) [ 2346.045472][T29953] syz-executor.5 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2346.066967][T29953] CPU: 1 PID: 29953 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 2346.075678][T29953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2346.085736][T29953] Call Trace: [ 2346.089301][T29953] dump_stack+0x188/0x20d [ 2346.093654][T29953] dump_header+0x10b/0x826 [ 2346.098173][T29953] oom_kill_process.cold+0x10/0x15 [ 2346.103592][T29953] out_of_memory+0x31f/0x12f0 [ 2346.108424][T29953] ? oom_killer_disable+0x270/0x270 [ 2346.113747][T29953] ? mutex_trylock+0x246/0x2c0 [ 2346.118680][T29953] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2346.125473][T29953] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2346.132157][T29953] ? warn_alloc+0x110/0x110 [ 2346.136779][T29953] ? do_fast_syscall_32+0x270/0xe90 [ 2346.141986][T29953] __alloc_pages_nodemask+0x5d9/0x810 [ 2346.147394][T29953] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2346.154363][T29953] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2346.160236][T29953] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2346.166575][T29953] ? do_raw_spin_unlock+0x171/0x260 [ 2346.171774][T29953] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2346.178579][T29953] alloc_pages_current+0xff/0x200 [ 2346.184300][T29953] __vmalloc_node_range+0x478/0x7a0 [ 2346.189504][T29953] ? ebt_register_table+0x1e6/0xc70 [ 2346.194793][T29953] vmalloc+0x67/0x80 [ 2346.198692][T29953] ? ebt_register_table+0x1e6/0xc70 [ 2346.203964][T29953] ebt_register_table+0x1e6/0xc70 [ 2346.209014][T29953] ? ebt_broute+0x700/0x700 [ 2346.213643][T29953] ops_init+0xaf/0x420 [ 2346.217711][T29953] setup_net+0x2de/0x860 [ 2346.222001][T29953] ? ops_init+0x420/0x420 [ 2346.226429][T29953] copy_net_ns+0x293/0x590 [ 2346.230860][T29953] create_new_namespaces+0x3fb/0xb30 [ 2346.237691][T29953] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2346.243340][T29953] ksys_unshare+0x43d/0x8e0 [ 2346.247831][T29953] ? walk_process_tree+0x2c0/0x2c0 [ 2346.252934][T29953] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2346.258957][T29953] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2346.264759][T29953] ? fput_many+0x2f/0x1a0 [ 2346.269071][T29953] ? trace_hardirqs_off_caller+0x55/0x230 [ 2346.274783][T29953] __ia32_sys_unshare+0x2c/0x40 [ 2346.279827][T29953] do_fast_syscall_32+0x270/0xe90 [ 2346.284865][T29953] entry_SYSENTER_compat+0x70/0x7f [ 2346.291765][T29953] Mem-Info: [ 2346.295007][T29953] active_anon:310621 inactive_anon:10373 isolated_anon:0 [ 2346.295007][T29953] active_file:2785 inactive_file:6321 isolated_file:0 [ 2346.295007][T29953] unevictable:14 dirty:6 writeback:0 unstable:0 [ 2346.295007][T29953] slab_reclaimable:20019 slab_unreclaimable:389290 [ 2346.295007][T29953] mapped:61616 shmem:10670 pagetables:30188 bounce:0 [ 2346.295007][T29953] free:716749 free_pcp:563 free_cma:0 [ 2346.333881][T29953] Node 0 active_anon:1081080kB inactive_anon:16652kB active_file:8kB inactive_file:12kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217072kB dirty:8kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 952320kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2346.333897][T11583] tipc: TX() has been purged, node left! [ 2346.363819][T29953] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2346.410711][T29953] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2346.416485][T29953] Node 0 DMA32 free:109136kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1080952kB inactive_anon:16652kB active_file:8kB inactive_file:12kB unevictable:56kB writepending:8kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:21524kB pagetables:34124kB bounce:0kB free_pcp:2184kB local_pcp:832kB free_cma:0kB [ 2346.449864][T11583] tipc: TX() has been purged, node left! [ 2346.456912][T29957] bridge382: port 1(bond0) entered blocking state [ 2346.466312][T11583] tipc: TX() has been purged, node left! [ 2346.470763][T29953] lowmem_reserve[]: 0 0 0 0 0 [ 2346.479558][T29957] bridge382: port 1(bond0) entered disabled state [ 2346.486919][T29953] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2346.519374][T11583] tipc: TX() has been purged, node left! [ 2346.531755][T29957] device bond0 entered promiscuous mode [ 2346.537412][T29957] device bond_slave_0 entered promiscuous mode [ 2346.545513][T11583] tipc: TX() has been purged, node left! [ 2346.550780][T29957] device bond_slave_1 entered promiscuous mode [ 2346.560880][T11583] tipc: TX() has been purged, node left! [ 2346.571977][T29953] lowmem_reserve[]: 0 0 0 0 0 [ 2346.579742][T11583] tipc: TX() has been purged, node left! [ 2346.587203][T29953] Node 0 DMA: 7*4kB (UM) 12*8kB (UM) 7*16kB (UME) 4*32kB (UME) 3*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10284kB [ 2346.605256][T11583] tipc: TX() has been purged, node left! [ 2346.620157][T11583] tipc: TX() has been purged, node left! [ 2346.620948][T29953] Node 0 DMA32: 1892*4kB (UM) 1033*8kB (UME) 561*16kB (ME) 375*32kB (UME) 215*64kB (ME) 111*128kB (UME) 61*256kB (ME) 21*512kB (M) 1*1024kB (U) 8*2048kB (M) 0*4096kB = 108552kB [ 2346.643701][T11583] tipc: TX() has been purged, node left! [ 2346.649870][T11583] tipc: TX() has been purged, node left! [ 2346.670608][T29953] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2346.710651][T29953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2346.720279][T29953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2346.738143][T11583] tipc: TX() has been purged, node left! [ 2346.744127][T11583] tipc: TX() has been purged, node left! [ 2346.760625][T29953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2346.770202][T29953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2346.770593][T29957] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2346.820704][T29953] 19806 total pagecache pages [ 2346.825418][T29953] 0 pages in swap cache [ 2346.836522][T11583] tipc: TX() has been purged, node left! [ 2346.851361][T29953] Swap cache stats: add 0, delete 0, find 0/0 [ 2346.857750][T29949] device bond0 left promiscuous mode [ 2346.864314][T29949] device bond_slave_0 left promiscuous mode [ 2346.870421][T29949] device bond_slave_1 left promiscuous mode [ 2346.890576][T29953] Free swap = 0kB [ 2346.894325][T29953] Total swap = 0kB [ 2346.899866][T29953] 1965979 pages RAM [ 2346.920926][T29949] bridge382: port 1(bond0) entered disabled state [ 2346.935753][T11583] tipc: TX() has been purged, node left! [ 2346.941607][T29953] 0 pages HighMem/MovableOnly [ 2346.946276][T29953] 349380 pages reserved [ 2346.950418][T29953] 0 pages cma reserved [ 2346.984301][T29953] Unreclaimable slab info: [ 2346.989721][T29953] Name Used Total [ 2346.998423][T11583] tipc: TX() has been purged, node left! [ 2347.004457][T11583] tipc: TX() has been purged, node left! [ 2347.051180][T29953] pid_3 1KB 7KB [ 2347.057400][T29953] pid_2 918KB 1113KB [ 2347.090703][T29953] bio-3 0KB 7KB [ 2347.096828][T29953] AF_VSOCK 14KB 16KB [ 2347.130622][T29953] batadv_tl_cache 4KB 12KB [ 2347.136740][T29953] SMC 45KB 49KB [ 2347.171143][T11583] tipc: TX() has been purged, node left! [ 2347.176914][T29953] TIPC 765KB 767KB [ 2347.200560][T29953] rds_tcp_connection 10KB 11KB [ 2347.206867][T29953] RDS 18KB 18KB [ 2347.230501][T29953] rds_connection 0KB 3KB [ 2347.236615][T29953] SCTPv6 996KB 1064KB [ 2347.270643][T29953] SCTP 206KB 232KB [ 2347.276744][T29953] sctp_chunk 10KB 11KB [ 2347.310643][T29953] sctp_bind_bucket 0KB 3KB [ 2347.316864][T29953] DCCPv6 1178KB 1275KB [ 2347.342630][T29953] DCCP 1099KB 1184KB [ 2347.348978][T29953] L2TP/IPv6 6KB 6KB [ 2347.356140][T11583] tipc: TX() has been purged, node left! [ 2347.390878][T29953] L2TP/IP 23KB 23KB [ 2347.397009][T29953] KCM 17KB 19KB [ 2347.420530][T29953] kcm_mux_cache 7KB 7KB [ 2347.426716][T29953] RXRPC 776KB 837KB [ 2347.460613][T29953] rxrpc_call_jar 4661KB 4672KB [ 2347.466749][T29953] bridge_fdb_cache 70KB 74KB [ 2347.500932][T29953] MPTCPv6 35KB 38KB [ 2347.507034][T29953] fib6_nodes 175KB 184KB [ 2347.520521][T11583] tipc: TX() has been purged, node left! [ 2347.550519][T29953] ip6_dst_cache 279KB 423KB [ 2347.556722][T29953] PINGv6 1KB 3KB [ 2347.570522][T29953] RAWv6 4023KB 4025KB [ 2347.590529][T29953] UDPLITEv6 19KB 19KB [ 2347.596723][T29953] UDPv6 957KB 1026KB [ 2347.630541][T29953] TCPv6 1378KB 1414KB [ 2347.636737][T29953] nf_conntrack 10KB 37KB [ 2347.670552][T29953] sd_ext_cdb 0KB 7KB [ 2347.676652][T29953] scsi_sense_cache 1056KB 1064KB [ 2347.690527][T11583] tipc: TX() has been purged, node left! [ 2347.720856][T29953] virtio_scsi_cmd 16KB 16KB [ 2347.727008][T29953] sgpool-128 8KB 8KB [ 2347.761079][T29953] sgpool-64 4KB 12KB [ 2347.767181][T29953] sgpool-32 10KB 15KB [ 2347.793235][T29953] sgpool-16 26KB 30KB [ 2347.799330][T29953] sgpool-8 32KB 52KB [ 2347.821116][T29953] mqueue_inode_cache 53KB 62KB [ 2347.827302][T29953] f2fs_bio_post_read_ctx 16KB 16KB [ 2347.860642][T11583] tipc: TX() has been purged, node left! [ 2347.866960][T29953] jfs_mp 7KB 7KB [ 2347.893235][T29953] cifs_small_rq 15KB 16KB [ 2347.899330][T29953] cifs_request 67KB 67KB [ 2347.941474][T29953] cifs_mpx_ids 0KB 8KB [ 2347.947614][T29953] nfs_commit_data 3KB 7KB [ 2347.965792][T29953] nfs_write_data 34KB 44KB [ 2347.980501][T29953] ext4_system_zone 1KB 7KB [ 2347.986630][T29953] ext4_io_end_vec 12KB 15KB [ 2348.000484][T29953] ext4_bio_post_read_ctx 15KB 15KB [ 2348.021157][T29953] io_kiocb 0KB 3KB [ 2348.027290][T29953] kioctx 21KB 23KB [ 2348.034725][T11583] tipc: TX() has been purged, node left! [ 2348.051847][T29953] aio_kiocb 6KB 7KB [ 2348.058244][T29953] userfaultfd_ctx_cache 2KB 4KB [ 2348.078594][T29953] bio-2 1KB 7KB [ 2348.086768][T29953] fasync_cache 1KB 7KB [ 2348.104308][T29953] pid_namespace 4KB 11KB [ 2348.132789][T29953] posix_timers_cache 7KB 11KB [ 2348.139061][T29953] kvm_vcpu 0KB 70KB [ 2348.160889][T29953] kvm_mmu_page_header 58KB 61KB [ 2348.167156][T29953] pte_list_desc 2KB 3KB [ 2348.180596][T29953] x86_emulator 51KB 54KB [ 2348.186778][T29953] x86_fpu 0KB 43KB [ 2348.200581][T11583] tipc: TX() has been purged, node left! [ 2348.230445][T29953] rpc_buffers 17KB 25KB [ 2348.240539][T29953] rpc_tasks 2KB 7KB [ 2348.240549][T29953] UNIX 546KB 620KB [ 2348.240562][T29953] UDP-Lite 71KB 73KB [ 2348.240571][T29953] MPTCP 10KB 15KB [ 2348.240581][T29953] tcp_bind_bucket 45KB 48KB [ 2348.240590][T29953] inet_peer_cache 28KB 32KB [ 2348.240601][T29953] ip_fib_trie 24KB 31KB [ 2348.240610][T29953] ip_fib_alias 112KB 134KB [ 2348.240626][T29953] ip_dst_cache 102KB 168KB [ 2348.300998][T29953] PING 12KB 15KB [ 2348.307096][T29953] RAW 2446KB 2507KB [ 2348.314518][T29953] UDP 899KB 966KB [ 2348.321563][T29953] TCP 311KB 352KB [ 2348.327646][T29953] hugetlbfs_inode_cache 6KB 10KB [ 2348.335351][T29953] fscache_cookie_jar 1KB 7KB [ 2348.342786][T29953] bio-1 10KB 15KB [ 2348.348862][T29953] eventpoll_pwq 7KB 35KB [ 2348.356471][T29953] eventpoll_epi 12KB 39KB [ 2348.363922][T29953] inotify_inode_mark 4KB 7KB [ 2348.370210][T29953] request_queue 157KB 157KB [ 2348.377540][T29953] blkdev_ioc 12KB 19KB [ 2348.390438][T29953] bio-0 499KB 500KB [ 2348.396654][T29953] biovec-max 3935KB 3961KB [ 2348.404180][T11583] tipc: TX() has been purged, node left! [ 2348.415786][T29953] biovec-64 114KB 149KB [ 2348.423074][T29953] biovec-16 34KB 37KB [ 2348.429153][T29953] bio_integrity_payload 1KB 7KB [ 2348.436400][T29953] khugepaged_mm_slot 281KB 324KB [ 2348.443138][T29953] user_namespace 4KB 7KB [ 2348.449205][T29953] uid_cache 0KB 4KB [ 2348.456388][T29953] dmaengine-unmap-256 2KB 6KB [ 2348.463257][T29953] dmaengine-unmap-128 1KB 3KB [ 2348.469515][T29953] dmaengine-unmap-16 0KB 4KB [ 2348.477027][T29953] dmaengine-unmap-2 0KB 3KB [ 2348.483716][T29953] audit_buffer 0KB 3KB [ 2348.489787][T29953] skbuff_ext_cache 0KB 4KB [ 2348.497410][T29953] skbuff_fclone_cache 650KB 652KB [ 2348.504456][T29953] skbuff_head_cache 26356KB 40211KB [ 2348.511682][T29953] configfs_dir_cache 1KB 8KB [ 2348.517853][T29953] file_lock_cache 4KB 7KB [ 2348.525705][T29953] file_lock_ctx 8KB 11KB [ 2348.532687][T29953] fsnotify_mark_connector 1KB 8KB [ 2348.539278][T29953] net_namespace 2673KB 2767KB [ 2348.546440][T11583] tipc: TX() has been purged, node left! [ 2348.560915][T29953] task_delay_info 846KB 957KB [ 2348.566997][T29953] taskstats 588KB 680KB [ 2348.580055][T29953] proc_dir_entry 18413KB 18952KB [ 2348.600401][T29953] pde_opener 11KB 15KB [ 2348.606634][T29953] seq_file 24KB 63KB [ 2348.615343][T29953] shmem_inode_cache 10724KB 11348KB [ 2348.621994][T29953] kernfs_iattrs_cache 9KB 15KB [ 2348.628331][T29953] kernfs_node_cache 110709KB 110728KB [ 2348.634532][T29953] mnt_cache 355KB 363KB [ 2348.640693][T29953] filp 4098KB 4346KB [ 2348.646754][T29953] names_cache 45084KB 45084KB [ 2348.652935][T29953] iint_cache 29KB 66KB [ 2348.659012][T29953] lsm_file_cache 749KB 897KB [ 2348.665912][T29953] key_jar 32KB 43KB [ 2348.672839][T29953] uts_namespace 5KB 15KB [ 2348.678997][T29953] nsproxy 123KB 138KB [ 2348.685227][T29953] vm_area_struct 11899KB 13179KB [ 2348.692068][T29953] mm_struct 2328KB 2538KB [ 2348.698189][T29953] fs_cache 578KB 704KB [ 2348.704681][T29953] files_cache 1899KB 2190KB [ 2348.710822][T29953] signal_cache 5711KB 5882KB [ 2348.710838][T11583] tipc: TX() has been purged, node left! [ 2348.716872][T29953] sighand_cache 4451KB 4481KB [ 2348.716881][T29953] task_struct 22479KB 22511KB [ 2348.716895][T29953] cred_jar 1930KB 2108KB [ 2348.742326][T29953] anon_vma_chain 3684KB 4417KB [ 2348.748395][T29953] anon_vma 2940KB 3116KB [ 2348.754575][T29953] pid 439KB 461KB [ 2348.761037][T29953] Acpi-Operand 156KB 194KB [ 2348.767114][T29953] Acpi-ParseExt 9KB 11KB [ 2348.773368][T29953] Acpi-Parse 41KB 47KB [ 2348.779436][T29953] Acpi-State 52KB 63KB [ 2348.785559][T29953] Acpi-Namespace 23KB 27KB [ 2348.791686][T29953] shared_policy_node 0KB 3KB [ 2348.798176][T29953] numa_policy 3KB 23KB [ 2348.804752][T29953] trace_event_file 358KB 358KB [ 2348.811031][T29953] ftrace_event_field 491KB 496KB [ 2348.817175][T29953] pool_workqueue 953KB 984KB [ 2348.823458][T29953] vmap_area 1510KB 2303KB [ 2348.830281][T29953] debug_objects_cache 8016KB 8297KB [ 2348.836626][T29953] page->ptl 3269KB 3909KB [ 2348.842782][T29953] kmalloc-4M 4096KB 4096KB [ 2348.849638][T29953] kmalloc-1M 8192KB 8192KB [ 2348.856208][T29953] kmalloc-512k 4096KB 4096KB [ 2348.862388][T29953] kmalloc-256k 188416KB 188928KB [ 2348.868457][T29953] kmalloc-128k 18944KB 19200KB [ 2348.875909][T29953] kmalloc-64k 6656KB 7296KB [ 2348.882932][T29953] kmalloc-32k 48832KB 48832KB [ 2348.888992][T29953] kmalloc-16k 24416KB 24576KB [ 2348.895147][T29953] kmalloc-8k 43616KB 43840KB [ 2348.901482][T29953] kmalloc-4k 280944KB 280976KB [ 2348.907548][T29953] kmalloc-2k 156276KB 156428KB [ 2348.913684][T29953] kmalloc-1k 210520KB 240624KB [ 2348.919830][T29953] kmalloc-512 44749KB 48200KB [ 2348.925951][T29953] kmalloc-256 32059KB 32748KB [ 2348.932092][T29953] kmalloc-128 5445KB 6020KB [ 2348.938148][T29953] kmalloc-96 4422KB 4656KB [ 2348.944435][T29953] kmalloc-64 10325KB 10920KB [ 2348.951456][T29953] kmalloc-32 6691KB 7197KB [ 2348.957510][T29953] kmalloc-192 8498KB 9036KB [ 2348.963958][T29953] kmem_cache 451KB 452KB [ 2348.970075][T29953] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4519,uid=0 [ 2349.060570][T29953] Out of memory: Killed process 4519 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2349.083881][T11583] tipc: TX() has been purged, node left! [ 2349.127053][ T1144] oom_reaper: reaped process 29953 (syz-executor.5), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB [ 2349.145441][T11583] tipc: TX() has been purged, node left! [ 2349.153403][T11583] tipc: TX() has been purged, node left! [ 2349.161423][T11583] tipc: TX() has been purged, node left! 18:52:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xdbde1f71}, 0x0) 18:52:43 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xc000000}, 0x0) 18:52:43 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000000)=""/134, &(0x7f00000000c0)=0x86) unshare(0x40000000) 18:52:43 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d02, &(0x7f0000000000)=0x2a) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2}, &(0x7f0000000080)=0xc) unshare(0x40000000) 18:52:43 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:52:43 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x0, 0xa) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x6, 0x3f, 0x7b9}) set_mempolicy(0x0, &(0x7f0000000000)=0x82b, 0x7) unshare(0x40000000) [ 2349.255373][T29987] IPVS: ftp: loaded support on port[0] = 21 [ 2349.264744][T29990] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2349.285861][T29993] IPVS: ftp: loaded support on port[0] = 21 [ 2349.293863][T11583] tipc: TX() has been purged, node left! 18:52:43 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xe000000}, 0x0) [ 2349.304617][T11583] tipc: TX() has been purged, node left! [ 2349.322192][T29994] IPVS: ftp: loaded support on port[0] = 21 [ 2349.339156][T29998] bridge383: port 1(bond0) entered blocking state [ 2349.353513][T11583] tipc: TX() has been purged, node left! [ 2349.362727][T29998] bridge383: port 1(bond0) entered disabled state [ 2349.380001][T30001] IPVS: ftp: loaded support on port[0] = 21 [ 2349.399174][T11583] tipc: TX() has been purged, node left! [ 2349.416273][T29998] device bond0 entered promiscuous mode [ 2349.423578][T11583] tipc: TX() has been purged, node left! [ 2349.441825][T29998] device bond_slave_0 entered promiscuous mode [ 2349.449766][T11583] tipc: TX() has been purged, node left! [ 2349.465324][T29998] device bond_slave_1 entered promiscuous mode [ 2349.473900][T11583] tipc: TX() has been purged, node left! 18:52:43 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xf000000}, 0x0) [ 2349.517378][T11583] tipc: TX() has been purged, node left! [ 2349.537764][T29998] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2349.562981][T11583] tipc: TX() has been purged, node left! [ 2349.569325][T11583] tipc: TX() has been purged, node left! [ 2349.578051][T29987] syz-executor.5 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2349.613693][T11583] tipc: TX() has been purged, node left! [ 2349.619657][T29987] CPU: 0 PID: 29987 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 2349.628372][T29987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2349.638605][T29987] Call Trace: [ 2349.641911][T29987] dump_stack+0x188/0x20d [ 2349.646259][T29987] dump_header+0x10b/0x826 [ 2349.650690][T29987] oom_kill_process.cold+0x10/0x15 [ 2349.655817][T29987] out_of_memory+0x31f/0x12f0 [ 2349.660516][T29987] ? oom_killer_disable+0x270/0x270 [ 2349.665731][T29987] ? mutex_trylock+0x246/0x2c0 [ 2349.670515][T29987] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2349.677377][T29987] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2349.683990][T29987] ? warn_alloc+0x110/0x110 [ 2349.688517][T29987] ? do_fast_syscall_32+0x270/0xe90 [ 2349.693742][T29987] __alloc_pages_nodemask+0x5d9/0x810 [ 2349.699131][T29987] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2349.705907][T29987] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2349.711725][T29987] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2349.717721][T29987] ? do_raw_spin_unlock+0x171/0x260 [ 2349.722934][T29987] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2349.729362][T29987] alloc_pages_current+0xff/0x200 [ 2349.734595][T29987] __vmalloc_node_range+0x478/0x7a0 [ 2349.739809][T29987] ? ebt_register_table+0x1e6/0xc70 [ 2349.745019][T29987] vmalloc+0x67/0x80 [ 2349.748928][T29987] ? ebt_register_table+0x1e6/0xc70 [ 2349.754688][T29987] ebt_register_table+0x1e6/0xc70 [ 2349.759917][T29987] ? ebt_broute+0x700/0x700 [ 2349.764425][T29987] ops_init+0xaf/0x420 [ 2349.768502][T29987] setup_net+0x2de/0x860 [ 2349.773115][T29987] ? ops_init+0x420/0x420 [ 2349.777601][T29987] copy_net_ns+0x293/0x590 [ 2349.782028][T29987] create_new_namespaces+0x3fb/0xb30 [ 2349.787327][T29987] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2349.792972][T29987] ksys_unshare+0x43d/0x8e0 [ 2349.797657][T29987] ? walk_process_tree+0x2c0/0x2c0 [ 2349.803223][T29987] ? __ia32_sys_clock_gettime32+0x165/0x240 18:52:43 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x10000000}, 0x0) 18:52:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xf0ffffff}, 0x0) [ 2349.809495][T29987] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2349.816984][T29987] ? fput_many+0x2f/0x1a0 [ 2349.821327][T29987] ? trace_hardirqs_off_caller+0x55/0x230 [ 2349.830268][T29987] __ia32_sys_unshare+0x2c/0x40 [ 2349.835130][T29987] do_fast_syscall_32+0x270/0xe90 [ 2349.840188][T29987] entry_SYSENTER_compat+0x70/0x7f 18:52:43 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x3f000000}, 0x0) [ 2349.895784][T30055] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2349.899066][T29994] IPVS: ftp: loaded support on port[0] = 21 [ 2349.925024][T11583] tipc: TX() has been purged, node left! [ 2349.931072][T11583] tipc: TX() has been purged, node left! [ 2349.944915][T30058] device bond0 left promiscuous mode [ 2349.956566][T30058] device bond_slave_0 left promiscuous mode [ 2349.968053][T30058] device bond_slave_1 left promiscuous mode [ 2349.981062][T11583] tipc: TX() has been purged, node left! [ 2349.995642][T29987] Mem-Info: [ 2349.995660][T11583] tipc: TX() has been purged, node left! [ 2349.999875][T29987] active_anon:310167 inactive_anon:10394 isolated_anon:0 [ 2349.999875][T29987] active_file:2786 inactive_file:6354 isolated_file:0 [ 2349.999875][T29987] unevictable:14 dirty:3 writeback:0 unstable:0 [ 2349.999875][T29987] slab_reclaimable:20013 slab_unreclaimable:392175 [ 2349.999875][T29987] mapped:61696 shmem:10684 pagetables:30150 bounce:0 [ 2349.999875][T29987] free:714272 free_pcp:581 free_cma:0 [ 2350.006265][T30058] bridge383: port 1(bond0) entered disabled state [ 2350.051857][T11583] tipc: TX() has been purged, node left! [ 2350.058474][T11583] tipc: TX() has been purged, node left! [ 2350.070695][T11583] tipc: TX() has been purged, node left! [ 2350.086384][T11583] tipc: TX() has been purged, node left! 18:52:43 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x60000000}, 0x0) [ 2350.115297][T11583] tipc: TX() has been purged, node left! [ 2350.133398][T30062] IPVS: ftp: loaded support on port[0] = 21 [ 2350.152618][T11583] tipc: TX() has been purged, node left! [ 2350.175341][T29987] Node 0 active_anon:1078916kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217072kB dirty:8kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 948224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2350.206736][T11583] tipc: TX() has been purged, node left! [ 2350.216588][T29987] Node 0 DMA free:10280kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2350.246653][T11583] tipc: TX() has been purged, node left! [ 2350.256407][T29987] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2350.263073][T11583] tipc: TX() has been purged, node left! 18:52:44 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x65580000}, 0x0) [ 2350.267894][T29987] Node 0 DMA32 free:110104kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1078788kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB writepending:8kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:21488kB pagetables:33924kB bounce:0kB free_pcp:2248kB local_pcp:1364kB free_cma:0kB [ 2350.307870][T11583] tipc: TX() has been purged, node left! [ 2350.312819][T29987] lowmem_reserve[]: 0 0 0 0 0 [ 2350.323596][T11583] tipc: TX() has been purged, node left! [ 2350.332088][T29987] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2350.365588][T11583] tipc: TX() has been purged, node left! 18:52:44 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x81000000}, 0x0) [ 2350.372283][T11583] tipc: TX() has been purged, node left! [ 2350.374078][T29987] lowmem_reserve[]: 0 0 0 0 0 [ 2350.389185][T30058] bridge384: port 1(bond0) entered blocking state [ 2350.396155][T11583] tipc: TX() has been purged, node left! [ 2350.403621][T30058] bridge384: port 1(bond0) entered disabled state [ 2350.415550][T11583] tipc: TX() has been purged, node left! [ 2350.423892][T11583] tipc: TX() has been purged, node left! [ 2350.429944][T11583] tipc: TX() has been purged, node left! [ 2350.436370][T29987] Node 0 DMA: 6*4kB (M) 12*8kB (UM) 7*16kB (UME) 4*32kB (UME) 3*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10280kB [ 2350.453684][T11583] tipc: TX() has been purged, node left! [ 2350.459739][T11583] tipc: TX() has been purged, node left! [ 2350.463837][T30058] device bond0 entered promiscuous mode [ 2350.476371][T11583] tipc: TX() has been purged, node left! [ 2350.483170][T11583] tipc: TX() has been purged, node left! [ 2350.485190][T30058] device bond_slave_0 entered promiscuous mode [ 2350.496300][T11583] tipc: TX() has been purged, node left! [ 2350.507254][T29987] Node 0 DMA32: 1952*4kB (UME) 1072*8kB (UM) 685*16kB (UME) 425*32kB (UME) 220*64kB (UME) 111*128kB (UME) 62*256kB (UME) 21*512kB (M) 0*1024kB 7*2048kB (M) 0*4096kB = 110192kB [ 2350.526706][T11583] tipc: TX() has been purged, node left! [ 2350.534756][T30058] device bond_slave_1 entered promiscuous mode [ 2350.547348][T29987] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2350.573168][T29987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2350.583584][T29987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2350.596912][T29987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2350.600569][T11583] tipc: TX() has been purged, node left! [ 2350.610671][T30058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2350.630300][T29987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2350.644118][T11583] tipc: TX() has been purged, node left! [ 2350.676432][T29987] 19826 total pagecache pages [ 2350.686856][T29987] 0 pages in swap cache [ 2350.716113][T29987] Swap cache stats: add 0, delete 0, find 0/0 [ 2350.723796][T29987] Free swap = 0kB [ 2350.727635][T29987] Total swap = 0kB [ 2350.745421][T29987] 1965979 pages RAM [ 2350.749576][T29987] 0 pages HighMem/MovableOnly [ 2350.783789][T29987] 349380 pages reserved [ 2350.787982][T29987] 0 pages cma reserved [ 2350.793022][T29987] Unreclaimable slab info: [ 2350.797449][T29987] Name Used Total [ 2350.820845][T29987] pid_3 1KB 7KB [ 2350.827337][T29987] pid_2 935KB 1113KB [ 2350.850227][T29987] bio-3 0KB 7KB [ 2350.856340][T29987] AF_VSOCK 14KB 16KB [ 2350.870196][T29987] batadv_tl_cache 4KB 12KB [ 2350.876582][T29987] SMC 45KB 49KB [ 2350.880173][T11583] tipc: TX() has been purged, node left! [ 2350.900399][T29987] TIPC 477KB 637KB [ 2350.906792][T29987] rds_tcp_connection 10KB 11KB [ 2350.920255][T29987] RDS 18KB 18KB [ 2350.945715][T29987] rds_connection 0KB 3KB [ 2350.952887][T29987] SCTPv6 996KB 1064KB [ 2350.958968][T29987] SCTP 206KB 232KB [ 2350.982403][T29987] sctp_chunk 10KB 11KB [ 2350.989076][T29987] sctp_bind_bucket 0KB 3KB [ 2351.009260][T29987] DCCPv6 1178KB 1275KB [ 2351.030210][T29987] DCCP 1099KB 1184KB [ 2351.036360][T29987] L2TP/IPv6 6KB 6KB [ 2351.043570][T29987] L2TP/IP 23KB 23KB [ 2351.049907][T29987] KCM 17KB 19KB [ 2351.050220][T11583] tipc: TX() has been purged, node left! [ 2351.070215][T29987] kcm_mux_cache 7KB 7KB [ 2351.076324][T29987] RXRPC 779KB 837KB [ 2351.100170][T29987] rxrpc_call_jar 4695KB 4710KB [ 2351.106641][T29987] bridge_fdb_cache 70KB 74KB [ 2351.130202][T29987] MPTCPv6 35KB 38KB [ 2351.136339][T29987] fib6_nodes 175KB 184KB [ 2351.160494][T29987] ip6_dst_cache 297KB 423KB [ 2351.166610][T29987] PINGv6 1KB 3KB [ 2351.180157][T29987] RAWv6 4051KB 4053KB [ 2351.186987][T29987] UDPLITEv6 19KB 19KB [ 2351.210192][T29987] UDPv6 959KB 1026KB [ 2351.216382][T29987] TCPv6 1384KB 1421KB [ 2351.230218][T29987] nf_conntrack 10KB 37KB [ 2351.236984][T29987] sd_ext_cdb 0KB 7KB [ 2351.258894][T29987] scsi_sense_cache 1056KB 1064KB [ 2351.270240][T11583] tipc: TX() has been purged, node left! [ 2351.273406][T29987] virtio_scsi_cmd 16KB 16KB [ 2351.310242][T29987] sgpool-128 8KB 8KB [ 2351.316623][T29987] sgpool-64 4KB 12KB [ 2351.323930][T29987] sgpool-32 7KB 15KB [ 2351.340181][T29987] sgpool-16 26KB 30KB [ 2351.346275][T29987] sgpool-8 40KB 52KB [ 2351.370215][T29987] mqueue_inode_cache 53KB 62KB [ 2351.376535][T29987] f2fs_bio_post_read_ctx 16KB 16KB [ 2351.399802][T29987] jfs_mp 7KB 7KB [ 2351.419742][T29987] cifs_small_rq 15KB 16KB [ 2351.430373][T11583] tipc: TX() has been purged, node left! [ 2351.436573][T29987] cifs_request 67KB 67KB [ 2351.454814][T29987] cifs_mpx_ids 0KB 8KB [ 2351.474434][T29987] nfs_commit_data 3KB 7KB [ 2351.481469][T29987] nfs_write_data 34KB 44KB [ 2351.487879][T29987] ext4_system_zone 1KB 7KB [ 2351.497602][T29987] ext4_io_end_vec 12KB 15KB [ 2351.506999][T29987] ext4_bio_post_read_ctx 15KB 15KB [ 2351.516689][T29987] io_kiocb 0KB 3KB [ 2351.523563][T29987] kioctx 21KB 23KB [ 2351.529635][T29987] aio_kiocb 6KB 7KB [ 2351.539295][T29987] userfaultfd_ctx_cache 2KB 4KB [ 2351.546846][T29987] bio-2 1KB 7KB [ 2351.553641][T29987] fasync_cache 1KB 3KB [ 2351.559740][T29987] pid_namespace 4KB 11KB [ 2351.567003][T29987] posix_timers_cache 7KB 11KB [ 2351.590124][T11583] tipc: TX() has been purged, node left! [ 2351.591482][T29987] kvm_vcpu 0KB 70KB [ 2351.610206][T29987] kvm_mmu_page_header 58KB 61KB [ 2351.616747][T29987] pte_list_desc 2KB 3KB [ 2351.637936][T29987] x86_emulator 51KB 54KB [ 2351.644842][T29987] x86_fpu 0KB 43KB [ 2351.652416][T29987] rpc_buffers 17KB 25KB [ 2351.658580][T29987] rpc_tasks 2KB 7KB [ 2351.667130][T29987] UNIX 598KB 620KB [ 2351.673756][T29987] UDP-Lite 71KB 73KB [ 2351.680930][T29987] MPTCP 10KB 15KB [ 2351.686999][T29987] tcp_bind_bucket 44KB 48KB [ 2351.694739][T29987] inet_peer_cache 28KB 32KB [ 2351.704284][T29987] ip_fib_trie 24KB 31KB [ 2351.711363][T29987] ip_fib_alias 112KB 134KB [ 2351.717944][T29987] ip_dst_cache 115KB 168KB [ 2351.725019][T29987] PING 12KB 15KB [ 2351.731678][T29987] RAW 2471KB 2507KB [ 2351.737766][T29987] UDP 899KB 966KB [ 2351.744866][T29987] TCP 311KB 352KB [ 2351.750296][T11583] tipc: TX() has been purged, node left! [ 2351.752265][T29987] hugetlbfs_inode_cache 6KB 10KB [ 2351.763655][T29987] fscache_cookie_jar 1KB 7KB [ 2351.769821][T29987] bio-1 10KB 15KB [ 2351.777051][T29987] eventpoll_pwq 7KB 35KB [ 2351.783662][T29987] eventpoll_epi 12KB 39KB [ 2351.789738][T29987] inotify_inode_mark 4KB 7KB [ 2351.797208][T29987] request_queue 157KB 157KB [ 2351.803881][T29987] blkdev_ioc 12KB 19KB [ 2351.810901][T29987] bio-0 633KB 636KB [ 2351.817070][T29987] biovec-max 5214KB 5214KB [ 2351.825718][T29987] biovec-64 114KB 149KB [ 2351.832578][T29987] biovec-16 34KB 37KB [ 2351.845400][T29987] bio_integrity_payload 1KB 7KB [ 2351.853540][T29987] khugepaged_mm_slot 281KB 324KB [ 2351.859695][T29987] user_namespace 4KB 7KB [ 2351.869075][T29987] uid_cache 0KB 4KB [ 2351.876936][T29987] dmaengine-unmap-256 2KB 6KB [ 2351.885234][T29987] dmaengine-unmap-128 1KB 3KB [ 2351.893085][T29987] dmaengine-unmap-16 0KB 4KB [ 2351.899277][T29987] dmaengine-unmap-2 0KB 3KB [ 2351.906384][T29987] audit_buffer 0KB 3KB [ 2351.912361][T11583] tipc: TX() has been purged, node left! [ 2351.913583][T29987] skbuff_ext_cache 0KB 4KB [ 2351.924892][T29987] skbuff_fclone_cache 742KB 742KB [ 2351.932370][T29987] skbuff_head_cache 26424KB 40207KB [ 2351.938832][T29987] configfs_dir_cache 1KB 8KB [ 2351.946774][T29987] file_lock_cache 4KB 7KB [ 2351.962670][T29987] file_lock_ctx 8KB 11KB [ 2351.968763][T29987] fsnotify_mark_connector 1KB 8KB [ 2351.976450][T29987] net_namespace 2659KB 2752KB [ 2351.985345][T29987] task_delay_info 846KB 957KB [ 2351.992072][T29987] taskstats 588KB 680KB [ 2351.998232][T29987] proc_dir_entry 18484KB 18945KB [ 2352.005489][T29987] pde_opener 9KB 15KB [ 2352.012396][T29987] seq_file 23KB 63KB [ 2352.018996][T29987] shmem_inode_cache 10740KB 11348KB [ 2352.031167][T29987] kernfs_iattrs_cache 9KB 15KB [ 2352.038287][T29987] kernfs_node_cache 111002KB 111005KB [ 2352.046915][T29987] mnt_cache 355KB 363KB [ 2352.055325][T29987] filp 4476KB 4477KB [ 2352.061518][T29987] names_cache 51697KB 51697KB [ 2352.068240][T29987] iint_cache 28KB 66KB [ 2352.074695][T29987] lsm_file_cache 821KB 897KB [ 2352.080189][T11583] tipc: TX() has been purged, node left! [ 2352.080861][T29987] key_jar 30KB 43KB [ 2352.092550][T29987] uts_namespace 5KB 15KB [ 2352.098641][T29987] nsproxy 123KB 138KB [ 2352.105189][T29987] vm_area_struct 11990KB 13167KB [ 2352.111518][T29987] mm_struct 2328KB 2538KB [ 2352.117582][T29987] fs_cache 554KB 704KB [ 2352.123741][T29987] files_cache 1899KB 2190KB [ 2352.129834][T29987] signal_cache 5692KB 5882KB [ 2352.136614][T29987] sighand_cache 4451KB 4481KB [ 2352.143474][T29987] task_struct 22428KB 22518KB [ 2352.149641][T29987] cred_jar 2050KB 2108KB [ 2352.157319][T29987] anon_vma_chain 3710KB 4417KB [ 2352.163983][T29987] anon_vma 2940KB 3116KB [ 2352.170697][T29987] pid 439KB 461KB [ 2352.176796][T29987] Acpi-Operand 156KB 194KB [ 2352.185282][T29987] Acpi-ParseExt 9KB 11KB [ 2352.193615][T29987] Acpi-Parse 41KB 47KB [ 2352.199720][T29987] Acpi-State 52KB 63KB [ 2352.207061][T29987] Acpi-Namespace 23KB 27KB [ 2352.214352][T29987] shared_policy_node 0KB 3KB [ 2352.221486][T29987] numa_policy 3KB 23KB [ 2352.227589][T29987] trace_event_file 358KB 358KB [ 2352.235327][T29987] ftrace_event_field 491KB 496KB [ 2352.242289][T29987] pool_workqueue 686KB 788KB [ 2352.248382][T29987] vmap_area 1583KB 2303KB [ 2352.255615][T29987] debug_objects_cache 7855KB 8297KB [ 2352.260596][T11583] tipc: TX() has been purged, node left! [ 2352.263526][T29987] page->ptl 3286KB 3909KB [ 2352.274955][T29987] kmalloc-4M 4096KB 4096KB [ 2352.282578][T29987] kmalloc-1M 8192KB 8192KB [ 2352.288702][T29987] kmalloc-512k 4096KB 4096KB [ 2352.295832][T29987] kmalloc-256k 188928KB 189952KB [ 2352.302738][T29987] kmalloc-128k 18944KB 19200KB [ 2352.308992][T29987] kmalloc-64k 6656KB 7296KB [ 2352.316078][T29987] kmalloc-32k 48960KB 49216KB [ 2352.322811][T29987] kmalloc-16k 23584KB 24032KB [ 2352.328891][T29987] kmalloc-8k 43472KB 43632KB [ 2352.336745][T29987] kmalloc-4k 279384KB 279496KB [ 2352.345358][T29987] kmalloc-2k 156524KB 156576KB [ 2352.352769][T29987] kmalloc-1k 210180KB 240360KB [ 2352.359405][T29987] kmalloc-512 44707KB 48196KB [ 2352.369561][T29987] kmalloc-256 32045KB 32728KB [ 2352.376821][T29987] kmalloc-128 5269KB 6020KB [ 2352.386206][T29987] kmalloc-96 4421KB 4656KB [ 2352.393446][T29987] kmalloc-64 10373KB 10924KB [ 2352.399636][T29987] kmalloc-32 6687KB 7197KB [ 2352.406820][T29987] kmalloc-192 8484KB 9036KB [ 2352.414051][T29987] kmem_cache 451KB 452KB [ 2352.420130][T11583] tipc: TX() has been purged, node left! [ 2352.427146][T29987] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4506,uid=0 [ 2352.442396][T29987] Out of memory: Killed process 4506 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2352.461463][ T1144] oom_reaper: reaped process 4506 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2352.502691][ T1144] oom_reaper: reaped process 29993 (syz-executor.0), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 2352.520681][ T1144] oom_reaper: reaped process 29987 (syz-executor.5), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB 18:52:47 executing program 0: set_mempolicy(0x0, &(0x7f0000000000)=0x10000101, 0x2) unshare(0x40000000) openat$dlm_plock(0xffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0xa6642, 0x0) 18:52:47 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x88a8ffff}, 0x0) 18:52:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xfeffffff}, 0x0) 18:52:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) 18:52:47 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:52:47 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) r1 = openat$btrfs_control(0xffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000200)={0xfff, 0x0, 0x101}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x140b, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}]}, 0x20}}, 0x40) unshare(0x40000000) [ 2354.173866][T30104] IPVS: ftp: loaded support on port[0] = 21 [ 2354.184331][T30105] IPVS: ftp: loaded support on port[0] = 21 [ 2354.195031][T30108] IPVS: ftp: loaded support on port[0] = 21 [ 2354.213790][T30107] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:52:48 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x9effffff}, 0x0) [ 2354.229655][T30105] syz-executor.4 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2354.253760][T30115] IPVS: ftp: loaded support on port[0] = 21 [ 2354.266683][T30118] device bond0 left promiscuous mode [ 2354.277163][T30118] device bond_slave_0 left promiscuous mode [ 2354.279904][T30105] CPU: 1 PID: 30105 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 2354.291805][T30118] device bond_slave_1 left promiscuous mode [ 2354.293045][T30105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2354.293051][T30105] Call Trace: [ 2354.293074][T30105] dump_stack+0x188/0x20d [ 2354.293096][T30105] dump_header+0x10b/0x826 [ 2354.304009][T30118] bridge384: port 1(bond0) entered disabled state [ 2354.309067][T30105] oom_kill_process.cold+0x10/0x15 [ 2354.309086][T30105] out_of_memory+0x31f/0x12f0 [ 2354.309111][T30105] ? oom_killer_disable+0x270/0x270 [ 2354.343027][T30105] ? mutex_trylock+0x246/0x2c0 [ 2354.347823][T30105] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2354.354530][T30105] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2354.361139][T30105] ? warn_alloc+0x110/0x110 [ 2354.365648][T30105] ? do_fast_syscall_32+0x270/0xe90 [ 2354.371032][T30105] __alloc_pages_nodemask+0x5d9/0x810 [ 2354.376934][T30105] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2354.383854][T30105] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2354.390469][T30105] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2354.396459][T30105] ? do_raw_spin_unlock+0x171/0x260 [ 2354.401893][T30105] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2354.408314][T30105] alloc_pages_current+0xff/0x200 [ 2354.413444][T30105] __vmalloc_node_range+0x478/0x7a0 [ 2354.418910][T30105] ? ebt_register_table+0x1e6/0xc70 [ 2354.424132][T30105] vmalloc+0x67/0x80 [ 2354.428033][T30105] ? ebt_register_table+0x1e6/0xc70 [ 2354.433218][T30105] ebt_register_table+0x1e6/0xc70 [ 2354.438341][T30105] ? ebt_broute+0x700/0x700 [ 2354.442833][T30105] ops_init+0xaf/0x420 [ 2354.446959][T30105] setup_net+0x2de/0x860 [ 2354.451192][T30105] ? ops_init+0x420/0x420 [ 2354.455617][T30105] copy_net_ns+0x293/0x590 [ 2354.460026][T30105] create_new_namespaces+0x3fb/0xb30 [ 2354.465317][T30105] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2354.470953][T30105] ksys_unshare+0x43d/0x8e0 [ 2354.475543][T30105] ? walk_process_tree+0x2c0/0x2c0 [ 2354.480660][T30105] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2354.486545][T30105] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2354.492440][T30105] ? fput_many+0x2f/0x1a0 [ 2354.496893][T30105] ? trace_hardirqs_off_caller+0x55/0x230 [ 2354.502622][T30105] __ia32_sys_unshare+0x2c/0x40 [ 2354.507505][T30105] do_fast_syscall_32+0x270/0xe90 [ 2354.512585][T30105] entry_SYSENTER_compat+0x70/0x7f [ 2354.523603][T30105] Mem-Info: [ 2354.527060][T30105] active_anon:310119 inactive_anon:10394 isolated_anon:0 [ 2354.527060][T30105] active_file:2787 inactive_file:6375 isolated_file:0 [ 2354.527060][T30105] unevictable:14 dirty:5 writeback:0 unstable:0 [ 2354.527060][T30105] slab_reclaimable:20017 slab_unreclaimable:386761 [ 2354.527060][T30105] mapped:61702 shmem:10684 pagetables:30150 bounce:0 [ 2354.527060][T30105] free:719962 free_pcp:461 free_cma:0 [ 2354.567158][T30105] Node 0 active_anon:1078804kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217072kB dirty:8kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 946176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2354.601644][T30105] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 18:52:48 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xa4cbcaaa}, 0x0) [ 2354.640010][T30105] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2354.642939][T30118] bridge385: port 1(bond0) entered blocking state [ 2354.650594][T30105] Node 0 DMA32 free:116816kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1078676kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB writepending:8kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:21456kB pagetables:33824kB bounce:0kB free_pcp:1840kB local_pcp:424kB free_cma:0kB 18:52:48 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xaacacba4}, 0x0) [ 2354.660389][T30118] bridge385: port 1(bond0) entered disabled state [ 2354.699391][T30118] device bond0 entered promiscuous mode [ 2354.706054][T30118] device bond_slave_0 entered promiscuous mode [ 2354.715640][T30105] lowmem_reserve[]: 0 0 0 0 0 [ 2354.718055][T30118] device bond_slave_1 entered promiscuous mode [ 2354.728486][T30105] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2354.768074][T30118] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2354.778287][T30105] lowmem_reserve[]: 0 0 0 0 0 18:52:48 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xf0ffffff}, 0x0) [ 2354.787805][T30105] Node 0 DMA: 7*4kB (UM) 9*8kB (M) 5*16kB (UME) 6*32kB (UME) 3*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10292kB 18:52:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xffffa888}, 0x0) [ 2354.872496][T30105] Node 0 DMA32: 1952*4kB (UME) 1409*8kB (UM) 691*16kB (UME) 488*32kB (UME) 255*64kB (UME) 117*128kB (UME) 63*256kB (UME) 21*512kB (M) 1*1024kB (U) 6*2048kB (M) 0*4096kB = 117240kB 18:52:48 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xffffa888}, 0x0) [ 2354.921999][T30105] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 18:52:48 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x64020500) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/93, 0x5d, 0x10000, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) statx(r3, &(0x7f0000000180)='./file0/file0\x00', 0x4000, 0x200, &(0x7f0000000300)) [ 2354.972745][T30105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2354.984722][T30187] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2355.034617][T30191] IPVS: ftp: loaded support on port[0] = 21 [ 2355.041809][T30105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2355.056119][T30197] device bond0 left promiscuous mode [ 2355.067631][T30197] device bond_slave_0 left promiscuous mode [ 2355.073241][T30105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 18:52:48 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xfffff000}, 0x0) 18:52:48 executing program 5: set_mempolicy(0x0, &(0x7f0000000000)=0x10000101, 0x2) unshare(0x40000000) openat$dlm_plock(0xffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0xa6642, 0x0) [ 2355.085711][T30197] device bond_slave_1 left promiscuous mode [ 2355.096119][T30197] bridge385: port 1(bond0) entered disabled state [ 2355.106145][T30105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2355.117288][T30105] 19852 total pagecache pages [ 2355.136301][T30105] 0 pages in swap cache [ 2355.147895][T30105] Swap cache stats: add 0, delete 0, find 0/0 [ 2355.158896][T30105] Free swap = 0kB [ 2355.164115][T30105] Total swap = 0kB [ 2355.168426][T30105] 1965979 pages RAM [ 2355.175014][T30197] bridge386: port 1(bond0) entered blocking state [ 2355.177003][T30207] IPVS: ftp: loaded support on port[0] = 21 [ 2355.182685][T30105] 0 pages HighMem/MovableOnly [ 2355.196061][T30197] bridge386: port 1(bond0) entered disabled state [ 2355.208197][T30197] device bond0 entered promiscuous mode [ 2355.214986][T30105] 349380 pages reserved [ 2355.220406][T30197] device bond_slave_0 entered promiscuous mode [ 2355.226709][T30105] 0 pages cma reserved [ 2355.231913][T30105] Unreclaimable slab info: [ 2355.232649][T30197] device bond_slave_1 entered promiscuous mode [ 2355.236463][T30105] Name Used Total [ 2355.249710][T30105] pid_3 1KB 7KB [ 2355.255900][T30105] pid_2 928KB 1113KB [ 2355.262058][T30105] bio-3 0KB 7KB [ 2355.268152][T30105] AF_VSOCK 14KB 16KB [ 2355.276199][T30105] batadv_tl_cache 4KB 12KB [ 2355.277061][T30197] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2355.282371][T30105] SMC 45KB 49KB [ 2355.282381][T30105] TIPC 433KB 624KB [ 2355.282392][T30105] rds_tcp_connection 10KB 11KB [ 2355.282405][T30105] RDS 18KB 18KB [ 2355.282414][T30105] rds_connection 0KB 3KB [ 2355.282423][T30105] SCTPv6 1000KB 1071KB [ 2355.282431][T30105] SCTP 198KB 232KB [ 2355.282439][T30105] sctp_chunk 8KB 11KB [ 2355.282453][T30105] sctp_bind_bucket 0KB 3KB [ 2355.357370][T30105] DCCPv6 1186KB 1283KB [ 2355.364718][T30105] DCCP 1104KB 1184KB [ 2355.371967][T30105] L2TP/IPv6 6KB 6KB [ 2355.378052][T30105] L2TP/IP 23KB 23KB [ 2355.386911][T30105] KCM 17KB 19KB [ 2355.393801][T30105] kcm_mux_cache 7KB 7KB [ 2355.404054][T30105] RXRPC 788KB 843KB [ 2355.410721][T30105] rxrpc_call_jar 4758KB 4762KB [ 2355.416839][T30105] bridge_fdb_cache 65KB 74KB [ 2355.439814][T30105] MPTCPv6 35KB 38KB [ 2355.445917][T30105] fib6_nodes 175KB 184KB [ 2355.456452][T30105] ip6_dst_cache 290KB 423KB [ 2355.466084][T30105] PINGv6 1KB 3KB [ 2355.476304][T30105] RAWv6 4075KB 4077KB [ 2355.483514][T30105] UDPLITEv6 19KB 19KB [ 2355.493849][T30105] UDPv6 970KB 1034KB [ 2355.500491][T30105] TCPv6 912KB 1102KB [ 2355.506582][T30105] nf_conntrack 10KB 37KB [ 2355.523058][T30105] sd_ext_cdb 0KB 7KB [ 2355.529151][T30105] scsi_sense_cache 1056KB 1064KB [ 2355.536243][T30105] virtio_scsi_cmd 16KB 16KB [ 2355.547320][T30105] sgpool-128 8KB 8KB [ 2355.553957][T30105] sgpool-64 4KB 12KB [ 2355.563814][T30105] sgpool-32 6KB 15KB [ 2355.572226][T30105] sgpool-16 23KB 30KB [ 2355.578332][T30105] sgpool-8 30KB 48KB [ 2355.588672][T30105] mqueue_inode_cache 53KB 62KB [ 2355.595460][T30105] f2fs_bio_post_read_ctx 16KB 16KB [ 2355.606021][T30105] jfs_mp 7KB 7KB [ 2355.613675][T30105] cifs_small_rq 15KB 16KB [ 2355.620688][T30105] cifs_request 67KB 67KB [ 2355.627337][T30105] cifs_mpx_ids 0KB 8KB [ 2355.634686][T30105] nfs_commit_data 3KB 7KB [ 2355.641677][T30105] nfs_write_data 34KB 44KB [ 2355.648372][T30105] ext4_system_zone 1KB 7KB [ 2355.655405][T30105] ext4_io_end_vec 11KB 15KB [ 2355.663647][T30105] ext4_bio_post_read_ctx 15KB 15KB [ 2355.671022][T30105] io_kiocb 0KB 3KB [ 2355.677702][T30105] kioctx 21KB 23KB [ 2355.684630][T30105] aio_kiocb 6KB 7KB [ 2355.691622][T30105] userfaultfd_ctx_cache 2KB 4KB [ 2355.698680][T30105] bio-2 1KB 7KB [ 2355.706535][T30105] fasync_cache 1KB 3KB [ 2355.713723][T30105] pid_namespace 4KB 11KB [ 2355.720689][T30105] posix_timers_cache 7KB 11KB [ 2355.727684][T30105] kvm_vcpu 0KB 70KB [ 2355.734693][T30105] kvm_mmu_page_header 58KB 61KB [ 2355.742281][T30105] pte_list_desc 2KB 3KB [ 2355.748946][T30105] x86_emulator 51KB 54KB [ 2355.755986][T30105] x86_fpu 0KB 43KB [ 2355.762934][T30105] rpc_buffers 17KB 25KB [ 2355.769616][T30105] rpc_tasks 2KB 7KB [ 2355.776995][T30105] UNIX 598KB 620KB [ 2355.784058][T30105] UDP-Lite 71KB 73KB [ 2355.791431][T30105] MPTCP 10KB 15KB [ 2355.798119][T30105] tcp_bind_bucket 48KB 48KB [ 2355.805711][T30105] inet_peer_cache 28KB 32KB [ 2355.812667][T30105] ip_fib_trie 24KB 31KB [ 2355.819341][T30105] ip_fib_alias 112KB 134KB [ 2355.826287][T30105] ip_dst_cache 102KB 168KB [ 2355.833232][T30105] PING 12KB 15KB [ 2355.840129][T30105] RAW 2482KB 2523KB [ 2355.846799][T30105] UDP 882KB 955KB [ 2355.853837][T30105] TCP 311KB 352KB [ 2355.863411][T30105] hugetlbfs_inode_cache 6KB 10KB [ 2355.870659][T30105] fscache_cookie_jar 1KB 7KB [ 2355.877417][T30105] bio-1 10KB 15KB [ 2355.884691][T30105] eventpoll_pwq 7KB 35KB [ 2355.891703][T30105] eventpoll_epi 12KB 39KB [ 2355.898364][T30105] inotify_inode_mark 4KB 7KB [ 2355.905701][T30105] request_queue 157KB 157KB [ 2355.912619][T30105] blkdev_ioc 11KB 19KB [ 2355.920221][T30105] bio-0 603KB 656KB [ 2355.926863][T30105] biovec-max 4309KB 4373KB [ 2355.934213][T30105] biovec-64 114KB 149KB [ 2355.941148][T30105] biovec-16 34KB 37KB [ 2355.948232][T30105] bio_integrity_payload 1KB 7KB [ 2355.955540][T30105] khugepaged_mm_slot 276KB 324KB [ 2355.962560][T30105] user_namespace 4KB 7KB [ 2355.969150][T30105] uid_cache 0KB 4KB [ 2355.976185][T30105] dmaengine-unmap-256 2KB 6KB [ 2355.983871][T30105] dmaengine-unmap-128 1KB 3KB [ 2355.991333][T30105] dmaengine-unmap-16 0KB 4KB [ 2355.997613][T30105] dmaengine-unmap-2 0KB 3KB [ 2356.005746][T30105] audit_buffer 0KB 3KB [ 2356.013662][T30105] skbuff_ext_cache 0KB 4KB [ 2356.024140][T30105] skbuff_fclone_cache 735KB 742KB [ 2356.030499][T30105] skbuff_head_cache 26432KB 40203KB [ 2356.036566][T30105] configfs_dir_cache 1KB 8KB [ 2356.042857][T30105] file_lock_cache 4KB 7KB [ 2356.048921][T30105] file_lock_ctx 8KB 11KB [ 2356.055572][T30105] fsnotify_mark_connector 1KB 8KB [ 2356.062645][T30105] net_namespace 2666KB 2752KB [ 2356.068823][T30105] task_delay_info 846KB 957KB [ 2356.076040][T30105] taskstats 582KB 676KB [ 2356.082573][T30105] proc_dir_entry 18658KB 18993KB [ 2356.088638][T30105] pde_opener 8KB 15KB [ 2356.095559][T30105] seq_file 29KB 63KB [ 2356.102531][T30105] shmem_inode_cache 10740KB 11348KB [ 2356.108610][T30105] kernfs_iattrs_cache 9KB 15KB [ 2356.115858][T30105] kernfs_node_cache 111974KB 111976KB [ 2356.122626][T30105] mnt_cache 347KB 363KB [ 2356.128729][T30105] filp 4004KB 4466KB [ 2356.135755][T30105] names_cache 43124KB 43124KB [ 2356.142397][T30105] iint_cache 28KB 66KB [ 2356.148466][T30105] lsm_file_cache 769KB 897KB [ 2356.155503][T30105] key_jar 29KB 43KB [ 2356.162131][T30105] uts_namespace 5KB 15KB [ 2356.168288][T30105] nsproxy 122KB 138KB [ 2356.175148][T30105] vm_area_struct 11893KB 13136KB [ 2356.182274][T30105] mm_struct 2311KB 2538KB [ 2356.188357][T30105] fs_cache 544KB 704KB [ 2356.195482][T30105] files_cache 1832KB 2178KB [ 2356.202510][T30105] signal_cache 5525KB 5882KB [ 2356.208600][T30105] sighand_cache 4453KB 4481KB [ 2356.215700][T30105] task_struct 22009KB 22042KB [ 2356.222260][T30105] cred_jar 1930KB 2108KB [ 2356.228318][T30105] anon_vma_chain 3692KB 4413KB [ 2356.235292][T30105] anon_vma 2928KB 3116KB [ 2356.242316][T30105] pid 416KB 461KB [ 2356.248394][T30105] Acpi-Operand 156KB 194KB [ 2356.260036][T30105] Acpi-ParseExt 9KB 11KB [ 2356.266157][T30105] Acpi-Parse 41KB 47KB [ 2356.273097][T30105] Acpi-State 52KB 63KB [ 2356.279181][T30105] Acpi-Namespace 23KB 27KB [ 2356.285994][T30105] shared_policy_node 0KB 3KB [ 2356.292935][T30105] numa_policy 2KB 23KB [ 2356.299097][T30105] trace_event_file 358KB 358KB [ 2356.305972][T30105] ftrace_event_field 491KB 496KB [ 2356.312804][T30105] pool_workqueue 609KB 712KB [ 2356.318894][T30105] vmap_area 1088KB 2287KB [ 2356.325967][T30105] debug_objects_cache 7876KB 8297KB [ 2356.332786][T30105] page->ptl 3271KB 3906KB [ 2356.338870][T30105] kmalloc-4M 4096KB 4096KB [ 2356.345906][T30105] kmalloc-1M 8192KB 8192KB [ 2356.352120][T30105] kmalloc-512k 4096KB 4096KB [ 2356.358183][T30105] kmalloc-256k 190976KB 191488KB [ 2356.364358][T30105] kmalloc-128k 18944KB 19200KB [ 2356.370481][T30105] kmalloc-64k 6656KB 7296KB [ 2356.376537][T30105] kmalloc-32k 49472KB 49472KB [ 2356.382666][T30105] kmalloc-16k 20960KB 21344KB [ 2356.388750][T30105] kmalloc-8k 43856KB 43856KB [ 2356.394886][T30105] kmalloc-4k 272864KB 272904KB [ 2356.401018][T30105] kmalloc-2k 158628KB 158680KB [ 2356.407076][T30105] kmalloc-1k 209844KB 240316KB [ 2356.413224][T30105] kmalloc-512 45628KB 48236KB [ 2356.419295][T30105] kmalloc-256 32241KB 32828KB [ 2356.425415][T30105] kmalloc-128 5239KB 6020KB [ 2356.431932][T30105] kmalloc-96 4419KB 4656KB [ 2356.438018][T30105] kmalloc-64 10368KB 10924KB [ 2356.444165][T30105] kmalloc-32 6661KB 7197KB [ 2356.450368][T30105] kmalloc-192 8435KB 9032KB [ 2356.456440][T30105] kmem_cache 441KB 452KB [ 2356.462561][T30105] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4495,uid=0 [ 2356.477460][T30105] Out of memory: Killed process 4495 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 18:52:50 executing program 4: unshare(0x40000000) 18:52:50 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xffffff7f}, 0x0) 18:52:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000180)={"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"}) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockname(r2, &(0x7f0000000580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, &(0x7f0000000000)=0x80) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) 18:52:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xfffff000}, 0x0) 18:52:50 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) write$tun(r2, &(0x7f0000000180)={@void, @val={0x2, 0x0, 0x800, 0x3f6, 0x4, 0xf800}, @ipv6=@icmpv6={0xf, 0x6, "71508f", 0x3ca, 0x3a, 0x0, @remote, @private2, {[@hopopts={0x33, 0xc, [], [@generic={0x81, 0x24, "ec41cc6e9f248df9c8e995170052abd9b7222a6cec5e65a683a286cb6bc2e69e85459c67"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7f, 0x4, [0x1, 0x5, 0x2, 0x8, 0x6, 0x2]}}]}, @dstopts={0xff, 0x31, [], [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x3f}, @pad1, @generic={0x7, 0xb0, "ca8bb01f1d7bf6f27fb8c9d2416811709b1aa8b17c49fe1bdb1c93f0a3302dfc1c46d2df3b3bf360cc4802e0211f143e8ad5a8022a7eb707190154d6401f29c8652e6d1f838f57fc1a4a5527e1531b4c5a2e25db82af6afb2e0627c71731d422b389e863f32c3276b7e9e35e79bafe3ddae2035f273dc1f9f2b6b89682d61ccfdfc6d5e261a1ee5fb42253eb3bf94dc09af146aba8297c69fdd78c7e41646465161f3838d4f1cef438f2c8a92fe25f93"}, @generic={0xf0, 0x5, "70469b56d9"}, @pad1, @generic={0x7f, 0xc0, "da6804208d8831aa50fdd69b122b10825ed52c596b4b8577d4c96ea38ed4bf150d0c323cf5cbd872ee5a5e73c28164985517c02178a21f644b93d5edbf71424c44b3c2f0aa3bb48a157f1e6f2eac4e658101246c64a9c915e397ca30e9ee198ba6c3922873175523530fa5a4e02a80757ac9e092899c00aae3d947643bc788e5e22a164136431e2aac02352597928be03314bbd86bc80ef9f1303be559018f53c2a95bffa91ba5257f06d77b29a8c3ec4dd416231f604ff091d5fe1b40e9155e"}]}, @fragment={0x3a, 0x0, 0x1, 0x0, 0x0, 0xd, 0x64}, @dstopts={0x1d, 0x8, [], [@enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x10, {0x1, 0x2, 0x76, 0x1000, [0x7ff]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @dest_unreach={0x1, 0x2, 0x0, 0x80, [], {0x1, 0x6, "831c90", 0x2836, 0x2, 0x1, @mcast1, @local, [@routing={0x2c, 0x6, 0x31262067528c887f, 0x18, 0x0, [@private1={0xfc, 0x1, [], 0x1}, @local, @empty]}, @hopopts={0x2c, 0x15, [], [@ra={0x5, 0x2, 0x2e}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @generic={0x7, 0x85, "c9260185b99dd0cb3c10ebb640ecc18dcc3f294c0e723af200cecf49ca7e2b17164b54b3757dcd4806e3b7ab6e7a3901341d234466da89fbc6627805bb41cadbf5f0c5cc6ef42a62a936f8f3bb53b6225aea6a3501fd5e34bdac93e56e412cbe3463e3fb82c3b86dfb57644ecf930ac1805f109c87e83451153c4a58f2f48755b21eff999e"}, @hao={0xc9, 0x10, @ipv4={[], [], @broadcast}}, @ra={0x5, 0x2, 0x101}]}, @fragment={0x3a, 0x0, 0x6, 0x1, 0x0, 0x6, 0x68}], "b6a74c95a7a0ab0d5bc77cc1018abfa354c87aaa9287c8c26ad8e413f9bfd5373143a1e54276c8e4b141cb4ed3412e638a28b3c6d46ebac5e7136b1ff76dd873b988f3d224327e0fb38c32123e4f5431ef04"}}}}}, 0x3fc) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 18:52:50 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0xf5, 0x2) unshare(0x40000000) 18:52:50 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 2356.613850][T30262] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2356.628531][T30258] IPVS: ftp: loaded support on port[0] = 21 [ 2356.634009][T30263] IPVS: ftp: loaded support on port[0] = 21 [ 2356.645654][T30264] IPVS: ftp: loaded support on port[0] = 21 [ 2356.676445][T30269] device bond0 left promiscuous mode [ 2356.703076][T30269] device bond_slave_0 left promiscuous mode [ 2356.726121][T30263] syz-executor.0 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2356.737319][T30269] device bond_slave_1 left promiscuous mode [ 2356.756693][T30269] bridge386: port 1(bond0) entered disabled state [ 2356.768300][T30263] CPU: 1 PID: 30263 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0 [ 2356.777601][T30263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2356.785279][T30271] IPVS: ftp: loaded support on port[0] = 21 [ 2356.787911][T30263] Call Trace: [ 2356.787935][T30263] dump_stack+0x188/0x20d [ 2356.787952][T30263] dump_header+0x10b/0x826 [ 2356.787973][T30263] oom_kill_process.cold+0x10/0x15 [ 2356.811038][T30263] out_of_memory+0x31f/0x12f0 [ 2356.815727][T30263] ? oom_killer_disable+0x270/0x270 [ 2356.820915][T30263] ? mutex_trylock+0x246/0x2c0 [ 2356.825750][T30263] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2356.833983][T30263] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2356.840747][T30263] ? warn_alloc+0x110/0x110 [ 2356.845233][T30263] ? do_fast_syscall_32+0x270/0xe90 [ 2356.850435][T30263] __alloc_pages_nodemask+0x5d9/0x810 [ 2356.855802][T30263] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2356.862645][T30263] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2356.870456][T30263] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2356.876502][T30263] ? do_raw_spin_unlock+0x171/0x260 [ 2356.881697][T30263] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2356.888093][T30263] alloc_pages_current+0xff/0x200 [ 2356.893274][T30263] __vmalloc_node_range+0x478/0x7a0 [ 2356.898454][T30263] ? ebt_register_table+0x1e6/0xc70 [ 2356.903647][T30263] vmalloc+0x67/0x80 [ 2356.907533][T30263] ? ebt_register_table+0x1e6/0xc70 [ 2356.912713][T30263] ebt_register_table+0x1e6/0xc70 [ 2356.917719][T30263] ? ebt_broute+0x700/0x700 [ 2356.922224][T30263] ops_init+0xaf/0x420 [ 2356.926272][T30263] setup_net+0x2de/0x860 [ 2356.930505][T30263] ? ops_init+0x420/0x420 [ 2356.934818][T30263] copy_net_ns+0x293/0x590 [ 2356.939235][T30263] create_new_namespaces+0x3fb/0xb30 [ 2356.944510][T30263] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2356.950122][T30263] ksys_unshare+0x43d/0x8e0 18:52:50 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xfffffff0}, 0x0) [ 2356.954607][T30263] ? walk_process_tree+0x2c0/0x2c0 [ 2356.959701][T30263] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2356.965658][T30263] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2356.971455][T30263] ? fput_many+0x2f/0x1a0 [ 2356.975761][T30263] ? trace_hardirqs_off_caller+0x55/0x230 [ 2356.981560][T30263] __ia32_sys_unshare+0x2c/0x40 [ 2356.986396][T30263] do_fast_syscall_32+0x270/0xe90 [ 2356.991491][T30263] entry_SYSENTER_compat+0x70/0x7f 18:52:50 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0xffffffff}, 0x0) [ 2357.043146][T30263] Mem-Info: [ 2357.048598][T30263] active_anon:309070 inactive_anon:10394 isolated_anon:0 [ 2357.048598][T30263] active_file:2787 inactive_file:6396 isolated_file:0 [ 2357.048598][T30263] unevictable:14 dirty:44 writeback:17 unstable:0 [ 2357.048598][T30263] slab_reclaimable:20001 slab_unreclaimable:388974 [ 2357.048598][T30263] mapped:61736 shmem:10684 pagetables:30097 bounce:0 [ 2357.048598][T30263] free:718742 free_pcp:413 free_cma:0 18:52:50 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) [ 2357.097828][T30269] bridge387: port 1(bond0) entered blocking state [ 2357.105177][T30269] bridge387: port 1(bond0) entered disabled state [ 2357.122640][T30269] device bond0 entered promiscuous mode [ 2357.128406][T30269] device bond_slave_0 entered promiscuous mode [ 2357.138882][T30269] device bond_slave_1 entered promiscuous mode [ 2357.147104][T30263] Node 0 active_anon:1074600kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217072kB dirty:16kB writeback:16kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 944128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 18:52:51 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 2357.204352][T30269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2357.219734][T30262] device bond0 left promiscuous mode [ 2357.225061][T30262] device bond_slave_0 left promiscuous mode [ 2357.245494][T30262] device bond_slave_1 left promiscuous mode [ 2357.262643][T30262] bridge387: port 1(bond0) entered disabled state [ 2357.273016][T30263] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2357.309449][T30263] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2357.316053][T30263] Node 0 DMA32 free:116152kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1074472kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB writepending:32kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:21424kB pagetables:33724kB bounce:0kB free_pcp:1612kB local_pcp:460kB free_cma:0kB [ 2357.357557][T30263] lowmem_reserve[]: 0 0 0 0 0 [ 2357.363226][T30263] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2357.401689][T30297] IPVS: ftp: loaded support on port[0] = 21 [ 2357.408529][T30263] lowmem_reserve[]: 0 0 0 0 0 18:52:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 2357.447162][T30263] Node 0 DMA: 7*4kB (UM) 11*8kB (UM) 3*16kB (ME) 6*32kB (UME) 3*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10276kB [ 2357.517970][T30308] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2357.542113][T30308] bridge388: port 1(bond0) entered blocking state [ 2357.547222][T30309] IPVS: ftp: loaded support on port[0] = 21 [ 2357.549163][T30308] bridge388: port 1(bond0) entered disabled state [ 2357.563197][T30308] device bond0 entered promiscuous mode [ 2357.568930][T30308] device bond_slave_0 entered promiscuous mode [ 2357.575729][T30308] device bond_slave_1 entered promiscuous mode [ 2357.577791][T30263] Node 0 DMA32: 1934*4kB (UME) 1036*8kB (UM) 564*16kB (UME) 478*32kB (UME) 260*64kB (UME) 120*128kB (UME) 63*256kB (UME) 22*512kB (UM) 0*1024kB 8*2048kB (M) 0*4096kB = 116120kB [ 2357.593771][T30314] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2357.651598][T30263] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2357.697533][T30263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2357.717407][T30263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2357.728569][T30263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2357.741585][T30263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2357.751870][T30263] 19875 total pagecache pages [ 2357.757706][T30263] 0 pages in swap cache [ 2357.767401][T30263] Swap cache stats: add 0, delete 0, find 0/0 [ 2357.778379][T30263] Free swap = 0kB [ 2357.785332][T30263] Total swap = 0kB [ 2357.789185][T30263] 1965979 pages RAM [ 2357.797809][T30263] 0 pages HighMem/MovableOnly [ 2357.805470][T30263] 349380 pages reserved [ 2357.814388][T30263] 0 pages cma reserved [ 2357.818479][T30263] Unreclaimable slab info: [ 2357.826904][T30263] Name Used Total [ 2357.838790][T30263] pid_3 1KB 7KB [ 2357.847994][T30263] pid_2 928KB 1113KB [ 2357.858185][T30263] bio-3 0KB 7KB [ 2357.868068][T30263] AF_VSOCK 14KB 16KB [ 2357.878907][T30263] batadv_tl_cache 4KB 12KB [ 2357.888525][T30263] SMC 45KB 49KB [ 2357.899061][T30263] TIPC 433KB 624KB [ 2357.908697][T30263] rds_tcp_connection 10KB 11KB [ 2357.919139][T30263] RDS 22KB 22KB [ 2357.937745][T30263] rds_connection 0KB 3KB [ 2357.945375][T30263] SCTPv6 1000KB 1071KB [ 2357.955375][T30263] SCTP 198KB 232KB [ 2357.962383][T30263] sctp_chunk 7KB 11KB [ 2357.969055][T30263] sctp_bind_bucket 0KB 3KB [ 2357.979118][T30263] DCCPv6 1191KB 1291KB [ 2357.986179][T30263] DCCP 1106KB 1191KB [ 2357.996213][T30263] L2TP/IPv6 6KB 6KB [ 2358.003243][T30263] L2TP/IP 23KB 23KB [ 2358.010250][T30263] KCM 17KB 19KB [ 2358.016937][T30263] kcm_mux_cache 7KB 7KB [ 2358.027703][T30263] RXRPC 789KB 843KB [ 2358.034711][T30263] rxrpc_call_jar 4770KB 4770KB [ 2358.046230][T30263] bridge_fdb_cache 65KB 74KB [ 2358.053372][T30263] MPTCPv6 35KB 38KB [ 2358.063242][T30263] fib6_nodes 175KB 184KB [ 2358.070744][T30263] ip6_dst_cache 290KB 423KB [ 2358.077360][T30263] PINGv6 1KB 3KB [ 2358.088475][T30263] RAWv6 4107KB 4109KB [ 2358.095527][T30263] UDPLITEv6 19KB 19KB [ 2358.106065][T30263] UDPv6 970KB 1034KB [ 2358.113282][T30263] TCPv6 912KB 1102KB [ 2358.123038][T30263] nf_conntrack 10KB 37KB [ 2358.130089][T30263] sd_ext_cdb 0KB 7KB [ 2358.136784][T30263] scsi_sense_cache 1056KB 1064KB [ 2358.146812][T30263] virtio_scsi_cmd 16KB 16KB [ 2358.155999][T30263] sgpool-128 8KB 8KB [ 2358.165432][T30263] sgpool-64 4KB 12KB [ 2358.172277][T30263] sgpool-32 6KB 15KB [ 2358.178934][T30263] sgpool-16 26KB 30KB [ 2358.192593][T30263] sgpool-8 31KB 48KB [ 2358.199232][T30263] mqueue_inode_cache 53KB 62KB [ 2358.207043][T30263] f2fs_bio_post_read_ctx 16KB 16KB [ 2358.217562][T30263] jfs_mp 7KB 7KB [ 2358.224575][T30263] cifs_small_rq 15KB 16KB [ 2358.236516][T30263] cifs_request 67KB 67KB [ 2358.243427][T30263] cifs_mpx_ids 0KB 8KB [ 2358.255300][T30263] nfs_commit_data 3KB 7KB [ 2358.264415][T30263] nfs_write_data 34KB 44KB [ 2358.289585][T30263] ext4_system_zone 1KB 7KB [ 2358.296388][T30263] ext4_io_end_vec 10KB 15KB [ 2358.309527][T30263] ext4_bio_post_read_ctx 15KB 15KB [ 2358.316123][T30263] io_kiocb 0KB 3KB [ 2358.329960][T30263] kioctx 21KB 23KB [ 2358.336219][T30263] aio_kiocb 6KB 7KB [ 2358.359474][T30263] userfaultfd_ctx_cache 2KB 4KB [ 2358.365924][T30263] bio-2 1KB 7KB [ 2358.389469][T30263] fasync_cache 1KB 3KB [ 2358.395714][T30263] pid_namespace 4KB 11KB [ 2358.409479][T30263] posix_timers_cache 7KB 11KB [ 2358.415665][T30263] kvm_vcpu 0KB 70KB [ 2358.429475][T30263] kvm_mmu_page_header 58KB 61KB [ 2358.436010][T30263] pte_list_desc 2KB 3KB [ 2358.459862][T30263] x86_emulator 51KB 54KB [ 2358.466257][T30263] x86_fpu 0KB 43KB [ 2358.487587][T30263] rpc_buffers 17KB 25KB [ 2358.495961][T30263] rpc_tasks 2KB 7KB [ 2358.504162][T30263] UNIX 602KB 620KB [ 2358.511224][T30263] UDP-Lite 71KB 73KB [ 2358.517349][T30263] MPTCP 10KB 15KB [ 2358.524485][T30263] tcp_bind_bucket 48KB 48KB [ 2358.531572][T30263] inet_peer_cache 28KB 32KB [ 2358.537651][T30263] ip_fib_trie 24KB 31KB [ 2358.546482][T30263] ip_fib_alias 112KB 134KB [ 2358.553312][T30263] ip_dst_cache 101KB 168KB [ 2358.560722][T30263] PING 12KB 15KB [ 2358.566821][T30263] RAW 2496KB 2523KB [ 2358.574189][T30263] UDP 885KB 952KB [ 2358.581708][T30263] TCP 311KB 352KB [ 2358.587879][T30263] hugetlbfs_inode_cache 6KB 10KB [ 2358.597843][T30263] fscache_cookie_jar 1KB 7KB [ 2358.605020][T30263] bio-1 10KB 15KB [ 2358.612097][T30263] eventpoll_pwq 8KB 35KB [ 2358.618352][T30263] eventpoll_epi 15KB 39KB [ 2358.625748][T30263] inotify_inode_mark 4KB 7KB [ 2358.639480][T30263] request_queue 157KB 157KB [ 2358.645654][T30263] blkdev_ioc 11KB 19KB [ 2358.669509][T30263] bio-0 589KB 620KB [ 2358.675617][T30263] biovec-max 4721KB 4721KB [ 2358.688365][T30263] biovec-64 114KB 149KB [ 2358.695534][T30263] biovec-16 34KB 37KB [ 2358.708207][T30263] bio_integrity_payload 1KB 7KB [ 2358.715530][T30263] khugepaged_mm_slot 287KB 324KB [ 2358.729306][T30263] user_namespace 4KB 7KB [ 2358.736059][T30263] uid_cache 0KB 4KB [ 2358.747545][T30263] dmaengine-unmap-256 2KB 6KB [ 2358.755094][T30263] dmaengine-unmap-128 1KB 3KB [ 2358.766152][T30263] dmaengine-unmap-16 0KB 4KB [ 2358.773241][T30263] dmaengine-unmap-2 0KB 3KB [ 2358.784424][T30263] audit_buffer 0KB 3KB [ 2358.791375][T30263] skbuff_ext_cache 0KB 4KB [ 2358.797618][T30263] skbuff_fclone_cache 686KB 742KB [ 2358.808563][T30263] skbuff_head_cache 26314KB 40192KB [ 2358.816885][T30263] configfs_dir_cache 1KB 8KB [ 2358.827481][T30263] file_lock_cache 4KB 7KB [ 2358.835203][T30263] file_lock_ctx 8KB 11KB [ 2358.844612][T30263] fsnotify_mark_connector 1KB 8KB [ 2358.852854][T30263] net_namespace 2688KB 2752KB [ 2358.859167][T30263] task_delay_info 846KB 957KB [ 2358.867672][T30263] taskstats 593KB 676KB [ 2358.874301][T30263] proc_dir_entry 18772KB 18945KB [ 2358.883378][T30263] pde_opener 11KB 15KB [ 2358.890394][T30263] seq_file 37KB 63KB [ 2358.896593][T30263] shmem_inode_cache 10740KB 11348KB [ 2358.906591][T30263] kernfs_iattrs_cache 9KB 15KB [ 2358.913474][T30263] kernfs_node_cache 112555KB 112573KB [ 2358.924019][T30263] mnt_cache 347KB 363KB [ 2358.930825][T30263] filp 4156KB 4466KB [ 2358.937205][T30263] names_cache 46176KB 46176KB [ 2358.945829][T30263] iint_cache 28KB 66KB [ 2358.952508][T30263] lsm_file_cache 769KB 897KB [ 2358.958579][T30263] key_jar 28KB 43KB [ 2358.967242][T30263] uts_namespace 5KB 15KB [ 2358.973917][T30263] nsproxy 122KB 138KB [ 2358.983248][T30263] vm_area_struct 11935KB 13136KB [ 2358.990498][T30263] mm_struct 2311KB 2538KB [ 2358.996601][T30263] fs_cache 544KB 704KB [ 2359.005471][T30263] files_cache 1832KB 2178KB [ 2359.013700][T30263] signal_cache 5525KB 5882KB [ 2359.022544][T30263] sighand_cache 4451KB 4481KB [ 2359.028630][T30263] task_struct 22196KB 22228KB [ 2359.036711][T30263] cred_jar 1930KB 2108KB [ 2359.045086][T30263] anon_vma_chain 3692KB 4413KB [ 2359.051806][T30263] anon_vma 2928KB 3116KB [ 2359.057879][T30263] pid 416KB 461KB [ 2359.067808][T30263] Acpi-Operand 156KB 194KB [ 2359.074588][T30263] Acpi-ParseExt 9KB 11KB [ 2359.083365][T30263] Acpi-Parse 41KB 47KB [ 2359.090127][T30263] Acpi-State 52KB 63KB [ 2359.096217][T30263] Acpi-Namespace 23KB 27KB [ 2359.105156][T30263] shared_policy_node 0KB 3KB [ 2359.112423][T30263] numa_policy 2KB 23KB [ 2359.118735][T30263] trace_event_file 358KB 358KB [ 2359.127357][T30263] ftrace_event_field 491KB 496KB [ 2359.134260][T30263] pool_workqueue 609KB 712KB [ 2359.144369][T30263] vmap_area 1128KB 2287KB [ 2359.151133][T30263] debug_objects_cache 7919KB 8297KB [ 2359.157408][T30263] page->ptl 3271KB 3906KB [ 2359.165977][T30263] kmalloc-4M 4096KB 4096KB [ 2359.172844][T30263] kmalloc-1M 8192KB 8192KB [ 2359.178920][T30263] kmalloc-512k 4096KB 4096KB [ 2359.187513][T30263] kmalloc-256k 192512KB 192512KB [ 2359.194240][T30263] kmalloc-128k 18944KB 19200KB [ 2359.202967][T30263] kmalloc-64k 6656KB 7296KB [ 2359.209061][T30263] kmalloc-32k 49728KB 49728KB [ 2359.216678][T30263] kmalloc-16k 20160KB 20608KB [ 2359.233616][T30263] kmalloc-8k 44096KB 44096KB [ 2359.241044][T30263] kmalloc-4k 275096KB 275176KB [ 2359.247121][T30263] kmalloc-2k 159660KB 159712KB [ 2359.257005][T30263] kmalloc-1k 208212KB 240264KB [ 2359.263683][T30263] kmalloc-512 45881KB 48272KB [ 2359.274144][T30263] kmalloc-256 32473KB 32880KB [ 2359.281820][T30263] kmalloc-128 5232KB 6020KB [ 2359.287906][T30263] kmalloc-96 4418KB 4656KB [ 2359.301873][T30263] kmalloc-64 10406KB 10924KB [ 2359.307975][T30263] kmalloc-32 6680KB 7197KB [ 2359.322388][T30263] kmalloc-192 8467KB 9032KB [ 2359.328489][T30263] kmem_cache 441KB 452KB [ 2359.349388][T30263] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4473,uid=0 [ 2359.379568][T30263] Out of memory: Killed process 4473 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 18:52:53 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x3}, 0x0) 18:52:53 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = openat$pfkey(0xffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8080, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) [ 2359.533351][T30372] IPVS: ftp: loaded support on port[0] = 21 [ 2359.555132][T30372] syz-executor.4 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2359.568071][T30372] CPU: 0 PID: 30372 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 2359.576772][T30372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2359.586913][T30372] Call Trace: [ 2359.590206][T30372] dump_stack+0x188/0x20d [ 2359.594530][T30372] dump_header+0x10b/0x826 [ 2359.599019][T30372] oom_kill_process.cold+0x10/0x15 [ 2359.604127][T30372] out_of_memory+0x31f/0x12f0 [ 2359.608788][T30372] ? oom_killer_disable+0x270/0x270 [ 2359.613971][T30372] ? mutex_trylock+0x246/0x2c0 [ 2359.618716][T30372] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2359.625376][T30372] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2359.631952][T30372] ? warn_alloc+0x110/0x110 [ 2359.636652][T30372] ? do_fast_syscall_32+0x270/0xe90 [ 2359.641842][T30372] __alloc_pages_nodemask+0x5d9/0x810 [ 2359.647207][T30372] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2359.653945][T30372] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2359.659734][T30372] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2359.665717][T30372] ? do_raw_spin_unlock+0x171/0x260 [ 2359.670916][T30372] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2359.677311][T30372] alloc_pages_current+0xff/0x200 [ 2359.682324][T30372] __vmalloc_node_range+0x478/0x7a0 [ 2359.687508][T30372] ? ebt_register_table+0x1e6/0xc70 [ 2359.692709][T30372] vmalloc+0x67/0x80 [ 2359.697469][T30372] ? ebt_register_table+0x1e6/0xc70 [ 2359.702662][T30372] ebt_register_table+0x1e6/0xc70 [ 2359.707671][T30372] ? ebt_broute+0x700/0x700 [ 2359.712158][T30372] ops_init+0xaf/0x420 [ 2359.716209][T30372] setup_net+0x2de/0x860 [ 2359.720448][T30372] ? ops_init+0x420/0x420 [ 2359.724762][T30372] copy_net_ns+0x293/0x590 [ 2359.729175][T30372] create_new_namespaces+0x3fb/0xb30 [ 2359.734591][T30372] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2359.740204][T30372] ksys_unshare+0x43d/0x8e0 [ 2359.744687][T30372] ? walk_process_tree+0x2c0/0x2c0 [ 2359.749797][T30372] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2359.755756][T30372] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2359.761561][T30372] ? trace_hardirqs_off_caller+0x55/0x230 [ 2359.767263][T30372] __ia32_sys_unshare+0x2c/0x40 [ 2359.772096][T30372] do_fast_syscall_32+0x270/0xe90 [ 2359.777106][T30372] entry_SYSENTER_compat+0x70/0x7f [ 2359.791548][T30372] Mem-Info: [ 2359.794764][T30372] active_anon:308503 inactive_anon:10394 isolated_anon:0 [ 2359.794764][T30372] active_file:2787 inactive_file:6417 isolated_file:0 [ 2359.794764][T30372] unevictable:14 dirty:12 writeback:0 unstable:0 [ 2359.794764][T30372] slab_reclaimable:20008 slab_unreclaimable:391452 [ 2359.794764][T30372] mapped:61760 shmem:10684 pagetables:30002 bounce:0 [ 2359.794764][T30372] free:716626 free_pcp:389 free_cma:0 [ 2359.833285][T30372] Node 0 active_anon:1072444kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217072kB dirty:12kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 942080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2359.862557][T30372] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2359.893104][T30372] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2359.901276][T30372] Node 0 DMA32 free:116132kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1072316kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB writepending:12kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:21392kB pagetables:33624kB bounce:0kB free_pcp:1556kB local_pcp:1128kB free_cma:0kB [ 2359.934859][T30372] lowmem_reserve[]: 0 0 0 0 0 [ 2359.940179][T30372] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2359.968893][T30372] lowmem_reserve[]: 0 0 0 0 0 [ 2359.974113][T30372] Node 0 DMA: 7*4kB (UM) 10*8kB (UM) 4*16kB (UME) 6*32kB (UME) 3*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10284kB [ 2359.991120][T30372] Node 0 DMA32: 1933*4kB (ME) 1032*8kB (UM) 554*16kB (ME) 421*32kB (UME) 259*64kB (UME) 120*128kB (UME) 63*256kB (UME) 22*512kB (UM) 0*1024kB 7*2048kB (M) 1*4096kB (M) = 116084kB [ 2360.011255][T30372] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2360.023323][T30372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2360.033541][T30372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2360.043649][T30372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2360.053785][T30372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2360.064205][T30372] 19888 total pagecache pages [ 2360.068928][T30372] 0 pages in swap cache [ 2360.074067][T30372] Swap cache stats: add 0, delete 0, find 0/0 [ 2360.080660][T30372] Free swap = 0kB [ 2360.084382][T30372] Total swap = 0kB [ 2360.088090][T30372] 1965979 pages RAM [ 2360.093198][T30372] 0 pages HighMem/MovableOnly [ 2360.097877][T30372] 349380 pages reserved [ 2360.103950][T30372] 0 pages cma reserved [ 2360.108022][T30372] Unreclaimable slab info: [ 2360.113381][T30372] Name Used Total [ 2360.122546][T30372] pid_3 1KB 7KB [ 2360.128653][T30372] pid_2 928KB 1113KB [ 2360.135783][T30372] bio-3 0KB 7KB [ 2360.143102][T30372] AF_VSOCK 14KB 16KB [ 2360.149193][T30372] batadv_tl_cache 4KB 12KB [ 2360.156586][T30372] SMC 45KB 49KB [ 2360.163244][T30372] TIPC 433KB 624KB [ 2360.169861][T30372] rds_tcp_connection 10KB 11KB [ 2360.176021][T30372] RDS 22KB 22KB [ 2360.183639][T30372] rds_connection 0KB 3KB [ 2360.190923][T30372] SCTPv6 1007KB 1077KB [ 2360.197001][T30372] SCTP 198KB 232KB [ 2360.219406][T30372] sctp_chunk 7KB 11KB [ 2360.225668][T30372] sctp_bind_bucket 0KB 3KB [ 2360.234342][T30372] DCCPv6 1202KB 1299KB [ 2360.241722][T30372] DCCP 1116KB 1199KB [ 2360.247817][T30372] L2TP/IPv6 6KB 6KB [ 2360.254825][T30372] L2TP/IP 23KB 23KB [ 2360.265105][T30372] KCM 17KB 19KB [ 2360.272367][T30372] kcm_mux_cache 7KB 7KB [ 2360.278438][T30372] RXRPC 796KB 850KB [ 2360.285515][T30372] rxrpc_call_jar 4751KB 4796KB [ 2360.292648][T30372] bridge_fdb_cache 65KB 74KB [ 2360.298746][T30372] MPTCPv6 35KB 38KB [ 2360.305995][T30372] fib6_nodes 175KB 184KB [ 2360.312691][T30372] ip6_dst_cache 290KB 423KB [ 2360.318783][T30372] PINGv6 1KB 3KB [ 2360.326373][T30372] RAWv6 4107KB 4109KB [ 2360.333169][T30372] UDPLITEv6 19KB 19KB [ 2360.342344][T30372] UDPv6 974KB 1038KB [ 2360.349188][T30372] TCPv6 912KB 1102KB [ 2360.356486][T30372] nf_conntrack 10KB 37KB [ 2360.366500][T30372] sd_ext_cdb 0KB 7KB [ 2360.373156][T30372] scsi_sense_cache 1056KB 1064KB [ 2360.383439][T30372] virtio_scsi_cmd 16KB 16KB [ 2360.390124][T30372] sgpool-128 8KB 8KB [ 2360.396314][T30372] sgpool-64 4KB 12KB [ 2360.406819][T30372] sgpool-32 6KB 15KB [ 2360.413611][T30372] sgpool-16 26KB 30KB [ 2360.423679][T30372] sgpool-8 31KB 48KB [ 2360.430422][T30372] mqueue_inode_cache 53KB 62KB [ 2360.436689][T30372] f2fs_bio_post_read_ctx 16KB 16KB [ 2360.448367][T30372] jfs_mp 7KB 7KB [ 2360.457395][T30372] cifs_small_rq 15KB 16KB [ 2360.467544][T30372] cifs_request 67KB 67KB [ 2360.474326][T30372] cifs_mpx_ids 0KB 8KB [ 2360.484381][T30372] nfs_commit_data 3KB 7KB [ 2360.490944][T30372] nfs_write_data 34KB 44KB [ 2360.497231][T30372] ext4_system_zone 1KB 7KB [ 2360.505221][T30372] ext4_io_end_vec 10KB 15KB [ 2360.511909][T30372] ext4_bio_post_read_ctx 15KB 15KB [ 2360.518663][T30372] io_kiocb 0KB 3KB [ 2360.525547][T30372] kioctx 21KB 23KB [ 2360.532087][T30372] aio_kiocb 6KB 7KB [ 2360.538166][T30372] userfaultfd_ctx_cache 2KB 4KB [ 2360.545572][T30372] bio-2 1KB 7KB [ 2360.552154][T30372] fasync_cache 1KB 3KB [ 2360.558552][T30372] pid_namespace 4KB 11KB [ 2360.566558][T30372] posix_timers_cache 7KB 11KB [ 2360.573439][T30372] kvm_vcpu 0KB 70KB [ 2360.582570][T30372] kvm_mmu_page_header 58KB 61KB [ 2360.588860][T30372] pte_list_desc 2KB 3KB [ 2360.595656][T30372] x86_emulator 51KB 54KB [ 2360.603585][T30372] x86_fpu 0KB 43KB [ 2360.610810][T30372] rpc_buffers 17KB 25KB [ 2360.617535][T30372] rpc_tasks 2KB 7KB [ 2360.624754][T30372] UNIX 602KB 620KB [ 2360.631401][T30372] UDP-Lite 71KB 73KB [ 2360.637651][T30372] MPTCP 10KB 15KB [ 2360.644915][T30372] tcp_bind_bucket 48KB 48KB [ 2360.651643][T30372] inet_peer_cache 28KB 32KB [ 2360.657719][T30372] ip_fib_trie 24KB 31KB [ 2360.664882][T30372] ip_fib_alias 112KB 134KB [ 2360.672678][T30372] ip_dst_cache 101KB 168KB [ 2360.679050][T30372] PING 12KB 15KB [ 2360.686212][T30372] RAW 2510KB 2531KB [ 2360.694000][T30372] UDP 885KB 952KB [ 2360.700775][T30372] TCP 311KB 352KB [ 2360.707109][T30372] hugetlbfs_inode_cache 6KB 10KB [ 2360.714862][T30372] fscache_cookie_jar 1KB 7KB [ 2360.721746][T30372] bio-1 10KB 15KB [ 2360.727817][T30372] eventpoll_pwq 8KB 35KB [ 2360.734615][T30372] eventpoll_epi 15KB 39KB [ 2360.742179][T30372] inotify_inode_mark 4KB 7KB [ 2360.748359][T30372] request_queue 157KB 157KB [ 2360.755300][T30372] blkdev_ioc 11KB 19KB [ 2360.762090][T30372] bio-0 635KB 636KB [ 2360.770001][T30372] biovec-max 5155KB 5155KB [ 2360.776297][T30372] biovec-64 114KB 149KB [ 2360.784312][T30372] biovec-16 34KB 37KB [ 2360.791050][T30372] bio_integrity_payload 1KB 7KB [ 2360.797668][T30372] khugepaged_mm_slot 287KB 324KB [ 2360.804783][T30372] user_namespace 4KB 7KB [ 2360.811376][T30372] uid_cache 0KB 4KB [ 2360.817515][T30372] dmaengine-unmap-256 2KB 6KB [ 2360.824778][T30372] dmaengine-unmap-128 1KB 3KB [ 2360.831754][T30372] dmaengine-unmap-16 0KB 4KB [ 2360.837913][T30372] dmaengine-unmap-2 0KB 3KB [ 2360.845017][T30372] audit_buffer 0KB 3KB [ 2360.851742][T30372] skbuff_ext_cache 0KB 4KB [ 2360.857907][T30372] skbuff_fclone_cache 686KB 742KB [ 2360.864905][T30372] skbuff_head_cache 26297KB 40188KB [ 2360.871811][T30372] configfs_dir_cache 1KB 8KB [ 2360.877987][T30372] file_lock_cache 4KB 7KB [ 2360.884822][T30372] file_lock_ctx 8KB 11KB [ 2360.892624][T30372] fsnotify_mark_connector 1KB 8KB [ 2360.900038][T30372] net_namespace 2702KB 2760KB [ 2360.906321][T30372] task_delay_info 846KB 957KB [ 2360.913089][T30372] taskstats 593KB 676KB [ 2360.920014][T30372] proc_dir_entry 18677KB 18975KB [ 2360.926201][T30372] pde_opener 11KB 15KB [ 2360.933157][T30372] seq_file 37KB 63KB [ 2360.939884][T30372] shmem_inode_cache 10740KB 11348KB [ 2360.945965][T30372] kernfs_iattrs_cache 9KB 15KB [ 2360.953081][T30372] kernfs_node_cache 112779KB 112793KB [ 2360.959148][T30372] mnt_cache 347KB 363KB [ 2360.965999][T30372] filp 4291KB 4466KB [ 2360.973075][T30372] names_cache 48505KB 48505KB [ 2360.979924][T30372] iint_cache 28KB 66KB [ 2360.986080][T30372] lsm_file_cache 788KB 897KB [ 2360.992983][T30372] key_jar 28KB 43KB [ 2361.001109][T30372] uts_namespace 5KB 15KB [ 2361.007330][T30372] nsproxy 122KB 138KB [ 2361.013500][T30372] vm_area_struct 11935KB 13136KB [ 2361.019693][T30372] mm_struct 2311KB 2538KB [ 2361.026879][T30372] fs_cache 544KB 704KB [ 2361.033056][T30372] files_cache 1832KB 2178KB [ 2361.039150][T30372] signal_cache 5525KB 5882KB [ 2361.045407][T30372] sighand_cache 4451KB 4481KB [ 2361.051561][T30372] task_struct 22396KB 22421KB [ 2361.057623][T30372] cred_jar 1990KB 2108KB [ 2361.063895][T30372] anon_vma_chain 3692KB 4413KB [ 2361.070033][T30372] anon_vma 2928KB 3116KB [ 2361.076096][T30372] pid 416KB 461KB [ 2361.082199][T30372] Acpi-Operand 156KB 194KB [ 2361.088273][T30372] Acpi-ParseExt 9KB 11KB [ 2361.094413][T30372] Acpi-Parse 41KB 47KB [ 2361.100912][T30372] Acpi-State 52KB 63KB [ 2361.107143][T30372] Acpi-Namespace 23KB 27KB [ 2361.115578][T30372] shared_policy_node 0KB 3KB [ 2361.121845][T30372] numa_policy 2KB 23KB [ 2361.128162][T30372] trace_event_file 358KB 358KB [ 2361.134288][T30372] ftrace_event_field 491KB 496KB [ 2361.142127][T30372] pool_workqueue 609KB 712KB [ 2361.148457][T30372] vmap_area 1150KB 2287KB [ 2361.154835][T30372] debug_objects_cache 7932KB 8297KB [ 2361.161172][T30372] page->ptl 3271KB 3906KB [ 2361.167353][T30372] kmalloc-4M 4096KB 4096KB [ 2361.173482][T30372] kmalloc-1M 8192KB 8192KB [ 2361.180308][T30372] kmalloc-512k 4096KB 4096KB [ 2361.187512][T30372] kmalloc-256k 191488KB 192512KB [ 2361.194016][T30372] kmalloc-128k 18944KB 19200KB [ 2361.200253][T30372] kmalloc-64k 6656KB 7296KB [ 2361.206343][T30372] kmalloc-32k 49920KB 49920KB [ 2361.212715][T30372] kmalloc-16k 19776KB 20224KB [ 2361.221215][T30372] kmalloc-8k 43936KB 44016KB [ 2361.227283][T30372] kmalloc-4k 275704KB 275744KB [ 2361.233929][T30372] kmalloc-2k 159660KB 159712KB [ 2361.240086][T30372] kmalloc-1k 208356KB 240264KB [ 2361.246162][T30372] kmalloc-512 46064KB 48472KB [ 2361.252431][T30372] kmalloc-256 32420KB 32828KB [ 2361.258490][T30372] kmalloc-128 5226KB 6016KB [ 2361.264710][T30372] kmalloc-96 4415KB 4656KB [ 2361.270844][T30372] kmalloc-64 10418KB 10928KB [ 2361.276991][T30372] kmalloc-32 6687KB 7197KB [ 2361.283126][T30372] kmalloc-192 8449KB 9032KB [ 2361.289262][T30372] kmem_cache 441KB 452KB [ 2361.295497][T30372] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4459,uid=0 [ 2361.297399][T30374] IPVS: ftp: loaded support on port[0] = 21 [ 2361.313625][T30372] Out of memory: Killed process 4459 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 18:52:55 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x0, 0xcc1, 0x7, 0x10000003, 0x5, 0x6, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) sendto$rxrpc(r0, &(0x7f0000000180)="9cdae57287ce2950674463be042145812a7437562d41eeacbbf2c71afc65ab027bfc92eec163ca4c58a478f0f2acb1e19fcf0b8f7958234295a85a058cc62f2437323591b19cae111427855f23", 0x4d, 0x4008001, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010102}}, 0x24) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) 18:52:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 2361.455079][T30409] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2361.474845][T30409] device bond0 left promiscuous mode [ 2361.480364][T30409] device bond_slave_0 left promiscuous mode [ 2361.487630][T30409] device bond_slave_1 left promiscuous mode [ 2361.496535][T30409] bridge388: port 1(bond0) entered disabled state [ 2361.512879][T30413] IPVS: ftp: loaded support on port[0] = 21 [ 2361.589346][T30409] bridge389: port 1(bond0) entered blocking state [ 2361.597087][T30409] bridge389: port 1(bond0) entered disabled state [ 2361.614251][T30409] device bond0 entered promiscuous mode [ 2361.630064][T30409] device bond_slave_0 entered promiscuous mode [ 2361.639101][T30413] syz-executor.1 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2361.652384][T30409] device bond_slave_1 entered promiscuous mode [ 2361.661746][T30413] CPU: 0 PID: 30413 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 2361.670954][T30413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2361.681312][T30413] Call Trace: [ 2361.685037][T30413] dump_stack+0x188/0x20d [ 2361.689374][T30413] dump_header+0x10b/0x826 [ 2361.693795][T30413] oom_kill_process.cold+0x10/0x15 [ 2361.698890][T30413] out_of_memory+0x31f/0x12f0 [ 2361.703663][T30413] ? oom_killer_disable+0x270/0x270 [ 2361.709035][T30413] ? mutex_trylock+0x246/0x2c0 [ 2361.713794][T30413] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2361.721146][T30413] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2361.727732][T30413] ? warn_alloc+0x110/0x110 [ 2361.732306][T30413] ? do_fast_syscall_32+0x270/0xe90 [ 2361.737491][T30413] __alloc_pages_nodemask+0x5d9/0x810 [ 2361.742843][T30413] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2361.749587][T30413] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2361.755376][T30413] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2361.761420][T30413] ? do_raw_spin_unlock+0x171/0x260 [ 2361.766600][T30413] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2361.772996][T30413] alloc_pages_current+0xff/0x200 [ 2361.778000][T30413] __vmalloc_node_range+0x478/0x7a0 [ 2361.783207][T30413] ? ebt_register_table+0x1e6/0xc70 [ 2361.788484][T30413] vmalloc+0x67/0x80 [ 2361.792399][T30413] ? ebt_register_table+0x1e6/0xc70 [ 2361.797575][T30413] ebt_register_table+0x1e6/0xc70 [ 2361.802673][T30413] ? ebt_broute+0x700/0x700 [ 2361.807252][T30413] ops_init+0xaf/0x420 [ 2361.811305][T30413] setup_net+0x2de/0x860 [ 2361.815531][T30413] ? ops_init+0x420/0x420 [ 2361.819852][T30413] copy_net_ns+0x293/0x590 [ 2361.824276][T30413] create_new_namespaces+0x3fb/0xb30 [ 2361.829604][T30413] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2361.835218][T30413] ksys_unshare+0x43d/0x8e0 [ 2361.839743][T30413] ? walk_process_tree+0x2c0/0x2c0 [ 2361.844924][T30413] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2361.850969][T30413] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2361.856757][T30413] ? trace_hardirqs_off_caller+0x55/0x230 [ 2361.862461][T30413] __ia32_sys_unshare+0x2c/0x40 [ 2361.867301][T30413] do_fast_syscall_32+0x270/0xe90 [ 2361.872329][T30413] entry_SYSENTER_compat+0x70/0x7f [ 2361.896857][T30413] Mem-Info: [ 2361.903476][T30413] active_anon:307989 inactive_anon:10394 isolated_anon:0 [ 2361.903476][T30413] active_file:2786 inactive_file:6438 isolated_file:0 [ 2361.903476][T30413] unevictable:14 dirty:11 writeback:0 unstable:0 [ 2361.903476][T30413] slab_reclaimable:20003 slab_unreclaimable:392403 [ 2361.903476][T30413] mapped:61799 shmem:10684 pagetables:30002 bounce:0 [ 2361.903476][T30413] free:716195 free_pcp:401 free_cma:0 [ 2361.947430][T30413] Node 0 active_anon:1070288kB inactive_anon:16652kB active_file:8kB inactive_file:12kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217072kB dirty:12kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 940032kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2361.959197][T30414] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2361.981097][T30413] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2362.021527][T30413] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2362.026961][T30409] device bond0 left promiscuous mode [ 2362.027354][T30413] Node 0 DMA32 free:116048kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1070160kB inactive_anon:16652kB active_file:8kB inactive_file:12kB unevictable:56kB writepending:12kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:21360kB pagetables:33524kB bounce:0kB free_pcp:1604kB local_pcp:1216kB free_cma:0kB [ 2362.033144][T30409] device bond_slave_0 left promiscuous mode [ 2362.070864][T30413] lowmem_reserve[]: 0 0 0 0 0 [ 2362.077139][T30413] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2362.110745][T30413] lowmem_reserve[]: 0 0 0 0 0 [ 2362.115683][T30413] Node 0 DMA: 10*4kB (UM) 10*8kB (UM) 4*16kB (UME) 5*32kB (UME) 3*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10264kB [ 2362.138327][T30413] Node 0 DMA32: 1934*4kB (UME) 1031*8kB (M) 554*16kB (ME) 374*32kB (ME) 239*64kB (UME) 121*128kB (UME) 64*256kB (UME) 22*512kB (UM) 0*1024kB 6*2048kB (M) 2*4096kB (M) = 115728kB [ 2362.157525][T30409] device bond_slave_1 left promiscuous mode [ 2362.160410][T30413] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2362.176021][T30409] bridge389: port 1(bond0) entered disabled state [ 2362.179696][T30413] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2362.199406][T30413] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2362.213210][T30413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2362.223914][T30413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2362.237536][T30413] 19908 total pagecache pages [ 2362.244909][T30413] 0 pages in swap cache [ 2362.253027][T30413] Swap cache stats: add 0, delete 0, find 0/0 [ 2362.260339][T30413] Free swap = 0kB [ 2362.264152][T30413] Total swap = 0kB [ 2362.267934][T30413] 1965979 pages RAM [ 2362.276534][T30413] 0 pages HighMem/MovableOnly [ 2362.282579][T30413] 349380 pages reserved [ 2362.286922][T30413] 0 pages cma reserved [ 2362.299925][T30413] Unreclaimable slab info: [ 2362.305079][T30413] Name Used Total [ 2362.320296][T30413] pid_3 1KB 7KB [ 2362.326536][T30413] pid_2 928KB 1113KB [ 2362.337293][T30413] bio-3 0KB 7KB [ 2362.357504][T30413] AF_VSOCK 14KB 16KB [ 2362.365120][T30413] batadv_tl_cache 4KB 12KB [ 2362.375359][T30413] SMC 45KB 49KB [ 2362.382056][T30413] TIPC 433KB 624KB [ 2362.388464][T30413] rds_tcp_connection 10KB 11KB [ 2362.398997][T30413] RDS 22KB 22KB [ 2362.406089][T30413] rds_connection 0KB 3KB [ 2362.416866][T30413] SCTPv6 1007KB 1077KB [ 2362.433554][T30413] SCTP 198KB 232KB [ 2362.440576][T30413] sctp_chunk 7KB 11KB [ 2362.447063][T30413] sctp_bind_bucket 0KB 3KB [ 2362.457484][T30413] DCCPv6 1202KB 1299KB [ 2362.466109][T30413] DCCP 1123KB 1206KB [ 2362.476034][T30413] L2TP/IPv6 6KB 6KB [ 2362.483213][T30413] L2TP/IP 23KB 23KB [ 2362.493203][T30413] KCM 17KB 19KB [ 2362.501142][T30413] kcm_mux_cache 7KB 7KB [ 2362.507497][T30413] RXRPC 796KB 850KB [ 2362.518004][T30413] rxrpc_call_jar 4773KB 4818KB [ 2362.524961][T30413] bridge_fdb_cache 65KB 74KB [ 2362.535137][T30413] MPTCPv6 35KB 38KB [ 2362.542693][T30413] fib6_nodes 175KB 184KB [ 2362.548820][T30413] ip6_dst_cache 290KB 423KB [ 2362.559992][T30413] PINGv6 1KB 3KB [ 2362.566213][T30413] RAWv6 4096KB 4119KB [ 2362.577255][T30413] UDPLITEv6 19KB 19KB [ 2362.585506][T30413] UDPv6 978KB 1042KB [ 2362.595706][T30413] TCPv6 912KB 1102KB [ 2362.603656][T30413] nf_conntrack 10KB 37KB [ 2362.612887][T30413] sd_ext_cdb 0KB 7KB [ 2362.621114][T30413] scsi_sense_cache 1056KB 1064KB [ 2362.627365][T30413] virtio_scsi_cmd 16KB 16KB [ 2362.636769][T30413] sgpool-128 8KB 8KB [ 2362.644687][T30413] sgpool-64 4KB 12KB [ 2362.653677][T30413] sgpool-32 6KB 15KB [ 2362.662231][T30413] sgpool-16 26KB 30KB [ 2362.668354][T30413] sgpool-8 31KB 48KB [ 2362.677190][T30413] mqueue_inode_cache 53KB 62KB [ 2362.686371][T30413] f2fs_bio_post_read_ctx 16KB 16KB [ 2362.695233][T30413] jfs_mp 7KB 7KB [ 2362.702595][T30413] cifs_small_rq 15KB 16KB [ 2362.708715][T30413] cifs_request 67KB 67KB [ 2362.717245][T30413] cifs_mpx_ids 0KB 8KB [ 2362.724522][T30413] nfs_commit_data 3KB 7KB [ 2362.733206][T30413] nfs_write_data 34KB 44KB [ 2362.741560][T30413] ext4_system_zone 1KB 7KB [ 2362.752042][T30413] ext4_io_end_vec 10KB 15KB [ 2362.758429][T30413] ext4_bio_post_read_ctx 15KB 15KB [ 2362.766110][T30413] io_kiocb 0KB 3KB [ 2362.774840][T30413] kioctx 21KB 23KB [ 2362.782223][T30413] aio_kiocb 6KB 7KB [ 2362.788620][T30413] userfaultfd_ctx_cache 2KB 4KB [ 2362.801047][T30413] bio-2 1KB 7KB [ 2362.807240][T30413] fasync_cache 1KB 3KB [ 2362.816685][T30413] pid_namespace 4KB 11KB [ 2362.824881][T30413] posix_timers_cache 7KB 11KB [ 2362.833891][T30413] kvm_vcpu 0KB 70KB [ 2362.841942][T30413] kvm_mmu_page_header 58KB 61KB [ 2362.848355][T30413] pte_list_desc 2KB 3KB [ 2362.855465][T30413] x86_emulator 51KB 54KB [ 2362.862144][T30413] x86_fpu 0KB 43KB [ 2362.868303][T30413] rpc_buffers 17KB 25KB [ 2362.875330][T30413] rpc_tasks 2KB 7KB [ 2362.882377][T30413] UNIX 602KB 620KB [ 2362.888688][T30413] UDP-Lite 71KB 73KB [ 2362.895860][T30413] MPTCP 10KB 15KB [ 2362.903763][T30413] tcp_bind_bucket 48KB 48KB [ 2362.911368][T30413] inet_peer_cache 28KB 32KB [ 2362.917546][T30413] ip_fib_trie 24KB 31KB [ 2362.924439][T30413] ip_fib_alias 112KB 134KB [ 2362.931804][T30413] ip_dst_cache 101KB 168KB [ 2362.937965][T30413] PING 12KB 15KB [ 2362.944947][T30413] RAW 2495KB 2531KB [ 2362.951649][T30413] UDP 885KB 952KB [ 2362.957757][T30413] TCP 311KB 352KB [ 2362.964935][T30413] hugetlbfs_inode_cache 6KB 10KB [ 2362.971963][T30413] fscache_cookie_jar 1KB 7KB [ 2362.978126][T30413] bio-1 10KB 15KB [ 2362.985230][T30413] eventpoll_pwq 8KB 35KB [ 2362.991939][T30413] eventpoll_epi 15KB 39KB [ 2362.998892][T30413] inotify_inode_mark 4KB 7KB [ 2363.006286][T30413] request_queue 157KB 157KB [ 2363.014811][T30413] blkdev_ioc 11KB 19KB [ 2363.021882][T30413] bio-0 599KB 648KB [ 2363.028247][T30413] biovec-max 4687KB 4743KB [ 2363.035453][T30413] biovec-64 114KB 149KB [ 2363.042132][T30413] biovec-16 34KB 37KB [ 2363.048212][T30413] bio_integrity_payload 1KB 7KB [ 2363.055404][T30413] khugepaged_mm_slot 287KB 324KB [ 2363.062682][T30413] user_namespace 4KB 7KB [ 2363.068807][T30413] uid_cache 0KB 4KB [ 2363.075721][T30413] dmaengine-unmap-256 2KB 6KB [ 2363.082512][T30413] dmaengine-unmap-128 1KB 3KB [ 2363.088804][T30413] dmaengine-unmap-16 0KB 4KB [ 2363.095891][T30413] dmaengine-unmap-2 0KB 3KB [ 2363.102523][T30413] audit_buffer 0KB 3KB [ 2363.108599][T30413] skbuff_ext_cache 0KB 4KB [ 2363.115770][T30413] skbuff_fclone_cache 540KB 693KB [ 2363.123497][T30413] skbuff_head_cache 26306KB 40188KB [ 2363.130547][T30413] configfs_dir_cache 1KB 8KB [ 2363.136912][T30413] file_lock_cache 4KB 7KB [ 2363.143680][T30413] file_lock_ctx 8KB 11KB [ 2363.150450][T30413] fsnotify_mark_connector 1KB 8KB [ 2363.157062][T30413] net_namespace 2716KB 2760KB [ 2363.163888][T30413] task_delay_info 846KB 957KB [ 2363.170558][T30413] taskstats 593KB 676KB [ 2363.176965][T30413] proc_dir_entry 18742KB 19001KB [ 2363.183964][T30413] pde_opener 11KB 15KB [ 2363.190802][T30413] seq_file 37KB 63KB [ 2363.197223][T30413] shmem_inode_cache 10740KB 11348KB [ 2363.204265][T30413] kernfs_iattrs_cache 9KB 15KB [ 2363.212400][T30413] kernfs_node_cache 112985KB 112993KB [ 2363.218472][T30413] mnt_cache 347KB 363KB [ 2363.226597][T30413] filp 4341KB 4466KB [ 2363.234187][T30413] names_cache 50379KB 50379KB [ 2363.241010][T30413] iint_cache 28KB 66KB [ 2363.247104][T30413] lsm_file_cache 788KB 897KB [ 2363.253670][T30413] key_jar 28KB 43KB [ 2363.259902][T30413] uts_namespace 5KB 15KB [ 2363.266137][T30413] nsproxy 122KB 138KB [ 2363.272347][T30413] vm_area_struct 11880KB 13105KB [ 2363.278484][T30413] mm_struct 2311KB 2538KB [ 2363.284808][T30413] fs_cache 544KB 704KB [ 2363.291932][T30413] files_cache 1832KB 2178KB [ 2363.298122][T30413] signal_cache 5544KB 5882KB [ 2363.304354][T30413] sighand_cache 4451KB 4481KB [ 2363.310503][T30413] task_struct 22260KB 22318KB [ 2363.316556][T30413] cred_jar 2035KB 2108KB [ 2363.323304][T30413] anon_vma_chain 3692KB 4413KB [ 2363.329543][T30413] anon_vma 2928KB 3116KB [ 2363.335716][T30413] pid 416KB 461KB [ 2363.343114][T30413] Acpi-Operand 156KB 194KB [ 2363.350176][T30413] Acpi-ParseExt 9KB 11KB [ 2363.356269][T30413] Acpi-Parse 41KB 47KB [ 2363.362525][T30413] Acpi-State 52KB 63KB [ 2363.369894][T30413] Acpi-Namespace 23KB 27KB [ 2363.376649][T30413] shared_policy_node 0KB 3KB [ 2363.386650][T30413] numa_policy 2KB 23KB [ 2363.393192][T30413] trace_event_file 358KB 358KB [ 2363.399311][T30413] ftrace_event_field 491KB 496KB [ 2363.405755][T30413] pool_workqueue 609KB 712KB [ 2363.411887][T30413] vmap_area 1161KB 2287KB [ 2363.417963][T30413] debug_objects_cache 7942KB 8297KB [ 2363.424307][T30413] page->ptl 3271KB 3906KB [ 2363.430460][T30413] kmalloc-4M 4096KB 4096KB [ 2363.436618][T30413] kmalloc-1M 8192KB 8192KB [ 2363.443256][T30413] kmalloc-512k 4096KB 4096KB [ 2363.450570][T30413] kmalloc-256k 192000KB 192512KB [ 2363.456648][T30413] kmalloc-128k 18944KB 19200KB [ 2363.463217][T30413] kmalloc-64k 6656KB 7296KB [ 2363.469501][T30413] kmalloc-32k 50048KB 50048KB [ 2363.477994][T30413] kmalloc-16k 18880KB 19328KB [ 2363.484673][T30413] kmalloc-8k 44080KB 44096KB [ 2363.491003][T30413] kmalloc-4k 276768KB 276800KB [ 2363.497140][T30413] kmalloc-2k 159752KB 159804KB [ 2363.503367][T30413] kmalloc-1k 207036KB 240156KB [ 2363.509516][T30413] kmalloc-512 46170KB 48536KB [ 2363.519311][T30413] kmalloc-256 32493KB 32872KB [ 2363.525481][T30413] kmalloc-128 5223KB 6016KB [ 2363.531638][T30413] kmalloc-96 4422KB 4656KB [ 2363.537698][T30413] kmalloc-64 10418KB 10928KB [ 2363.543868][T30413] kmalloc-32 6620KB 7197KB [ 2363.550116][T30413] kmalloc-192 8462KB 9032KB [ 2363.556170][T30413] kmem_cache 441KB 452KB [ 2363.563962][T30413] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4441,uid=0 [ 2363.565986][T30417] IPVS: ftp: loaded support on port[0] = 21 [ 2363.579955][T30413] Out of memory: Killed process 4441 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2363.604095][ T1144] oom_reaper: reaped process 4441 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 18:52:57 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) write$tun(r2, &(0x7f0000000180)={@void, @val={0x2, 0x0, 0x800, 0x3f6, 0x4, 0xf800}, @ipv6=@icmpv6={0xf, 0x6, "71508f", 0x3ca, 0x3a, 0x0, @remote, @private2, {[@hopopts={0x33, 0xc, [], [@generic={0x81, 0x24, "ec41cc6e9f248df9c8e995170052abd9b7222a6cec5e65a683a286cb6bc2e69e85459c67"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7f, 0x4, [0x1, 0x5, 0x2, 0x8, 0x6, 0x2]}}]}, @dstopts={0xff, 0x31, [], [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x3f}, @pad1, @generic={0x7, 0xb0, "ca8bb01f1d7bf6f27fb8c9d2416811709b1aa8b17c49fe1bdb1c93f0a3302dfc1c46d2df3b3bf360cc4802e0211f143e8ad5a8022a7eb707190154d6401f29c8652e6d1f838f57fc1a4a5527e1531b4c5a2e25db82af6afb2e0627c71731d422b389e863f32c3276b7e9e35e79bafe3ddae2035f273dc1f9f2b6b89682d61ccfdfc6d5e261a1ee5fb42253eb3bf94dc09af146aba8297c69fdd78c7e41646465161f3838d4f1cef438f2c8a92fe25f93"}, @generic={0xf0, 0x5, "70469b56d9"}, @pad1, @generic={0x7f, 0xc0, "da6804208d8831aa50fdd69b122b10825ed52c596b4b8577d4c96ea38ed4bf150d0c323cf5cbd872ee5a5e73c28164985517c02178a21f644b93d5edbf71424c44b3c2f0aa3bb48a157f1e6f2eac4e658101246c64a9c915e397ca30e9ee198ba6c3922873175523530fa5a4e02a80757ac9e092899c00aae3d947643bc788e5e22a164136431e2aac02352597928be03314bbd86bc80ef9f1303be559018f53c2a95bffa91ba5257f06d77b29a8c3ec4dd416231f604ff091d5fe1b40e9155e"}]}, @fragment={0x3a, 0x0, 0x1, 0x0, 0x0, 0xd, 0x64}, @dstopts={0x1d, 0x8, [], [@enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x10, {0x1, 0x2, 0x76, 0x1000, [0x7ff]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @dest_unreach={0x1, 0x2, 0x0, 0x80, [], {0x1, 0x6, "831c90", 0x2836, 0x2, 0x1, @mcast1, @local, [@routing={0x2c, 0x6, 0x31262067528c887f, 0x18, 0x0, [@private1={0xfc, 0x1, [], 0x1}, @local, @empty]}, @hopopts={0x2c, 0x15, [], [@ra={0x5, 0x2, 0x2e}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @generic={0x7, 0x85, "c9260185b99dd0cb3c10ebb640ecc18dcc3f294c0e723af200cecf49ca7e2b17164b54b3757dcd4806e3b7ab6e7a3901341d234466da89fbc6627805bb41cadbf5f0c5cc6ef42a62a936f8f3bb53b6225aea6a3501fd5e34bdac93e56e412cbe3463e3fb82c3b86dfb57644ecf930ac1805f109c87e83451153c4a58f2f48755b21eff999e"}, @hao={0xc9, 0x10, @ipv4={[], [], @broadcast}}, @ra={0x5, 0x2, 0x101}]}, @fragment={0x3a, 0x0, 0x6, 0x1, 0x0, 0x6, 0x68}], "b6a74c95a7a0ab0d5bc77cc1018abfa354c87aaa9287c8c26ad8e413f9bfd5373143a1e54276c8e4b141cb4ed3412e638a28b3c6d46ebac5e7136b1ff76dd873b988f3d224327e0fb38c32123e4f5431ef04"}}}}}, 0x3fc) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 18:52:57 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r3, @in={{0x2, 0x0, @rand_addr=0x40}}}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={r3, 0x99, "145c78c5d75e355c0f1a49693d85c1741e3cd680072687deec03e38767c91a02686ac9533a841c431da53a84d3be17672f9395c32088e0e15547a48c9f86b91a7e3488e7f46371fcadc0d59907b66f62fc6b632386ec788d4ded49bca0e10113ae907ec18c1951e0967c15fe328a01eb8349d970be248f84c3dc16ca4ddacac46a6712745b9cab385f188c1b06f0cb7443bf09a180a49d87cb"}, &(0x7f0000000100)=0xa1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000240)={r7, @in={{0x2, 0x0, @rand_addr=0x40}}}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000001c0)={r7, 0x99, "145c78c5d75e355c0f1a49693d85c1741e3cd680072687deec03e38767c91a02686ac9533a841c431da53a84d3be17672f9395c32088e0e15547a48c9f86b91a7e3488e7f46371fcadc0d59907b66f62fc6b632386ec788d4ded49bca0e10113ae907ec18c1951e0967c15fe328a01eb8349d970be248f84c3dc16ca4ddacac46a6712745b9cab385f188c1b06f0cb7443bf09a180a49d87cb"}, &(0x7f0000000100)=0xa1) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={r3, 0xfffffff8, 0x80000000, 0x4f, 0x9, 0x1, 0x0, 0x3, {r7, @in={{0x2, 0x4e24, @local}}, 0x80000000, 0x0, 0x7fffffff, 0x635, 0x98a}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={r8, 0x7, 0x4, [0xfff, 0xff, 0x0, 0x4]}, 0x10) 18:52:57 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) 18:52:57 executing program 4: set_mempolicy(0x1, &(0x7f0000000000)=0x10000101, 0x1000) unshare(0x40000000) 18:52:57 executing program 1: prctl$PR_GET_FP_MODE(0x2e) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40040000) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) open(&(0x7f00000001c0)='./file0\x00', 0x440c82, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc044565d, &(0x7f0000000200)={0x0, 0x8, 0x4, 0x10000, 0x0, {0x0, 0x2710}, {0x4, 0xc, 0x7, 0x6, 0x2, 0xf9, "4ea6ebbf"}, 0x3, 0x3, @offset=0x80000000, 0x3, 0x0, r1}) r2 = openat$cachefiles(0xffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x2040, 0x0) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0x75) 18:52:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xffffffc3}, 0x0) [ 2363.817659][T30461] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2363.832383][T30466] IPVS: ftp: loaded support on port[0] = 21 [ 2363.841898][T30467] IPVS: ftp: loaded support on port[0] = 21 [ 2363.843610][T30463] IPVS: ftp: loaded support on port[0] = 21 [ 2363.883891][T30469] IPVS: ftp: loaded support on port[0] = 21 [ 2363.893315][T30471] bridge390: port 1(bond0) entered blocking state [ 2363.921693][T30467] syz-executor.1 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2363.925911][T30471] bridge390: port 1(bond0) entered disabled state [ 2363.962474][T30471] device bond0 entered promiscuous mode [ 2363.968617][T30471] device bond_slave_0 entered promiscuous mode [ 2363.977751][T30467] CPU: 1 PID: 30467 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 2363.981935][T30471] device bond_slave_1 entered promiscuous mode [ 2363.986543][T30467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2363.986548][T30467] Call Trace: [ 2363.986572][T30467] dump_stack+0x188/0x20d [ 2363.986589][T30467] dump_header+0x10b/0x826 [ 2363.986609][T30467] oom_kill_process.cold+0x10/0x15 [ 2364.020032][T30467] out_of_memory+0x31f/0x12f0 [ 2364.024755][T30467] ? oom_killer_disable+0x270/0x270 [ 2364.030311][T30467] ? mutex_trylock+0x246/0x2c0 [ 2364.035177][T30467] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2364.041881][T30467] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2364.048494][T30467] ? warn_alloc+0x110/0x110 [ 2364.053018][T30467] ? do_fast_syscall_32+0x270/0xe90 [ 2364.058238][T30467] __alloc_pages_nodemask+0x5d9/0x810 [ 2364.063624][T30467] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2364.070529][T30467] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2364.076439][T30467] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2364.082554][T30467] ? do_raw_spin_unlock+0x171/0x260 [ 2364.087774][T30467] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2364.094182][T30467] alloc_pages_current+0xff/0x200 [ 2364.099225][T30467] __vmalloc_node_range+0x478/0x7a0 [ 2364.104428][T30467] ? ebt_register_table+0x1e6/0xc70 [ 2364.110318][T30467] vmalloc+0x67/0x80 [ 2364.114212][T30467] ? ebt_register_table+0x1e6/0xc70 [ 2364.119567][T30467] ebt_register_table+0x1e6/0xc70 [ 2364.124599][T30467] ? ebt_broute+0x700/0x700 [ 2364.129192][T30467] ops_init+0xaf/0x420 [ 2364.133252][T30467] setup_net+0x2de/0x860 [ 2364.137589][T30467] ? ops_init+0x420/0x420 [ 2364.142086][T30467] copy_net_ns+0x293/0x590 [ 2364.146663][T30467] create_new_namespaces+0x3fb/0xb30 [ 2364.152149][T30467] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2364.158525][T30467] ksys_unshare+0x43d/0x8e0 [ 2364.163243][T30467] ? walk_process_tree+0x2c0/0x2c0 [ 2364.168573][T30467] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2364.177116][T30467] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2364.184032][T30467] ? trace_hardirqs_off_caller+0x55/0x230 [ 2364.190729][T30467] __ia32_sys_unshare+0x2c/0x40 [ 2364.196087][T30467] do_fast_syscall_32+0x270/0xe90 [ 2364.201199][T30467] entry_SYSENTER_compat+0x70/0x7f [ 2364.211699][T30467] Mem-Info: [ 2364.215155][T30467] active_anon:307480 inactive_anon:10394 isolated_anon:0 [ 2364.215155][T30467] active_file:2787 inactive_file:6456 isolated_file:0 [ 2364.215155][T30467] unevictable:14 dirty:38 writeback:0 unstable:0 [ 2364.215155][T30467] slab_reclaimable:19997 slab_unreclaimable:393731 [ 2364.215155][T30467] mapped:61811 shmem:10684 pagetables:30026 bounce:0 [ 2364.215155][T30467] free:715209 free_pcp:443 free_cma:0 [ 2364.230359][T30471] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:52:58 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80200, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) unshare(0x40000000) 18:52:58 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x6}, 0x0) [ 2364.254193][T30467] Node 0 active_anon:1068132kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217072kB dirty:12kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 937984kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2364.295067][T30467] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2364.346163][T30467] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2364.362167][T30467] Node 0 DMA32 free:116488kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1068004kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB writepending:12kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:21356kB pagetables:33424kB bounce:0kB free_pcp:1768kB local_pcp:592kB free_cma:0kB [ 2364.415057][T30502] IPVS: ftp: loaded support on port[0] = 21 [ 2364.427909][T30467] lowmem_reserve[]: 0 0 0 0 0 18:52:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xfffffff0}, 0x0) 18:52:58 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0xa}, 0x0) [ 2364.437923][T30467] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2364.481757][T30467] lowmem_reserve[]: 0 0 0 0 0 [ 2364.499397][T30506] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2364.505446][T30467] Node 0 DMA: 9*4kB (UM) 13*8kB (UM) 4*16kB (UME) 5*32kB (UME) 3*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10284kB [ 2364.541431][T30506] device bond0 left promiscuous mode [ 2364.547561][T30506] device bond_slave_0 left promiscuous mode 18:52:58 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0xc}, 0x0) [ 2364.564024][T30467] Node 0 DMA32: 1934*4kB (UME) 1041*8kB (UM) 555*16kB (UME) 375*32kB (UME) 218*64kB (UME) 117*128kB (UME) 66*256kB (UME) 22*512kB (UM) 0*1024kB 7*2048kB (M) 2*4096kB (M) = 116560kB [ 2364.566788][T30506] device bond_slave_1 left promiscuous mode [ 2364.598046][T30467] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2364.601609][T30506] bridge390: port 1(bond0) entered disabled state [ 2364.626003][T30467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2364.632877][T30470] IPVS: ftp: loaded support on port[0] = 21 [ 2364.636645][T30467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2364.678822][T30511] IPVS: ftp: loaded support on port[0] = 21 [ 2364.707623][T30467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2364.718753][T30506] bridge391: port 1(bond0) entered blocking state [ 2364.740478][T30506] bridge391: port 1(bond0) entered disabled state [ 2364.776463][T30506] device bond0 entered promiscuous mode [ 2364.785512][T30467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2364.794036][T30506] device bond_slave_0 entered promiscuous mode [ 2364.807453][T30467] 19935 total pagecache pages [ 2364.813120][T30467] 0 pages in swap cache [ 2364.817600][T30467] Swap cache stats: add 0, delete 0, find 0/0 [ 2364.817970][T30506] device bond_slave_1 entered promiscuous mode [ 2364.832678][T30467] Free swap = 0kB [ 2364.836883][T30467] Total swap = 0kB [ 2364.846247][T30467] 1965979 pages RAM [ 2364.864374][T30519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2364.874905][T30467] 0 pages HighMem/MovableOnly [ 2364.888681][T30467] 349380 pages reserved 18:52:58 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0xe}, 0x0) [ 2364.907454][T30467] 0 pages cma reserved [ 2364.942900][T30467] Unreclaimable slab info: [ 2364.947467][T30467] Name Used Total [ 2364.964862][T30467] pid_3 1KB 7KB [ 2364.976061][T30467] pid_2 914KB 1113KB [ 2364.999749][T30467] bio-3 0KB 7KB [ 2365.006330][T30467] AF_VSOCK 14KB 16KB [ 2365.026130][T30467] batadv_tl_cache 4KB 12KB [ 2365.037240][T30467] SMC 45KB 49KB [ 2365.066058][T30467] TIPC 399KB 611KB [ 2365.083290][T30467] rds_tcp_connection 10KB 11KB [ 2365.103185][T30467] RDS 22KB 22KB [ 2365.133128][T30467] rds_connection 0KB 3KB [ 2365.139368][T30467] SCTPv6 1015KB 1083KB [ 2365.145457][T30467] SCTP 206KB 232KB [ 2365.173459][T30467] sctp_chunk 15KB 15KB [ 2365.188889][T30467] sctp_bind_bucket 2KB 3KB [ 2365.195265][T30467] DCCPv6 1210KB 1307KB [ 2365.209094][T30467] DCCP 1123KB 1206KB [ 2365.220033][T30467] L2TP/IPv6 6KB 6KB [ 2365.226214][T30467] L2TP/IP 23KB 23KB [ 2365.248908][T30467] KCM 17KB 19KB [ 2365.255098][T30467] kcm_mux_cache 7KB 7KB [ 2365.277692][T30467] RXRPC 801KB 857KB [ 2365.301069][T30467] rxrpc_call_jar 4821KB 4845KB [ 2365.307188][T30467] bridge_fdb_cache 74KB 74KB [ 2365.328867][T30467] MPTCPv6 35KB 38KB [ 2365.335183][T30467] fib6_nodes 175KB 184KB [ 2365.347241][T30467] ip6_dst_cache 290KB 423KB [ 2365.362113][T30467] PINGv6 1KB 3KB [ 2365.376509][T30467] RAWv6 4170KB 4172KB [ 2365.398868][T30467] UDPLITEv6 19KB 19KB [ 2365.404978][T30467] UDPv6 980KB 1046KB [ 2365.422487][T30467] TCPv6 851KB 1059KB [ 2365.428608][T30467] nf_conntrack 10KB 37KB [ 2365.448924][T30467] sd_ext_cdb 0KB 7KB [ 2365.455025][T30467] scsi_sense_cache 1056KB 1064KB [ 2365.478855][T30467] virtio_scsi_cmd 16KB 16KB [ 2365.484993][T30467] sgpool-128 8KB 8KB [ 2365.498841][T30467] sgpool-64 4KB 12KB [ 2365.504951][T30467] sgpool-32 4KB 15KB [ 2365.532032][T30467] sgpool-16 26KB 30KB [ 2365.538137][T30467] sgpool-8 40KB 48KB [ 2365.572330][T30467] mqueue_inode_cache 53KB 62KB [ 2365.592074][T30467] f2fs_bio_post_read_ctx 16KB 16KB [ 2365.598701][T30467] jfs_mp 7KB 7KB [ 2365.619032][T30467] cifs_small_rq 15KB 16KB [ 2365.625155][T30467] cifs_request 67KB 67KB [ 2365.652327][T30467] cifs_mpx_ids 0KB 8KB [ 2365.668944][T30467] nfs_commit_data 3KB 7KB [ 2365.675062][T30467] nfs_write_data 34KB 44KB [ 2365.688876][T30467] ext4_system_zone 1KB 7KB [ 2365.694986][T30467] ext4_io_end_vec 10KB 15KB [ 2365.718906][T30467] ext4_bio_post_read_ctx 15KB 15KB [ 2365.729437][T30467] io_kiocb 0KB 3KB [ 2365.735683][T30467] kioctx 21KB 23KB [ 2365.758873][T30467] aio_kiocb 6KB 7KB [ 2365.765061][T30467] userfaultfd_ctx_cache 2KB 4KB [ 2365.794573][T30467] bio-2 1KB 7KB [ 2365.809092][T30467] fasync_cache 1KB 3KB [ 2365.815191][T30467] pid_namespace 4KB 11KB [ 2365.838824][T30467] posix_timers_cache 7KB 11KB [ 2365.845050][T30467] kvm_vcpu 0KB 70KB [ 2365.859462][T30467] kvm_mmu_page_header 58KB 61KB [ 2365.874986][T30467] pte_list_desc 2KB 3KB [ 2365.895347][T30467] x86_emulator 51KB 54KB [ 2365.909825][T30467] x86_fpu 0KB 43KB [ 2365.916000][T30467] rpc_buffers 17KB 25KB [ 2365.938909][T30467] rpc_tasks 2KB 7KB [ 2365.945013][T30467] UNIX 602KB 620KB [ 2365.957372][T30467] UDP-Lite 71KB 73KB [ 2365.964345][T30467] MPTCP 10KB 15KB [ 2365.974619][T30467] tcp_bind_bucket 48KB 48KB [ 2365.981261][T30467] inet_peer_cache 28KB 32KB [ 2365.987515][T30467] ip_fib_trie 24KB 31KB [ 2366.003610][T30467] ip_fib_alias 112KB 134KB [ 2366.011631][T30467] ip_dst_cache 101KB 168KB [ 2366.017831][T30467] PING 12KB 15KB [ 2366.024985][T30467] RAW 2534KB 2539KB [ 2366.033093][T30467] UDP 882KB 948KB [ 2366.040242][T30467] TCP 311KB 352KB [ 2366.047386][T30467] hugetlbfs_inode_cache 6KB 10KB [ 2366.055209][T30467] fscache_cookie_jar 1KB 7KB [ 2366.062225][T30467] bio-1 10KB 15KB [ 2366.068384][T30467] eventpoll_pwq 8KB 35KB [ 2366.076151][T30467] eventpoll_epi 15KB 39KB [ 2366.095513][T30467] inotify_inode_mark 4KB 7KB [ 2366.108787][T30467] request_queue 157KB 157KB [ 2366.114893][T30467] blkdev_ioc 11KB 19KB [ 2366.131625][T30467] bio-0 583KB 584KB [ 2366.137946][T30467] biovec-max 4726KB 4726KB [ 2366.158821][T30467] biovec-64 108KB 149KB [ 2366.164925][T30467] biovec-16 34KB 37KB [ 2366.172489][T30467] bio_integrity_payload 1KB 7KB [ 2366.180423][T30467] khugepaged_mm_slot 287KB 324KB [ 2366.187041][T30467] user_namespace 4KB 7KB [ 2366.194336][T30467] uid_cache 0KB 4KB [ 2366.202682][T30467] dmaengine-unmap-256 2KB 6KB [ 2366.212959][T30467] dmaengine-unmap-128 1KB 3KB [ 2366.220516][T30467] dmaengine-unmap-16 0KB 4KB [ 2366.226787][T30467] dmaengine-unmap-2 0KB 3KB [ 2366.234014][T30467] audit_buffer 0KB 3KB [ 2366.241072][T30467] skbuff_ext_cache 0KB 4KB [ 2366.247160][T30467] skbuff_fclone_cache 523KB 678KB [ 2366.254356][T30467] skbuff_head_cache 26289KB 40188KB [ 2366.262572][T30467] configfs_dir_cache 1KB 8KB [ 2366.271912][T30467] file_lock_cache 4KB 7KB [ 2366.278285][T30467] file_lock_ctx 8KB 11KB [ 2366.286304][T30467] fsnotify_mark_connector 1KB 8KB [ 2366.296488][T30467] net_namespace 2731KB 2760KB [ 2366.304779][T30467] task_delay_info 846KB 957KB [ 2366.314558][T30467] taskstats 593KB 676KB [ 2366.321598][T30467] proc_dir_entry 19042KB 19046KB [ 2366.327672][T30467] pde_opener 11KB 15KB [ 2366.336697][T30467] seq_file 37KB 63KB [ 2366.346418][T30467] shmem_inode_cache 10740KB 11348KB [ 2366.356849][T30467] kernfs_iattrs_cache 9KB 15KB [ 2366.364848][T30467] kernfs_node_cache 113610KB 113617KB [ 2366.371556][T30467] mnt_cache 347KB 363KB [ 2366.377656][T30467] filp 4375KB 4466KB [ 2366.384680][T30467] names_cache 49708KB 49708KB [ 2366.391746][T30467] iint_cache 28KB 66KB [ 2366.397832][T30467] lsm_file_cache 801KB 897KB [ 2366.405477][T30467] key_jar 28KB 43KB [ 2366.425138][T30467] uts_namespace 5KB 15KB [ 2366.432791][T30467] nsproxy 122KB 138KB [ 2366.459471][T30467] vm_area_struct 11880KB 13105KB [ 2366.466865][T30467] mm_struct 2311KB 2538KB [ 2366.493707][T30467] fs_cache 544KB 704KB [ 2366.518096][T30467] files_cache 1832KB 2178KB [ 2366.536425][T30467] signal_cache 5622KB 5882KB [ 2366.554327][T30467] sighand_cache 4451KB 4481KB [ 2366.567529][T30467] task_struct 22724KB 22724KB [ 2366.595223][T30467] cred_jar 2080KB 2108KB [ 2366.612261][T30467] anon_vma_chain 3692KB 4413KB [ 2366.618371][T30467] anon_vma 2928KB 3116KB [ 2366.661663][T30467] pid 416KB 461KB [ 2366.667758][T30467] Acpi-Operand 156KB 194KB [ 2366.705956][T30467] Acpi-ParseExt 9KB 11KB [ 2366.720212][T30467] Acpi-Parse 41KB 47KB [ 2366.726489][T30467] Acpi-State 52KB 63KB [ 2366.736886][T30467] Acpi-Namespace 23KB 27KB [ 2366.751464][T30467] shared_policy_node 0KB 3KB [ 2366.759837][T30467] numa_policy 2KB 23KB [ 2366.766051][T30467] trace_event_file 358KB 358KB [ 2366.773398][T30467] ftrace_event_field 491KB 496KB [ 2366.782024][T30467] pool_workqueue 609KB 708KB [ 2366.788275][T30467] vmap_area 1229KB 2287KB [ 2366.795649][T30467] debug_objects_cache 7991KB 8297KB [ 2366.804529][T30467] page->ptl 3271KB 3906KB [ 2366.811752][T30467] kmalloc-4M 4096KB 4096KB [ 2366.817833][T30467] kmalloc-1M 8192KB 8192KB [ 2366.827399][T30467] kmalloc-512k 4096KB 4096KB [ 2366.835893][T30467] kmalloc-256k 194560KB 195584KB [ 2366.845161][T30467] kmalloc-128k 18944KB 19200KB [ 2366.852012][T30467] kmalloc-64k 6656KB 7296KB [ 2366.858089][T30467] kmalloc-32k 50304KB 50432KB [ 2366.866753][T30467] kmalloc-16k 18112KB 18496KB [ 2366.873524][T30467] kmalloc-8k 44576KB 44576KB [ 2366.882867][T30467] kmalloc-4k 279584KB 279616KB [ 2366.892096][T30467] kmalloc-2k 161504KB 161504KB [ 2366.898536][T30467] kmalloc-1k 207204KB 240112KB [ 2366.907438][T30467] kmalloc-512 46805KB 48808KB [ 2366.914926][T30467] kmalloc-256 32812KB 33000KB [ 2366.923111][T30467] kmalloc-128 5265KB 6016KB [ 2366.930135][T30467] kmalloc-96 4445KB 4656KB [ 2366.936224][T30467] kmalloc-64 10495KB 10948KB [ 2366.945105][T30467] kmalloc-32 6703KB 7197KB [ 2366.951843][T30467] kmalloc-192 8541KB 9032KB [ 2366.957919][T30467] kmem_cache 451KB 452KB [ 2366.964947][T30467] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4432,uid=0 [ 2366.980302][T30467] Out of memory: Killed process 4432 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2366.999209][ T1144] oom_reaper: reaped process 4432 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 18:53:02 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) write$tun(r2, &(0x7f0000000180)={@void, @val={0x2, 0x0, 0x800, 0x3f6, 0x4, 0xf800}, @ipv6=@icmpv6={0xf, 0x6, "71508f", 0x3ca, 0x3a, 0x0, @remote, @private2, {[@hopopts={0x33, 0xc, [], [@generic={0x81, 0x24, "ec41cc6e9f248df9c8e995170052abd9b7222a6cec5e65a683a286cb6bc2e69e85459c67"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7f, 0x4, [0x1, 0x5, 0x2, 0x8, 0x6, 0x2]}}]}, @dstopts={0xff, 0x31, [], [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x3f}, @pad1, @generic={0x7, 0xb0, "ca8bb01f1d7bf6f27fb8c9d2416811709b1aa8b17c49fe1bdb1c93f0a3302dfc1c46d2df3b3bf360cc4802e0211f143e8ad5a8022a7eb707190154d6401f29c8652e6d1f838f57fc1a4a5527e1531b4c5a2e25db82af6afb2e0627c71731d422b389e863f32c3276b7e9e35e79bafe3ddae2035f273dc1f9f2b6b89682d61ccfdfc6d5e261a1ee5fb42253eb3bf94dc09af146aba8297c69fdd78c7e41646465161f3838d4f1cef438f2c8a92fe25f93"}, @generic={0xf0, 0x5, "70469b56d9"}, @pad1, @generic={0x7f, 0xc0, "da6804208d8831aa50fdd69b122b10825ed52c596b4b8577d4c96ea38ed4bf150d0c323cf5cbd872ee5a5e73c28164985517c02178a21f644b93d5edbf71424c44b3c2f0aa3bb48a157f1e6f2eac4e658101246c64a9c915e397ca30e9ee198ba6c3922873175523530fa5a4e02a80757ac9e092899c00aae3d947643bc788e5e22a164136431e2aac02352597928be03314bbd86bc80ef9f1303be559018f53c2a95bffa91ba5257f06d77b29a8c3ec4dd416231f604ff091d5fe1b40e9155e"}]}, @fragment={0x3a, 0x0, 0x1, 0x0, 0x0, 0xd, 0x64}, @dstopts={0x1d, 0x8, [], [@enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x10, {0x1, 0x2, 0x76, 0x1000, [0x7ff]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @dest_unreach={0x1, 0x2, 0x0, 0x80, [], {0x1, 0x6, "831c90", 0x2836, 0x2, 0x1, @mcast1, @local, [@routing={0x2c, 0x6, 0x31262067528c887f, 0x18, 0x0, [@private1={0xfc, 0x1, [], 0x1}, @local, @empty]}, @hopopts={0x2c, 0x15, [], [@ra={0x5, 0x2, 0x2e}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @generic={0x7, 0x85, "c9260185b99dd0cb3c10ebb640ecc18dcc3f294c0e723af200cecf49ca7e2b17164b54b3757dcd4806e3b7ab6e7a3901341d234466da89fbc6627805bb41cadbf5f0c5cc6ef42a62a936f8f3bb53b6225aea6a3501fd5e34bdac93e56e412cbe3463e3fb82c3b86dfb57644ecf930ac1805f109c87e83451153c4a58f2f48755b21eff999e"}, @hao={0xc9, 0x10, @ipv4={[], [], @broadcast}}, @ra={0x5, 0x2, 0x101}]}, @fragment={0x3a, 0x0, 0x6, 0x1, 0x0, 0x6, 0x68}], "b6a74c95a7a0ab0d5bc77cc1018abfa354c87aaa9287c8c26ad8e413f9bfd5373143a1e54276c8e4b141cb4ed3412e638a28b3c6d46ebac5e7136b1ff76dd873b988f3d224327e0fb38c32123e4f5431ef04"}}}}}, 0x3fc) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 18:53:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xfffffffe}, 0x0) 18:53:02 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000000)) unshare(0x40000000) 18:53:02 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0xf}, 0x0) 18:53:02 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = socket(0x1e, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x440500) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r1, 0x0, 0x7ffff000) ioctl$NBD_DO_IT(r1, 0xab03) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r5 = dup(r4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r5}) 18:53:02 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) r1 = dup2(r0, 0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="300000000676cdf8d447df9cd5000120000000400000000000766d6e6574302d00"], 0x30) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000100)={0x3, 0x4, 0xee85, 0x7}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000080)) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) [ 2368.535359][T30571] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2368.555030][T30572] IPVS: ftp: loaded support on port[0] = 21 [ 2368.562173][T30570] syz-executor.4 invoked oom-killer: gfp_mask=0x100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2368.582300][T30570] CPU: 1 PID: 30570 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 2368.591183][T30570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2368.601236][T30570] Call Trace: [ 2368.604664][T30570] dump_stack+0x188/0x20d [ 2368.608636][T30580] device bond0 left promiscuous mode [ 2368.609094][T30570] dump_header+0x10b/0x826 [ 2368.609116][T30570] oom_kill_process.cold+0x10/0x15 [ 2368.615304][T30580] device bond_slave_0 left promiscuous mode [ 2368.619010][T30570] out_of_memory+0x31f/0x12f0 [ 2368.619033][T30570] ? oom_killer_disable+0x270/0x270 [ 2368.619048][T30570] ? mutex_trylock+0x246/0x2c0 [ 2368.619065][T30570] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2368.619081][T30570] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2368.619105][T30570] ? warn_alloc+0x110/0x110 [ 2368.632940][T30580] device bond_slave_1 left promiscuous mode [ 2368.635816][T30570] ? futex_wake+0x153/0x480 [ 2368.635836][T30570] ? perf_trace_lock_acquire+0xf5/0x530 [ 2368.635850][T30570] ? debug_smp_processor_id+0x2f/0x185 [ 2368.635873][T30570] __alloc_pages_nodemask+0x5d9/0x810 [ 2368.647736][T30580] bridge391: port 1(bond0) entered disabled state [ 2368.652791][T30570] ? perf_trace_lock+0x4c0/0x4c0 [ 2368.652812][T30570] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2368.652824][T30570] ? debug_smp_processor_id+0x2f/0x185 [ 2368.652840][T30570] ? perf_trace_lock_acquire+0xf5/0x530 [ 2368.652857][T30570] ? pmd_val+0x7c/0xf0 [ 2368.652872][T30570] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2368.652890][T30570] alloc_pages_vma+0xd9/0x600 [ 2368.674546][T30575] IPVS: ftp: loaded support on port[0] = 21 [ 2368.674712][T30570] __handle_mm_fault+0x1f8b/0x3c90 [ 2368.674731][T30570] ? vm_insert_pages+0x6a0/0x6a0 [ 2368.709244][T30578] IPVS: ftp: loaded support on port[0] = 21 [ 2368.714391][T30570] ? __this_cpu_preempt_check+0x84/0x190 [ 2368.714410][T30570] ? __count_memcg_events+0x7a/0x190 [ 2368.714429][T30570] handle_mm_fault+0x1a5/0x660 [ 2368.714447][T30570] do_page_fault+0x55b/0x13da [ 2368.714466][T30570] page_fault+0x39/0x40 [ 2368.714492][T30570] RIP: 0023:0x8087c5f [ 2368.792092][T30570] Code: 00 81 c4 b0 00 00 00 5b 5e 5f c3 e8 1b 04 00 00 66 90 66 90 66 90 66 90 66 90 90 83 ec 0c 8d 44 24 24 83 ec 08 50 ff 74 24 2c 74 24 2c ff 74 24 2c ff 74 24 2c ff 74 24 2c e8 0c 00 00 00 83 [ 2368.812357][T30570] RSP: 002b:00000000f5ddc000 EFLAGS: 00010292 [ 2368.818409][T30570] RAX: 00000000f5ddc034 RBX: 000000000819af60 RCX: 0000000054381574 [ 2368.826388][T30570] RDX: 00000000f5ddca88 RSI: 0000000008115358 RDI: 00000000f5ddc0cc [ 2368.834350][T30570] RBP: 00000000f5ddc168 R08: 0000000000000000 R09: 0000000000000000 [ 2368.842352][T30570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2368.850427][T30570] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2368.863858][T30570] Mem-Info: [ 2368.867200][T30570] active_anon:306937 inactive_anon:10394 isolated_anon:0 [ 2368.867200][T30570] active_file:2786 inactive_file:6478 isolated_file:0 [ 2368.867200][T30570] unevictable:14 dirty:13 writeback:0 unstable:0 [ 2368.867200][T30570] slab_reclaimable:20019 slab_unreclaimable:394608 [ 2368.867200][T30570] mapped:61872 shmem:10684 pagetables:29984 bounce:0 [ 2368.867200][T30570] free:714750 free_pcp:490 free_cma:0 [ 2368.908011][T30570] Node 0 active_anon:1065968kB inactive_anon:16652kB active_file:8kB inactive_file:12kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217072kB dirty:8kB writeback:20kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 935936kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2368.938852][T30570] Node 0 DMA free:10280kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2368.970923][T30570] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2368.976777][T30570] Node 0 DMA32 free:115052kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1065840kB inactive_anon:16652kB active_file:8kB inactive_file:12kB unevictable:56kB writepending:28kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:21328kB pagetables:33324kB bounce:0kB free_pcp:1960kB local_pcp:552kB free_cma:0kB [ 2369.011528][T30570] lowmem_reserve[]: 0 0 0 0 0 [ 2369.016421][T30570] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2369.019462][T30580] bridge392: port 1(bond0) entered blocking state [ 2369.046163][T30570] lowmem_reserve[]: 0 0 0 0 0 [ 2369.056670][T30570] Node 0 DMA: 10*4kB (UM) 11*8kB (UM) 5*16kB (UME) 5*32kB (UME) 3*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10288kB [ 2369.065284][T30580] bridge392: port 1(bond0) entered disabled state [ 2369.074691][T30570] Node 0 DMA32: 1933*4kB (ME) 1061*8kB (UM) 579*16kB (UME) 376*32kB (UME) 216*64kB (UME) 112*128kB (UME) 61*256kB (ME) 22*512kB (UM) 0*1024kB 9*2048kB (UM) 1*4096kB (M) = 115084kB [ 2369.095419][T30580] device bond0 entered promiscuous mode [ 2369.100108][T30570] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2369.114943][T30580] device bond_slave_0 entered promiscuous mode [ 2369.116638][T30570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2369.131831][T30570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2369.132258][T30580] device bond_slave_1 entered promiscuous mode [ 2369.143116][T30570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2369.158852][T30570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2369.170117][T30570] 19952 total pagecache pages [ 2369.176984][T30570] 0 pages in swap cache [ 2369.183556][T30570] Swap cache stats: add 0, delete 0, find 0/0 18:53:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0xffffffff}, 0x0) [ 2369.184256][T30580] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2369.198703][T30570] Free swap = 0kB [ 2369.203353][T30570] Total swap = 0kB [ 2369.207269][T30570] 1965979 pages RAM [ 2369.213061][T30570] 0 pages HighMem/MovableOnly 18:53:03 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 2369.242029][T30570] 349380 pages reserved [ 2369.251953][T30570] 0 pages cma reserved [ 2369.256610][T30570] Unreclaimable slab info: [ 2369.265113][T30570] Name Used Total [ 2369.274292][T30570] pid_3 1KB 7KB [ 2369.286306][T30570] pid_2 913KB 1113KB [ 2369.295458][T30570] bio-3 0KB 7KB [ 2369.305749][T30587] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2369.318156][T30570] AF_VSOCK 14KB 16KB [ 2369.328189][T30570] batadv_tl_cache 4KB 12KB [ 2369.376106][T30570] SMC 45KB 49KB [ 2369.385728][T30593] device bond0 left promiscuous mode [ 2369.394892][T30593] device bond_slave_0 left promiscuous mode [ 2369.412957][T30570] TIPC 367KB 578KB 18:53:03 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x60}, 0x0) [ 2369.425495][T30593] device bond_slave_1 left promiscuous mode [ 2369.436763][T30570] rds_tcp_connection 10KB 11KB [ 2369.452616][T30593] bridge392: port 1(bond0) entered disabled state [ 2369.467017][T30570] RDS 22KB 22KB [ 2369.487033][T30570] rds_connection 0KB 3KB [ 2369.496089][T30570] SCTPv6 1015KB 1083KB [ 2369.505581][T30570] SCTP 206KB 232KB [ 2369.515319][T30570] sctp_chunk 13KB 15KB [ 2369.526367][T30570] sctp_bind_bucket 1KB 3KB [ 2369.534676][T30570] DCCPv6 1225KB 1323KB [ 2369.544739][T30570] DCCP 1131KB 1213KB [ 2369.553413][T30570] L2TP/IPv6 6KB 6KB [ 2369.559463][T30593] bridge393: port 1(bond0) entered blocking state [ 2369.565179][T30570] L2TP/IP 23KB 23KB [ 2369.566297][T30593] bridge393: port 1(bond0) entered disabled state [ 2369.576516][T30570] KCM 17KB 19KB [ 2369.586954][T30593] device bond0 entered promiscuous mode [ 2369.592938][T30593] device bond_slave_0 entered promiscuous mode [ 2369.594271][T30570] kcm_mux_cache 7KB 7KB [ 2369.604304][T30593] device bond_slave_1 entered promiscuous mode [ 2369.613585][T30570] RXRPC 808KB 864KB [ 2369.623622][T30593] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:53:03 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0xf0}, 0x0) [ 2369.623967][T30570] rxrpc_call_jar 4825KB 4848KB [ 2369.655452][T30587] device bond0 left promiscuous mode [ 2369.664626][T30587] device bond_slave_0 left promiscuous mode [ 2369.677112][T30570] bridge_fdb_cache 73KB 74KB [ 2369.693542][T30587] device bond_slave_1 left promiscuous mode [ 2369.703036][T30570] MPTCPv6 35KB 38KB [ 2369.714535][T30587] bridge393: port 1(bond0) entered disabled state [ 2369.723302][T30570] fib6_nodes 175KB 184KB [ 2369.732241][T30570] ip6_dst_cache 290KB 423KB [ 2369.741578][T30570] PINGv6 1KB 3KB [ 2369.748017][T30570] RAWv6 4149KB 4172KB [ 2369.757024][T30570] UDPLITEv6 19KB 19KB [ 2369.765613][T30570] UDPv6 980KB 1046KB [ 2369.775812][T30570] TCPv6 790KB 998KB [ 2369.783927][T30570] nf_conntrack 10KB 37KB 18:53:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}}, 0x0) [ 2369.793317][T30570] sd_ext_cdb 0KB 7KB [ 2369.802189][T30570] scsi_sense_cache 1056KB 1064KB [ 2369.811884][T30570] virtio_scsi_cmd 16KB 16KB [ 2369.818077][T30570] sgpool-128 8KB 8KB [ 2369.826657][T30570] sgpool-64 4KB 12KB [ 2369.837520][T30570] sgpool-32 3KB 15KB 18:53:03 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x300}, 0x0) [ 2369.861360][T30570] sgpool-16 23KB 30KB [ 2369.867751][T30570] sgpool-8 40KB 48KB [ 2369.888180][T30570] mqueue_inode_cache 53KB 62KB [ 2369.903725][T30570] f2fs_bio_post_read_ctx 16KB 16KB [ 2369.915516][T30606] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2369.930259][T30570] jfs_mp 7KB 7KB [ 2369.945293][T30606] bridge394: port 1(bond0) entered blocking state [ 2369.952138][T30570] cifs_small_rq 15KB 16KB [ 2369.958325][T30570] cifs_request 67KB 67KB [ 2369.970121][T30606] bridge394: port 1(bond0) entered disabled state [ 2369.979534][T30606] device bond0 entered promiscuous mode [ 2369.986642][T30606] device bond_slave_0 entered promiscuous mode [ 2369.996180][T30570] cifs_mpx_ids 0KB 8KB [ 2370.005030][T30570] nfs_commit_data 3KB 7KB [ 2370.014623][T30606] device bond_slave_1 entered promiscuous mode [ 2370.024545][T30570] nfs_write_data 34KB 44KB [ 2370.035408][T30570] ext4_system_zone 1KB 7KB [ 2370.045170][T30570] ext4_io_end_vec 10KB 15KB [ 2370.053786][T30613] device bond0 left promiscuous mode [ 2370.059938][T30570] ext4_bio_post_read_ctx 15KB 15KB [ 2370.067387][T30570] io_kiocb 0KB 3KB [ 2370.072088][T30613] device bond_slave_0 left promiscuous mode [ 2370.079879][T30570] kioctx 21KB 23KB [ 2370.079890][T30570] aio_kiocb 6KB 7KB [ 2370.079899][T30570] userfaultfd_ctx_cache 2KB 4KB [ 2370.079918][T30570] bio-2 1KB 7KB [ 2370.097756][T30613] device bond_slave_1 left promiscuous mode [ 2370.112652][T30570] fasync_cache 1KB 3KB [ 2370.123031][T30570] pid_namespace 4KB 11KB [ 2370.129481][T30613] bridge394: port 1(bond0) entered disabled state [ 2370.143331][T30570] posix_timers_cache 7KB 11KB [ 2370.151311][T30570] kvm_vcpu 0KB 70KB [ 2370.157411][T30570] kvm_mmu_page_header 58KB 61KB [ 2370.172779][T30570] pte_list_desc 2KB 3KB [ 2370.179615][T30570] x86_emulator 51KB 54KB [ 2370.185694][T30570] x86_fpu 0KB 43KB [ 2370.198319][T30570] rpc_buffers 17KB 25KB [ 2370.204551][T30570] rpc_tasks 2KB 7KB [ 2370.216232][T30570] UNIX 540KB 612KB [ 2370.222757][T30570] UDP-Lite 71KB 73KB [ 2370.233275][T30570] MPTCP 10KB 15KB [ 2370.241502][T30570] tcp_bind_bucket 48KB 48KB [ 2370.247603][T30570] inet_peer_cache 28KB 32KB [ 2370.261327][T30570] ip_fib_trie 24KB 31KB [ 2370.267423][T30570] ip_fib_alias 112KB 134KB [ 2370.276687][T30570] ip_dst_cache 100KB 168KB [ 2370.284307][T30570] PING 12KB 15KB [ 2370.292772][T30570] RAW 2528KB 2539KB [ 2370.300603][T30570] UDP 878KB 945KB [ 2370.306683][T30570] TCP 311KB 352KB [ 2370.314819][T30570] hugetlbfs_inode_cache 6KB 10KB [ 2370.324870][T30570] fscache_cookie_jar 1KB 7KB [ 2370.336471][T30570] bio-1 10KB 15KB [ 2370.344270][T30570] eventpoll_pwq 7KB 35KB [ 2370.353065][T30570] eventpoll_epi 14KB 39KB [ 2370.363694][T30570] inotify_inode_mark 4KB 7KB [ 2370.371655][T30570] request_queue 157KB 157KB [ 2370.377854][T30570] blkdev_ioc 11KB 19KB [ 2370.385889][T30570] bio-0 638KB 652KB [ 2370.392659][T30570] biovec-max 5304KB 5325KB [ 2370.399721][T30570] biovec-64 108KB 149KB [ 2370.406253][T30570] biovec-16 34KB 37KB [ 2370.413458][T30570] bio_integrity_payload 1KB 7KB [ 2370.420572][T30570] khugepaged_mm_slot 287KB 324KB [ 2370.426734][T30570] user_namespace 4KB 7KB [ 2370.435557][T30570] uid_cache 0KB 4KB [ 2370.442258][T30570] dmaengine-unmap-256 2KB 6KB [ 2370.449239][T30570] dmaengine-unmap-128 1KB 3KB [ 2370.456589][T30570] dmaengine-unmap-16 0KB 4KB [ 2370.464041][T30616] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2370.474012][T30570] dmaengine-unmap-2 0KB 3KB [ 2370.485090][T30570] audit_buffer 0KB 3KB [ 2370.492168][T30570] skbuff_ext_cache 0KB 4KB [ 2370.502534][T30570] skbuff_fclone_cache 490KB 663KB [ 2370.509583][T30570] skbuff_head_cache 26399KB 40173KB [ 2370.517756][T30570] configfs_dir_cache 1KB 8KB [ 2370.525337][T30570] file_lock_cache 4KB 7KB [ 2370.534184][T30570] file_lock_ctx 8KB 11KB [ 2370.541368][T30570] fsnotify_mark_connector 1KB 8KB [ 2370.552473][T30570] net_namespace 2724KB 2760KB [ 2370.559399][T30570] task_delay_info 846KB 957KB [ 2370.565485][T30570] taskstats 593KB 676KB [ 2370.576286][T30570] proc_dir_entry 19012KB 19038KB [ 2370.586080][T30570] pde_opener 10KB 15KB [ 2370.595455][T30570] seq_file 34KB 63KB [ 2370.602311][T30570] shmem_inode_cache 10712KB 11341KB [ 2370.612694][T30570] kernfs_iattrs_cache 9KB 15KB [ 2370.620071][T30570] kernfs_node_cache 114111KB 114114KB [ 2370.626143][T30570] mnt_cache 347KB 363KB [ 2370.637094][T30570] filp 4283KB 4342KB [ 2370.643417][T30570] names_cache 48360KB 48360KB [ 2370.652474][T30570] iint_cache 28KB 66KB [ 2370.664767][T30570] lsm_file_cache 801KB 897KB [ 2370.674027][T30570] key_jar 28KB 43KB [ 2370.682282][T30570] uts_namespace 5KB 15KB [ 2370.692270][T30570] nsproxy 122KB 138KB [ 2370.700660][T30570] vm_area_struct 11880KB 13105KB [ 2370.706732][T30570] mm_struct 2311KB 2538KB [ 2370.712969][T30570] fs_cache 544KB 704KB [ 2370.721550][T30570] files_cache 1832KB 2178KB [ 2370.727633][T30570] signal_cache 5661KB 5882KB [ 2370.735157][T30570] sighand_cache 4451KB 4481KB [ 2370.744749][T30570] task_struct 22415KB 22421KB [ 2370.752017][T30570] cred_jar 2080KB 2108KB [ 2370.758101][T30570] anon_vma_chain 3692KB 4413KB [ 2370.767091][T30570] anon_vma 2928KB 3116KB [ 2370.783876][T30570] pid 416KB 461KB [ 2370.793182][T30570] Acpi-Operand 156KB 194KB [ 2370.802526][T30570] Acpi-ParseExt 9KB 11KB [ 2370.810458][T30570] Acpi-Parse 41KB 47KB [ 2370.817330][T30570] Acpi-State 52KB 63KB [ 2370.827181][T30570] Acpi-Namespace 23KB 27KB [ 2370.834071][T30570] shared_policy_node 0KB 3KB [ 2370.843210][T30570] numa_policy 2KB 23KB [ 2370.850146][T30570] trace_event_file 358KB 358KB [ 2370.856245][T30570] ftrace_event_field 491KB 496KB [ 2370.865171][T30570] pool_workqueue 609KB 708KB [ 2370.875334][T30570] vmap_area 1291KB 2287KB [ 2370.883631][T30570] debug_objects_cache 8014KB 8297KB [ 2370.894894][T30570] page->ptl 3271KB 3906KB [ 2370.902961][T30570] kmalloc-4M 4096KB 4096KB [ 2370.913192][T30570] kmalloc-1M 8192KB 8192KB [ 2370.920076][T30570] kmalloc-512k 4096KB 4096KB [ 2370.926163][T30570] kmalloc-256k 194560KB 195072KB [ 2370.936079][T30570] kmalloc-128k 18944KB 19200KB [ 2370.943248][T30570] kmalloc-64k 6656KB 7296KB [ 2370.954623][T30570] kmalloc-32k 50432KB 50496KB [ 2370.961286][T30570] kmalloc-16k 16512KB 16896KB [ 2370.967698][T30570] kmalloc-8k 44560KB 44608KB [ 2370.976870][T30570] kmalloc-4k 281616KB 281616KB [ 2370.984110][T30570] kmalloc-2k 161568KB 161580KB [ 2370.993021][T30570] kmalloc-1k 207420KB 240008KB [ 2370.999837][T30570] kmalloc-512 46967KB 48912KB [ 2371.006338][T30570] kmalloc-256 32855KB 33000KB [ 2371.015304][T30570] kmalloc-128 5259KB 6016KB [ 2371.022322][T30570] kmalloc-96 4452KB 4656KB [ 2371.032137][T30570] kmalloc-64 10489KB 10968KB [ 2371.039275][T30570] kmalloc-32 6695KB 7197KB [ 2371.045382][T30570] kmalloc-192 8551KB 9032KB [ 2371.054160][T30570] kmem_cache 451KB 452KB [ 2371.061397][T30570] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4419,uid=0 [ 2371.064465][T30579] IPVS: ftp: loaded support on port[0] = 21 [ 2371.079509][T30570] Out of memory: Killed process 4419 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2371.130212][T30570] syz-executor.4 invoked oom-killer: gfp_mask=0x100cc0(GFP_USER), order=0, oom_score_adj=1000 [ 2371.141308][T30570] CPU: 1 PID: 30570 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 2371.150010][T30570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2371.160163][T30570] Call Trace: [ 2371.163467][T30570] dump_stack+0x188/0x20d [ 2371.168350][T30570] dump_header+0x10b/0x826 [ 2371.172798][T30570] oom_kill_process.cold+0x10/0x15 [ 2371.178125][T30570] out_of_memory+0x31f/0x12f0 [ 2371.184639][T30570] ? oom_killer_disable+0x270/0x270 [ 2371.190387][T30570] ? mutex_trylock+0x246/0x2c0 [ 2371.195267][T30570] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2371.202210][T30570] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2371.209019][T30570] ? warn_alloc+0x110/0x110 [ 2371.213633][T30570] ? iov_iter_get_pages_alloc+0x841/0x1420 [ 2371.219466][T30570] ? lock_acquire+0x1f2/0x8f0 [ 2371.224188][T30570] ? kernel_init_free_pages+0x120/0x120 [ 2371.230005][T30570] __alloc_pages_nodemask+0x5d9/0x810 [ 2371.235473][T30570] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2371.242331][T30570] ? fault_create_debugfs_attr+0x140/0x140 [ 2371.248178][T30570] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2371.254098][T30570] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2371.260659][T30570] alloc_pages_current+0xff/0x200 [ 2371.265791][T30570] ? mark_held_locks+0xe0/0xe0 [ 2371.270654][T30570] push_pipe+0x2af/0x690 [ 2371.275099][T30570] iov_iter_get_pages_alloc+0x8cc/0x1420 [ 2371.280824][T30570] ? iov_iter_for_each_range+0x750/0x750 [ 2371.286855][T30570] ? lock_downgrade+0x840/0x840 [ 2371.291723][T30570] default_file_splice_read+0x1d5/0xa20 [ 2371.297927][T30570] ? entry_SYSENTER_compat+0x70/0x7f [ 2371.303404][T30570] ? iter_file_splice_write+0xb00/0xb00 [ 2371.309048][T30570] ? aa_path_link+0x300/0x300 [ 2371.313730][T30570] ? perf_trace_lock+0x4c0/0x4c0 [ 2371.318857][T30570] ? lock_downgrade+0x840/0x840 [ 2371.323711][T30570] ? lock_acquire+0x1f2/0x8f0 [ 2371.328412][T30570] ? kernel_init_free_pages+0x120/0x120 [ 2371.333960][T30570] ? fsnotify+0x7df/0xb50 [ 2371.338456][T30570] ? fsnotify_parent+0xbf/0x2d0 [ 2371.343306][T30570] ? fsnotify_first_mark+0x200/0x200 [ 2371.348605][T30570] ? __next_zones_zonelist+0x9e/0x160 [ 2371.353977][T30570] ? kasan_unpoison_shadow+0x30/0x40 [ 2371.359342][T30570] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2371.365156][T30570] ? security_file_permission+0x8c/0x470 [ 2371.370786][T30570] ? iter_file_splice_write+0xb00/0xb00 [ 2371.376497][T30570] do_splice_to+0x114/0x160 [ 2371.381123][T30570] splice_direct_to_actor+0x307/0x980 [ 2371.386496][T30570] ? generic_pipe_buf_nosteal+0x10/0x10 [ 2371.392237][T30570] ? do_splice_to+0x160/0x160 [ 2371.396924][T30570] do_splice_direct+0x1b4/0x280 [ 2371.401789][T30570] ? splice_direct_to_actor+0x980/0x980 [ 2371.407451][T30570] do_sendfile+0x555/0xc50 [ 2371.412085][T30570] ? do_compat_pwritev64+0x1b0/0x1b0 [ 2371.417686][T30570] ? put_old_timespec32+0x100/0x1f0 [ 2371.423258][T30570] ? get_old_timespec32+0x1f0/0x1f0 [ 2371.428480][T30570] ? __ia32_sys_futex_time32+0x320/0x494 [ 2371.434192][T30570] ? __ia32_sys_futex_time32+0x32a/0x494 [ 2371.440120][T30570] __ia32_compat_sys_sendfile+0x1e0/0x220 [ 2371.445928][T30570] ? __ia32_sys_sendfile64+0x210/0x210 [ 2371.451486][T30570] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2371.457581][T30570] ? trace_hardirqs_off_caller+0x55/0x230 [ 2371.463296][T30570] do_fast_syscall_32+0x270/0xe90 [ 2371.468334][T30570] entry_SYSENTER_compat+0x70/0x7f [ 2371.488551][T30570] Mem-Info: [ 2371.491922][T30570] active_anon:306352 inactive_anon:10394 isolated_anon:0 [ 2371.491922][T30570] active_file:2783 inactive_file:6501 isolated_file:0 [ 2371.491922][T30570] unevictable:14 dirty:5 writeback:25 unstable:0 [ 2371.491922][T30570] slab_reclaimable:20025 slab_unreclaimable:394962 [ 2371.491922][T30570] mapped:61883 shmem:10684 pagetables:29867 bounce:0 [ 2371.491922][T30570] free:714619 free_pcp:496 free_cma:0 [ 2371.495197][T30623] IPVS: ftp: loaded support on port[0] = 21 [ 2371.542279][T30570] Node 0 active_anon:1063812kB inactive_anon:16652kB active_file:0kB inactive_file:24kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217072kB dirty:8kB writeback:36kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 935936kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2371.573920][T30570] Node 0 DMA free:10288kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2371.605995][T30570] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2371.612637][T30570] Node 0 DMA32 free:116572kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1063684kB inactive_anon:16652kB active_file:0kB inactive_file:24kB unevictable:56kB writepending:44kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:21300kB pagetables:33176kB bounce:0kB free_pcp:2144kB local_pcp:804kB free_cma:0kB [ 2371.646090][T30570] lowmem_reserve[]: 0 0 0 0 0 [ 2371.650890][T30570] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2371.679863][T30570] lowmem_reserve[]: 0 0 0 0 0 [ 2371.685146][T30570] Node 0 DMA: 10*4kB (UM) 11*8kB (UM) 5*16kB (UME) 5*32kB (UME) 3*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10288kB [ 2371.702387][T30570] Node 0 DMA32: 1933*4kB (ME) 1056*8kB (UM) 573*16kB (UME) 379*32kB (UME) 215*64kB (ME) 111*128kB (UME) 62*256kB (UME) 21*512kB (M) 0*1024kB 10*2048kB (UM) 1*4096kB (M) = 116644kB [ 2371.720807][T30570] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2371.734060][T30570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2371.744647][T30570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2371.754814][T30570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2371.764827][T30570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2371.774694][T30570] 19977 total pagecache pages [ 2371.779477][T30570] 0 pages in swap cache [ 2371.783919][T30570] Swap cache stats: add 0, delete 0, find 0/0 [ 2371.791027][T30570] Free swap = 0kB [ 2371.794818][T30570] Total swap = 0kB [ 2371.799732][T30570] 1965979 pages RAM [ 2371.803858][T30570] 0 pages HighMem/MovableOnly [ 2371.809795][T30570] 349380 pages reserved [ 2371.814228][T30570] 0 pages cma reserved [ 2371.819356][T30570] Unreclaimable slab info: [ 2371.823869][T30570] Name Used Total [ 2371.832613][T30570] pid_3 1KB 7KB [ 2371.839643][T30570] pid_2 913KB 1113KB [ 2371.846029][T30570] bio-3 0KB 7KB [ 2371.853143][T30570] AF_VSOCK 14KB 16KB [ 2371.861918][T30570] batadv_tl_cache 4KB 12KB [ 2371.875209][T30570] SMC 45KB 49KB [ 2371.889457][T30570] TIPC 367KB 578KB [ 2371.903326][T30570] rds_tcp_connection 10KB 11KB [ 2371.917353][T30570] RDS 22KB 22KB [ 2371.930800][T30570] rds_connection 0KB 3KB [ 2371.945115][T30570] SCTPv6 1024KB 1090KB [ 2371.959508][T30570] SCTP 206KB 232KB [ 2371.972329][T30570] sctp_chunk 13KB 15KB [ 2371.986263][T30570] sctp_bind_bucket 1KB 3KB [ 2372.002878][T30570] DCCPv6 1225KB 1323KB [ 2372.017203][T30570] DCCP 1138KB 1221KB [ 2372.039485][T30570] L2TP/IPv6 6KB 6KB [ 2372.056869][T30570] L2TP/IP 23KB 23KB [ 2372.073733][T30570] KCM 17KB 19KB [ 2372.087749][T30570] kcm_mux_cache 7KB 7KB [ 2372.101848][T30570] RXRPC 808KB 864KB [ 2372.114572][T30570] rxrpc_call_jar 4875KB 4886KB [ 2372.128894][T30570] bridge_fdb_cache 73KB 74KB [ 2372.142197][T30570] MPTCPv6 35KB 38KB [ 2372.156147][T30570] fib6_nodes 175KB 184KB [ 2372.169060][T30570] ip6_dst_cache 290KB 423KB [ 2372.183465][T30570] PINGv6 1KB 3KB [ 2372.197372][T30570] RAWv6 4170KB 4172KB [ 2372.212536][T30570] UDPLITEv6 19KB 19KB [ 2372.227072][T30570] UDPv6 982KB 1046KB [ 2372.241227][T30570] TCPv6 790KB 998KB [ 2372.254575][T30570] nf_conntrack 10KB 37KB [ 2372.268670][T30570] sd_ext_cdb 0KB 7KB [ 2372.281525][T30570] scsi_sense_cache 1056KB 1064KB [ 2372.295542][T30570] virtio_scsi_cmd 16KB 16KB [ 2372.310029][T30570] sgpool-128 8KB 8KB [ 2372.323479][T30570] sgpool-64 4KB 12KB [ 2372.337430][T30570] sgpool-32 3KB 15KB [ 2372.350754][T30570] sgpool-16 23KB 30KB [ 2372.364446][T30570] sgpool-8 40KB 48KB [ 2372.377303][T30570] mqueue_inode_cache 53KB 62KB [ 2372.390771][T30570] f2fs_bio_post_read_ctx 16KB 16KB [ 2372.405453][T30570] jfs_mp 7KB 7KB [ 2372.419554][T30570] cifs_small_rq 15KB 16KB [ 2372.432456][T30570] cifs_request 67KB 67KB [ 2372.446427][T30570] cifs_mpx_ids 0KB 8KB [ 2372.462959][T30570] nfs_commit_data 3KB 7KB [ 2372.480909][T30570] nfs_write_data 34KB 44KB [ 2372.498049][T30570] ext4_system_zone 1KB 7KB [ 2372.516927][T30570] ext4_io_end_vec 12KB 15KB [ 2372.534852][T30570] ext4_bio_post_read_ctx 15KB 15KB [ 2372.553730][T30570] io_kiocb 0KB 3KB [ 2372.571772][T30570] kioctx 21KB 23KB [ 2372.589464][T30570] aio_kiocb 6KB 7KB [ 2372.602423][T30570] userfaultfd_ctx_cache 2KB 4KB [ 2372.616925][T30570] bio-2 1KB 7KB [ 2372.630826][T30570] fasync_cache 1KB 3KB [ 2372.644693][T30570] pid_namespace 4KB 11KB [ 2372.657649][T30570] posix_timers_cache 7KB 11KB [ 2372.671946][T30570] kvm_vcpu 0KB 70KB [ 2372.685874][T30570] kvm_mmu_page_header 58KB 61KB [ 2372.698789][T30570] pte_list_desc 2KB 3KB [ 2372.713434][T30570] x86_emulator 51KB 54KB [ 2372.727420][T30570] x86_fpu 0KB 43KB [ 2372.740678][T30570] rpc_buffers 17KB 25KB [ 2372.753442][T30570] rpc_tasks 2KB 7KB [ 2372.766218][T30570] UNIX 540KB 612KB [ 2372.780148][T30570] UDP-Lite 71KB 73KB [ 2372.793088][T30570] MPTCP 10KB 15KB [ 2372.808187][T30570] tcp_bind_bucket 48KB 48KB [ 2372.814543][T30570] inet_peer_cache 28KB 32KB [ 2372.822032][T30570] ip_fib_trie 24KB 31KB [ 2372.828733][T30570] ip_fib_alias 112KB 134KB [ 2372.835080][T30570] ip_dst_cache 100KB 168KB [ 2372.842659][T30570] PING 12KB 15KB [ 2372.849360][T30570] RAW 2534KB 2539KB [ 2372.855436][T30570] UDP 880KB 945KB [ 2372.862500][T30570] TCP 311KB 352KB [ 2372.868705][T30570] hugetlbfs_inode_cache 6KB 10KB [ 2372.875249][T30570] fscache_cookie_jar 1KB 7KB [ 2372.881504][T30570] bio-1 10KB 15KB [ 2372.887562][T30570] eventpoll_pwq 7KB 35KB [ 2372.893758][T30570] eventpoll_epi 14KB 39KB [ 2372.899986][T30570] inotify_inode_mark 4KB 7KB [ 2372.906167][T30570] request_queue 157KB 157KB [ 2372.913011][T30570] blkdev_ioc 11KB 19KB [ 2372.919855][T30570] bio-0 701KB 704KB [ 2372.925930][T30570] biovec-max 5852KB 5852KB [ 2372.933891][T30570] biovec-64 108KB 149KB [ 2372.940715][T30570] biovec-16 34KB 37KB [ 2372.946791][T30570] bio_integrity_payload 1KB 7KB [ 2372.954551][T30570] khugepaged_mm_slot 287KB 324KB [ 2372.961345][T30570] user_namespace 4KB 7KB [ 2372.967449][T30570] uid_cache 0KB 4KB [ 2372.974575][T30570] dmaengine-unmap-256 2KB 6KB [ 2372.986854][T30570] dmaengine-unmap-128 1KB 3KB [ 2372.993724][T30570] dmaengine-unmap-16 0KB 4KB [ 2373.000472][T30570] dmaengine-unmap-2 0KB 3KB [ 2373.006646][T30570] audit_buffer 0KB 3KB [ 2373.013655][T30570] skbuff_ext_cache 0KB 4KB [ 2373.020355][T30570] skbuff_fclone_cache 490KB 663KB [ 2373.026601][T30570] skbuff_head_cache 26424KB 40173KB [ 2373.033567][T30570] configfs_dir_cache 1KB 8KB [ 2373.040551][T30570] file_lock_cache 4KB 7KB [ 2373.046609][T30570] file_lock_ctx 8KB 11KB [ 2373.053389][T30570] fsnotify_mark_connector 1KB 8KB [ 2373.061345][T30570] net_namespace 2731KB 2760KB [ 2373.067416][T30570] task_delay_info 846KB 957KB [ 2373.075576][T30570] taskstats 593KB 676KB [ 2373.082246][T30570] proc_dir_entry 19020KB 19087KB [ 2373.088794][T30570] pde_opener 13KB 15KB [ 2373.094887][T30570] seq_file 34KB 63KB [ 2373.101923][T30570] shmem_inode_cache 10712KB 11341KB [ 2373.108664][T30570] kernfs_iattrs_cache 9KB 15KB [ 2373.115219][T30570] kernfs_node_cache 113034KB 113486KB [ 2373.122390][T30570] mnt_cache 347KB 363KB [ 2373.129068][T30570] filp 4443KB 4443KB [ 2373.135196][T30570] names_cache 52143KB 52143KB [ 2373.142473][T30570] iint_cache 28KB 66KB [ 2373.150263][T30570] lsm_file_cache 815KB 897KB [ 2373.156343][T30570] key_jar 28KB 43KB [ 2373.164546][T30570] uts_namespace 5KB 15KB [ 2373.171833][T30570] nsproxy 122KB 138KB [ 2373.179715][T30570] vm_area_struct 11873KB 13105KB [ 2373.186247][T30570] mm_struct 2311KB 2538KB [ 2373.193334][T30570] fs_cache 544KB 704KB [ 2373.200213][T30570] files_cache 1832KB 2178KB [ 2373.206283][T30570] signal_cache 5661KB 5882KB [ 2373.213321][T30570] sighand_cache 4451KB 4481KB [ 2373.223932][T30570] task_struct 22666KB 22666KB [ 2373.230164][T30570] cred_jar 2106KB 2116KB [ 2373.236934][T30570] anon_vma_chain 3692KB 4413KB [ 2373.243186][T30570] anon_vma 2928KB 3116KB [ 2373.249550][T30570] pid 416KB 461KB [ 2373.255639][T30570] Acpi-Operand 156KB 194KB [ 2373.262072][T30570] Acpi-ParseExt 9KB 11KB [ 2373.268239][T30570] Acpi-Parse 41KB 47KB [ 2373.274297][T30570] Acpi-State 52KB 63KB [ 2373.281269][T30570] Acpi-Namespace 23KB 27KB [ 2373.287416][T30570] shared_policy_node 0KB 3KB [ 2373.293618][T30570] numa_policy 2KB 23KB [ 2373.300392][T30570] trace_event_file 358KB 358KB [ 2373.306804][T30570] ftrace_event_field 491KB 496KB [ 2373.313017][T30570] pool_workqueue 609KB 708KB [ 2373.319246][T30570] vmap_area 1302KB 2287KB [ 2373.325316][T30570] debug_objects_cache 7968KB 8297KB [ 2373.331622][T30570] page->ptl 3271KB 3906KB [ 2373.337711][T30570] kmalloc-4M 4096KB 4096KB [ 2373.343850][T30570] kmalloc-1M 8192KB 8192KB [ 2373.350023][T30570] kmalloc-512k 4096KB 4096KB [ 2373.356099][T30570] kmalloc-256k 195584KB 195584KB [ 2373.362247][T30570] kmalloc-128k 18944KB 19200KB [ 2373.369212][T30570] kmalloc-64k 6656KB 7296KB [ 2373.375280][T30570] kmalloc-32k 50944KB 50944KB [ 2373.381457][T30570] kmalloc-16k 16256KB 16512KB [ 2373.388919][T30570] kmalloc-8k 44752KB 44752KB [ 2373.395118][T30570] kmalloc-4k 282680KB 282784KB [ 2373.401279][T30570] kmalloc-2k 160404KB 160556KB [ 2373.407355][T30570] kmalloc-1k 207636KB 240008KB [ 2373.413553][T30570] kmalloc-512 46942KB 48940KB [ 2373.419797][T30570] kmalloc-256 32481KB 33060KB [ 2373.426004][T30570] kmalloc-128 5268KB 6016KB [ 2373.432896][T30570] kmalloc-96 4467KB 4656KB [ 2373.439177][T30570] kmalloc-64 10532KB 10992KB [ 2373.445344][T30570] kmalloc-32 6693KB 7197KB [ 2373.451470][T30570] kmalloc-192 8502KB 9024KB [ 2373.457645][T30570] kmem_cache 451KB 452KB [ 2373.463813][T30570] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4402,uid=0 [ 2373.479161][T30570] Out of memory: Killed process 4402 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 18:53:07 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = socket(0x1e, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x440500) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r1, 0x0, 0x7ffff000) ioctl$NBD_DO_IT(r1, 0xab03) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r5 = dup(r4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r5}) 18:53:07 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x600}, 0x0) 18:53:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) 18:53:07 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c061}, 0x0) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) 18:53:07 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000104, 0x7ff) unshare(0x40000000) 18:53:07 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) r0 = socket(0x1e, 0x2, 0x40000000) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) eventfd(0x6) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x503402, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private2, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe4) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, r5) r6 = getegid() getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) setgroups(0x5, &(0x7f0000000340)=[r5, r6, 0xee00, 0x0, r7]) write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0xfffffffffffffffe, 0x2, {0x1000, 0x8001, 0x0, {0x1, 0x8, 0x793c, 0x0, 0x8, 0x5, 0x0, 0x9, 0x4, 0xd50a, 0x6, 0x0, r5, 0x26, 0x4}}}, 0x78) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0xc07, 0x0, 0x2, {{}, {}, {0x8, 0x2, 0x3}}}, 0x24}}, 0x4000880) write$P9_RXATTRCREATE(r3, &(0x7f0000000400)={0x7, 0x21, 0x1}, 0x7) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000d0) 18:53:07 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 2373.691123][T30686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2373.707093][T30689] IPVS: ftp: loaded support on port[0] = 21 [ 2373.718702][T30691] IPVS: ftp: loaded support on port[0] = 21 [ 2373.749917][T30696] IPVS: ftp: loaded support on port[0] = 21 [ 2373.759229][T30697] bridge394: port 1(bond0) entered blocking state [ 2373.772853][T30697] bridge394: port 1(bond0) entered disabled state [ 2373.773019][T30689] syz-executor.4 invoked oom-killer: gfp_mask=0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2373.790547][T30700] IPVS: ftp: loaded support on port[0] = 21 [ 2373.800675][T30689] CPU: 0 PID: 30689 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 2373.807166][T30697] device bond0 entered promiscuous mode [ 2373.809561][T30689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2373.809566][T30689] Call Trace: [ 2373.809589][T30689] dump_stack+0x188/0x20d [ 2373.809607][T30689] dump_header+0x10b/0x826 [ 2373.809625][T30689] oom_kill_process.cold+0x10/0x15 [ 2373.809640][T30689] out_of_memory+0x31f/0x12f0 [ 2373.809658][T30689] ? oom_killer_disable+0x270/0x270 [ 2373.809673][T30689] ? mutex_trylock+0x246/0x2c0 [ 2373.809695][T30689] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2373.820984][T30697] device bond_slave_0 entered promiscuous mode [ 2373.825607][T30689] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2373.825638][T30689] ? warn_alloc+0x110/0x110 [ 2373.867676][T30697] device bond_slave_1 entered promiscuous mode [ 2373.870386][T30689] ? do_fast_syscall_32+0x270/0xe90 [ 2373.870414][T30689] __alloc_pages_nodemask+0x5d9/0x810 [ 2373.870432][T30689] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2373.870445][T30689] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2373.870466][T30689] ? kmem_cache_alloc_node_trace+0x340/0x790 [ 2373.916822][T30689] ? do_raw_spin_unlock+0x171/0x260 [ 2373.922038][T30689] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2373.928462][T30689] alloc_pages_current+0xff/0x200 [ 2373.932180][T30686] device bond0 left promiscuous mode [ 2373.933491][T30689] __vmalloc_node_range+0x478/0x7a0 [ 2373.943957][T30689] ? ebt_register_table+0x1e6/0xc70 [ 2373.947846][T30686] device bond_slave_0 left promiscuous mode [ 2373.949164][T30689] vmalloc+0x67/0x80 [ 2373.949183][T30689] ? ebt_register_table+0x1e6/0xc70 [ 2373.949200][T30689] ebt_register_table+0x1e6/0xc70 [ 2373.949219][T30689] ? ebt_broute+0x700/0x700 [ 2373.949235][T30689] ops_init+0xaf/0x420 [ 2373.949254][T30689] setup_net+0x2de/0x860 [ 2373.964001][T30686] device bond_slave_1 left promiscuous mode [ 2373.965056][T30689] ? ops_init+0x420/0x420 [ 2373.965081][T30689] copy_net_ns+0x293/0x590 [ 2373.977860][T30686] bridge394: port 1(bond0) entered disabled state [ 2373.978829][T30689] create_new_namespaces+0x3fb/0xb30 [ 2373.978849][T30689] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2373.978867][T30689] ksys_unshare+0x43d/0x8e0 [ 2373.978882][T30689] ? walk_process_tree+0x2c0/0x2c0 [ 2373.978902][T30689] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2374.030690][T30689] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2374.036693][T30689] ? fput_many+0x2f/0x1a0 [ 2374.041035][T30689] ? trace_hardirqs_off_caller+0x55/0x230 [ 2374.046769][T30689] __ia32_sys_unshare+0x2c/0x40 [ 2374.051633][T30689] do_fast_syscall_32+0x270/0xe90 [ 2374.056663][T30689] entry_SYSENTER_compat+0x70/0x7f [ 2374.066334][T30689] Mem-Info: [ 2374.070120][T30689] active_anon:305853 inactive_anon:10394 isolated_anon:0 [ 2374.070120][T30689] active_file:2788 inactive_file:6519 isolated_file:0 [ 2374.070120][T30689] unevictable:14 dirty:6 writeback:0 unstable:0 [ 2374.070120][T30689] slab_reclaimable:20030 slab_unreclaimable:398487 [ 2374.070120][T30689] mapped:61903 shmem:10684 pagetables:29929 bounce:0 [ 2374.070120][T30689] free:711492 free_pcp:695 free_cma:0 [ 2374.112527][T30689] Node 0 active_anon:1061648kB inactive_anon:16652kB active_file:16kB inactive_file:4kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217072kB dirty:16kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 931840kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2374.142099][T30689] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2374.175251][T30689] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2374.182774][T30689] Node 0 DMA32 free:115972kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1061520kB inactive_anon:16652kB active_file:16kB inactive_file:4kB unevictable:56kB writepending:16kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:21232kB pagetables:33124kB bounce:0kB free_pcp:2732kB local_pcp:1280kB free_cma:0kB [ 2374.218745][T30689] lowmem_reserve[]: 0 0 0 0 0 [ 2374.223570][T30689] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2374.252554][T30689] lowmem_reserve[]: 0 0 0 0 0 [ 2374.257379][T30689] Node 0 DMA: 6*4kB (M) 9*8kB (M) 6*16kB (UME) 5*32kB (UME) 3*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10272kB [ 2374.274431][T30689] Node 0 DMA32: 2111*4kB (UME) 1014*8kB (UME) 567*16kB (ME) 372*32kB (ME) 214*64kB (UME) 110*128kB (ME) 62*256kB (ME) 22*512kB (UM) 1*1024kB (M) 9*2048kB (UM) 1*4096kB (M) = 115996kB [ 2374.295297][T30689] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2374.307698][T30689] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2374.318065][T30689] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2374.327509][T30689] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2374.339999][T30689] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 18:53:08 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0xc00}, 0x0) [ 2374.351744][T30689] 19991 total pagecache pages [ 2374.356583][T30689] 0 pages in swap cache [ 2374.365185][T30689] Swap cache stats: add 0, delete 0, find 0/0 [ 2374.389014][T30689] Free swap = 0kB [ 2374.393188][T30689] Total swap = 0kB [ 2374.403038][T30689] 1965979 pages RAM [ 2374.409809][T30689] 0 pages HighMem/MovableOnly [ 2374.421217][T30689] 349380 pages reserved [ 2374.435940][T30689] 0 pages cma reserved [ 2374.441169][T30689] Unreclaimable slab info: [ 2374.450983][T30689] Name Used Total [ 2374.462403][T30689] pid_3 1KB 7KB [ 2374.470751][T30689] pid_2 913KB 1113KB 18:53:08 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0xe00}, 0x0) [ 2374.495669][T30689] bio-3 0KB 7KB [ 2374.502980][T30689] AF_VSOCK 14KB 16KB [ 2374.512588][T30747] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2374.547519][T30689] batadv_tl_cache 4KB 12KB [ 2374.578176][T30686] bridge394: port 1(bond0) entered blocking state [ 2374.584667][T30686] bridge394: port 1(bond0) entered disabled state [ 2374.587145][T30689] SMC 45KB 49KB 18:53:08 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) 18:53:08 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x78f3, 0x12040) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000100)={0x8, 0x4, &(0x7f0000000040)=[0x4, 0xda, 0x3, 0x5], &(0x7f0000000080)=[0x751, 0x3, 0x0], &(0x7f00000000c0)=[0x5, 0x8, 0x305e]}) unshare(0x40000000) [ 2374.616693][T30689] TIPC 367KB 578KB [ 2374.640530][T30686] device bond0 entered promiscuous mode [ 2374.656814][T30686] device bond_slave_0 entered promiscuous mode [ 2374.657871][T30689] rds_tcp_connection 10KB 11KB [ 2374.670830][T30686] device bond_slave_1 entered promiscuous mode [ 2374.678853][T30697] device bond0 left promiscuous mode [ 2374.684250][T30697] device bond_slave_0 left promiscuous mode [ 2374.698426][T30697] device bond_slave_1 left promiscuous mode [ 2374.704657][T30697] bridge394: port 1(bond0) entered disabled state [ 2374.722973][T30689] RDS 22KB 22KB [ 2374.732231][T30689] rds_connection 0KB 3KB [ 2374.739447][T30689] SCTPv6 1030KB 1096KB [ 2374.745518][T30689] SCTP 206KB 232KB [ 2374.752988][T30689] sctp_chunk 13KB 15KB [ 2374.760048][T30689] sctp_bind_bucket 1KB 3KB [ 2374.766138][T30689] DCCPv6 1225KB 1323KB [ 2374.773949][T30689] DCCP 1138KB 1221KB [ 2374.782222][T30689] L2TP/IPv6 6KB 6KB [ 2374.789295][T30689] L2TP/IP 23KB 23KB [ 2374.796184][T30689] KCM 17KB 19KB [ 2374.803379][T30689] kcm_mux_cache 7KB 7KB [ 2374.810176][T30689] RXRPC 808KB 864KB [ 2374.816248][T30689] rxrpc_call_jar 4890KB 4901KB [ 2374.823528][T30689] bridge_fdb_cache 73KB 74KB [ 2374.830371][T30689] MPTCPv6 35KB 38KB [ 2374.836451][T30689] fib6_nodes 175KB 184KB [ 2374.843758][T30689] ip6_dst_cache 290KB 423KB [ 2374.850554][T30689] PINGv6 1KB 3KB [ 2374.856638][T30689] RAWv6 4201KB 4203KB [ 2374.863748][T30689] UDPLITEv6 19KB 19KB 18:53:08 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 2374.870381][T30689] UDPv6 986KB 1050KB [ 2374.877080][T30689] TCPv6 790KB 998KB [ 2374.884412][T30689] nf_conntrack 10KB 37KB [ 2374.891778][T30689] sd_ext_cdb 0KB 7KB [ 2374.898861][T30689] scsi_sense_cache 1056KB 1064KB [ 2374.916062][T30689] virtio_scsi_cmd 16KB 16KB [ 2374.922838][T30689] sgpool-128 8KB 8KB [ 2374.929709][T30689] sgpool-64 4KB 12KB [ 2374.935791][T30689] sgpool-32 3KB 15KB [ 2374.943178][T30689] sgpool-16 23KB 30KB [ 2374.949997][T30689] sgpool-8 40KB 48KB [ 2374.956095][T30689] mqueue_inode_cache 53KB 62KB [ 2374.969636][T30689] f2fs_bio_post_read_ctx 16KB 16KB [ 2374.976220][T30689] jfs_mp 7KB 7KB [ 2374.983314][T30689] cifs_small_rq 15KB 16KB [ 2374.990155][T30689] cifs_request 67KB 67KB [ 2374.996618][T30689] cifs_mpx_ids 0KB 8KB [ 2375.004707][T30689] nfs_commit_data 3KB 7KB [ 2375.012338][T30689] nfs_write_data 34KB 44KB [ 2375.019890][T30689] ext4_system_zone 1KB 7KB [ 2375.026165][T30689] ext4_io_end_vec 12KB 15KB [ 2375.033618][T30689] ext4_bio_post_read_ctx 15KB 15KB [ 2375.041479][T30689] io_kiocb 0KB 3KB [ 2375.048779][T30689] kioctx 21KB 23KB [ 2375.055033][T30689] aio_kiocb 6KB 7KB [ 2375.063911][T30689] userfaultfd_ctx_cache 2KB 4KB [ 2375.070997][T30689] bio-2 1KB 7KB [ 2375.077086][T30689] fasync_cache 1KB 3KB [ 2375.091455][T30689] pid_namespace 4KB 11KB [ 2375.100698][T30689] posix_timers_cache 7KB 11KB [ 2375.106871][T30689] kvm_vcpu 0KB 70KB [ 2375.128881][T30689] kvm_mmu_page_header 58KB 61KB [ 2375.135508][T30689] pte_list_desc 2KB 3KB [ 2375.144068][T30689] x86_emulator 51KB 54KB [ 2375.151061][T30689] x86_fpu 0KB 43KB [ 2375.157525][T30689] rpc_buffers 17KB 25KB [ 2375.165633][T30689] rpc_tasks 2KB 7KB [ 2375.172895][T30689] UNIX 569KB 612KB [ 2375.180922][T30689] UDP-Lite 71KB 73KB [ 2375.187092][T30689] MPTCP 10KB 15KB [ 2375.194621][T30689] tcp_bind_bucket 48KB 48KB [ 2375.201565][T30689] inet_peer_cache 28KB 32KB [ 2375.207651][T30689] ip_fib_trie 24KB 31KB [ 2375.214784][T30689] ip_fib_alias 112KB 134KB [ 2375.223077][T30689] ip_dst_cache 100KB 168KB [ 2375.229883][T30689] PING 12KB 15KB [ 2375.236148][T30689] RAW 2559KB 2562KB [ 2375.243952][T30689] UDP 887KB 948KB [ 2375.250882][T30689] TCP 311KB 352KB [ 2375.257051][T30689] hugetlbfs_inode_cache 6KB 10KB [ 2375.264353][T30689] fscache_cookie_jar 1KB 7KB [ 2375.271049][T30689] bio-1 10KB 15KB [ 2375.277130][T30689] eventpoll_pwq 7KB 35KB [ 2375.284009][T30689] eventpoll_epi 14KB 39KB [ 2375.290667][T30689] inotify_inode_mark 4KB 7KB [ 2375.296832][T30689] request_queue 157KB 157KB [ 2375.304653][T30689] blkdev_ioc 11KB 19KB [ 2375.311307][T30689] bio-0 765KB 768KB [ 2375.317383][T30689] biovec-max 6481KB 6481KB [ 2375.324249][T30689] biovec-64 108KB 149KB [ 2375.330878][T30689] biovec-16 34KB 37KB [ 2375.337373][T30689] bio_integrity_payload 1KB 7KB [ 2375.344776][T30689] khugepaged_mm_slot 287KB 324KB [ 2375.351752][T30689] user_namespace 4KB 7KB [ 2375.357815][T30689] uid_cache 0KB 4KB [ 2375.364954][T30689] dmaengine-unmap-256 2KB 6KB [ 2375.371777][T30689] dmaengine-unmap-128 1KB 3KB [ 2375.378877][T30689] dmaengine-unmap-16 0KB 4KB [ 2375.385040][T30689] dmaengine-unmap-2 0KB 3KB [ 2375.392146][T30689] audit_buffer 0KB 3KB [ 2375.398866][T30689] skbuff_ext_cache 0KB 4KB [ 2375.404991][T30689] skbuff_fclone_cache 490KB 663KB [ 2375.412207][T30689] skbuff_head_cache 26432KB 40173KB [ 2375.419040][T30689] configfs_dir_cache 1KB 8KB [ 2375.425239][T30689] file_lock_cache 4KB 7KB [ 2375.432236][T30689] file_lock_ctx 8KB 11KB [ 2375.438953][T30689] fsnotify_mark_connector 1KB 8KB [ 2375.445553][T30689] net_namespace 2767KB 2774KB [ 2375.452519][T30689] task_delay_info 846KB 957KB [ 2375.459696][T30689] taskstats 593KB 676KB [ 2375.465818][T30689] proc_dir_entry 19055KB 19087KB [ 2375.472895][T30689] pde_opener 13KB 15KB [ 2375.479652][T30689] seq_file 34KB 63KB [ 2375.485862][T30689] shmem_inode_cache 10712KB 11341KB [ 2375.493744][T30689] kernfs_iattrs_cache 9KB 15KB [ 2375.500801][T30689] kernfs_node_cache 109967KB 111198KB [ 2375.506960][T30689] mnt_cache 347KB 363KB [ 2375.513928][T30689] filp 4911KB 4912KB [ 2375.520629][T30689] names_cache 58539KB 58539KB [ 2375.526716][T30689] iint_cache 28KB 66KB [ 2375.533550][T30689] lsm_file_cache 887KB 897KB [ 2375.540261][T30689] key_jar 28KB 43KB [ 2375.546345][T30689] uts_namespace 5KB 15KB [ 2375.553518][T30689] nsproxy 122KB 138KB [ 2375.560253][T30689] vm_area_struct 11921KB 13105KB [ 2375.566507][T30689] mm_struct 2332KB 2538KB [ 2375.573611][T30689] fs_cache 574KB 704KB [ 2375.580594][T30689] files_cache 1832KB 2178KB [ 2375.587209][T30689] signal_cache 5736KB 5889KB [ 2375.593991][T30689] sighand_cache 4451KB 4481KB [ 2375.600964][T30689] task_struct 23342KB 23342KB [ 2375.607358][T30689] cred_jar 2275KB 2276KB [ 2375.614281][T30689] anon_vma_chain 3692KB 4413KB [ 2375.621175][T30689] anon_vma 2928KB 3116KB [ 2375.627278][T30689] pid 416KB 461KB [ 2375.634159][T30689] Acpi-Operand 156KB 194KB [ 2375.640752][T30689] Acpi-ParseExt 9KB 11KB [ 2375.646915][T30689] Acpi-Parse 41KB 47KB [ 2375.653818][T30689] Acpi-State 52KB 63KB [ 2375.660533][T30689] Acpi-Namespace 23KB 27KB [ 2375.666594][T30689] shared_policy_node 0KB 3KB [ 2375.673616][T30689] numa_policy 2KB 23KB [ 2375.680892][T30689] trace_event_file 358KB 358KB [ 2375.687151][T30689] ftrace_event_field 491KB 496KB [ 2375.694251][T30689] pool_workqueue 609KB 708KB [ 2375.703038][T30689] vmap_area 1364KB 2287KB [ 2375.710025][T30689] debug_objects_cache 7889KB 8297KB [ 2375.716408][T30689] page->ptl 3271KB 3906KB [ 2375.723487][T30689] kmalloc-4M 4096KB 4096KB [ 2375.730106][T30689] kmalloc-1M 8192KB 8192KB [ 2375.736186][T30689] kmalloc-512k 4096KB 4096KB [ 2375.743460][T30689] kmalloc-256k 197120KB 197632KB [ 2375.750278][T30689] kmalloc-128k 18944KB 19200KB [ 2375.756342][T30689] kmalloc-64k 6656KB 7296KB [ 2375.763441][T30689] kmalloc-32k 51200KB 51200KB [ 2375.770081][T30689] kmalloc-16k 16256KB 16512KB [ 2375.776162][T30689] kmalloc-8k 44976KB 44976KB [ 2375.783501][T30689] kmalloc-4k 284512KB 284552KB [ 2375.790605][T30689] kmalloc-2k 157908KB 158060KB [ 2375.796804][T30689] kmalloc-1k 208020KB 239988KB [ 2375.803937][T30689] kmalloc-512 46720KB 48932KB [ 2375.810578][T30689] kmalloc-256 31953KB 33048KB [ 2375.816676][T30689] kmalloc-128 5247KB 6012KB [ 2375.823942][T30689] kmalloc-96 4466KB 4656KB [ 2375.830631][T30689] kmalloc-64 10516KB 10984KB [ 2375.836868][T30689] kmalloc-32 6742KB 7197KB [ 2375.843955][T30689] kmalloc-192 8417KB 9024KB [ 2375.850714][T30689] kmem_cache 451KB 452KB [ 2375.856802][T30689] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4392,uid=0 [ 2375.858760][T30759] IPVS: ftp: loaded support on port[0] = 21 [ 2375.872906][T30689] Out of memory: Killed process 4392 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 2375.893611][T30761] IPVS: ftp: loaded support on port[0] = 21 18:53:11 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x78f3, 0x12040) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000100)={0x8, 0x4, &(0x7f0000000040)=[0x4, 0xda, 0x3, 0x5], &(0x7f0000000080)=[0x751, 0x3, 0x0], &(0x7f00000000c0)=[0x5, 0x8, 0x305e]}) unshare(0x40000000) 18:53:11 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 18:53:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x0, 0x3}, 0x0) 18:53:11 executing program 0: socket$can_bcm(0x1d, 0x2, 0x2) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000000)={0x0, 0x0, [0x1, 0x401, 0x7, 0x0, 0x1000, 0x800, 0x6, 0x4]}) unshare(0x40000000) 18:53:11 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x8, 0x401, "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", 0x5, 0x7, 0x19, 0x4, 0x1, 0xff, 0x7, 0x1}, r2}}, 0x120) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) 18:53:11 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) openat$vfio(0xffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x44000, 0x0) [ 2378.095403][T30836] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2378.100540][T30837] IPVS: ftp: loaded support on port[0] = 21 [ 2378.141602][T30836] bridge394: port 1(bond0) entered blocking state [ 2378.157515][T30836] bridge394: port 1(bond0) entered disabled state [ 2378.160683][T30837] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2378.186238][T30836] device bond0 entered promiscuous mode 18:53:12 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x5865}, 0x0) [ 2378.194062][T30837] CPU: 1 PID: 30837 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 2378.202849][T30837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2378.212907][T30837] Call Trace: [ 2378.216189][T30837] dump_stack+0x188/0x20d [ 2378.220525][T30837] dump_header+0x10b/0x826 [ 2378.224933][T30837] oom_kill_process.cold+0x10/0x15 [ 2378.230117][T30837] out_of_memory+0x31f/0x12f0 [ 2378.234778][T30837] ? oom_killer_disable+0x270/0x270 [ 2378.239975][T30837] ? mutex_trylock+0x246/0x2c0 [ 2378.244724][T30837] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 2378.251384][T30837] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 2378.257982][T30837] ? warn_alloc+0x110/0x110 [ 2378.262478][T30837] ? vmalloc+0x67/0x80 [ 2378.266531][T30837] ? ebt_register_table+0x1e6/0xc70 [ 2378.271713][T30837] ? ops_init+0xaf/0x420 [ 2378.275944][T30837] ? setup_net+0x2de/0x860 [ 2378.280426][T30837] ? copy_net_ns+0x293/0x590 [ 2378.285132][T30837] __alloc_pages_nodemask+0x5d9/0x810 [ 2378.290524][T30837] ? perf_trace_lock_acquire+0xf5/0x530 [ 2378.296200][T30837] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2378.303053][T30837] ? lock_acquire+0x1f2/0x8f0 [ 2378.307721][T30837] ? kernel_init_free_pages+0x120/0x120 [ 2378.313314][T30837] ? __this_cpu_preempt_check+0x28/0x190 [ 2378.318944][T30837] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 2378.325347][T30837] alloc_pages_current+0xff/0x200 [ 2378.330379][T30837] ? memtype_check_insert.cold+0x1fc/0x1fc [ 2378.336167][T30837] __get_free_pages+0x8/0x40 [ 2378.340801][T30837] kasan_populate_vmalloc_pte+0x28/0x1a0 [ 2378.346442][T30837] __apply_to_page_range+0x6ac/0xac0 [ 2378.351742][T30837] ? memset+0x40/0x40 [ 2378.355710][T30837] alloc_vmap_area+0xae8/0x1e20 [ 2378.360602][T30837] ? purge_vmap_area_lazy+0x40/0x40 [ 2378.365787][T30837] __get_vm_area_node+0x178/0x3b0 [ 2378.370798][T30837] __vmalloc_node_range+0xdc/0x7a0 [ 2378.375889][T30837] ? ebt_register_table+0x1e6/0xc70 [ 2378.381071][T30837] ? ebt_register_table+0x150/0xc70 [ 2378.386252][T30837] ? ebt_register_table+0x1e6/0xc70 [ 2378.391429][T30837] vmalloc+0x67/0x80 [ 2378.395412][T30837] ? ebt_register_table+0x1e6/0xc70 [ 2378.400614][T30837] ebt_register_table+0x1e6/0xc70 [ 2378.405680][T30837] ? ebt_broute+0x700/0x700 [ 2378.410186][T30837] ops_init+0xaf/0x420 [ 2378.414237][T30837] setup_net+0x2de/0x860 [ 2378.418466][T30837] ? ops_init+0x420/0x420 [ 2378.422781][T30837] copy_net_ns+0x293/0x590 [ 2378.427185][T30837] create_new_namespaces+0x3fb/0xb30 [ 2378.432460][T30837] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2378.438073][T30837] ksys_unshare+0x43d/0x8e0 [ 2378.442556][T30837] ? walk_process_tree+0x2c0/0x2c0 [ 2378.447649][T30837] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2378.453519][T30837] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2378.459307][T30837] ? fput_many+0x2f/0x1a0 [ 2378.463619][T30837] ? trace_hardirqs_off_caller+0x55/0x230 [ 2378.469321][T30837] __ia32_sys_unshare+0x2c/0x40 [ 2378.474154][T30837] do_fast_syscall_32+0x270/0xe90 [ 2378.479180][T30837] entry_SYSENTER_compat+0x70/0x7f [ 2378.505506][T30836] device bond_slave_0 entered promiscuous mode [ 2378.515554][T30836] device bond_slave_1 entered promiscuous mode [ 2378.537673][T30837] Mem-Info: [ 2378.541023][T30846] device bond0 left promiscuous mode [ 2378.546347][T30846] device bond_slave_0 left promiscuous mode [ 2378.575026][T30837] active_anon:305270 inactive_anon:10394 isolated_anon:0 [ 2378.575026][T30837] active_file:2787 inactive_file:6539 isolated_file:0 [ 2378.575026][T30837] unevictable:14 dirty:0 writeback:0 unstable:0 [ 2378.575026][T30837] slab_reclaimable:20036 slab_unreclaimable:399167 [ 2378.575026][T30837] mapped:61920 shmem:10684 pagetables:29876 bounce:0 [ 2378.575026][T30837] free:712219 free_pcp:707 free_cma:0 [ 2378.615003][T30846] device bond_slave_1 left promiscuous mode [ 2378.627977][T30846] bridge394: port 1(bond0) entered disabled state [ 2378.635278][T30837] Node 0 active_anon:1059492kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:217072kB dirty:8kB writeback:0kB shmem:17676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 929792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2378.666754][T30837] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2378.699026][T30837] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 2378.704848][T30837] Node 0 DMA32 free:116808kB min:116768kB low:125748kB high:134728kB reserved_highatomic:0KB active_anon:1059368kB inactive_anon:16652kB active_file:12kB inactive_file:8kB unevictable:56kB writepending:0kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:21200kB pagetables:33024kB bounce:0kB free_pcp:2796kB local_pcp:1416kB free_cma:0kB [ 2378.741001][T30837] lowmem_reserve[]: 0 0 0 0 0 [ 2378.746405][T30837] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2378.775293][T30837] lowmem_reserve[]: 0 0 0 0 0 [ 2378.780734][T30837] Node 0 DMA: 8*4kB (UM) 10*8kB (UM) 6*16kB (UME) 5*32kB (UME) 3*64kB (UM) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10288kB [ 2378.798231][T30837] Node 0 DMA32: 2166*4kB (UME) 1040*8kB (UME) 625*16kB (UME) 383*32kB (UME) 218*64kB (UME) 110*128kB (UME) 63*256kB (ME) 21*512kB (M) 2*1024kB (UM) 10*2048kB (UM) 0*4096kB = 116680kB [ 2378.821148][T30837] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2378.834061][T30837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2378.844389][T30837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2378.855051][T30837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2378.865712][T30837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2378.875731][T30837] 20016 total pagecache pages [ 2378.881105][T30837] 0 pages in swap cache [ 2378.885279][T30837] Swap cache stats: add 0, delete 0, find 0/0 [ 2378.896249][T30837] Free swap = 0kB [ 2378.902637][T30853] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2378.913173][T30837] Total swap = 0kB [ 2378.917027][T30837] 1965979 pages RAM 18:53:12 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x6000}, 0x0) [ 2378.928654][T30836] bridge394: port 1(bond0) entered blocking state [ 2378.935240][T30836] bridge394: port 1(bond0) entered disabled state [ 2378.953345][T30837] 0 pages HighMem/MovableOnly [ 2378.964152][T30837] 349380 pages reserved [ 2378.972812][T30836] device bond0 entered promiscuous mode 18:53:12 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2000382e, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r4, @in={{0x2, 0x0, @rand_addr=0x40}}}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={r4, 0x99, "145c78c5d75e355c0f1a49693d85c1741e3cd680072687deec03e38767c91a02686ac9533a841c431da53a84d3be17672f9395c32088e0e15547a48c9f86b91a7e3488e7f46371fcadc0d59907b66f62fc6b632386ec788d4ded49bca0e10113ae907ec18c1951e0967c15fe328a01eb8349d970be248f84c3dc16ca4ddacac46a6712745b9cab385f188c1b06f0cb7443bf09a180a49d87cb"}, &(0x7f0000000100)=0xa1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="b000000081e09678fbb0ced78a21ee33a68ed4619ed08d279a0bd3d8930668e3607444c4c6521271893e2950b77efa4ce24c0ff691b39e3b750be63c73a3f808cbdc0756376693bc0d2aaac6d6f6f8b8d4324939fe9b0fd6672dd8cd12f5b864d20e6ca5ed917e2e515103ac62986b65a5575b0559882b2ec9c13283ed62d8f1ede4b8bd9ef6f3667b42734c05cc54e94f6fdcfba10c8d234d36984d0950816f96b010e5df5e832332b10eff8e8f14d795b25939"], &(0x7f0000000000)=0xb8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={r5, 0xba, "c816884ee5aac6871f0aceea41909adf90e9cd360677a9577393fbb605a384b402f2a4ec9e583845a1077db0ebf80ad48507b1863d1574acf6fcb04a64f24856926a2f5e0624d544ed1845d051e7e786f6aeca16652fc6d9c6d2a416e026fc809d50e71936325818f1b72e2fd697f25bb6056a994e846e174db68e3fa83f3883a042d70b149376cc6b9729475aae2df14530cda1bb0d6017ace14ad1e803464ad494f5de4e8cd9a2941bc2dd519abdc4dc903fd10fba4a5b988c"}, &(0x7f0000000080)=0xc2) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@any, 0x3, 0x3f, 0x7b9}) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) unshare(0x40000000) [ 2378.983111][T30837] 0 pages cma reserved [ 2378.987210][T30837] Unreclaimable slab info: [ 2379.002629][T30836] device bond_slave_0 entered promiscuous mode [ 2379.012608][T30837] Name Used Total [ 2379.023110][T30836] device bond_slave_1 entered promiscuous mode [ 2379.041314][T30837] pid_3 1KB 7KB [ 2379.047450][T30837] pid_2 913KB 1113KB [ 2379.062575][T30853] device bond0 left promiscuous mode [ 2379.068417][T30853] device bond_slave_0 left promiscuous mode [ 2379.075540][T30853] device bond_slave_1 left promiscuous mode [ 2379.083701][T30837] bio-3 0KB 7KB [ 2379.091993][T30853] bridge394: port 1(bond0) entered disabled state [ 2379.099702][T30837] AF_VSOCK 14KB 16KB [ 2379.106066][T30837] batadv_tl_cache 4KB 12KB [ 2379.113271][T30837] SMC 45KB 49KB [ 2379.120626][T30837] TIPC 351KB 565KB [ 2379.127139][T30837] rds_tcp_connection 10KB 11KB [ 2379.134936][T30837] RDS 22KB 22KB [ 2379.144338][T30837] rds_connection 0KB 3KB [ 2379.152315][T30837] SCTPv6 1037KB 1102KB [ 2379.160119][T30837] SCTP 208KB 232KB [ 2379.166181][T30837] sctp_chunk 14KB 15KB [ 2379.174895][T30837] sctp_bind_bucket 0KB 3KB [ 2379.183540][T30837] DCCPv6 1231KB 1338KB [ 2379.191756][T30837] DCCP 1143KB 1235KB [ 2379.200243][T30837] L2TP/IPv6 6KB 6KB [ 2379.206352][T30837] L2TP/IP 23KB 23KB [ 2379.214402][T30837] KCM 17KB 19KB [ 2379.223471][T30837] kcm_mux_cache 7KB 7KB [ 2379.232838][T30837] RXRPC 811KB 870KB 18:53:13 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x6558}, 0x0) [ 2379.241765][T30837] rxrpc_call_jar 4915KB 4946KB [ 2379.250388][T30837] bridge_fdb_cache 74KB 74KB [ 2379.257028][T30837] MPTCPv6 35KB 38KB [ 2379.273813][T30837] fib6_nodes 175KB 184KB [ 2379.280799][T30837] ip6_dst_cache 283KB 423KB [ 2379.286935][T30837] PINGv6 1KB 3KB [ 2379.294310][T30837] RAWv6 4201KB 4214KB [ 2379.302187][T30837] UDPLITEv6 19KB 19KB [ 2379.311910][T30837] UDPv6 990KB 1054KB [ 2379.319847][T30837] TCPv6 713KB 937KB [ 2379.326156][T30837] nf_conntrack 16KB 37KB [ 2379.336348][T30837] sd_ext_cdb 0KB 7KB 18:53:13 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x8100}, 0x0) [ 2379.343956][T30837] scsi_sense_cache 1056KB 1064KB [ 2379.355257][T30837] virtio_scsi_cmd 16KB 16KB [ 2379.363514][T30837] sgpool-128 8KB 8KB [ 2379.373241][T30837] sgpool-64 4KB 12KB [ 2379.381059][T30837] sgpool-32 3KB 15KB 18:53:13 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0xf000}, 0x0) [ 2379.391646][T30837] sgpool-16 21KB 30KB [ 2379.400224][T30837] sgpool-8 45KB 48KB [ 2379.406952][T30837] mqueue_inode_cache 53KB 62KB [ 2379.416228][T30837] f2fs_bio_post_read_ctx 16KB 16KB [ 2379.425449][T30837] jfs_mp 7KB 7KB [ 2379.434907][T30837] cifs_small_rq 15KB 16KB [ 2379.446931][T30837] cifs_request 67KB 67KB [ 2379.454190][T30837] cifs_mpx_ids 0KB 8KB [ 2379.462097][T30837] nfs_commit_data 3KB 7KB [ 2379.473599][T30837] nfs_write_data 34KB 44KB [ 2379.481716][T30837] ext4_system_zone 1KB 7KB [ 2379.491958][T30837] ext4_io_end_vec 13KB 15KB [ 2379.499208][T30837] ext4_bio_post_read_ctx 15KB 15KB [ 2379.505870][T30837] io_kiocb 0KB 3KB [ 2379.514991][T30837] kioctx 21KB 23KB [ 2379.522024][T30837] aio_kiocb 6KB 7KB [ 2379.531345][T30837] userfaultfd_ctx_cache 2KB 4KB [ 2379.543099][T30837] bio-2 1KB 7KB [ 2379.552863][T30837] fasync_cache 1KB 3KB [ 2379.560438][T30837] pid_namespace 4KB 11KB [ 2379.566691][T30837] posix_timers_cache 7KB 11KB [ 2379.575351][T30837] kvm_vcpu 0KB 70KB [ 2379.582917][T30837] kvm_mmu_page_header 58KB 61KB [ 2379.591839][T30837] pte_list_desc 2KB 3KB [ 2379.598622][T30837] x86_emulator 51KB 54KB [ 2379.604714][T30837] x86_fpu 0KB 43KB [ 2379.613706][T30837] rpc_buffers 17KB 25KB [ 2379.620712][T30837] rpc_tasks 2KB 7KB [ 2379.626818][T30837] UNIX 563KB 612KB [ 2379.635115][T30837] UDP-Lite 71KB 73KB [ 2379.641759][T30837] MPTCP 10KB 15KB [ 2379.650606][T30837] tcp_bind_bucket 44KB 48KB [ 2379.656773][T30837] inet_peer_cache 28KB 32KB [ 2379.663661][T30837] ip_fib_trie 24KB 31KB [ 2379.671908][T30837] ip_fib_alias 112KB 134KB [ 2379.678557][T30837] ip_dst_cache 99KB 168KB [ 2379.685780][T30837] PING 12KB 15KB [ 2379.693960][T30837] RAW 2559KB 2562KB [ 2379.701436][T30837] UDP 887KB 948KB [ 2379.710117][T30837] TCP 311KB 352KB [ 2379.716226][T30837] hugetlbfs_inode_cache 6KB 10KB [ 2379.723248][T30837] fscache_cookie_jar 1KB 7KB [ 2379.731862][T30837] bio-1 10KB 15KB [ 2379.738497][T30837] eventpoll_pwq 7KB 35KB [ 2379.744581][T30837] eventpoll_epi 13KB 39KB [ 2379.752762][T30837] inotify_inode_mark 4KB 7KB [ 2379.759846][T30837] request_queue 157KB 157KB [ 2379.765953][T30837] blkdev_ioc 11KB 19KB [ 2379.774106][T30837] bio-0 796KB 800KB [ 2379.781317][T30837] biovec-max 6477KB 6532KB [ 2379.787421][T30837] biovec-64 108KB 149KB [ 2379.795760][T30837] biovec-16 34KB 37KB [ 2379.802598][T30837] bio_integrity_payload 1KB 7KB [ 2379.811401][T30837] khugepaged_mm_slot 287KB 324KB [ 2379.818242][T30837] user_namespace 4KB 7KB [ 2379.824541][T30837] uid_cache 0KB 4KB [ 2379.832607][T30837] dmaengine-unmap-256 2KB 6KB [ 2379.840651][T30837] dmaengine-unmap-128 1KB 3KB [ 2379.846909][T30837] dmaengine-unmap-16 0KB 4KB [ 2379.855453][T30837] dmaengine-unmap-2 0KB 3KB [ 2379.866293][T30837] audit_buffer 0KB 3KB [ 2379.875470][T30837] skbuff_ext_cache 0KB 4KB [ 2379.882759][T30837] skbuff_fclone_cache 464KB 660KB [ 2379.891788][T30837] skbuff_head_cache 26542KB 40173KB [ 2379.898474][T30837] configfs_dir_cache 1KB 8KB [ 2379.905670][T30837] file_lock_cache 4KB 7KB [ 2379.914536][T30837] file_lock_ctx 8KB 11KB [ 2379.921288][T30837] fsnotify_mark_connector 1KB 8KB [ 2379.930646][T30837] net_namespace 2795KB 2795KB [ 2379.936858][T30837] task_delay_info 846KB 957KB [ 2379.943542][T30837] taskstats 589KB 676KB [ 2379.952105][T30837] proc_dir_entry 19072KB 19117KB [ 2379.959201][T30837] pde_opener 12KB 15KB [ 2379.965577][T30837] seq_file 31KB 63KB [ 2379.974223][T30837] shmem_inode_cache 10712KB 11341KB [ 2379.981224][T30837] kernfs_iattrs_cache 9KB 15KB [ 2379.988247][T30837] kernfs_node_cache 110198KB 111183KB [ 2379.994331][T30837] mnt_cache 346KB 363KB [ 2380.001360][T30837] filp 4742KB 4920KB [ 2380.008249][T30837] names_cache 56907KB 56907KB [ 2380.014378][T30837] iint_cache 28KB 66KB [ 2380.022505][T30837] lsm_file_cache 889KB 897KB [ 2380.030770][T30837] key_jar 28KB 43KB [ 2380.036863][T30837] uts_namespace 5KB 15KB [ 2380.044470][T30837] nsproxy 122KB 138KB [ 2380.051322][T30837] vm_area_struct 11866KB 13094KB [ 2380.058770][T30837] mm_struct 2332KB 2538KB [ 2380.065149][T30837] fs_cache 574KB 704KB [ 2380.072193][T30837] files_cache 1832KB 2178KB [ 2380.079368][T30837] signal_cache 5762KB 5915KB [ 2380.085484][T30837] sighand_cache 4437KB 4481KB [ 2380.092780][T30837] task_struct 22563KB 22653KB [ 2380.099961][T30837] cred_jar 2295KB 2296KB [ 2380.106111][T30837] anon_vma_chain 3692KB 4413KB [ 2380.113227][T30837] anon_vma 2928KB 3116KB [ 2380.120601][T30837] pid 416KB 461KB [ 2380.127310][T30837] Acpi-Operand 156KB 194KB [ 2380.134578][T30837] Acpi-ParseExt 9KB 11KB [ 2380.141871][T30837] Acpi-Parse 41KB 47KB [ 2380.148725][T30837] Acpi-State 52KB 63KB [ 2380.155160][T30837] Acpi-Namespace 23KB 27KB [ 2380.162436][T30837] shared_policy_node 0KB 3KB [ 2380.170815][T30837] numa_policy 4KB 23KB [ 2380.178729][T30837] trace_event_file 358KB 358KB [ 2380.185020][T30837] ftrace_event_field 491KB 496KB [ 2380.192818][T30837] pool_workqueue 554KB 660KB [ 2380.201387][T30837] vmap_area 1420KB 2287KB [ 2380.208690][T30837] debug_objects_cache 7890KB 8297KB [ 2380.215126][T30837] page->ptl 3271KB 3906KB [ 2380.222872][T30837] kmalloc-4M 4096KB 4096KB [ 2380.230165][T30837] kmalloc-1M 8192KB 8192KB [ 2380.236343][T30837] kmalloc-512k 4096KB 4096KB [ 2380.244729][T30837] kmalloc-256k 197120KB 197632KB [ 2380.251915][T30837] kmalloc-128k 18944KB 19200KB [ 2380.260409][T30837] kmalloc-64k 6656KB 7296KB [ 2380.266500][T30837] kmalloc-32k 51328KB 51456KB [ 2380.276280][T30837] kmalloc-16k 16224KB 16448KB [ 2380.283832][T30837] kmalloc-8k 45056KB 45120KB [ 2380.292187][T30837] kmalloc-4k 285880KB 285952KB [ 2380.299572][T30837] kmalloc-2k 157528KB 157580KB [ 2380.305973][T30837] kmalloc-1k 208014KB 239956KB [ 2380.313190][T30837] kmalloc-512 46501KB 48920KB [ 2380.319972][T30837] kmalloc-256 31918KB 33048KB [ 2380.326047][T30837] kmalloc-128 5246KB 6012KB [ 2380.333018][T30837] kmalloc-96 4465KB 4656KB [ 2380.339941][T30837] kmalloc-64 10477KB 10984KB [ 2380.346038][T30837] kmalloc-32 6707KB 7197KB [ 2380.352955][T30837] kmalloc-192 8416KB 9024KB [ 2380.359699][T30837] kmem_cache 449KB 452KB [ 2380.365804][T30837] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=4375,uid=0 [ 2380.381383][T30837] Out of memory: Killed process 4375 (syz-executor.0) total-vm:74708kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 18:53:14 executing program 5: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x78f3, 0x12040) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000100)={0x8, 0x4, &(0x7f0000000040)=[0x4, 0xda, 0x3, 0x5], &(0x7f0000000080)=[0x751, 0x3, 0x0], &(0x7f00000000c0)=[0x5, 0x8, 0x305e]}) unshare(0x40000000) 18:53:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 18:53:14 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x34000}, 0x0) [ 2380.400530][ T1144] oom_reaper: reaped process 4375 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2380.455184][T30886] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2380.479589][T30886] bridge394: port 1(bond0) entered blocking state [ 2380.486805][T30886] bridge394: port 1(bond0) entered disabled state [ 2380.495391][T30886] device bond0 entered promiscuous mode [ 2380.501803][T30886] device bond_slave_0 entered promiscuous mode [ 2380.512294][T30886] device bond_slave_1 entered promiscuous mode [ 2380.533165][T30886] device bond0 left promiscuous mode [ 2380.541346][T30886] device bond_slave_0 left promiscuous mode [ 2380.548694][T30886] device bond_slave_1 left promiscuous mode [ 2380.554883][T30886] bridge394: port 1(bond0) entered disabled state [ 2380.958441][T30897] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2546.085068][ T1143] INFO: task syz-executor.0:30839 blocked for more than 147 seconds. [ 2546.093756][ T1143] Not tainted 5.7.0-rc6-syzkaller #0 [ 2546.099547][ T1143] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2546.110200][ T1143] syz-executor.0 D29992 30839 7036 0x20020004 [ 2546.121565][ T1143] Call Trace: [ 2546.126777][ T1143] ? __schedule+0x937/0x1ff0 [ 2546.131394][ T1143] ? __sched_text_start+0x8/0x8 [ 2546.138323][ T1143] ? do_raw_spin_lock+0x129/0x2e0 [ 2546.143833][ T1143] ? rwlock_bug.part.0+0x90/0x90 [ 2546.148792][ T1143] ? schedule+0xd0/0x2a0 [ 2546.153962][ T1143] ? rwsem_down_write_slowpath+0x706/0xf90 [ 2546.159900][ T1143] ? rwsem_mark_wake+0x8d0/0x8d0 [ 2546.166034][ T1143] ? lock_acquire+0x1f2/0x8f0 [ 2546.170715][ T1143] ? register_netdevice_notifier+0x1e/0x270 [ 2546.178997][ T1143] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 2546.185337][ T1143] ? sk_alloc+0x57d/0x1100 [ 2546.189866][ T1143] ? down_write+0x137/0x150 [ 2546.195326][ T1143] ? down_write+0x137/0x150 [ 2546.199839][ T1143] ? __down_timeout+0x2d0/0x2d0 [ 2546.205308][ T1143] ? lockdep_init_map_waits+0x26a/0x890 [ 2546.210873][ T1143] ? register_netdevice_notifier+0x1e/0x270 [ 2546.218391][ T1143] ? bcm_init+0x1a3/0x210 [ 2546.222740][ T1143] ? canbcm_pernet_init+0x90/0x90 [ 2546.228738][ T1143] ? can_create+0x27c/0x500 [ 2546.233725][ T1143] ? __sock_create+0x3cb/0x730 [ 2546.238489][ T1143] ? __sys_socket+0xef/0x200 [ 2546.244044][ T1143] ? move_addr_to_kernel+0x70/0x70 [ 2546.249249][ T1143] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2546.255936][ T1143] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2546.261832][ T1143] ? __ia32_sys_socket+0x6f/0xb0 [ 2546.267802][ T1143] ? do_fast_syscall_32+0x270/0xe90 [ 2546.273768][ T1143] ? entry_SYSENTER_compat+0x70/0x7f [ 2546.279268][ T1143] INFO: task syz-executor.0:30843 blocked for more than 148 seconds. [ 2546.289311][ T1143] Not tainted 5.7.0-rc6-syzkaller #0 [ 2546.295702][ T1143] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2546.304825][ T1143] syz-executor.0 D26168 30843 7036 0x20020004 [ 2546.311173][ T1143] Call Trace: [ 2546.315411][ T1143] ? __schedule+0x937/0x1ff0 [ 2546.320068][ T1143] ? __sched_text_start+0x8/0x8 [ 2546.326341][ T1143] ? do_raw_spin_lock+0x129/0x2e0 [ 2546.331373][ T1143] ? rwsem_optimistic_spin+0x550/0x550 [ 2546.337511][ T1143] ? rwlock_bug.part.0+0x90/0x90 [ 2546.342455][ T1143] ? schedule+0xd0/0x2a0 [ 2546.347320][ T1143] ? rwsem_down_write_slowpath+0x706/0xf90 [ 2546.353731][ T1143] ? rwsem_mark_wake+0x8d0/0x8d0 [ 2546.358706][ T1143] ? lock_acquire+0x1f2/0x8f0 [ 2546.364471][ T1143] ? register_netdevice_notifier+0x1e/0x270 [ 2546.370628][ T1143] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 2546.377568][ T1143] ? sk_alloc+0x57d/0x1100 [ 2546.382153][ T1143] ? down_write+0x137/0x150 [ 2546.387411][ T1143] ? down_write+0x137/0x150 [ 2546.392355][ T1143] ? __down_timeout+0x2d0/0x2d0 [ 2546.398890][ T1143] ? lockdep_init_map_waits+0x26a/0x890 [ 2546.404952][ T1143] ? register_netdevice_notifier+0x1e/0x270 [ 2546.410856][ T1143] ? bcm_init+0x1a3/0x210 [ 2546.415980][ T1143] ? canbcm_pernet_init+0x90/0x90 [ 2546.421579][ T1143] ? can_create+0x27c/0x500 [ 2546.426996][ T1143] ? __sock_create+0x3cb/0x730 [ 2546.431785][ T1143] ? __sys_socket+0xef/0x200 [ 2546.437174][ T1143] ? move_addr_to_kernel+0x70/0x70 [ 2546.447648][ T1143] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 2546.454438][ T1143] ? __x64_sys_clock_gettime32+0x240/0x240 [ 2546.460368][ T1143] ? __ia32_sys_socket+0x6f/0xb0 [ 2546.465926][ T1143] ? do_fast_syscall_32+0x270/0xe90 [ 2546.471124][ T1143] ? entry_SYSENTER_compat+0x70/0x7f [ 2546.478045][ T1143] INFO: lockdep is turned off. [ 2546.483676][ T1143] NMI backtrace for cpu 0 [ 2546.488012][ T1143] CPU: 0 PID: 1143 Comm: khungtaskd Not tainted 5.7.0-rc6-syzkaller #0 [ 2546.496222][ T1143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2546.506425][ T1143] Call Trace: [ 2546.509715][ T1143] dump_stack+0x188/0x20d [ 2546.514037][ T1143] nmi_cpu_backtrace.cold+0x70/0xb1 [ 2546.519281][ T1143] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 2546.524907][ T1143] nmi_trigger_cpumask_backtrace+0x231/0x27e [ 2546.532299][ T1143] watchdog+0xa8c/0x1010 [ 2546.536546][ T1143] ? reset_hung_task_detector+0x30/0x30 [ 2546.542088][ T1143] kthread+0x388/0x470 [ 2546.546139][ T1143] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 2546.552186][ T1143] ret_from_fork+0x24/0x30 [ 2546.556778][ T1143] Sending NMI from CPU 0 to CPUs 1: [ 2546.562203][ C1] NMI backtrace for cpu 1 [ 2546.562208][ C1] CPU: 1 PID: 7019 Comm: syz-fuzzer Not tainted 5.7.0-rc6-syzkaller #0 [ 2546.562213][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2546.562216][ C1] RIP: 0033:0x40ad65 [ 2546.562226][ C1] Code: 30 c6 82 15 01 00 00 01 48 8b 54 24 38 48 89 14 24 c7 44 24 08 00 00 00 00 48 89 4c 24 10 e8 32 1a 02 00 48 8b 05 4b 7d a9 00 <48> 8b 00 48 85 c0 75 4a 48 8b 44 24 20 48 8b 48 30 c6 81 15 01 00 [ 2546.562229][ C1] RSP: 002b:000000c00003aef8 EFLAGS: 00000216 [ 2546.562236][ C1] RAX: 000000000168fb78 RBX: 000000003b974464 RCX: 0000000000460c23 [ 2546.562240][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001696560 [ 2546.562244][ C1] RBP: 000000c00003aef0 R08: 0000000000000000 R09: 0000000000000000 [ 2546.562248][ C1] R10: 000000c00003aed8 R11: 0000000000000202 R12: 000000000000011e [ 2546.562253][ C1] R13: 000000c000464000 R14: 000000000000000f R15: 000000000000d2a1 [ 2546.562256][ C1] FS: 000000c00007d910 GS: 0000000000000000 [ 2546.565324][ T1143] Kernel panic - not syncing: hung_task: blocked tasks [ 2546.668237][ T1143] CPU: 0 PID: 1143 Comm: khungtaskd Not tainted 5.7.0-rc6-syzkaller #0 [ 2546.676625][ T1143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2546.686740][ T1143] Call Trace: [ 2546.690022][ T1143] dump_stack+0x188/0x20d [ 2546.694351][ T1143] panic+0x2e3/0x75c [ 2546.698307][ T1143] ? add_taint.cold+0x16/0x16 [ 2546.702979][ T1143] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 2546.708768][ T1143] ? preempt_schedule_thunk+0x16/0x18 [ 2546.714287][ T1143] ? watchdog+0xa8c/0x1010 [ 2546.718687][ T1143] ? nmi_trigger_cpumask_backtrace+0x214/0x27e [ 2546.724814][ T1143] watchdog+0xa9d/0x1010 [ 2546.729039][ T1143] ? reset_hung_task_detector+0x30/0x30 [ 2546.734741][ T1143] kthread+0x388/0x470 [ 2546.738870][ T1143] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 2546.744562][ T1143] ret_from_fork+0x24/0x30 [ 2546.750809][ T1143] Kernel Offset: disabled [ 2546.755142][ T1143] Rebooting in 86400 seconds..